assistant-cloud 0.1.42 → 0.2.0

package/README.md

@@ -31,6 +31,46 @@ export function Provider({ children }: { children: React.ReactNode }) {
 }
 ```
 
+## Server telemetry
+
+Send AI SDK 7 GenAI spans to Assistant Cloud from a Next.js `instrumentation.ts` file. The `assistant-cloud/telemetry` entry needs the OpenTelemetry packages installed next to it:
+
+```sh
+npm i @vercel/otel @opentelemetry/api @opentelemetry/sdk-trace-base @opentelemetry/exporter-trace-otlp-http
+```
+
+```ts
+import { registerOTel } from "@vercel/otel";
+import {
+  createAssistantCloudSpanProcessor,
+  createAssistantCloudTraceExporter,
+} from "assistant-cloud/telemetry";
+
+export function register() {
+  registerOTel({
+    serviceName: "my-app",
+    spanProcessors: [
+      "auto",
+      createAssistantCloudSpanProcessor(
+        createAssistantCloudTraceExporter({
+          apiKey: process.env.ASSISTANT_API_KEY!,
+        }),
+      ),
+    ],
+  });
+}
+```
+
+Pass the active server trace ID to the browser with `messageMetadata` in the route that calls `streamText`:
+
+```ts
+import { withAssistantCloudTraceMetadata } from "assistant-cloud/telemetry";
+
+return result.toUIMessageStreamResponse({
+  messageMetadata: withAssistantCloudTraceMetadata(),
+});
+```
+
 ## Authentication
 
 | Mode             | Required fields                                         | Use case                              |

package/dist/AssistantCloud.d.ts

@@ -4,6 +4,8 @@ import { AssistantCloudAuthTokens } from "./AssistantCloudAuthTokens.js";
 import { AssistantCloudThreads } from "./AssistantCloudThreads.js";
 import { AssistantCloudProjects } from "./AssistantCloudProjects.js";
 import { AssistantCloudFiles } from "./AssistantCloudFiles.js";
+import { AssistantCloudEvents } from "./AssistantCloudEvents.js";
+import { AssistantCloudScores } from "./AssistantCloudScores.js";
 //#region src/AssistantCloud.d.ts
 declare class AssistantCloud {
   readonly threads: AssistantCloudThreads;
@@ -13,6 +15,8 @@ declare class AssistantCloud {
   };
   readonly runs: AssistantCloudRuns;
   readonly files: AssistantCloudFiles;
+  readonly events: AssistantCloudEvents;
+  readonly scores: AssistantCloudScores;
   readonly telemetry: AssistantCloudTelemetryConfig;
   constructor(config: AssistantCloudConfig);
 }

package/dist/AssistantCloud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantCloud.d.ts","names":[],"sources":["../src/AssistantCloud.ts"],"mappings":";;;;;;;cAWa;WACK,SAAO;WACP,UAAQ;WACR;;;WACA,MAAI;WACJ,OAAK;WACL,WAAW;EAEf,YAAA,QAAQ"}
+{"version":3,"file":"AssistantCloud.d.ts","names":[],"sources":["../src/AssistantCloud.ts"],"mappings":";;;;;;;;;cAaa;WACK,SAAO;WACP,UAAQ;WACR;;;WACA,MAAI;WACJ,OAAK;WACL,QAAM;WACN,QAAM;WACN,WAAW;EAEf,YAAA,QAAQ"}

package/dist/AssistantCloud.js

@@ -4,6 +4,8 @@ import { AssistantCloudThreads } from "./AssistantCloudThreads.js";
 import { AssistantCloudProjects } from "./AssistantCloudProjects.js";
 import { AssistantCloudRuns } from "./AssistantCloudRuns.js";
 import { AssistantCloudFiles } from "./AssistantCloudFiles.js";
+import { AssistantCloudEvents } from "./AssistantCloudEvents.js";
+import { AssistantCloudScores } from "./AssistantCloudScores.js";
 //#region src/AssistantCloud.ts
 var AssistantCloud = class {
 	threads;
@@ -11,19 +13,23 @@ var AssistantCloud = class {
 	auth;
 	runs;
 	files;
+	events;
+	scores;
 	telemetry;
 	constructor(config) {
 		const api = new AssistantCloudAPI(config);
-		this.threads = new AssistantCloudThreads(api);
-		this.projects = new AssistantCloudProjects(api);
-		this.auth = { tokens: new AssistantCloudAuthTokens(api) };
-		this.runs = new AssistantCloudRuns(api);
-		this.files = new AssistantCloudFiles(api);
 		const t = config.telemetry;
 		this.telemetry = t === false ? { enabled: false } : t === true || t === void 0 ? { enabled: true } : {
 			...t,
 			enabled: t.enabled !== false
 		};
+		this.threads = new AssistantCloudThreads(api);
+		this.projects = new AssistantCloudProjects(api);
+		this.auth = { tokens: new AssistantCloudAuthTokens(api) };
+		this.runs = new AssistantCloudRuns(api);
+		this.files = new AssistantCloudFiles(api);
+		this.events = new AssistantCloudEvents(api, () => this.telemetry.enabled !== false && this.telemetry.events !== false);
+		this.scores = new AssistantCloudScores(api);
 	}
 };
 //#endregion

package/dist/AssistantCloud.js.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantCloud.js","names":[],"sources":["../src/AssistantCloud.ts"],"sourcesContent":["import {\n  AssistantCloudAPI,\n  type AssistantCloudConfig,\n  type AssistantCloudTelemetryConfig,\n} from \"./AssistantCloudAPI\";\nimport { AssistantCloudAuthTokens } from \"./AssistantCloudAuthTokens\";\nimport { AssistantCloudProjects } from \"./AssistantCloudProjects\";\nimport { AssistantCloudRuns } from \"./AssistantCloudRuns\";\nimport { AssistantCloudThreads } from \"./AssistantCloudThreads\";\nimport { AssistantCloudFiles } from \"./AssistantCloudFiles\";\n\nexport class AssistantCloud {\n  public readonly threads;\n  public readonly projects;\n  public readonly auth;\n  public readonly runs;\n  public readonly files;\n  public readonly telemetry: AssistantCloudTelemetryConfig;\n\n  constructor(config: AssistantCloudConfig) {\n    const api = new AssistantCloudAPI(config);\n    this.threads = new AssistantCloudThreads(api);\n    this.projects = new AssistantCloudProjects(api);\n    this.auth = {\n      tokens: new AssistantCloudAuthTokens(api),\n    };\n    this.runs = new AssistantCloudRuns(api);\n    this.files = new AssistantCloudFiles(api);\n\n    const t = config.telemetry;\n    this.telemetry =\n      t === false\n        ? { enabled: false }\n        : t === true || t === undefined\n          ? { enabled: true }\n          : { ...t, enabled: t.enabled !== false };\n  }\n}\n"],"mappings":";;;;;;;AAWA,IAAa,iBAAb,MAA4B;CAC1B;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA8B;EACxC,MAAM,MAAM,IAAI,kBAAkB,MAAM;EACxC,KAAK,UAAU,IAAI,sBAAsB,GAAG;EAC5C,KAAK,WAAW,IAAI,uBAAuB,GAAG;EAC9C,KAAK,OAAO,EACV,QAAQ,IAAI,yBAAyB,GAAG,EAC1C;EACA,KAAK,OAAO,IAAI,mBAAmB,GAAG;EACtC,KAAK,QAAQ,IAAI,oBAAoB,GAAG;EAExC,MAAM,IAAI,OAAO;EACjB,KAAK,YACH,MAAM,QACF,EAAE,SAAS,MAAM,IACjB,MAAM,QAAQ,MAAM,KAAA,IAClB,EAAE,SAAS,KAAK,IAChB;GAAE,GAAG;GAAG,SAAS,EAAE,YAAY;EAAM;CAC/C;AACF"}
+{"version":3,"file":"AssistantCloud.js","names":[],"sources":["../src/AssistantCloud.ts"],"sourcesContent":["import {\n  AssistantCloudAPI,\n  type AssistantCloudConfig,\n  type AssistantCloudTelemetryConfig,\n} from \"./AssistantCloudAPI\";\nimport { AssistantCloudAuthTokens } from \"./AssistantCloudAuthTokens\";\nimport { AssistantCloudProjects } from \"./AssistantCloudProjects\";\nimport { AssistantCloudRuns } from \"./AssistantCloudRuns\";\nimport { AssistantCloudThreads } from \"./AssistantCloudThreads\";\nimport { AssistantCloudFiles } from \"./AssistantCloudFiles\";\nimport { AssistantCloudEvents } from \"./AssistantCloudEvents\";\nimport { AssistantCloudScores } from \"./AssistantCloudScores\";\n\nexport class AssistantCloud {\n  public readonly threads;\n  public readonly projects;\n  public readonly auth;\n  public readonly runs;\n  public readonly files;\n  public readonly events;\n  public readonly scores;\n  public readonly telemetry: AssistantCloudTelemetryConfig;\n\n  constructor(config: AssistantCloudConfig) {\n    const api = new AssistantCloudAPI(config);\n    const t = config.telemetry;\n    this.telemetry =\n      t === false\n        ? { enabled: false }\n        : t === true || t === undefined\n          ? { enabled: true }\n          : {\n              ...t,\n              enabled: t.enabled !== false,\n            };\n\n    this.threads = new AssistantCloudThreads(api);\n    this.projects = new AssistantCloudProjects(api);\n    this.auth = {\n      tokens: new AssistantCloudAuthTokens(api),\n    };\n    this.runs = new AssistantCloudRuns(api);\n    this.files = new AssistantCloudFiles(api);\n    this.events = new AssistantCloudEvents(\n      api,\n      () => this.telemetry.enabled !== false && this.telemetry.events !== false,\n    );\n    this.scores = new AssistantCloudScores(api);\n  }\n}\n"],"mappings":";;;;;;;;;AAaA,IAAa,iBAAb,MAA4B;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA8B;EACxC,MAAM,MAAM,IAAI,kBAAkB,MAAM;EACxC,MAAM,IAAI,OAAO;EACjB,KAAK,YACH,MAAM,QACF,EAAE,SAAS,MAAM,IACjB,MAAM,QAAQ,MAAM,KAAA,IAClB,EAAE,SAAS,KAAK,IAChB;GACE,GAAG;GACH,SAAS,EAAE,YAAY;EACzB;EAER,KAAK,UAAU,IAAI,sBAAsB,GAAG;EAC5C,KAAK,WAAW,IAAI,uBAAuB,GAAG;EAC9C,KAAK,OAAO,EACV,QAAQ,IAAI,yBAAyB,GAAG,EAC1C;EACA,KAAK,OAAO,IAAI,mBAAmB,GAAG;EACtC,KAAK,QAAQ,IAAI,oBAAoB,GAAG;EACxC,KAAK,SAAS,IAAI,qBAChB,WACM,KAAK,UAAU,YAAY,SAAS,KAAK,UAAU,WAAW,KACtE;EACA,KAAK,SAAS,IAAI,qBAAqB,GAAG;CAC5C;AACF"}

package/dist/AssistantCloudAPI.d.ts

@@ -2,7 +2,20 @@ import { AssistantCloudAuthStrategy } from "./AssistantCloudAuthStrategy.js";
 import { AssistantCloudRunReport } from "./AssistantCloudRuns.js";
 //#region src/AssistantCloudAPI.d.ts
 type AssistantCloudTelemetryConfig = {
+  /**
+   * Enables Assistant Cloud telemetry. Defaults to `true`. Set to `false` to
+   * disable both run reports and engagement events.
+   */
   enabled?: boolean;
+  /**
+   * Enables Assistant Cloud engagement events. Defaults to `true` when
+   * telemetry is enabled. Set to `false` to keep run reports while disabling
+   * engagement events.
+   */
+  events?: boolean;
+  release?: string;
+  environment?: string;
+  tags?: string[];
   /**
    * Called before each telemetry report is sent.
