mitra-interactions-sdk 1.0.60-beta.27 → 1.0.60-beta.28

package/dist/index.js

@@ -279,7 +279,15 @@ async function refreshTokenSilently(authUrl, _projectId) {
       if (!refreshToken) {
         throw new Error("refreshToken n\xE3o dispon\xEDvel para renova\xE7\xE3o. Fa\xE7a login novamente.");
       }
+      if (!hasAppScope(refreshToken)) {
+        clearRefreshToken();
+        throw new Error("refreshToken sem escopo de app (sess\xE3o do console) \u2014 descartado. Fa\xE7a loginMitra({ projectId }) novamente.");
+      }
       const data = await postBffAuth(buildBffAuthEndpoint(authUrl, "/refresh-token"), { refreshToken });
+      if (!hasAppScope(data.token)) {
+        clearRefreshToken();
+        throw new Error("refresh retornou token sem escopo de app \u2014 rejeitado. Fa\xE7a loginMitra({ projectId }) novamente.");
+      }
       return {
         token: data.token,
         // Refresh não muda a base — mantém o authUrl (gateway).
@@ -810,8 +818,12 @@ function getGatewayOrigin() {
   return new URL(config.baseURL).origin;
 }
 function getTaskWsUrl(taskId) {
+  const token = getRawToken();
+  if (!hasAppScope(token)) {
+    throw new Error("Agent Chat: o token configurado \xE9 uma sess\xE3o do console (sem app_id) \u2014 o WebSocket do copilot exige token de app. Fa\xE7a loginMitra({ projectId }).");
+  }
   const origin = getGatewayOrigin().replace(/^http/, "ws");
-  return `${origin}/copilot/ws/tasks/${encodeURIComponent(taskId)}?token=${encodeURIComponent(getRawToken())}`;
+  return `${origin}/copilot/ws/tasks/${encodeURIComponent(taskId)}?token=${encodeURIComponent(token)}`;
 }
 function getRawToken() {
   const config = getConfig();
@@ -1251,6 +1263,42 @@ function persistRefreshToken(refreshToken) {
   } catch (e) {
   }
 }
+function removePersistedRefreshToken() {
+  const ls = safeLocalStorage();
+  if (!ls) return;
+  try {
+    const raw = ls.getItem(SESSION_STORE_KEY);
+    if (!raw) return;
+    const obj = JSON.parse(raw);
+    delete obj.refreshToken;
+    ls.setItem(SESSION_STORE_KEY, JSON.stringify(obj));
+  } catch (e) {
+  }
+}
+function decodeJwtPayload(token) {
+  try {
+    const part = stripBearer(token).split(".")[1];
+    if (!part) return null;
+    const b64 = part.replace(/-/g, "+").replace(/_/g, "/");
+    const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+    const json = typeof atob === "function" ? atob(padded) : Buffer.from(padded, "base64").toString("utf8");
+    return JSON.parse(json);
+  } catch (e) {
+    return null;
+  }
+}
+function hasAppScope(token) {
+  const payload = decodeJwtPayload(token);
+  if (!payload) return true;
+  return typeof payload.app_id === "string" && payload.app_id.length > 0;
+}
+function clearRefreshToken() {
+  if (globalConfig) {
+    const { refreshToken: _drop, ...rest } = globalConfig;
+    globalConfig = rest;
+  }
+  removePersistedRefreshToken();
+}
 function readPersistedRefreshToken() {
   const ls = safeLocalStorage();
   if (!ls) return void 0;
@@ -1283,7 +1331,16 @@ function configureSdkMitra(config = {}) {
   if (merged.token != null) merged.token = stripBearer(merged.token);
   if (!merged.refreshToken) {
     const persisted = readPersistedRefreshToken();
-    if (persisted) merged.refreshToken = persisted;
+    if (persisted) {
+      if (hasAppScope(persisted)) {
+        merged.refreshToken = persisted;
+      } else {
+        removePersistedRefreshToken();
+      }
+    }
+  } else if (!hasAppScope(merged.refreshToken)) {
+    delete merged.refreshToken;
+    removePersistedRefreshToken();
   } else {
     persistRefreshToken(merged.refreshToken);
   }