[tobi-ax]

Resolves TSSDK-78.

Summary

The Console needs to read a run that was shared by link (CON-647). The generated PublicApi already takes a shareToken on the four run reads, but the PlatformSDK methods built on them had no way to pass one.

getRun, listRunResults, getRunItem, downloadArtifact and downloadArtifactStream now take an optional shareToken and hand it to the generated call, which sends it as the share_token query parameter:

await sdk.getRun(runId, { shareToken });
await sdk.listRunResults(runId, { page: 1, shareToken });
await sdk.getRunItem(runId, externalId, { shareToken });
await sdk.downloadArtifact(runId, artifactId, { shareToken });
await sdk.downloadArtifactStream(runId, artifactId, { shareToken });

listRunResults already had an options object, so shareToken joins it. The other four get a new trailing options object with a default of {}. Existing call forms keep compiling and send the same requests as in 3.8.1, because the generated code only adds share_token when the value is defined.

The feat(sdk) commit makes release-please propose a minor release of @aignostics/sdk.

Testing

platform-sdk.test.ts gets a table-driven block that runs each of the five methods twice against the MSW mocks and inspects the outgoing request URL:

• with { shareToken: 'share-token-value' }, share_token equals that value
• without options, there is no share_token parameter at all

The five positive cases fail against the source on main. Lint, typecheck and the full SDK and CLI unit suites pass locally.

Spec

docs/specs/SPEC-SDK.md (SPEC-SDK) gets the matching changes:

• scope lists read access to runs shared by link
• the SWR-APP-RUN-MGMT-DETAILS and SWR-APP-RESULTS-RETRIEVE-ITEMS rows name the shareToken option
• the interface listing shows the new signatures, including getRunItem, downloadArtifact and downloadArtifactStream, which the spec did not list before
• 3.6.2 Authorization describes how the share token is sent, and that it ends up in request URLs and therefore in access logs

The rest of the spec (grants, share-token management, retries on downloads, line numbers in 4.3) is still behind the code and stays out of this PR.

This branch now carries a Ketryx item, so it gets new commits only, no force-pushes.

🤖 Generated with Claude Code

[ox-security]

OX Security reviewed this pull request — nothing to fix.

✔ No issues found

Branch feat/TSSDK-78-share-token-run-reads → main

View scan in OX Security →

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

@@            Coverage Diff             @@
##             main     #187      +/-   ##
==========================================
- Coverage   93.44%   93.42%   -0.03%     
==========================================
  Files          15       15              
  Lines        2488     2509      +21     
  Branches      296      297       +1     
==========================================
+ Hits         2325     2344      +19     
  Misses        163      163              
- Partials        0        2       +2     

Flag	Coverage Δ
unittests	93.42% <100.00%> (+0.05%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
packages/sdk/src/platform-sdk.ts	99.35% <100.00%> (+0.03%)	⬆️

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud