@tangle-network/agent-integrations 0.58.0 → 0.59.1

package/dist/stripe/index.js

@@ -1,6 +1,6 @@
-import { t as IntegrationRuntimeError } from "../errors-CvO_y8JO.js";
 import { FileSystemAtomicIdempotencyStore, InMemoryAtomicIdempotencyStore, resolveAtomicIdempotencyStore } from "../idempotency.js";
 import { o as assertNoProductFreeTrial, s as decideBillingAccess } from "../billing-access-policy-DJ63AxZ5.js";
+import { t as IntegrationRuntimeError } from "../errors-CvO_y8JO.js";
 //#region src/stripe/errors.ts
 /**
 * Stripe billing error taxonomy.

package/dist/tangle-search/index.d.ts

@@ -1,4 +1,40 @@
 import { n as ProviderProtocolError, t as JsonRequestOptions } from "../response-json-BSRmUvDu.js";
+//#region src/tangle-search/reader.d.ts
+interface TangleReadInput {
+  url: string;
+  maxBytes?: number;
+}
+interface TangleReadResult {
+  id: string;
+  object: 'web.read';
+  requestedUrl: string;
+  url: string;
+  contentType: string;
+  /** Untrusted original page text/HTML, not an extracted summary or instructions. */
+  content: string;
+  bytes: number;
+  truncated: boolean;
+  fetchedAt: string;
+  billedCost: number | null;
+}
+interface TangleReadClientOptions extends JsonRequestOptions {
+  /** Supplied by the trusted host, never by the agent's tool arguments. */
+  apiKey: string | (() => string | Promise<string>);
+  baseUrl?: string;
+}
+export declare function buildTangleReadRequest(input: TangleReadInput): {
+  url: string;
+  max_bytes: number;
+};
+export declare function parseTangleReadResult(raw: unknown, request: ReturnType<typeof buildTangleReadRequest>): TangleReadResult;
+/** Router is the only destination; destination DNS/redirect checks are enforced by the Router. */
+export declare class TangleReadClient {
+  private readonly endpoint;
+  private readonly options;
+  constructor(options: TangleReadClientOptions);
+  read(input: TangleReadInput, signal?: AbortSignal): Promise<TangleReadResult>;
+}
+//#endregion
 //#region src/tangle-search/index.d.ts
 /** Router protocol, not provider-specific APIs. New provider IDs require no client release. */
 export interface TangleSearchInput {
@@ -58,5 +94,5 @@ export declare class TangleSearchClient {
   search(input: TangleSearchInput, signal?: AbortSignal): Promise<TangleSearchResult>;
 }
 //#endregion
-export { ProviderProtocolError };
+export { ProviderProtocolError, type TangleReadClientOptions, type TangleReadInput, type TangleReadResult };
 //# sourceMappingURL=index.d.ts.map

package/dist/tangle-search/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/tangle-search/index.ts"],"mappings":";;;iBAIiB;EACf;EACA;EACA;EACA;EACA;EACA;;iBAEe;EACf;EACA;EACA;EACA;EACA;EACA;;iBAEe;EACf;EACA;EACA;EACA;EACA,MAAM;EACN;EACA;IAAS;IAA8B;;;iBAExB,kCAAkC;;EAEjD,iCAAiC;;EAEjC;;EAEA;;;wBAec,yBAAyB,OAAO,mBAAmB;;;;;;;;;wBAoBnD,wBAAwB,cAAc;EAAW;EAAe;IAAsB;qBAqBzF;mBACM;mBACA;EACjB,YAAY,SAAS;EASf,OAAO,OAAO,mBAAmB,SAAS,cAAc,QAAQ"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/tangle-search/reader.ts","../../src/tangle-search/index.ts"],"mappings":";;UAEiB;EACf;EACA;;UAEe;EACf;EACA;EACA;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA;;UAEe,gCAAgC;;EAE/C,iCAAiC;EACjC;;wBAUc,uBAAuB,OAAO;EAMnC;EAAgB;;wBAEX,sBAAsB,cAAc,SAAS,kBAAkB,0BAA0B;;qBAiB5F;mBACM;mBACA;EACjB,YAAY,SAAS;EASf,KAAK,OAAO,iBAAiB,SAAS,cAAc,QAAQ;;;;;iBC/DnD;EACf;EACA;EACA;EACA;EACA;EACA;;iBAEe;EACf;EACA;EACA;EACA;EACA;EACA;;iBAEe;EACf;EACA;EACA;EACA;EACA,MAAM;EACN;EACA;IAAS;IAA8B;;;iBAExB,kCAAkC;;EAEjD,iCAAiC;;EAEjC;;EAEA;;;wBAec,yBAAyB,OAAO,mBAAmB;;;;;;;;;wBAoBnD,wBAAwB,cAAc;EAAW;EAAe;IAAsB;qBAqBzF;mBACM;mBACA;EACjB,YAAY,SAAS;EASf,OAAO,OAAO,mBAAmB,SAAS,cAAc,QAAQ"}

