@brinkcommerce/agentic-shopping-sdk 0.1.0-alpha.0

package/dist/server.cjs

@@ -0,0 +1,244 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __typeError = (msg) => {
+  throw TypeError(msg);
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
+var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
+var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
+var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
+var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
+
+// src/server.ts
+var server_exports = {};
+__export(server_exports, {
+  AgentError: () => AgentError,
+  AgentShoppingClient: () => AgentShoppingClient,
+  createChatRoute: () => createChatRoute,
+  createTokenSource: () => createTokenSource
+});
+module.exports = __toCommonJS(server_exports);
+
+// src/errors.ts
+var AgentError = class extends Error {
+  constructor(statusCode, body) {
+    super(`Agent error: ${statusCode}`);
+    this.statusCode = statusCode;
+    this.body = body;
+    this.name = "AgentError";
+  }
+};
+
+// src/server/token.ts
+var EXPIRY_SKEW_MS = 6e4;
+function createTokenSource({ tokenUrl, clientId, clientSecret, scope }) {
+  let token;
+  let expiresAt = 0;
+  let inFlight;
+  async function mint() {
+    const response = await fetch(tokenUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "client_credentials",
+        scope,
+        client_id: clientId,
+        client_secret: clientSecret
+      })
+    });
+    if (!response.ok) throw new AgentError(response.status, void 0);
+    const minted = await response.json();
+    if (typeof minted.access_token !== "string" || minted.access_token === "") {
+      throw new AgentError(response.status, void 0);
+    }
+    const lifetimeMs = typeof minted.expires_in === "number" ? minted.expires_in * 1e3 : 0;
+    token = minted.access_token;
+    expiresAt = Date.now() + Math.max(lifetimeMs - EXPIRY_SKEW_MS, 0);
+    return token;
+  }
+  return {
+    token() {
+      if (token !== void 0 && Date.now() < expiresAt) return Promise.resolve(token);
+      inFlight ?? (inFlight = mint().finally(() => {
+        inFlight = void 0;
+      }));
+      return inFlight;
+    },
+    invalidate() {
+      token = void 0;
+      expiresAt = 0;
+    }
+  };
+}
+
+// src/server/client.ts
+var DEFAULT_SCOPE = "agentic-shopping/invoke";
+var RUNTIME_ARN = /^arn:aws:bedrock-agentcore:([a-z0-9-]+):\d{12}:runtime\/[^/]+$/;
+function invocationUrl({ runtimeArn, qualifier = "DEFAULT", agentUrl }) {
+  if (runtimeArn !== void 0 && agentUrl !== void 0) throw new TypeError("pass runtimeArn or agentUrl, not both");
+  if (agentUrl !== void 0) return agentUrl;
+  if (runtimeArn === void 0) throw new TypeError("runtimeArn is required, or agentUrl instead of it");
+  const region = RUNTIME_ARN.exec(runtimeArn)?.[1];
+  if (region === void 0) throw new TypeError(`runtimeArn is not a bedrock-agentcore runtime ARN: ${runtimeArn}`);
+  const path = `/runtimes/${encodeURIComponent(runtimeArn)}/invocations?qualifier=${encodeURIComponent(qualifier)}`;
+  return `https://bedrock-agentcore.${region}.amazonaws.com${path}`;
+}
+var SESSION_HEADER = "X-Amzn-Bedrock-AgentCore-Runtime-Session-Id";
+var _agentUrl, _tokens, _AgentShoppingClient_instances, send_fn, invoke_fn;
+var AgentShoppingClient = class {
+  constructor(options) {
+    __privateAdd(this, _AgentShoppingClient_instances);
+    __privateAdd(this, _agentUrl);
+    __privateAdd(this, _tokens);
+    const { tokenUrl, clientId, clientSecret, scope = DEFAULT_SCOPE } = options;
+    __privateSet(this, _agentUrl, invocationUrl(options));
+    __privateSet(this, _tokens, createTokenSource({ tokenUrl, clientId, clientSecret, scope }));
+  }
+  /**
+   * The raw response, body unread. Pass `response.body` straight through to the browser, or read it with
+   * `parseWireEvents` from the core entry point.
+   */
+  stream(input, options = {}) {
+    return __privateMethod(this, _AgentShoppingClient_instances, invoke_fn).call(this, input, true, options);
+  }
+  /**
+   * One turn as a whole reply. The non-streaming branch **never carries product cards** — the agent writes
+   * them only onto the stream. If you want cards, use `stream()`.
