@briefgate/mcp 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Radim Sekera
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,329 @@
+# @briefgate/mcp
+
+**Stop your coding agent stalling on client logos, copy and credentials.**
+
+BriefGate is the first client intake tool built for AI agents. Your agent declares what it needs (`define_intake`), BriefGate generates a branded portal and chases the client automatically with email reminders, and your agent retrieves fully typed assets (`get_intake_results`) and keeps building.
+
+```
+Agent: define_intake(items=[logo, copy, wp_admin])
+BriefGate: → sends invite email → chases client every few days
+Client:    fills in the portal (mobile-friendly, no login required)
+Agent: get_intake_results() → { logo: "https://signed-url/logo.svg", wp_admin: "s3cr3t" }
+Agent: keeps building the website ✅
+```
+
+## Quickstart — Claude Code
+
+**1. Get an API key** at [briefgate.dev](https://briefgate.dev) (free tier available, no card required):
+
+**2. Register the MCP server:**
+
+```bash
+claude mcp add briefgate \
+  -e BRIEFGATE_API_KEY=bg_live_... \
+  -- npx @briefgate/mcp
+```
+
+Or add manually to `~/.claude/settings.json`:
+
+```json
+{
+  "mcpServers": {
+    "briefgate": {
+      "command": "npx",
+      "args": ["@briefgate/mcp"],
+      "env": {
+        "BRIEFGATE_API_KEY": "bg_live_..."
+      }
+    }
+  }
+}
+```
+
+**3. Verify it loaded** — run `/mcp` in Claude Code and look for `briefgate` with 7 tools.
+
+## Quickstart — Cursor / Codex / other MCP clients
+
+Add to your MCP config (usually `.cursor/mcp.json` or similar):
+
+```json
+{
+  "mcpServers": {
+    "briefgate": {
+      "command": "npx",
+      "args": ["-y", "@briefgate/mcp"],
+      "env": {
+        "BRIEFGATE_API_KEY": "bg_live_..."
+      }
+    }
+  }
+}
+```
+
+## Environment variables
+
+| Variable | Required | Default | Description |
+|---|---|---|---|
+| `BRIEFGATE_API_KEY` | Yes | — | API key (`bg_live_...` or `bg_test_...`). Obtain from the BriefGate dashboard. |
+| `BRIEFGATE_BASE_URL` | No | `https://api.briefgate.dev` | Override for self-hosted or staging. |
+| `BRIEFGATE_MCP_HTTP` | No | — | Set to `1` to start Streamable HTTP instead of stdio. |
+| `BRIEFGATE_MCP_PORT` | No | `3000` | Port for HTTP mode. |
+
+## HTTP (Streamable HTTP) mode
+
+For remote or multi-session deployments, start the server in HTTP mode:
+
+```bash
+BRIEFGATE_API_KEY=bg_live_... npx @briefgate/mcp --http --port 3000
+```
+
+The server binds to `127.0.0.1` only and includes DNS-rebinding protection. For production deployment behind a reverse proxy, see the [self-hosting docs](https://briefgate.dev/docs/self-host).
+
+## Tools
+
+### `define_intake`
+
+Create a new client intake — a branded portal where the client submits the assets you need. BriefGate sends the invite email and chases the client automatically until everything is collected.
+
+```
+project_name: "Website for Kramolíšová Finance"
+client: { email: "klient@firma.cz", name: "Michaela K.", language: "cs" }
+due_date: "2026-08-15"
+branding: { accent_color: "#1B2A4A", sender_name: "Radim" }
+chase_schedule: "default"   // default | gentle | aggressive | off
+items:
+  - { key: "logo",       type: "image",    label: "Company logo",
+      constraints: { formats: ["svg","png"], min_width: 512 } }
+  - { key: "hero_copy",  type: "longtext", label: "Homepage headline",
+      constraints: { max_chars: 400 } }
+  - { key: "brand_colors", type: "color_list", label: "Brand colors", required: false }
+  - { key: "ga4_id",    type: "text",     label: "Google Analytics ID",
+      pattern: "^G-[A-Z0-9]+$", required: false }
+  - { key: "wp_admin",  type: "secret",   label: "WordPress admin credentials" }
+  - { key: "photos",    type: "file_list", label: "Photos (5–10 images)",
+      constraints: { formats: ["jpg","png","heic"], min_count: 5, max_count: 15 } }
+  - { key: "opening_hours", type: "structured", label: "Opening hours",
+      schema: { type: "object", properties: { mon_fri: { type: "string" }, sat: { type: "string" } } } }
+  - { key: "has_existing_site", type: "boolean", label: "Does the client have an existing website?" }
+  - { key: "website_url", type: "url", label: "Current website URL", required: false }
+  - { key: "service_tier", type: "select", label: "Service package",
+      options: [{ value: "basic", label: "Basic" }, { value: "pro", label: "Pro" }] }
+```
+
+**Item key rules:** must be `snake_case` (e.g. `logo`, `hero_copy`, `ga4_id`). Keys become property names in `get_intake_results` — no uppercase, no spaces, no hyphens.
