@neuraltrust/trustgate 0.1.0

package/dist/http.js

@@ -0,0 +1,94 @@
+import { API_KEY_HEADER } from './config.js';
+import { AuthenticationError, InvalidRequestError, RateLimitedError, ServiceUnavailableError, TrustGateError, TrustGateServerError, } from './errors.js';
+/**
+ * A JSON request against the gateway's REST surface (the connections API).
+ *
+ * The gateway answers `{error, message}` on failure; this turns each `error`
+ * code into the type that says whose problem it is. `expect` names statuses
+ * the caller handles itself — the actor probe uses it to read a 409 as an
+ * answer rather than a failure.
+ */
+export async function requestJSON(config, method, path, options = {}) {
+    const url = `${config.baseUrl}${path}`;
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), config.timeoutMs);
+    const signal = options.signal ? anySignal([options.signal, controller.signal]) : controller.signal;
+    let response;
+    try {
+        response = await config.fetch(url, {
+            method,
+            headers: {
+                [API_KEY_HEADER]: config.apiKey,
+                Accept: 'application/json',
+                ...(options.body === undefined ? {} : { 'Content-Type': 'application/json' }),
+                ...options.headers,
+            },
+            body: options.body === undefined ? undefined : JSON.stringify(options.body),
+            signal,
+        });
+    }
+    catch (cause) {
+        throw new TrustGateError(`${method} ${path} failed to reach the gateway`, { cause });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+    const text = await response.text();
+    const body = text ? safeParse(text) : undefined;
+    if (response.ok || options.expect?.includes(response.status)) {
+        return { status: response.status, body: body };
+    }
+    throw errorForResponse(response, body, text);
+}
+function errorForResponse(response, body, raw) {
+    const code = body?.error;
+    const message = body?.message ?? raw ?? response.statusText;
+    const status = response.status;
+    switch (code) {
+        case 'unauthenticated':
+            return new AuthenticationError(message, { status, code });
+        case 'invalid_request':
+            return new InvalidRequestError(message, { status, code });
+        case 'unavailable':
+            return new ServiceUnavailableError(message, { status, code });
+    }
+    if (status === 401 || status === 403)
+        return new AuthenticationError(message, { status, code });
+    if (status === 429) {
+        return new RateLimitedError(message, retryAfterMs(response));
+    }
+    if (status >= 500)
+        return new TrustGateServerError(message, { status, code });
+    return new TrustGateError(message, { status, code });
+}
+function retryAfterMs(response) {
+    const header = response.headers.get('Retry-After');
+    if (!header)
+        return undefined;
+    const seconds = Number(header);
+    return Number.isFinite(seconds) ? seconds * 1000 : undefined;
+}
+function safeParse(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** AbortSignal.any is not on every runtime the SDK supports yet. */
+function anySignal(signals) {
+    const anyOf = AbortSignal.any;
+    if (typeof anyOf === 'function')
+        return anyOf(signals);
+    const controller = new AbortController();
+    for (const signal of signals) {
+        if (signal.aborted) {
+            controller.abort(signal.reason);
+            break;
+        }
+        signal.addEventListener('abort', () => controller.abort(signal.reason), { once: true });
+    }
+    return controller.signal;
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AACjE,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,oBAAoB,GACpB,MAAM,aAAa,CAAA;AAIpB;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAChC,MAAsB,EACtB,MAAc,EACd,IAAY,EACZ,UAAyG,EAAE;IAE3G,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,EAAE,CAAA;IACtC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAA;IAClG,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YAClC,MAAM;YACN,OAAO,EAAE;gBACR,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM;gBAC/B,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBAC7E,GAAG,OAAO,CAAC,OAAO;aAClB;YACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3E,MAAM;SACN,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,cAAc,CAAC,GAAG,MAAM,IAAI,IAAI,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IACrF,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,OAAO,