    * Return a modified report to enrich it (e.g. add `model_id`),
@@ -37,13 +50,16 @@ type AssistantCloudConfig = ({
 };
 declare class CloudAPIError extends Error {
   readonly status: number;
-  constructor(message: string, status: number);
+  readonly code?: string;
+  readonly details?: Record<string, unknown>;
+  constructor(message: string, status: number, code?: string, details?: Record<string, unknown>);
 }
 type MakeRequestOptions = {
   method?: "POST" | "PUT" | "DELETE" | undefined;
   headers?: Record<string, string> | undefined;
   query?: Record<string, string | number | boolean> | undefined;
   body?: object | undefined;
+  keepalive?: boolean | undefined;
 };
 declare class AssistantCloudAPI {
   _auth: AssistantCloudAuthStrategy;

package/dist/AssistantCloudAPI.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantCloudAPI.d.ts","names":[],"sources":["../src/AssistantCloudAPI.ts"],"mappings":";;;KAQY;EACV;;;;;;EAMA,gBACE,QAAQ,4BACL;;KAGK;EAEN;EACA,iBAAiB;;EAGjB;EACA;EACA;EACA;;EAGA;EACA;;;;;;;;;;;;;EAcJ,sBAAsB;;cAGX,sBAAsB;WACjB;EAEJ,YAAA,iBAAiB;;KAO1B;EACH;EACA,UAAU;EACV,QAAQ;EACR;;cAQW;EACJ,OAAO;EACP;EAEK,YAAA,QAAQ;EAuBP,kBAAc;EAId,eACX,kBACA,UAAS,qBAAuB,QAAA;EAoDrB,YAAY,kBAAkB,UAAS,qBAAuB"}
+{"version":3,"file":"AssistantCloudAPI.d.ts","names":[],"sources":["../src/AssistantCloudAPI.ts"],"mappings":";;;KASY;;;;;EAKV;;;;;;EAMA;EACA;EACA;EACA;;;;;;EAMA,gBACE,QAAQ,4BACL;;KAGK;EAEN;EACA,iBAAiB;;EAGjB;EACA;EACA;EACA;;EAGA;EACA;;;;;;;;;;;;;EAcJ,sBAAsB;;cAGX,sBAAsB;WACjB;WACA;WACA,UAAU;EAGxB,YAAA,iBACA,gBACA,eACA,UAAU;;KAUT;EACH;EACA,UAAU;EACV,QAAQ;EACR;EACA;;cAGW;EACJ,OAAO;EACP;EAEK,YAAA,QAAQ;EAuBP,kBAAc;EAId,eACX,kBACA,UAAS,qBAAuB,QAAA;EAiErB,YAAY,kBAAkB,UAAS,qBAAuB"}

package/dist/AssistantCloudAPI.js

@@ -1,17 +1,17 @@
-import { AssistantCloudAPIKeyAuthStrategy, AssistantCloudAnonymousAuthStrategy, AssistantCloudJWTAuthStrategy } from "./AssistantCloudAuthStrategy.js";
+import { AssistantCloudAPIKeyAuthStrategy, AssistantCloudAnonymousAuthStrategy, AssistantCloudJWTAuthStrategy, normalizeBaseUrl } from "./AssistantCloudAuthStrategy.js";
 //#region src/AssistantCloudAPI.ts
 var CloudAPIError = class extends Error {
 	status;
-	constructor(message, status) {
+	code;
+	details;
+	constructor(message, status, code, details) {
 		super(message);
 		this.status = status;
+		if (code !== void 0) this.code = code;
+		if (details !== void 0) this.details = details;
 		this.name = "CloudAPIError";
 	}
 };
-const normalizeBaseUrl = (baseUrl) => {
-	if (!baseUrl || !baseUrl.endsWith("/")) return baseUrl;
-	return baseUrl.slice(0, -1);
-};
 var AssistantCloudAPI = class {
 	_auth;
 	_baseUrl;
@@ -49,17 +49,28 @@ var AssistantCloudAPI = class {
 		const response = await fetch(url, {
 			method: options.method ?? "GET",
 			headers,
-			body: options.body ? JSON.stringify(options.body) : null
+			body: options.body ? JSON.stringify(options.body) : null,
+			...options.keepalive ? { keepalive: true } : {}
 		});
 		this._auth.readAuthHeaders(response.headers);
 		if (!response.ok) {
 			const text = await response.text();
 			let message;
+			let code;
+			let details;
 			try {
 				const body = JSON.parse(text);
-				if (typeof body?.message === "string" && body.message.length > 0) message = body.message;
+				if (typeof body === "object" && body !== null && !Array.isArray(body)) {
+					const record = body;
+					if (typeof record.message === "string" && record.message.length > 0) message = record.message;
+					if (typeof record.error === "string") {
+						code = record.error;
+						details = { ...record };
+						delete details.error;
+					}
+				}
 			} catch {}
-			throw new CloudAPIError(message ?? `Request failed with status ${response.status}, ${text}`, response.status);
+			throw new CloudAPIError(message ?? `Request failed with status ${response.status}, ${text}`, response.status, code, details);
 		}
 		return response;
 	}

package/dist/AssistantCloudAPI.js.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantCloudAPI.js","names":[],"sources":["../src/AssistantCloudAPI.ts"],"sourcesContent":["import {\n  type AssistantCloudAuthStrategy,\n  AssistantCloudJWTAuthStrategy,\n  AssistantCloudAPIKeyAuthStrategy,\n  AssistantCloudAnonymousAuthStrategy,\n} from \"./AssistantCloudAuthStrategy\";\nimport type { AssistantCloudRunReport } from \"./AssistantCloudRuns\";\n\nexport type AssistantCloudTelemetryConfig = {\n  enabled?: boolean;\n  /**\n   * Called before each telemetry report is sent.\n   * Return a modified report to enrich it (e.g. add `model_id`),\n   * or return `null` to skip the report.\n   */\n  beforeReport?: (\n    report: AssistantCloudRunReport,\n  ) => AssistantCloudRunReport | null;\n};\n\nexport type AssistantCloudConfig = (\n  | {\n      baseUrl: string;\n      authToken: () => Promise<string | null>;\n    }\n  | {\n      baseUrl?: string;\n      apiKey: string;\n      userId: string;\n      workspaceId: string;\n    }\n  | {\n      baseUrl: string;\n      anonymous: true;\n    }\n) & {\n  /**\n   * Client-side run telemetry reporting. Default: `true`.\n   *\n   * When enabled, the SDK automatically reports run metadata (status, step\n   * count, tool calls, and token usage) to Assistant Cloud after each\n   * assistant message is saved. No message content is sent.\n   *\n   * - `true` / `undefined` — enabled with defaults\n   * - `false` — disabled\n   * - `{ beforeReport }` — enabled with a hook to enrich or filter reports\n   */\n  telemetry?: boolean | AssistantCloudTelemetryConfig;\n};\n\nexport class CloudAPIError extends Error {\n  public readonly status: number;\n\n  constructor(message: string, status: number) {\n    super(message);\n    this.status = status;\n    this.name = \"CloudAPIError\";\n  }\n}\n\ntype MakeRequestOptions = {\n  method?: \"POST\" | \"PUT\" | \"DELETE\" | undefined;\n  headers?: Record<string, string> | undefined;\n  query?: Record<string, string | number | boolean> | undefined;\n  body?: object | undefined;\n};\n\nconst normalizeBaseUrl = (baseUrl: string) => {\n  if (!baseUrl || !baseUrl.endsWith(\"/\")) return baseUrl;\n  return baseUrl.slice(0, -1);\n};\n\nexport class AssistantCloudAPI {\n  public _auth: AssistantCloudAuthStrategy;\n  public _baseUrl;\n\n  constructor(config: AssistantCloudConfig) {\n    if (\"authToken\" in config) {\n      this._baseUrl = normalizeBaseUrl(config.baseUrl);\n      this._auth = new AssistantCloudJWTAuthStrategy(config.authToken);\n    } else if (\"apiKey\" in config) {\n      this._baseUrl = normalizeBaseUrl(\n        config.baseUrl ?? \"https://backend.assistant-api.com\",\n      );\n      this._auth = new AssistantCloudAPIKeyAuthStrategy(\n        config.apiKey,\n        config.userId,\n        config.workspaceId,\n      );\n    } else if (\"anonymous\" in config) {\n      this._baseUrl = normalizeBaseUrl(config.baseUrl);\n      this._auth = new AssistantCloudAnonymousAuthStrategy(this._baseUrl);\n    } else {\n      throw new Error(\n        \"Invalid configuration: Must provide authToken, apiKey, or anonymous configuration\",\n      );\n    }\n  }\n\n  public async initializeAuth() {\n    return !!(await this._auth.getAuthHeaders());\n  }\n\n  public async makeRawRequest(\n    endpoint: string,\n    options: MakeRequestOptions = {},\n  ) {\n    const authHeaders = await this._auth.getAuthHeaders();\n    if (!authHeaders) throw new Error(\"Authorization failed\");\n\n    const headers = {\n      ...authHeaders,\n      ...options.headers,\n      \"Content-Type\": \"application/json\",\n    };\n\n    const queryParams = new URLSearchParams();\n    if (options.query) {\n      for (const [key, value] of Object.entries(options.query)) {\n        if (value === false) continue;\n        if (value === true) {\n          queryParams.set(key, \"true\");\n        } else {\n          queryParams.set(key, value.toString());\n        }\n      }\n    }\n\n    const url = new URL(`${this._baseUrl}/v1${endpoint}`);\n    url.search = queryParams.toString();\n\n    const response = await fetch(url, {\n      method: options.method ?? \"GET\",\n      headers,\n      body: options.body ? JSON.stringify(options.body) : null,\n    });\n\n    this._auth.readAuthHeaders(response.headers);\n\n    if (!response.ok) {\n      const text = await response.text();\n      let message: string | undefined;\n      try {\n        const body = JSON.parse(text);\n        if (typeof body?.message === \"string\" && body.message.length > 0) {\n          message = body.message;\n        }\n      } catch {}\n      throw new CloudAPIError(\n        message ?? `Request failed with status ${response.status}, ${text}`,\n        response.status,\n      );\n    }\n\n    return response;\n  }\n\n  public async makeRequest(endpoint: string, options: MakeRequestOptions = {}) {\n    const response = await this.makeRawRequest(endpoint, options);\n    if (\n      response.status === 204 ||\n      