@insureco/bio 0.4.0 → 0.5.0

package/dist/chunk-PLN6QPED.mjs

@@ -0,0 +1,169 @@
+import {
+  BioError,
+  parseJsonResponse,
+  retryDelay,
+  sleep
+} from "./chunk-NK5VXXWF.mjs";
+
+// src/graph.ts
+var DEFAULT_TIMEOUT_MS = 1e4;
+var BIO_GRAPH_URL = "https://bio-graph.tawa.pro";
+var GraphClient = class _GraphClient {
+  graphUrl;
+  accessToken;
+  timeoutMs;
+  constructor(config = {}) {
+    this.graphUrl = (config.graphUrl ?? process.env.BIO_GRAPH_URL ?? BIO_GRAPH_URL).replace(/\/$/, "");
+    this.accessToken = config.accessToken;
+    this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  }
+  /**
+   * Create a GraphClient from environment variables.
+   * BIO_GRAPH_URL defaults to https://bio-graph.tawa.pro if not set.
+   */
+  static fromEnv(overrides) {
+    return new _GraphClient({
+      graphUrl: overrides?.graphUrl ?? process.env.BIO_GRAPH_URL,
+      accessToken: overrides?.accessToken,
+      timeoutMs: overrides?.timeoutMs
+    });
+  }
+  // ─── Public Profile Routes ────────────────────────────────────────────────
+  /** Look up an agent by NPN. Returns agent properties + employment chain. */
+  async getAgent(npn) {
+    return this.get(`/api/graph/agent/${encodeURIComponent(npn)}`);
+  }
+  /**
+   * Look up an agency by iecHash, raterspotId, or orgSlug.
+   * Returns agency properties + staff list + accessible programs.
+   */
+  async getAgency(iecHash) {
+    return this.get(`/api/graph/agency/${encodeURIComponent(iecHash)}`);
+  }
+  /**
+   * Look up a carrier by NAIC code, iecHash, raterspotId, or orgSlug.
+   * Returns carrier properties + managed programs.
+   */
+  async getCarrier(naic) {
+    return this.get(`/api/graph/carrier/${encodeURIComponent(naic)}`);
+  }
+  /**
+   * Look up a program by iecHash or raterspotId.
+   * Returns program properties + managing carrier or MGA.
+   */
+  async getProgram(iecHash) {
+    return this.get(`/api/graph/program/${encodeURIComponent(iecHash)}`);
+  }
+  // ─── Authenticated Routes ─────────────────────────────────────────────────
+  /**
+   * Find programs whose appetite covers a given risk.
+   * Requires an accessToken (auth: required).
+   *
+   * @param input - Risk criteria: NAICS code, state, line of business, optional limits
+   */
+  async matchAppetite(input) {
+    return this.post("/api/graph/appetite/match", input, { requiresAuth: true });
+  }
+  // ─── Internal ─────────────────────────────────────────────────────────────
+  async get(path, attempt = 0) {
+    const url = `${this.graphUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        headers: this.buildHeaders(),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      if (!isTimeout && attempt < 2) {
+        await sleep(retryDelay(attempt));
+        return this.get(path, attempt + 1);
+      }
+      throw new BioError(
+        isTimeout ? "bio-graph request timed out" : `bio-graph request failed: ${String(err)}`,
+        isTimeout ? "timeout" : "network_error"
+      );
+    } finally {
+      clearTimeout(timer);
+    }
+    return this.handleResponse(response, path);
+  }
+  async post(path, body, opts = {}, attempt = 0) {
+    if (opts.requiresAuth && !this.accessToken) {
+      throw new BioError(
+        `bio-graph ${path} requires an accessToken \u2014 pass it in the GraphClient constructor`,
+        "config_error"
+      );
+    }
+    const url = `${this.graphUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        method: "POST",
+        headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      if (!isTimeout && attempt < 2) {
+        await sleep(retryDelay(attempt));
+        return this.post(path, body, opts, attempt + 1);
+      }
+      throw new BioError(
+        isTimeout ? "bio-graph request timed out" : `bio-graph request failed: ${String(err)}`,
+        isTimeout ? "timeout" : "network_error"
+      );
+    } finally {
+      clearTimeout(timer);
+    }
+    return this.handleResponse(response, path);
+  }
+  buildHeaders() {
+    const headers = {};
+    if (this.accessToken) {
+      headers["Authorization"] = `Bearer ${this.accessToken}`;
+    }
+    return headers;
+  }
+  async handleResponse(response, path) {
+    if (response.status === 404) {
+      throw new BioError(`bio-graph entity not found: ${path}`, "not_found", 404);
+    }
+    if (response.status === 401) {
+      throw new BioError(
+        "bio-graph authentication failed \u2014 provide a valid accessToken",
+        "unauthorized",
+        401
+      );
+    }
+    if (response.status === 402) {
+      throw new BioError(
+        "bio-graph call failed \u2014 insufficient gas tokens. Top up at tawa.insureco.io/wallet",
+        "insufficient_gas",
+        402
+      );
+    }
+    if (!response.ok) {
+      const body2 = await parseJsonResponse(response).catch(() => ({}));
+      throw new BioError(
+        `bio-graph returned ${response.status} for ${path}`,
+        "api_error",
+        response.status,
+        body2
+      );
+    }
+    const body = await parseJsonResponse(response);
+    return body;
+  }
+};
+
+export {
+  GraphClient
+};