+
+Returns `{ intake_id, portal_url, status }`. Save `intake_id` for all follow-up calls.
+
+### `get_intake_status`
+
+Check which items are submitted, pending, or need revision. Includes the history of automated chase emails and when the client last opened the portal.
+
+```
+intake_id: "in_8f3k"
+```
+
+Returns per-item status and a full chase history.
+
+### `get_intake_results`
+
+Retrieve typed submitted values. Files are signed URLs (valid 24 hours). **Secrets are one-time** — decrypted and returned on the first call only; store them before moving on.
+
+```
+intake_id: "in_8f3k"
+only_new: true          // only items new since last call
+include_pending: false  // omit unsubmitted items
+```
+
+Returns `{ results: { logo: "https://signed...", hero_copy: "text...", wp_admin: "s3cr3t" }, meta: { ... } }`.
+
+### `request_revision`
+
+Ask the client to resubmit an item with a note explaining what is wrong.
+
+```
+intake_id: "in_8f3k"
+item_key: "logo"
+note: "Logo is blurry — we need at least 512 px wide in SVG or PNG with a transparent background"
+```
+
+Returns `{ status: "revision_requested", item_key }`.
+
+### `send_chase`
+
+Send a manual reminder outside the automatic schedule. Use when a deadline is approaching or email attempts have failed.
+
+```
+intake_id: "in_8f3k"
+channel: "sms"   // "email" (default) | "sms"
+```
+
+Returns `{ sent: true }`.
+
+### `list_intakes`
+
+List all intakes across projects, optionally filtered by status or client email.
+
+```
+status: "in_progress"   // draft | sent | in_progress | completed | archived
+client_email: "klient@firma.cz"
+limit: 20
+offset: 0
+```
+
+Returns `{ intakes: [...], total }`.
+
+### `add_items`
+
+Add new items to an already-sent intake — for example a favicon you forgot, or additional credentials needed mid-project.
+
+```
+intake_id: "in_8f3k"
+items:
+  - { key: "favicon", type: "image", label: "Favicon (32×32 PNG or ICO)" }
+```
+
+Returns the updated intake.
+
+## End-to-end example
+
+```
+# System prompt excerpt
+You are a web development agent. When you need client assets:
+
+1. Call define_intake with all assets needed for this project.
+   Use type=secret for passwords/credentials.
+   The chase engine runs automatically — do not poll more often than once per day.
+
+2. When the intake.completed webhook arrives (or after checking get_intake_status),
+   call get_intake_results. Download file URLs within 24 hours.
+   Store secrets immediately — they are one-time.
+
+3. If a submitted asset does not meet requirements (blurry logo, broken URL),
+   call request_revision with a clear note for the client.
+
+4. If the client is unresponsive after 9 days, call send_chase with channel="sms"
+   (only if a phone number was collected).
+```
+
+## Verifying webhooks
+
+BriefGate signs every webhook with HMAC-SHA256 to prevent forgery and replay attacks. The `@briefgate/mcp` package exports a ready-made helper:
+
+```typescript
+import { verifyWebhookSignature, parseWebhookEvent } from "@briefgate/mcp/webhook";
+```
+
+The signature lives in the `X-BriefGate-Signature` header as `t=<unix>,v1=<hex>`:
+
+### Fastify (recommended)
+
+```typescript
+import Fastify from "fastify";
+import { verifyWebhookSignature, parseWebhookEvent } from "@briefgate/mcp/webhook";
+
+const app = Fastify();
+
+// Parse body as raw string — JSON-parsing before verification breaks the HMAC.
