mneme-sdk 0.3.0 → 0.4.0

package/dist/index.cjs

@@ -112,7 +112,13 @@ var Mneme = class {
   events;
   kvs;
   constructor(opts) {
-    this.auth = "accessToken" in opts && opts.accessToken ? { accessToken: opts.accessToken } : { account: opts.account };
+    if ("apiKey" in opts && opts.apiKey) {
+      this.auth = { apiKey: opts.apiKey };
+    } else if ("accessToken" in opts && opts.accessToken) {
+      this.auth = { accessToken: opts.accessToken };
+    } else {
+      this.auth = { account: opts.account };
+    }
     this.gatewayUrl = opts.gatewayUrl.replace(/\/$/, "");
     this.chainId = opts.chainId ?? 8453;
     this.domainName = opts.domainName ?? "Mneme";
@@ -140,6 +146,31 @@ var Mneme = class {
   from(table) {
     return new Collection(this, table);
   }
+  /**
+   * Natural-language → SQL via the gateway's LLM proxy.
+   * Use the returned SQL with `m.sql(...)` to execute it.
+   */
+  llm = {
+    sql: (args) => this.request(
+      "POST",
+      "/v1/llm/sql",
+      args
+    )
+  };
+  /**
+   * Service-account API keys — for B2B2C integrators (e.g. Gitlawb) that
+   * distribute scoped keys to end-users who don't have wallets.
+   *
+   * Only callable by wallet-authed clients (keys cannot mint more keys).
+   */
+  serviceKeys = {
+    /** Mint a new scoped key. Returns the raw key value ONCE. */
+    create: (args) => this.request("POST", "/v1/service/keys", args),
+    /** List all keys you've created (no raw values — only metadata). */
+    list: () => this.request("GET", "/v1/service/keys"),
+    /** Revoke a key by id. */
+    revoke: (id) => this.request("DELETE", `/v1/service/keys/${id}`)
+  };
   /**
    * Run raw SQL against your project's Postgres schema.
    *
@@ -206,7 +237,9 @@ var Mneme = class {
   async request(method, path, body) {
     const bodyText = body === void 0 ? "" : JSON.stringify(body);
     const headers = { "Content-Type": "application/json" };
-    if ("accessToken" in this.auth && this.auth.accessToken) {
+    if ("apiKey" in this.auth && this.auth.apiKey) {
+      headers["Authorization"] = `ApiKey ${this.auth.apiKey}`;
+    } else if ("accessToken" in this.auth && this.auth.accessToken) {
       headers["Authorization"] = `Bearer ${this.auth.accessToken}`;
     } else if ("account" in this.auth && this.auth.account) {
       const signed = await signRequest({
@@ -220,7 +253,7 @@ var Mneme = class {
       });
       Object.assign(headers, signed);
     } else {
-      throw new Error("Mneme: either { account } or { accessToken } is required");
+      throw new Error("Mneme: one of { account }, { accessToken }, or { apiKey } is required");
     }
     const res = await fetch(`${this.gatewayUrl}${path}`, {
       method,

package/dist/index.d.cts

@@ -64,9 +64,15 @@ interface KvRow {
 type MnemeAuth = {
     account: Account;
     accessToken?: never;
+    apiKey?: never;
 } | {
     accessToken: string;
     account?: never;
+    apiKey?: never;
+} | {
+    apiKey: string;
+    account?: never;
+    accessToken?: never;
 };
 type MnemeOptions = MnemeAuth & {
     gatewayUrl: string;
@@ -112,6 +118,63 @@ declare class Mneme {
     }>;
     stats(): Promise<StatsResponse>;
     from<T = unknown>(table: string): Collection<T>;
+    /**
+     * Natural-language → SQL via the gateway's LLM proxy.
+     * Use the returned SQL with `m.sql(...)` to execute it.
+     */
+    llm: {
+        sql: (args: {
+            prompt: string;
+            schema?: string;
+        }) => Promise<{
+            sql: string;
+            model: string;
+            elapsed_ms: number;
+        }>;
+    };
+    /**
+     * Service-account API keys — for B2B2C integrators (e.g. Gitlawb) that
+     * distribute scoped keys to end-users who don't have wallets.
+     *
+     * Only callable by wallet-authed clients (keys cannot mint more keys).
+     */
+    readonly serviceKeys: {
+        /** Mint a new scoped key. Returns the raw key value ONCE. */
+        create: (args: {
+            scope: string;
+            label?: string;
+            rpm_limit?: number;
+        }) => Promise<{
+            ok: true;
+            id: number;
+            key: string;
+            key_prefix: string;
+            scope: string;
+            label: string | null;
+            rpm_limit: number;
+            created_at: string;
+            warning: string;
+        }>;
+        /** List all keys you've created (no raw values — only metadata). */
+        list: () => Promise<{
+            keys: Array<{
+                id: number;
+                key_prefix: string;
+                scope: string;
+                label: string | null;
+                rpm_limit: number;
+                revoked: boolean;
+                revoked_at: string | null;
+                last_used_at: string | null;
+                created_at: string;
+            }>;
+        }>;
+        /** Revoke a key by id. */
+        revoke: (id: number) => Promise<{
+            ok: true;
+            id: number;
+        }>;
+    };
     /**
      * Run raw SQL against your project's Postgres schema.
      *