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/C,IAAI,QAAQ,CAAC,EAAE,IAAI,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAS,EAAE,CAAA;IACpD,CAAC;IACD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAA6B,EAAE,IAAI,CAAC,CAAA;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB,EAAE,IAA2B,EAAE,GAAW;IACrF,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,CAAA;IACxB,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAA;IAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;IAC9B,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,iBAAiB;YACrB,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1D,KAAK,iBAAiB;YACrB,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QAC1D,KAAK,aAAa;YACjB,OAAO,IAAI,uBAAuB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/D,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,mBAAmB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC/F,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACpB,OAAO,IAAI,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC9B,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,oEAAoE;AACpE,SAAS,SAAS,CAAC,OAAsB;IACxC,MAAM,KAAK,GAAI,WAAsE,CAAC,GAAG,CAAA;IACzF,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAA;IACtD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC/B,MAAK;QACN,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAA;AACzB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export { TrustGate, type ConnectOptions, type LLMEndpoint } from './client.js';
+export { whoAmI, selectConsumer, type KeyConsumer, type KeyIdentity, type KeyInfo, type KeyUpstream, type UpstreamAccount, type UpstreamBlockedBy, } from './whoami.js';
+export { Agent, EndUserAgent, Toolkit, type ToolkitOptions } from './agent.js';
+export { type TrustGateConfig, API_KEY_HEADER, END_USER_HEADER } from './config.js';
+export { MCPTransport } from './mcp.js';
+export { inlineRefs, stripInjectedNulls, toStrict, type StrictResult } from './schema.js';
+export { adapterFor, resultToText, type ConversionWarning } from './formats.js';
+export { Actor, ToolFormat, type ConnectLink, type Connection, type Endpoint, type GatewayTool, type JSONSchema, type ToolCall, } from './types.js';
+export { AuthenticationError, ConsentRequiredError, InvalidRequestError, MissingToolsError, PlaneUnavailableError, PolicyBlockedError, RateLimitedError, ServiceUnavailableError, ToolNotFoundError, TrustGateError, TrustGateServerError, UpstreamNotConnectedError, type BlockedUpstream, } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAA;AAC9E,OAAO,EACN,MAAM,EACN,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAA;AAC9E,OAAO,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA;AACzF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAC/E,OAAO,EACN,KAAK,EACL,UAAU,EACV,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,QAAQ,GACb,MAAM,YAAY,CAAA;AACnB,OAAO,EACN,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,eAAe,GACpB,MAAM,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export { TrustGate } from './client.js';
+export { whoAmI, selectConsumer, } from './whoami.js';
+export { Agent, EndUserAgent, Toolkit } from './agent.js';
+export { API_KEY_HEADER, END_USER_HEADER } from './config.js';
+export { MCPTransport } from './mcp.js';
+export { inlineRefs, stripInjectedNulls, toStrict } from './schema.js';
+export { adapterFor, resultToText } from './formats.js';
+export { Actor, ToolFormat, } from './types.js';
+export { AuthenticationError, ConsentRequiredError, InvalidRequestError, MissingToolsError, PlaneUnavailableError, PolicyBlockedError, RateLimitedError, ServiceUnavailableError, ToolNotFoundError, TrustGateError, TrustGateServerError, UpstreamNotConnectedError, } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyC,MAAM,aAAa,CAAA;AAC9E,OAAO,EACN,MAAM,EACN,cAAc,GAOd,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAuB,MAAM,YAAY,CAAA;AAC9E,OAAO,EAAwB,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAqB,MAAM,aAAa,CAAA;AACzF,OAAO,EAAE,UAAU,EAAE,YAAY,EAA0B,MAAM,cAAc,CAAA;AAC/E,OAAO,EACN,KAAK,EACL,UAAU,GAOV,MAAM,YAAY,CAAA;AACnB,OAAO,EACN,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAEzB,MAAM,aAAa,CAAA"}

package/dist/mcp.d.ts

@@ -0,0 +1,43 @@
+import { type ResolvedConfig } from './config.js';
+import type { GatewayTool } from './types.js';
+type RPCError = {
+    code: number;
+    message: string;
+    data?: unknown;
+};
+type RPCResponse = {
+    id?: unknown;
+    result?: Record<string, unknown>;
+    error?: RPCError;
+};
+/**
+ * The gateway's MCP endpoint, spoken directly.