+app.addContentTypeParser("application/json", { parseAs: "string" }, (req, body, done) => {
+  done(null, body);
+});
+
+app.post("/briefgate/webhook", (request, reply) => {
+  const rawBody = request.body as string;
+
+  const ok = verifyWebhookSignature(
+    process.env.BRIEFGATE_WEBHOOK_SECRET!,
+    request.headers["x-briefgate-signature"] as string,
+    rawBody,
+    // { toleranceSec: 300 }  ← default; increase for slow networks
+  );
+
+  if (!ok) {
+    return reply.status(401).send({ error: "Invalid signature" });
+  }
+
+  const event = parseWebhookEvent(rawBody);
+  console.log("BriefGate event:", event.event, event.intake_id);
+  reply.send({ ok: true });
+});
+```
+
+### Express
+
+```typescript
+import express from "express";
+import { verifyWebhookSignature, parseWebhookEvent } from "@briefgate/mcp/webhook";
+
+const app = express();
+
+// raw body parser — must come before express.json()
+app.post(
+  "/briefgate/webhook",
+  express.raw({ type: "application/json" }),
+  (req, res) => {
+    const rawBody = Buffer.isBuffer(req.body)
+      ? req.body.toString("utf8")
+      : String(req.body);
+
+    const ok = verifyWebhookSignature(
+      process.env.BRIEFGATE_WEBHOOK_SECRET!,
+      req.headers["x-briefgate-signature"] as string,
+      rawBody,
+    );
+
+    if (!ok) return res.status(401).json({ error: "Invalid signature" });
+
+    const event = parseWebhookEvent(rawBody);
+    console.log("BriefGate event:", event.event, event.intake_id);
+    res.sendStatus(200);
+  },
+);
+```
+
+### Webhook events
+
+| Event | When | Key fields |
+|---|---|---|
+| `item.submitted` | Client submits an item | `item_key`, `item_status` |
+| `intake.completed` | All required items approved | — |
+| `client.viewed` | Client opens the portal | `client_email` |
+| `chase.bounced` | Reminder email/SMS bounced | `channel`, `reason` |
+| `intake.stalled` | 3 reminders sent, no response | `attempts` |
+
+## Pricing
+
+| | Free | Solo — $29/mo | Agency — $79/mo |
+|---|---|---|---|
+| Active intakes | 1 | 15 | 60 |
+| Items per intake | 10 | unlimited | unlimited |
+| Storage | 1 GB | 25 GB | 100 GB |
+| Branding | "powered by" | custom logo + colors | + custom sending domain |
+| Chase | email, default | email, all schedules | + SMS credits |
+| Secrets vault | — | yes | yes |
+| Webhooks + REST + MCP | yes | yes | yes |
+
+Full pricing at `GET https://api.briefgate.dev/pricing.json` (no auth required — agents can read it directly).
+
+## Self-hosting
+
+BriefGate cloud is hosted in the EU (Hetzner, Cloudflare R2 EU jurisdiction). A self-hosted option is available on request — see [briefgate.dev/docs/self-host](https://briefgate.dev/docs/self-host).
+
+## Contributing
+
+```bash
+cd mcp
+npm install
+npm run typecheck   # TypeScript check
+npm run lint        # ESLint
+npm run test        # Vitest
+npm run check       # all three
+npm run build       # compile to dist/
+```
+
+## License
+
+MIT — use freely in commercial projects.
+
+---
+
+Made by [Radim Sekera](https://briefgate.dev). Related project: [impri.dev](https://impri.dev) — human-in-the-loop approval inbox for AI agents.

