@stigmer/sdk 3.35.0 → 3.36.0

package/node.test.js

@@ -1,35 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { normalizeEndpoint } from "./node";
-describe("normalizeEndpoint", () => {
-    it.each([
-        // Loopback hosts stay plaintext (the local daemon default).
-        ["localhost:7234", "http://localhost:7234"],
-        ["127.0.0.1:7234", "http://127.0.0.1:7234"],
-        ["[::1]:7234", "http://[::1]:7234"],
-        // Explicit :443 is TLS; any other explicit port is plaintext.
-        ["api.stigmer.ai:443", "https://api.stigmer.ai:443"],
-        ["internal:8080", "http://internal:8080"],
-        // No port on a public host → assume TLS on :443.
-        ["api.stigmer.ai", "https://api.stigmer.ai:443"],
-        // Loopback without a port stays plaintext and is left as-is.
-        ["localhost", "http://localhost"],
-    ])("normalizes %s → %s", (input, expected) => {
-        expect(normalizeEndpoint(input)).toBe(expected);
-    });
-    it("strips a URL scheme and derives TLS from the port, not the scheme", () => {
-        // Mirrors the Go rule's quirk: the port is authoritative for TLS.
-        expect(normalizeEndpoint("https://api.stigmer.ai")).toBe("https://api.stigmer.ai:443");
-        expect(normalizeEndpoint("http://internal:8080")).toBe("http://internal:8080");
-        expect(normalizeEndpoint("https://internal:8080")).toBe("http://internal:8080");
-    });
-    it("trims whitespace and trailing slashes", () => {
-        expect(normalizeEndpoint("  api.stigmer.ai:443/  ")).toBe("https://api.stigmer.ai:443");
-        expect(normalizeEndpoint("https://api.stigmer.ai/")).toBe("https://api.stigmer.ai:443");
-    });
-    it("throws on empty input", () => {
-        expect(() => normalizeEndpoint("")).toThrow(/must not be empty/);
-        expect(() => normalizeEndpoint("   ")).toThrow(/must not be empty/);
-        expect(() => normalizeEndpoint("https://")).toThrow(/no host/);
-    });
-});
-//# sourceMappingURL=node.test.js.map

package/node.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.test.js","sourceRoot":"","sources":["../src/node.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAE3C,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,IAAI,CAAC;QACN,4DAA4D;QAC5D,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;QAC3C,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;QAC3C,CAAC,YAAY,EAAE,mBAAmB,CAAC;QACnC,8DAA8D;QAC9D,CAAC,oBAAoB,EAAE,4BAA4B,CAAC;QACpD,CAAC,eAAe,EAAE,sBAAsB,CAAC;QACzC,iDAAiD;QACjD,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;QAChD,6DAA6D;QAC7D,CAAC,WAAW,EAAE,kBAAkB,CAAC;KAClC,CAAC,CAAC,oBAAoB,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC3C,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,kEAAkE;QAClE,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvF,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/E,MAAM,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACxF,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/src/__tests__/billing.test.ts

