@neuraltrust/trustgate 0.1.0

package/dist/agent.js

@@ -0,0 +1,216 @@
+import { END_USER_HEADER } from './config.js';
+import { createConnectLink, listConnections, requireEndUser } from './connections.js';
+import { ToolNotFoundError } from './errors.js';
+import { adapterFor, restoreArguments } from './formats.js';
+import { MCPTransport } from './mcp.js';
+import { Actor, resolveToolName, } from './types.js';
+/**
+ * A tool surface in one provider's dialect, with the executor that belongs to
+ * it.
+ *
+ * They travel together because they are two halves of one translation: what
+ * `tools` added on the way out, `execute` has to undo on the way back.
+ *
+ * `Tool` and `Output` are the provider's own types, named by the caller:
+ *
+ * ```ts
+ * const { tools, execute } = agent.toolkit<
+ *   OpenAI.Responses.Tool,
+ *   OpenAI.Responses.ResponseInputItem
+ * >(ToolFormat.OpenAIResponses)
+ * ```
+ *
+ * They default to `unknown`, so nothing breaks by leaving them out — but then
+ * "pass this straight to the provider's API" is a promise the type does not
+ * keep, and the caller casts at the boundary. The SDK cannot name them itself:
+ * it carries no dependency on any provider's package, which is what lets one
+ * install serve all of them.
+ */
+export class Toolkit {
+    tools;
+    warnings;
+    format;
+    originals;
+    transport;
+    constructor(
+    /** Pass this straight to the provider's API. */
+    tools, 
+    /** Tools whose schema could not be expressed in the requested dialect. */
+    warnings, format, originals, transport) {
+        this.tools = tools;
+        this.warnings = warnings;
+        this.format = format;
+        this.originals = originals;
+        this.transport = transport;
+        // Bound, because the documented way to use this is to destructure it —
+        // `const { tools, execute } = agent.toolkit(…)` — and an unbound method
+        // loses the format it needs the moment it is called that way.
+        this.calls = this.calls.bind(this);
+        this.execute = this.execute.bind(this);
+    }
+    /** The calls the model asked for, read out of the provider's response. */
+    calls(output) {
+        return adapterFor(this.format).extractCalls(output);
+    }
+    /**
+     * Runs the calls the model asked for and returns what to send back.
+     *
+     * Every call goes to the gateway, so the policy, the audit trail and the
+     * upstream credentials stay where they were. The caller's process only
+     * decides whether to make the call at all.
+     */
+    async execute(output, signal) {
+        const adapter = adapterFor(this.format);
+        const calls = adapter.extractCalls(output);
+        const results = [];
+        for (const call of calls) {
+            const args = restoreArguments(call.arguments, this.originals.get(call.name));
+            const result = await this.transport.callTool(call.name, args, signal);
+            results.push({ call, result });
+        }
+        return adapter.toOutputs(results);
+    }
+}
+/**
+ * An application's handle on its gateway.
+ *
+ * It speaks as the application itself: one principal, its own upstream
+ * accounts, nothing per-user. Which handle you get is not a choice made here —
+ * it follows from how the consumer was configured, which is why `connect()`
+ * returns one of these or refuses.
+ */
+export class Agent {
+    config;
+    slug;
+    transport;
+    tools;
+    missing;
+    connections;
+    actor = Actor.Application;
+    constructor(config, slug, transport, 
+    /** The tools this consumer serves, as the gateway named them. */
+    tools, 
+    /** Tools asked for in `requires` that the toolkit does not carry. */
+    missing, 
+    /** The application's own upstream accounts, as of `connect()`. */
+    connections) {
+        this.config = config;
+        this.slug = slug;
+        this.transport = transport;
+        this.tools = tools;
+        this.missing = missing;
+        this.connections = connections;
+    }
+    /** URL and headers for a framework that brings its own MCP client. */
+    get mcp() {
+        return { url: this.transport.url, headers: this.transport.headers };
+    }
+    /**
+     * The same surface, translated for a provider you call directly.
+     *
+     * Name the provider's types to have them travel with it:
+     * `toolkit<OpenAI.Responses.Tool, OpenAI.Responses.ResponseInputItem>(…)`.
+     */
+    toolkit(format, options = {}) {
+        const { tools, warnings, originals } = adapterFor(format).convert(this.tools, {
+            strict: options.strict ?? false,
+        });
+        return new Toolkit(tools, warnings, format, originals, this.transport);
+    }
+    /**
+     * One tool, called directly. The escape hatch under the toolkits.