package/dist/tangle-search/index.js

@@ -1,4 +1,84 @@
 import { n as record, r as requestJson, t as ProviderProtocolError } from "../response-json-BnUINkTL.js";
+//#region src/tangle-search/reader.ts
+function invalid$1(message) {
+	throw new ProviderProtocolError(message, "invalid_read_request", 400, true);
+}
+function publicHttps(value) {
+	if (typeof value !== "string" || value.length > 2048) return false;
+	try {
+		const u = new URL(value);
+		return u.protocol === "https:" && !u.username && !u.password;
+	} catch {
+		return false;
+	}
+}
+function buildTangleReadRequest(input) {
+	if (!record(input) || Object.keys(input).some((key) => !["url", "maxBytes"].includes(key)) || !publicHttps(input.url)) invalid$1("A credential-free HTTPS page URL is required");
+	const max = input.maxBytes ?? 131072;
+	if (!Number.isSafeInteger(max) || max < 1024 || max > 131072) invalid$1("maxBytes must be between 1024 and 131072");
+	return {
+		url: input.url,
+		max_bytes: max
+	};
+}
+function parseTangleReadResult(raw, request) {
+	const bad = () => {
+		throw new ProviderProtocolError("Invalid or uncorrelated Router read response", "invalid_read_response");
+	};
+	if (!record(raw) || raw.object !== "web.read" || typeof raw.id !== "string" || !raw.id || raw.requested_url !== request.url || !publicHttps(raw.url) || typeof raw.content !== "string" || typeof raw.content_type !== "string" || typeof raw.fetched_at !== "string" || !Number.isFinite(Date.parse(raw.fetched_at)) || typeof raw.truncated !== "boolean" || typeof raw.bytes !== "number" || !Number.isSafeInteger(raw.bytes) || raw.bytes < 0 || raw.bytes > request.max_bytes || new TextEncoder().encode(raw.content).byteLength > raw.bytes * 3) return bad();
+	const billed = record(raw.usage) ? raw.usage.billed_cost : void 0;
+	return {
+		id: raw.id,
+		object: "web.read",
+		requestedUrl: request.url,
+		url: raw.url,
+		contentType: raw.content_type,
+		content: raw.content,
+		bytes: raw.bytes,
+		truncated: raw.truncated,
+		fetchedAt: raw.fetched_at,
+		billedCost: typeof billed === "number" && Number.isFinite(billed) && billed >= 0 ? billed : null
+	};
+}
+/** Router is the only destination; destination DNS/redirect checks are enforced by the Router. */
+var TangleReadClient = class {
+	endpoint;
+	options;
+	constructor(options) {
+		const u = new URL(options.baseUrl ?? "https://router.tangle.tools");
+		if (u.username || u.password || u.search || u.hash || ![
+			"/",
+			"/v1",
+			"/v1/"
+		].includes(u.pathname) || !(u.protocol === "https:" || u.protocol === "http:" && [
+			"localhost",
+			"127.0.0.1",
+			"[::1]"
+		].includes(u.hostname))) invalid$1("Use an explicit trusted Router HTTPS origin, or HTTP loopback");
+		this.endpoint = `${u.origin}/v1/read`;
+		this.options = {
+			timeoutMs: 25e3,
+			maxResponseBytes: 1e6,
+			...options
+		};
+	}
+	async read(input, signal) {
+		const body = buildTangleReadRequest(input);
+		signal?.throwIfAborted();
+		const key = typeof this.options.apiKey === "function" ? await this.options.apiKey() : this.options.apiKey;
+		if (!key || /[\r\n]/.test(key)) throw new ProviderProtocolError("A Router credential is required", "read_not_configured", 503, true);
+		return parseTangleReadResult(await requestJson(this.endpoint, {
+			method: "POST",
+			signal,
+			headers: {
+				Authorization: `Bearer ${key}`,
+				"Content-Type": "application/json"
+			},
+			body: JSON.stringify(body)
+		}, this.options), body);
+	}
+};
+//#endregion
 //#region src/tangle-search/index.ts
 function invalid(message) {
 	throw new ProviderProtocolError(message, "invalid_search_request", 400, true);
@@ -115,6 +195,6 @@ var TangleSearchClient = class {
 	}
 };
 //#endregion
-export { ProviderProtocolError, TangleSearchClient, buildTangleSearchRequest, parseTangleSearchResult };
+export { ProviderProtocolError, TangleReadClient, TangleSearchClient, buildTangleReadRequest, buildTangleSearchRequest, parseTangleReadResult, parseTangleSearchResult };
 
