@superatomai/sdk-node 0.0.81-dsp → 0.0.83-dsp

package/dist/index.js

@@ -52,6 +52,7 @@ __export(index_exports, {
   UIBlock: () => UIBlock,
   UILogCollector: () => UILogCollector,
   UserManager: () => UserManager,
+  accessFromConfig: () => accessFromConfig,
   analyticsClient: () => analyticsClient,
   answerCatalogForBinding: () => answerCatalogForBinding,
   answerComponents: () => answerComponents,
@@ -330,7 +331,7 @@ var UserSchema = import_zod3.z.object({
   password: import_zod3.z.string().min(1, "Password is required"),
   fullname: import_zod3.z.string().optional(),
   role: import_zod3.z.string().optional(),
-  userInfo: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+  userInfo: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
   wsIds: import_zod3.z.array(import_zod3.z.string()).optional()
   // Only in memory, not persisted to file
 });
@@ -358,8 +359,8 @@ var IncomingMessageSchema = import_zod3.z.object({
 var DataRequestPayloadSchema = import_zod3.z.object({
   collection: import_zod3.z.string(),
   op: import_zod3.z.string(),
-  params: import_zod3.z.record(import_zod3.z.unknown()).optional(),
-  SA_RUNTIME: import_zod3.z.record(import_zod3.z.unknown()).optional()
+  params: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
+  SA_RUNTIME: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional()
 });
 var DataRequestMessageSchema = import_zod3.z.object({
   id: import_zod3.z.string(),
@@ -456,10 +457,12 @@ var UserPromptSuggestionsMessageSchema = import_zod3.z.object({
   payload: UserPromptSuggestionsPayloadSchema
 });
 var ComponentPropsSchema = import_zod3.z.object({
+  // Same runtime schema as under zod 3; the cast keeps zod 3's inferred `{}`, since
+  // zod 4 infers z.object({}) as Record<string, never> and `query.sql` stops type-checking.
   query: import_zod3.z.string().or(import_zod3.z.object({})).nullable().optional(),
   title: import_zod3.z.string().optional(),
   description: import_zod3.z.string().optional(),
-  config: import_zod3.z.record(import_zod3.z.unknown()).optional()
+  config: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional()
 }).passthrough();
 var ComponentSchema = import_zod3.z.object({
   id: import_zod3.z.string(),
@@ -487,8 +490,8 @@ var WorkflowDescriptorSchema = import_zod3.z.object({
   name: import_zod3.z.string(),
   description: import_zod3.z.string(),
   whenToUse: import_zod3.z.string(),
-  propsSchema: import_zod3.z.record(import_zod3.z.string()),
-  defaultProps: import_zod3.z.record(import_zod3.z.unknown()).optional()
+  propsSchema: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.string()),
+  defaultProps: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional()
 });
 var WorkflowsSchema = import_zod3.z.array(WorkflowDescriptorSchema);
 var WorkflowListResponsePayloadSchema = import_zod3.z.object({
@@ -521,8 +524,9 @@ var ToolSchema = import_zod3.z.object({
   toolType: import_zod3.z.enum(["source", "direct"]).optional(),
   /** Full untruncated schema for source agent (all columns visible) */
   fullSchema: import_zod3.z.string().optional(),
-  params: import_zod3.z.record(import_zod3.z.string()),
-  fn: import_zod3.z.function().args(import_zod3.z.any()).returns(import_zod3.z.any()),
+  params: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.string()),
+  // zod 4: z.function() is no longer a schema, so a tool's handler is checked as a plain callable.