@@ -1,146 +0,0 @@
-// Wire-shape tests for BillingClient: a router transport fakes the billing
-// services in-process, captures the outgoing request messages, and the tests
-// assert the SDK params mapped onto the right proto fields. This mirrors
-// sdk/java's BillingClientTest and sdk/go's billing_test.go — the reference
-// pattern for testing the handwritten (non-resource) clients.
-import { describe, expect, it } from "vitest";
-import { createRouterTransport, type Transport } from "@connectrpc/connect";
-import { create } from "@bufbuild/protobuf";
-import { timestampDate } from "@bufbuild/protobuf/wkt";
-import { BillingCommandController } from "@stigmer/protos/ai/stigmer/billing/v1/command_pb";
-import { BillingQueryController } from "@stigmer/protos/ai/stigmer/billing/v1/query_pb";
-import {
-  CreditLedgerResponseSchema,
-  type AdjustCreditsInput,
-  type GrantCreditsInput,
-  type GetCreditLedgerInput,
-} from "@stigmer/protos/ai/stigmer/billing/v1/io_pb";
-import { CreditLedgerEntrySchema } from "@stigmer/protos/ai/stigmer/billing/v1/credit_pb";
-import { LedgerEntryType, LedgerView } from "@stigmer/protos/ai/stigmer/billing/v1/enum_pb";
-import { BillingClient } from "../billing.js";
-
-interface Captured {
-  adjustCredits?: AdjustCreditsInput;
-  grantCredits?: GrantCreditsInput;
-  getCreditLedger?: GetCreditLedgerInput;
-}
-
-function fakeTransport(captured: Captured): Transport {
-  return createRouterTransport(({ service }) => {
-    service(BillingCommandController, {
-      adjustCredits: (req) => {
-        captured.adjustCredits = req;
-        return create(CreditLedgerEntrySchema, { amountMicros: req.amountMicros });
-      },
-      grantCredits: (req) => {
-        captured.grantCredits = req;
-        return create(CreditLedgerEntrySchema, { amountMicros: req.amountMicros });
-      },
-    });
-    service(BillingQueryController, {
-      getCreditLedger: (req) => {
-        captured.getCreditLedger = req;
-        return create(CreditLedgerResponseSchema, {});
-      },
-    });
-  });
-}
-
-describe("BillingClient.adjustCredits", () => {
-  it("maps params onto AdjustCreditsInput and returns the ledger entry", async () => {
-    const captured: Captured = {};
-    const client = new BillingClient(fakeTransport(captured));
-
-    const entry = await client.adjustCredits({
-      orgId: "acme",
-      amountMicros: 25_000_000n,
-      reason: "initial tenant funding",
-      idempotencyKey: "fund-acme-001",
-    });
-
-    expect(entry.amountMicros).toBe(25_000_000n);
-    expect(captured.adjustCredits?.orgId).toBe("acme");
-    expect(captured.adjustCredits?.amountMicros).toBe(25_000_000n);
-    expect(captured.adjustCredits?.reason).toBe("initial tenant funding");
-    expect(captured.adjustCredits?.idempotencyKey).toBe("fund-acme-001");
-  });
-});
-
-describe("BillingClient.grantCredits", () => {
-  it("maps params including the expiry onto GrantCreditsInput", async () => {
-    const captured: Captured = {};
-    const client = new BillingClient(fakeTransport(captured));
-
-    const expiresAt = new Date("2026-08-31T23:59:59Z");
-    const entry = await client.grantCredits({
-      orgId: "acme",
-      amountMicros: 5_000_000n,
-      expiresAt,
-      reason: "monthly free allowance 2026-08",
-      idempotencyKey: "allowance-acme-2026-08",
-    });
-
-    expect(entry.amountMicros).toBe(5_000_000n);
-    const req = captured.grantCredits;
-    expect(req?.orgId).toBe("acme");
-    expect(req?.amountMicros).toBe(5_000_000n);
-    expect(req?.expiresAt && timestampDate(req.expiresAt)).toEqual(expiresAt);
-    expect(req?.reason).toBe("monthly free allowance 2026-08");
-    expect(req?.idempotencyKey).toBe("allowance-acme-2026-08");
-  });
-
-  it("omits the expiry for a never-expiring grant", async () => {
-    const captured: Captured = {};
-    const client = new BillingClient(fakeTransport(captured));
-
-    await client.grantCredits({
-      orgId: "acme",
-      amountMicros: 1_000_000n,
-      reason: "welcome credit",
-      idempotencyKey: "welcome-acme",
-    });
-
-    expect(captured.grantCredits?.expiresAt).toBeUndefined();
-  });
-});
-
-describe("BillingClient.getCreditLedger", () => {
-  it("maps all filters including the time range", async () => {
-    const captured: Captured = {};
-    const client = new BillingClient(fakeTransport(captured));
-
-    const startTime = new Date("2026-08-01T00:00:00Z");
-    const endTime = new Date("2026-08-13T00:00:00Z");
-    await client.getCreditLedger({
-      orgId: "acme",
-      page: { num: 2, size: 50 },
-      typeFilter: [LedgerEntryType.adjustment_credit],
-      startTime,
-      endTime,
-      view: LedgerView.statement,
-    });
-
-    const req = captured.getCreditLedger;
-    expect(req?.orgId).toBe("acme");
-    expect(req?.page?.num).toBe(2);
-    expect(req?.page?.size).toBe(50);
-    expect(req?.typeFilter).toEqual([LedgerEntryType.adjustment_credit]);
-    expect(req?.startTime && timestampDate(req.startTime)).toEqual(startTime);
-    expect(req?.endTime && timestampDate(req.endTime)).toEqual(endTime);
-    expect(req?.view).toBe(LedgerView.statement);
-  });
-
-  it("omits unset optional filters", async () => {
-    const captured: Captured = {};
-    const client = new BillingClient(fakeTransport(captured));
-
-    await client.getCreditLedger({ orgId: "acme" });
-
-    const req = captured.getCreditLedger;
-    expect(req?.page).toBeUndefined();
-    expect(req?.startTime).toBeUndefined();
-    expect(req?.endTime).toBeUndefined();
-    expect(req?.typeFilter).toEqual([]);
-    expect(req?.view).toBe(LedgerView.unspecified);
-  });
-});

