@anuma/sdk 6.22.0 → 6.24.0

package/dist/tools/index.d.ts

@@ -706,6 +706,172 @@ declare function callNotionMCPTool<T>(accessToken: string, toolName: string, arg
  */
 declare function createGitHubTools(getAccessToken: () => string | null, requestGitHubAccess: () => Promise<string>): ToolConfig[];
 
+/**
+ * Client for the agentres.dev registration flow.
+ *
+ * Signer-agnostic on purpose: it takes a `signMessage` closure, a base58
+ * address and a `fetch`, and imports nothing app-specific. The browser app
+ * bridges Privy's embedded Solana wallet to {@link SolanaSignMessageFn} the
+ * same way `usePrivySigningAdapters` already bridges the EVM one for
+ * encryption, and this module never learns that Privy exists.
+ *
+ * Registration is four calls plus a status read, and the user is step three:
+ *
+ * 1. {@link AgentresClient.ensureAccount} — creates the wallet-bound account.
+ * 2. {@link AgentresClient.requestCode} — agentres asks Resy to email a code.
+ * 3. The user reads the 6-digit code out of their own inbox.
+ * 4. {@link AgentresClient.verifyCode} — agentres verifies it and stores the
+ *    Resy credential.
+ * 5. {@link AgentresClient.getLinkStatus} — confirms `resyLinked`.
+ *
+ * The same email goes to all of them, and its field name is `em_address` on
+ * `/api/link-resy` but `email` on `/api/account`. They are the provider's
+ * spellings, not a typo.
+ *
+ * Whichever key signs IS the account, permanently — agentres derives identity
+ * from the signature and has no unlink endpoint. So this client must be given
+ * the end user's own wallet, never a shared or treasury one.
+ *
+ * @module lib/connectors/agentres/client
+ */
+/**
+ * Signs arbitrary bytes with the user's Solana key.
+ *
+ * Bytes in, bytes out — the SDK base58-encodes the result. Keep it byte-typed
+ * end to end: a `Uint8Array` that reaches a string API stringifies to a
+ * comma-separated digit list, which signs and encodes cleanly and verifies as
+ * garbage with no error anywhere (ai-memoryless-client#7217).
+ */
+type SolanaSignMessageFn = (message: Uint8Array) => Promise<Uint8Array>;
+/** The `fetch` surface this client uses. Injected so tests make no network call. */
+type FetchLike = (url: string, init?: RequestInit) => Promise<Response>;
+interface AgentresClientOptions {
+    /** The user's own Solana address, base58. The identity the proof asserts. */
+    address: string;
+    signMessage: SolanaSignMessageFn;
+    /** @default "https://agentres.dev" */
+    baseUrl?: string;
+    /** @default globalThis.fetch */
+    fetch?: FetchLike;
+}
+/** One call to make through {@link AgentresClient.withSiwx}. */
+interface AgentresRequest {
+    method: "GET" | "POST";
+    /** Path on the agentres host, e.g. `/api/me`. */
+    path: string;
+    /** JSON body, for POSTs. */
+    body?: unknown;
+}
+/** `POST /api/account` — the wallet-bound account, resolved or created. */
+interface AgentresAccount {
+    accountId: string;
+    email: string | null;
+    /** `wallet` for this flow; `api_key` is the other auth path agentres offers. */
+    credentialKind: string;
+    walletLinked: boolean;
+}
+/** `POST /api/link-resy` — which half of the OTP exchange just completed. */
+interface AgentresLinkStep {
+    step: "code_sent" | "linked";
+    message?: string;
+    /** Present once linked. */
+    resyUserId?: number;
+}
+/** `GET /api/me` — what the tile renders from. */
+interface AgentresLinkStatus {
+    accountId: string;
+    email: string | null;
+    resyLinked: boolean;
+    /** The address agentres resolved from the proof. Base58, despite the OpenAPI's 0x pattern. */
+    walletAddress: string | null;
+    resyLinkedAt: string | null;
+}
+interface AgentresClient {
+    /**
+     * Make one call, satisfying its 402 with a fresh SIWX proof.
+     *
+     * Always two requests: the first is unauthenticated and expected to answer
+     * 402, the second carries the proof. Nonces are single-use and expire minutes
+     * after they are issued, so nothing here is cached — a reused challenge works
+     * in a fast dev loop and fails in real use.