 //# sourceMappingURL=index.js.map

package/dist/tangle-search/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/tangle-search/index.ts"],"sourcesContent":["import { ProviderProtocolError, record, requestJson, type JsonRequestOptions } from '../http/response-json.js'\nexport { ProviderProtocolError } from '../http/response-json.js'\n\n/** Router protocol, not provider-specific APIs. New provider IDs require no client release. */\nexport interface TangleSearchInput {\n  query: string\n  provider?: string\n  maxResults?: number\n  searchRecency?: 'day' | 'week' | 'month' | 'year'\n  includeDomains?: readonly string[]\n  excludeDomains?: readonly string[]\n}\nexport interface TangleSearchHit {\n  title: string\n  url: string\n  snippet?: string\n  publishedAt?: string\n  score?: number\n  source?: string\n}\nexport interface TangleSearchResult {\n  id: string\n  object: 'search.result'\n  provider: string\n  query: string\n  data: TangleSearchHit[]\n  citations: string[]\n  usage: { upstream_cost: number | null; billed_cost: number | null }\n}\nexport interface TangleSearchClientOptions extends JsonRequestOptions {\n  /** Host-selected credential. Never infer one from a model URL or an agent argument. */\n  apiKey: string | (() => string | Promise<string>)\n  /** Explicit trusted base: HTTPS, or HTTP loopback for tests/self-hosting. */\n  baseUrl?: string\n  /** A deployment/evaluation pin wins over a per-call preference. */\n  provider?: string\n}\n\nfunction invalid(message: string): never {\n  throw new ProviderProtocolError(message, 'invalid_search_request', 400, true)\n}\nfunction domains(values: readonly string[] | undefined): string[] | undefined {\n  if (values === undefined) return undefined\n  if (!Array.isArray(values) || values.length > 50 || values.some(v => typeof v !== 'string' || v.length > 255 ||\n    !/^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)*[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i.test(v))) {\n    invalid('Domain filters must be host names, not URLs')\n  }\n  return [...new Set(values.map(v => v.toLowerCase()))]\n}\n/** Useful for an existing bounded HTTP transport; never sends a request itself. */\nexport function buildTangleSearchRequest(input: TangleSearchInput, pinnedProvider?: string) {\n  if (!record(input) || typeof input.query !== 'string' || !input.query.trim()) invalid('A search query is required')\n  const allowed = new Set(['query', 'provider', 'maxResults', 'searchRecency', 'includeDomains', 'excludeDomains'])\n  if (Object.keys(input).some(k => !allowed.has(k))) invalid('Unsupported search option; the Router has no page-offset parameter')\n  const max = input.maxResults ?? 20\n  if (!Number.isInteger(max) || max < 1 || max > 25) invalid('maxResults must be between 1 and 25')\n  const provider = pinnedProvider || input.provider\n  if (provider !== undefined && (typeof provider !== 'string' || !/^[a-z][a-z0-9_-]{0,63}$/.test(provider))) invalid('Invalid Router provider ID')\n  if (input.searchRecency !== undefined && !['day', 'week', 'month', 'year'].includes(input.searchRecency)) invalid('Unsupported search recency')\n  return { query: input.query.trim(), max_results: max,\n    ...(provider ? { provider } : {}), ...(input.searchRecency ? { search_recency: input.searchRecency } : {}),\n    ...(input.includeDomains ? { include_domains: domains(input.includeDomains) } : {}),\n    ...(input.excludeDomains ? { exclude_domains: domains(input.excludeDomains) } : {}) }\n}\nfunction safeURL(value: unknown): value is string {\n  if (typeof value !== 'string') return false\n  try { const u = new URL(value); return ['http:', 'https:'].includes(u.protocol) && !u.username && !u.password }\n  catch { return false }\n}\n/** Correlate a response without inventing pagination, images, stock or missing costs. */\nexport function parseTangleSearchResult(raw: unknown, request: { query: string; provider?: string }): TangleSearchResult {\n  const bad = () => { throw new ProviderProtocolError('Invalid or uncorrelated Router search response', 'invalid_search_response') }\n  if (!record(raw) || raw.object !== 'search.result' || typeof raw.id !== 'string' || !raw.id ||\n    typeof raw.provider !== 'string' || !raw.provider || raw.query !== request.query || !Array.isArray(raw.data)) return bad()\n  if (request.provider && raw.provider !== request.provider) {\n    throw new ProviderProtocolError('Router served a different search provider than requested', 'search_provider_mismatch')\n  }\n  const hits: TangleSearchHit[] = raw.data.map(hit => {\n    if (!record(hit) || !safeURL(hit.url) || typeof hit.title !== 'string' ||\n      (hit.snippet !== undefined && typeof hit.snippet !== 'string')) return bad()\n    return { url: hit.url, title: hit.title, ...(typeof hit.snippet === 'string' ? { snippet: hit.snippet } : {}),\n      ...(typeof hit.publishedAt === 'string' ? { publishedAt: hit.publishedAt } : {}),\n      ...(typeof hit.score === 'number' && Number.isFinite(hit.score) ? { score: hit.score } : {}),\n      ...(typeof hit.source === 'string' ? { source: hit.source } : {}) }\n  })\n  const cost = (value: unknown) => typeof value === 'number' && Number.isFinite(value) && value >= 0 ? value : null\n  const usage = record(raw.usage) ? raw.usage : {}\n  return { id: raw.id, object: 'search.result', provider: raw.provider, query: request.query, data: hits,\n    citations: Array.isArray(raw.citations) ? raw.citations.filter(safeURL) : [],\n    usage: { upstream_cost: cost(usage.upstream_cost), billed_cost: cost(usage.billed_cost) } }\n}\nexport class TangleSearchClient {\n  private readonly endpoint: string\n  private readonly options: TangleSearchClientOptions\n  constructor(options: TangleSearchClientOptions) {\n    const u = new URL(options.baseUrl ?? 