@to11ai/sdk 2.0.0-rc.2 → 2.0.0-rc.4

package/dist/prompts/types.d.ts

@@ -9,13 +9,12 @@ export type PromptStatus = Prompt["status"];
 export type PromptVersion = GenPromptVersion;
 export type PromptFormat = PromptVersion["format"];
 export type PromptLabelPointer = GenPromptLabelPointer;
-export type TextChatRole = "system" | "user" | "assistant" | "developer";
-export interface TextChatMessage {
-    role: TextChatRole;
+export type ChatRole = "system" | "user" | "assistant" | "developer";
+export interface ChatMessage {
+    role: ChatRole;
     content: string;
     disabled?: boolean;
 }
-export type ChatMessage = TextChatMessage;
 export type RenderedChatMessage = GenRenderedChatPrompt["messages"][number];
 /** Provider shape for `prompts.render()` output. Omit for the neutral result. */
 export type RenderFormat = "openai" | "anthropic";
@@ -50,7 +49,7 @@ export interface PaginatedResult<T> {
     pagination: PaginationInfo;
 }
 export interface CreatePromptInput {
-    projectId: string;
+    projectId?: string;
     name: string;
     slug: string;
     description?: string;
@@ -58,7 +57,7 @@ export interface CreatePromptInput {
 }
 export type CreatePromptResult = Prompt;
 export interface ListPromptsInput {
-    projectId: string;
+    projectId?: string;
     status?: PromptStatus;
     sortBy?: "createdAt" | "updatedAt" | "name";
     tags?: string;
@@ -67,12 +66,12 @@ export interface ListPromptsInput {
 }
 export type ListPromptsResult = Prompt;
 export interface GetPromptInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
 }
 export type GetPromptResult = Prompt;
 export interface UpdatePromptInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
     name?: string;
     description?: string | null;
@@ -80,12 +79,12 @@ export interface UpdatePromptInput {
 }
 export type UpdatePromptResult = Prompt;
 export interface ArchivePromptInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
 }
 export type ArchivePromptResult = Prompt;
 export interface CreatePromptVersionInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
     format: PromptFormat;
     templateJson: unknown;
@@ -95,18 +94,18 @@ export interface CreatePromptVersionInput {
 }
 export type CreatePromptVersionResult = PromptVersion;
 export interface ListPromptVersionsInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
 }
 export type ListPromptVersionsResult = PromptVersion[];
 export interface GetPromptVersionInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
     versionNumber: number;
 }
 export type GetPromptVersionResult = PromptVersion;
 export interface MovePromptLabelInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
     label: string;
     versionId: string;
@@ -114,10 +113,17 @@ export interface MovePromptLabelInput {
 }
 export type MovePromptLabelResult = PromptLabelPointer;
 export interface ListPromptLabelsInput {
-    projectId: string;
+    projectId?: string;
     promptId: string;
 }
 export type ListPromptLabelsResult = PromptLabelPointer[];
+/**
+ * Slug rule for a `render()` label — lowercase-kebab, 1-63 chars. Env slugs are
+ * a special case of a label value, so labels are held to the same strict rule
+ * (no uppercase, no underscores): a label is a routing key, and case-insensitive
+ * routing keys invite silent "production" vs "Production" mismatches. Intentionally
+ * strict — do not loosen.
+ */
 export declare const ENV_SLUG_REGEX: RegExp;
 export type BlockRenderRecord = Record<string, "rendered" | "dimmed">;
 export interface RenderedPrompt {