package/dist/client.d.ts

@@ -0,0 +1,128 @@
+export interface BriefGateConfig {
+    apiKey: string;
+    baseUrl: string;
+}
+export type ItemType = 'text' | 'longtext' | 'file' | 'file_list' | 'image' | 'color_list' | 'select' | 'boolean' | 'url' | 'secret' | 'structured';
+export type ItemStatus = 'pending' | 'submitted' | 'needs_revision' | 'approved';
+export type IntakeStatus = 'draft' | 'sent' | 'in_progress' | 'completed' | 'archived';
+export type ChaseSchedule = 'default' | 'gentle' | 'aggressive' | 'off';
+export interface ItemOption {
+    value: string;
+    label: string;
+}
+export interface ItemConstraints {
+    formats?: string[];
+    min_width?: number;
+    min_height?: number;
+    max_width?: number;
+    max_height?: number;
+    max_bytes?: number;
+    min_chars?: number;
+    max_chars?: number;
+    min_count?: number;
+    max_count?: number;
+    transparent_background?: boolean;
+}
+export interface ItemDefinition {
+    key: string;
+    type: ItemType;
+    label: string;
+    help?: string;
+    required?: boolean;
+    constraints?: ItemConstraints;
+    schema?: Record<string, unknown>;
+    options?: ItemOption[];
+    pattern?: string;
+}
+export interface IntakeCreated {
+    intake_id: string;
+    portal_url: string;
+    status: IntakeStatus;
+    items: Array<{
+        key: string;
+        status: ItemStatus;
+    }>;
+}
+export interface IntakeStatusResult {
+    intake_id: string;
+    status: IntakeStatus;
+    progress: {
+        submitted: number;
+        total: number;
+    };
+    items: Array<{
+        key: string;
+        status: ItemStatus;
+        submitted_at?: string;
+        label: string;
+    }>;
+    chases: Array<{
+        channel: string;
+        sent_at: string;
+        status: string;
+        attempt_no: number;
+    }>;
+    client_last_seen?: string;
+    due_date?: string;
+}
+export interface IntakeResults {
+    intake_id: string;
+    status: IntakeStatus;
+    results: Record<string, unknown>;
+    meta: Record<string, {
+        type: ItemType;
+        status: ItemStatus;
+        submitted_at?: string;
+    }>;
+}
+export interface IntakeListItem {
+    intake_id: string;
+    project_name: string;
+    client_email: string;
+    status: IntakeStatus;
+    created_at: string;
+    due_date?: string;
+    portal_url: string;
+}
+export interface IntakeList {
+    intakes: IntakeListItem[];
+    total: number;
+}
+export interface UsageResult {
+    plan: string;
+    active_intakes: {
+        used: number;
+        limit: number | null;
+    };
+    storage_bytes: {
+        used: number;
+        limit: number | null;
+    };
+    requests_this_hour: {
+        used: number;
+        limit: number;
+    };
+}
+export declare function apiRequest<T>(config: BriefGateConfig, method: string, path: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
+export declare function createIntake(config: BriefGateConfig, payload: unknown, idempotencyKey: string): Promise<IntakeCreated>;
+export declare function listIntakes(config: BriefGateConfig, params: {
+    status?: string;
+    client_email?: string;
+    limit?: number;
+    offset?: number;
+}): Promise<IntakeList>;
+export declare function getIntakeStatus(config: BriefGateConfig, intakeId: string): Promise<IntakeStatusResult>;
+export declare function getIntakeResults(config: BriefGateConfig, intakeId: string, params: {
+    only_new?: boolean;
+    include_pending?: boolean;
+}): Promise<IntakeResults>;
+export declare function addItems(config: BriefGateConfig, intakeId: string, items: ItemDefinition[]): Promise<IntakeCreated>;
+export declare function requestRevision(config: BriefGateConfig, intakeId: string, itemKey: string, note: string): Promise<{
+    status: string;
+    item_key: string;
+}>;
+export declare function sendChase(config: BriefGateConfig, intakeId: string, channel?: 'email' | 'sms'): Promise<{
+    sent: true;
+}>;
+export declare function getUsage(config: BriefGateConfig): Promise<UsageResult>;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAID,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,UAAU,GACV,MAAM,GACN,WAAW,GACX,OAAO,GACP,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,KAAK,GACL,QAAQ,GACR,YAAY,CAAC;AAEjB,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,gBAAgB,GAAG,UAAU,CAAC;AACjF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,GAAG,UAAU,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,YAAY,GAAG,KAAK,CAAC;AAExE,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,YAAY,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,QAAQ,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,KAAK,EAAE,KAAK,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,UAAU,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,MAAM,CACV,MAAM,EACN;QACE,IAAI,EAAE,QAAQ,CAAC;QACf,MAAM,EAAE,UAAU,CAAC;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CACF,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvD,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACtD,kBAAkB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAOD,wBAAsB,UAAU,CAAC,CAAC,EAChC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC,CAmDZ;AAiED,wBAAsB,YAAY,CAChC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,aAAa,CAAC,CAIxB;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAClF,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAE7B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE,GACxD,OAAO,CAAC,aAAa,CAAC,CAMxB;AAED,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,cAAc,EAAE,GACtB,OAAO,CAAC,aAAa,CAAC,CAExB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAO/C;AAED,wBAAsB,SAAS,CAC7B,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,OAAO,GAAG,KAAK,GACxB,OAAO,CAAC;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,CAAC,CAIzB;AAED,wBAAsB,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAE5E"}

package/dist/client.js

@@ -0,0 +1,138 @@
+// REST client, shared types, and agent-friendly error mapping.