'https://router.tangle.tools')\n    if (u.username || u.password || u.search || u.hash || !['/', '/v1', '/v1/'].includes(u.pathname) ||\n      !(u.protocol === 'https:' || u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname))) {\n      invalid('Use an explicit trusted Router HTTPS origin, or HTTP loopback')\n    }\n    this.endpoint = u.origin + '/v1/search'\n    this.options = { ...options }\n  }\n  async search(input: TangleSearchInput, signal?: AbortSignal): Promise<TangleSearchResult> {\n    const body = buildTangleSearchRequest(input, this.options.provider)\n    signal?.throwIfAborted()\n    const key = typeof this.options.apiKey === 'function' ? await this.options.apiKey() : this.options.apiKey\n    if (!key || /[\\r\\n]/.test(key)) throw new ProviderProtocolError('A Router credential is required', 'search_not_configured', 503, true)\n    const raw = await requestJson(this.endpoint, { method: 'POST', signal,\n      headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' }, body: JSON.stringify(body) }, this.options)\n    return parseTangleSearchResult(raw, body)\n  }\n}\n"],"mappings":";;AAsCA,SAAS,QAAQ,SAAwB;CACvC,MAAM,IAAI,sBAAsB,SAAS,0BAA0B,KAAK,IAAI;AAC9E;AACA,SAAS,QAAQ,QAA6D;CAC5E,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;CACjC,IAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,MAAM,OAAO,MAAK,MAAK,OAAO,MAAM,YAAY,EAAE,SAAS,OACvG,CAAC,2EAA2E,KAAK,CAAC,CAAC,GACnF,QAAQ,6CAA6C;CAEvD,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AACtD;;AAEA,SAAgB,yBAAyB,OAA0B,gBAAyB;CAC1F,IAAI,CAAC,OAAO,KAAK,KAAK,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,MAAM,KAAK,GAAG,QAAQ,4BAA4B;CAClH,MAAM,0BAAU,IAAI,IAAI;EAAC;EAAS;EAAY;EAAc;EAAiB;EAAkB;CAAgB,CAAC;CAChH,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,MAAK,MAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,QAAQ,oEAAoE;CAC/H,MAAM,MAAM,MAAM,cAAc;CAChC,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,IAAI,QAAQ,qCAAqC;CAChG,MAAM,WAAW,kBAAkB,MAAM;CACzC,IAAI,aAAa,KAAA,MAAc,OAAO,aAAa,YAAY,CAAC,0BAA0B,KAAK,QAAQ,IAAI,QAAQ,4BAA4B;CAC/I,IAAI,MAAM,kBAAkB,KAAA,KAAa,CAAC;EAAC;EAAO;EAAQ;EAAS;CAAM,CAAC,CAAC,SAAS,MAAM,aAAa,GAAG,QAAQ,4BAA4B;CAC9I,OAAO;EAAE,OAAO,MAAM,MAAM,KAAK;EAAG,aAAa;EAC/C,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;EAAI,GAAI,MAAM,gBAAgB,EAAE,gBAAgB,MAAM,cAAc,IAAI,CAAC;EACxG,GAAI,MAAM,iBAAiB,EAAE,iBAAiB,QAAQ,MAAM,cAAc,EAAE,IAAI,CAAC;EACjF,GAAI,MAAM,iBAAiB,EAAE,iBAAiB,QAAQ,MAAM,cAAc,EAAE,IAAI,CAAC;CAAG;AACxF;AACA,SAAS,QAAQ,OAAiC;CAChD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI;EAAE,MAAM,IAAI,IAAI,IAAI,KAAK;EAAG,OAAO,CAAC,SAAS,QAAQ,CAAC,CAAC,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,YAAY,CAAC,EAAE;CAAS,QACxG;EAAE,OAAO;CAAM;AACvB;;AAEA,SAAgB,wBAAwB,KAAc,SAAmE;CACvH,MAAM,YAAY;EAAE,MAAM,IAAI,sBAAsB,kDAAkD,yBAAyB;CAAE;CACjI,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,WAAW,mBAAmB,OAAO,IAAI,OAAO,YAAY,CAAC,IAAI,MACvF,OAAO,IAAI,aAAa,YAAY,CAAC,IAAI,YAAY,IAAI,UAAU,QAAQ,SAAS,CAAC,MAAM,QAAQ,IAAI,IAAI,GAAG,OAAO,IAAI;CAC3H,IAAI,QAAQ,YAAY,IAAI,aAAa,QAAQ,UAC/C,MAAM,IAAI,sBAAsB,4DAA4D,0BAA0B;CAExH,MAAM,OAA0B,IAAI,KAAK,KAAI,QAAO;EAClD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,GAAG,KAAK,OAAO,IAAI,UAAU,YAC3D,IAAI,YAAY,KAAA,KAAa,OAAO,IAAI,YAAY,UAAW,OAAO,IAAI;EAC7E,OAAO;GAAE,KAAK,IAAI;GAAK,OAAO,IAAI;GAAO,GAAI,OAAO,IAAI,YAAY,WAAW,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;GACzG,GAAI,OAAO,IAAI,gBAAgB,WAAW,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;GAC9E,GAAI,OAAO,IAAI,UAAU,YAAY,OAAO,SAAS,IAAI,KAAK,IAAI,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;GAC1F,GAAI,OAAO,IAAI,WAAW,WAAW,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;EAAG;CACtE,CAAC;CACD,MAAM,QAAQ,UAAmB,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;CAC7G,MAAM,QAAQ,OAAO,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;CAC/C,OAAO;EAAE,IAAI,IAAI;EAAI,QAAQ;EAAiB,UAAU,IAAI;EAAU,OAAO,QAAQ;EAAO,MAAM;EAChG,WAAW,MAAM,QAAQ,IAAI,SAAS,IAAI,IAAI,UAAU,OAAO,OAAO,IAAI,CAAC;EAC3E,OAAO;GAAE,eAAe,KAAK,MAAM,aAAa;GAAG,aAAa,KAAK,MAAM,WAAW;EAAE;CAAE;AAC9F;AACA,IAAa,qBAAb,MAAgC;CAC9B;CACA;CACA,YAAY,SAAoC;EAC9C,MAAM,IAAI,IAAI,IAAI,QAAQ,WAAW,6BAA6B;EAClE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;GAAC;GAAK;GAAO;EAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,KAC7F,EAAE,EAAE,aAAa,YAAY,EAAE,aAAa,WAAW;GAAC;GAAa;GAAa;EAAO,CAAC,CAAC,SAAS,EAAE,QAAQ,IAC9G,QAAQ,+DAA+D;EAEzE,KAAK,WAAW,EAAE,SAAS;EAC3B,KAAK,UAAU,EAAE,GAAG,QAAQ;CAC9B;CACA,MAAM,OAAO,OAA0B,QAAmD;EACxF,MAAM,OAAO,yBAAyB,OAAO,KAAK,QAAQ,QAAQ;EAClE,QAAQ,eAAe;EACvB,MAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,aAAa,MAAM,KAAK,QAAQ,OAAO,IAAI,KAAK,QAAQ;EACnG,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,GAAG,MAAM,IAAI,sBAAsB,mCAAmC,yBAAyB,KAAK,IAAI;EAGrI,OAAO,wBAAwB,MAFb,YAAY,KAAK,UAAU;GAAE,QAAQ;GAAQ;GAC7D,SAAS;IAAE,eAAe,UAAU;IAAO,gBAAgB;GAAmB;GAAG,MAAM,KAAK,UAAU,IAAI;EAAE,GAAG,KAAK,OAAO,GACzF,IAAI;CAC1C;AACF"}