+   */
+  async ask(input, options = {}) {
+    const response = await __privateMethod(this, _AgentShoppingClient_instances, invoke_fn).call(this, input, false, options);
+    const body = await response.json();
+    const result = body.result;
+    return {
+      text: typeof result?.text === "string" ? result.text : "",
+      suggestions: Array.isArray(result?.suggestions) ? result.suggestions : []
+    };
+  }
+};
+_agentUrl = new WeakMap();
+_tokens = new WeakMap();
+_AgentShoppingClient_instances = new WeakSet();
+send_fn = async function(input, streaming, signal) {
+  return fetch(__privateGet(this, _agentUrl), {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${await __privateGet(this, _tokens).token()}`,
+      [SESSION_HEADER]: input.sessionId
+    },
+    body: JSON.stringify({
+      prompt: input.prompt,
+      streaming,
+      storeGroupId: input.storeGroupId,
+      market: input.market,
+      // `JSON.stringify` drops an undefined value, so no cart sends no field — which is what tells the
+      // agent the cart is invisible rather than empty.
+      cart: input.cart
+    }),
+    signal
+  });
+};
+invoke_fn = async function(input, streaming, options) {
+  let response = await __privateMethod(this, _AgentShoppingClient_instances, send_fn).call(this, input, streaming, options.signal);
+  if (response.status === 401) {
+    __privateGet(this, _tokens).invalidate();
+    response = await __privateMethod(this, _AgentShoppingClient_instances, send_fn).call(this, input, streaming, options.signal);
+  }
+  if (!response.ok) throw new AgentError(response.status, await response.text());
+  return response;
+};
+
+// src/server/route.ts
+function jsonError(status, message) {
+  return new Response(JSON.stringify({ error: message }), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+function readCart(value) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "object" || value === null) return "cart must be an object";
+  const { items, totalAmount, currencyCode } = value;
+  if (!Array.isArray(items)) return "cart.items must be an array";
+  if (typeof totalAmount !== "number" || !Number.isInteger(totalAmount) || totalAmount < 0) {
+    return "cart.totalAmount must be a whole number of minor units";
+  }
+  if (typeof currencyCode !== "string" || currencyCode.length !== 3) {
+    return "cart.currencyCode must be a three-letter code";
+  }
+  const lines = [];
+  for (const item of items) {
+    if (typeof item !== "object" || item === null) return "each cart item must be an object";
+    const { name, size, quantity } = item;
+    if (typeof name !== "string" || name === "") return "each cart item needs a name";
+    if (size !== void 0 && typeof size !== "string") return "a cart item size must be a string";
+    if (typeof quantity !== "number" || !Number.isInteger(quantity) || quantity < 1) {
+      return "each cart item needs a quantity of at least 1";
+    }
+    lines.push(size === void 0 ? { name, quantity } : { name, size, quantity });
+  }
+  return { items: lines, totalAmount, currencyCode };
+}
+function readAskInput(payload) {
+  if (typeof payload !== "object" || payload === null) return "body must be a JSON object";
+  const { prompt, sessionId, storeGroupId, market, cart } = payload;
+  for (const [field, value] of Object.entries({ prompt, sessionId, storeGroupId, market })) {
+    if (typeof value !== "string" || value === "") return `${field} is required`;
+  }
+  const parsed = readCart(cart);
+  if (typeof parsed === "string") return parsed;
+  const input = { prompt, sessionId, storeGroupId, market };
+  return parsed === void 0 ? input : { ...input, cart: parsed };
+}
+function createChatRoute(client) {
+  return async (request) => {
+    let payload;
+    try {
+      payload = await request.json();
+    } catch {
+      return jsonError(400, "body is not valid JSON");
+    }
+    const input = readAskInput(payload);
+    if (typeof input === "string") return jsonError(400, input);
+    let upstream;
+    try {
+      upstream = await client.stream(input, { signal: request.signal });
+    } catch (error) {
+      if (request.signal.aborted) return new Response(null, { status: 499 });
+      if (error instanceof AgentError) return jsonError(502, `the agent answered ${error.statusCode}`);
+      throw error;
+    }
+    return new Response(upstream.body, {
+      headers: {
+        "Content-Type": "application/x-ndjson",
+        // Two hints for anything between this route and the shopper: do not store the reply, and do not
+        // hold it back waiting for a full buffer. A proxy that buffers turns a stream into a long pause.