+// No business logic lives here — each function is a thin wrapper over one
+// REST endpoint so that tools.ts stays readable and tests can stub fetch.
+// Abort fetch after this many ms so an unresponsive server never stalls the agent.
+const FETCH_TIMEOUT_MS = 30_000;
+// ─── Core fetch wrapper ───────────────────────────────────────────────────────
+export async function apiRequest(config, method, path, body, extraHeaders) {
+    const url = `${config.baseUrl}/v1${path}`;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+    const init = {
+        method,
+        signal: controller.signal,
+        headers: {
+            Authorization: `Bearer ${config.apiKey}`,
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+            ...extraHeaders,
+        },
+    };
+    if (body !== undefined) {
+        init.body = JSON.stringify(body);
+    }
+    let res;
+    try {
+        res = await fetch(url, init);
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === 'AbortError') {
+            throw new Error(`BriefGate API request timed out after ${FETCH_TIMEOUT_MS / 1000}s — the service may be temporarily unreachable. Try again shortly.`);
+        }
+        // Network errors (ECONNREFUSED, DNS failure, etc.) — expose cause without leaking config.
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new Error(`BriefGate API unreachable: ${detail}. Check your network connection or BRIEFGATE_BASE_URL.`);
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+    if (!res.ok) {
+        return throwApiError(res);
+    }
+    if (res.status === 204) {
+        return {};
+    }
+    // Guard against a proxy/CDN returning HTML (e.g. on a 502 that was re-wrapped as 200).
+    try {
+        return (await res.json());
+    }
+    catch {
+        throw new Error(`BriefGate API returned an unexpected non-JSON response (status ${res.status}). This may indicate a proxy or network issue — try again shortly.`);
+    }
+}
+async function throwApiError(res) {
+    let message = '';
+    let retryAfter = '';
+    try {
+        const body = (await res.json());
+        message = body.message ?? body.error ?? '';
+    }
+    catch {
+        message = res.statusText;
+    }
+    retryAfter = res.headers.get('Retry-After') ?? '';
+    switch (res.status) {
+        case 401:
+            throw new Error('Authentication failed — verify your BRIEFGATE_API_KEY is correct and has not been revoked.');
+        case 402:
+            throw new Error(`Plan limit reached: ${message || 'quota exceeded'} — upgrade your plan or reduce scope.`);
+        case 403:
+            throw new Error('Access denied — this API key does not have the required scope for this operation.');
+        case 404:
+            throw new Error('Resource not found — verify the intake_id is correct and belongs to this API key.');
+        case 409:
+            throw new Error('Conflict — an intake with this idempotency key already exists; check list_intakes to find it.');
+        case 410:
+            throw new Error('Gone — this intake has been deleted and all its files purged.');
+        case 413:
+            throw new Error('Payload too large — reduce the number of items or check file size limits.');
+        case 422:
+            throw new Error(`Invalid request: ${message || 'check the parameters and try again.'}`);
+        case 429: {
+            const after = retryAfter ? `${retryAfter}s` : 'a moment';
+            throw new Error(`Rate limited — retry after ${after}. Use webhooks instead of polling to stay within limits.`);
+        }
+        case 500:
+        case 502:
+        case 503:
+            throw new Error(`BriefGate API error ${res.status}: ${message || 'internal server error — try again shortly.'}`);
+        default:
+            throw new Error(`BriefGate API error ${res.status}: ${message || res.statusText}`);
+    }
+}
+// ─── Typed endpoint wrappers ──────────────────────────────────────────────────
+export async function createIntake(config, payload, idempotencyKey) {
+    return apiRequest(config, 'POST', '/intakes', payload, {
+        'Idempotency-Key': idempotencyKey,
+    });
+}
+export async function listIntakes(config, params) {
+    const qs = new URLSearchParams();
+    if (params.status)
+        qs.set('status', params.status);
+    if (params.client_email)
+        qs.set('client_email', params.client_email);
+    if (params.limit !== undefined)
+        qs.set('limit', String(params.limit));