+ *
+ * Only two methods are needed to put a consumer's tools in front of a model —
+ * list them and call them — so this is a JSON-RPC client rather than a whole
+ * MCP implementation. The gateway is stateless: there is no handshake to do
+ * and no session to carry, so every call stands on its own.
+ */
+export declare class MCPTransport {
+    private readonly config;
+    readonly url: string;
+    private readonly extraHeaders;
+    private nextId;
+    constructor(config: ResolvedConfig, url: string, extraHeaders?: Record<string, string>);
+    get headers(): Record<string, string>;
+    listTools(signal?: AbortSignal): Promise<GatewayTool[]>;
+    callTool(name: string, args: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+    call(method: string, params: Record<string, unknown>, signal?: AbortSignal): Promise<Record<string, unknown>>;
+}
+/**
+ * Reads the response body, which is not always JSON.
+ *
+ * When a change to the surface has to be announced, the gateway answers the
+ * same request as an event stream and puts the response in a frame after the
+ * notification. Both shapes carry the same JSON-RPC object, so both are read
+ * here; a frame that is not this request's answer is skipped rather than
+ * mistaken for it.
+ */
+export declare function parseRPCResponse(text: string, id: number): RPCResponse | undefined;
+export {};
+//# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AAUjE,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,YAAY,CAAA;AAUzD,KAAK,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AACjE,KAAK,WAAW,GAAG;IAAE,EAAE,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAA;AAEvF;;;;;;;GAOG;AACH,qBAAa,YAAY;IAIvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAL9B,OAAO,CAAC,MAAM,CAAI;gBAGA,MAAM,EAAE,cAAc,EAC9B,GAAG,EAAE,MAAM,EACH,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;IAG3D,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAEpC;IAEK,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAevD,QAAQ,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAc7B,IAAI,CACT,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CA0CnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAoBlF"}

package/dist/mcp.js

@@ -0,0 +1,175 @@
+import { API_KEY_HEADER } from './config.js';
+import { AuthenticationError, ConsentRequiredError, InvalidRequestError, PolicyBlockedError, ToolNotFoundError, TrustGateError, TrustGateServerError, } from './errors.js';
+/** JSON-RPC codes the gateway answers with, beyond the standard four. */
+const CODE_CONSENT_REQUIRED = -32003;
+const CODE_RESOURCE_NOT_FOUND = -32002;
+const CODE_POLICY_BLOCKED = -32001;
+const CODE_INVALID_REQUEST = -32600;
+const CODE_INVALID_PARAMS = -32602;
+const CODE_INTERNAL = -32603;
+/**
+ * The gateway's MCP endpoint, spoken directly.
+ *
+ * Only two methods are needed to put a consumer's tools in front of a model —
+ * list them and call them — so this is a JSON-RPC client rather than a whole
+ * MCP implementation. The gateway is stateless: there is no handshake to do
+ * and no session to carry, so every call stands on its own.
+ */
+export class MCPTransport {
+    config;
+    url;
+    extraHeaders;
+    nextId = 1;
+    constructor(config, url, extraHeaders = {}) {
+        this.config = config;
+        this.url = url;
+        this.extraHeaders = extraHeaders;
+    }
+    get headers() {
+        return { [API_KEY_HEADER]: this.config.apiKey, ...this.extraHeaders };
+    }
+    async listTools(signal) {
+        const result = await this.call('tools/list', {}, signal);
+        const tools = Array.isArray(result.tools) ? result.tools : [];
+        return tools.map((tool) => {
+            const raw = tool;
+            return {
+                name: String(raw.name ?? ''),
+                title: typeof raw.title === 'string' ? raw.title : undefined,
+                description: typeof raw.description === 'string' ? raw.description : undefined,
+                inputSchema: raw.inputSchema ?? { type: 'object', properties: {} },
+                outputSchema: raw.outputSchema,
+            };
+        });
+    }
+    async callTool(name, args, signal) {
+        try {
+            return await this.call('tools/call', { name, arguments: args }, signal);
+        }
+        catch (error) {
+            // The gateway reports an unknown tool as invalid params, which is
+            // true of the request and useless to the caller: what they need to
+            // know is which tool, because a toolkit can lose one under them.