+        "Cache-Control": "no-store",
+        "X-Accel-Buffering": "no"
+      }
+    });
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  AgentError,
+  AgentShoppingClient,
+  createChatRoute,
+  createTokenSource
+});

package/dist/server.d.cts

@@ -0,0 +1,103 @@
+import { C as CartContext } from './errors-CYbkUYHr.cjs';
+export { A as AgentError, a as CartLine } from './errors-CYbkUYHr.cjs';
+
+/** The credentials Brink provides, whichever way the agent itself is named. */
+interface Credentials {
+    /** The OAuth2 token endpoint the client credentials are minted against. */
+    tokenUrl: string;
+    clientId: string;
+    /** Server-side only. This must never reach a browser bundle. */
+    clientSecret: string;
+    scope?: string;
+}
+/**
+ * Name the agent one of two ways: the runtime ARN Brink hands over, or a URL you built yourself — your own
+ * gateway in front of the agent, or a container running locally.
+ */
+type AgentShoppingClientOptions = Credentials & ({
+    runtimeArn: string;
+    qualifier?: string;
+} | {
+    agentUrl: string;
+});
+interface AskInput {
+    prompt: string;
+    /** One conversation. `createSessionId()` from the core entry point makes one. */
+    sessionId: string;
+    /**
+     * Required. The agent answers a request naming no store with one sentence and no search, at HTTP 200 — a
+     * failure that looks exactly like success. Requiring it here turns that into a compile error.
+     */
+    storeGroupId: string;
+    /** Required, for the same reason. Two-letter country code. */
+    market: string;
+    /**
+     * What the shopper already owns, so the agent can answer "what goes with what I have?". Optional, and
+     * absent is not empty: send `items: []` for an empty cart, and omit `cart` to leave it invisible.
+     */
+    cart?: CartContext;
+}
+interface AskOptions {
+    /**
+     * Cancels the turn. A shopper who navigates away mid-answer leaves the agent generating one otherwise,
+     * and a stop button has nothing to call.
+     */
+    signal?: AbortSignal;
+}
+declare class AgentShoppingClient {
+    #private;
+    constructor(options: AgentShoppingClientOptions);
+    /**
+     * The raw response, body unread. Pass `response.body` straight through to the browser, or read it with
+     * `parseWireEvents` from the core entry point.
+     */
+    stream(input: AskInput, options?: AskOptions): Promise<Response>;
+    /**
+     * One turn as a whole reply. The non-streaming branch **never carries product cards** — the agent writes
+     * them only onto the stream. If you want cards, use `stream()`.
+     */
+    ask(input: AskInput, options?: AskOptions): Promise<{
+        text: string;
+        suggestions: string[];
+    }>;
+}
+
+/**
+ * A route handler over web-standard `Request`/`Response`, so it drops into a Next.js App Router file as
+ * `export const POST = createChatRoute(client)` without this SDK depending on Next.js.
+ *
+ * The upstream body is passed through untransformed — reading it here would buffer the whole reply and undo
+ * the streaming. A payload missing a field is rejected with a 400 rather than forwarded: the agent would
+ * answer it with one sentence at HTTP 200, which no caller can tell from a real reply.
+ *
+ * A transport failure comes back as a 502 carrying JSON, so a browser reading the error body finds the
+ * status rather than whatever error page the framework would otherwise have rendered. The upstream body is
+ * not forwarded: a failed token mint's body can quote the client secret.
+ */
+declare function createChatRoute(client: AgentShoppingClient): (request: Request) => Promise<Response>;
+
+interface TokenSourceOptions {
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    scope: string;
+}
+interface TokenSource {
+    /** A valid access token: minted on first use, then cached until it is about to expire. */
+    token(): Promise<string>;
+    /** Drops the cached token, so the next call mints a fresh one. For when the agent rejects the cached one. */
+    invalidate(): void;
+}
+/**
+ * An OAuth2 client-credentials mint, cached in process until it is about to expire. One token serves every
+ * turn — minting per request is a round trip the agent does not need.
+ *
+ * Concurrent callers arriving on a cold cache share one mint rather than each starting their own, so a
+ * process that takes twenty requests at once still asks the authorization server for a single token.
+ *
+ * A failed mint throws `AgentError` carrying the status and **no body**: an `invalid_client` response can
+ * echo the client secret back in its description.