response.headers.get(\"content-length\") === \"0\"\n    )\n      return undefined;\n\n    const text = await response.text();\n    if (text.trim() === \"\") return undefined;\n\n    return JSON.parse(text);\n  }\n}\n"],"mappings":";;AAkDA,IAAa,gBAAb,cAAmC,MAAM;CACvC;CAEA,YAAY,SAAiB,QAAgB;EAC3C,MAAM,OAAO;EACb,KAAK,SAAS;EACd,KAAK,OAAO;CACd;AACF;AASA,MAAM,oBAAoB,YAAoB;CAC5C,IAAI,CAAC,WAAW,CAAC,QAAQ,SAAS,GAAG,GAAG,OAAO;CAC/C,OAAO,QAAQ,MAAM,GAAG,EAAE;AAC5B;AAEA,IAAa,oBAAb,MAA+B;CAC7B;CACA;CAEA,YAAY,QAA8B;EACxC,IAAI,eAAe,QAAQ;GACzB,KAAK,WAAW,iBAAiB,OAAO,OAAO;GAC/C,KAAK,QAAQ,IAAI,8BAA8B,OAAO,SAAS;EACjE,OAAO,IAAI,YAAY,QAAQ;GAC7B,KAAK,WAAW,iBACd,OAAO,WAAW,mCACpB;GACA,KAAK,QAAQ,IAAI,iCACf,OAAO,QACP,OAAO,QACP,OAAO,WACT;EACF,OAAO,IAAI,eAAe,QAAQ;GAChC,KAAK,WAAW,iBAAiB,OAAO,OAAO;GAC/C,KAAK,QAAQ,IAAI,oCAAoC,KAAK,QAAQ;EACpE,OACE,MAAM,IAAI,MACR,mFACF;CAEJ;CAEA,MAAa,iBAAiB;EAC5B,OAAO,CAAC,CAAE,MAAM,KAAK,MAAM,eAAe;CAC5C;CAEA,MAAa,eACX,UACA,UAA8B,CAAC,GAC/B;EACA,MAAM,cAAc,MAAM,KAAK,MAAM,eAAe;EACpD,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,sBAAsB;EAExD,MAAM,UAAU;GACd,GAAG;GACH,GAAG,QAAQ;GACX,gBAAgB;EAClB;EAEA,MAAM,cAAc,IAAI,gBAAgB;EACxC,IAAI,QAAQ,OACV,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,KAAK,GAAG;GACxD,IAAI,UAAU,OAAO;GACrB,IAAI,UAAU,MACZ,YAAY,IAAI,KAAK,MAAM;QAE3B,YAAY,IAAI,KAAK,MAAM,SAAS,CAAC;EAEzC;EAGF,MAAM,MAAM,IAAI,IAAI,GAAG,KAAK,SAAS,KAAK,UAAU;EACpD,IAAI,SAAS,YAAY,SAAS;EAElC,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC,QAAQ,QAAQ,UAAU;GAC1B;GACA,MAAM,QAAQ,OAAO,KAAK,UAAU,QAAQ,IAAI,IAAI;EACtD,CAAC;EAED,KAAK,MAAM,gBAAgB,SAAS,OAAO;EAE3C,IAAI,CAAC,SAAS,IAAI;GAChB,MAAM,OAAO,MAAM,SAAS,KAAK;GACjC,IAAI;GACJ,IAAI;IACF,MAAM,OAAO,KAAK,MAAM,IAAI;IAC5B,IAAI,OAAO,MAAM,YAAY,YAAY,KAAK,QAAQ,SAAS,GAC7D,UAAU,KAAK;GAEnB,QAAQ,CAAC;GACT,MAAM,IAAI,cACR,WAAW,8BAA8B,SAAS,OAAO,IAAI,QAC7D,SAAS,MACX;EACF;EAEA,OAAO;CACT;CAEA,MAAa,YAAY,UAAkB,UAA8B,CAAC,GAAG;EAC3E,MAAM,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;EAC5D,IACE,SAAS,WAAW,OACpB,SAAS,QAAQ,IAAI,gBAAgB,MAAM,KAE3C,OAAO,KAAA;EAET,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO,KAAA;EAE/B,OAAO,KAAK,MAAM,IAAI;CACxB;AACF"}
+{"version":3,"file":"AssistantCloudAPI.js","names":[],"sources":["../src/AssistantCloudAPI.ts"],"sourcesContent":["import {\n  type AssistantCloudAuthStrategy,\n  AssistantCloudJWTAuthStrategy,\n  AssistantCloudAPIKeyAuthStrategy,\n  AssistantCloudAnonymousAuthStrategy,\n  normalizeBaseUrl,\n} from \"./AssistantCloudAuthStrategy\";\nimport type { AssistantCloudRunReport } from \"./AssistantCloudRuns\";\n\nexport type AssistantCloudTelemetryConfig = {\n  /**\n   * Enables Assistant Cloud telemetry. Defaults to `true`. Set to `false` to\n   * disable both run reports and engagement events.\n   */\n  enabled?: boolean;\n  /**\n   * Enables Assistant Cloud engagement events. Defaults to `true` when\n   * telemetry is enabled. Set to `false` to keep run reports while disabling\n   * engagement events.\n   */\n  events?: boolean;\n  release?: string;\n  environment?: string;\n  tags?: string[];\n  /**\n   * Called before each telemetry report is sent.\n   * Return a modified report to enrich it (e.g. add `model_id`),\n   * or return `null` to skip the report.\n   */\n  beforeReport?: (\n    report: AssistantCloudRunReport,\n  ) => AssistantCloudRunReport | null;\n};\n\nexport type AssistantCloudConfig = (\n  | {\n      baseUrl: string;\n      authToken: () => Promise<string | null>;\n    }\n  | {\n      baseUrl?: string;\n      apiKey: string;\n      userId: string;\n      workspaceId: string;\n    }\n  | {\n      baseUrl: string;\n      anonymous: true;\n    }\n) & {\n  /**\n   * Client-side run telemetry reporting. Default: `true`.\n   *\n   * When enabled, the SDK automatically reports run metadata (status, step\n   * count, tool calls, and token usage) to Assistant Cloud after each\n   * assistant message is saved. No message content is sent.\n   *\n   * - `true` / `undefined` — enabled with defaults\n   * - `false` — disabled\n   * - `{ beforeReport }` — enabled with a hook to enrich or filter reports\n   */\n  telemetry?: boolean | AssistantCloudTelemetryConfig;\n};\n\nexport class CloudAPIError extends Error {\n  public readonly status: number;\n  public readonly code?: string;\n  public readonly details?: Record<string, unknown>;\n\n  constructor(\n    message: string,\n    status: number,\n    code?: string,\n    details?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.status = status;\n    if (code !== undefined) this.code = code;\n    if (details !== undefined) this.details = details;\n    this.name = \"CloudAPIError\";\n  }\n}\n\ntype MakeRequestOptions = {\n  method?: \"POST\" | \"PUT\" | \"DELETE\" | undefined;\n  headers?: Record<string, string> | undefined;\n  query?: Record<string, string | number | boolean> | undefined;\n  body?: object | undefined;\n  keepalive?: boolean | undefined;\n};\n\nexport class AssistantCloudAPI {\n  public _auth: AssistantCloudAuthStrategy;\n  public _baseUrl;\n\n  constructor(config: AssistantCloudConfig) {\n    if (\"authToken\" in config) {\n      this._baseUrl = normalizeBaseUrl(config.baseUrl);\n      this._auth = new AssistantCloudJWTAuthStrategy(config.authToken);\n    } else if (\"apiKey\" in config) {\n      this._baseUrl = normalizeBaseUrl(\n        config.baseUrl ?? \"https://backend.assistant-api.com\",\n      );\n      this._auth = new AssistantCloudAPIKeyAuthStrategy(\n        config.apiKey,\n        config.userId,\n        config.workspaceId,\n      );\n    } else if (\"anonymous\" in config) {\n      this._baseUrl = normalizeBaseUrl(config.baseUrl);\n      this._auth = new AssistantCloudAnonymousAuthStrategy(this._baseUrl);\n    } else {\n      throw new Error(\n        \"Invalid configuration: Must provide authToken, apiKey, or anonymous configuration\",\n      );\n    }\n  }\n\n  public async initializeAuth() {\n    return !!(await this._auth.getAuthHeaders());\n  }\n\n  public async makeRawRequest(\n    endpoint: string,\n    options: MakeRequestOptions = {},\n  ) {\n    const authHeaders = await this._auth.getAuthHeaders();\n    if (!authHeaders) throw new Error(\"Authorization failed\");\n\n    const headers = {\n      ...authHeaders,\n      ...options.headers,\n      \"Content-Type\": \"application/json\",\n    };\n\n    const queryParams = new URLSearchParams();\n    if (options.query) {\n      for (const [key, value] of Object.entries(options.query)) {\n        if (value === false) continue;\n        if (value === true) {\n          queryParams.set(key, \"true\");\n        } else {\n          queryParams.set(key, value.toString());\n        }\n      }\n    }\n\n    const url = new URL(`${this._baseUrl}/v1${endpoint}`);\n    url.search = queryParams.toString();\n\n    const response = await fetch(url, {\n      method: options.method ?? \"GET\",\n      headers,\n      body: options.body ? JSON.stringify(options.body) : null,\n      ...(options.keepalive ? { keepalive: true } : {}),\n    });\n\n    this._auth.readAuthHeaders(response.headers);\n\n    if (!response.ok) {\n      const text = await response.text();\n      let message: string | undefined;\n      let code: string | undefined;\n      let details: Record<string, unknown> | undefined;\n      try {\n        const body = JSON.parse(text) as unknown;\n        if (typeof body === \"object\" && body !== null && !Array.isArray(body)) {\n          const record = body as Record<string, unknown>;\n          if (typeof record.message === \"string\" && record.message.length > 0) {\n            message = record.message;\n          }\n          if (typeof record.error === \"string\") {\n            code = record.error;\n            details = { ...record };\n            delete details.error;\n          }\n        }\n      } catch {}\n      throw new CloudAPIError(\n        message ?? `Request failed with status ${response.status}, ${text}`,\n        response.status,\n        code,\n        details,\n      );\n    }\n\n    return response;\n  }\n\n  public async makeRequest(endpoint: string, options: MakeRequestOptions = {}) {\n    const response = await this.makeRawRequest(endpoint, options);\n    if (\n      response.status === 204 ||\n      response.headers.get(\"content-length\") === \"0\"\n    )\n      return undefined;\n\n    const text = await response.text();\n    if (text.trim() === \"\") return undefined;\n\n    return JSON.parse(text);\n  }\n}\n"],"mappings":";;AAgEA,IAAa,gBAAb,cAAmC,MAAM;CACvC;CACA;CACA;CAEA,YACE,SACA,QACA,MACA,SACA;EACA,MAAM,OAAO;EACb,KAAK,SAAS;EACd,IAAI,SAAS,KAAA,GAAW,KAAK,OAAO;EACpC,IAAI,YAAY,KAAA,GAAW,KAAK,UAAU;EAC1C,KAAK,OAAO;CACd;AACF;AAUA,IAAa,oBAAb,MAA+B;CAC7B;CACA;CAEA,YAAY,QAA8B;EACxC,IAAI,eAAe,QAAQ;GACzB,KAAK,WAAW,iBAAiB,OAAO,OAAO;GAC/C,KAAK,QAAQ,IAAI,8BAA8B,OAAO,SAAS;EACjE,OAAO,IAAI,YAAY,QAAQ;GAC7B,KAAK,WAAW,iBACd,OAAO,WAAW,mCACpB;GACA,KAAK,QAAQ,IAAI,iCACf,OAAO,QACP,OAAO,QACP,OAAO,WACT;EACF,OAAO,IAAI,eAAe,QAAQ;GAChC,KAAK,WAAW,iBAAiB,OAAO,OAAO;GAC/C,KAAK,QAAQ,IAAI,oCAAoC,KAAK,QAAQ;EACpE,OACE,MAAM,IAAI,MACR,mFACF;CAEJ;CAEA,MAAa,iBAAiB;EAC5B,OAAO,CAAC,CAAE,MAAM,KAAK,MAAM,eAAe;CAC5C;CAEA,MAAa,eACX,UACA,UAA8B,CAAC,GAC/B;EACA,MAAM,cAAc,MAAM,KAAK,MAAM,eAAe;EACpD,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,sBAAsB;EAExD,MAAM,UAAU;GACd,GAAG;GACH,GAAG,QAAQ;GACX,gBAAgB;EAClB;EAEA,MAAM,cAAc,IAAI,gBAAgB;EACxC,IAAI,QAAQ,OACV,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,KAAK,GAAG;GACxD,IAAI,UAAU,OAAO;GACrB,IAAI,UAAU,MACZ,YAAY,IAAI,KAAK,MAAM;QAE3B,YAAY,IAAI,KAAK,MAAM,SAAS,CAAC;EAEzC;EAGF,MAAM,MAAM,IAAI,IAAI,GAAG,KAAK,SAAS,KAAK,UAAU;EACpD,IAAI,SAAS,YAAY,SAAS;EAElC,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC,QAAQ,QAAQ,UAAU;GAC1B;GACA,MAAM,QAAQ,OAAO,KAAK,UAAU,QAAQ,IAAI,IAAI;GACpD,GAAI,QAAQ,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;EACjD,CAAC;EAED,KAAK,MAAM,gBAAgB,SAAS,OAAO;EAE3C,IAAI,CAAC,SAAS,IAAI;GAChB,MAAM,OAAO,MAAM,SAAS,KAAK;GACjC,IAAI;GACJ,IAAI;GACJ,IAAI;GACJ,IAAI;IACF,MAAM,OAAO,KAAK,MAAM,IAAI;IAC5B,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,CAAC,MAAM,QAAQ,IAAI,GAAG;KACrE,MAAM,SAAS;KACf,IAAI,OAAO,OAAO,YAAY,YAAY,OAAO,QAAQ,SAAS,GAChE,UAAU,OAAO;KAEnB,IAAI,OAAO,OAAO,UAAU,UAAU;MACpC,OAAO,OAAO;MACd,UAAU,EAAE,GAAG,OAAO;MACtB,OAAO,QAAQ;KACjB;IACF;GACF,QAAQ,CAAC;GACT,MAAM,IAAI,cACR,WAAW,8BAA8B,SAAS,OAAO,IAAI,QAC7D,SAAS,QACT,MACA,OACF;EACF;EAEA,OAAO;CACT;CAEA,MAAa,YAAY,UAAkB,UAA8B,CAAC,GAAG;EAC3E,MAAM,WAAW,MAAM,KAAK,eAAe,UAAU,OAAO;EAC5D,IACE,SAAS,WAAW,OACpB,SAAS,QAAQ,IAAI,gBAAgB,MAAM,KAE3C,OAAO,KAAA;EAET,MAAM,OAAO,MAAM,SAAS,KAAK;EACjC,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO,KAAA;EAE/B,OAAO,KAAK,MAAM,IAAI;CACxB;AACF"}

package/dist/AssistantCloudAuthStrategy.d.ts

@@ -22,6 +22,9 @@ declare class AssistantCloudAPIKeyAuthStrategy implements AssistantCloudAuthStra
   getAuthHeaders(): Promise<Record<string, string>>;
   readAuthHeaders(): void;
 }
+declare const normalizeBaseUrl: (baseUrl: string) => string;
+/** The refresh token of the anonymous identity this browser holds for `baseUrl`, or null when it has none. */
+declare const readAnonymousRefreshToken: (baseUrl: string) => string | null;
 declare class AssistantCloudAnonymousAuthStrategy implements AssistantCloudAuthStrategy {
   readonly strategy = "anon";
   private baseUrl;
@@ -31,5 +34,5 @@ declare class AssistantCloudAnonymousAuthStrategy implements AssistantCloudAuthS
   readAuthHeaders(headers: Headers): void;
 }
 //#endregion
-export { AssistantCloudAPIKeyAuthStrategy, AssistantCloudAnonymousAuthStrategy, AssistantCloudAuthStrategy, AssistantCloudJWTAuthStrategy };
+export { AssistantCloudAPIKeyAuthStrategy, AssistantCloudAnonymousAuthStrategy, AssistantCloudAuthStrategy, AssistantCloudJWTAuthStrategy, normalizeBaseUrl, readAnonymousRefreshToken };
 //# sourceMappingURL=AssistantCloudAuthStrategy.d.ts.map

package/dist/AssistantCloudAuthStrategy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantCloudAuthStrategy.d.ts","names":[],"sources":["../src/AssistantCloudAuthStrategy.ts"],"mappings":";KAMY;WACD;EACT,kBAAkB,QAAQ;EAC1B,gBAAgB,SAAS;;cAmFd,yCAAyC;;WACpC;UAER;UACA;UACA;EAGI,YAAA,yBAAyB;EAIxB,kBAAkB,QAAQ;UA0BzB;EAUP,gBAAgB,SAAS;;cAcrB,4CAA4C;;WACvC;EAMJ,YAAA,gBAAgB,gBAAgB;EAM/B,kBAAkB,QAAQ;EAQhC;;cA0EI,+CAA+C;WAC1C;UAER;UACA;EAEI,YAAA;EAoEC,kBAAkB,QAAQ;EAIhC,gBAAgB,SAAS"}
+{"version":3,"file":"AssistantCloudAuthStrategy.d.ts","names":[],"sources":["../src/AssistantCloudAuthStrategy.ts"],"mappings":";KAkCY;WACD;EACT,kBAAkB,QAAQ;EAC1B,gBAAgB,SAAS;;cAmFd,yCAAyC;;WACpC;UAER;UACA;UACA;EAGI,YAAA,yBAAyB;EAIxB,kBAAkB,QAAQ;UA0BzB;EAUP,gBAAgB,SAAS;;cAcrB,4CAA4C;;WACvC;EAMJ,YAAA,gBAAgB,gBAAgB;EAM/B,kBAAkB,QAAQ;EAQhC;;cAuDI,mBAAoB;;cAMpB,4BAA6B;cAwE7B,+CAA+C;WAC1C;UAER;UACA;EAEI,YAAA;EAwFC,kBAAkB,QAAQ;EAIhC,gBAAgB,SAAS"}

package/dist/AssistantCloudAuthStrategy.js

@@ -1,5 +1,22 @@
 import { CloudResponseError, readCloudRecord, readCloudString } from "./cloudResponse.js";
 //#region src/AssistantCloudAuthStrategy.ts
+const AUTH_TOKEN_REQUEST_TIMEOUT_MS = 3e4;
+const withAuthTokenDeadline = async (operation, run) => {
+	const controller = new AbortController();
+	let timedOut = false;
+	const timeout = setTimeout(() => {
+		timedOut = true;
+		controller.abort();
+	}, AUTH_TOKEN_REQUEST_TIMEOUT_MS);
+	try {
+		return await run(controller.signal);
+	} catch (error) {
+		if (timedOut) throw new Error(`Assistant Cloud ${operation} timed out after ${AUTH_TOKEN_REQUEST_TIMEOUT_MS}ms`, { cause: error });
+		throw error;
+	} finally {
+		clearTimeout(timeout);
+	}
+};
 const getJwtExpiry = (jwt) => {
 	try {
 		const bodyPart = jwt.split(".")[1];
@@ -135,6 +152,16 @@ const readRefreshToken = (baseUrl) => {
 		return;
 	}
 };
+const normalizeBaseUrl = (baseUrl) => {
+	if (!baseUrl || !baseUrl.endsWith("/")) return baseUrl;
+	return baseUrl.slice(0, -1);
+};
+/** The refresh token of the anonymous identity this browser holds for `baseUrl`, or null when it has none. */
+const readAnonymousRefreshToken = (baseUrl) => {
+	const refreshToken = readRefreshToken(normalizeBaseUrl(baseUrl));
+	if (!refreshToken) return null;
+	return new Date(refreshToken.expires_at).getTime() - Date.now() > 3e4 ? refreshToken.token : null;
+};
 const writeRefreshToken = (baseUrl, refreshToken) => {
 	const storage = getLocalStorage();
 	if (!storage) return;
@@ -149,36 +176,70 @@ const removeRefreshToken = (baseUrl) => {
 		storage.removeItem(getRefreshTokenName(baseUrl));
 	} catch {}
 };
+const anonymousAuthTokenRequests = /* @__PURE__ */ new WeakMap();
+const getWebLockManager = () => {
+	if (!("navigator" in globalThis)) return null;
+	return globalThis.navigator?.locks ?? null;
+};
+const getAnonymousAuthLockName = (baseUrl) => `assistant-cloud:anonymous-auth:${baseUrl}`;
+const getSharedAnonymousAuthToken = (baseUrl, requestToken) => {
+	const storage = getLocalStorage();
+	if (!storage) return requestToken();
+	let storageRequests = anonymousAuthTokenRequests.get(storage);
+	if (!storageRequests) {
+		storageRequests = /* @__PURE__ */ new Map();
+		anonymousAuthTokenRequests.set(storage, storageRequests);
+	}
+	const activeRequest = storageRequests.get(baseUrl);
+	if (activeRequest) return activeRequest;
+	const locks = getWebLockManager();
+	const sharedRequest = (locks ? locks.request(getAnonymousAuthLockName(baseUrl), requestToken) : requestToken()).finally(() => {
+		if (storageRequests.get(baseUrl) === sharedRequest) storageRequests.delete(baseUrl);
+	});
+	storageRequests.set(baseUrl, sharedRequest);
+	return sharedRequest;
+};
 var AssistantCloudAnonymousAuthStrategy = class {
 	strategy = "anon";
 	baseUrl;
 	jwtStrategy;
 	constructor(baseUrl) {
 		this.baseUrl = baseUrl;
-		this.jwtStrategy = new AssistantCloudJWTAuthStrategy(async () => {
+		const requestAuthToken = async () => {
 			const currentTime = Date.now();
 			const storedRefreshToken = readRefreshToken(this.baseUrl);
 			if (storedRefreshToken) {
 				if (new Date(storedRefreshToken.expires_at).getTime() - currentTime > 3e4) {
-					const response = await fetch(`${this.baseUrl}/v1/auth/tokens/refresh`, {
-						method: "POST",
-						headers: { "Content-Type": "application/json" },
-						body: JSON.stringify({ refresh_token: storedRefreshToken.token })
+					const refreshedAccessToken = await withAuthTokenDeadline("refresh token request", async (signal) => {
+						const response = await fetch(`${this.baseUrl}/v1/auth/tokens/refresh`, {
+							method: "POST",
+							headers: { "Content-Type": "application/json" },
+							body: JSON.stringify({ refresh_token: storedRefreshToken.token }),
+							signal
+						});
+						if (response.ok) {
+							const { data, accessToken } = await readAuthTokenResponse(response, "refresh auth token response");
+							if (data.refresh_token != null) writeRefreshToken(this.baseUrl, readRefreshTokenResponse(data.refresh_token, "refresh auth token response.refresh_token"));
+							return accessToken;
+						}
+						if (response.status === 429 || response.status >= 500) throw new Error(`Assistant Cloud token refresh failed with status ${response.status}`);
+						return null;
 					});
-					if (response.ok) {
-						const { data, accessToken } = await readAuthTokenResponse(response, "refresh auth token response");
-						if (data.refresh_token != null) writeRefreshToken(this.baseUrl, readRefreshTokenResponse(data.refresh_token, "refresh auth token response.refresh_token"));
-						return accessToken;
-					}
-					if (response.status === 429 || response.status >= 500) throw new Error(`Assistant Cloud token refresh failed with status ${response.status}`);
+					if (refreshedAccessToken !== null) return refreshedAccessToken;
 				} else removeRefreshToken(this.baseUrl);
 			}
-			const response = await fetch(`${this.baseUrl}/v1/auth/tokens/anonymous`, { method: "POST" });
-			if (!response.ok) return null;
-			const { data, accessToken } = await readAuthTokenResponse(response, "anonymous auth token response");