package/dist/graph.d.mts

@@ -0,0 +1,204 @@
+interface GraphClientConfig {
+    /** Base URL for bio-graph service. Defaults to BIO_GRAPH_URL env var or https://bio-graph.tawa.pro */
+    graphUrl?: string;
+    /** Bearer token for authenticated routes (appetite/match, same-as-queue, etc.) */
+    accessToken?: string;
+    /** Request timeout in ms. Default: 10_000 */
+    timeoutMs?: number;
+}
+interface AgentEmployer {
+    agencyName: string | null;
+    agencyIecHash: string | null;
+    agencyOrgSlug: string | null;
+    agencyRaterspotId: string | null;
+    current: boolean;
+}
+interface AgentProfile {
+    iecHash: string | null;
+    name: string | null;
+    npn: string | null;
+    bioId: string | null;
+    role: string | null;
+    email: string | null;
+    phone: string | null;
+    address: string | null;
+    city: string | null;
+    state: string | null;
+    zip: string | null;
+    licenseNo: string | null;
+    status: string | null;
+    linesOfAuthority: string[];
+    territories: string[];
+    linesOfBusiness: string[];
+    isPublic: boolean;
+    claimedAt: string | null;
+    employment: AgentEmployer[];
+}
+interface AgencyStaffMember {
+    name: string | null;
+    npn: string | null;
+    iecHash: string | null;
+    role: string | null;
+    email: string | null;
+}
+interface AgencyProgram {
+    name: string | null;
+    raterspotId: string | null;
+    iecHash: string | null;
+    states: string[];
+    carrierName: string | null;
+    isActive: boolean;
+}
+interface AgencyProfile {
+    iecHash: string | null;
+    raterspotId: string | null;
+    name: string | null;
+    orgSlug: string | null;
+    orgId: string | null;
+    type: string | null;
+    email: string | null;
+    phone: string | null;
+    website: string | null;
+    address: string | null;
+    city: string | null;
+    state: string | null;
+    zip: string | null;
+    dba: string | null;
+    licenseNo: string | null;
+    linesOfAuthority: string | null;
+    territories: string[];
+    linesOfBusiness: string[];
+    isPublic: boolean;
+    claimedAt: string | null;
+    staff: AgencyStaffMember[];
+    programs: AgencyProgram[];
+}
+interface CarrierProgram {
+    name: string | null;
+    iecHash: string | null;
+    raterspotId: string | null;
+    states: string[];
+    isActive: boolean;
+}
+interface CarrierProfile {
+    iecHash: string | null;
+    raterspotId: string | null;
+    name: string | null;
+    naic: string | null;
+    orgId: string | null;
+    orgSlug: string | null;
+    email: string | null;
+    phone: string | null;
+    website: string | null;
+    address: string | null;
+    city: string | null;
+    state: string | null;
+    isPublic: boolean;
+    claimedAt: string | null;
+    programs: CarrierProgram[];
+}
+interface ProgramProfile {
+    iecHash: string | null;
+    raterspotId: string | null;
+    name: string | null;
+    abrv: string | null;
+    states: string[];
+    isActive: boolean;
+    ratingEngine: string | null;
+    carrierName: string | null;
+    carrierNaic: string | null;
+    mgaName: string | null;
+    managerIecHash: string | null;
+    managerRaterspotId: string | null;
+}
+interface AppetiteMatchInput {
+    naicsCode: string;
+    state: string;
+    lineOfBusiness: string;
+    limits?: {
+        perOccurrence?: number;
+        aggregate?: number;
+    };
+    reason?: string;
+}
+interface AppetiteMatchProgram {
+    name: string | null;
+    iecHash: string | null;
+    raterspotId: string | null;
+    states: string[];
+    isActive: boolean;
+    carrierName: string | null;
+    carrierNaic: string | null;
+    mgaName: string | null;
+    ratingEngine: string | null;
+}
+interface AppetiteMatchResult {
+    programs: AppetiteMatchProgram[];
+    total: number;
+}
+/**
+ * Client for bio-graph InsureBio distribution graph endpoints.
+ *
+ * Public profile routes (agent, agency, carrier, program) require no auth.
+ * Authenticated routes (appetite match, same-as queue) require an accessToken.
+ *
+ * @example
+ * import { GraphClient } from '@insureco/bio/graph'
+ *
+ * // Public profile lookups — no auth needed
+ * const graph = new GraphClient()
+ * const { agent } = await graph.getAgent('1234567')
+ *
+ * // Authenticated routes — pass a user or service token
+ * const graph = new GraphClient({ accessToken: req.headers.authorization?.slice(7) })
+ * const result = await graph.matchAppetite({ naicsCode: '2361', state: 'TX', lineOfBusiness: 'GL' })
+ */
+declare class GraphClient {
+    private readonly graphUrl;
+    private readonly accessToken;
+    private readonly timeoutMs;
+    constructor(config?: GraphClientConfig);
+    /**
+     * Create a GraphClient from environment variables.
+     * BIO_GRAPH_URL defaults to https://bio-graph.tawa.pro if not set.
+     */
+    static fromEnv(overrides?: GraphClientConfig): GraphClient;
+    /** Look up an agent by NPN. Returns agent properties + employment chain. */
+    getAgent(npn: string): Promise<{
+        agent: AgentProfile;
+    }>;
+    /**
+     * Look up an agency by iecHash, raterspotId, or orgSlug.
+     * Returns agency properties + staff list + accessible programs.
+     */
+    getAgency(iecHash: string): Promise<{
+        agency: AgencyProfile;
+    }>;
+    /**
+     * Look up a carrier by NAIC code, iecHash, raterspotId, or orgSlug.
+     * Returns carrier properties + managed programs.
+     */
+    getCarrier(naic: string): Promise<{
+        carrier: CarrierProfile;
+    }>;
+    /**
+     * Look up a program by iecHash or raterspotId.
+     * Returns program properties + managing carrier or MGA.
+     */
+    getProgram(iecHash: string): Promise<{
+        program: ProgramProfile;
+    }>;
+    /**
+     * Find programs whose appetite covers a given risk.
+     * Requires an accessToken (auth: required).
+     *
+     * @param input - Risk criteria: NAICS code, state, line of business, optional limits
+     */
+    matchAppetite(input: AppetiteMatchInput): Promise<AppetiteMatchResult>;
+    private get;
+    private post;
+    private buildHeaders;
+    private handleResponse;
+}
+
+export { type AgencyProfile, type AgencyProgram, type AgencyStaffMember, type AgentEmployer, type AgentProfile, type AppetiteMatchInput, type AppetiteMatchProgram, type AppetiteMatchResult, type CarrierProfile, type CarrierProgram, GraphClient, type GraphClientConfig, type ProgramProfile };