@@ -164,19 +170,17 @@ export interface RenderedPrompt {
      */
     toolChoice?: NonNullable<ResolvedPrompt["toolChoice"]>;
 }
-export type ResolvedPromptEnvelope = GenResolvedPrompt & {
-    /** Active release strategy. Used to decide weighted-no-subject cache bypass (D8). */
-    strategy?: "single" | "weighted";
-};
+export type ResolvedPromptEnvelope = GenResolvedPrompt;
 export interface RenderOptions {
-    /** Serving environment for this call; overrides the client default. */
-    env?: string;
+    /**
+     * Label to resolve this call's prompt version; overrides the client default.
+     * When omitted, falls back to the client's `env` (env is a label value).
+     */
+    label?: string;
     /** Stable id so a weighted release sends the same caller to the same variant. */
     subject?: string;
     variables?: Record<string, unknown>;
-    /** Set false to bypass the LRU cache for this call. Default: true */
-    cache?: boolean;
-    /** Prompt served if the API is unreachable on a network error and cache is empty. */
+    /** Prompt served if the API is unreachable on a network error. */
     fallback?: RenderedPrompt;
     /** Provider shape for this call's output; overrides the client default. */
     format?: RenderFormat;
@@ -192,13 +196,13 @@ export type ProjectPromptLabel = GenProjectPromptLabel;
 export type ProjectPromptLabelUsage = GenProjectPromptLabelUsage;
 export type PromptLabelEvent = GenPromptLabelEvent;
 export interface ListProjectPromptLabelsInput {
-    projectId: string;
+    projectId?: string;
     /** Set true to include archived (soft-deleted) entries. Default: false. */
     includeArchived?: boolean;
 }
 export type ListProjectPromptLabelsResult = ProjectPromptLabel[];
 export interface CreateProjectPromptLabelInput {
-    projectId: string;
+    projectId?: string;
     label: string;
     isDefault?: boolean;
     description?: string;
@@ -206,12 +210,12 @@ export interface CreateProjectPromptLabelInput {
 }
 export type CreateProjectPromptLabelResult = ProjectPromptLabel;
 export interface GetProjectPromptLabelInput {
-    projectId: string;
+    projectId?: string;
     label: string;
 }
 export type GetProjectPromptLabelResult = ProjectPromptLabel;
 export interface UpdateProjectPromptLabelInput {
-    projectId: string;
+    projectId?: string;
     label: string;
     isDefault?: boolean;
     description?: string | null;
@@ -219,18 +223,18 @@ export interface UpdateProjectPromptLabelInput {
 }
 export type UpdateProjectPromptLabelResult = ProjectPromptLabel;
 export interface DeleteProjectPromptLabelInput {
-    projectId: string;
+    projectId?: string;
     label: string;
 }
 export type DeleteProjectPromptLabelResult = ProjectPromptLabel;
 export interface ListProjectPromptLabelUsagesInput {
-    projectId: string;
+    projectId?: string;
     label: string;
 }
 export type ListProjectPromptLabelUsagesResult = ProjectPromptLabelUsage[];
 export type ListLabelEventsInput = {
     scope: "label";
-    projectId: string;
+    projectId?: string;
     promptId: string;
     label: string;
     page?: number;
@@ -239,7 +243,7 @@ export type ListLabelEventsInput = {
     until?: string;
 } | {
     scope: "prompt";
-    projectId: string;
+    projectId?: string;
     promptId: string;
     label?: string;
     page?: number;
@@ -248,7 +252,7 @@ export type ListLabelEventsInput = {
     until?: string;
 } | {
     scope: "project";
-    projectId: string;
+    projectId?: string;
     promptId?: string;
     label?: string;
     page?: number;

