Authentication

const key = await drd.apiKeys.create({
  name: "Production Agent Key",
  type: "agent",
  agentId: "01956abc-def0-...",
  scopes: ["guard:evaluate", "events:write", "agents:read"],
  expiresAt: "2026-12-31T23:59:59Z", // Optional expiration
});

// IMPORTANT: The key value is returned exactly once
console.log("Key:", key.apiKey); // drd_ag_sk_1a2b3c4d...

// Step 1: Issue a token (server-side, using your API key)
const { token, expiresIn } = await drd.tokens.issue();
// token:     "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9..."
// expiresIn: 900 (seconds = 15 minutes)

// Step 2: Use the token for guard calls (agent-side)
const decision = await fetch("https://api.drd.io/v1/guard", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${token}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    action: "send_email",
    context: { target: "user@example.com" },
    agentId: "01956abc-...",
  }),
}).then(r => r.json());

https://auth.drd.io/authorize?
  client_id=your_client_id&
  redirect_uri=https://your-app.com/callback&
  response_type=code&
  scope=agents:read policies:read guard:evaluate&
  state=random_csrf_token

const response = await fetch("https://auth.drd.io/token", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    grant_type: "authorization_code",
    client_id: "your_client_id",
    client_secret: "your_client_secret",
    code: "auth_code_from_callback",
    redirect_uri: "https://your-app.com/callback",
  }),
});

const { access_token, refresh_token, expires_in, scope } = await response.json();
// access_token:  "drd_oauth_at_..."  (1 hour TTL)
// refresh_token: "drd_oauth_rt_..."  (30 day TTL)

const agents = await fetch("https://api.drd.io/v1/agents", {
  headers: {
    "Authorization": "Bearer drd_oauth_at_...",
    "Content-Type": "application/json",
  },
}).then(r => r.json());