+     */
+    withSiwx<T>(request: AgentresRequest): Promise<T>;
+    ensureAccount(email: string): Promise<AgentresAccount>;
+    requestCode(email: string): Promise<AgentresLinkStep>;
+    verifyCode(email: string, code: string): Promise<AgentresLinkStep>;
+    getLinkStatus(): Promise<AgentresLinkStatus>;
+}
+/**
+ * Build a client bound to one wallet.
+ *
+ * The client holds no state between calls, deliberately. The pending code lives
+ * at agentres, keyed by email, and step three of the flow sends the user out to
+ * their inbox — on a phone that can unmount the page, so the instance that
+ * requested the code is often not the instance that verifies it. A client that
+ * remembered would refuse a code that is still perfectly valid upstream.
+ */
+declare function createAgentresClient(options: AgentresClientOptions): AgentresClient;
+
+/**
+ * Typed errors for the agentres connector.
+ *
+ * agentres states every refusal in one envelope, on every route:
+ *
+ * ```json
+ * { "error": { "code": "NO_LINKED_ACCOUNT", "message": "…", "retryable": false,
+ *              "next_step": "Call POST /api/link-resy with the account email." } }
+ * ```
+ *
+ * `next_step` is often the only actionable part — it is the provider's own
+ * sentence about what to do next — so it is carried through to the caller
+ * rather than folded into the message. The registration UI shows the raw code
+ * and message, which is deliberate: a refusal here is usually the user's Resy
+ * account state, not a bug, and paraphrasing it hides what to fix.
+ *
+ * The SIWX errors are separate because they are ours, not the provider's: they
+ * mean the challenge never became a usable proof, so no request was authorized.
+ *
+ * @module lib/connectors/agentres/errors
+ */
+/**
+ * Provider codes the registration flow can return.
+ *
+ * `AgentresError.code` stays a plain `string` — agentres documents two dozen
+ * more for the booking routes, and new ones appear without a version bump —
+ * but these four are the ones a registration surface has to handle by name.
+ */
+type AgentresErrorCode = "NO_LINKED_ACCOUNT" | "RESY_VERIFICATION_FAILED" | "RESY_NO_PAYMENT_METHOD" | "UNAUTHORIZED";
+/** A refusal agentres stated, decoded from its error envelope. */
+declare class AgentresError extends Error {
+    /** HTTP status the refusal arrived with. */
+    readonly status: number;
+    /** Provider's stable machine-readable code, e.g. `NO_LINKED_ACCOUNT`. */
+    readonly code: string;
+    /** Whether the provider says the same call could work later. */
+    readonly retryable: boolean;
+    /** What the provider says to do about it, when it says anything. */
+    readonly nextStep?: string;
+    constructor(status: number, code: string, message: string, retryable: boolean, nextStep?: string);
+}
+/**
+ * The 402 carried no `sign-in-with-x` extension.
+ *
+ * That marks a paid endpoint, which SIWX cannot satisfy. Signing anyway would
+ * produce a well-formed proof the server answers with a bare 401, so the cause
+ * has to be named here or it surfaces as an authentication mystery later.
+ */
+declare class SiwxUnsupportedError extends Error {
+    constructor(message: string);
+}
+/** The challenge could not be read, or is missing something the proof needs. */
+declare class SiwxChallengeError extends Error {
+    /** The underlying decode failure, when there was one. */
+    readonly cause?: unknown;
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+
 /**
  * Token-getter factory shared by every connector tool factory.