package/dist/index.d.ts

@@ -64,9 +64,15 @@ interface KvRow {
 type MnemeAuth = {
     account: Account;
     accessToken?: never;
+    apiKey?: never;
 } | {
     accessToken: string;
     account?: never;
+    apiKey?: never;
+} | {
+    apiKey: string;
+    account?: never;
+    accessToken?: never;
 };
 type MnemeOptions = MnemeAuth & {
     gatewayUrl: string;
@@ -112,6 +118,63 @@ declare class Mneme {
     }>;
     stats(): Promise<StatsResponse>;
     from<T = unknown>(table: string): Collection<T>;
+    /**
+     * Natural-language → SQL via the gateway's LLM proxy.
+     * Use the returned SQL with `m.sql(...)` to execute it.
+     */
+    llm: {
+        sql: (args: {
+            prompt: string;
+            schema?: string;
+        }) => Promise<{
+            sql: string;
+            model: string;
+            elapsed_ms: number;
+        }>;
+    };
+    /**
+     * Service-account API keys — for B2B2C integrators (e.g. Gitlawb) that
+     * distribute scoped keys to end-users who don't have wallets.
+     *
+     * Only callable by wallet-authed clients (keys cannot mint more keys).
+     */
+    readonly serviceKeys: {
+        /** Mint a new scoped key. Returns the raw key value ONCE. */
+        create: (args: {
+            scope: string;
+            label?: string;
+            rpm_limit?: number;
+        }) => Promise<{
+            ok: true;
+            id: number;
+            key: string;
+            key_prefix: string;
+            scope: string;
+            label: string | null;
+            rpm_limit: number;
+            created_at: string;
+            warning: string;
+        }>;
+        /** List all keys you've created (no raw values — only metadata). */
+        list: () => Promise<{
+            keys: Array<{
+                id: number;
+                key_prefix: string;
+                scope: string;
+                label: string | null;
+                rpm_limit: number;
+                revoked: boolean;
+                revoked_at: string | null;
+                last_used_at: string | null;
+                created_at: string;
+            }>;
+        }>;
+        /** Revoke a key by id. */
+        revoke: (id: number) => Promise<{
+            ok: true;
+            id: number;
+        }>;
+    };
     /**
      * Run raw SQL against your project's Postgres schema.
      *

package/dist/index.js

@@ -80,7 +80,13 @@ var Mneme = class {
   events;
   kvs;
   constructor(opts) {
-    this.auth = "accessToken" in opts && opts.accessToken ? { accessToken: opts.accessToken } : { account: opts.account };
+    if ("apiKey" in opts && opts.apiKey) {
+      this.auth = { apiKey: opts.apiKey };
+    } else if ("accessToken" in opts && opts.accessToken) {
+      this.auth = { accessToken: opts.accessToken };
+    } else {
+      this.auth = { account: opts.account };
+    }
     this.gatewayUrl = opts.gatewayUrl.replace(/\/$/, "");
     this.chainId = opts.chainId ?? 8453;
     this.domainName = opts.domainName ?? "Mneme";
@@ -108,6 +114,31 @@ var Mneme = class {
   from(table) {
     return new Collection(this, table);
   }
+  /**
+   * Natural-language → SQL via the gateway's LLM proxy.
+   * Use the returned SQL with `m.sql(...)` to execute it.
+   */
+  llm = {
+    sql: (args) => this.request(
+      "POST",
+      "/v1/llm/sql",
+      args
+    )
+  };
+  /**
+   * Service-account API keys — for B2B2C integrators (e.g. Gitlawb) that
+   * distribute scoped keys to end-users who don't have wallets.
+   *
+   * Only callable by wallet-authed clients (keys cannot mint more keys).
+   */
+  serviceKeys = {
+    /** Mint a new scoped key. Returns the raw key value ONCE. */
+    create: (args) => this.request("POST", "/v1/service/keys", args),
+    /** List all keys you've created (no raw values — only metadata). */
+    list: () => this.request("GET", "/v1/service/keys"),
+    /** Revoke a key by id. */
+    revoke: (id) => this.request("DELETE", `/v1/service/keys/${id}`)
+  };
   /**
    * Run raw SQL against your project's Postgres schema.
    *
@@ -174,7 +205,9 @@ var Mneme = class {
   async request(method, path, body) {
     const bodyText = body === void 0 ? "" : JSON.stringify(body);
     const headers = { "Content-Type": "application/json" };
-    if ("accessToken" in this.auth && this.auth.accessToken) {
+    if ("apiKey" in this.auth && this.auth.apiKey) {
+      headers["Authorization"] = `ApiKey ${this.auth.apiKey}`;
+    } else if ("accessToken" in this.auth && this.auth.accessToken) {
       headers["Authorization"] = `Bearer ${this.auth.accessToken}`;
     } else if ("account" in this.auth && this.auth.account) {
       const signed = await signRequest({
@@ -188,7 +221,7 @@ var Mneme = class {
       });
       Object.assign(headers, signed);
     } else {
-      throw new Error("Mneme: either { account } or { accessToken } is required");
+      throw new Error("Mneme: one of { account }, { accessToken }, or { apiKey } is required");
     }
     const res = await fetch(`${this.gatewayUrl}${path}`, {
       method,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "mneme-sdk",
-  "version": "0.3.0",
-  "description": "TypeScript SDK for Mneme — agent-native Postgres + R2 storage on Base. Wallet-auth, runtime DDL, full CRUD with WHERE filters, raw SQL, pgvector, wallet-bound files with $MNEME burn quota.",
+  "version": "0.4.0",
+  "description": "TypeScript SDK for Mneme — agent-native Postgres + R2 storage on Base. Wallet-auth, runtime DDL, full CRUD with WHERE filters, raw SQL, pgvector, service-account API keys for B2B2C integrations, wallet-bound files with $MNEME burn quota.",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",