+    if (params.offset !== undefined)
+        qs.set('offset', String(params.offset));
+    const query = qs.toString() ? `?${qs.toString()}` : '';
+    return apiRequest(config, 'GET', `/intakes${query}`);
+}
+export async function getIntakeStatus(config, intakeId) {
+    return apiRequest(config, 'GET', `/intakes/${intakeId}/status`);
+}
+export async function getIntakeResults(config, intakeId, params) {
+    const qs = new URLSearchParams();
+    if (params.only_new)
+        qs.set('only_new', 'true');
+    if (params.include_pending)
+        qs.set('include_pending', 'true');
+    const query = qs.toString() ? `?${qs.toString()}` : '';
+    return apiRequest(config, 'GET', `/intakes/${intakeId}/results${query}`);
+}
+export async function addItems(config, intakeId, items) {
+    return apiRequest(config, 'POST', `/intakes/${intakeId}/items`, { items });
+}
+export async function requestRevision(config, intakeId, itemKey, note) {
+    return apiRequest(config, 'POST', `/intakes/${intakeId}/revision`, { item_key: itemKey, note });
+}
+export async function sendChase(config, intakeId, channel) {
+    return apiRequest(config, 'POST', `/intakes/${intakeId}/chase`, {
+        ...(channel !== undefined && { channel }),
+    });
+}
+export async function getUsage(config) {
+    return apiRequest(config, 'GET', '/usage');
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,0EAA0E;AAC1E,0EAA0E;AAwH1E,mFAAmF;AACnF,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAuB,EACvB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,YAAqC;IAErC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,MAAM,IAAI,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAEzE,MAAM,IAAI,GAAgB;QACxB,MAAM;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;YACxC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;YAC1B,GAAG,YAAY;SAChB;KACF,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,yCAAyC,gBAAgB,GAAG,IAAI,oEAAoE,CACrI,CAAC;QACJ,CAAC;QACD,0FAA0F;QAC1F,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,wDAAwD,CAAC,CAAC;IAChH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAO,CAAC;IACjB,CAAC;IAED,uFAAuF;IACvF,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,kEAAkE,GAAG,CAAC,MAAM,oEAAoE,CACjJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAa;IACxC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyC,CAAC;QACxE,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC3B,CAAC;IACD,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAElD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,uBAAuB,OAAO,IAAI,gBAAgB,uCAAuC,CAC1F,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,IAAI,qCAAqC,EAAE,CACvE,CAAC;QACJ,KAAK,GAAG,CAAC,CAAC,CAAC;YACT,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,8BAA8B,KAAK,0DAA0D,CAC9F,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,CAAC;QACT,KAAK,GAAG;YACN,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,4CAA4C,EAAE,CAChG,CAAC;QACJ;YACE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,iFAAiF;AAEjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAuB,EACvB,OAAgB,EAChB,cAAsB;IAEtB,OAAO,UAAU,CAAgB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;QACpE,iBAAiB,EAAE,cAAc;KAClC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAuB,EACvB,MAAmF;IAEnF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,YAAY;QAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,UAAU,CAAa,MAAM,EAAE,KAAK,EAAE,WAAW,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAuB,EACvB,QAAgB;IAEhB,OAAO,UAAU,CAAqB,MAAM,EAAE,KAAK,EAAE,YAAY,QAAQ,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EACvB,QAAgB,EAChB,MAAyD;IAEzD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,QAAQ;QAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,eAAe;QAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvD,OAAO,UAAU,CAAgB,MAAM,EAAE,KAAK,EAAE,YAAY,QAAQ,WAAW,KAAK,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAuB,EACvB,QAAgB,EAChB,KAAuB;IAEvB,OAAO,UAAU,CAAgB,MAAM,EAAE,MAAM,EAAE,YAAY,QAAQ,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAuB,EACvB,QAAgB,EAChB,OAAe,EACf,IAAY;IAEZ,OAAO,UAAU,CACf,MAAM,EACN,MAAM,EACN,YAAY,QAAQ,WAAW,EAC/B,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAuB,EACvB,QAAgB,EAChB,OAAyB;IAEzB,OAAO,UAAU,CAAiB,MAAM,EAAE,MAAM,EAAE,YAAY,QAAQ,QAAQ,EAAE;QAC9E,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;KAC1C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAuB;IACpD,OAAO,UAAU,CAAc,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}