-			writeRefreshToken(this.baseUrl, readRefreshTokenResponse(data.refresh_token, "anonymous auth token response.refresh_token"));
-			return accessToken;
-		});
+			return withAuthTokenDeadline("anonymous token request", async (signal) => {
+				const response = await fetch(`${this.baseUrl}/v1/auth/tokens/anonymous`, {
+					method: "POST",
+					signal
+				});
+				if (!response.ok) return null;
+				const { data, accessToken } = await readAuthTokenResponse(response, "anonymous auth token response");
+				writeRefreshToken(this.baseUrl, readRefreshTokenResponse(data.refresh_token, "anonymous auth token response.refresh_token"));
+				return accessToken;
+			});
+		};
+		this.jwtStrategy = new AssistantCloudJWTAuthStrategy(() => getSharedAnonymousAuthToken(this.baseUrl, requestAuthToken));
 	}
 	async getAuthHeaders() {
 		return this.jwtStrategy.getAuthHeaders();
@@ -188,6 +249,6 @@ var AssistantCloudAnonymousAuthStrategy = class {
 	}
 };
 //#endregion
-export { AssistantCloudAPIKeyAuthStrategy, AssistantCloudAnonymousAuthStrategy, AssistantCloudJWTAuthStrategy };
+export { AssistantCloudAPIKeyAuthStrategy, AssistantCloudAnonymousAuthStrategy, AssistantCloudJWTAuthStrategy, normalizeBaseUrl, readAnonymousRefreshToken };
 
 //# sourceMappingURL=AssistantCloudAuthStrategy.js.map

package/dist/AssistantCloudAuthStrategy.js.map

@@ -1 +1 @@
-{"version":3,"file":"AssistantCloudAuthStrategy.js","names":["#authTokenCallback","#apiKey","#userId","#workspaceId"],"sources":["../src/AssistantCloudAuthStrategy.ts"],"sourcesContent":["import {\n  CloudResponseError,\n  readCloudRecord,\n  readCloudString,\n} from \"./cloudResponse\";\n\nexport type AssistantCloudAuthStrategy = {\n  readonly strategy: \"anon\" | \"jwt\" | \"api-key\";\n  getAuthHeaders(): Promise<Record<string, string> | false>;\n  readAuthHeaders(headers: Headers): void;\n};\n\nconst getJwtExpiry = (jwt: string): number => {\n  try {\n    const parts = jwt.split(\".\");\n    const bodyPart = parts[1];\n    if (!bodyPart) {\n      throw new Error(\"Invalid JWT format\");\n    }\n\n    // Convert from Base64Url to Base64 and add padding if necessary\n    let base64 = bodyPart.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    while (base64.length % 4 !== 0) {\n      base64 += \"=\";\n    }\n\n    // Decode the Base64 string and parse the payload\n    const payload = atob(base64);\n    const payloadObj = JSON.parse(payload);\n    const exp = payloadObj.exp;\n\n    if (!exp || typeof exp !== \"number\") {\n      throw new Error('JWT does not contain a valid \"exp\" field');\n    }\n\n    // Convert expiration time to milliseconds\n    return exp * 1000;\n  } catch (error) {\n    throw new Error(`Unable to determine the token expiry: ${error}`);\n  }\n};\n\ntype RefreshToken = {\n  token: string;\n  expires_at: string;\n};\n\nconst readNonEmptyCloudString = (value: unknown, field: string): string => {\n  const result = readCloudString(value, field);\n  if (result.length === 0) {\n    throw new CloudResponseError(\n      `Invalid Assistant Cloud response for \"${field}\": expected a non-empty string`,\n    );\n  }\n  return result;\n};\n\nconst readRefreshTokenResponse = (\n  value: unknown,\n  field: string,\n): RefreshToken => {\n  const refreshToken = readCloudRecord(value, field);\n  return {\n    token: readNonEmptyCloudString(refreshToken.token, `${field}.token`),\n    expires_at: readNonEmptyCloudString(\n      refreshToken.expires_at,\n      `${field}.expires_at`,\n    ),\n  };\n};\n\nconst readAuthTokenResponse = async (\n  response: Response,\n  field: string,\n): Promise<{ data: Record<string, unknown>; accessToken: string }> => {\n  let value: unknown;\n  try {\n    value = await response.json();\n  } catch {\n    throw new CloudResponseError(\n      `Invalid Assistant Cloud response for \"${field}\": expected valid JSON`,\n    );\n  }\n\n  const data = readCloudRecord(value, field);\n  const accessToken = readNonEmptyCloudString(\n    data.access_token,\n    `${field}.access_token`,\n  );\n  return { data, accessToken };\n};\n\nexport class AssistantCloudJWTAuthStrategy implements AssistantCloudAuthStrategy {\n  public readonly strategy = \"jwt\";\n\n  private cachedToken: string | null = null;\n  private tokenExpiry: number | null = null;\n  private tokenRequest: Promise<Record<string, string> | false> | null = null;\n  #authTokenCallback: () => Promise<string | null>;\n\n  constructor(authTokenCallback: () => Promise<string | null>) {\n    this.#authTokenCallback = authTokenCallback;\n  }\n\n  public async getAuthHeaders(): Promise<Record<string, string> | false> {\n    const currentTime = Date.now();\n\n    // Use cached token if it's valid for at least 30 more seconds\n    if (\n      this.cachedToken &&\n      this.tokenExpiry &&\n      this.tokenExpiry - currentTime > 30 * 1000\n    ) {\n      return { Authorization: `Bearer ${this.cachedToken}` };\n    }\n\n    if (!this.tokenRequest) {\n      this.tokenRequest = this.fetchAuthHeaders();\n    }\n\n    const tokenRequest = this.tokenRequest;\n    try {\n      return await tokenRequest;\n    } finally {\n      if (this.tokenRequest === tokenRequest) {\n        this.tokenRequest = null;\n      }\n    }\n  }\n\n  private async fetchAuthHeaders(): Promise<Record<string, string> | false> {\n    const token = await this.#authTokenCallback();\n    if (!token) return false;\n\n    this.cachedToken = token;\n    this.tokenExpiry = getJwtExpiry(token);\n\n    return { Authorization: `Bearer ${token}` };\n  }\n\n  public readAuthHeaders(headers: Headers) {\n    const authHeader = headers.get(\"Authorization\");\n    if (!authHeader) return;\n\n    const [scheme, token] = authHeader.split(\" \");\n    if (scheme !== \"Bearer\" || !token) {\n      throw new Error(\"Invalid auth header received\");\n    }\n\n    this.cachedToken = token;\n    this.tokenExpiry = getJwtExpiry(token);\n  }\n}\n\nexport class AssistantCloudAPIKeyAuthStrategy implements AssistantCloudAuthStrategy {\n  public readonly strategy = \"api-key\";\n\n  #apiKey: string;\n  #userId: string;\n  #workspaceId: string;\n\n  constructor(apiKey: string, userId: string, workspaceId: string) {\n    this.#apiKey = apiKey;\n    this.#userId = userId;\n    this.#workspaceId = workspaceId;\n  }\n\n  public async getAuthHeaders(): Promise<Record<string, string>> {\n    return {\n      Authorization: `Bearer ${this.#apiKey}`,\n      \"Aui-User-Id\": this.#userId,\n      \"Aui-Workspace-Id\": this.#workspaceId,\n    };\n  }\n\n  public readAuthHeaders() {\n    // No operation needed for API key auth\n  }\n}\n\nconst LEGACY_AUI_REFRESH_TOKEN_NAME = \"aui:refresh_token\";\n\nconst getRefreshTokenName = (baseUrl: string): string =>\n  `${LEGACY_AUI_REFRESH_TOKEN_NAME}:${baseUrl}`;\n\nconst removeLegacyRefreshToken = (storage: Storage): void => {\n  try {\n    storage.removeItem(LEGACY_AUI_REFRESH_TOKEN_NAME);\n  } catch {}\n};\n\nconst getLocalStorage = (): Storage | null => {\n  if (!(\"localStorage\" in globalThis)) return null;\n  try {\n    return (globalThis as { localStorage: Storage }).localStorage;\n  } catch {\n    return null;\n  }\n};\n\nconst readRefreshToken = (baseUrl: string): RefreshToken | undefined => {\n  const storage = getLocalStorage();\n  if (!storage) return undefined;\n  try {\n    const name = getRefreshTokenName(baseUrl);\n    const value = storage.getItem(name);\n    if (value) {\n      removeLegacyRefreshToken(storage);\n      return JSON.parse(value) as RefreshToken;\n    }\n\n    const legacyValue = storage.getItem(LEGACY_AUI_REFRESH_TOKEN_NAME);\n    if (!legacyValue) return undefined;\n\n    let refreshToken: RefreshToken;\n    try {\n      refreshToken = JSON.parse(legacyValue) as RefreshToken;\n    } catch {\n      removeLegacyRefreshToken(storage);\n      return undefined;\n    }\n\n    storage.setItem(name, legacyValue);\n    removeLegacyRefreshToken(storage);\n    return refreshToken;\n  } catch {\n    return undefined;\n  }\n};\n\nconst writeRefreshToken = (\n  baseUrl: string,\n  refreshToken: RefreshToken,\n): void => {\n  const storage = getLocalStorage();\n  if (!storage) return;\n  try {\n    storage.setItem(getRefreshTokenName(baseUrl), JSON.stringify(refreshToken));\n  } catch {}\n};\n\nconst removeRefreshToken = (baseUrl: string): void => {\n  const storage = getLocalStorage();\n  if (!storage) return;\n  try {\n    storage.removeItem(getRefreshTokenName(baseUrl));\n  } catch {}\n};\n\nexport class AssistantCloudAnonymousAuthStrategy implements AssistantCloudAuthStrategy {\n  public readonly strategy = \"anon\";\n\n  private baseUrl: string;\n  private jwtStrategy: AssistantCloudJWTAuthStrategy;\n\n  constructor(baseUrl: string) {\n    this.baseUrl = baseUrl;\n    this.jwtStrategy = new AssistantCloudJWTAuthStrategy(async () => {\n      const currentTime = Date.now();\n      const storedRefreshToken = readRefreshToken(this.baseUrl);\n\n      if (storedRefreshToken) {\n        const refreshExpiry = new Date(storedRefreshToken.expires_at).getTime();\n        if (refreshExpiry - currentTime > 30 * 1000) {\n          const response = await fetch(\n            `${this.baseUrl}/v1/auth/tokens/refresh`,\n            {\n              method: \"POST\",\n              headers: { \"Content-Type\": \"application/json\" },\n              body: JSON.stringify({ refresh_token: storedRefreshToken.token }),\n            },\n          );\n\n          if (response.ok) {\n            const { data, accessToken } = await readAuthTokenResponse(\n              response,\n              \"refresh auth token response\",\n            );\n            if (data.refresh_token != null) {\n              writeRefreshToken(\n                this.baseUrl,\n                readRefreshTokenResponse(\n                  data.refresh_token,\n                  \"refresh auth token response.refresh_token\",\n                ),\n              );\n            }\n            return accessToken;\n          }\n\n          if (response.status === 429 || response.status >= 500) {\n            throw new Error(\n              `Assistant Cloud token refresh failed with status ${response.status}`,\n            );\n          }\n        } else {\n          removeRefreshToken(this.baseUrl);\n        }\n      }\n\n      // No valid refresh token; request a new anonymous token\n      const response = await fetch(`${this.baseUrl}/v1/auth/tokens/anonymous`, {\n        method: \"POST\",\n      });\n\n      if (!response.ok) return null;\n\n      const { data, accessToken } = await readAuthTokenResponse(\n        response,\n        \"anonymous auth token response\",\n      );\n\n      writeRefreshToken(\n        this.baseUrl,\n        readRefreshTokenResponse(\n          data.refresh_token,\n          \"anonymous auth token response.refresh_token\",\n        ),\n      );\n      return accessToken;\n    });\n  }\n\n  public async getAuthHeaders(): Promise<Record<string, string> | false> {\n    return this.jwtStrategy.getAuthHeaders();\n  }\n\n  public readAuthHeaders(headers: Headers): void {\n    this.jwtStrategy.readAuthHeaders(headers);\n  }\n}\n"],"mappings":";;AAYA,MAAM,gBAAgB,QAAwB;CAC5C,IAAI;EAEF,MAAM,WADQ,IAAI,MAAM,GACH,CAAC,CAAC;EACvB,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,oBAAoB;EAItC,IAAI,SAAS,SAAS,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;EAC1D,OAAO,OAAO,SAAS,MAAM,GAC3B,UAAU;EAIZ,MAAM,UAAU,KAAK,MAAM;EAE3B,MAAM,MADa,KAAK,MAAM,OACT,CAAC,CAAC;EAEvB,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,MAAM,IAAI,MAAM,4CAA0C;EAI5D,OAAO,MAAM;CACf,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,yCAAyC,OAAO;CAClE;AACF;AAOA,MAAM,2BAA2B,OAAgB,UAA0B;CACzE,MAAM,SAAS,gBAAgB,OAAO,KAAK;CAC3C,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,mBACR,yCAAyC,MAAM,+BACjD;CAEF,OAAO;AACT;AAEA,MAAM,4BACJ,OACA,UACiB;CACjB,MAAM,eAAe,gBAAgB,OAAO,KAAK;CACjD,OAAO;EACL,OAAO,wBAAwB,aAAa,OAAO,GAAG,MAAM,OAAO;EACnE,YAAY,wBACV,aAAa,YACb,GAAG,MAAM,YACX;CACF;AACF;AAEA,MAAM,wBAAwB,OAC5B,UACA,UACoE;CACpE,IAAI;CACJ,IAAI;EACF,QAAQ,MAAM,SAAS,KAAK;CAC9B,QAAQ;EACN,MAAM,IAAI,mBACR,yCAAyC,MAAM,uBACjD;CACF;CAEA,MAAM,OAAO,gBAAgB,OAAO,KAAK;CAKzC,OAAO;EAAE;EAAM,aAJK,wBAClB,KAAK,cACL,GAAG,MAAM,cAEc;CAAE;AAC7B;AAEA,IAAa,gCAAb,MAAiF;CAC/E,WAA2B;CAE3B,cAAqC;CACrC,cAAqC;CACrC,eAAuE;CACvE;CAEA,YAAY,mBAAiD;EAC3D,KAAKA,qBAAqB;CAC5B;CAEA,MAAa,iBAA0D;EACrE,MAAM,cAAc,KAAK,IAAI;EAG7B,IACE,KAAK,eACL,KAAK,eACL,KAAK,cAAc,cAAc,KAEjC,OAAO,EAAE,eAAe,UAAU,KAAK,cAAc;EAGvD,IAAI,CAAC,KAAK,cACR,KAAK,eAAe,KAAK,iBAAiB;EAG5C,MAAM,eAAe,KAAK;EAC1B,IAAI;GACF,OAAO,MAAM;EACf,UAAU;GACR,IAAI,KAAK,iBAAiB,cACxB,KAAK,eAAe;EAExB;CACF;CAEA,MAAc,mBAA4D;EACxE,MAAM,QAAQ,MAAM,KAAKA,mBAAmB;EAC5C,IAAI,CAAC,OAAO,OAAO;EAEnB,KAAK,cAAc;EACnB,KAAK,cAAc,aAAa,KAAK;EAErC,OAAO,EAAE,eAAe,UAAU,QAAQ;CAC5C;CAEA,gBAAuB,SAAkB;EACvC,MAAM,aAAa,QAAQ,IAAI,eAAe;EAC9C,IAAI,CAAC,YAAY;EAEjB,MAAM,CAAC,QAAQ,SAAS,WAAW,MAAM,GAAG;EAC5C,IAAI,WAAW,YAAY,CAAC,OAC1B,MAAM,IAAI,MAAM,8BAA8B;EAGhD,KAAK,cAAc;EACnB,KAAK,cAAc,aAAa,KAAK;CACvC;AACF;AAEA,IAAa,mCAAb,MAAoF;CAClF,WAA2B;CAE3B;CACA;CACA;CAEA,YAAY,QAAgB,QAAgB,aAAqB;EAC/D,KAAKC,UAAU;EACf,KAAKC,UAAU;EACf,KAAKC,eAAe;CACtB;CAEA,MAAa,iBAAkD;EAC7D,OAAO;GACL,eAAe,UAAU,KAAKF;GAC9B,eAAe,KAAKC;GACpB,oBAAoB,KAAKC;EAC3B;CACF;CAEA,kBAAyB,CAEzB;AACF;AAEA,MAAM,gCAAgC;AAEtC,MAAM,uBAAuB,YAC3B,GAAG,8BAA8B,GAAG;AAEtC,MAAM,4BAA4B,YAA2B;CAC3D,IAAI;EACF,QAAQ,WAAW,6BAA6B;CAClD,QAAQ,CAAC;AACX;AAEA,MAAM,wBAAwC;CAC5C,IAAI,EAAE,kBAAkB,aAAa,OAAO;CAC5C,IAAI;EACF,OAAQ,WAAyC;CACnD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,oBAAoB,YAA8C;CACtE,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,IAAI;EACF,MAAM,OAAO,oBAAoB,OAAO;EACxC,MAAM,QAAQ,QAAQ,QAAQ,IAAI;EAClC,IAAI,OAAO;GACT,yBAAyB,OAAO;GAChC,OAAO,KAAK,MAAM,KAAK;EACzB;EAEA,MAAM,cAAc,QAAQ,QAAQ,6BAA6B;EACjE,IAAI,CAAC,aAAa,OAAO,KAAA;EAEzB,IAAI;EACJ,IAAI;GACF,eAAe,KAAK,MAAM,WAAW;EACvC,QAAQ;GACN,yBAAyB,OAAO;GAChC;EACF;EAEA,QAAQ,QAAQ,MAAM,WAAW;EACjC,yBAAyB,OAAO;EAChC,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,MAAM,qBACJ,SACA,iBACS;CACT,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS;CACd,IAAI;EACF,QAAQ,QAAQ,oBAAoB,OAAO,GAAG,KAAK,UAAU,YAAY,CAAC;CAC5E,QAAQ,CAAC;AACX;AAEA,MAAM,sBAAsB,YAA0B;CACpD,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS;CACd,IAAI;EACF,QAAQ,WAAW,oBAAoB,OAAO,CAAC;CACjD,QAAQ,CAAC;AACX;AAEA,IAAa,sCAAb,MAAuF;CACrF,WAA2B;CAE3B;CACA;CAEA,YAAY,SAAiB;EAC3B,KAAK,UAAU;EACf,KAAK,cAAc,IAAI,8BAA8B,YAAY;GAC/D,MAAM,cAAc,KAAK,IAAI;GAC7B,MAAM,qBAAqB,iBAAiB,KAAK,OAAO;GAExD,IAAI,oBAAoB;IAEtB,IADsB,IAAI,KAAK,mBAAmB,UAAU,CAAC,CAAC,QAC9C,IAAI,cAAc,KAAW;KAC3C,MAAM,WAAW,MAAM,MACrB,GAAG,KAAK,QAAQ,0BAChB;MACE,QAAQ;MACR,SAAS,EAAE,gBAAgB,mBAAmB;MAC9C,MAAM,KAAK,UAAU,EAAE,eAAe,mBAAmB,MAAM,CAAC;KAClE,CACF;KAEA,IAAI,SAAS,IAAI;MACf,MAAM,EAAE,MAAM,gBAAgB,MAAM,sBAClC,UACA,6BACF;MACA,IAAI,KAAK,iBAAiB,MACxB,kBACE,KAAK,SACL,yBACE,KAAK,eACL,2CACF,CACF;MAEF,OAAO;KACT;KAEA,IAAI,SAAS,WAAW,OAAO,SAAS,UAAU,KAChD,MAAM,IAAI,MACR,oDAAoD,SAAS,QAC/D;IAEJ,OACE,mBAAmB,KAAK,OAAO;GAEnC;GAGA,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,QAAQ,4BAA4B,EACvE,QAAQ,OACV,CAAC;GAED,IAAI,CAAC,SAAS,IAAI,OAAO;GAEzB,MAAM,EAAE,MAAM,gBAAgB,MAAM,sBAClC,UACA,+BACF;GAEA,kBACE,KAAK,SACL,yBACE,KAAK,eACL,6CACF,CACF;GACA,OAAO;EACT,CAAC;CACH;CAEA,MAAa,iBAA0D;EACrE,OAAO,KAAK,YAAY,eAAe;CACzC;CAEA,gBAAuB,SAAwB;EAC7C,KAAK,YAAY,gBAAgB,OAAO;CAC1C;AACF"}
+{"version":3,"file":"AssistantCloudAuthStrategy.js","names":[],"sources":["../src/AssistantCloudAuthStrategy.ts"],"sourcesContent":["import {\n  CloudResponseError,\n  readCloudRecord,\n  readCloudString,\n} from \"./cloudResponse\";\n\nconst AUTH_TOKEN_REQUEST_TIMEOUT_MS = 30_000;\n\nconst withAuthTokenDeadline = async <T>(\n  operation: string,\n  run: (signal: AbortSignal) => Promise<T>,\n): Promise<T> => {\n  const controller = new AbortController();\n  let timedOut = false;\n  const timeout = setTimeout(() => {\n    timedOut = true;\n    controller.abort();\n  }, AUTH_TOKEN_REQUEST_TIMEOUT_MS);\n\n  try {\n    return await run(controller.signal);\n  } catch (error) {\n    if (timedOut) {\n      throw new Error(\n        `Assistant Cloud ${operation} timed out after ${AUTH_TOKEN_REQUEST_TIMEOUT_MS}ms`,\n        { cause: error },\n      );\n    }\n    throw error;\n  } finally {\n    clearTimeout(timeout);\n  }\n};\n\nexport type AssistantCloudAuthStrategy = {\n  readonly strategy: \"anon\" | \"jwt\" | \"api-key\";\n  getAuthHeaders(): Promise<Record<string, string> | false>;\n  readAuthHeaders(headers: Headers): void;\n};\n\nconst getJwtExpiry = (jwt: string): number => {\n  try {\n    const parts = jwt.split(\".\");\n    const bodyPart = parts[1];\n    if (!bodyPart) {\n      throw new Error(\"Invalid JWT format\");\n    }\n\n    // Convert from Base64Url to Base64 and add padding if necessary\n    let base64 = bodyPart.replace(/-/g, \"+\").replace(/_/g, \"/\");\n    while (base64.length % 4 !== 0) {\n      base64 += \"=\";\n    }\n\n    // Decode the Base64 string and parse the payload\n    const payload = atob(base64);\n    const payloadObj = JSON.parse(payload);\n    const exp = payloadObj.exp;\n\n    if (!exp || typeof exp !