+     *
+     * The server prefix is optional here: "list_issues" reaches
+     * "linear_list_issues" while Linear is the only server of this application
+     * that serves it. The gateway put that prefix there, so a caller writing the
+     * name by hand should not have to.
+     */
+    async callTool(name, args = {}, signal) {
+        return this.transport.callTool(resolveToolName(name, this.tools), args, signal);
+    }
+    /**
+     * Re-reads the surface.
+     *
+     * An admin owns this toolkit and can change it under a running agent, so a
+     * long-lived process re-reads rather than trusting the list it took at
+     * startup.
+     */
+    async refresh(signal) {
+        this.tools = await this.transport.listTools(signal);
+        return this.tools;
+    }
+    /** What the application still owes before it can call every server. */
+    async refreshConnections(signal) {
+        return listConnections(this.config, this.slug, undefined, signal);
+    }
+    /**
+     * The same application, acting for one named person.
+     *
+     * No round trip and no second surface to read: the toolkit an admin bound
+     * is the application's, identical for everyone it acts for. What changes is
+     * one header, and with it whose upstream account the gateway reaches for.
+     */
+    forEndUser(endUser) {
+        return endUserAgent(this.config, this.slug, endUser, this.transport.url, this.tools);
+    }
+}
+/**
+ * An application's handle for one of its own end users.
+ *
+ * The user travels in a header, so a handle is a header and nothing more —
+ * but the MCP endpoint's headers are fixed when a client connects, which is
+ * why each user needs their own transport rather than a shared one.
+ */
+export class EndUserAgent {
+    config;
+    slug;
+    endUser;
+    transport;
+    tools;
+    actor = Actor.EndUser;
+    constructor(config, slug, endUser, transport, tools) {
+        this.config = config;
+        this.slug = slug;
+        this.endUser = endUser;
+        this.transport = transport;
+        this.tools = tools;
+    }
+    get mcp() {
+        return { url: this.transport.url, headers: this.transport.headers };
+    }
+    toolkit(format, options = {}) {
+        const { tools, warnings, originals } = adapterFor(format).convert(this.tools, {
+            strict: options.strict ?? false,
+        });
+        return new Toolkit(tools, warnings, format, originals, this.transport);
+    }
+    async callTool(name, args = {}, signal) {
+        return this.transport.callTool(name, args, signal);
+    }
+    async refresh(signal) {
+        this.tools = await this.transport.listTools(signal);
+        return this.tools;
+    }
+    /** Which servers this user has connected, and which they have not. */
+    async connections(signal) {
+        return listConnections(this.config, this.slug, this.endUser, signal);
+    }
+    /**
+     * The page to put in front of this user so they can connect an account.
+     *
+     * Naming a provider narrows it to that one server; omitting it covers every
+     * server of the application that forwards a credential. The link expires,
+     * so it is minted when it is about to be shown, not cached.
+     */
+    async connectLink(provider, signal) {
+        return createConnectLink(this.config, this.slug, this.endUser, provider, signal);
+    }
+}
+/** Builds the per-user handle, with the header that names them. */
+export function endUserAgent(config, slug, rawEndUser, url, tools) {
+    const endUser = requireEndUser(rawEndUser);
+    const transport = new MCPTransport(config, url, { [END_USER_HEADER]: endUser });
+    return new EndUserAgent(config, slug, endUser, transport, tools);
+}
+export { ToolNotFoundError };