package/dist/graph.d.ts

@@ -0,0 +1,204 @@
+interface GraphClientConfig {
+    /** Base URL for bio-graph service. Defaults to BIO_GRAPH_URL env var or https://bio-graph.tawa.pro */
+    graphUrl?: string;
+    /** Bearer token for authenticated routes (appetite/match, same-as-queue, etc.) */
+    accessToken?: string;
+    /** Request timeout in ms. Default: 10_000 */
+    timeoutMs?: number;
+}
+interface AgentEmployer {
+    agencyName: string | null;
+    agencyIecHash: string | null;
+    agencyOrgSlug: string | null;
+    agencyRaterspotId: string | null;
+    current: boolean;
+}
+interface AgentProfile {
+    iecHash: string | null;
+    name: string | null;
+    npn: string | null;
+    bioId: string | null;
+    role: string | null;
+    email: string | null;
+    phone: string | null;
+    address: string | null;
+    city: string | null;
+    state: string | null;
+    zip: string | null;
+    licenseNo: string | null;
+    status: string | null;
+    linesOfAuthority: string[];
+    territories: string[];
+    linesOfBusiness: string[];
+    isPublic: boolean;
+    claimedAt: string | null;
+    employment: AgentEmployer[];
+}
+interface AgencyStaffMember {
+    name: string | null;
+    npn: string | null;
+    iecHash: string | null;
+    role: string | null;
+    email: string | null;
+}
+interface AgencyProgram {
+    name: string | null;
+    raterspotId: string | null;
+    iecHash: string | null;
+    states: string[];
+    carrierName: string | null;
+    isActive: boolean;
+}
+interface AgencyProfile {
+    iecHash: string | null;
+    raterspotId: string | null;
+    name: string | null;
+    orgSlug: string | null;
+    orgId: string | null;
+    type: string | null;
+    email: string | null;
+    phone: string | null;
+    website: string | null;
+    address: string | null;
+    city: string | null;
+    state: string | null;
+    zip: string | null;
+    dba: string | null;
+    licenseNo: string | null;
+    linesOfAuthority: string | null;
+    territories: string[];
+    linesOfBusiness: string[];
+    isPublic: boolean;
+    claimedAt: string | null;
+    staff: AgencyStaffMember[];
+    programs: AgencyProgram[];
+}
+interface CarrierProgram {
+    name: string | null;
+    iecHash: string | null;
+    raterspotId: string | null;
+    states: string[];
+    isActive: boolean;
+}
+interface CarrierProfile {
+    iecHash: string | null;
+    raterspotId: string | null;
+    name: string | null;
+    naic: string | null;
+    orgId: string | null;
+    orgSlug: string | null;
+    email: string | null;
+    phone: string | null;
+    website: string | null;
+    address: string | null;
+    city: string | null;
+    state: string | null;
+    isPublic: boolean;
+    claimedAt: string | null;
+    programs: CarrierProgram[];
+}
+interface ProgramProfile {
+    iecHash: string | null;
+    raterspotId: string | null;
+    name: string | null;
+    abrv: string | null;
+    states: string[];
+    isActive: boolean;
+    ratingEngine: string | null;
+    carrierName: string | null;
+    carrierNaic: string | null;
+    mgaName: string | null;
+    managerIecHash: string | null;
+    managerRaterspotId: string | null;
+}
+interface AppetiteMatchInput {