+{"version":3,"file":"index.js","names":["invalid"],"sources":["../../src/tangle-search/reader.ts","../../src/tangle-search/index.ts"],"sourcesContent":["import { ProviderProtocolError, record, requestJson, type JsonRequestOptions } from '../http/response-json.js'\n\nexport interface TangleReadInput {\n  url: string\n  maxBytes?: number\n}\nexport interface TangleReadResult {\n  id: string\n  object: 'web.read'\n  requestedUrl: string\n  url: string\n  contentType: string\n  /** Untrusted original page text/HTML, not an extracted summary or instructions. */\n  content: string\n  bytes: number\n  truncated: boolean\n  fetchedAt: string\n  billedCost: number | null\n}\nexport interface TangleReadClientOptions extends JsonRequestOptions {\n  /** Supplied by the trusted host, never by the agent's tool arguments. */\n  apiKey: string | (() => string | Promise<string>)\n  baseUrl?: string\n}\nfunction invalid(message: string): never {\n  throw new ProviderProtocolError(message, 'invalid_read_request', 400, true)\n}\nfunction publicHttps(value: unknown): value is string {\n  if (typeof value !== 'string' || value.length > 2048) return false\n  try { const u = new URL(value); return u.protocol === 'https:' && !u.username && !u.password }\n  catch { return false }\n}\nexport function buildTangleReadRequest(input: TangleReadInput) {\n  if (!record(input) || Object.keys(input).some(key => !['url', 'maxBytes'].includes(key)) || !publicHttps(input.url)) {\n    invalid('A credential-free HTTPS page URL is required')\n  }\n  const max = input.maxBytes ?? 131072\n  if (!Number.isSafeInteger(max) || max < 1024 || max > 131072) invalid('maxBytes must be between 1024 and 131072')\n  return { url: input.url, max_bytes: max }\n}\nexport function parseTangleReadResult(raw: unknown, request: ReturnType<typeof buildTangleReadRequest>): TangleReadResult {\n  // Router counts raw page bytes but decodes them as UTF-8; each undecodable\n  // byte becomes U+FFFD (3 bytes), so decoded text can reach 3x raw bytes.\n  const bad = (): never => { throw new ProviderProtocolError('Invalid or uncorrelated Router read response', 'invalid_read_response') }\n  if (!record(raw) || raw.object !== 'web.read' || typeof raw.id !== 'string' || !raw.id ||\n      raw.requested_url !== request.url || !publicHttps(raw.url) || typeof raw.content !== 'string' ||\n      typeof raw.content_type !== 'string' || typeof raw.fetched_at !== 'string' ||\n      !Number.isFinite(Date.parse(raw.fetched_at)) || typeof raw.truncated !== 'boolean' ||\n      typeof raw.bytes !== 'number' || !Number.isSafeInteger(raw.bytes) || raw.bytes < 0 || raw.bytes > request.max_bytes ||\n      new TextEncoder().encode(raw.content).byteLength > raw.bytes * 3) return bad()\n  const billed = record(raw.usage) ? raw.usage.billed_cost : undefined\n  return { id: raw.id, object: 'web.read', requestedUrl: request.url, url: raw.url,\n    contentType: raw.content_type, content: raw.content, bytes: raw.bytes, truncated: raw.truncated,\n    fetchedAt: raw.fetched_at,\n    billedCost: typeof billed === 'number' && Number.isFinite(billed) && billed >= 0 ? billed : null }\n}\n/** Router is the only destination; destination DNS/redirect checks are enforced by the Router. */\nexport class TangleReadClient {\n  private readonly endpoint: string\n  private readonly options: TangleReadClientOptions\n  constructor(options: TangleReadClientOptions) {\n    const u = new URL(options.baseUrl ?? 'https://router.tangle.tools')\n    if (u.username || u.password || u.search || u.hash || !['/', '/v1', '/v1/'].includes(u.pathname) ||\n        !(u.protocol === 'https:' || u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname))) {\n      invalid('Use an explicit trusted Router HTTPS origin, or HTTP loopback')\n    }\n    this.endpoint = `${u.origin}/v1/read`\n    this.options = { timeoutMs: 25_000, maxResponseBytes: 1_000_000, ...options }\n  }\n  async read(input: TangleReadInput, signal?: AbortSignal): Promise<TangleReadResult> {\n    const body = buildTangleReadRequest(input)\n    signal?.throwIfAborted()\n    const key = typeof this.options.apiKey === 'function' ? await this.options.apiKey() : this.options.apiKey\n    if (!key || /[\\r\\n]/.test(key)) throw new ProviderProtocolError('A Router credential is required', 'read_not_configured', 503, true)\n    const raw = await requestJson(this.endpoint, { method: 'POST', signal,\n      headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' }, body: JSON.stringify(body) }, this.options)\n    return parseTangleReadResult(raw, body)\n  }\n}\n","import { ProviderProtocolError, record, requestJson, type JsonRequestOptions } from '../http/response-json.js'\nexport { ProviderProtocolError } from '../http/response-json.js'\nexport { TangleReadClient, buildTangleReadRequest, parseTangleReadResult,\n  type TangleReadInput, type TangleReadResult, type TangleReadClientOptions } from './reader.js'\n\n/** Router protocol, not provider-specific APIs. New provider IDs require no client release. */\nexport interface TangleSearchInput {\n  query: string\n  provider?: string\n  maxResults?: number\n  searchRecency?: 'day' | 'week' | 'month' | 'year'\n  includeDomains?: readonly string[]\n  excludeDomains?: readonly string[]\n}\nexport interface TangleSearchHit {\n  title: string\n  url: string\n  snippet?: string\n  publishedAt?: string\n  score?: number\n  source?: string\n}\nexport interface TangleSearchResult {\n  id: string\n  object: 'search.result'\n  provider: string\n  query: string\n  data: TangleSearchHit[]\n  citations: string[]\n  usage: { upstream_cost: number | null; billed_cost: number | null }\n}\nexport interface TangleSearchClientOptions extends JsonRequestOptions {\n  /** Host-selected credential. Never infer one from a model URL or an agent argument. */\n  apiKey: string | (() => string | Promise<string>)\n  /** Explicit trusted base: HTTPS, or HTTP loopback for tests/self-hosting. */\n  baseUrl?: string\n  /** A deployment/evaluation pin wins over a per-call preference. */\n  provider?: string\n}\n\nfunction invalid(message: string): never {\n  throw new ProviderProtocolError(message, 'invalid_search_request', 400, true)\n}\nfunction domains(values: readonly string[] | undefined): string[] | undefined {\n  if (values === undefined) return undefined\n  if (!Array.isArray(values) || values.length > 50 || values.some(v => typeof v !