mitra-interactions-sdk 1.0.60-beta.27 → 1.0.60-beta.29

package/dist/index.js

@@ -279,7 +279,15 @@ async function refreshTokenSilently(authUrl, _projectId) {
       if (!refreshToken) {
         throw new Error("refreshToken n\xE3o dispon\xEDvel para renova\xE7\xE3o. Fa\xE7a login novamente.");
       }
+      if (!hasAppScope(refreshToken)) {
+        clearRefreshToken();
+        throw new Error("refreshToken sem escopo de app (sess\xE3o do console) \u2014 descartado. Fa\xE7a loginMitra({ projectId }) novamente.");
+      }
       const data = await postBffAuth(buildBffAuthEndpoint(authUrl, "/refresh-token"), { refreshToken });
+      if (!hasAppScope(data.token)) {
+        clearRefreshToken();
+        throw new Error("refresh retornou token sem escopo de app \u2014 rejeitado. Fa\xE7a loginMitra({ projectId }) novamente.");
+      }
       return {
         token: data.token,
         // Refresh não muda a base — mantém o authUrl (gateway).
@@ -346,20 +354,23 @@ async function handleResponse(response) {
   }
   return data;
 }
+function withFreshAuth(init) {
+  const config = getConfig();
+  const headers = { ...init.headers };
+  if (config.token) headers["Authorization"] = formatToken(config.token);
+  return { ...init, headers };
+}
 async function fetchWithRefresh(url, init) {
   const fetchFn = getFetch2();
+  if (isTokenExpiring()) {
+    const refreshed = await tryRefreshToken();
+    if (refreshed) init = withFreshAuth(init);
+  }
   const response = await fetchFn(url, init);
   if (response.status === 401) {
     const refreshed = await tryRefreshToken();
     if (refreshed) {
-      const newHeaders = { ...buildHeaders() };
-      const oldHeaders = init.headers;
-      if (oldHeaders) {
-        for (const [k, v] of Object.entries(oldHeaders)) {
-          if (k !== "Authorization") newHeaders[k] = v;
-        }
-      }
-      const retryResponse = await fetchFn(url, { ...init, headers: newHeaders });
+      const retryResponse = await fetchFn(url, withFreshAuth(init));
       return handleResponse(retryResponse);
     }
   }
@@ -650,8 +661,25 @@ var AgentTaskSession = class {
     if (!this._taskId) {
       return Promise.reject(new Error("AgentTaskSession: sem taskId \u2014 task ainda n\xE3o criada."));
     }
-    const url = getTaskWsUrl(this._taskId);
-    this._wsConnectPromise = new Promise((resolve, reject) => {
+    this._wsConnectPromise = (async () => {
+      try {
+        if (isTokenExpiring()) await tryRefreshToken();
+        try {
+          return await this._connectWs(this._taskId);
+        } catch (err) {
+          const refreshed = await tryRefreshToken();
+          if (!refreshed) throw err;
+          return await this._connectWs(this._taskId);
+        }
+      } finally {
+        this._wsConnectPromise = null;
+      }
+    })();
+    return this._wsConnectPromise;
+  }
+  _connectWs(taskId) {
+    const url = getTaskWsUrl(taskId);
+    return new Promise((resolve, reject) => {
       const socket = new WebSocket(url);
       let opened = false;
       const timer = setTimeout(() => {
@@ -660,7 +688,6 @@ var AgentTaskSession = class {
             socket.close();
           } catch (e) {
           }
-          this._wsConnectPromise = null;
           reject(new Error("Agent Chat: timeout ao conectar no WebSocket da task"));
         }
       }, 15e3);
@@ -668,13 +695,11 @@ var AgentTaskSession = class {
         opened = true;
         clearTimeout(timer);
         this._ws = socket;
-        this._wsConnectPromise = null;
         resolve(socket);
       };
       socket.onerror = () => {
         if (!opened) {
           clearTimeout(timer);
-          this._wsConnectPromise = null;
           reject(new Error("Agent Chat: erro ao conectar no WebSocket da task"));
         }
       };
@@ -691,7 +716,6 @@ var AgentTaskSession = class {
         this._handleWsEvent(msg);
       };
     });
-    return this._wsConnectPromise;
   }
   // ── Eventos do stream (WsOutboundMessage { type, payload, timestamp }) ──
   _handleWsEvent(msg) {
@@ -810,8 +834,12 @@ function getGatewayOrigin() {