+    naicsCode: string;
+    state: string;
+    lineOfBusiness: string;
+    limits?: {
+        perOccurrence?: number;
+        aggregate?: number;
+    };
+    reason?: string;
+}
+interface AppetiteMatchProgram {
+    name: string | null;
+    iecHash: string | null;
+    raterspotId: string | null;
+    states: string[];
+    isActive: boolean;
+    carrierName: string | null;
+    carrierNaic: string | null;
+    mgaName: string | null;
+    ratingEngine: string | null;
+}
+interface AppetiteMatchResult {
+    programs: AppetiteMatchProgram[];
+    total: number;
+}
+/**
+ * Client for bio-graph InsureBio distribution graph endpoints.
+ *
+ * Public profile routes (agent, agency, carrier, program) require no auth.
+ * Authenticated routes (appetite match, same-as queue) require an accessToken.
+ *
+ * @example
+ * import { GraphClient } from '@insureco/bio/graph'
+ *
+ * // Public profile lookups — no auth needed
+ * const graph = new GraphClient()
+ * const { agent } = await graph.getAgent('1234567')
+ *
+ * // Authenticated routes — pass a user or service token
+ * const graph = new GraphClient({ accessToken: req.headers.authorization?.slice(7) })
+ * const result = await graph.matchAppetite({ naicsCode: '2361', state: 'TX', lineOfBusiness: 'GL' })
+ */
+declare class GraphClient {
+    private readonly graphUrl;
+    private readonly accessToken;
+    private readonly timeoutMs;
+    constructor(config?: GraphClientConfig);
+    /**
+     * Create a GraphClient from environment variables.
+     * BIO_GRAPH_URL defaults to https://bio-graph.tawa.pro if not set.
+     */
+    static fromEnv(overrides?: GraphClientConfig): GraphClient;
+    /** Look up an agent by NPN. Returns agent properties + employment chain. */
+    getAgent(npn: string): Promise<{
+        agent: AgentProfile;
+    }>;
+    /**
+     * Look up an agency by iecHash, raterspotId, or orgSlug.
+     * Returns agency properties + staff list + accessible programs.
+     */
+    getAgency(iecHash: string): Promise<{
+        agency: AgencyProfile;
+    }>;
+    /**
+     * Look up a carrier by NAIC code, iecHash, raterspotId, or orgSlug.
+     * Returns carrier properties + managed programs.
+     */
+    getCarrier(naic: string): Promise<{
+        carrier: CarrierProfile;
+    }>;
+    /**
+     * Look up a program by iecHash or raterspotId.
+     * Returns program properties + managing carrier or MGA.
+     */
+    getProgram(iecHash: string): Promise<{
+        program: ProgramProfile;
+    }>;
+    /**
+     * Find programs whose appetite covers a given risk.
+     * Requires an accessToken (auth: required).
+     *
+     * @param input - Risk criteria: NAICS code, state, line of business, optional limits
+     */
+    matchAppetite(input: AppetiteMatchInput): Promise<AppetiteMatchResult>;
+    private get;
+    private post;
+    private buildHeaders;
+    private handleResponse;
+}
+
+export { type AgencyProfile, type AgencyProgram, type AgencyStaffMember, type AgentEmployer, type AgentProfile, type AppetiteMatchInput, type AppetiteMatchProgram, type AppetiteMatchResult, type CarrierProfile, type CarrierProgram, GraphClient, type GraphClientConfig, type ProgramProfile };