package/src/__tests__/config.test.ts

@@ -1,52 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { validateConfig, type StigmerConfig } from "../config";
-
-describe("validateConfig", () => {
-  const validApiKeyConfig: StigmerConfig = {
-    baseUrl: "https://api.stigmer.ai",
-    apiKey: "sk_live_abc123",
-  };
-
-  const validTokenProviderConfig: StigmerConfig = {
-    baseUrl: "https://api.stigmer.ai",
-    getAccessToken: () => "token",
-  };
-
-  it("accepts a valid config with apiKey", () => {
-    expect(() => validateConfig(validApiKeyConfig)).not.toThrow();
-  });
-
-  it("accepts a valid config with getAccessToken", () => {
-    expect(() => validateConfig(validTokenProviderConfig)).not.toThrow();
-  });
-
-  it("rejects missing baseUrl", () => {
-    expect(() =>
-      validateConfig({ baseUrl: "", apiKey: "key" }),
-    ).toThrow("stigmer: baseUrl is required");
-  });
-
-  it("rejects missing both apiKey and getAccessToken", () => {
-    expect(() =>
-      validateConfig({ baseUrl: "https://api.stigmer.ai" }),
-    ).toThrow("stigmer: either apiKey or getAccessToken must be provided");
-  });
-
-  it("rejects empty apiKey without getAccessToken", () => {
-    expect(() =>
-      validateConfig({ baseUrl: "https://api.stigmer.ai", apiKey: "" }),
-    ).toThrow("stigmer: either apiKey or getAccessToken must be provided");
-  });
-
-  it("rejects providing both apiKey and getAccessToken", () => {
-    expect(() =>
-      validateConfig({
-        baseUrl: "https://api.stigmer.ai",
-        apiKey: "sk_live_abc123",
-        getAccessToken: () => "token",
-      }),
-    ).toThrow(
-      "stigmer: apiKey and getAccessToken are mutually exclusive — provide one, not both",
-    );
-  });
-});