  *
@@ -2849,4 +3015,4 @@ declare const DEFAULT_MAX_DOCUMENT_CONVERSATIONS = 1000;
  */
 declare function createDocumentTools({ getConversationId, storage, logError, displayDocument, maxConversations, }: CreateDocumentToolsOptions): ToolConfig[];
 
-export { ADD_SLIDE_SCHEMA, APP_BUILDER_PROMPT, APP_COMPLETE_CONNECT_ACK_TYPE, APP_COMPLETE_CONNECT_TYPE, APP_COMPLETE_DEFAULT_TIMEOUT_MS, APP_COMPLETE_IFRAME_SHIM_SCRIPT, APP_COMPLETE_REQUEST_TYPE, APP_COMPLETE_RESPONSE_TYPE, APP_COMPLETE_STUB_SCRIPT, APP_FILE_TOOL_NAMES, APP_PREVIEW_BASELINE_CSS, AUDIT_DESIGN_SCHEMA, type AnchorMatch, type AnumaChild, AnumaJsxError, type AnumaNode, type AppCompleteBridge, type AppCompleteBridgeOptions, type AppFileRecord, type AppFileStorage, type AttrValue, type AuditIssue, type AuditIssueType, type AuditResult, type AuditSeverity, type AuditTokens, type BuildSlideSystemPromptOptions, CONNECTOR_ERROR_MARKER, CREATE_DOCUMENT_SCHEMA, CREATE_FILE_SCHEMA, CRITIQUE_DESIGN_SCHEMA, type CalendarEvent, type ChartDataPoint, type ChoiceOption, type ConnectorErrorCode, type ConnectorMintError, type ConnectorMintResult, type ConnectorTokenGetterOpts, type ConnectorTokenSource, type CreateAppGenerationToolsOptions, type CreateDocumentToolsOptions, type CreateEventArgs, type CreateFileArgs, type CreateSlideToolsOptions, type CreateUIToolsOptions, type CreateWeatherToolOptions, DEFAULT_DESIGN_CRITIQUE_RUBRIC, DEFAULT_DOCUMENT_ID, DEFAULT_MAX_CONVERSATIONS, DEFAULT_MAX_DOCUMENT_CONVERSATIONS, DELETE_FILE_SCHEMA, DOCUMENT_BUILDER_PROMPT, DOCUMENT_TOOL_NAMES, type DisplayChartResult, type DisplayConnectorResult, type DisplayPhoneCallOfferResult, type DisplayToolConfig, type DisplayToolMigrations, type DisplayWeatherResult, type DocAttrValue, type DocChild, DocDslError, type DocNode, type DriveFile, type DropboxRequestAccess, type DropboxTokenGetter, type ExportAppOptions, FONT_LIBRARY, FONT_PRESETS, type FileChangeEvent, type FileSnippet, type FontCategory, type FontPreset, type FontSpec, type ForecastDay, type FormField, type FormFieldOption, type FormFieldType, type GetFileContentArgs, type GmailGetMessageArgs, type GmailMessageDetail, type GmailMessageSummary, type GmailRequestAccess, type GmailSearchArgs, type GmailSendMessageArgs, type GmailTokenGetter, type InteractiveToolConfig, type KnownTag, LAYOUT_MODES, LIST_FILES_SCHEMA, type LayoutMode, type LegacyDeckJson, type ListEventsArgs, type ListRecentFilesArgs, MapFileStorage, type NotionCreatePagesArgs, type NotionFetchArgs, type NotionMovePagesArgs, type NotionSearchArgs, type NotionUpdatePageArgs, PATCH_DOCUMENT_SCHEMA, PATCH_FILE_SCHEMA, PATCH_SLIDES_SCHEMA, PLAN_DECK_SCHEMA, type PatchFailure, type PatchFailureReason, type PdfTag, READ_DOCUMENT_SCHEMA, READ_FILE_SCHEMA, READ_SLIDES_SCHEMA, RUNTIME_ERROR_OVERLAY_SCRIPT, SLIDES_FILE_PATH, SLIDE_CANVAS_HEIGHT, SLIDE_CANVAS_WIDTH, type SearchFilesArgs, type SlackGetChannelHistoryArgs, type SlackGetThreadRepliesArgs, type SlackListChannelsArgs, type SlackListDmsArgs, type SlackListUsersArgs, type SlackPostMessageArgs, type SlackProxyCaller, type SlackSearchMessagesArgs, type SlideToolSet, THEME_ATTRS, type ThemeAttr, type ToolConfig, type ToolExecutionErrorType, type ToolExecutionResult, type UIInteractionContext, type UpdateEventArgs, type UpdateFileArgs, VERIFY_APP_SCHEMA, type VerifyAppResult, type XGetMeArgs, type XGetMyPostsArgs, type XProxyCaller, applyPatches, auditDesign, buildAppFileManifest, buildAppSystemPrompt, buildConnectorErrorResult, buildDocumentSystemPrompt, buildFontsUrl, buildSlideSystemPrompt, callNotionMCPTool, connectorMintErrorToToolResult, convertLegacyDeckJson, createAppCompleteBridge, createAppGenerationTools, createChartTool, createChatTools, createChoiceTool, createConnectorOfferTool, createConnectorTokenGetter, createDisplayTool, createDocumentTools, createDriveTools, createDropboxTools, createFormTool, createGitHubTools, createGmailTools, createGoogleCalendarCreateEventTool, createGoogleCalendarTool, createGoogleCalendarUpdateEventTool, createGoogleDriveCreateFileTool, createGoogleDriveGetContentTool, createGoogleDriveListRecentTool, createGoogleDriveSearchTool, createGoogleDriveUpdateFileTool, createInteractiveTool, createNotionCreateCommentTool, createNotionCreateDatabaseTool, createNotionCreatePagesTool, createNotionDuplicatePageTool, createNotionFetchTool, createNotionGetCommentsTool, createNotionGetTeamsTool, createNotionGetUsersTool, createNotionMovePagesTool, createNotionSearchTool, createNotionTools, createNotionUpdateDataSourceTool, createNotionUpdatePageTool, createPhoneCallOfferTool, createSlackTools, createSlideTools, createWeatherTool, createXTools, documentPath, exportAppToHtml, findById, findParentOfId, getFontByName, getId, getMCPEndpoints, getNumberAttr, getStringAttr, insertAfterId, insertChild, installAppCompleteIframeShim, isAnumaTag, isHtmlTag, isKnownFont, isLegacyDeckJson, isPdfTag, migrateDisplayResult, normalizePath, parseDocumentDsl, parseJsx, pdfStyleKeys, pdfTags, removeById, replaceById, serializeJsx, truncateContent, updateAttrs, walk };
+export { ADD_SLIDE_SCHEMA, APP_BUILDER_PROMPT, APP_COMPLETE_CONNECT_ACK_TYPE, APP_COMPLETE_CONNECT_TYPE, APP_COMPLETE_DEFAULT_TIMEOUT_MS, APP_COMPLETE_IFRAME_SHIM_SCRIPT, APP_COMPLETE_REQUEST_TYPE, APP_COMPLETE_RESPONSE_TYPE, APP_COMPLETE_STUB_SCRIPT, APP_FILE_TOOL_NAMES, APP_PREVIEW_BASELINE_CSS, AUDIT_DESIGN_SCHEMA, type AgentresAccount, type AgentresClient, type AgentresClientOptions, AgentresError, type AgentresErrorCode, type AgentresLinkStatus, type AgentresLinkStep, type AnchorMatch, type AnumaChild, AnumaJsxError, type AnumaNode, type AppCompleteBridge, type AppCompleteBridgeOptions, type AppFileRecord, type AppFileStorage, type AttrValue, type AuditIssue, type AuditIssueType, type AuditResult, type AuditSeverity, type AuditTokens, type BuildSlideSystemPromptOptions, CONNECTOR_ERROR_MARKER, CREATE_DOCUMENT_SCHEMA, CREATE_FILE_SCHEMA, CRITIQUE_DESIGN_SCHEMA, type CalendarEvent, type ChartDataPoint, type ChoiceOption, type ConnectorErrorCode, type ConnectorMintError, type ConnectorMintResult, type ConnectorTokenGetterOpts, type ConnectorTokenSource, type CreateAppGenerationToolsOptions, type CreateDocumentToolsOptions, type CreateEventArgs, type CreateFileArgs, type CreateSlideToolsOptions, type CreateUIToolsOptions, type CreateWeatherToolOptions, DEFAULT_DESIGN_CRITIQUE_RUBRIC, DEFAULT_DOCUMENT_ID, DEFAULT_MAX_CONVERSATIONS, DEFAULT_MAX_DOCUMENT_CONVERSATIONS, DELETE_FILE_SCHEMA, DOCUMENT_BUILDER_PROMPT, DOCUMENT_TOOL_NAMES, type DisplayChartResult, type DisplayConnectorResult, type DisplayPhoneCallOfferResult, type DisplayToolConfig, type DisplayToolMigrations, type DisplayWeatherResult, type DocAttrValue, type DocChild, DocDslError, type DocNode, type DriveFile, type DropboxRequestAccess, type DropboxTokenGetter, type ExportAppOptions, FONT_LIBRARY, FONT_PRESETS, type FileChangeEvent, type FileSnippet, type FontCategory, type FontPreset, type FontSpec, type ForecastDay, type FormField, type FormFieldOption, type FormFieldType, type GetFileContentArgs, type GmailGetMessageArgs, type GmailMessageDetail, type GmailMessageSummary, type GmailRequestAccess, type GmailSearchArgs, type GmailSendMessageArgs, type GmailTokenGetter, type InteractiveToolConfig, type KnownTag, LAYOUT_MODES, LIST_FILES_SCHEMA, type LayoutMode, type LegacyDeckJson, type ListEventsArgs, type ListRecentFilesArgs, MapFileStorage, type NotionCreatePagesArgs, type NotionFetchArgs, type NotionMovePagesArgs, type NotionSearchArgs, type NotionUpdatePageArgs, PATCH_DOCUMENT_SCHEMA, PATCH_FILE_SCHEMA, PATCH_SLIDES_SCHEMA, PLAN_DECK_SCHEMA, type PatchFailure, type PatchFailureReason, type PdfTag, READ_DOCUMENT_SCHEMA, READ_FILE_SCHEMA, READ_SLIDES_SCHEMA, RUNTIME_ERROR_OVERLAY_SCRIPT, SLIDES_FILE_PATH, SLIDE_CANVAS_HEIGHT, SLIDE_CANVAS_WIDTH, type SearchFilesArgs, SiwxChallengeError, SiwxUnsupportedError, type SlackGetChannelHistoryArgs, type SlackGetThreadRepliesArgs, type SlackListChannelsArgs, type