package/dist/graph.js

@@ -0,0 +1,225 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/graph.ts
+var graph_exports = {};
+__export(graph_exports, {
+  GraphClient: () => GraphClient
+});
+module.exports = __toCommonJS(graph_exports);
+
+// src/errors.ts
+var BioError = class extends Error {
+  /** HTTP status code (if from an API response) */
+  statusCode;
+  /** Machine-readable error code (e.g. 'invalid_grant', 'token_expired') */
+  code;
+  /** Additional error details from the API */
+  details;
+  constructor(message, code, statusCode, details) {
+    super(message);
+    this.name = "BioError";
+    this.code = code;
+    this.statusCode = statusCode;
+    this.details = details;
+  }
+};
+
+// src/utils.ts
+function retryDelay(attempt) {
+  const baseDelay = Math.min(1e3 * 2 ** attempt, 5e3);
+  return baseDelay * (0.5 + Math.random() * 0.5);
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function parseJsonResponse(response) {
+  try {
+    return await response.json();
+  } catch {
+    throw new BioError(
+      `Bio-ID returned ${response.status} with non-JSON body`,
+      "parse_error",
+      response.status
+    );
+  }
+}
+
+// src/graph.ts
+var DEFAULT_TIMEOUT_MS = 1e4;
+var BIO_GRAPH_URL = "https://bio-graph.tawa.pro";
+var GraphClient = class _GraphClient {
+  graphUrl;
+  accessToken;
+  timeoutMs;
+  constructor(config = {}) {
+    this.graphUrl = (config.graphUrl ?? process.env.BIO_GRAPH_URL ?? BIO_GRAPH_URL).replace(/\/$/, "");
+    this.accessToken = config.accessToken;
+    this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  }
+  /**
+   * Create a GraphClient from environment variables.
+   * BIO_GRAPH_URL defaults to https://bio-graph.tawa.pro if not set.
+   */
+  static fromEnv(overrides) {
+    return new _GraphClient({
+      graphUrl: overrides?.graphUrl ?? process.env.BIO_GRAPH_URL,
+      accessToken: overrides?.accessToken,
+      timeoutMs: overrides?.timeoutMs
+    });
+  }
+  // ─── Public Profile Routes ────────────────────────────────────────────────
+  /** Look up an agent by NPN. Returns agent properties + employment chain. */
+  async getAgent(npn) {
+    return this.get(`/api/graph/agent/${encodeURIComponent(npn)}`);
+  }
+  /**
+   * Look up an agency by iecHash, raterspotId, or orgSlug.
+   * Returns agency properties + staff list + accessible programs.
+   */
+  async getAgency(iecHash) {
+    return this.get(`/api/graph/agency/${encodeURIComponent(iecHash)}`);
+  }
+  /**
+   * Look up a carrier by NAIC code, iecHash, raterspotId, or orgSlug.
+   * Returns carrier properties + managed programs.
+   */
+  async getCarrier(naic) {
+    return this.get(`/api/graph/carrier/${encodeURIComponent(naic)}`);
+  }
+  /**
+   * Look up a program by iecHash or raterspotId.
+   * Returns program properties + managing carrier or MGA.
+   */
+  async getProgram(iecHash) {
+    return this.get(`/api/graph/program/${encodeURIComponent(iecHash)}`);
+  }
+  // ─── Authenticated Routes ─────────────────────────────────────────────────
+  /**
+   * Find programs whose appetite covers a given risk.
+   * Requires an accessToken (auth: required).
+   *
+   * @param input - Risk criteria: NAICS code, state, line of business, optional limits
+   */
+  async matchAppetite(input) {
+    return this.post("/api/graph/appetite/match", input, { requiresAuth: true });
+  }
+  // ─── Internal ─────────────────────────────────────────────────────────────
+  async get(path, attempt = 0) {
+    const url = `${this.graphUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        headers: this.buildHeaders(),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      if (!isTimeout && attempt < 2) {