package/src/__tests__/ensure-identity-account.test.ts

@@ -1,146 +0,0 @@
-/**
- * Pins `ensureMyIdentityAccount` (`ensure-identity-account.ts`; 20260911.11
- * A3): the ONE first-sign-in flow every surface runs — the console's
- * `useIdentityAccountGate` delegates to it, the CLI's `auth whoami` and
- * `auth login` call it — so a platform builder embedding Stigmer gets the
- * same flow as a first-class import.
- *
- *   1. whoAmI answers → the account, `created: false`; nothing else is
- *      called;
- *   2. whoAmI is NOT_FOUND → `onProvisioning` fires once (the hook's
- *      "provisioning" state), provisionMyAccount runs, the created account
- *      comes back with `created: true`;
- *   3. any other whoAmI error propagates untouched (UNAUTHENTICATED,
- *      UNAVAILABLE, a network fault) — the caller's error UX owns it;
- *   4. a provisionMyAccount failure propagates untouched (UNAVAILABLE when
- *      the issuer's userinfo is down is the documented arm).
- *
- * The doubles reject with `StigmerError`, the vocabulary the real
- * `IdentityAccountClient` speaks (every RPC failure passes through
- * `wrapError`), so `isNotFound` — the SDK's one classifier — is what the
- * helper is proven against (refinement 11, slice 4).
- */
-import { Code } from "@connectrpc/connect";
-import { create } from "@bufbuild/protobuf";
-import {
-  IdentityAccountSchema,
-  type IdentityAccount,
-} from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
-import { describe, expect, it } from "vitest";
-
-import {
-  ensureMyIdentityAccount,
-  type IdentityAccountLane,
-} from "../ensure-identity-account";
-import { StigmerError } from "../gen/errors";
-
-interface Calls {
-  whoAmI: number;
-  provisionMyAccount: number;
-}
-
-function clientWith(behaviour: {
-  whoAmI: () => Promise<IdentityAccount>;
-  provisionMyAccount?: () => Promise<IdentityAccount>;
-}): { client: { identityAccount: IdentityAccountLane }; calls: Calls } {
-  const calls: Calls = { whoAmI: 0, provisionMyAccount: 0 };
-  const client = {
-    identityAccount: {
-      whoAmI: () => {
-        calls.whoAmI += 1;
-        return behaviour.whoAmI();
-      },
-      provisionMyAccount: () => {
-        calls.provisionMyAccount += 1;
-        return (
-          behaviour.provisionMyAccount ??
-          (() => Promise.reject(new Error("must not be called")))
-        )();
-      },
-    },
-  };
-  return { client, calls };
-}
-
-const EXISTING = create(IdentityAccountSchema, {
-  metadata: { id: "ida_existing" },
-  spec: { idpId: "auth0|existing" },
-});
-const CREATED = create(IdentityAccountSchema, {
-  metadata: { id: "ida_created" },
-  spec: { idpId: "auth0|created" },
-});
-
-const NOT_FOUND = () =>
-  new StigmerError(
-    "not-found",
-    "Identity account not found for the authenticated user",
-    Code.NotFound,
-  );
-
-describe("ensureMyIdentityAccount", () => {
-  it("answers the existing account without provisioning", async () => {
-    const { client, calls } = clientWith({
-      whoAmI: () => Promise.resolve(EXISTING),
-    });
-    const result = await ensureMyIdentityAccount(client);
-    expect(result).toEqual({ account: EXISTING, created: false });
-    expect(calls).toEqual({ whoAmI: 1, provisionMyAccount: 0 });
-  });
-
-  it("provisions on NOT_FOUND, telling the caller once that it is provisioning", async () => {
-    const { client, calls } = clientWith({
-      whoAmI: () => Promise.reject(NOT_FOUND()),
-      provisionMyAccount: () => Promise.resolve(CREATED),
-    });
-    let provisioning = 0;
-    const result = await ensureMyIdentityAccount(client, {
-      onProvisioning: () => (provisioning += 1),
-    });
-    expect(result).toEqual({ account: CREATED, created: true });
-    expect(provisioning).toBe(1);
-    expect(calls).toEqual({ whoAmI: 1, provisionMyAccount: 1 });
-  });
-
-  it("does not fire onProvisioning when the account already exists", async () => {
-    const { client } = clientWith({ whoAmI: () => Promise.resolve(EXISTING) });
-    let provisioning = 0;
-    await ensureMyIdentityAccount(client, {
-      onProvisioning: () => (provisioning += 1),
-    });
-    expect(provisioning).toBe(0);
-  });
-
-  it("propagates any other whoAmI error untouched — only NOT_FOUND means 'provision me'", async () => {
-    const unauthenticated = new StigmerError(
-      "unauthenticated",
-      "authentication token missing",
-      Code.Unauthenticated,
-    );
-    const { client, calls } = clientWith({
-      whoAmI: () => Promise.reject(unauthenticated),
-    });
-    await expect(ensureMyIdentityAccount(client)).rejects.toBe(unauthenticated);
-    expect(calls.provisionMyAccount).toBe(0);
-
-    // A value that is not a StigmerError at all (a lane double that does
-    // not wrap, a transport fault) is also "any other error": propagated
-    // as the same object, never classified as "provision me".
-    const network = new TypeError("Load failed");
-    const offline = clientWith({ whoAmI: () => Promise.reject(network) });
-    await expect(ensureMyIdentityAccount(offline.client)).rejects.toBe(network);
-  });
-
-  it("propagates a provisioning failure untouched (the issuer's userinfo down is UNAVAILABLE)", async () => {
-    const unavailable = new StigmerError(
-      "unavailable",
-      "Failed to fetch user profile from identity provider: userinfo answered 503",
-      Code.Unavailable,
-    );
-    const { client } = clientWith({
-      whoAmI: () => Promise.reject(NOT_FOUND()),
-      provisionMyAccount: () => Promise.reject(unavailable),
-    });
-    await expect(ensureMyIdentityAccount(client)).rejects.toBe(unavailable);
-  });
-});