== 'string' || v.length > 255 ||\n    !/^(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.)*[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/i.test(v))) {\n    invalid('Domain filters must be host names, not URLs')\n  }\n  return [...new Set(values.map(v => v.toLowerCase()))]\n}\n/** Useful for an existing bounded HTTP transport; never sends a request itself. */\nexport function buildTangleSearchRequest(input: TangleSearchInput, pinnedProvider?: string) {\n  if (!record(input) || typeof input.query !== 'string' || !input.query.trim()) invalid('A search query is required')\n  const allowed = new Set(['query', 'provider', 'maxResults', 'searchRecency', 'includeDomains', 'excludeDomains'])\n  if (Object.keys(input).some(k => !allowed.has(k))) invalid('Unsupported search option; the Router has no page-offset parameter')\n  const max = input.maxResults ?? 20\n  if (!Number.isInteger(max) || max < 1 || max > 25) invalid('maxResults must be between 1 and 25')\n  const provider = pinnedProvider || input.provider\n  if (provider !== undefined && (typeof provider !== 'string' || !/^[a-z][a-z0-9_-]{0,63}$/.test(provider))) invalid('Invalid Router provider ID')\n  if (input.searchRecency !== undefined && !['day', 'week', 'month', 'year'].includes(input.searchRecency)) invalid('Unsupported search recency')\n  return { query: input.query.trim(), max_results: max,\n    ...(provider ? { provider } : {}), ...(input.searchRecency ? { search_recency: input.searchRecency } : {}),\n    ...(input.includeDomains ? { include_domains: domains(input.includeDomains) } : {}),\n    ...(input.excludeDomains ? { exclude_domains: domains(input.excludeDomains) } : {}) }\n}\nfunction safeURL(value: unknown): value is string {\n  if (typeof value !== 'string') return false\n  try { const u = new URL(value); return ['http:', 'https:'].includes(u.protocol) && !u.username && !u.password }\n  catch { return false }\n}\n/** Correlate a response without inventing pagination, images, stock or missing costs. */\nexport function parseTangleSearchResult(raw: unknown, request: { query: string; provider?: string }): TangleSearchResult {\n  const bad = () => { throw new ProviderProtocolError('Invalid or uncorrelated Router search response', 'invalid_search_response') }\n  if (!record(raw) || raw.object !== 'search.result' || typeof raw.id !== 'string' || !raw.id ||\n    typeof raw.provider !== 'string' || !raw.provider || raw.query !== request.query || !Array.isArray(raw.data)) return bad()\n  if (request.provider && raw.provider !== request.provider) {\n    throw new ProviderProtocolError('Router served a different search provider than requested', 'search_provider_mismatch')\n  }\n  const hits: TangleSearchHit[] = raw.data.map(hit => {\n    if (!record(hit) || !safeURL(hit.url) || typeof hit.title !== 'string' ||\n      (hit.snippet !== undefined && typeof hit.snippet !== 'string')) return bad()\n    return { url: hit.url, title: hit.title, ...(typeof hit.snippet === 'string' ? { snippet: hit.snippet } : {}),\n      ...(typeof hit.publishedAt === 'string' ? { publishedAt: hit.publishedAt } : {}),\n      ...(typeof hit.score === 'number' && Number.isFinite(hit.score) ? { score: hit.score } : {}),\n      ...(typeof hit.source === 'string' ? { source: hit.source } : {}) }\n  })\n  const cost = (value: unknown) => typeof value === 'number' && Number.isFinite(value) && value >= 0 ? value : null\n  const usage = record(raw.usage) ? raw.usage : {}\n  return { id: raw.id, object: 'search.result', provider: raw.provider, query: request.query, data: hits,\n    citations: Array.isArray(raw.citations) ? raw.citations.filter(safeURL) : [],\n    usage: { upstream_cost: cost(usage.upstream_cost), billed_cost: cost(usage.billed_cost) } }\n}\nexport class TangleSearchClient {\n  private readonly endpoint: string\n  private readonly options: TangleSearchClientOptions\n  constructor(options: TangleSearchClientOptions) {\n    const u = new URL(options.baseUrl ?? 'https://router.tangle.tools')\n    if (u.username || u.password || u.search || u.hash || !['/', '/v1', '/v1/'].includes(u.pathname) ||\n      !(u.protocol === 'https:' || u.protocol === 'http:' && ['localhost', '127.0.0.1', '[::1]'].includes(u.hostname))) {\n      invalid('Use an explicit trusted Router HTTPS origin, or HTTP loopback')\n    }\n    this.endpoint = u.origin + '/v1/search'\n    this.options = { ...options }\n  }\n  async search(input: TangleSearchInput, signal?: AbortSignal): Promise<TangleSearchResult> {\n    const body = buildTangleSearchRequest(input, this.options.provider)\n    signal?.throwIfAborted()\n    const key = typeof this.options.apiKey === 'function' ? await this.options.apiKey() : this.options.apiKey\n    if (!key || /[\\r\\n]/.test(key)) throw new ProviderProtocolError('A Router credential is required', 'search_not_configured', 503, true)\n    const raw = await requestJson(this.endpoint, { method: 'POST', signal,\n      headers: { Authorization: `Bearer ${key}`, 'Content-Type': 'application/json' }, body: JSON.stringify(body) }, this.options)\n    return parseTangleSearchResult(raw, body)\n  }\n}\n"],"mappings":";;AAwBA,SAASA,UAAQ,SAAwB;CACvC,MAAM,IAAI,sBAAsB,SAAS,wBAAwB,KAAK,IAAI;AAC5E;AACA,SAAS,YAAY,OAAiC;CACpD,IAAI,OAAO,UAAU,YAAY,MAAM,SAAS,MAAM,OAAO;CAC7D,IAAI;EAAE,MAAM,IAAI,IAAI,IAAI,KAAK;EAAG,OAAO,EAAE,aAAa,YAAY,CAAC,EAAE,YAAY,CAAC,EAAE;CAAS,QACvF;EAAE,OAAO;CAAM;AACvB;AACA,SAAgB,uBAAuB,OAAwB;CAC7D,IAAI,CAAC,OAAO,KAAK,KAAK,OAAO,KAAK,KAAK,CAAC,CAAC,MAAK,QAAO,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,YAAY,MAAM,GAAG,GAChH,UAAQ,8CAA8C;CAExD,MAAM,MAAM,MAAM,YAAY;CAC9B,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,MAAM,QAAQ,MAAM,QAAQ,UAAQ,0CAA0C;CAChH,OAAO;EAAE,KAAK,MAAM;EAAK,WAAW;CAAI;AAC1C;AACA,SAAgB,sBAAsB,KAAc,SAAsE;CAGxH,MAAM,YAAmB;EAAE,MAAM,IAAI,sBAAsB,gDAAgD,uBAAuB;CAAE;CACpI,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,WAAW,cAAc,OAAO,IAAI,OAAO,YAAY,CAAC,IAAI,MAChF,IAAI,kBAAkB,QAAQ,OAAO,CAAC,YAAY,IAAI,GAAG,KAAK,OAAO,IAAI,YAAY,YACrF,OAAO,IAAI,iBAAiB,YAAY,OAAO,IAAI,eAAe,YAClE,CAAC,OAAO,SAAS,KAAK,MAAM,IAAI,UAAU,CAAC,KAAK,OAAO,IAAI,cAAc,aACzE,OAAO,IAAI,UAAU,YAAY,CAAC,OAAO,cAAc,IAAI,KAAK,KAAK,IAAI,QAAQ,KAAK,IAAI,QAAQ,QAAQ,aAC1G,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,aAAa,IAAI,QAAQ,GAAG,OAAO,IAAI;CACjF,MAAM,SAAS,OAAO,IAAI,KAAK,IAAI,IAAI,MAAM,cAAc,KAAA;CAC3D,OAAO;EAAE,IAAI,IAAI;EAAI,QAAQ;EAAY,cAAc,QAAQ;EAAK,KAAK,IAAI;EAC3E,aAAa,IAAI;EAAc,SAAS,IAAI;EAAS,OAAO,IAAI;EAAO,WAAW,IAAI;EACtF,WAAW,IAAI;EACf,YAAY,OAAO,WAAW,YAAY,OAAO,SAAS,MAAM,KAAK,UAAU,IAAI,SAAS;CAAK;AACrG;;AAEA,IAAa,mBAAb,MAA8B;CAC5B;CACA;CACA,YAAY,SAAkC;EAC5C,MAAM,IAAI,IAAI,IAAI,QAAQ,WAAW,6BAA6B;EAClE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;GAAC;GAAK;GAAO;EAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,KAC3F,EAAE,EAAE,aAAa,YAAY,EAAE,aAAa,WAAW;GAAC;GAAa;GAAa;EAAO,CAAC,CAAC,SAAS,EAAE,QAAQ,IAChH,UAAQ,+DAA+D;EAEzE,KAAK,WAAW,GAAG,EAAE,OAAO;EAC5B,KAAK,UAAU;GAAE,WAAW;GAAQ,kBAAkB;GAAW,GAAG;EAAQ;CAC9E;CACA,MAAM,KAAK,OAAwB,QAAiD;EAClF,MAAM,OAAO,uBAAuB,KAAK;EACzC,QAAQ,eAAe;EACvB,MAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,aAAa,MAAM,KAAK,QAAQ,OAAO,IAAI,KAAK,QAAQ;EACnG,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,GAAG,MAAM,IAAI,sBAAsB,mCAAmC,uBAAuB,KAAK,IAAI;EAGnI,OAAO,sBAAsB,MAFX,YAAY,KAAK,UAAU;GAAE,QAAQ;GAAQ;GAC7D,SAAS;IAAE,eAAe,UAAU;IAAO,gBAAgB;GAAmB;GAAG,MAAM,KAAK,UAAU,IAAI;EAAE,GAAG,KAAK,OAAO,GAC3F,IAAI;CACxC;AACF;;;ACtCA,SAAS,QAAQ,SAAwB;CACvC,MAAM,IAAI,sBAAsB,SAAS,0BAA0B,KAAK,IAAI;AAC9E;AACA,SAAS,QAAQ,QAA6D;CAC5E,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;CACjC,IAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,MAAM,OAAO,MAAK,MAAK,OAAO,MAAM,YAAY,EAAE,SAAS,OACvG,CAAC,2EAA2E,KAAK,CAAC,CAAC,GACnF,QAAQ,6CAA6C;CAEvD,OAAO,CAAC,GAAG,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AACtD;;AAEA,SAAgB,yBAAyB,OAA0B,gBAAyB;CAC1F,IAAI,CAAC,OAAO,KAAK,KAAK,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,MAAM,KAAK,GAAG,QAAQ,4BAA4B;CAClH,MAAM,0BAAU,IAAI,IAAI;EAAC;EAAS;EAAY;EAAc;EAAiB;EAAkB;CAAgB,CAAC;CAChH,IAAI,OAAO,KAAK,KAAK,CAAC,CAAC,MAAK,MAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,QAAQ,oEAAoE;CAC/H,MAAM,MAAM,MAAM,cAAc;CAChC,IAAI,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,KAAK,MAAM,IAAI,QAAQ,qCAAqC;CAChG,MAAM,WAAW,kBAAkB,MAAM;CACzC,IAAI,aAAa,KAAA,MAAc,OAAO,aAAa,YAAY,CAAC,0BAA0B,KAAK,QAAQ,IAAI,QAAQ,4BAA4B;CAC/I,IAAI,MAAM,kBAAkB,KAAA,KAAa,CAAC;EAAC;EAAO;EAAQ;EAAS;CAAM,CAAC,CAAC,SAAS,MAAM,aAAa,GAAG,QAAQ,4BAA4B;CAC9I,OAAO;EAAE,OAAO,MAAM,MAAM,KAAK;EAAG,aAAa;EAC/C,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;EAAI,GAAI,MAAM,gBAAgB,EAAE,gBAAgB,MAAM,cAAc,IAAI,CAAC;EACxG,GAAI,MAAM,iBAAiB,EAAE,iBAAiB,QAAQ,MAAM,cAAc,EAAE,IAAI,CAAC;EACjF,GAAI,MAAM,iBAAiB,EAAE,iBAAiB,QAAQ,MAAM,cAAc,EAAE,IAAI,CAAC;CAAG;AACxF;AACA,SAAS,QAAQ,OAAiC;CAChD,IAAI,OAAO,UAAU,UAAU,OAAO;CACtC,IAAI;EAAE,MAAM,IAAI,IAAI,IAAI,KAAK;EAAG,OAAO,CAAC,SAAS,QAAQ,CAAC,CAAC,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,YAAY,CAAC,EAAE;CAAS,QACxG;EAAE,OAAO;CAAM;AACvB;;AAEA,SAAgB,wBAAwB,KAAc,SAAmE;CACvH,MAAM,YAAY;EAAE,MAAM,IAAI,sBAAsB,kDAAkD,yBAAyB;CAAE;CACjI,IAAI,CAAC,OAAO,GAAG,KAAK,IAAI,WAAW,mBAAmB,OAAO,IAAI,OAAO,YAAY,CAAC,IAAI,MACvF,OAAO,IAAI,aAAa,YAAY,CAAC,IAAI,YAAY,IAAI,UAAU,QAAQ,SAAS,CAAC,MAAM,QAAQ,IAAI,IAAI,GAAG,OAAO,IAAI;CAC3H,IAAI,QAAQ,YAAY,IAAI,aAAa,QAAQ,UAC/C,MAAM,IAAI,sBAAsB,4DAA4D,0BAA0B;CAExH,MAAM,OAA0B,IAAI,KAAK,KAAI,QAAO;EAClD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,GAAG,KAAK,OAAO,IAAI,UAAU,YAC3D,IAAI,YAAY,KAAA,KAAa,OAAO,IAAI,YAAY,UAAW,OAAO,IAAI;EAC7E,OAAO;GAAE,KAAK,IAAI;GAAK,OAAO,IAAI;GAAO,GAAI,OAAO,IAAI,YAAY,WAAW,EAAE,SAAS,IAAI,QAAQ,IAAI,CAAC;GACzG,GAAI,OAAO,IAAI,gBAAgB,WAAW,EAAE,aAAa,IAAI,YAAY,IAAI,CAAC;GAC9E,GAAI,OAAO,IAAI,UAAU,YAAY,OAAO,SAAS,IAAI,KAAK,IAAI,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC;GAC1F,GAAI,OAAO,IAAI,WAAW,WAAW,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;EAAG;CACtE,CAAC;CACD,MAAM,QAAQ,UAAmB,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,SAAS,IAAI,QAAQ;CAC7G,MAAM,QAAQ,OAAO,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC;CAC/C,OAAO;EAAE,IAAI,IAAI;EAAI,QAAQ;EAAiB,UAAU,IAAI;EAAU,OAAO,QAAQ;EAAO,MAAM;EAChG,WAAW,MAAM,QAAQ,IAAI,SAAS,IAAI,IAAI,UAAU,OAAO,OAAO,IAAI,CAAC;EAC3E,OAAO;GAAE,eAAe,KAAK,MAAM,aAAa;GAAG,aAAa,KAAK,MAAM,WAAW;EAAE;CAAE;AAC9F;AACA,IAAa,qBAAb,MAAgC;CAC9B;CACA;CACA,YAAY,SAAoC;EAC9C,MAAM,IAAI,IAAI,IAAI,QAAQ,WAAW,6BAA6B;EAClE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC;GAAC;GAAK;GAAO;EAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,KAC7F,EAAE,EAAE,aAAa,YAAY,EAAE,aAAa,WAAW;GAAC;GAAa;GAAa;EAAO,CAAC,CAAC,SAAS,EAAE,QAAQ,IAC9G,QAAQ,+DAA+D;EAEzE,KAAK,WAAW,EAAE,SAAS;EAC3B,KAAK,UAAU,EAAE,GAAG,QAAQ;CAC9B;CACA,MAAM,OAAO,OAA0B,QAAmD;EACxF,MAAM,OAAO,yBAAyB,OAAO,KAAK,QAAQ,QAAQ;EAClE,QAAQ,eAAe;EACvB,MAAM,MAAM,OAAO,KAAK,QAAQ,WAAW,aAAa,MAAM,KAAK,QAAQ,OAAO,IAAI,KAAK,QAAQ;EACnG,IAAI,CAAC,OAAO,SAAS,KAAK,GAAG,GAAG,MAAM,IAAI,sBAAsB,mCAAmC,yBAAyB,KAAK,IAAI;EAGrI,OAAO,wBAAwB,MAFb,YAAY,KAAK,UAAU;GAAE,QAAQ;GAAQ;GAC7D,SAAS;IAAE,eAAe,UAAU;IAAO,gBAAgB;GAAmB;GAAG,MAAM,KAAK,UAAU,IAAI;EAAE,GAAG,KAAK,OAAO,GACzF,IAAI;CAC1C;AACF"}