+            if (error instanceof InvalidRequestError && error.code === String(CODE_INVALID_PARAMS)) {
+                throw new ToolNotFoundError(name, error.message);
+            }
+            throw error;
+        }
+    }
+    async call(method, params, signal) {
+        const id = this.nextId++;
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.config.timeoutMs);
+        let response;
+        try {
+            response = await this.config.fetch(this.url, {
+                method: 'POST',
+                headers: {
+                    ...this.headers,
+                    'Content-Type': 'application/json',
+                    // A plain JSON answer is enough: the SDK re-lists on demand
+                    // rather than listening for a change on the response.
+                    Accept: 'application/json',
+                },
+                body: JSON.stringify({ jsonrpc: '2.0', id, method, params }),
+                signal: signal ?? controller.signal,
+            });
+        }
+        catch (cause) {
+            throw new TrustGateError(`MCP ${method} failed to reach ${this.url}`, { cause });
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+        if (response.status === 401 || response.status === 403) {
+            throw new AuthenticationError(`the gateway refused this API key for ${this.url}`, { status: response.status });
+        }
+        const text = await response.text();
+        const rpc = parseRPCResponse(text, id);
+        if (!rpc) {
+            throw new TrustGateError(`MCP ${method} returned no JSON-RPC response (HTTP ${response.status})` +
+                whatItSaid(text), { status: response.status });
+        }
+        if (rpc.error)
+            throw errorForRPC(rpc.error);
+        return rpc.result ?? {};
+    }
+}
+/**
+ * Reads the response body, which is not always JSON.
+ *
+ * When a change to the surface has to be announced, the gateway answers the
+ * same request as an event stream and puts the response in a frame after the
+ * notification. Both shapes carry the same JSON-RPC object, so both are read
+ * here; a frame that is not this request's answer is skipped rather than
+ * mistaken for it.
+ */
+export function parseRPCResponse(text, id) {
+    const trimmed = text.trim();
+    if (!trimmed)
+        return undefined;
+    if (trimmed.startsWith('{')) {
+        try {
+            return JSON.parse(trimmed);
+        }
+        catch {
+            return undefined;
+        }
+    }
+    for (const line of trimmed.split('\n')) {
+        if (!line.startsWith('data:'))
+            continue;
+        try {
+            const frame = JSON.parse(line.slice('data:'.length).trim());
+            if (frame.id === id)
+                return frame;
+        }
+        catch {
+            continue;
+        }
+    }
+    return undefined;
+}
+function errorForRPC(error) {
+    const data = (error.data ?? {});
+    switch (error.code) {
+        case CODE_CONSENT_REQUIRED:
+            return new ConsentRequiredError(String(data.provider ?? 'this provider'), String(data.connect_url ?? ''), String(data.cause ?? ''), error.message);
+        case CODE_POLICY_BLOCKED:
+            return new PolicyBlockedError(error.message, { code: String(error.code) });
+        case CODE_INTERNAL:
+            return new TrustGateServerError(error.message, { code: String(error.code) });
+        case CODE_INVALID_PARAMS:
+        case CODE_INVALID_REQUEST:
+        case CODE_RESOURCE_NOT_FOUND:
+            return new InvalidRequestError(error.message, { code: String(error.code) });
+        default:
+            return new TrustGateError(error.message, { code: String(error.code) });
+    }
+}
+/**
+ * The reason the endpoint gave, when it did not give it in JSON-RPC.
+ *
+ * A plain HTTP error — a missing header, a path that is no virtual MCP — says
+ * why in its body, and dropping that leaves a status code to guess from.
