feat(client-tokens): support ephemeral keys v2

[AdirAmsalem]

Summary

• Add expiresIn, allowedModels, and constraints options to CreateTokenOptions for controlling token expiry, model access, and operational limits
• Add permissions and constraints fields to CreateTokenResponse
• Type allowedModels using (Model | (string & {}))[] for autocomplete with flexibility for unknown models
• Simplify request body construction to forward the full options object instead of only metadata
• Add 6 unit tests covering the new request/response fields

Usage

const token = await client.tokens.create({
  expiresIn: 300,
  allowedModels: ["lucy-pro-t2v", "lucy-pro-i2v"],
  constraints: { realtime: { maxSessionDuration: 120 } },
});

// token.apiKey         → "ek_..."
// token.expiresAt      → "2024-12-15T12:15:00Z"
// token.permissions    → { models: ["lucy-pro-t2v", "lucy-pro-i2v"] }
// token.constraints    → { realtime: { maxSessionDuration: 120 } }

Test plan

• All 145 unit tests pass (npm test)

🤖 Generated with Claude Code

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/@decartai/sdk@102

commit: f620f23