+  fn: import_zod3.z.custom((v) => typeof v === "function", { message: "fn must be a function" }),
   outputSchema: OutputSchema.optional(),
   // Optional: describes the data structure returned by this tool
   /** Cache policy. `false` = never cache (live data, write ops). Mirrors HTTP `Cache-Control: no-store`. */
@@ -544,7 +548,7 @@ var UsersRequestPayloadSchema = import_zod3.z.object({
     password: import_zod3.z.string().optional(),
     fullname: import_zod3.z.string().optional(),
     role: import_zod3.z.string().optional(),
-    userInfo: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+    userInfo: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
     // Query operation fields
     filters: UserQueryFiltersSchema.optional(),
     limit: import_zod3.z.number().optional(),
@@ -563,7 +567,7 @@ var UILogsPayloadSchema = import_zod3.z.object({
     level: import_zod3.z.enum(["info", "error", "warn", "debug"]),
     message: import_zod3.z.string(),
     type: import_zod3.z.enum(["explanation", "query", "general"]).optional(),
-    data: import_zod3.z.record(import_zod3.z.unknown()).optional()
+    data: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional()
   }))
 });
 var UILogsMessageSchema = import_zod3.z.object({
@@ -681,7 +685,7 @@ var UIBlockSchema = import_zod3.z.object({
   // DB field name / Legacy field
   generatedComponentMetadata: ComponentSchema.optional(),
   // Actual field used by UIBlock class
-  componentData: import_zod3.z.record(import_zod3.z.any()).optional(),
+  componentData: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.any()).optional(),
   createdAt: import_zod3.z.string().optional(),
   /**
    * Which script recipe produced this answer. Set whenever the turn was answered
@@ -692,7 +696,7 @@ var UIBlockSchema = import_zod3.z.object({
    */
   scriptBinding: import_zod3.z.object({
     recipeId: import_zod3.z.string(),
-    params: import_zod3.z.record(import_zod3.z.any()).optional(),
+    params: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.any()).optional(),
     name: import_zod3.z.string().optional(),
     columns: import_zod3.z.array(import_zod3.z.string()).optional()
   }).optional(),
@@ -773,7 +777,7 @@ var ArtifactsRequestPayloadSchema = import_zod3.z.object({
     id: import_zod3.z.number().optional(),
     name: import_zod3.z.string().optional(),
     createdBy: import_zod3.z.string().optional(),
-    dsl: import_zod3.z.record(import_zod3.z.any()).optional(),
+    dsl: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.any()).optional(),
     status: import_zod3.z.string().optional(),
     deleted: import_zod3.z.boolean().optional(),
     limit: import_zod3.z.number().optional(),
@@ -853,7 +857,7 @@ var MenusRequestPayloadSchema = import_zod3.z.object({
     userMessage: import_zod3.z.string().optional(),
     parentId: import_zod3.z.number().nullable().optional(),
     sortOrder: import_zod3.z.number().optional(),
-    props: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+    props: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
     isActive: import_zod3.z.boolean().optional(),
     // Query operation fields
     filters: MenusQueryFiltersSchema.optional(),
@@ -864,7 +868,7 @@ var MenusRequestPayloadSchema = import_zod3.z.object({
       id: import_zod3.z.number(),
       sortOrder: import_zod3.z.number()
     })).optional(),
-    menuJson: import_zod3.z.record(import_zod3.z.unknown()).optional(),
+    menuJson: import_zod3.z.record(import_zod3.z.string(), import_zod3.z.unknown()).optional(),
     version: import_zod3.z.number().optional()
   }).optional()
 });
@@ -1041,7 +1045,7 @@ var DashComponentSchema = import_zod3.z.object({
   name: import_zod3.z.string(),
   kind: import_zod3.z.string(),
   purpose: import_zod3.z.string(),
-  props: import_zod3.z.record(DashComponentPropSchema).optional(),
+  props: import_zod3.z.record(import_zod3.z.string(), DashComponentPropSchema).optional(),
   useWhen: import_zod3.z.string().optional(),
   notes: import_zod3.z.string().optional()
 });
@@ -1948,9 +1952,19 @@ function runWithContext(ctx, fn) {
   return getStorage().run(ctx, fn);
 }
 function runAsUser(user, fn) {
-  const { userId, orgId, role, projectId, requestId, policies, graphVersion } = user;
+  const { userId, orgId, role, projectId, requestId, policies, allowedSources, graphVersion } = user;
   return runWithContext(
-    { principal: { kind: "user", userId, orgId, role }, projectId, requestId, policies, ...graphVersion !== void 0 ? { graphVersion } : {} },
+    // `allowedSources` is spread in only when given, so an absent restriction
+    // stays absent rather than becoming an explicit `undefined` that a later
+    // `'allowedSources' in ctx` check would read as present.