+        await sleep(retryDelay(attempt));
+        return this.get(path, attempt + 1);
+      }
+      throw new BioError(
+        isTimeout ? "bio-graph request timed out" : `bio-graph request failed: ${String(err)}`,
+        isTimeout ? "timeout" : "network_error"
+      );
+    } finally {
+      clearTimeout(timer);
+    }
+    return this.handleResponse(response, path);
+  }
+  async post(path, body, opts = {}, attempt = 0) {
+    if (opts.requiresAuth && !this.accessToken) {
+      throw new BioError(
+        `bio-graph ${path} requires an accessToken \u2014 pass it in the GraphClient constructor`,
+        "config_error"
+      );
+    }
+    const url = `${this.graphUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        method: "POST",
+        headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      if (!isTimeout && attempt < 2) {
+        await sleep(retryDelay(attempt));
+        return this.post(path, body, opts, attempt + 1);
+      }
+      throw new BioError(
+        isTimeout ? "bio-graph request timed out" : `bio-graph request failed: ${String(err)}`,
+        isTimeout ? "timeout" : "network_error"
+      );
+    } finally {
+      clearTimeout(timer);
+    }
+    return this.handleResponse(response, path);
+  }
+  buildHeaders() {
+    const headers = {};
+    if (this.accessToken) {
+      headers["Authorization"] = `Bearer ${this.accessToken}`;
+    }
+    return headers;
+  }
+  async handleResponse(response, path) {
+    if (response.status === 404) {
+      throw new BioError(`bio-graph entity not found: ${path}`, "not_found", 404);
+    }
+    if (response.status === 401) {
+      throw new BioError(
+        "bio-graph authentication failed \u2014 provide a valid accessToken",
+        "unauthorized",
+        401
+      );
+    }
+    if (response.status === 402) {
+      throw new BioError(
+        "bio-graph call failed \u2014 insufficient gas tokens. Top up at tawa.insureco.io/wallet",
+        "insufficient_gas",
+        402
+      );
+    }
+    if (!response.ok) {
+      const body2 = await parseJsonResponse(response).catch(() => ({}));
+      throw new BioError(
+        `bio-graph returned ${response.status} for ${path}`,
+        "api_error",
+        response.status,
+        body2
+      );
+    }
+    const body = await parseJsonResponse(response);
+    return body;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  GraphClient
+});

package/dist/graph.mjs

@@ -0,0 +1,7 @@
+import {
+  GraphClient
+} from "./chunk-PLN6QPED.mjs";
+import "./chunk-NK5VXXWF.mjs";
+export {
+  GraphClient
+};

package/dist/index.d.mts

@@ -1,5 +1,6 @@
 import { B as BioAuthConfig, A as AuthorizeOptions, a as AuthorizeResult, T as TokenResponse, b as BioUser, I as IntrospectResult, c as BioAdminConfig, U as UserFilters, d as UpdateUserData, e as BioDepartment, C as CreateDepartmentData, f as BioRole, g as CreateRoleData, h as BioOAuthClient, i as CreateClientData, j as BioTokenPayload, V as VerifyOptions, J as JWKSVerifyOptions } from './types-Dkb-drHZ.mjs';
 export { k as AdminResponse, l as BioAddress, m as BioClientTokenPayload, n as BioMessaging, o as BioUsersConfig, O as OrgMember, p as OrgMemberFilters, q as OrgMembersResult } from './types-Dkb-drHZ.mjs';
+export { AgencyProfile, AgencyProgram, AgencyStaffMember, AgentEmployer, AgentProfile, AppetiteMatchInput, AppetiteMatchProgram, AppetiteMatchResult, CarrierProfile, CarrierProgram, GraphClient, GraphClientConfig, ProgramProfile } from './graph.mjs';
 
 /**
  * OAuth flow client for Bio-ID SSO.