+//# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAuB,MAAM,aAAa,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAA2C,MAAM,cAAc,CAAA;AACpG,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EACN,KAAK,EAEL,eAAe,GAOf,MAAM,YAAY,CAAA;AAWnB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,OAAO;IAGT;IAEA;IACQ;IACA;IACA;IAPlB;IACC,gDAAgD;IACvC,KAAa;IACtB,0EAA0E;IACjE,QAA6B,EACrB,MAAkB,EAClB,SAAkC,EAClC,SAAuB;QAL/B,UAAK,GAAL,KAAK,CAAQ;QAEb,aAAQ,GAAR,QAAQ,CAAqB;QACrB,WAAM,GAAN,MAAM,CAAY;QAClB,cAAS,GAAT,SAAS,CAAyB;QAClC,cAAS,GAAT,SAAS,CAAc;QAExC,uEAAuE;QACvE,wEAAwE;QACxE,8DAA8D;QAC9D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,MAAe;QACpB,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACpD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,MAAe,EAAE,MAAoB;QAClD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAiB,EAAE,CAAA;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;YACrE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,CAAa,CAAA;IAC9C,CAAC;CACD;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,KAAK;IAIC;IACR;IACQ;IAEV;IAEE;IAEA;IAXD,KAAK,GAAG,KAAK,CAAC,WAAW,CAAA;IAElC,YACkB,MAAsB,EAC9B,IAAY,EACJ,SAAuB;IACxC,iEAAiE;IAC1D,KAAoB;IAC3B,qEAAqE;IAC5D,OAAiB;IAC1B,kEAAkE;IACzD,WAAyB;QARjB,WAAM,GAAN,MAAM,CAAgB;QAC9B,SAAI,GAAJ,IAAI,CAAQ;QACJ,cAAS,GAAT,SAAS,CAAc;QAEjC,UAAK,GAAL,KAAK,CAAe;QAElB,YAAO,GAAP,OAAO,CAAU;QAEjB,gBAAW,GAAX,WAAW,CAAc;IAChC,CAAC;IAEJ,sEAAsE;IACtE,IAAI,GAAG;QACN,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;IAED;;;;;OAKG;IACH,OAAO,CACN,MAAkB,EAClB,UAA0B,EAAE;QAE5B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE;YAC7E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;SAC/B,CAAC,CAAA;QACF,OAAO,IAAI,OAAO,CACjB,KAAe,EACf,QAAQ,EACR,MAAM,EACN,SAAS,EACT,IAAI,CAAC,SAAS,CACd,CAAA;IACF,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACb,IAAY,EACZ,OAAgC,EAAE,EAClC,MAAoB;QAEpB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IAChF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,MAAoB;QACjC,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACnD,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,kBAAkB,CAAC,MAAoB;QAC5C,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAClE,CAAC;IAED;;;;;;OAMG;IACH,UAAU,CAAC,OAAe;QACzB,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IACrF,CAAC;CACD;AAED;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IAIN;IACR;IACA;IACQ;IACV;IAPC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAA;IAE9B,YACkB,MAAsB,EAC9B,IAAY,EACZ,OAAe,EACP,SAAuB,EACjC,KAAoB;QAJV,WAAM,GAAN,MAAM,CAAgB;QAC9B,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QACP,cAAS,GAAT,SAAS,CAAc;QACjC,UAAK,GAAL,KAAK,CAAe;IACzB,CAAC;IAEJ,IAAI,GAAG;QACN,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAA;IACpE,CAAC;IAED,OAAO,CACN,MAAkB,EAClB,UAA0B,EAAE;QAE5B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE;YAC7E,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;SAC/B,CAAC,CAAA;QACF,OAAO,IAAI,OAAO,CACjB,KAAe,EACf,QAAQ,EACR,MAAM,EACN,SAAS,EACT,IAAI,CAAC,SAAS,CACd,CAAA;IACF,CAAC;IAED,KAAK,CAAC,QAAQ,CACb,IAAY,EACZ,OAAgC,EAAE,EAClC,MAAoB;QAEpB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAoB;QACjC,IAAI,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QACnD,OAAO,IAAI,CAAC,KAAK,CAAA;IAClB,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,WAAW,CAAC,MAAoB;QACrC,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACrE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,QAAiB,EAAE,MAAoB;QACxD,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IACjF,CAAC;CACD;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAC3B,MAAsB,EACtB,IAAY,EACZ,UAAkB,EAClB,GAAW,EACX,KAAoB;IAEpB,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAC/E,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;AACjE,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/client.d.ts

@@ -0,0 +1,88 @@
+import { Agent, EndUserAgent } from './agent.js';
+import { type TrustGateConfig } from './config.js';
+import { type KeyIdentity } from './whoami.js';
+export type ConnectOptions = {
+    /**
+     * Tool names this agent is written around.
+     *
+     * The toolkit belongs to an admin, not to the code that uses it, so it can
+     * be narrowed without warning. Declaring what you need turns that into a
+     * refusal at startup instead of a failure mid-conversation.
+     */
+    requires?: string[];
+    signal?: AbortSignal;
+};
+/** What the LLM plane needs to be handed to a provider's own client. */
+export type LLMEndpoint = {
+    /** Pass as `baseURL` to the OpenAI client. It ends in `/v1`. */
+    baseUrl: string;
+    /**
+     * Pass as `baseURL` to the Anthropic client.