+ */
+function whatItSaid(text) {
+    let said = (text ?? '').split(/\s+/).filter(Boolean).join(' ');
+    try {
+        const body = JSON.parse(text);
+        if (body && typeof body === 'object') {
+            for (const key of ['error', 'message', 'detail']) {
+                const value = body[key];
+                if (typeof value === 'string' && value.trim()) {
+                    said = value.trim();
+                    break;
+                }
+            }
+        }
+    }
+    catch {
+        // Not JSON. The whitespace-collapsed body is the best there is.
+    }
+    return said ? `: ${said.slice(0, 200)}` : '';
+}
+//# sourceMappingURL=mcp.js.map

package/dist/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAA;AACjE,OAAO,EACN,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,GACpB,MAAM,aAAa,CAAA;AAGpB,yEAAyE;AACzE,MAAM,qBAAqB,GAAG,CAAC,KAAK,CAAA;AACpC,MAAM,uBAAuB,GAAG,CAAC,KAAK,CAAA;AACtC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAA;AAClC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAA;AACnC,MAAM,mBAAmB,GAAG,CAAC,KAAK,CAAA;AAClC,MAAM,aAAa,GAAG,CAAC,KAAK,CAAA;AAK5B;;;;;;;GAOG;AACH,MAAM,OAAO,YAAY;IAIN;IACR;IACQ;IALV,MAAM,GAAG,CAAC,CAAA;IAElB,YACkB,MAAsB,EAC9B,GAAW,EACH,eAAuC,EAAE;QAFzC,WAAM,GAAN,MAAM,CAAgB;QAC9B,QAAG,GAAH,GAAG,CAAQ;QACH,iBAAY,GAAZ,YAAY,CAA6B;IACxD,CAAC;IAEJ,IAAI,OAAO;QACV,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAoB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,GAAG,GAAG,IAA+B,CAAA;YAC3C,OAAO;gBACN,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC5B,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAC5D,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAC9E,WAAW,EAAG,GAAG,CAAC,WAA0B,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;gBAClF,YAAY,EAAE,GAAG,CAAC,YAAsC;aACxD,CAAA;QACF,CAAC,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CACb,IAAY,EACZ,IAA6B,EAC7B,MAAoB;QAEpB,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;QACxE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,kEAAkE;YAClE,mEAAmE;YACnE,iEAAiE;YACjE,IAAI,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YACjD,CAAC;YACD,MAAM,KAAK,CAAA;QACZ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI,CACT,MAAc,EACd,MAA+B,EAC/B,MAAoB;QAEpB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAA;QACxB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QAC3E,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,GAAG,IAAI,CAAC,OAAO;oBACf,cAAc,EAAE,kBAAkB;oBAClC,4DAA4D;oBAC5D,sDAAsD;oBACtD,MAAM,EAAE,kBAAkB;iBAC1B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM;aACnC,CAAC,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CAAC,OAAO,MAAM,oBAAoB,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACjF,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxD,MAAM,IAAI,mBAAmB,CAC5B,wCAAwC,IAAI,CAAC,GAAG,EAAE,EAClD,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC3B,CAAA;QACF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACtC,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,IAAI,cAAc,CACvB,OAAO,MAAM,wCAAwC,QAAQ,CAAC,MAAM,GAAG;gBACtE,UAAU,CAAC,IAAI,CAAC,EACjB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC3B,CAAA;QACF,CAAC;QACD,IAAI,GAAG,CAAC,KAAK;YAAE,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC3C,OAAO,GAAG,CAAC,MAAM,IAAI,EAAE,CAAA;IACxB,CAAC;CACD;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAU;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAA;QAC1C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,SAAS,CAAA;QACjB,CAAC;IACF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAQ;QACvC,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAgB,CAAA;YAC1E,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACR,SAAQ;QACT,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IACnC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAA;IAC1D,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,qBAAqB;YACzB,OAAO,IAAI,oBAAoB,CAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,EACxC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EACxB,KAAK,CAAC,OAAO,CACb,CAAA;QACF,KAAK,mBAAmB;YACvB,OAAO,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3E,KAAK,aAAa;YACjB,OAAO,IAAI,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC7E,KAAK,mBAAmB,CAAC;QACzB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,uBAAuB;YAC3B,OAAO,IAAI,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5E;YACC,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,IAAY;IAC/B,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9D,IAAI,CAAC;QACJ,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClD,MAAM,KAAK,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAA;gBACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC/C,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;oBACnB,MAAK;gBACN,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,gEAAgE;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC7C,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,52 @@
+import type { JSONSchema } from './types.js';
+/**
+ * Turning a tool's JSON Schema into what a provider will accept.
+ *
+ * The gateway relays an upstream server's schema exactly as that server wrote
+ * it — that is the honest thing for a gateway to do, and it means the schema
+ * can use anything JSON Schema allows. Every provider's function calling
+ * accepts a smaller language than that. Translating is therefore the client's
+ * job, done here, once, against the format the caller asked for.
+ *
+ * Two of these conversions lose information, so both are reversible and the
+ * original schema is kept: what goes out closed and nullable has to come back
+ * open and absent, or the upstream rejects the call it was asked to make.
+ */
+export type StrictResult = {
+    schema: JSONSchema;
+    /** False when the schema uses something strict mode cannot express. */
+    strict: boolean;
+    /** Why not, for the warning the caller gets. */
+    reason?: string;
+};
+/**
+ * Inlines local `$ref`s.
+ *
+ * Nothing is lost: a reference and its target describe the same thing. It is
+ * separated from the strict pass because every provider needs it and none of
+ * them object to the result — which is why this is also the part that could
+ * one day move into the gateway.
+ */
+export declare function inlineRefs(schema: JSONSchema): JSONSchema;
+/**
+ * Rewrites a schema for OpenAI's strict function calling.
+ *
+ * Strict buys a guarantee worth having — the model cannot invent an argument —
+ * and charges for it in expressiveness: every object closed, every property
+ * required, and optionality expressed by accepting null. Schemas that use what
+ * strict cannot say are returned untouched with `strict: false`, because a tool
+ * the model can still call imperfectly beats a tool it cannot call at all.
+ */
+export declare function toStrict(schema: JSONSchema): StrictResult;
+/**
+ * Removes the nulls strict mode asked the model to send.
+ *
+ * `toStrict` made every optional property nullable so it could be named in
+ * `required`. The model takes that literally and sends `null` for the ones it
+ * has no value for — and the upstream server, which never agreed to any of
+ * this, rejects them. So the arguments are compared against the *original*
+ * schema on the way back, and a null it never permitted is dropped rather than
+ * forwarded.
+ */
+export declare function stripInjectedNulls(args: unknown, original: JSONSchema | undefined): unknown;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE5C;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,UAAU,CAAA;IAClB,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAA;IACf,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,CAgCzD;AAQD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAgDzD;AAcD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAc3F"}

package/dist/schema.js

@@ -0,0 +1,168 @@
+/**
+ * Inlines local `$ref`s.
+ *
+ * Nothing is lost: a reference and its target describe the same thing. It is
+ * separated from the strict pass because every provider needs it and none of
+ * them object to the result — which is why this is also the part that could
+ * one day move into the gateway.
+ */
+export function inlineRefs(schema) {
+    const defs = {
+        ...(schema.$defs ?? {}),
+        ...(schema.definitions ?? {}),
+    };
+    const seen = new Set();
+    const walk = (node) => {
+        if (Array.isArray(node))
+            return node.map(walk);
+        if (!isObject(node))
+            return node;
+        const ref = node.$ref;
+        if (typeof ref === 'string') {
+            const target = resolveRef(ref, defs);
+            // A cycle cannot be inlined; leaving the $ref in place makes the
+            // strict pass refuse the tool, which is better than looping.