== \"number\") {\n      throw new Error('JWT does not contain a valid \"exp\" field');\n    }\n\n    // Convert expiration time to milliseconds\n    return exp * 1000;\n  } catch (error) {\n    throw new Error(`Unable to determine the token expiry: ${error}`);\n  }\n};\n\ntype RefreshToken = {\n  token: string;\n  expires_at: string;\n};\n\nconst readNonEmptyCloudString = (value: unknown, field: string): string => {\n  const result = readCloudString(value, field);\n  if (result.length === 0) {\n    throw new CloudResponseError(\n      `Invalid Assistant Cloud response for \"${field}\": expected a non-empty string`,\n    );\n  }\n  return result;\n};\n\nconst readRefreshTokenResponse = (\n  value: unknown,\n  field: string,\n): RefreshToken => {\n  const refreshToken = readCloudRecord(value, field);\n  return {\n    token: readNonEmptyCloudString(refreshToken.token, `${field}.token`),\n    expires_at: readNonEmptyCloudString(\n      refreshToken.expires_at,\n      `${field}.expires_at`,\n    ),\n  };\n};\n\nconst readAuthTokenResponse = async (\n  response: Response,\n  field: string,\n): Promise<{ data: Record<string, unknown>; accessToken: string }> => {\n  let value: unknown;\n  try {\n    value = await response.json();\n  } catch {\n    throw new CloudResponseError(\n      `Invalid Assistant Cloud response for \"${field}\": expected valid JSON`,\n    );\n  }\n\n  const data = readCloudRecord(value, field);\n  const accessToken = readNonEmptyCloudString(\n    data.access_token,\n    `${field}.access_token`,\n  );\n  return { data, accessToken };\n};\n\nexport class AssistantCloudJWTAuthStrategy implements AssistantCloudAuthStrategy {\n  public readonly strategy = \"jwt\";\n\n  private cachedToken: string | null = null;\n  private tokenExpiry: number | null = null;\n  private tokenRequest: Promise<Record<string, string> | false> | null = null;\n  #authTokenCallback: () => Promise<string | null>;\n\n  constructor(authTokenCallback: () => Promise<string | null>) {\n    this.#authTokenCallback = authTokenCallback;\n  }\n\n  public async getAuthHeaders(): Promise<Record<string, string> | false> {\n    const currentTime = Date.now();\n\n    // Use cached token if it's valid for at least 30 more seconds\n    if (\n      this.cachedToken &&\n      this.tokenExpiry &&\n      this.tokenExpiry - currentTime > 30 * 1000\n    ) {\n      return { Authorization: `Bearer ${this.cachedToken}` };\n    }\n\n    if (!this.tokenRequest) {\n      this.tokenRequest = this.fetchAuthHeaders();\n    }\n\n    const tokenRequest = this.tokenRequest;\n    try {\n      return await tokenRequest;\n    } finally {\n      if (this.tokenRequest === tokenRequest) {\n        this.tokenRequest = null;\n      }\n    }\n  }\n\n  private async fetchAuthHeaders(): Promise<Record<string, string> | false> {\n    const token = await this.#authTokenCallback();\n    if (!token) return false;\n\n    this.cachedToken = token;\n    this.tokenExpiry = getJwtExpiry(token);\n\n    return { Authorization: `Bearer ${token}` };\n  }\n\n  public readAuthHeaders(headers: Headers) {\n    const authHeader = headers.get(\"Authorization\");\n    if (!authHeader) return;\n\n    const [scheme, token] = authHeader.split(\" \");\n    if (scheme !== \"Bearer\" || !token) {\n      throw new Error(\"Invalid auth header received\");\n    }\n\n    this.cachedToken = token;\n    this.tokenExpiry = getJwtExpiry(token);\n  }\n}\n\nexport class AssistantCloudAPIKeyAuthStrategy implements AssistantCloudAuthStrategy {\n  public readonly strategy = \"api-key\";\n\n  #apiKey: string;\n  #userId: string;\n  #workspaceId: string;\n\n  constructor(apiKey: string, userId: string, workspaceId: string) {\n    this.#apiKey = apiKey;\n    this.#userId = userId;\n    this.#workspaceId = workspaceId;\n  }\n\n  public async getAuthHeaders(): Promise<Record<string, string>> {\n    return {\n      Authorization: `Bearer ${this.#apiKey}`,\n      \"Aui-User-Id\": this.#userId,\n      \"Aui-Workspace-Id\": this.#workspaceId,\n    };\n  }\n\n  public readAuthHeaders() {\n    // No operation needed for API key auth\n  }\n}\n\nconst LEGACY_AUI_REFRESH_TOKEN_NAME = \"aui:refresh_token\";\n\nconst getRefreshTokenName = (baseUrl: string): string =>\n  `${LEGACY_AUI_REFRESH_TOKEN_NAME}:${baseUrl}`;\n\nconst removeLegacyRefreshToken = (storage: Storage): void => {\n  try {\n    storage.removeItem(LEGACY_AUI_REFRESH_TOKEN_NAME);\n  } catch {}\n};\n\nconst getLocalStorage = (): Storage | null => {\n  if (!(\"localStorage\" in globalThis)) return null;\n  try {\n    return (globalThis as { localStorage: Storage }).localStorage;\n  } catch {\n    return null;\n  }\n};\n\nconst readRefreshToken = (baseUrl: string): RefreshToken | undefined => {\n  const storage = getLocalStorage();\n  if (!storage) return undefined;\n  try {\n    const name = getRefreshTokenName(baseUrl);\n    const value = storage.getItem(name);\n    if (value) {\n      removeLegacyRefreshToken(storage);\n      return JSON.parse(value) as RefreshToken;\n    }\n\n    const legacyValue = storage.getItem(LEGACY_AUI_REFRESH_TOKEN_NAME);\n    if (!legacyValue) return undefined;\n\n    let refreshToken: RefreshToken;\n    try {\n      refreshToken = JSON.parse(legacyValue) as RefreshToken;\n    } catch {\n      removeLegacyRefreshToken(storage);\n      return undefined;\n    }\n\n    storage.setItem(name, legacyValue);\n    removeLegacyRefreshToken(storage);\n    return refreshToken;\n  } catch {\n    return undefined;\n  }\n};\n\nexport const normalizeBaseUrl = (baseUrl: string): string => {\n  if (!baseUrl || !baseUrl.endsWith(\"/\")) return baseUrl;\n  return baseUrl.slice(0, -1);\n};\n\n/** The refresh token of the anonymous identity this browser holds for `baseUrl`, or null when it has none. */\nexport const readAnonymousRefreshToken = (baseUrl: string): string | null => {\n  const refreshToken = readRefreshToken(normalizeBaseUrl(baseUrl));\n  if (!refreshToken) return null;\n  const refreshExpiry = new Date(refreshToken.expires_at).getTime();\n  return refreshExpiry - Date.now() > 30 * 1000 ? refreshToken.token : null;\n};\n\nconst writeRefreshToken = (\n  baseUrl: string,\n  refreshToken: RefreshToken,\n): void => {\n  const storage = getLocalStorage();\n  if (!storage) return;\n  try {\n    storage.setItem(getRefreshTokenName(baseUrl), JSON.stringify(refreshToken));\n  } catch {}\n};\n\nconst removeRefreshToken = (baseUrl: string): void => {\n  const storage = getLocalStorage();\n  if (!storage) return;\n  try {\n    storage.removeItem(getRefreshTokenName(baseUrl));\n  } catch {}\n};\n\n// In-flight sharing follows refresh-token storage scope to isolate server requests.\nconst anonymousAuthTokenRequests = new WeakMap<\n  Storage,\n  Map<string, Promise<string | null>>\n>();\n\nconst getWebLockManager = (): LockManager | null => {\n  if (!(\"navigator\" in globalThis)) return null;\n  return (\n    (globalThis as { navigator?: { locks?: LockManager } }).navigator?.locks ??\n    null\n  );\n};\n\nconst getAnonymousAuthLockName = (baseUrl: string): string =>\n  `assistant-cloud:anonymous-auth:${baseUrl}`;\n\nconst getSharedAnonymousAuthToken = (\n  baseUrl: string,\n  requestToken: () => Promise<string | null>,\n): Promise<string | null> => {\n  const storage = getLocalStorage();\n  if (!storage) return requestToken();\n\n  let storageRequests = anonymousAuthTokenRequests.get(storage);\n  if (!storageRequests) {\n    storageRequests = new Map();\n    anonymousAuthTokenRequests.set(storage, storageRequests);\n  }\n\n  const activeRequest = storageRequests.get(baseUrl);\n  if (activeRequest) return activeRequest;\n\n  const locks = getWebLockManager();\n  const request = locks\n    ? locks.request(getAnonymousAuthLockName(baseUrl), requestToken)\n    : requestToken();\n  const sharedRequest = request.finally(() => {\n    if (storageRequests.get(baseUrl) === sharedRequest) {\n      storageRequests.delete(baseUrl);\n    }\n  });\n  storageRequests.set(baseUrl, sharedRequest);\n  return sharedRequest;\n};\n\nexport class AssistantCloudAnonymousAuthStrategy implements AssistantCloudAuthStrategy {\n  public readonly strategy = \"anon\";\n\n  private baseUrl: string;\n  private jwtStrategy: AssistantCloudJWTAuthStrategy;\n\n  constructor(baseUrl: string) {\n    this.baseUrl = baseUrl;\n    const requestAuthToken = async (): Promise<string | null> => {\n      const currentTime = Date.now();\n      const storedRefreshToken = readRefreshToken(this.baseUrl);\n\n      if (storedRefreshToken) {\n        const refreshExpiry = new Date(storedRefreshToken.expires_at).getTime();\n        if (refreshExpiry - currentTime > 30 * 1000) {\n          const refreshedAccessToken = await withAuthTokenDeadline(\n            \"refresh token request\",\n            async (signal) => {\n              const response = await fetch(\n                `${this.baseUrl}/v1/auth/tokens/refresh`,\n                {\n                  method: \"POST\",\n                  headers: { \"Content-Type\": \"application/json\" },\n                  body: JSON.stringify({\n                    refresh_token: storedRefreshToken.token,\n                  }),\n                  signal,\n                },\n              );\n\n              if (response.ok) {\n                const { data, accessToken } = await readAuthTokenResponse(\n                  response,\n                  \"refresh auth token response\",\n                );\n                if (data.refresh_token != null) {\n                  writeRefreshToken(\n                    this.baseUrl,\n                    readRefreshTokenResponse(\n                      data.refresh_token,\n                      \"refresh auth token response.refresh_token\",\n                    ),\n                  );\n                }\n                return accessToken;\n              }\n\n              if (response.status === 429 || response.status >= 500) {\n                throw new Error(\n                  `Assistant Cloud token refresh failed with status ${response.status}`,\n                );\n              }\n\n              return null;\n            },\n          );\n          if (refreshedAccessToken !