   return new URL(config.baseURL).origin;
 }
 function getTaskWsUrl(taskId) {
+  const token = getRawToken();
+  if (!hasAppScope(token)) {
+    throw new Error("Agent Chat: o token configurado \xE9 uma sess\xE3o do console (sem app_id) \u2014 o WebSocket do copilot exige token de app. Fa\xE7a loginMitra({ projectId }).");
+  }
   const origin = getGatewayOrigin().replace(/^http/, "ws");
-  return `${origin}/copilot/ws/tasks/${encodeURIComponent(taskId)}?token=${encodeURIComponent(getRawToken())}`;
+  return `${origin}/copilot/ws/tasks/${encodeURIComponent(taskId)}?token=${encodeURIComponent(token)}`;
 }
 function getRawToken() {
   const config = getConfig();
@@ -1051,20 +1079,22 @@ function createMitraInstance(initialConfig) {
       return false;
     }
   }
+  function withFreshAuth2(init) {
+    const headers = { ...init.headers };
+    if (_config.token) headers["Authorization"] = formatToken2(_config.token);
+    return { ...init, headers };
+  }
   async function fetchWithRefresh2(url, init) {
     const fetchFn = getFetch3();
+    if (isTokenExpiring(_config.token)) {
+      const refreshed = await tryRefreshToken2();
+      if (refreshed) init = withFreshAuth2(init);
+    }
     const response = await fetchFn(url, init);
     if (response.status === 401) {
       const refreshed = await tryRefreshToken2();
       if (refreshed) {
-        const newHeaders = { ...authHeaders() };
-        const oldHeaders = init.headers;
-        if (oldHeaders) {
-          for (const [k, v] of Object.entries(oldHeaders)) {
-            if (k !== "Authorization") newHeaders[k] = v;
-          }
-        }
-        const retryResponse = await fetchFn(url, { ...init, headers: newHeaders });
+        const retryResponse = await fetchFn(url, withFreshAuth2(init));
         return handleResponse2(retryResponse);
       }
     }
@@ -1251,6 +1281,50 @@ function persistRefreshToken(refreshToken) {
   } catch (e) {
   }
 }
+function removePersistedRefreshToken() {
+  const ls = safeLocalStorage();
+  if (!ls) return;
+  try {
+    const raw = ls.getItem(SESSION_STORE_KEY);
+    if (!raw) return;
+    const obj = JSON.parse(raw);
+    delete obj.refreshToken;
+    ls.setItem(SESSION_STORE_KEY, JSON.stringify(obj));
+  } catch (e) {
+  }
+}
+function decodeJwtPayload(token) {
+  try {
+    const part = stripBearer(token).split(".")[1];
+    if (!part) return null;
+    const b64 = part.replace(/-/g, "+").replace(/_/g, "/");
+    const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+    const json = typeof atob === "function" ? atob(padded) : Buffer.from(padded, "base64").toString("utf8");
+    return JSON.parse(json);
+  } catch (e) {
+    return null;
+  }
+}
+function hasAppScope(token) {
+  const payload = decodeJwtPayload(token);
+  if (!payload) return true;
+  return typeof payload.app_id === "string" && payload.app_id.length > 0;
+}
+function isTokenExpiring(token, skewMs = 3e4) {
+  const t = token != null ? token : globalConfig == null ? void 0 : globalConfig.token;
+  if (!t) return false;
+  const payload = decodeJwtPayload(t);
+  const exp = payload == null ? void 0 : payload.exp;
+  if (typeof exp !== "number") return false;
+  return exp * 1e3 - Date.now() < skewMs;
+}
+function clearRefreshToken() {
+  if (globalConfig) {
+    const { refreshToken: _drop, ...rest } = globalConfig;
+    globalConfig = rest;
+  }
+  removePersistedRefreshToken();
+}
 function readPersistedRefreshToken() {
   const ls = safeLocalStorage();
   if (!ls) return void 0;
@@ -1283,7 +1357,16 @@ function configureSdkMitra(config = {}) {
   if (merged.token != null) merged.token = stripBearer(merged.token);
   if (!merged.refreshToken) {
     const persisted = readPersistedRefreshToken();
-    if (persisted) merged.refreshToken = persisted;
+    if (persisted) {
+      if (hasAppScope(persisted)) {
+        merged.refreshToken = persisted;
+      } else {
+        removePersistedRefreshToken();
+      }
+    }
+  } else if (!hasAppScope(merged.refreshToken)) {
+    delete merged.refreshToken;
+    removePersistedRefreshToken();
   } else {
     persistRefreshToken(merged.refreshToken);
   }