package/dist/transport.d.ts

@@ -1,11 +1,7 @@
 import type { BehaviorStore } from "./behaviors/store";
-export type AuthConfig = {
+export interface AuthConfig {
     readonly apiKey: string;
-    readonly getAccessToken?: never;
-} | {
-    readonly getAccessToken: () => Promise<string>;
-    readonly apiKey?: never;
-};
+}
 export interface TransportConfig {
     readonly baseUrl: string;
     readonly auth: AuthConfig;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@to11ai/sdk",
-	"version": "2.0.0-rc.2",
+	"version": "2.0.0-rc.4",
 	"license": "MPL-2.0",
 	"repository": {
 		"type": "git",
@@ -44,14 +44,6 @@
 			"require": "./dist/projectEnvironments/resource.cjs",
 			"default": "./dist/projectEnvironments/resource.js"
 		},
-		"./routingRules": {
-			"types": "./dist/routingRules/resource.d.ts",
-			"bun": "./src/routingRules/resource.ts",
-			"deno": "./src/routingRules/resource.ts",
-			"import": "./dist/routingRules/resource.js",
-			"require": "./dist/routingRules/resource.cjs",
-			"default": "./dist/routingRules/resource.js"
-		},
 		"./errors": {
 			"types": "./dist/errors.d.ts",
 			"bun": "./src/errors.ts",
@@ -75,8 +67,8 @@
 	"scripts": {
 		"build": "bun run build:clean && bun run build:esm && bun run build:cjs && bun run build:types",
 		"build:clean": "rm -rf dist",
-		"build:esm": "bun build src/client.ts src/prompts/resource.ts src/projectEnvironments/resource.ts src/routingRules/resource.ts src/errors.ts src/gateway.ts --outdir dist --target node --format esm --external '*'",
-		"build:cjs": "bun build src/client.ts src/prompts/resource.ts src/projectEnvironments/resource.ts src/routingRules/resource.ts src/errors.ts src/gateway.ts --outdir dist --target node --format cjs --external '*' --entry-naming '[dir]/[name].cjs'",
+		"build:esm": "bun build src/client.ts src/prompts/resource.ts src/projectEnvironments/resource.ts src/errors.ts src/gateway.ts --outdir dist --target node --format esm --external '*'",
+		"build:cjs": "bun build src/client.ts src/prompts/resource.ts src/projectEnvironments/resource.ts src/errors.ts src/gateway.ts --outdir dist --target node --format cjs --external '*' --entry-naming '[dir]/[name].cjs'",
 		"build:types": "tsc -p tsconfig.build.json",
 		"prepack": "bun run build",
 		"codegen": "openapi-ts",

package/src/client.ts

@@ -8,46 +8,30 @@ import {
 } from "./context";
 import { gatewayAuthHeaders } from "./gateway";
 import { ProjectEnvironmentResource } from "./projectEnvironments/resource";
-import type { CacheConfig } from "./prompts/cache";
 import { PromptResource } from "./prompts/resource";
 import {
 	ENV_SLUG_REGEX,
 	type RenderFormat,
 	type UnknownRoleMode,
 } from "./prompts/types";
-import { RoutingRulesResource } from "./routingRules/resource";
 import { Transport } from "./transport";
 
-// SDK-behavior delivery (TO11-2100): the resolution store + helpers.
-export {
-	BehaviorStore,
-	type BehaviorStoreOptions,
-	envVarNameForKey,
-	type SdkBehaviorEnvelope,
-} from "./behaviors/store";
 export type { TurnAuthContext } from "./context";
 export { Conversation, Session, Turn } from "./context";
 // Re-export all error types for convenience
 export type {
-	AmbiguousEnvLabelsReason,
-	EnvNotFoundReason,
 	NoActiveReleaseReason,
-	NoApplicableRouteReason,
 	PromptNotFoundReason,
 	PromptPolicyViolationReason,
 } from "./errors";
 export {
 	// TO11-980 (S9) prompt-resolution typed errors.
-	AmbiguousEnvLabelsError,
-	EnvNotEnabledForProviderError,
-	EnvNotFoundError,
+	LabelNotFoundError,
+	MissingLabelError,
 	NoActiveReleaseError,
-	NoApplicableRouteError,
 	PromptLabelNotRegisteredError,
 	PromptNotFoundError,
 	PromptPolicyViolationError,
-	RuleNotFoundError,
-	RuleVersionInvalidSnapshotError,
 	To11aiApiError,
 	To11aiAuthError,
 	To11aiError,
@@ -75,7 +59,6 @@ export type {
 	UpdateProjectEnvironmentResult,
 } from "./projectEnvironments/resource";
 export { ProjectEnvironmentResource } from "./projectEnvironments/resource";
-export type { CacheConfig } from "./prompts/cache";
 export type { PromptResourceConfig } from "./prompts/resource";
 export { PromptResource } from "./prompts/resource";
 export type {
@@ -92,42 +75,9 @@ export type {
 	RenderedPrompt,
 	RenderFormat,
 	RenderOptions,
-	ResolvedPrompt,
-	ResolvedPromptEnvelope,
 	UnknownRoleMode,
 } from "./prompts/types";
 export { ENV_SLUG_REGEX } from "./prompts/types";
-export type {
-	CreateRuleVersionInput,
-	CreateRuleVersionResult,
-	GetRuleVersionInput,
-	GetRuleVersionResult,
-	ListRuleReleasesInput,
-	ListRuleReleasesResult,
-	ListRuleVersionsInput,
-	ListRuleVersionsResult,
-	RollbackRuleReleaseInput,
-	RollbackRuleReleaseResult,
-	RuleModelBinding,
-	RuleProviderRef,
-	RuleRelease,
-	RuleReleaseActorType,
-	RuleReleaseApprovalStatus,
-	RuleReleaseChangeKind,
-	RuleReleaseStrategy,
-	RuleReleaseWeight,
-	RuleSnapshot,
-	RuleStrategy,
-	RuleVersion,
-	SetRuleReleaseInput,
-	SetRuleReleaseResult,
-} from "./routingRules/resource";
-export {
-	RoutingRuleReleaseResource,
-	RoutingRulesResource,
-	RoutingRuleVersionResource,
-} from "./routingRules/resource";
-export type { Transport } from "./transport";
 