+     *
+     * The two clients disagree on where the version goes. OpenAI's is handed a
+     * base that already ends in `/v1` and appends `/chat/completions`;
+     * Anthropic's appends `/v1/messages` to what it is given, so handing it
+     * `baseUrl` asks the gateway for `/v1/v1/messages`. This is the
+     * application's root, the one every dialect but OpenAI's hangs from.
+     */
+    anthropicBaseUrl: string;
+    apiKey: string;
+    headers: Record<string, string>;
+    /** The consumer behind it, for logs and for error messages. */
+    consumer: string;
+};
+/**
+ * The entry point: a gateway and a key, and everything else is asked for.
+ *
+ * The key is attached to consumers, and a consumer has one type — so the tools
+ * live behind an MCP consumer and the models behind an LLM one. Their slugs
+ * were chosen by whoever created them, and the two planes do not share a host,
+ * so neither is something a caller should have to carry: the gateway is asked
+ * once, at `connect()`, and answers both.
+ */
+export declare class TrustGate {
+    private readonly config;
+    private identityPromise?;
+    constructor(config?: TrustGateConfig);
+    /**
+     * What this key reaches. Read once and remembered: it is a property of the
+     * key, and a long-lived process should not re-ask on every call.
+     */
+    identity(signal?: AbortSignal): Promise<KeyIdentity>;
+    /**
+     * The LLM plane, ready for a provider's own SDK.
+     *
+     * The gateway speaks the providers' own APIs, so nothing here wraps their
+     * clients — it points them somewhere else. Wrapping would mean chasing
+     * every change they make and breaking streaming on the way.
+     */
+    llm(signal?: AbortSignal): Promise<LLMEndpoint>;
+    /**
+     * Opens the application's own surface and proves it is usable before
+     * anything runs.
+     *
+     * Two things happen here, and both are the kind that are cheap now and
+     * expensive later: whether the tools the agent needs are actually on its
+     * toolkit, and whether the servers behind it have an account to call with.
+     * The second has no runtime remedy for this handle — nobody is present to
+     * open a connect link once a batch is going — which is the whole reason it
+     * is checked at startup.
+     *
+     * This is the application actor: the key and nothing else, so the gateway
+     * runs the calls as `app:<consumer_id>`. For a call on behalf of a person,
+     * use {@link forEndUser}; both work on the same consumer, because who a
+     * request runs as is read from the request rather than declared anywhere.
+     */
+    connect(options?: ConnectOptions): Promise<Agent>;
+    /**
+     * The handle for one named person, on the same consumer and the same key.
+     *
+     * The name is asserted by this application and not verified, so the gateway
+     * namespaces it: two applications naming `user_123` never share an account.
+     * What that person still has to connect is theirs to connect — the handle's
+     * own `connections` mint the link to put in front of them — which is why
+     * there is no startup preflight here and one in {@link connect}.
+     */
+    forEndUser(endUser: string, options?: ConnectOptions): Promise<EndUserAgent>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,YAAY,EAAgB,MAAM,YAAY,CAAA;AAC9D,OAAO,EAAsD,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AAUtG,OAAO,EAA0B,KAAK,WAAW,EAAoB,MAAM,aAAa,CAAA;AAExF,MAAM,MAAM,cAAc,GAAG;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;CACpB,CAAA;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG;IACzB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf;;;;;;;;OAQG;IACH,gBAAgB,EAAE,MAAM,CAAA;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAA;CAChB,CAAA;AAED;;;;;;;;GAQG;AACH,qBAAa,SAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,eAAe,CAAC,CAAsB;gBAElC,MAAM,GAAE,eAAoB;IAIxC;;;OAGG;IACG,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ1D;;;;;;OAMG;IACG,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAYrD;;;;;;;;;;;;;;;OAeG;IACG,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,KAAK,CAAC;IAsB3D;;;;;;;;OAQG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,YAAY,CAAC;CAWtF"}

package/dist/client.js

@@ -0,0 +1,152 @@
+import { Agent, endUserAgent } from './agent.js';
+import { API_KEY_HEADER, resolveConfig } from './config.js';
+import { listConnections } from './connections.js';
+import { MissingToolsError, TrustGateError, UpstreamNotConnectedError, } from './errors.js';
+import { MCPTransport } from './mcp.js';
+import { resolveToolName } from './types.js';
+import { selectConsumer, whoAmI } from './whoami.js';
+/**
+ * The entry point: a gateway and a key, and everything else is asked for.