+    {
+      principal: { kind: "user", userId, orgId, role },
+      projectId,
+      requestId,
+      policies,
+      ...allowedSources !== void 0 ? { allowedSources } : {},
+      ...graphVersion !== void 0 ? { graphVersion } : {}
+    },
     fn
   );
 }
@@ -2632,8 +2646,40 @@ function graphVersionOf(v) {
   if (v === "draft") return "draft";
   return Number.isInteger(v) && v > 0 ? v : void 0;
 }
+function scopedForm(config2) {
+  if (!config2 || typeof config2 !== "object" || Array.isArray(config2)) return void 0;
+  const c = config2;
+  return "allowedSources" in c || "policies" in c ? c : void 0;
+}
+function allowedSourcesFrom(value) {
+  if (value === void 0 || value === null) return null;
+  if (!Array.isArray(value)) {
+    if (!warnedBadSources) {
+      warnedBadSources = true;
+      logger.warn(
+        `[RequestIdentity] "allowedSources" is ${typeof value}, not a list of source ids \u2014 treating it as NO sources rather than all of them. Fix the config: "allowedSources": ["mssql-1a2b"].`
+      );
+    }
+    return [];
+  }
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || !item.trim()) continue;
+    const id = item.trim();
+    if (!out.includes(id)) out.push(id);
+  }
+  return out;
+}
+function accessFromConfig(config2) {
+  const scoped = scopedForm(config2);
+  return {
+    policies: policiesFromConfig(config2),
+    allowedSources: scoped ? allowedSourcesFrom(scoped.allowedSources) : null
+  };
+}
 function policiesFromConfig(config2) {
-  const entries = Array.isArray(config2) ? config2 : [config2];
+  const raw = scopedForm(config2)?.policies ?? config2;
+  const entries = Array.isArray(raw) ? raw : [raw];
   const out = [];
   for (const entry of entries) {
     if (!entry || typeof entry !== "object") continue;
@@ -2676,12 +2722,13 @@ function policiesFromConfig(config2) {
 var warnedUntrusted = false;
 var warnedAnonymous = false;
 var warnedUnlabelled = false;
+var warnedBadSources = false;
 var announcedVerified = false;
 var reportedIdMismatches = /* @__PURE__ */ new Set();
 function runWithMessageIdentity(message, fn) {
   const verified = message?.authContext;
   const requestId = message?.id;
-  const policies = verified ? policiesFromConfig(verified.config) : policiesFromConfig(message?.payload?.config);
+  const { policies, allowedSources } = verified ? accessFromConfig(verified.config) : accessFromConfig(message?.payload?.config);
   if (verified?.userId) {
     const claimedId = message?.payload?.userId;
     if (!announcedVerified) {
@@ -2706,6 +2753,9 @@ function runWithMessageIdentity(message, fn) {
         role: verified.role,
         requestId,
         policies,
+        // `?? undefined` so "no restriction" leaves the key off the context
+        // entirely; `[]` is passed through as the deny-everything it means.
+        allowedSources: allowedSources ?? void 0,
         // Only from the verified context: an unverified message has no say in which graph answers.
         graphVersion: graphVersionOf(verified.graphVersion)
       },
@@ -2720,7 +2770,7 @@ function runWithMessageIdentity(message, fn) {
         "[RequestIdentity] Using the client-supplied payload.userId as the principal \u2014 the relay is not stamping a verified authContext yet, so this identity is NOT trustworthy. Fine for plumbing; do not enable policy enforcement until the relay change lands."
       );
     }
-    return runAsUser({ userId: claimed, requestId, policies }, fn);
+    return runAsUser({ userId: claimed, requestId, policies, allowedSources: allowedSources ?? void 0 }, fn);
   }
   if (!warnedAnonymous) {
     warnedAnonymous = true;
@@ -18186,7 +18236,8 @@ function storeScriptDatasetQuery(q, ctx) {
   return queryCache.storeQuery(q.sql, { data, count });
 }
 function buildUserAccessContext(userConfig) {
-  const entries = Array.isArray(userConfig) ? userConfig : [userConfig];
+  const config2 = userConfig && !Array.isArray(userConfig) && typeof userConfig === "object" && ("policies" in userConfig || "allowedSources" in userConfig) ? userConfig.policies : userConfig;
+  const entries = Array.isArray(config2) ? config2 : [config2];
   const restrictions = [];
   const prompts = [];
   let anyRestriction = false;
@@ -19692,7 +19743,7 @@ var get_user_request = async (data, components, sendMessage, anthropicApiKey, gr
   const parseResult = UserPromptRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
     const zodError = parseResult.error;
-    zodError.errors.forEach((err) => {
+    zodError.issues.forEach((err) => {
       errors.push(`${err.path.join(".")}: ${err.message}`);
     });
     return { success: false, errors };
@@ -24205,7 +24256,7 @@ var processDashCompRequest = async (data, components, _sendMessage, anthropicApi
   const parseResult = DashCompRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
     const zodError = parseResult.error;
-    zodError.errors.forEach((err) => {
+    zodError.issues.forEach((err) => {
       errors.push(`${err.path.join(".")}: ${err.message}`);
     });
     return { success: false, errors };
@@ -24376,7 +24427,7 @@ async function handleDashboardAgentRequest(data, collections, sendMessage) {
   console.log("[DashboardAgentReq] Handler invoked. Raw message type/id:", data?.type, data?.id);
   const parseResult = DashboardAgentRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
-    logger.error("[DashboardAgentReq] Invalid message \u2014 failed schema validation:", JSON.stringify(parseResult.error.errors));
+    logger.error("[DashboardAgentReq] Invalid message \u2014 failed schema validation:", JSON.stringify(parseResult.error.issues));
     return;
   }
   const { id, payload, from } = parseResult.data;
@@ -25748,6 +25799,11 @@ fetch(BRIDGE + '/run-tool', {
 // have been shown to you in full, and guessing column names wastes a turn on
 // a failed query. Generated per run \u2014 do not edit.
 const BRIDGE = ${JSON.stringify(opts.bridgeUrl)};
+// Sent for the same reason ./query sends it. A schema describes the data, so
+// WHICH tables may be described is the caller's access, not a free question \u2014
+// without this the bridge cannot tell whose run this is, and a source the run
+// may not read would be described to it in full.
+const CONTEXT_TOKEN = ${JSON.stringify(opts.contextToken ?? null)};
 
 const [toolId, ...keywords] = process.argv.slice(2);
 if (!toolId || !keywords.length) {
@@ -25757,7 +25813,10 @@ if (!toolId || !keywords.length) {
 
 fetch(BRIDGE + '/schema-search', {
   method: 'POST',
-  headers: { 'content-type': 'application/json' },
+  headers: {
+    'content-type': 'application/json',
+    ...(CONTEXT_TOKEN ? { 'x-sa-context': CONTEXT_TOKEN } : {}),
+  },
   body: JSON.stringify({ toolId, keywords }),
 })
   .then(async (r) => {
@@ -26223,7 +26282,7 @@ function handleCodingAgentAbort(data, sendMessage) {
 async function handleCodingAgentRequest(data, collections, sendMessage) {