SlackListDmsArgs, type SlackListUsersArgs, type SlackPostMessageArgs, type SlackProxyCaller, type SlackSearchMessagesArgs, type SlideToolSet, type SolanaSignMessageFn, THEME_ATTRS, type ThemeAttr, type ToolConfig, type ToolExecutionErrorType, type ToolExecutionResult, type UIInteractionContext, type UpdateEventArgs, type UpdateFileArgs, VERIFY_APP_SCHEMA, type VerifyAppResult, type XGetMeArgs, type XGetMyPostsArgs, type XProxyCaller, applyPatches, auditDesign, buildAppFileManifest, buildAppSystemPrompt, buildConnectorErrorResult, buildDocumentSystemPrompt, buildFontsUrl, buildSlideSystemPrompt, callNotionMCPTool, connectorMintErrorToToolResult, convertLegacyDeckJson, createAgentresClient, createAppCompleteBridge, createAppGenerationTools, createChartTool, createChatTools, createChoiceTool, createConnectorOfferTool, createConnectorTokenGetter, createDisplayTool, createDocumentTools, createDriveTools, createDropboxTools, createFormTool, createGitHubTools, createGmailTools, createGoogleCalendarCreateEventTool, createGoogleCalendarTool, createGoogleCalendarUpdateEventTool, createGoogleDriveCreateFileTool, createGoogleDriveGetContentTool, createGoogleDriveListRecentTool, createGoogleDriveSearchTool, createGoogleDriveUpdateFileTool, createInteractiveTool, createNotionCreateCommentTool, createNotionCreateDatabaseTool, createNotionCreatePagesTool, createNotionDuplicatePageTool, createNotionFetchTool, createNotionGetCommentsTool, createNotionGetTeamsTool, createNotionGetUsersTool, createNotionMovePagesTool, createNotionSearchTool, createNotionTools, createNotionUpdateDataSourceTool, createNotionUpdatePageTool, createPhoneCallOfferTool, createSlackTools, createSlideTools, createWeatherTool, createXTools, documentPath, exportAppToHtml, findById, findParentOfId, getFontByName, getId, getMCPEndpoints, getNumberAttr, getStringAttr, insertAfterId, insertChild, installAppCompleteIframeShim, isAnumaTag, isHtmlTag, isKnownFont, isLegacyDeckJson, isPdfTag, migrateDisplayResult, normalizePath, parseDocumentDsl, parseJsx, pdfStyleKeys, pdfTags, removeById, replaceById, serializeJsx, truncateContent, updateAttrs, walk };

package/dist/tools/index.mjs

@@ -586,7 +586,7 @@ function createPhoneCallOfferTool(options) {
 function createConnectorOfferTool(options) {
   return createDisplayTool(options, {
     name: "display_connector",
-    description: "Display an inline card that prompts the user to connect an app or service (for example Notion, Gmail, Google Drive, Google Calendar, GitHub, Dropbox). Call this when the user asks to connect, link, enable, or authorize one of these apps, or when answering their request requires access the user has not yet granted. The card renders the connect prompt visually; do NOT repeat the connection instructions in your text response.",
+    description: "Display an inline card that prompts the user to connect an app or service (for example Notion, Gmail, Google Drive, Google Calendar, GitHub, Dropbox, or Agentic Reservations for restaurant bookings, id 'agentres'). Call this when the user asks to connect, link, enable, or authorize one of these apps, or when answering their request requires access the user has not yet granted. The card renders the connect prompt visually; do NOT repeat the connection instructions in your text response.",
     parameters: {
       type: "object",
       properties: {
@@ -2401,6 +2401,344 @@ function createGitHubTools(getAccessToken, requestGitHubAccess) {
   ];
 }
 
+// src/lib/connectors/agentres/errors.ts
+var AgentresError = class extends Error {
+  constructor(status, code, message, retryable, nextStep) {
+    super(message);
+    this.name = "AgentresError";
+    this.status = status;
+    this.code = code;
+    this.retryable = retryable;
+    this.nextStep = nextStep;
+  }
+};
+var SiwxUnsupportedError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SiwxUnsupportedError";
+  }
+};
+var SiwxChallengeError = class extends Error {
+  constructor(message, options) {
+    super(message);