+ */
+declare function createTokenSource({ tokenUrl, clientId, clientSecret, scope }: TokenSourceOptions): TokenSource;
+
+export { AgentShoppingClient, type AgentShoppingClientOptions, type AskInput, type AskOptions, CartContext, type TokenSource, type TokenSourceOptions, createChatRoute, createTokenSource };

package/dist/server.d.ts

@@ -0,0 +1,103 @@
+import { C as CartContext } from './errors-CYbkUYHr.js';
+export { A as AgentError, a as CartLine } from './errors-CYbkUYHr.js';
+
+/** The credentials Brink provides, whichever way the agent itself is named. */
+interface Credentials {
+    /** The OAuth2 token endpoint the client credentials are minted against. */
+    tokenUrl: string;
+    clientId: string;
+    /** Server-side only. This must never reach a browser bundle. */
+    clientSecret: string;
+    scope?: string;
+}
+/**
+ * Name the agent one of two ways: the runtime ARN Brink hands over, or a URL you built yourself — your own
+ * gateway in front of the agent, or a container running locally.
+ */
+type AgentShoppingClientOptions = Credentials & ({
+    runtimeArn: string;
+    qualifier?: string;
+} | {
+    agentUrl: string;
+});
+interface AskInput {
+    prompt: string;
+    /** One conversation. `createSessionId()` from the core entry point makes one. */
+    sessionId: string;
+    /**
+     * Required. The agent answers a request naming no store with one sentence and no search, at HTTP 200 — a
+     * failure that looks exactly like success. Requiring it here turns that into a compile error.
+     */
+    storeGroupId: string;
+    /** Required, for the same reason. Two-letter country code. */
+    market: string;
+    /**
+     * What the shopper already owns, so the agent can answer "what goes with what I have?". Optional, and
+     * absent is not empty: send `items: []` for an empty cart, and omit `cart` to leave it invisible.
+     */
+    cart?: CartContext;
+}
+interface AskOptions {
+    /**
+     * Cancels the turn. A shopper who navigates away mid-answer leaves the agent generating one otherwise,
+     * and a stop button has nothing to call.
+     */
+    signal?: AbortSignal;
+}
+declare class AgentShoppingClient {
+    #private;
+    constructor(options: AgentShoppingClientOptions);
+    /**
+     * The raw response, body unread. Pass `response.body` straight through to the browser, or read it with
+     * `parseWireEvents` from the core entry point.
+     */
+    stream(input: AskInput, options?: AskOptions): Promise<Response>;
+    /**
+     * One turn as a whole reply. The non-streaming branch **never carries product cards** — the agent writes
+     * them only onto the stream. If you want cards, use `stream()`.
+     */
+    ask(input: AskInput, options?: AskOptions): Promise<{
+        text: string;
+        suggestions: string[];
+    }>;
+}
+
+/**
+ * A route handler over web-standard `Request`/`Response`, so it drops into a Next.js App Router file as
+ * `export const POST = createChatRoute(client)` without this SDK depending on Next.js.
+ *
+ * The upstream body is passed through untransformed — reading it here would buffer the whole reply and undo
+ * the streaming. A payload missing a field is rejected with a 400 rather than forwarded: the agent would
+ * answer it with one sentence at HTTP 200, which no caller can tell from a real reply.
+ *
+ * A transport failure comes back as a 502 carrying JSON, so a browser reading the error body finds the
+ * status rather than whatever error page the framework would otherwise have rendered. The upstream body is
+ * not forwarded: a failed token mint's body can quote the client secret.
+ */
+declare function createChatRoute(client: AgentShoppingClient): (request: Request) => Promise<Response>;
+
+interface TokenSourceOptions {
+    tokenUrl: string;
+    clientId: string;
+    clientSecret: string;
+    scope: string;
+}
+interface TokenSource {
+    /** A valid access token: minted on first use, then cached until it is about to expire. */
+    token(): Promise<string>;
+    /** Drops the cached token, so the next call mints a fresh one. For when the agent rejects the cached one. */
+    invalidate(): void;
+}
+/**
+ * An OAuth2 client-credentials mint, cached in process until it is about to expire. One token serves every
+ * turn — minting per request is a round trip the agent does not need.
+ *
+ * Concurrent callers arriving on a cold cache share one mint rather than each starting their own, so a
+ * process that takes twenty requests at once still asks the authorization server for a single token.
+ *
+ * A failed mint throws `AgentError` carrying the status and **no body**: an `invalid_client` response can
+ * echo the client secret back in its description.