   const parseResult = CodingAgentRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
-    logger.error("[CodingAgentReq] Invalid message:", JSON.stringify(parseResult.error.errors));
+    logger.error("[CodingAgentReq] Invalid message:", JSON.stringify(parseResult.error.issues));
     return;
   }
   const { id, payload, from } = parseResult.data;
@@ -26343,7 +26402,7 @@ async function handleDashBuilderRequest(data, collections, sendMessage) {
 async function handleDashBuilderRequestInner(data, collections, sendMessage) {
   const parsed = DashBuilderRequestMessageSchema.safeParse(data);
   if (!parsed.success) {
-    logger.error("[DashBuilderReq] Invalid message:", JSON.stringify(parsed.error.errors));
+    logger.error("[DashBuilderReq] Invalid message:", JSON.stringify(parsed.error.issues));
     return;
   }
   const { id, payload, from } = parsed.data;
@@ -30094,6 +30153,7 @@ var SuperatomSDK = class {
   UIBlock,
   UILogCollector,
   UserManager,
+  accessFromConfig,
   analyticsClient,
   answerCatalogForBinding,
   answerComponents,

package/dist/index.mjs

@@ -219,7 +219,7 @@ var UserSchema = z3.object({
   password: z3.string().min(1, "Password is required"),
   fullname: z3.string().optional(),
   role: z3.string().optional(),
-  userInfo: z3.record(z3.unknown()).optional(),
+  userInfo: z3.record(z3.string(), z3.unknown()).optional(),
   wsIds: z3.array(z3.string()).optional()
   // Only in memory, not persisted to file
 });
@@ -247,8 +247,8 @@ var IncomingMessageSchema = z3.object({
 var DataRequestPayloadSchema = z3.object({
   collection: z3.string(),
   op: z3.string(),
-  params: z3.record(z3.unknown()).optional(),
-  SA_RUNTIME: z3.record(z3.unknown()).optional()
+  params: z3.record(z3.string(), z3.unknown()).optional(),
+  SA_RUNTIME: z3.record(z3.string(), z3.unknown()).optional()
 });
 var DataRequestMessageSchema = z3.object({
   id: z3.string(),
@@ -345,10 +345,12 @@ var UserPromptSuggestionsMessageSchema = z3.object({
   payload: UserPromptSuggestionsPayloadSchema
 });
 var ComponentPropsSchema = z3.object({
+  // Same runtime schema as under zod 3; the cast keeps zod 3's inferred `{}`, since
+  // zod 4 infers z.object({}) as Record<string, never> and `query.sql` stops type-checking.
   query: z3.string().or(z3.object({})).nullable().optional(),
   title: z3.string().optional(),
   description: z3.string().optional(),
-  config: z3.record(z3.unknown()).optional()
+  config: z3.record(z3.string(), z3.unknown()).optional()
 }).passthrough();
 var ComponentSchema = z3.object({
   id: z3.string(),
@@ -376,8 +378,8 @@ var WorkflowDescriptorSchema = z3.object({
   name: z3.string(),
   description: z3.string(),
   whenToUse: z3.string(),
-  propsSchema: z3.record(z3.string()),
-  defaultProps: z3.record(z3.unknown()).optional()
+  propsSchema: z3.record(z3.string(), z3.string()),
+  defaultProps: z3.record(z3.string(), z3.unknown()).optional()
 });
 var WorkflowsSchema = z3.array(WorkflowDescriptorSchema);
 var WorkflowListResponsePayloadSchema = z3.object({
@@ -410,8 +412,9 @@ var ToolSchema = z3.object({
   toolType: z3.enum(["source", "direct"]).optional(),
   /** Full untruncated schema for source agent (all columns visible) */
   fullSchema: z3.string().optional(),
-  params: z3.record(z3.string()),
-  fn: z3.function().args(z3.any()).returns(z3.any()),
+  params: z3.record(z3.string(), z3.string()),
+  // zod 4: z.function() is no longer a schema, so a tool's handler is checked as a plain callable.