 // ─── Client options ────────────────────────────────────────────────────────
 
@@ -143,12 +93,11 @@ export interface ClientOptions {
 	 */
 	gatewayUrl?: string;
 	/**
-	 * API key for server-side use. Precedence: this option → `TO11_API_KEY` env.
-	 * Rejected in browser contexts — use `getAccessToken` there.
+	 * API key for server-side use (server, CLI, backend job). Precedence: this
+	 * option → `TO11_API_KEY` env. Required. Rejected in browser contexts — a
+	 * to11 API key carries gateway access and must never ship in client code.
 	 */
 	apiKey?: string;
-	/** Token callback for browser / edge contexts — avoids static secrets. */
-	getAccessToken?: () => Promise<string>;
 	/**
 	 * Provider API key (BYOK) carried by `openaiOptions()` / `anthropicOptions()`
 	 * as the provider client's `apiKey`, so a BYOK call is a single
@@ -183,17 +132,10 @@ export interface ClientOptions {
 	 * via `render(slug, { onUnknownRole })`.
 	 */
 	onUnknownRole?: UnknownRoleMode;
-	/** LRU cache configuration for render(). Defaults: ttlSeconds=300, maxEntries=100 */
-	cache?: CacheConfig;
 	/** Request timeout in milliseconds. Default: 30_000 */
 	timeoutMs?: number;
 	/** Max retry attempts for network errors / 5xx. Default: 3 */
 	maxRetries?: number;
-	/**
-	 * Purely local overrides for server-evaluated SDK-behavior flags (TO11-2100).
-	 * An init option here wins over a `TO11_SDK_BEHAVIOR_*` env var. No LaunchDarkly.
-	 */
-	behaviorOverrides?: Record<string, unknown>;
 }
 