+ */
+declare function createTokenSource({ tokenUrl, clientId, clientSecret, scope }: TokenSourceOptions): TokenSource;
+
+export { AgentShoppingClient, type AgentShoppingClientOptions, type AskInput, type AskOptions, CartContext, type TokenSource, type TokenSourceOptions, createChatRoute, createTokenSource };

package/dist/server.js

@@ -0,0 +1,204 @@
+import {
+  AgentError,
+  __privateAdd,
+  __privateGet,
+  __privateMethod,
+  __privateSet
+} from "./chunk-2MMTZSYZ.js";
+
+// src/server/token.ts
+var EXPIRY_SKEW_MS = 6e4;
+function createTokenSource({ tokenUrl, clientId, clientSecret, scope }) {
+  let token;
+  let expiresAt = 0;
+  let inFlight;
+  async function mint() {
+    const response = await fetch(tokenUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/x-www-form-urlencoded" },
+      body: new URLSearchParams({
+        grant_type: "client_credentials",
+        scope,
+        client_id: clientId,
+        client_secret: clientSecret
+      })
+    });
+    if (!response.ok) throw new AgentError(response.status, void 0);
+    const minted = await response.json();
+    if (typeof minted.access_token !== "string" || minted.access_token === "") {
+      throw new AgentError(response.status, void 0);
+    }
+    const lifetimeMs = typeof minted.expires_in === "number" ? minted.expires_in * 1e3 : 0;
+    token = minted.access_token;
+    expiresAt = Date.now() + Math.max(lifetimeMs - EXPIRY_SKEW_MS, 0);
+    return token;
+  }
+  return {
+    token() {
+      if (token !== void 0 && Date.now() < expiresAt) return Promise.resolve(token);
+      inFlight ?? (inFlight = mint().finally(() => {
+        inFlight = void 0;
+      }));
+      return inFlight;
+    },
+    invalidate() {
+      token = void 0;
+      expiresAt = 0;
+    }
+  };
+}
+
+// src/server/client.ts
+var DEFAULT_SCOPE = "agentic-shopping/invoke";
+var RUNTIME_ARN = /^arn:aws:bedrock-agentcore:([a-z0-9-]+):\d{12}:runtime\/[^/]+$/;
+function invocationUrl({ runtimeArn, qualifier = "DEFAULT", agentUrl }) {
+  if (runtimeArn !== void 0 && agentUrl !== void 0) throw new TypeError("pass runtimeArn or agentUrl, not both");
+  if (agentUrl !== void 0) return agentUrl;
+  if (runtimeArn === void 0) throw new TypeError("runtimeArn is required, or agentUrl instead of it");
+  const region = RUNTIME_ARN.exec(runtimeArn)?.[1];
+  if (region === void 0) throw new TypeError(`runtimeArn is not a bedrock-agentcore runtime ARN: ${runtimeArn}`);
+  const path = `/runtimes/${encodeURIComponent(runtimeArn)}/invocations?qualifier=${encodeURIComponent(qualifier)}`;
+  return `https://bedrock-agentcore.${region}.amazonaws.com${path}`;
+}
+var SESSION_HEADER = "X-Amzn-Bedrock-AgentCore-Runtime-Session-Id";
+var _agentUrl, _tokens, _AgentShoppingClient_instances, send_fn, invoke_fn;
+var AgentShoppingClient = class {
+  constructor(options) {
+    __privateAdd(this, _AgentShoppingClient_instances);
+    __privateAdd(this, _agentUrl);
+    __privateAdd(this, _tokens);
+    const { tokenUrl, clientId, clientSecret, scope = DEFAULT_SCOPE } = options;
+    __privateSet(this, _agentUrl, invocationUrl(options));
+    __privateSet(this, _tokens, createTokenSource({ tokenUrl, clientId, clientSecret, scope }));
+  }
+  /**
+   * The raw response, body unread. Pass `response.body` straight through to the browser, or read it with
+   * `parseWireEvents` from the core entry point.
+   */
+  stream(input, options = {}) {
+    return __privateMethod(this, _AgentShoppingClient_instances, invoke_fn).call(this, input, true, options);
+  }
+  /**
+   * One turn as a whole reply. The non-streaming branch **never carries product cards** — the agent writes
+   * them only onto the stream. If you want cards, use `stream()`.