+    this.name = "SiwxChallengeError";
+    this.cause = options?.cause;
+  }
+};
+function parseAgentresError(status, body) {
+  const stated = statedError(body);
+  if (!stated) {
+    return new AgentresError(
+      status,
+      `HTTP_${status}`,
+      body.trim() || `HTTP ${status}`,
+      status >= 500
+    );
+  }
+  const code = typeof stated.code === "string" ? stated.code : `HTTP_${status}`;
+  const message = typeof stated.message === "string" ? stated.message : `HTTP ${status}`;
+  const retryable = typeof stated.retryable === "boolean" ? stated.retryable : status >= 500;
+  const nextStep = typeof stated.next_step === "string" ? stated.next_step : void 0;
+  return new AgentresError(status, code, message, retryable, nextStep);
+}
+function statedError(body) {
+  let parsed;
+  try {
+    parsed = JSON.parse(body);
+  } catch {
+    return null;
+  }
+  const envelope = parsed;
+  const stated = typeof envelope?.error === "object" && envelope.error !== null ? envelope.error : null;
+  if (!stated) {
+    return null;
+  }
+  const fields = stated;
+  if (typeof fields.code !== "string" && typeof fields.message !== "string") {
+    return null;
+  }
+  return fields;
+}
+
+// src/lib/processors/encoding.ts
+var B64_ENCODE_CHUNK = 32768 * 3;
+function uint8ArrayToBase64(data) {
+  if (typeof Buffer !== "undefined") {
+    return Buffer.from(data).toString("base64");
+  }
+  let base64 = "";
+  for (let i = 0; i < data.length; i += B64_ENCODE_CHUNK) {
+    const slice = data.subarray(i, i + B64_ENCODE_CHUNK);
+    let binary = "";
+    for (let j = 0; j < slice.length; j++) {
+      binary += String.fromCharCode(slice[j]);
+    }
+    base64 += btoa(binary);
+  }
+  return base64;
+}
+function base64ToUint8Array(base64) {
+  if (typeof Buffer !== "undefined") {
+    const buf = Buffer.from(base64, "base64");
+    return new Uint8Array(buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength));
+  }
+  const binary = atob(base64);
+  const bytes = new Uint8Array(binary.length);
+  for (let i = 0; i < binary.length; i++) {
+    bytes[i] = binary.charCodeAt(i);
+  }
+  return bytes;
+}
+
+// src/lib/connectors/agentres/siwx.ts
+var PAYMENT_REQUIRED_HEADER = "PAYMENT-REQUIRED";
+var SIWX_HEADER = "SIGN-IN-WITH-X";
+var SIWX_EXTENSION = "sign-in-with-x";
+var SOLANA_NAMESPACE = "solana:";
+function parseChallenge(paymentRequiredHeader, expectedOrigin) {
+  const decoded = decodeHeader(paymentRequiredHeader);
+  const extensions = asRecord(decoded.extensions);
+  const extension = extensions ? asRecord(extensions[SIWX_EXTENSION]) : null;
+  if (!extension) {
+    throw new SiwxUnsupportedError(
+      "the 402 carries no sign-in-with-x extension, so this endpoint is paid rather than identity-only"
+    );
+  }
+  const info = asRecord(extension.info);
+  if (!info) {
+    throw new SiwxChallengeError("the sign-in-with-x extension has no info block");
+  }
+  const chain = solanaChain(extension.supportedChains);
+  const challenge = {
+    domain: requireString(info, "domain"),
+    uri: requireString(info, "uri"),
+    version: requireString(info, "version"),
+    statement: requireString(info, "statement"),
+    nonce: requireString(info, "nonce"),
+    issuedAt: requireString(info, "issuedAt"),
+    resources: requireResources(info),
+    chainId: chain.chainId,
+    signingType: chain.signingType
+  };
+  assertScopedTo(challenge, expectedOrigin);
+  return challenge;
+}
+function assertScopedTo(challenge, expectedOrigin) {
+  const expected = parseUrl(expectedOrigin, `the agentres base URL "${expectedOrigin}"`);
+  if (challenge.domain !== expected.host) {
+    throw new SiwxChallengeError(
+      `the challenge is scoped to "${challenge.domain}" but this client talks to "${expected.host}" \u2014 refusing to sign it`
+    );
+  }
+  const uri = parseUrl(challenge.uri, `the sign-in-with-x uri "${challenge.uri}"`);
+  if (uri.origin !== expected.origin) {
+    throw new SiwxChallengeError(