+  fn: z3.custom((v) => typeof v === "function", { message: "fn must be a function" }),
   outputSchema: OutputSchema.optional(),
   // Optional: describes the data structure returned by this tool
   /** Cache policy. `false` = never cache (live data, write ops). Mirrors HTTP `Cache-Control: no-store`. */
@@ -433,7 +436,7 @@ var UsersRequestPayloadSchema = z3.object({
     password: z3.string().optional(),
     fullname: z3.string().optional(),
     role: z3.string().optional(),
-    userInfo: z3.record(z3.unknown()).optional(),
+    userInfo: z3.record(z3.string(), z3.unknown()).optional(),
     // Query operation fields
     filters: UserQueryFiltersSchema.optional(),
     limit: z3.number().optional(),
@@ -452,7 +455,7 @@ var UILogsPayloadSchema = z3.object({
     level: z3.enum(["info", "error", "warn", "debug"]),
     message: z3.string(),
     type: z3.enum(["explanation", "query", "general"]).optional(),
-    data: z3.record(z3.unknown()).optional()
+    data: z3.record(z3.string(), z3.unknown()).optional()
   }))
 });
 var UILogsMessageSchema = z3.object({
@@ -570,7 +573,7 @@ var UIBlockSchema = z3.object({
   // DB field name / Legacy field
   generatedComponentMetadata: ComponentSchema.optional(),
   // Actual field used by UIBlock class
-  componentData: z3.record(z3.any()).optional(),
+  componentData: z3.record(z3.string(), z3.any()).optional(),
   createdAt: z3.string().optional(),
   /**
    * Which script recipe produced this answer. Set whenever the turn was answered
@@ -581,7 +584,7 @@ var UIBlockSchema = z3.object({
    */
   scriptBinding: z3.object({
     recipeId: z3.string(),
-    params: z3.record(z3.any()).optional(),
+    params: z3.record(z3.string(), z3.any()).optional(),
     name: z3.string().optional(),
     columns: z3.array(z3.string()).optional()
   }).optional(),
@@ -662,7 +665,7 @@ var ArtifactsRequestPayloadSchema = z3.object({
     id: z3.number().optional(),
     name: z3.string().optional(),
     createdBy: z3.string().optional(),
-    dsl: z3.record(z3.any()).optional(),
+    dsl: z3.record(z3.string(), z3.any()).optional(),
     status: z3.string().optional(),
     deleted: z3.boolean().optional(),
     limit: z3.number().optional(),
@@ -742,7 +745,7 @@ var MenusRequestPayloadSchema = z3.object({
     userMessage: z3.string().optional(),
     parentId: z3.number().nullable().optional(),
     sortOrder: z3.number().optional(),
-    props: z3.record(z3.unknown()).optional(),
+    props: z3.record(z3.string(), z3.unknown()).optional(),
     isActive: z3.boolean().optional(),
     // Query operation fields
     filters: MenusQueryFiltersSchema.optional(),
@@ -753,7 +756,7 @@ var MenusRequestPayloadSchema = z3.object({
       id: z3.number(),
       sortOrder: z3.number()
     })).optional(),
-    menuJson: z3.record(z3.unknown()).optional(),
+    menuJson: z3.record(z3.string(), z3.unknown()).optional(),
     version: z3.number().optional()
   }).optional()
 });
@@ -930,7 +933,7 @@ var DashComponentSchema = z3.object({
   name: z3.string(),
   kind: z3.string(),
   purpose: z3.string(),
-  props: z3.record(DashComponentPropSchema).optional(),
+  props: z3.record(z3.string(), DashComponentPropSchema).optional(),
   useWhen: z3.string().optional(),
   notes: z3.string().optional()
 });
@@ -1837,9 +1840,19 @@ function runWithContext(ctx, fn) {
   return getStorage().run(ctx, fn);
 }
 function runAsUser(user, fn) {
-  const { userId, orgId, role, projectId, requestId, policies, graphVersion } = user;
+  const { userId, orgId, role, projectId, requestId, policies, allowedSources, graphVersion } = user;
   return runWithContext(
-    { principal: { kind: "user", userId, orgId, role }, projectId, requestId, policies, ...graphVersion !== void 0 ? { graphVersion } : {} },
+    // `allowedSources` is spread in only when given, so an absent restriction
+    // stays absent rather than becoming an explicit `undefined` that a later
+    // `'allowedSources' in ctx` check would read as present.