+   */
+  async ask(input, options = {}) {
+    const response = await __privateMethod(this, _AgentShoppingClient_instances, invoke_fn).call(this, input, false, options);
+    const body = await response.json();
+    const result = body.result;
+    return {
+      text: typeof result?.text === "string" ? result.text : "",
+      suggestions: Array.isArray(result?.suggestions) ? result.suggestions : []
+    };
+  }
+};
+_agentUrl = new WeakMap();
+_tokens = new WeakMap();
+_AgentShoppingClient_instances = new WeakSet();
+send_fn = async function(input, streaming, signal) {
+  return fetch(__privateGet(this, _agentUrl), {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${await __privateGet(this, _tokens).token()}`,
+      [SESSION_HEADER]: input.sessionId
+    },
+    body: JSON.stringify({
+      prompt: input.prompt,
+      streaming,
+      storeGroupId: input.storeGroupId,
+      market: input.market,
+      // `JSON.stringify` drops an undefined value, so no cart sends no field — which is what tells the
+      // agent the cart is invisible rather than empty.
+      cart: input.cart
+    }),
+    signal
+  });
+};
+invoke_fn = async function(input, streaming, options) {
+  let response = await __privateMethod(this, _AgentShoppingClient_instances, send_fn).call(this, input, streaming, options.signal);
+  if (response.status === 401) {
+    __privateGet(this, _tokens).invalidate();
+    response = await __privateMethod(this, _AgentShoppingClient_instances, send_fn).call(this, input, streaming, options.signal);
+  }
+  if (!response.ok) throw new AgentError(response.status, await response.text());
+  return response;
+};
+
+// src/server/route.ts
+function jsonError(status, message) {
+  return new Response(JSON.stringify({ error: message }), {
+    status,
+    headers: { "Content-Type": "application/json" }
+  });
+}
+function readCart(value) {
+  if (value === void 0) return void 0;
+  if (typeof value !== "object" || value === null) return "cart must be an object";
+  const { items, totalAmount, currencyCode } = value;
+  if (!Array.isArray(items)) return "cart.items must be an array";
+  if (typeof totalAmount !== "number" || !Number.isInteger(totalAmount) || totalAmount < 0) {
+    return "cart.totalAmount must be a whole number of minor units";
+  }
+  if (typeof currencyCode !== "string" || currencyCode.length !== 3) {
+    return "cart.currencyCode must be a three-letter code";
+  }
+  const lines = [];
+  for (const item of items) {
+    if (typeof item !== "object" || item === null) return "each cart item must be an object";
+    const { name, size, quantity } = item;
+    if (typeof name !== "string" || name === "") return "each cart item needs a name";
+    if (size !== void 0 && typeof size !== "string") return "a cart item size must be a string";
+    if (typeof quantity !== "number" || !Number.isInteger(quantity) || quantity < 1) {
+      return "each cart item needs a quantity of at least 1";
+    }
+    lines.push(size === void 0 ? { name, quantity } : { name, size, quantity });
+  }
+  return { items: lines, totalAmount, currencyCode };
+}
+function readAskInput(payload) {
+  if (typeof payload !== "object" || payload === null) return "body must be a JSON object";
+  const { prompt, sessionId, storeGroupId, market, cart } = payload;
+  for (const [field, value] of Object.entries({ prompt, sessionId, storeGroupId, market })) {
+    if (typeof value !== "string" || value === "") return `${field} is required`;
+  }
+  const parsed = readCart(cart);
+  if (typeof parsed === "string") return parsed;
+  const input = { prompt, sessionId, storeGroupId, market };
+  return parsed === void 0 ? input : { ...input, cart: parsed };
+}
+function createChatRoute(client) {
+  return async (request) => {
+    let payload;
+    try {
+      payload = await request.json();
+    } catch {
+      return jsonError(400, "body is not valid JSON");
+    }
+    const input = readAskInput(payload);
+    if (typeof input === "string") return jsonError(400, input);
+    let upstream;
+    try {
+      upstream = await client.stream(input, { signal: request.signal });
+    } catch (error) {
+      if (request.signal.aborted) return new Response(null, { status: 499 });
+      if (error instanceof AgentError) return jsonError(502, `the agent answered ${error.statusCode}`);
+      throw error;
+    }
+    return new Response(upstream.body, {
+      headers: {
+        "Content-Type": "application/x-ndjson",
+        // Two hints for anything between this route and the shopper: do not store the reply, and do not
+        // hold it back waiting for a full buffer. A proxy that buffers turns a stream into a long pause.
+        "Cache-Control": "no-store",
+        "X-Accel-Buffering": "no"
+      }
+    });
+  };
+}
+export {
+  AgentError,
+  AgentShoppingClient,
+  createChatRoute,
+  createTokenSource
+};