 // ─── Provider-client options (openaiOptions / anthropicOptions) ─────────────
@@ -230,21 +172,23 @@ export type ProviderClientOptions<
 export interface To11aiClient<F extends RenderFormat | undefined = undefined> {
 	readonly prompts: PromptResource<F>;
 	readonly projectEnvironments: ProjectEnvironmentResource;
-	readonly routingRules: RoutingRulesResource;
-	/**
-	 * Resolve a server-evaluated SDK-behavior flag value (TO11-2100) under the
-	 * fixed precedence: local override (init option → `TO11_SDK_BEHAVIOR_*` env
-	 * var) → server-delivered value (captured from responses the client has
-	 * already made) → the `codedDefault` passed here. A value whose runtime type
-	 * disagrees with `codedDefault` falls through to the next tier. The SDK
-	 * carries no LaunchDarkly dependency; this only reads what the server
-	 * delivered on the envelope.
-	 */
-	readonly resolveBehavior: <T>(key: string, codedDefault: T) => T;
-	/** Resolved API key (server mode); `undefined` in browser (`getAccessToken`) mode. */
-	readonly apiKey: string | undefined;
+	/** Resolved API key (option → `TO11_API_KEY`). */
+	readonly apiKey: string;
+	/** Resolved control-plane base URL (option → `TO11_API_URL` → default). */
+	readonly baseUrl: string;
 	/** Resolved data-plane gateway URL (option → `TO11_GATEWAY_URL` → default). */
 	readonly gatewayUrl: string;
+	/**
+	 * Resolved project id (option → `TO11_PROJECT_ID`); `undefined` when none is
+	 * configured. Read-only, for your own logging / manual headers — `prompts.*`
+	 * already default to it, so you don't need to pass it back into calls.
+	 */
+	readonly projectId: string | undefined;
+	/**
+	 * Resolved default serving environment (option → `TO11_ENV`); `undefined`
+	 * when none is configured. `prompts.render()` already defaults to it.
+	 */
+	readonly env: string | undefined;
 	/** A new session (unit of work). Pass an id to group telemetry by your own id. */
 	session(id?: string): Session;
 	/**
@@ -293,9 +237,8 @@ export interface To11aiClient<F extends RenderFormat | undefined = undefined> {
  *  - URLs (`baseUrl` / `gatewayUrl`) — option → env var → built-in default.
  *  - `apiKey` / `projectId` — option → env var (no default).
  *  - `env` / `format` — option only.
- * Auth mode:
- *  - `apiKey` (or `TO11_API_KEY`) → server-side; rejected in browser contexts.
- *  - `getAccessToken`             → browser-safe; token fetched per request.
+ * Authenticate with `apiKey` (or `TO11_API_KEY`) — required, and server-side
+ * only (server, CLI, backend job); constructing with `apiKey` in a browser throws.
  *
  * @example Minimal setup (single call)
  * import { createClient } from "@to11ai/sdk";
@@ -365,15 +308,7 @@ export function createClient<
 	)
 		.replace(/\/+$/, "")
 		.replace(/\/v1$/, "");
-	const getAccessToken = options.getAccessToken;
-	// Explicit token auth suppresses an ambient `TO11_API_KEY` so a shared env
-	// (SSR / CI / edge) can't defeat an explicit `getAccessToken`. Only an
-	// *explicit* `options.apiKey` alongside `getAccessToken` stays ambiguous and
-	// is rejected by the exactly-one check below.
-	const apiKey =
-		getAccessToken !== undefined
-			? options.apiKey
-			: pick(options.apiKey, "TO11_API_KEY");
+	const apiKey = pick(options.apiKey, "TO11_API_KEY");
 	const projectId = pick(options.projectId, "TO11_PROJECT_ID");
 	// Default serving env: explicit option → `TO11_ENV` env var — the same
 	// `pick(option, "TO11_*")` resolution `apiKey`/`projectId` use (empty option
@@ -389,7 +324,7 @@ export function createClient<
 	// undefined in the browser, so only the explicit option can reach here.
 	if (isBrowser && options.apiKey !== undefined) {
 		throw new Error(
-			"[to11ai/sdk] Do not use `apiKey` in browser contexts — use `getAccessToken` instead.",
+			"[to11ai/sdk] Do not use `apiKey` in a browser — a to11 API key carries gateway access and must stay server-side (server, CLI, or backend job).",
 		);
 	}
 
@@ -416,23 +351,19 @@ export function createClient<
 		);
 	}
 
-	// Exactly one auth source after resolution.
-	const hasApiKey = apiKey !== undefined;
-	const hasGetAccessToken = getAccessToken !== undefined;
-	if (hasApiKey === hasGetAccessToken) {
+	// `apiKey` is the only auth source and is required.
+	if (apiKey === undefined) {
 		throw new Error(
-			"[to11ai/sdk] Provide exactly one of `apiKey` (or `TO11_API_KEY`) or `getAccessToken`.",
+			"[to11ai/sdk] An `apiKey` (or `TO11_API_KEY`) is required.",
 		);
 	}
 