+    {
+      principal: { kind: "user", userId, orgId, role },
+      projectId,
+      requestId,
+      policies,
+      ...allowedSources !== void 0 ? { allowedSources } : {},
+      ...graphVersion !== void 0 ? { graphVersion } : {}
+    },
     fn
   );
 }
@@ -2521,8 +2534,40 @@ function graphVersionOf(v) {
   if (v === "draft") return "draft";
   return Number.isInteger(v) && v > 0 ? v : void 0;
 }
+function scopedForm(config2) {
+  if (!config2 || typeof config2 !== "object" || Array.isArray(config2)) return void 0;
+  const c = config2;
+  return "allowedSources" in c || "policies" in c ? c : void 0;
+}
+function allowedSourcesFrom(value) {
+  if (value === void 0 || value === null) return null;
+  if (!Array.isArray(value)) {
+    if (!warnedBadSources) {
+      warnedBadSources = true;
+      logger.warn(
+        `[RequestIdentity] "allowedSources" is ${typeof value}, not a list of source ids \u2014 treating it as NO sources rather than all of them. Fix the config: "allowedSources": ["mssql-1a2b"].`
+      );
+    }
+    return [];
+  }
+  const out = [];
+  for (const item of value) {
+    if (typeof item !== "string" || !item.trim()) continue;
+    const id = item.trim();
+    if (!out.includes(id)) out.push(id);
+  }
+  return out;
+}
+function accessFromConfig(config2) {
+  const scoped = scopedForm(config2);
+  return {
+    policies: policiesFromConfig(config2),
+    allowedSources: scoped ? allowedSourcesFrom(scoped.allowedSources) : null
+  };
+}
 function policiesFromConfig(config2) {
-  const entries = Array.isArray(config2) ? config2 : [config2];
+  const raw = scopedForm(config2)?.policies ?? config2;
+  const entries = Array.isArray(raw) ? raw : [raw];
   const out = [];
   for (const entry of entries) {
     if (!entry || typeof entry !== "object") continue;
@@ -2565,12 +2610,13 @@ function policiesFromConfig(config2) {
 var warnedUntrusted = false;
 var warnedAnonymous = false;
 var warnedUnlabelled = false;
+var warnedBadSources = false;
 var announcedVerified = false;
 var reportedIdMismatches = /* @__PURE__ */ new Set();
 function runWithMessageIdentity(message, fn) {
   const verified = message?.authContext;
   const requestId = message?.id;
-  const policies = verified ? policiesFromConfig(verified.config) : policiesFromConfig(message?.payload?.config);
+  const { policies, allowedSources } = verified ? accessFromConfig(verified.config) : accessFromConfig(message?.payload?.config);
   if (verified?.userId) {
     const claimedId = message?.payload?.userId;
     if (!announcedVerified) {
@@ -2595,6 +2641,9 @@ function runWithMessageIdentity(message, fn) {
         role: verified.role,
         requestId,
         policies,
+        // `?? undefined` so "no restriction" leaves the key off the context
+        // entirely; `[]` is passed through as the deny-everything it means.
+        allowedSources: allowedSources ?? void 0,
         // Only from the verified context: an unverified message has no say in which graph answers.
         graphVersion: graphVersionOf(verified.graphVersion)
       },
@@ -2609,7 +2658,7 @@ function runWithMessageIdentity(message, fn) {
         "[RequestIdentity] Using the client-supplied payload.userId as the principal \u2014 the relay is not stamping a verified authContext yet, so this identity is NOT trustworthy. Fine for plumbing; do not enable policy enforcement until the relay change lands."
       );
     }
-    return runAsUser({ userId: claimed, requestId, policies }, fn);
+    return runAsUser({ userId: claimed, requestId, policies, allowedSources: allowedSources ?? void 0 }, fn);
   }
   if (!warnedAnonymous) {
     warnedAnonymous = true;
@@ -18075,7 +18124,8 @@ function storeScriptDatasetQuery(q, ctx) {
   return queryCache.storeQuery(q.sql, { data, count });
 }
 function buildUserAccessContext(userConfig) {
-  const entries = Array.isArray(userConfig) ? userConfig : [userConfig];
+  const config2 = userConfig && !Array.isArray(userConfig) && typeof userConfig === "object" && ("policies" in userConfig || "allowedSources" in userConfig) ? userConfig.policies : userConfig;
+  const entries = Array.isArray(config2) ? config2 : [config2];
   const restrictions = [];
   const prompts = [];
