@whittlelabs/sifter 0.4.0 → 0.4.1

package/bin.js

@@ -15342,18 +15342,36 @@ var require_client = __commonJS({
     var prompt_execution_1 = require_prompt_execution();
     var JobsClient = class {
       baseUrl;
-      headers;
+      apiKey;
+      accessToken;
+      getAccessToken;
       onResponse;
       constructor(config) {
         this.baseUrl = config.baseUrl.replace(/\/$/, "");
-        this.headers = { "Content-Type": "application/json" };
-        if (config.apiKey) {
-          this.headers["X-API-Key"] = config.apiKey;
-        } else if (config.accessToken) {
-          this.headers["Authorization"] = `Bearer ${config.accessToken}`;
-        }
+        this.apiKey = config.apiKey;
+        this.accessToken = config.accessToken;
+        this.getAccessToken = config.getAccessToken;
         this.onResponse = config.onResponse;
       }
+      /**
+       * Headers for one request. The auth header is resolved per call so a
+       * long-lived client picks up a refreshed token from `getAccessToken`
+       * (the manager behind it re-mints before expiry) instead of pinning the
+       * token it happened to hold at construction.
+       */
+      async buildHeaders() {
+        const headers = { "Content-Type": "application/json" };
+        if (this.apiKey) {
+          headers["X-API-Key"] = this.apiKey;
+        } else if (this.getAccessToken) {
+          const token = await this.getAccessToken();
+          if (token)
+            headers["Authorization"] = `Bearer ${token}`;
+        } else if (this.accessToken) {
+          headers["Authorization"] = `Bearer ${this.accessToken}`;
+        }
+        return headers;
+      }
       // ── Attention Pools ──────────────────────────────────────────────
       async createAttentionPool(options) {
         return this.request("POST", "/api/attention-pools", options);
@@ -15543,19 +15561,11 @@ var require_client = __commonJS({
         }
       }
       // ── HTTP plumbing ────────────────────────────────────────────────
-      /** @internal exposed for the subscribe loop */
-      buildUrl(path) {
-        return `${this.baseUrl}${path}`;
-      }
-      /** @internal exposed for the subscribe loop */
-      authHeaders() {
-        return { ...this.headers };
-      }
       async request(method, path, body) {
-        const url = this.buildUrl(path);
+        const url = `${this.baseUrl}${path}`;
         const response = await fetch(url, {
           method,
-          headers: this.headers,
+          headers: await this.buildHeaders(),
           body: body ? JSON.stringify(body) : void 0
         });
         this.onResponse?.(response);
@@ -15570,8 +15580,8 @@ var require_client = __commonJS({
         return json.data;
       }
       async requestPaginated(method, path) {
-        const url = this.buildUrl(path);
-        const response = await fetch(url, { method, headers: this.headers });
+        const url = `${this.baseUrl}${path}`;
+        const response = await fetch(url, { method, headers: await this.buildHeaders() });
         this.onResponse?.(response);
         const json = await response.json();
         if (!response.ok || !json.success) {
@@ -17862,7 +17872,7 @@ var require_shuttle = __commonJS({
         const jobsClient = new jobs_1.JobsClient({
           baseUrl: this.config.auth.jobsApiUrl,
           apiKey: auth.kind === "apiKey" ? auth.apiKey : void 0,
-          accessToken: auth.kind === "serviceToken" ? auth.accessToken : void 0,
+          getAccessToken: auth.kind === "tokenProvider" ? auth.getToken : void 0,
           onResponse: enforceMinVersion
         });
         const registry = new registry_1.ExecutorRegistry(this.brand.executorAllowlist);
@@ -17945,7 +17955,7 @@ var require_shuttle = __commonJS({
         });
         const token = await tokens.getToken();
         if (token)
-          return { kind: "serviceToken", accessToken: token };
+          return { kind: "tokenProvider", getToken: () => tokens.getToken() };
       }
       if (config.auth.apiKey) {
         return { kind: "apiKey", apiKey: config.auth.apiKey };
@@ -18484,7 +18494,7 @@ var import_shuttle = __toESM(require_dist4());
 // package.json
 var package_default = {
   name: "@whittlelabs/sifter",
-  version: "0.4.0",
+  version: "0.4.1",
   description: "Whittle Sifter: paired AI reviewer for Whittle Sift attention pools.",
   bin: {
     "whittle-sifter": "./dist/bin.js"