@visibe.ai/node 0.1.7 → 0.1.8

package/dist/cjs/api.js

@@ -13,6 +13,30 @@ class APIClient {
             process.emitWarning('[Visibe] No API key provided — tracing is disabled. Set VISIBE_API_KEY or pass apiKey= to enable.', { type: 'VisibleSDKWarning', code: 'VISIBE_NO_API_KEY' });
         }
     }
+    // ---------------------------------------------------------------------------
+    // validateKey() — called once at startup in the background.
+    // Hits GET /api/auth/validate with the API key.
+    // On 401 (invalid/revoked key): disables tracing and prints a clear warning.
+    // On network error or non-401 failure: stays enabled (lenient — don't punish
+    // users for flaky networks at startup).
+    // ---------------------------------------------------------------------------
+    async validateKey() {
+        try {
+            const response = await fetch(`${this.apiUrl}/api/auth/validate`, {
+                method: 'GET',
+                headers: { 'Authorization': `Bearer ${this.apiKey}` },
+                signal: AbortSignal.timeout(5000),
+            });
+            if (response.status === 401) {
+                this._enabled = false;
+                process.emitWarning('[Visibe] Invalid API key — tracing is disabled. Check your VISIBE_API_KEY.', { type: 'VisibleSDKWarning', code: 'VISIBE_INVALID_API_KEY' });
+            }
+            // 200 → valid, stay enabled. Other status codes → lenient, stay enabled.
+        }
+        catch {
+            // Network error / timeout → lenient, stay enabled.
+        }
+    }
     async _request(method, path, body) {
         if (!this._enabled)
             return false;

package/dist/cjs/client.js

@@ -20,6 +20,13 @@ class Visibe {
         this.debug = debug;
         this.apiClient = new api_1.APIClient({ apiKey, apiUrl });
         this.batcher = new api_1.SpanBatcher(this.apiClient);
+        // Fire-and-forget background key validation.
+        // Runs ~80ms after startup — well before the 2s batcher flush window.
+        // On invalid key: disables tracing and prints a warning.
+        // On network error: stays enabled (lenient).
+        if (this.apiClient._enabled) {
+            this.apiClient.validateKey().catch(() => { });
+        }
     }
     // ---------------------------------------------------------------------------
     // instrument() — wrap a client so each call creates its own trace.

package/dist/esm/api.js

@@ -10,6 +10,30 @@ export class APIClient {
             process.emitWarning('[Visibe] No API key provided — tracing is disabled. Set VISIBE_API_KEY or pass apiKey= to enable.', { type: 'VisibleSDKWarning', code: 'VISIBE_NO_API_KEY' });
         }
     }
+    // ---------------------------------------------------------------------------
+    // validateKey() — called once at startup in the background.
+    // Hits GET /api/auth/validate with the API key.
+    // On 401 (invalid/revoked key): disables tracing and prints a clear warning.
+    // On network error or non-401 failure: stays enabled (lenient — don't punish
+    // users for flaky networks at startup).
+    // ---------------------------------------------------------------------------
+    async validateKey() {
+        try {
+            const response = await fetch(`${this.apiUrl}/api/auth/validate`, {
+                method: 'GET',
+                headers: { 'Authorization': `Bearer ${this.apiKey}` },
+                signal: AbortSignal.timeout(5000),
+            });
+            if (response.status === 401) {
+                this._enabled = false;
+                process.emitWarning('[Visibe] Invalid API key — tracing is disabled. Check your VISIBE_API_KEY.', { type: 'VisibleSDKWarning', code: 'VISIBE_INVALID_API_KEY' });
+            }
+            // 200 → valid, stay enabled. Other status codes → lenient, stay enabled.
+        }
+        catch {
+            // Network error / timeout → lenient, stay enabled.
+        }
+    }
     async _request(method, path, body) {
         if (!this._enabled)
             return false;

package/dist/esm/client.js

@@ -17,6 +17,13 @@ export class Visibe {
         this.debug = debug;
         this.apiClient = new APIClient({ apiKey, apiUrl });
         this.batcher = new SpanBatcher(this.apiClient);
+        // Fire-and-forget background key validation.
+        // Runs ~80ms after startup — well before the 2s batcher flush window.
+        // On invalid key: disables tracing and prints a warning.
+        // On network error: stays enabled (lenient).
+        if (this.apiClient._enabled) {
+            this.apiClient.validateKey().catch(() => { });
+        }
     }
     // ---------------------------------------------------------------------------
     // instrument() — wrap a client so each call creates its own trace.

package/dist/types/api.d.ts

@@ -2,12 +2,13 @@ export declare class APIClient {
     readonly apiUrl: string;
     private readonly apiKey;
     private readonly timeout;
-    readonly _enabled: boolean;
+    _enabled: boolean;
     constructor(options: {
         apiUrl?: string;
         apiKey?: string;
         timeout?: number;
     });
+    validateKey(): Promise<void>;
     private _request;
     createTrace(data: object): Promise<boolean>;
     sendSpan(traceId: string, span: object): Promise<boolean>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visibe.ai/node",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "AI Agent Observability — Track OpenAI, LangChain, LangGraph, Bedrock, Vercel AI, Anthropic",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",