+ *
+ * The key is attached to consumers, and a consumer has one type — so the tools
+ * live behind an MCP consumer and the models behind an LLM one. Their slugs
+ * were chosen by whoever created them, and the two planes do not share a host,
+ * so neither is something a caller should have to carry: the gateway is asked
+ * once, at `connect()`, and answers both.
+ */
+export class TrustGate {
+    config;
+    identityPromise;
+    constructor(config = {}) {
+        this.config = resolveConfig(config);
+    }
+    /**
+     * What this key reaches. Read once and remembered: it is a property of the
+     * key, and a long-lived process should not re-ask on every call.
+     */
+    async identity(signal) {
+        this.identityPromise ??= whoAmI(this.config, signal).catch((error) => {
+            this.identityPromise = undefined;
+            throw asIdentityError(error, this.config.baseUrl);
+        });
+        return this.identityPromise;
+    }
+    /**
+     * The LLM plane, ready for a provider's own SDK.
+     *
+     * The gateway speaks the providers' own APIs, so nothing here wraps their
+     * clients — it points them somewhere else. Wrapping would mean chasing
+     * every change they make and breaking streaming on the way.
+     */
+    async llm(signal) {
+        const identity = await this.identity(signal);
+        const consumer = selectConsumer(identity, 'LLM', this.config.llmConsumer, 'llmConsumer');
+        return {
+            baseUrl: consumer.url,
+            anthropicBaseUrl: withoutVersion(consumer.url),
+            apiKey: this.config.apiKey,
+            headers: { [API_KEY_HEADER]: this.config.apiKey },
+            consumer: consumer.slug,
+        };
+    }
+    /**
+     * Opens the application's own surface and proves it is usable before
+     * anything runs.
+     *
+     * Two things happen here, and both are the kind that are cheap now and
+     * expensive later: whether the tools the agent needs are actually on its
+     * toolkit, and whether the servers behind it have an account to call with.
+     * The second has no runtime remedy for this handle — nobody is present to
+     * open a connect link once a batch is going — which is the whole reason it
+     * is checked at startup.
+     *
+     * This is the application actor: the key and nothing else, so the gateway
+     * runs the calls as `app:<consumer_id>`. For a call on behalf of a person,
+     * use {@link forEndUser}; both work on the same consumer, because who a
+     * request runs as is read from the request rather than declared anywhere.
+     */
+    async connect(options = {}) {
+        const identity = await this.identity(options.signal);
+        const consumer = selectConsumer(identity, 'MCP', this.config.mcpConsumer, 'mcpConsumer');
+        // Accounts before tools: a server with no account for the application can
+        // fail the listing itself, which would surface as a bare gateway error
+        // before this check — the one that says who fixes it — ever ran.
+        const connections = await listConnections(this.config, consumer.slug, undefined, options.signal);
+        const blocked = blockedUpstreams(consumer.upstreams, connections);
+        if (blocked.length > 0) {
+            throw new UpstreamNotConnectedError(blocked);
+        }
+        const transport = new MCPTransport(this.config, consumer.url);
+        const tools = await transport.listTools(options.signal);
+        const missing = missingTools(tools, options.requires ?? []);
+        if (missing.length > 0) {
+            throw new MissingToolsError(missing, tools.map((tool) => tool.name));
+        }
+        return new Agent(this.config, consumer.slug, transport, tools, missing, connections);
+    }
+    /**
+     * The handle for one named person, on the same consumer and the same key.
+     *
+     * The name is asserted by this application and not verified, so the gateway
+     * namespaces it: two applications naming `user_123` never share an account.
+     * What that person still has to connect is theirs to connect — the handle's
+     * own `connections` mint the link to put in front of them — which is why
+     * there is no startup preflight here and one in {@link connect}.
+     */
+    async forEndUser(endUser, options = {}) {
+        const identity = await this.identity(options.signal);
+        const consumer = selectConsumer(identity, 'MCP', this.config.mcpConsumer, 'mcpConsumer');
+        const agent = endUserAgent(this.config, consumer.slug, endUser, consumer.url, []);
+        const tools = await agent.refresh(options.signal);
+        const missing = missingTools(tools, options.requires ?? []);
+        if (missing.length > 0) {
+            throw new MissingToolsError(missing, tools.map((tool) => tool.name));
+        }
+        return agent;
+    }
+}
+/**
+ * The required tools this toolkit does not carry.