-	const auth = hasApiKey
-		? ({ apiKey: apiKey as string } as const)
-		: ({ getAccessToken: getAccessToken as () => Promise<string> } as const);
+	const auth = { apiKey } as const;
 
-	const behaviorStore = new BehaviorStore({
-		initOverrides: options.behaviorOverrides,
-		env: processEnv,
-	});
+	// The SDK-behavior store (TO11-2100) still captures any server-delivered
+	// flags off responses, but the public `resolveBehavior` accessor is hidden
+	// for the 2.0 surface — kept internal so it can be re-exposed step by step.
+	const behaviorStore = new BehaviorStore({ env: processEnv });
 
 	const transport = new Transport({
 		baseUrl,
@@ -442,24 +373,18 @@ export function createClient<
 		behaviorStore,
 	});
 
-	const prompts = new PromptResource<F>(transport, options.cache, {
+	const prompts = new PromptResource<F>(transport, {
 		projectId,
 		env,
 		format: options.format,
 		onUnknownRole: options.onUnknownRole,
 	});
 	const projectEnvironments = new ProjectEnvironmentResource(transport);
-	const routingRules = new RoutingRulesResource(transport);
 
 	// ── Gateway observability context (session → conversation → turn) ──
-	// These build gateway auth headers, so they require a server-side apiKey +
-	// projectId; fail loudly rather than emit a broken header bag.
+	// These build gateway auth headers, so they require a projectId; fail loudly
+	// rather than emit a broken header bag.
 	const gatewayAuthContext = (): TurnAuthContext => {
-		if (apiKey === undefined) {
-			throw new Error(
-				"[to11ai/sdk] session()/turn()/openaiOptions() need an `apiKey` (or `TO11_API_KEY`) — gateway calls require a server-side key. In the browser use `getAccessToken` for control-plane calls only.",
-			);
-		}
 		if (projectId === undefined) {
 			throw new Error(
 				"[to11ai/sdk] session()/turn() need a `projectId` (or `TO11_PROJECT_ID`).",
@@ -490,11 +415,6 @@ export function createClient<
 		defaultBaseURL: string,
 		overrides?: T,
 	): ProviderClientOptions<T> => {
-		if (apiKey === undefined) {
-			throw new Error(
-				"[to11ai/sdk] openaiOptions()/anthropicOptions() need an `apiKey` (or `TO11_API_KEY`) — gateway calls require a server-side key. In the browser use `getAccessToken` for control-plane calls only.",
-			);
-		}
 		if (projectId === undefined) {
 			throw new Error(
 				"[to11ai/sdk] openaiOptions()/anthropicOptions() need a `projectId` (or `TO11_PROJECT_ID`) — it authenticates the gateway call via `x-to11-project-id`.",
@@ -524,11 +444,11 @@ export function createClient<
 	return {
 		prompts,
 		projectEnvironments,
-		routingRules,
-		resolveBehavior: (key, codedDefault) =>
-			behaviorStore.resolve(key, codedDefault),
 		apiKey,
+		baseUrl,
 		gatewayUrl,
+		projectId,
+		env,
 		session: (id) => new Session(gatewayAuthContext(), id),
 		conversation: (id) => clientDefaultSession().conversation(id),
 		turn: () => clientDefaultSession().turn(),

package/src/context.ts

@@ -49,10 +49,6 @@ function newId(): string {
 	return crypto.randomUUID();
 }
 
-function provenanceOf(prompt: PromptForHeaders): GatewayPromptProvenance {
-	return "metadata" in prompt ? prompt.metadata : prompt;
-}
-
 /**
  * One agent turn — a single trace. A turn's `traceparent` is fixed for its
  * lifetime, so every LLM-call made under it groups into one trace.
@@ -105,7 +101,9 @@ export class Turn {
 			traceparent: this.traceparent,
 		};
 		if (prompt !== undefined) {
-			Object.assign(headers, gatewayPromptHeaders(provenanceOf(prompt)));
+			// gatewayPromptHeaders accepts a RenderedPrompt or a format-shaped
+			// result and unwraps `metadata` itself.
+			Object.assign(headers, gatewayPromptHeaders(prompt));
 		}
 		return headers;
 	}