+      `the challenge addresses "${uri.origin}" but this client talks to "${expected.origin}" \u2014 refusing to sign it`
+    );
+  }
+}
+function parseUrl(value, description) {
+  try {
+    return new URL(value);
+  } catch (cause) {
+    throw new SiwxChallengeError(`${description} is not a URL`, { cause });
+  }
+}
+function buildMessage(challenge, address) {
+  if (!challenge.chainId.startsWith(SOLANA_NAMESPACE)) {
+    throw new SiwxChallengeError(
+      `expected a solana: chain id for the message, got "${challenge.chainId}"`
+    );
+  }
+  const reference = challenge.chainId.slice(SOLANA_NAMESPACE.length);
+  const resources = challenge.resources.map((resource) => `- ${resource}`).join("\n");
+  return `${challenge.domain} wants you to sign in with your Solana account:
+${address}
+
+${challenge.statement}
+
+URI: ${challenge.uri}
+Version: ${challenge.version}
+Chain ID: ${reference}
+Nonce: ${challenge.nonce}
+Issued At: ${challenge.issuedAt}
+Resources:
+${resources}`;
+}
+function buildPayload(challenge, address, signature) {
+  const payload = {
+    domain: challenge.domain,
+    address,
+    statement: challenge.statement,
+    uri: challenge.uri,
+    version: challenge.version,
+    // Full CAIP-2 here, unlike the bare reference the message carries.
+    chainId: challenge.chainId,
+    type: challenge.signingType,
+    nonce: challenge.nonce,
+    issuedAt: challenge.issuedAt,
+    resources: challenge.resources,
+    signature: base58Encode(signature)
+  };
+  return uint8ArrayToBase64(new TextEncoder().encode(JSON.stringify(payload)));
+}
+var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+function base58Encode(bytes) {
+  let zeros = 0;
+  while (zeros < bytes.length && bytes[zeros] === 0) {
+    zeros++;
+  }
+  const digits = [];
+  for (let i = zeros; i < bytes.length; i++) {
+    let carry = bytes[i];
+    for (let j = 0; j < digits.length; j++) {
+      carry += digits[j] * 256;
+      digits[j] = carry % 58;
+      carry = Math.floor(carry / 58);
+    }
+    while (carry > 0) {
+      digits.push(carry % 58);
+      carry = Math.floor(carry / 58);
+    }
+  }
+  let encoded = "1".repeat(zeros);
+  for (let i = digits.length - 1; i >= 0; i--) {
+    encoded += BASE58_ALPHABET[digits[i]];
+  }
+  return encoded;
+}
+function decodeHeader(paymentRequiredHeader) {
+  let parsed;
+  try {
+    parsed = JSON.parse(new TextDecoder().decode(base64ToUint8Array(paymentRequiredHeader)));
+  } catch (cause) {
+    throw new SiwxChallengeError("the PAYMENT-REQUIRED header is not base64-encoded JSON", {
+      cause
+    });
+  }
+  const decoded = asRecord(parsed);
+  if (!decoded) {
+    throw new SiwxChallengeError("the PAYMENT-REQUIRED header did not decode to an object");
+  }
+  return decoded;
+}
+function solanaChain(supportedChains) {
+  if (!Array.isArray(supportedChains)) {
+    throw new SiwxChallengeError("the sign-in-with-x extension lists no supportedChains");
+  }
+  for (const entry of supportedChains) {
+    const chain = asRecord(entry);
+    const chainId = chain?.chainId;
+    if (typeof chainId !== "string" || !chainId.startsWith(SOLANA_NAMESPACE)) {
+      continue;
+    }
+    const signingType = chain?.type;
+    if (typeof signingType !== "string" || signingType === "") {
+      throw new SiwxChallengeError(`the ${chainId} entry declares no signing type`);
+    }
+    return { chainId, signingType };
+  }
+  throw new SiwxChallengeError("the sign-in-with-x extension offers no solana: chain");
+}
+function asRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function requireString(info, key) {
+  const value = info[key];
+  if (typeof value !== "string" || value === "") {
+    throw new SiwxChallengeError(`the sign-in-with-x info block has no ${key}`);
+  }
+  return value;
+}
+function requireResources(info) {
+  const resources = info.resources;
+  if (!Array.isArray(resources) || resources.length === 0) {
+    throw new SiwxChallengeError("the sign-in-with-x info block has no resources");