+ *
+ * Each name is resolved the way callTool resolves it, so an agent may require
+ * the name its server gave the tool and leave the gateway's server prefix to
+ * the gateway.
+ */
+function missingTools(tools, required) {
+    const names = new Set(tools.map((tool) => tool.name));
+    return required.filter((name) => !names.has(resolveToolName(name, tools)));
+}
+function withoutVersion(url) {
+    const trimmed = url.replace(/\/+$/, '');
+    return trimmed.endsWith('/v1') ? trimmed.slice(0, -'/v1'.length) : trimmed;
+}
+/** A gateway that cannot answer for a key cannot be used with one secret. */
+function asIdentityError(error, baseUrl) {
+    if (error instanceof TrustGateError && error.status === 404) {
+        return new TrustGateError(`${baseUrl}/whoami answered 404, so the SDK cannot resolve which consumers ` +
+            'this key reaches. Usually the base URL is the wrong address: it is the MCP ' +
+            "plane's host on its own, with no consumer path after it — not the " +
+            '/<application>/mcp endpoint, and not the LLM plane. Otherwise the gateway ' +
+            'predates /whoami and needs upgrading.', { status: 404, cause: error });
+    }
+    return error;
+}
+/**
+ * What this application still has to have connected before it can run.
+ *
+ * `whoami` answers it best, because it also names who has to act. But the field
+ * is absent on a gateway too old to send it, and an absent list is not an empty
+ * one: taking it for "nothing to connect" is how a batch gets past its own
+ * startup check and fails on the first row instead, which is the failure the
+ * check exists to prevent. So when it is missing the connections list answers,
+ * as it did before `whoami` carried this at all.
+ */
+function blockedUpstreams(upstreams, connections) {
+    if (upstreams) {
+        return upstreams.filter((upstream) => upstream.blocked);
+    }
+    return connections
+        .filter((connection) => connection.status !== 'connected')
+        .map((connection) => ({ server: connection.registry || connection.provider }));
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAgB,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,aAAa,EAA6C,MAAM,aAAa,CAAA;AACtG,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,yBAAyB,GAEzB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,eAAe,EAAqC,MAAM,YAAY,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,EAAsC,MAAM,aAAa,CAAA;AAkCxF;;;;;;;;GAQG;AACH,MAAM,OAAO,SAAS;IACJ,MAAM,CAAgB;IAC/B,eAAe,CAAuB;IAE9C,YAAY,SAA0B,EAAE;QACvC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,MAAoB;QAClC,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC7E,IAAI,CAAC,eAAe,GAAG,SAAS,CAAA;YAChC,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,eAAe,CAAA;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CAAC,MAAoB;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QACxF,OAAO;YACN,OAAO,EAAE,QAAQ,CAAC,GAAG;YACrB,gBAAgB,EAAE,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YACjD,QAAQ,EAAE,QAAQ,CAAC,IAAI;SACvB,CAAA;IACF,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,OAAO,CAAC,UAA0B,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QAExF,0EAA0E;QAC1E,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAChG,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;QACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACvD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IACrF,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,UAA0B,EAAE;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QACxF,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QACjF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACjD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;QAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,KAAK,CAAA;IACb,CAAC;CACD;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAoB,EAAE,QAAkB;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACrD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvC,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;AAC3E,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe,CAAC,KAAc,EAAE,OAAe;IACvD,IAAI,KAAK,YAAY,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7D,OAAO,IAAI,cAAc,CACxB,GAAG,OAAO,kEAAkE;YAC3E,6EAA6E;YAC7E,oEAAoE;YACpE,4EAA4E;YAC5E,uCAAuC,EACxC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAC7B,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,SAAoC,EAAE,WAAyB;IACxF,IAAI,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,WAAW;SAChB,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC;SACzD,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;AAChF,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,44 @@
+export type TrustGateConfig = {
+    /**
+     * The gateway's base URL, without a consumer path:
+     * `https://gw.acme.ai`. Defaults to `TRUSTGATE_URL`.
+     */
+    baseUrl?: string;
+    /** The consumer's API key. Defaults to `TRUSTGATE_API_KEY`. */
+    apiKey?: string;
+    /**
+     * Slug of the MCP consumer — the one carrying the agent's tools. Defaults
+     * to `TRUSTGATE_MCP_CONSUMER`.