   let anyRestriction = false;
@@ -19581,7 +19631,7 @@ var get_user_request = async (data, components, sendMessage, anthropicApiKey, gr
   const parseResult = UserPromptRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
     const zodError = parseResult.error;
-    zodError.errors.forEach((err) => {
+    zodError.issues.forEach((err) => {
       errors.push(`${err.path.join(".")}: ${err.message}`);
     });
     return { success: false, errors };
@@ -24094,7 +24144,7 @@ var processDashCompRequest = async (data, components, _sendMessage, anthropicApi
   const parseResult = DashCompRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
     const zodError = parseResult.error;
-    zodError.errors.forEach((err) => {
+    zodError.issues.forEach((err) => {
       errors.push(`${err.path.join(".")}: ${err.message}`);
     });
     return { success: false, errors };
@@ -24265,7 +24315,7 @@ async function handleDashboardAgentRequest(data, collections, sendMessage) {
   console.log("[DashboardAgentReq] Handler invoked. Raw message type/id:", data?.type, data?.id);
   const parseResult = DashboardAgentRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
-    logger.error("[DashboardAgentReq] Invalid message \u2014 failed schema validation:", JSON.stringify(parseResult.error.errors));
+    logger.error("[DashboardAgentReq] Invalid message \u2014 failed schema validation:", JSON.stringify(parseResult.error.issues));
     return;
   }
   const { id, payload, from } = parseResult.data;
@@ -25637,6 +25687,11 @@ fetch(BRIDGE + '/run-tool', {
 // have been shown to you in full, and guessing column names wastes a turn on
 // a failed query. Generated per run \u2014 do not edit.
 const BRIDGE = ${JSON.stringify(opts.bridgeUrl)};
+// Sent for the same reason ./query sends it. A schema describes the data, so
+// WHICH tables may be described is the caller's access, not a free question \u2014
+// without this the bridge cannot tell whose run this is, and a source the run
+// may not read would be described to it in full.
+const CONTEXT_TOKEN = ${JSON.stringify(opts.contextToken ?? null)};
 
 const [toolId, ...keywords] = process.argv.slice(2);
 if (!toolId || !keywords.length) {
@@ -25646,7 +25701,10 @@ if (!toolId || !keywords.length) {
 
 fetch(BRIDGE + '/schema-search', {
   method: 'POST',
-  headers: { 'content-type': 'application/json' },
+  headers: {
+    'content-type': 'application/json',
+    ...(CONTEXT_TOKEN ? { 'x-sa-context': CONTEXT_TOKEN } : {}),
+  },
   body: JSON.stringify({ toolId, keywords }),
 })
   .then(async (r) => {
@@ -26112,7 +26170,7 @@ function handleCodingAgentAbort(data, sendMessage) {
 async function handleCodingAgentRequest(data, collections, sendMessage) {
   const parseResult = CodingAgentRequestMessageSchema.safeParse(data);
   if (!parseResult.success) {
-    logger.error("[CodingAgentReq] Invalid message:", JSON.stringify(parseResult.error.errors));
+    logger.error("[CodingAgentReq] Invalid message:", JSON.stringify(parseResult.error.issues));
     return;
   }
   const { id, payload, from } = parseResult.data;
@@ -26232,7 +26290,7 @@ async function handleDashBuilderRequest(data, collections, sendMessage) {
 async function handleDashBuilderRequestInner(data, collections, sendMessage) {
   const parsed = DashBuilderRequestMessageSchema.safeParse(data);
   if (!parsed.success) {
-    logger.error("[DashBuilderReq] Invalid message:", JSON.stringify(parsed.error.errors));
+    logger.error("[DashBuilderReq] Invalid message:", JSON.stringify(parsed.error.issues));
     return;
   }
   const { id, payload, from } = parsed.data;
@@ -29982,6 +30040,7 @@ export {
   UIBlock,
   UILogCollector,
   UserManager,
+  accessFromConfig,
   analyticsClient,
   answerCatalogForBinding,
   answerComponents,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@superatomai/sdk-node",
-  "version": "0.0.81-dsp",
+  "version": "0.0.83-dsp",
   "description": "Node.js TypeScript SDK for Superatom",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -41,7 +41,7 @@
     "openai": "^4.77.0",
     "typebox": "^1.1.38",
     "ws": "^8.21.0",
-    "zod": "^3.25.76"
+    "zod": "^4.6.6"
   },
   "optionalDependencies": {
     "@openai/codex-sdk": "0.156.1"