+  }
+  if (!resources.every((resource) => typeof resource === "string" && resource !== "")) {
+    throw new SiwxChallengeError("the sign-in-with-x resources are not all strings");
+  }
+  return resources;
+}
+
+// src/lib/connectors/agentres/client.ts
+var DEFAULT_BASE_URL = "https://agentres.dev";
+function createAgentresClient(options) {
+  const baseUrl = (options.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+  const fetchImpl = options.fetch ?? globalThis.fetch.bind(globalThis);
+  const { address, signMessage } = options;
+  async function withSiwx(request) {
+    const url = `${baseUrl}${request.path}`;
+    const init = requestInit(request);
+    const challenged = await fetchImpl(url, init);
+    if (challenged.status !== 402) {
+      return readBody(challenged);
+    }
+    await challenged.body?.cancel().catch(() => {
+    });
+    const header = challenged.headers.get(PAYMENT_REQUIRED_HEADER);
+    if (!header) {
+      throw new SiwxChallengeError(
+        `the 402 from ${request.path} carried no ${PAYMENT_REQUIRED_HEADER} header`
+      );
+    }
+    const challenge = parseChallenge(header, baseUrl);
+    const signature = await signMessage(new TextEncoder().encode(buildMessage(challenge, address)));
+    const authorized = await fetchImpl(url, {
+      ...init,
+      headers: { ...init.headers, [SIWX_HEADER]: buildPayload(challenge, address, signature) }
+    });
+    return readBody(authorized);
+  }
+  async function linkResy(body) {
+    const response = await withSiwx({ method: "POST", path: "/api/link-resy", body });
+    return { step: response.step, message: response.message, resyUserId: response.resy_user_id };
+  }
+  return {
+    withSiwx,
+    async ensureAccount(email) {
+      const body = await withSiwx({ method: "POST", path: "/api/account", body: { email } });
+      return {
+        accountId: body.account_id,
+        email: body.email,
+        credentialKind: body.credential_kind,
+        walletLinked: body.wallet_linked
+      };
+    },
+    requestCode(email) {
+      return linkResy({ em_address: email });
+    },
+    verifyCode(email, code) {
+      return linkResy({ em_address: email, code });
+    },
+    async getLinkStatus() {
+      const body = await withSiwx({ method: "GET", path: "/api/me" });
+      return {
+        accountId: body.account_id,
+        email: body.email,
+        resyLinked: body.resy_linked,
+        walletAddress: body.wallet_address,
+        resyLinkedAt: body.resy_linked_at ?? null
+      };
+    }
+  };
+}
+function requestInit(request) {
+  const headers = { Accept: "application/json" };
+  if (request.body === void 0) {
+    return { method: request.method, headers };
+  }
+  headers["Content-Type"] = "application/json";
+  return { method: request.method, headers, body: JSON.stringify(request.body) };
+}
+async function readBody(response) {
+  const body = await response.text();
+  if (!response.ok) {
+    throw parseAgentresError(response.status, body);
+  }
+  return JSON.parse(body);
+}
+
 // src/lib/connectors/client.ts
 var DEFAULT_REFRESH_BEFORE_MS = 3e4;
 function createConnectorTokenGetter(client, provider, opts = {}) {
@@ -13526,6 +13864,7 @@ export {
   APP_FILE_TOOL_NAMES,
   APP_PREVIEW_BASELINE_CSS,
   AUDIT_DESIGN_SCHEMA,
+  AgentresError,
   AnumaJsxError,
   CONNECTOR_ERROR_MARKER,
   CREATE_DOCUMENT_SCHEMA,
@@ -13555,6 +13894,8 @@ export {
   SLIDES_FILE_PATH,
   SLIDE_CANVAS_HEIGHT,
   SLIDE_CANVAS_WIDTH,
+  SiwxChallengeError,
+  SiwxUnsupportedError,
   THEME_ATTRS,
   VERIFY_APP_SCHEMA,
   applyPatches,
@@ -13568,6 +13909,7 @@ export {
   callNotionMCPTool,
   connectorMintErrorToToolResult,
   convertLegacyDeckJson,
+  createAgentresClient,
   createAppCompleteBridge,
   createAppGenerationTools,
   createChartTool,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anuma/sdk",
-  "version": "6.22.0",
+  "version": "6.24.0",
   "description": "",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",