+            if (target && !seen.has(ref)) {
+                seen.add(ref);
+                const resolved = walk({ ...target, ...omit(node, ['$ref']) });
+                seen.delete(ref);
+                return resolved;
+            }
+            return node;
+        }
+        const out = {};
+        for (const [key, value] of Object.entries(node)) {
+            if (key === '$defs' || key === 'definitions')
+                continue;
+            out[key] = walk(value);
+        }
+        return out;
+    };
+    return walk(schema);
+}
+function resolveRef(ref, defs) {
+    const match = /^#\/(?:\$defs|definitions)\/(.+)$/.exec(ref);
+    if (!match)
+        return undefined;
+    return defs[decodeURIComponent(match[1])];
+}
+/**
+ * Rewrites a schema for OpenAI's strict function calling.
+ *
+ * Strict buys a guarantee worth having — the model cannot invent an argument —
+ * and charges for it in expressiveness: every object closed, every property
+ * required, and optionality expressed by accepting null. Schemas that use what
+ * strict cannot say are returned untouched with `strict: false`, because a tool
+ * the model can still call imperfectly beats a tool it cannot call at all.
+ */
+export function toStrict(schema) {
+    const inlined = inlineRefs(schema);
+    let reason;
+    const walk = (node) => {
+        if (Array.isArray(node))
+            return node.map(walk);
+        if (!isObject(node))
+            return node;
+        if ('$ref' in node) {
+            reason ??= 'it carries a $ref that does not resolve inside the schema';
+            return node;
+        }
+        if ('allOf' in node) {
+            reason ??= 'it composes with allOf';
+            return node;
+        }
+        if ('prefixItems' in node) {
+            reason ??= 'it uses prefixItems (tuple typing)';
+            return node;
+        }
+        const out = {};
+        for (const [key, value] of Object.entries(node)) {
+            out[key] = key === 'required' ? value : walk(value);
+        }
+        if (out.type !== 'object' && !isObject(out.properties))
+            return out;
+        if (out.additionalProperties !== undefined && out.additionalProperties !== false) {
+            reason ??= 'it accepts properties that are not in its schema';
+            return out;
+        }
+        out.additionalProperties = false;
+        const properties = out.properties ?? {};
+        const required = new Set(Array.isArray(out.required) ? out.required : []);
+        const rewritten = {};
+        for (const [name, property] of Object.entries(properties)) {
+            rewritten[name] = required.has(name) ? property : nullable(property);
+        }
+        out.properties = rewritten;
+        // Strict wants every property named as required. What used to be
+        // optional stays optional in effect, by accepting null.
+        out.required = Object.keys(rewritten);
+        return out;
+    };
+    const rewritten = walk(inlined);
+    return reason ? { schema: inlined, strict: false, reason } : { schema: rewritten, strict: true };
+}
+/** Lets a schema accept null without losing what it already said. */
+function nullable(schema) {
+    if (typeof schema.type === 'string') {
+        return { ...schema, type: [schema.type, 'null'] };
+    }
+    if (Array.isArray(schema.type)) {
+        return schema.type.includes('null') ? schema : { ...schema, type: [...schema.type, 'null'] };
+    }
+    // No plain type to widen (an enum, an anyOf): offer null beside it.
+    return { anyOf: [schema, { type: 'null' }] };
+}
+/**
+ * Removes the nulls strict mode asked the model to send.
+ *
+ * `toStrict` made every optional property nullable so it could be named in
+ * `required`. The model takes that literally and sends `null` for the ones it
+ * has no value for — and the upstream server, which never agreed to any of
+ * this, rejects them. So the arguments are compared against the *original*
+ * schema on the way back, and a null it never permitted is dropped rather than
+ * forwarded.