package/dist/webhooks/index.js

@@ -1,5 +1,5 @@
-import { a as verifyHmacSignature, i as verifyEmailSignature, n as firstHeader, o as verifySlackSignature, s as verifyStripeSignature } from "../webhooks-FsjqRN_0.js";
 import { FileSystemAtomicIdempotencyStore, InMemoryAtomicIdempotencyStore, resolveAtomicIdempotencyStore } from "../idempotency.js";
+import { a as verifyHmacSignature, i as verifyEmailSignature, n as firstHeader, o as verifySlackSignature, s as verifyStripeSignature } from "../webhooks-FsjqRN_0.js";
 import { authenticateTwilioForm } from "../twilio/index.js";
 import { createHash, createHmac, timingSafeEqual } from "node:crypto";
 //#region src/webhooks/router.ts

package/docs/host-search-and-phone.md

@@ -1,4 +1,4 @@
-# Router search and verified phone transports
+# Router search, page reads, and verified phone transports
 
 These primitives were extracted from SUPER, but have no SUPER database, project,
 pricing policy, sender number, UI, or workflow dependency. Existing Hub invocation,
@@ -35,6 +35,33 @@ Protocol reference: `tangle-network/tangle-router` commit
 `8999a6a9a01d6c2872010e265327c207a73adbe9`, `app/v1/search/route.ts` and `lib/web-search.ts`.
 Requalify against the actual deployment; source compatibility is not live access.
 
+## Read a public page
+
+Install the package and import the reader from the existing search entrypoint.
+
+```ts
+import { TangleReadClient } from '@tangle-network/agent-integrations/tangle-search'
+
+const reader = new TangleReadClient({ apiKey: () => secretStore.routerKey() })
+const page = await reader.read({ url: 'https://example.com/', maxBytes: 32768 }, signal)
+console.log(page.url, page.contentType, page.bytes, page.truncated)
+```
+
+The client sends one POST to `/v1/read` without automatic retries.
+Supply the Router credential through trusted host configuration.
+The Router validates destinations and redirects without forwarding the Router credential to the page.
+
+`maxBytes` accepts 1,024–131,072 raw page bytes and defaults to 131,072.
+`bytes` reports raw bytes; decoded UTF-8 content can expand when invalid bytes become replacement characters.
+`truncated` identifies a bounded partial result.
+The response must correlate with the original requested URL and remain within its reported byte limit.
+`billedCost` preserves the reported charge and stays null when the charge is absent or invalid.
+
+`content` contains untrusted page text or HTML.
+It is neither an extracted summary nor instructions for the agent.
+Retain the request ID, returned URL, content type, and fetch time with downstream evidence.
+For an existing bounded transport, use `buildTangleReadRequest` and `parseTangleReadResult` to share the same contract.
+
 ## Phone verification and SMS
 
 ```ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-integrations",
-  "version": "0.58.0",
+  "version": "0.59.1",
   "description": "Vendor-neutral integration contracts and runtime helpers for sandbox and agent apps.",
   "homepage": "https://github.com/tangle-network/agent-integrations#readme",
   "repository": {
@@ -34,6 +34,21 @@
       "import": "./dist/connectors/index.js",
       "default": "./dist/connectors/index.js"
     },
+    "./connectors/oauth": {
+      "types": "./dist/connectors/oauth.d.ts",
+      "import": "./dist/connectors/oauth.js",
+      "default": "./dist/connectors/oauth.js"
+    },
+    "./hub": {
+      "types": "./dist/hub.d.ts",
+      "import": "./dist/hub.js",
+      "default": "./dist/hub.js"
+    },
+    "./sandbox": {
+      "types": "./dist/sandbox.d.ts",
+      "import": "./dist/sandbox.js",
+      "default": "./dist/sandbox.js"
+    },
     "./connectors/adapters": {
       "types": "./dist/connectors/adapters/index.d.ts",
       "import": "./dist/connectors/adapters/index.js",
@@ -146,7 +161,7 @@
   "license": "MIT",
   "dependencies": {
     "@duckdb/node-api": "1.5.5-r.5",
-    "@ph0ny/sdk": "0.1.2",
+    "@ph0ny/sdk": "0.1.3",
     "amqplib": "2.1.0",
     "csv-parse": "7.0.3",
     "csv-stringify": "6.9.0",