== null) return refreshedAccessToken;\n        } else {\n          removeRefreshToken(this.baseUrl);\n        }\n      }\n\n      // No valid refresh token; request a new anonymous token\n      return withAuthTokenDeadline(\n        \"anonymous token request\",\n        async (signal) => {\n          const response = await fetch(\n            `${this.baseUrl}/v1/auth/tokens/anonymous`,\n            { method: \"POST\", signal },\n          );\n\n          if (!response.ok) return null;\n\n          const { data, accessToken } = await readAuthTokenResponse(\n            response,\n            \"anonymous auth token response\",\n          );\n\n          writeRefreshToken(\n            this.baseUrl,\n            readRefreshTokenResponse(\n              data.refresh_token,\n              \"anonymous auth token response.refresh_token\",\n            ),\n          );\n          return accessToken;\n        },\n      );\n    };\n    this.jwtStrategy = new AssistantCloudJWTAuthStrategy(() =>\n      getSharedAnonymousAuthToken(this.baseUrl, requestAuthToken),\n    );\n  }\n\n  public async getAuthHeaders(): Promise<Record<string, string> | false> {\n    return this.jwtStrategy.getAuthHeaders();\n  }\n\n  public readAuthHeaders(headers: Headers): void {\n    this.jwtStrategy.readAuthHeaders(headers);\n  }\n}\n"],"mappings":";;AAMA,MAAM,gCAAgC;AAEtC,MAAM,wBAAwB,OAC5B,WACA,QACe;CACf,MAAM,aAAa,IAAI,gBAAgB;CACvC,IAAI,WAAW;CACf,MAAM,UAAU,iBAAiB;EAC/B,WAAW;EACX,WAAW,MAAM;CACnB,GAAG,6BAA6B;CAEhC,IAAI;EACF,OAAO,MAAM,IAAI,WAAW,MAAM;CACpC,SAAS,OAAO;EACd,IAAI,UACF,MAAM,IAAI,MACR,mBAAmB,UAAU,mBAAmB,8BAA8B,KAC9E,EAAE,OAAO,MAAM,CACjB;EAEF,MAAM;CACR,UAAU;EACR,aAAa,OAAO;CACtB;AACF;AAQA,MAAM,gBAAgB,QAAwB;CAC5C,IAAI;EAEF,MAAM,WADQ,IAAI,MAAM,GACH,CAAC,CAAC;EACvB,IAAI,CAAC,UACH,MAAM,IAAI,MAAM,oBAAoB;EAItC,IAAI,SAAS,SAAS,QAAQ,MAAM,GAAG,CAAC,CAAC,QAAQ,MAAM,GAAG;EAC1D,OAAO,OAAO,SAAS,MAAM,GAC3B,UAAU;EAIZ,MAAM,UAAU,KAAK,MAAM;EAE3B,MAAM,MADa,KAAK,MAAM,OACT,CAAC,CAAC;EAEvB,IAAI,CAAC,OAAO,OAAO,QAAQ,UACzB,MAAM,IAAI,MAAM,4CAA0C;EAI5D,OAAO,MAAM;CACf,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,yCAAyC,OAAO;CAClE;AACF;AAOA,MAAM,2BAA2B,OAAgB,UAA0B;CACzE,MAAM,SAAS,gBAAgB,OAAO,KAAK;CAC3C,IAAI,OAAO,WAAW,GACpB,MAAM,IAAI,mBACR,yCAAyC,MAAM,+BACjD;CAEF,OAAO;AACT;AAEA,MAAM,4BACJ,OACA,UACiB;CACjB,MAAM,eAAe,gBAAgB,OAAO,KAAK;CACjD,OAAO;EACL,OAAO,wBAAwB,aAAa,OAAO,GAAG,MAAM,OAAO;EACnE,YAAY,wBACV,aAAa,YACb,GAAG,MAAM,YACX;CACF;AACF;AAEA,MAAM,wBAAwB,OAC5B,UACA,UACoE;CACpE,IAAI;CACJ,IAAI;EACF,QAAQ,MAAM,SAAS,KAAK;CAC9B,QAAQ;EACN,MAAM,IAAI,mBACR,yCAAyC,MAAM,uBACjD;CACF;CAEA,MAAM,OAAO,gBAAgB,OAAO,KAAK;CAKzC,OAAO;EAAE;EAAM,aAJK,wBAClB,KAAK,cACL,GAAG,MAAM,cAEc;CAAE;AAC7B;AAEA,IAAa,gCAAb,MAAiF;CAC/E,WAA2B;CAE3B,cAAqC;CACrC,cAAqC;CACrC,eAAuE;CACvE;CAEA,YAAY,mBAAiD;EAC3D,KAAK,qBAAqB;CAC5B;CAEA,MAAa,iBAA0D;EACrE,MAAM,cAAc,KAAK,IAAI;EAG7B,IACE,KAAK,eACL,KAAK,eACL,KAAK,cAAc,cAAc,KAEjC,OAAO,EAAE,eAAe,UAAU,KAAK,cAAc;EAGvD,IAAI,CAAC,KAAK,cACR,KAAK,eAAe,KAAK,iBAAiB;EAG5C,MAAM,eAAe,KAAK;EAC1B,IAAI;GACF,OAAO,MAAM;EACf,UAAU;GACR,IAAI,KAAK,iBAAiB,cACxB,KAAK,eAAe;EAExB;CACF;CAEA,MAAc,mBAA4D;EACxE,MAAM,QAAQ,MAAM,KAAK,mBAAmB;EAC5C,IAAI,CAAC,OAAO,OAAO;EAEnB,KAAK,cAAc;EACnB,KAAK,cAAc,aAAa,KAAK;EAErC,OAAO,EAAE,eAAe,UAAU,QAAQ;CAC5C;CAEA,gBAAuB,SAAkB;EACvC,MAAM,aAAa,QAAQ,IAAI,eAAe;EAC9C,IAAI,CAAC,YAAY;EAEjB,MAAM,CAAC,QAAQ,SAAS,WAAW,MAAM,GAAG;EAC5C,IAAI,WAAW,YAAY,CAAC,OAC1B,MAAM,IAAI,MAAM,8BAA8B;EAGhD,KAAK,cAAc;EACnB,KAAK,cAAc,aAAa,KAAK;CACvC;AACF;AAEA,IAAa,mCAAb,MAAoF;CAClF,WAA2B;CAE3B;CACA;CACA;CAEA,YAAY,QAAgB,QAAgB,aAAqB;EAC/D,KAAK,UAAU;EACf,KAAK,UAAU;EACf,KAAK,eAAe;CACtB;CAEA,MAAa,iBAAkD;EAC7D,OAAO;GACL,eAAe,UAAU,KAAK;GAC9B,eAAe,KAAK;GACpB,oBAAoB,KAAK;EAC3B;CACF;CAEA,kBAAyB,CAEzB;AACF;AAEA,MAAM,gCAAgC;AAEtC,MAAM,uBAAuB,YAC3B,GAAG,8BAA8B,GAAG;AAEtC,MAAM,4BAA4B,YAA2B;CAC3D,IAAI;EACF,QAAQ,WAAW,6BAA6B;CAClD,QAAQ,CAAC;AACX;AAEA,MAAM,wBAAwC;CAC5C,IAAI,EAAE,kBAAkB,aAAa,OAAO;CAC5C,IAAI;EACF,OAAQ,WAAyC;CACnD,QAAQ;EACN,OAAO;CACT;AACF;AAEA,MAAM,oBAAoB,YAA8C;CACtE,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS,OAAO,KAAA;CACrB,IAAI;EACF,MAAM,OAAO,oBAAoB,OAAO;EACxC,MAAM,QAAQ,QAAQ,QAAQ,IAAI;EAClC,IAAI,OAAO;GACT,yBAAyB,OAAO;GAChC,OAAO,KAAK,MAAM,KAAK;EACzB;EAEA,MAAM,cAAc,QAAQ,QAAQ,6BAA6B;EACjE,IAAI,CAAC,aAAa,OAAO,KAAA;EAEzB,IAAI;EACJ,IAAI;GACF,eAAe,KAAK,MAAM,WAAW;EACvC,QAAQ;GACN,yBAAyB,OAAO;GAChC;EACF;EAEA,QAAQ,QAAQ,MAAM,WAAW;EACjC,yBAAyB,OAAO;EAChC,OAAO;CACT,QAAQ;EACN;CACF;AACF;AAEA,MAAa,oBAAoB,YAA4B;CAC3D,IAAI,CAAC,WAAW,CAAC,QAAQ,SAAS,GAAG,GAAG,OAAO;CAC/C,OAAO,QAAQ,MAAM,GAAG,EAAE;AAC5B;;AAGA,MAAa,6BAA6B,YAAmC;CAC3E,MAAM,eAAe,iBAAiB,iBAAiB,OAAO,CAAC;CAC/D,IAAI,CAAC,cAAc,OAAO;CAE1B,OADsB,IAAI,KAAK,aAAa,UAAU,CAAC,CAAC,QACrC,IAAI,KAAK,IAAI,IAAI,MAAY,aAAa,QAAQ;AACvE;AAEA,MAAM,qBACJ,SACA,iBACS;CACT,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS;CACd,IAAI;EACF,QAAQ,QAAQ,oBAAoB,OAAO,GAAG,KAAK,UAAU,YAAY,CAAC;CAC5E,QAAQ,CAAC;AACX;AAEA,MAAM,sBAAsB,YAA0B;CACpD,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS;CACd,IAAI;EACF,QAAQ,WAAW,oBAAoB,OAAO,CAAC;CACjD,QAAQ,CAAC;AACX;AAGA,MAAM,6CAA6B,IAAI,QAGrC;AAEF,MAAM,0BAA8C;CAClD,IAAI,EAAE,eAAe,aAAa,OAAO;CACzC,OACG,WAAuD,WAAW,SACnE;AAEJ;AAEA,MAAM,4BAA4B,YAChC,kCAAkC;AAEpC,MAAM,+BACJ,SACA,iBAC2B;CAC3B,MAAM,UAAU,gBAAgB;CAChC,IAAI,CAAC,SAAS,OAAO,aAAa;CAElC,IAAI,kBAAkB,2BAA2B,IAAI,OAAO;CAC5D,IAAI,CAAC,iBAAiB;EACpB,kCAAkB,IAAI,IAAI;EAC1B,2BAA2B,IAAI,SAAS,eAAe;CACzD;CAEA,MAAM,gBAAgB,gBAAgB,IAAI,OAAO;CACjD,IAAI,eAAe,OAAO;CAE1B,MAAM,QAAQ,kBAAkB;CAIhC,MAAM,iBAHU,QACZ,MAAM,QAAQ,yBAAyB,OAAO,GAAG,YAAY,IAC7D,aAAa,EAAA,CACa,cAAc;EAC1C,IAAI,gBAAgB,IAAI,OAAO,MAAM,eACnC,gBAAgB,OAAO,OAAO;CAElC,CAAC;CACD,gBAAgB,IAAI,SAAS,aAAa;CAC1C,OAAO;AACT;AAEA,IAAa,sCAAb,MAAuF;CACrF,WAA2B;CAE3B;CACA;CAEA,YAAY,SAAiB;EAC3B,KAAK,UAAU;EACf,MAAM,mBAAmB,YAAoC;GAC3D,MAAM,cAAc,KAAK,IAAI;GAC7B,MAAM,qBAAqB,iBAAiB,KAAK,OAAO;GAExD,IAAI,oBAAoB;IAEtB,IADsB,IAAI,KAAK,mBAAmB,UAAU,CAAC,CAAC,QAC9C,IAAI,cAAc,KAAW;KAC3C,MAAM,uBAAuB,MAAM,sBACjC,yBACA,OAAO,WAAW;MAChB,MAAM,WAAW,MAAM,MACrB,GAAG,KAAK,QAAQ,0BAChB;OACE,QAAQ;OACR,SAAS,EAAE,gBAAgB,mBAAmB;OAC9C,MAAM,KAAK,UAAU,EACnB,eAAe,mBAAmB,MACpC,CAAC;OACD;MACF,CACF;MAEA,IAAI,SAAS,IAAI;OACf,MAAM,EAAE,MAAM,gBAAgB,MAAM,sBAClC,UACA,6BACF;OACA,IAAI,KAAK,iBAAiB,MACxB,kBACE,KAAK,SACL,yBACE,KAAK,eACL,2CACF,CACF;OAEF,OAAO;MACT;MAEA,IAAI,SAAS,WAAW,OAAO,SAAS,UAAU,KAChD,MAAM,IAAI,MACR,oDAAoD,SAAS,QAC/D;MAGF,OAAO;KACT,CACF;KACA,IAAI,yBAAyB,MAAM,OAAO;IAC5C,OACE,mBAAmB,KAAK,OAAO;GAEnC;GAGA,OAAO,sBACL,2BACA,OAAO,WAAW;IAChB,MAAM,WAAW,MAAM,MACrB,GAAG,KAAK,QAAQ,4BAChB;KAAE,QAAQ;KAAQ;IAAO,CAC3B;IAEA,IAAI,CAAC,SAAS,IAAI,OAAO;IAEzB,MAAM,EAAE,MAAM,gBAAgB,MAAM,sBAClC,UACA,+BACF;IAEA,kBACE,KAAK,SACL,yBACE,KAAK,eACL,6CACF,CACF;IACA,OAAO;GACT,CACF;EACF;EACA,KAAK,cAAc,IAAI,oCACrB,4BAA4B,KAAK,SAAS,gBAAgB,CAC5D;CACF;CAEA,MAAa,iBAA0D;EACrE,OAAO,KAAK,YAAY,eAAe;CACzC;CAEA,gBAAuB,SAAwB;EAC7C,KAAK,YAAY,gBAAgB,OAAO;CAC1C;AACF"}

package/dist/AssistantCloudEvents.d.ts

@@ -0,0 +1,32 @@
+import { AssistantCloudAPI } from "./AssistantCloudAPI.js";
+//#region src/AssistantCloudEvents.d.ts
+type AssistantCloudEventKind = "message_sent" | "message_edited" | "run_stopped" | "message_regenerated" | "message_copied" | "branch_switched" | "suggestions_shown" | "suggestion_clicked" | "attachment_added" | "attachment_failed" | "thread_switched" | "tool_approved" | "tool_rejected" | "speech_started" | "voice_started" | "error_shown";
+type AssistantCloudEvent = {
+  kind: AssistantCloudEventKind;
+  thread_id?: string | undefined;
+  message_id?: string | undefined;
+  run_id?: string | undefined;
+  value?: number | undefined;
+  props?: Readonly<Record<string, string | number | boolean>> | undefined;
+};
+declare class AssistantCloudEvents {
+  private buffer;
+  private timer;
+  private flushing;
+  private readonly cloud;
+  private readonly isEnabled;
+  private listening;
+  constructor(cloud: AssistantCloudAPI, isEnabled: () => boolean);
+  track(event: AssistantCloudEvent): void;
+  private listen;
+  private unlisten;
+  dispose(): void;
+  private onVisibilityChange;
+  private flush;
+  private flushPending;
+  private scheduleFlush;
+  private clearFlushTimer;
+}
+//#endregion
+export { AssistantCloudEvent, AssistantCloudEventKind, AssistantCloudEvents };
+//# sourceMappingURL=AssistantCloudEvents.d.ts.map

package/dist/AssistantCloudEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AssistantCloudEvents.d.ts","names":[],"sources":["../src/AssistantCloudEvents.ts"],"mappings":";;KAEY;KAkBA;EACV,MAAM;EACN;EACA;EACA;EACA;EACA,QAAQ,SAAS;;cAON;UACH;UACA;UACA;mBAES;mBACA;UAET;EAEI,YAAA,OAAO,mBAAmB;EAK/B,MAAM,OAAO;UAaZ;UAaA;EAOD;UAMC;UAMA;UAyBM;UAaN;UAQA"}