+     */
+    mcpConsumer?: string;
+    /**
+     * Slug of the LLM consumer — the one in front of the models. Defaults to
+     * `TRUSTGATE_LLM_CONSUMER`. It is a different consumer from the MCP one
+     * because a consumer has one type; the same API key may be attached to
+     * both.
+     */
+    llmConsumer?: string;
+    /** Overrides the fetch implementation. Tests and proxies use this. */
+    fetch?: typeof globalThis.fetch;
+    /** Per-request timeout in milliseconds. Default 30000. */
+    timeoutMs?: number;
+};
+export type ResolvedConfig = {
+    baseUrl: string;
+    apiKey: string;
+    mcpConsumer?: string;
+    llmConsumer?: string;
+    fetch: typeof globalThis.fetch;
+    timeoutMs: number;
+};
+export declare function resolveConfig(config?: TrustGateConfig): ResolvedConfig;
+/**
+ * The header the gateway reads the consumer's API key from.
+ *
+ * It also accepts `x-api-key` and `Authorization: Bearer ag_…`; this one is
+ * the unambiguous spelling, so it is the one the SDK sends.
+ */
+export declare const API_KEY_HEADER = "X-AG-API-Key";
+/** The header that names which of the application's end users a call is for. */
+export declare const END_USER_HEADER = "X-NeuralTrust-End-User";
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,eAAe,GAAG;IAC7B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sEAAsE;IACtE,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC/B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAA;CACjB,CAAA;AAOD,wBAAgB,aAAa,CAAC,MAAM,GAAE,eAAoB,GAAG,cAAc,CAwB1E;AAED;;;;;GAKG;AACH,eAAO,MAAM,cAAc,iBAAiB,CAAA;AAE5C,gFAAgF;AAChF,eAAO,MAAM,eAAe,2BAA2B,CAAA"}

package/dist/config.js

@@ -0,0 +1,40 @@
+import { TrustGateError } from './errors.js';
+function fromEnv(name) {
+    const env = globalThis.process?.env;
+    return env?.[name];
+}
+export function resolveConfig(config = {}) {
+    const baseUrl = (config.baseUrl ?? fromEnv('TRUSTGATE_URL') ?? '').trim().replace(/\/+$/, '');
+    const apiKey = (config.apiKey ?? fromEnv('TRUSTGATE_API_KEY') ?? '').trim();
+    if (!baseUrl) {
+        throw new TrustGateError('baseUrl is required (or set TRUSTGATE_URL)');
+    }
+    if (!/^https?:\/\//.test(baseUrl)) {
+        throw new TrustGateError(`baseUrl must be an http(s) URL, got "${baseUrl}"`);
+    }
+    if (!apiKey) {
+        throw new TrustGateError('apiKey is required (or set TRUSTGATE_API_KEY)');
+    }
+    const fetchImpl = config.fetch ?? globalThis.fetch;
+    if (typeof fetchImpl !== 'function') {
+        throw new TrustGateError('no fetch available; pass one in config.fetch (Node 18+ has a global)');
+    }
+    return {
+        baseUrl,
+        apiKey,
+        mcpConsumer: config.mcpConsumer?.trim() || fromEnv('TRUSTGATE_MCP_CONSUMER')?.trim(),
+        llmConsumer: config.llmConsumer?.trim() || fromEnv('TRUSTGATE_LLM_CONSUMER')?.trim(),
+        fetch: fetchImpl,
+        timeoutMs: config.timeoutMs ?? 30_000,
+    };
+}
+/**
+ * The header the gateway reads the consumer's API key from.
+ *
+ * It also accepts `x-api-key` and `Authorization: Bearer ag_…`; this one is
+ * the unambiguous spelling, so it is the one the SDK sends.