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import { B as BioAuthConfig, A as AuthorizeOptions, a as AuthorizeResult, T as TokenResponse, b as BioUser, I as IntrospectResult, c as BioAdminConfig, U as UserFilters, d as UpdateUserData, e as BioDepartment, C as CreateDepartmentData, f as BioRole, g as CreateRoleData, h as BioOAuthClient, i as CreateClientData, j as BioTokenPayload, V as VerifyOptions, J as JWKSVerifyOptions } from './types-Dkb-drHZ.js';
 export { k as AdminResponse, l as BioAddress, m as BioClientTokenPayload, n as BioMessaging, o as BioUsersConfig, O as OrgMember, p as OrgMemberFilters, q as OrgMembersResult } from './types-Dkb-drHZ.js';
+export { AgencyProfile, AgencyProgram, AgencyStaffMember, AgentEmployer, AgentProfile, AppetiteMatchInput, AppetiteMatchProgram, AppetiteMatchResult, CarrierProfile, CarrierProgram, GraphClient, GraphClientConfig, ProgramProfile } from './graph.js';
 
 /**
  * OAuth flow client for Bio-ID SSO.

package/dist/index.js

@@ -33,6 +33,7 @@ __export(index_exports, {
   BioAdmin: () => BioAdmin,
   BioAuth: () => BioAuth,
   BioError: () => BioError,
+  GraphClient: () => GraphClient,
   decodeToken: () => decodeToken,
   generatePKCE: () => generatePKCE,
   isTokenExpired: () => isTokenExpired,
@@ -737,11 +738,171 @@ async function verifyTokenJWKS(token, options) {
   }
   return payload;
 }
+
+// src/graph.ts
+var DEFAULT_TIMEOUT_MS3 = 1e4;
+var BIO_GRAPH_URL = "https://bio-graph.tawa.pro";
+var GraphClient = class _GraphClient {
+  graphUrl;
+  accessToken;
+  timeoutMs;
+  constructor(config = {}) {
+    this.graphUrl = (config.graphUrl ?? process.env.BIO_GRAPH_URL ?? BIO_GRAPH_URL).replace(/\/$/, "");
+    this.accessToken = config.accessToken;
+    this.timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT_MS3;
+  }
+  /**
+   * Create a GraphClient from environment variables.
+   * BIO_GRAPH_URL defaults to https://bio-graph.tawa.pro if not set.
+   */
+  static fromEnv(overrides) {
+    return new _GraphClient({
+      graphUrl: overrides?.graphUrl ?? process.env.BIO_GRAPH_URL,
+      accessToken: overrides?.accessToken,
+      timeoutMs: overrides?.timeoutMs
+    });
+  }
+  // ─── Public Profile Routes ────────────────────────────────────────────────
+  /** Look up an agent by NPN. Returns agent properties + employment chain. */
+  async getAgent(npn) {
+    return this.get(`/api/graph/agent/${encodeURIComponent(npn)}`);
+  }
+  /**
+   * Look up an agency by iecHash, raterspotId, or orgSlug.
+   * Returns agency properties + staff list + accessible programs.
+   */
+  async getAgency(iecHash) {
+    return this.get(`/api/graph/agency/${encodeURIComponent(iecHash)}`);
+  }
+  /**
+   * Look up a carrier by NAIC code, iecHash, raterspotId, or orgSlug.
+   * Returns carrier properties + managed programs.
+   */
+  async getCarrier(naic) {
+    return this.get(`/api/graph/carrier/${encodeURIComponent(naic)}`);
+  }
+  /**
+   * Look up a program by iecHash or raterspotId.
+   * Returns program properties + managing carrier or MGA.
+   */
+  async getProgram(iecHash) {
+    return this.get(`/api/graph/program/${encodeURIComponent(iecHash)}`);
+  }
+  // ─── Authenticated Routes ─────────────────────────────────────────────────
+  /**
+   * Find programs whose appetite covers a given risk.
+   * Requires an accessToken (auth: required).
+   *
+   * @param input - Risk criteria: NAICS code, state, line of business, optional limits
+   */
+  async matchAppetite(input) {
+    return this.post("/api/graph/appetite/match", input, { requiresAuth: true });
+  }
+  // ─── Internal ─────────────────────────────────────────────────────────────
+  async get(path, attempt = 0) {
+    const url = `${this.graphUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        headers: this.buildHeaders(),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      if (!isTimeout && attempt < 2) {
+        await sleep(retryDelay(attempt));
+        return this.get(path, attempt + 1);