+ */
+export function stripInjectedNulls(args, original) {
+    if (Array.isArray(args)) {
+        const items = original?.items;
+        return args.map((item) => stripInjectedNulls(item, items));
+    }
+    if (!isObject(args))
+        return args;
+    const properties = original?.properties ?? {};
+    const out = {};
+    for (const [key, value] of Object.entries(args)) {
+        const property = properties[key];
+        if (value === null && !permitsNull(property))
+            continue;
+        out[key] = stripInjectedNulls(value, property);
+    }
+    return out;
+}
+function permitsNull(schema) {
+    // An unknown property is left alone: the upstream may accept keys this
+    // schema does not describe, and dropping one would lose a real argument.
+    if (!schema)
+        return true;
+    if (schema.type === 'null')
+        return true;
+    if (Array.isArray(schema.type) && schema.type.includes('null'))
+        return true;
+    const anyOf = schema.anyOf ?? schema.oneOf;
+    if (Array.isArray(anyOf)) {
+        return anyOf.some((option) => permitsNull(option));
+    }
+    return false;
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function omit(source, keys) {
+    const out = {};
+    for (const [key, value] of Object.entries(source)) {
+        if (!keys.includes(key))
+            out[key] = value;
+    }
+    return out;
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAwBA;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,MAAkB;IAC5C,MAAM,IAAI,GAAG;QACZ,GAAG,CAAE,MAAM,CAAC,KAAoC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAE,MAAM,CAAC,WAA0C,IAAI,EAAE,CAAC;KAC7D,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,MAAM,IAAI,GAAG,CAAC,IAAa,EAAW,EAAE;QACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAA;QACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YACpC,iEAAiE;YACjE,6DAA6D;YAC7D,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACb,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAA;gBAC7D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;gBAChB,OAAO,QAAQ,CAAA;YAChB,CAAC;YACD,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,aAAa;gBAAE,SAAQ;YACtD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC;QACD,OAAO,GAAG,CAAA;IACX,CAAC,CAAA;IAED,OAAO,IAAI,CAAC,MAAM,CAAe,CAAA;AAClC,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAgC;IAChE,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAkB;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,MAA0B,CAAA;IAE9B,MAAM,IAAI,GAAG,CAAC,IAAa,EAAW,EAAE;QACvC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAChC,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACpB,MAAM,KAAK,2DAA2D,CAAA;YACtE,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,wBAAwB,CAAA;YACnC,OAAO,IAAI,CAAA;QACZ,CAAC;QACD,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;YAC3B,MAAM,KAAK,oCAAoC,CAAA;YAC/C,OAAO,IAAI,CAAA;QACZ,CAAC;QAED,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACpD,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,GAAG,CAAA;QAElE,IAAI,GAAG,CAAC,oBAAoB,KAAK,SAAS,IAAI,GAAG,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;YAClF,MAAM,KAAK,kDAAkD,CAAA;YAC7D,OAAO,GAAG,CAAA;QACX,CAAC;QACD,GAAG,CAAC,oBAAoB,GAAG,KAAK,CAAA;QAEhC,MAAM,UAAU,GAAI,GAAG,CAAC,UAAyC,IAAI,EAAE,CAAA;QACvE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,QAAqB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACvF,MAAM,SAAS,GAA+B,EAAE,CAAA;QAChD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACrE,CAAC;QACD,GAAG,CAAC,UAAU,GAAG,SAAS,CAAA;QAC1B,iEAAiE;QACjE,wDAAwD;QACxD,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,OAAO,GAAG,CAAA;IACX,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAe,CAAA;IAC7C,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACjG,CAAC;AAED,qEAAqE;AACrE,SAAS,QAAQ,CAAC,MAAkB;IACnC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAA;IAC7F,CAAC;IACD,oEAAoE;IACpE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,QAAgC;IACjF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,QAAQ,EAAE,KAA+B,CAAA;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,MAAM,UAAU,GAAI,QAAQ,EAAE,UAAqD,IAAI,EAAE,CAAA;IACzF,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC;YAAE,SAAQ;QACtD,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,MAA8B;IAClD,uEAAuE;IACvE,yEAAyE;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACvC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAA;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAoB,CAAC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,IAAI,CAAC,MAA+B,EAAE,IAAc;IAC5D,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAC1C,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC"}