+ */
+export const API_KEY_HEADER = 'X-AG-API-Key';
+/** The header that names which of the application's end users a call is for. */
+export const END_USER_HEADER = 'X-NeuralTrust-End-User';
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAqC5C,SAAS,OAAO,CAAC,IAAY;IAC5B,MAAM,GAAG,GAAI,UAAyE,CAAC,OAAO,EAAE,GAAG,CAAA;IACnG,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAA0B,EAAE;IACzD,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7F,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,cAAc,CAAC,4CAA4C,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,cAAc,CAAC,wCAAwC,OAAO,GAAG,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,+CAA+C,CAAC,CAAA;IAC1E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IAClD,IAAI,OAAO,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,cAAc,CAAC,sEAAsE,CAAC,CAAA;IACjG,CAAC;IACD,OAAO;QACN,OAAO;QACP,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE;QACpF,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE;QACpF,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;KACrC,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAA;AAE5C,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAA"}

package/dist/connections.d.ts

@@ -0,0 +1,13 @@
+import type { ResolvedConfig } from './config.js';
+import type { ConnectLink, Connection } from './types.js';
+export declare function connectionsPath(slug: string, endUser?: string): string;
+export declare function listConnections(config: ResolvedConfig, slug: string, endUser?: string, signal?: AbortSignal): Promise<Connection[]>;
+export declare function createConnectLink(config: ResolvedConfig, slug: string, endUser: string, provider: string | undefined, signal?: AbortSignal): Promise<ConnectLink>;
+/**
+ * The gateway is the authority on what an end-user id may be; this only
+ * catches the mistake worth catching locally, which is the empty one — it
+ * would otherwise be sent as a header the gateway reads as "no user named"
+ * and answer for the wrong actor.
+ */
+export declare function requireEndUser(endUser: string): string;
+//# sourceMappingURL=connections.d.ts.map

package/dist/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAwBzD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAGtE;AAED,wBAAsB,eAAe,CACpC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,UAAU,EAAE,CAAC,CAKvB;AAED,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAatB;AAaD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMtD"}

package/dist/connections.js

@@ -0,0 +1,46 @@
+import { END_USER_HEADER } from './config.js';
+import { requestJSON } from './http.js';
+import { InvalidRequestError } from './errors.js';
+export function connectionsPath(slug, endUser) {
+    const query = endUser ? `?end_user=${encodeURIComponent(endUser)}` : '';
+    return `/${encodeURIComponent(slug)}/connections${query}`;
+}
+export async function listConnections(config, slug, endUser, signal) {
+    const { body } = await requestJSON(config, 'GET', connectionsPath(slug, endUser), {
+        signal,
+    });
+    return (body?.connections ?? []).map(toConnection);
+}
+export async function createConnectLink(config, slug, endUser, provider, signal) {
+    const { body } = await requestJSON(config, 'POST', `/${encodeURIComponent(slug)}/connections/links`, { body: { end_user: endUser, ...(provider ? { provider } : {}) }, headers: { [END_USER_HEADER]: endUser }, signal });
+    return {
+        connectUrl: body.connect_url,
+        ticket: body.ticket,
+        provider: body.provider || undefined,
+        expiresAt: new Date(body.expires_at),
+    };
+}
+function toConnection(payload) {
+    return {
+        provider: payload.provider,
+        registry: payload.registry || undefined,
+        code: payload.code || undefined,
+        status: payload.status,
+        accountRef: payload.account_ref || undefined,
+        expiresAt: payload.expires_at ? new Date(payload.expires_at) : undefined,
+    };
+}
+/**
+ * The gateway is the authority on what an end-user id may be; this only
+ * catches the mistake worth catching locally, which is the empty one — it
+ * would otherwise be sent as a header the gateway reads as "no user named"
+ * and answer for the wrong actor.
+ */
+export function requireEndUser(endUser) {
+    const trimmed = endUser?.trim() ?? '';
+    if (!trimmed) {
+        throw new InvalidRequestError('an end-user id is required to act for a user');
+    }
+    return trimmed;
+}
+//# sourceMappingURL=connections.js.map

package/dist/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../src/connections.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAyBjD,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,OAAgB;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACvE,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,eAAe,KAAK,EAAE,CAAA;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,MAAsB,EACtB,IAAY,EACZ,OAAgB,EAChB,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CAAqB,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;QACrG,MAAM;KACN,CAAC,CAAA;IACF,OAAO,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAsB,EACtB,IAAY,EACZ,OAAe,EACf,QAA4B,EAC5B,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,WAAW,CACjC,MAAM,EACN,MAAM,EACN,IAAI,kBAAkB,CAAC,IAAI,CAAC,oBAAoB,EAChD,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CACnH,CAAA;IACD,OAAO;QACN,UAAU,EAAE,IAAI,CAAC,WAAW;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;QACpC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;KACpC,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B;IAC/C,OAAO;QACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;QAC5C,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;KACxE,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC7C,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,mBAAmB,CAAC,8CAA8C,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC"}