+      }
+      throw new BioError(
+        isTimeout ? "bio-graph request timed out" : `bio-graph request failed: ${String(err)}`,
+        isTimeout ? "timeout" : "network_error"
+      );
+    } finally {
+      clearTimeout(timer);
+    }
+    return this.handleResponse(response, path);
+  }
+  async post(path, body, opts = {}, attempt = 0) {
+    if (opts.requiresAuth && !this.accessToken) {
+      throw new BioError(
+        `bio-graph ${path} requires an accessToken \u2014 pass it in the GraphClient constructor`,
+        "config_error"
+      );
+    }
+    const url = `${this.graphUrl}${path}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+    let response;
+    try {
+      response = await fetch(url, {
+        method: "POST",
+        headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
+        body: JSON.stringify(body),
+        signal: controller.signal
+      });
+    } catch (err) {
+      clearTimeout(timer);
+      const isTimeout = err instanceof Error && err.name === "AbortError";
+      if (!isTimeout && attempt < 2) {
+        await sleep(retryDelay(attempt));
+        return this.post(path, body, opts, attempt + 1);
+      }
+      throw new BioError(
+        isTimeout ? "bio-graph request timed out" : `bio-graph request failed: ${String(err)}`,
+        isTimeout ? "timeout" : "network_error"
+      );
+    } finally {
+      clearTimeout(timer);
+    }
+    return this.handleResponse(response, path);
+  }
+  buildHeaders() {
+    const headers = {};
+    if (this.accessToken) {
+      headers["Authorization"] = `Bearer ${this.accessToken}`;
+    }
+    return headers;
+  }
+  async handleResponse(response, path) {
+    if (response.status === 404) {
+      throw new BioError(`bio-graph entity not found: ${path}`, "not_found", 404);
+    }
+    if (response.status === 401) {
+      throw new BioError(
+        "bio-graph authentication failed \u2014 provide a valid accessToken",
+        "unauthorized",
+        401
+      );
+    }
+    if (response.status === 402) {
+      throw new BioError(
+        "bio-graph call failed \u2014 insufficient gas tokens. Top up at tawa.insureco.io/wallet",
+        "insufficient_gas",
+        402
+      );
+    }
+    if (!response.ok) {
+      const body2 = await parseJsonResponse(response).catch(() => ({}));
+      throw new BioError(
+        `bio-graph returned ${response.status} for ${path}`,
+        "api_error",
+        response.status,
+        body2
+      );
+    }
+    const body = await parseJsonResponse(response);
+    return body;
+  }
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   BioAdmin,
   BioAuth,
   BioError,
+  GraphClient,
   decodeToken,
   generatePKCE,
   isTokenExpired,

package/dist/index.mjs

@@ -1,3 +1,6 @@
+import {
+  GraphClient
+} from "./chunk-PLN6QPED.mjs";
 import {
   BioError,
   parseJsonResponse,
@@ -668,6 +671,7 @@ export {
   BioAdmin,
   BioAuth,
   BioError,
+  GraphClient,
   decodeToken,
   generatePKCE,
   isTokenExpired,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insureco/bio",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "SDK for Bio-ID SSO integration on the Tawa platform",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -15,11 +15,23 @@
       "types": "./dist/users.d.ts",
       "import": "./dist/users.mjs",
       "require": "./dist/users.js"
+    },
+    "./graph": {
+      "types": "./dist/graph.d.ts",
+      "import": "./dist/graph.mjs",
+      "require": "./dist/graph.js"
     }
   },
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "tsup src/index.ts src/users.ts src/graph.ts --format cjs,esm --dts --clean",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
   "keywords": [
     "insureco",
     "tawa",
@@ -42,11 +54,5 @@
   },
   "engines": {
     "node": ">=18.0.0"
-  },
-  "scripts": {
-    "build": "tsup src/index.ts src/users.ts --format cjs,esm --dts --clean",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "lint": "tsc --noEmit"
   }
-}
+}