Skip to content

Release @pymthouse/builder-sdk v0.1.0 — config, tokens, device-initiate, workflows#17

Merged
eliteprox merged 3 commits into
mainfrom
feat/sdk-enhancements
May 27, 2026
Merged

Release @pymthouse/builder-sdk v0.1.0 — config, tokens, device-initiate, workflows#17
eliteprox merged 3 commits into
mainfrom
feat/sdk-enhancements

Conversation

@eliteprox
Copy link
Copy Markdown
Collaborator

Summary

  • Release v0.1.0 with new subpath exports: @pymthouse/builder-sdk/config, /tokens, and /device-initiate for Edge/middleware-safe env reads, signer session helpers, and Option B device login validation.
  • Extend PmtHouseClient with usage BFF (fetchUsageForExternalUser), app manifest (getAppManifest), and workflow helpers (mintSignerSessionForExternalUser, approveDeviceLogin).
  • Pin all third-party GitHub Actions to full commit SHAs (SonarQube security hotspots githubactions:S7637).

Test plan

  • pnpm test (43 tests)
  • CI green on PR
  • SonarQube security hotspots cleared after scan
  • Tag v0.1.0 and pnpm publish after merge (if not already published)

Made with Cursor

eliteprox and others added 3 commits May 27, 2026 15:51
- Introduced `@pymthouse/builder-sdk/config` for environment configuration utilities.
- Added `@pymthouse/builder-sdk/tokens` for signer session TTL and JWT expiry helpers.
- Implemented `@pymthouse/builder-sdk/device-initiate` for Option B device login validation.
- Enhanced Usage API with new methods: `fetchUsageForExternalUser`, `buildMeScopeUsagePayload`, and `getAppManifest`.
- Updated README.md to reflect new features and usage examples.
- Added tests for new functionalities to ensure reliability.
- Introduced `@pymthouse/builder-sdk/config` for environment configuration utilities.
- Added `@pymthouse/builder-sdk/tokens` for signer session TTL and JWT expiry helpers.
- Implemented `@pymthouse/builder-sdk/device-initiate` for Option B device login validation.
- Enhanced Usage API with new methods: `fetchUsageForExternalUser`, `buildMeScopeUsagePayload`, and `getAppManifest`.
- Updated README.md to reflect new features and usage examples.
- Added tests for new functionalities to ensure reliability.
Replace global regex replaces with replaceAll, remove ReDoS-prone
padding trim in token tests, flatten nested ternaries, and use
optional chaining for client_id validation.

Co-authored-by: Cursor <cursoragent@cursor.com>
@sonarqubecloud
Copy link
Copy Markdown

@eliteprox eliteprox merged commit 0237df6 into main May 27, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant