@tokenite/sdk 1.0.1 → 2.0.1

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 Eran Broder
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 Eran Broder
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,173 +1,174 @@
-# @tokenite/sdk
-
-One wallet for all your AI apps. Users store their Anthropic, OpenAI, and Google API keys in Tokenite, then grant your app metered access via OAuth. You pay nothing for AI usage.
-
-## Install
-
-```bash
-npm install @tokenite/sdk
-```
-
-## Quick Start
-
-```typescript
-import { Tokenite, isProxyError } from '@tokenite/sdk';
-
-const tw = Tokenite({
-  clientId: 'your-app-id',
-  clientSecret: 'your-app-secret',
-  redirectUri: 'https://yourapp.com/callback',
-});
-
-// 1. Redirect the user to the consent screen
-app.get('/login', (req, res) => res.redirect(tk.getAuthorizeUrl()));
-
-// 2. Exchange the OAuth code for an access token in your callback
-app.get('/callback', async (req, res) => {
-  const { access_token } = await tk.exchangeCode(req.query.code as string);
-  req.session.tokeniteToken = access_token;
-  res.redirect('/');
-});
-
-// 3. Call the LLM through the proxy
-app.post('/chat', async (req, res) => {
-  const result = await tk.call({
-    accessToken: req.session.tokeniteToken,
-    provider: 'anthropic',
-    path: '/v1/messages',
-    body: {
-      model: 'claude-3-5-sonnet-latest',
-      max_tokens: 1024,
-      messages: [{ role: 'user', content: req.body.prompt }],
-    },
-  });
-
-  if (isProxyError(result)) {
-    return res.status(400).json({ error: result.error });
-  }
-
-  res.json({ model: result.model, usage: result.usage, data: result.data });
-});
-```
-
-The same `tk.call(...)` works for OpenAI and Google — change `provider` and `path`:
-
-```typescript
-await tk.call({
-  accessToken,
-  provider: 'openai',
-  path: '/v1/chat/completions',
-  body: { model: 'gpt-4o', messages: [...] },
-});
-
-await tk.call({
-  accessToken,
-  provider: 'google',
-  path: '/v1beta/models/gemini-1.5-pro:generateContent',
-  body: { contents: [...] },
-});
-```
-
-### Modal flow (single-page apps)
-
-If your app is a SPA, open the consent screen in an iframe modal:
-
-```typescript
-const { code } = await tk.popup({ suggestedBudget: 5 });
-
-// Send the code to your backend, which calls tk.exchangeCode(code).
-// The exchange requires clientSecret and must never run in browser code.
-await fetch('/api/auth/exchange', {
-  method: 'POST',
-  body: JSON.stringify({ code }),
-});
-```
-
-### Managed agents (Anthropic)
-
-Tokenite proxies Anthropic's [Managed Agents](https://platform.claude.com/docs/en/managed-agents/overview) surface — the `/v1/agents`, `/v1/environments`, `/v1/sessions`, `/v1/vaults`, and `/v1/files` endpoints — under the same BYOK model as Messages. The app points the Anthropic SDK at `tk.proxyUrl('anthropic')`; the proxy injects the managed-agents beta header and forwards calls to the user's Anthropic org.
-
-**Explicit consent required.** Because agent sessions run long-lived, billable server-side work on Anthropic (`$0.08/hr` session runtime on top of tokens), the proxy rejects agent-surface calls unless the app was created with `allowsManagedAgents: true`. The flag sits alongside the other app fields on creation:
-
-```typescript
-await admin.apps.create({
-  name: 'Life Coach',
-  callbackUrl: 'https://lifecoach.ai/callback',
-  requiredProviders: ['anthropic'],
-  allowsManagedAgents: true,          // ← opt in
-});
-```
-
-Without it, every agent endpoint returns `403 AGENT_SCOPE_MISSING`.
-
-```typescript
-import Anthropic from '@anthropic-ai/sdk';
-
-const anthropic = new Anthropic({
-  apiKey: accessToken,
-  baseURL: tk.proxyUrl('anthropic'),
-});
-
-// Provision once per user.
-const agent = await anthropic.beta.agents.create({
-  name: 'Life Coach',
-  model: 'claude-haiku-4-5',
-  system: 'You are a terse life coach.',
-  tools: [{ type: 'agent_toolset_20260401' }],
-});
-
-// Spin up a session.
-const env = await anthropic.beta.environments.create({ name: 'prod' });
-const session = await anthropic.beta.sessions.create({
-  agent: agent.id,
-  environment_id: env.id,
-});
-
-// Send events, stream responses — all proxied.
-await anthropic.beta.sessions.events.post(session.id, {
-  type: 'user.message', content: 'What should I focus on today?',
-});
-
-for await (const event of anthropic.beta.sessions.events.stream(session.id)) {
-  // ...
-}
-
-// Archive when done. This is what triggers Tokenite to pull the final
-// usage totals from Anthropic and debit tokens + runtime against the budget.
-await anthropic.beta.sessions.archive(session.id);
-```
-
-Tokenite tracks each session for attribution and auto-terminates running sessions when the user revokes the connection — otherwise Anthropic would keep billing `$0.08/hr` for the session runtime on top of tokens. The proxy bills the user's wallet at archive time using Anthropic's reported cumulative usage and runtime, plus the standard token rate from the model's pricing.
-
-Budget is checked pre-call but not enforced mid-session: a session that started under budget can run past it. Revoke is the user's hard kill switch.
-
-### Streaming responses
-
-`tk.call()` is for non-streaming requests. Streaming responses bypass the unified envelope and are forwarded as-is, so use any vendor SDK with `baseURL: tk.proxyUrl(...)`:
-
-```typescript
-import Anthropic from '@anthropic-ai/sdk';
-
-const anthropic = new Anthropic({
-  apiKey: accessToken,
-  baseURL: tk.proxyUrl('anthropic'),
-});
-
-const stream = await anthropic.messages.stream({
-  model: 'claude-3-5-sonnet-latest',
-  max_tokens: 1024,
-  messages: [{ role: 'user', content: 'Tell me a story.' }],
-});
-
-for await (const event of stream) {
-  if (event.type === 'content_block_delta' && event.delta.type === 'text_delta') {
-    process.stdout.write(event.delta.text);
-  }
-}
-```
-
-## API
-
+# @tokenite/sdk
+
+One wallet for all your AI apps. Users store their Anthropic, OpenAI, and Google API keys in Tokenite, then grant your app metered access via OAuth. You pay nothing for AI usage.
+
+## Install
+
+```bash
+npm install @tokenite/sdk
+```
+
+## Quick Start
+
+```typescript
+import { Tokenite, isProxyError } from '@tokenite/sdk';
+
+const tw = Tokenite({
+  clientId: 'your-app-id',
+  clientSecret: 'your-app-secret',
+  redirectUri: 'https://yourapp.com/callback',
+});
+
+// 1. Redirect the user to the consent screen
+app.get('/login', (req, res) => res.redirect(tk.getAuthorizeUrl()));
+
+// 2. Exchange the OAuth code for an access token in your callback
+app.get('/callback', async (req, res) => {
+  const { access_token } = await tk.exchangeCode(req.query.code as string);
+  req.session.tokeniteToken = access_token;
+  res.redirect('/');
+});
+
+// 3. Call the LLM through the proxy
+app.post('/chat', async (req, res) => {
+  const result = await tk.call({
+    accessToken: req.session.tokeniteToken,
+    provider: 'anthropic',
+    path: '/v1/messages',
+    body: {
+      model: 'claude-3-5-sonnet-latest',
+      max_tokens: 1024,
+      messages: [{ role: 'user', content: req.body.prompt }],
+    },
+  });
+
+  if (isProxyError(result)) {
+    return res.status(400).json({ error: result.error });
+  }
+
+  res.json({ model: result.model, usage: result.usage, data: result.data });
+});
+```
+
+The same `tk.call(...)` works for OpenAI and Google — change `provider` and `path`:
+
+```typescript
+await tk.call({
+  accessToken,
+  provider: 'openai',
+  path: '/v1/chat/completions',
+  body: { model: 'gpt-4o', messages: [...] },
+});
+
+await tk.call({
+  accessToken,
+  provider: 'google',
+  path: '/v1beta/models/gemini-1.5-pro:generateContent',
+  body: { contents: [...] },
+});
+```
+
+### Modal flow (single-page apps)
+
+If your app is a SPA, open the consent screen in an iframe modal:
+
+```typescript
+const { code } = await tk.popup({ suggestedBudget: 5 });
+
+// Send the code to your backend, which calls tk.exchangeCode(code).
+// The exchange requires clientSecret and must never run in browser code.
+await fetch('/api/auth/exchange', {
+  method: 'POST',
+  body: JSON.stringify({ code }),
+});
+```
+
+### Managed agents (Anthropic)
+
+Tokenite proxies Anthropic's [Managed Agents](https://platform.claude.com/docs/en/managed-agents/overview) surface — the `/v1/agents`, `/v1/environments`, `/v1/sessions`, `/v1/vaults`, `/v1/files`, and `/v1/skills` endpoints — under the same BYOK model as Messages. The app points the Anthropic SDK at `tk.proxyUrl('anthropic')`; the proxy injects the right beta header per surface (`managed-agents-2026-04-01` for agents/environments/sessions/vaults, `files-api-2025-04-14` for files, `skills-2025-10-02` for skills) and forwards calls to the user's Anthropic org. Client-supplied `anthropic-beta` headers are passed through and merged with the auto-injected ones, so callers can opt into additional betas (e.g. multi-version skills) without losing the proxy-managed defaults.
+
+**Explicit consent required.** Because agent sessions run long-lived, billable server-side work on Anthropic (`$0.08/hr` session runtime on top of tokens), the proxy rejects agent-surface calls unless the app was created with `allowsManagedAgents: true`. The flag sits alongside the other app fields on creation:
+
+```typescript
+await admin.apps.create({
+  name: 'Life Coach',
+  callbackUrl: 'https://lifecoach.ai/callback',
+  modelStrategy: 'models',
+  allowedModels: ['claude-opus-4-7', 'claude-sonnet-4-6'],
+  allowsManagedAgents: true,          // ← opt in
+});
+```
+
+Without it, every agent endpoint returns `403 AGENT_SCOPE_MISSING`.
+
+```typescript
+import Anthropic from '@anthropic-ai/sdk';
+
+const anthropic = new Anthropic({
+  apiKey: accessToken,
+  baseURL: tk.proxyUrl('anthropic'),
+});
+
+// Provision once per user.
+const agent = await anthropic.beta.agents.create({
+  name: 'Life Coach',
+  model: 'claude-haiku-4-5',
+  system: 'You are a terse life coach.',
+  tools: [{ type: 'agent_toolset_20260401' }],
+});
+
+// Spin up a session.
+const env = await anthropic.beta.environments.create({ name: 'prod' });
+const session = await anthropic.beta.sessions.create({
+  agent: agent.id,
+  environment_id: env.id,
+});
+
+// Send events, stream responses — all proxied.
+await anthropic.beta.sessions.events.post(session.id, {
+  type: 'user.message', content: 'What should I focus on today?',
+});
+
+for await (const event of anthropic.beta.sessions.events.stream(session.id)) {
+  // ...
+}
+
+// Archive when done. This is what triggers Tokenite to pull the final
+// usage totals from Anthropic and debit tokens + runtime against the budget.
+await anthropic.beta.sessions.archive(session.id);
+```
+
+Tokenite tracks each session for attribution and auto-terminates running sessions when the user revokes the connection — otherwise Anthropic would keep billing `$0.08/hr` for the session runtime on top of tokens. The proxy bills the user's wallet at archive time using Anthropic's reported cumulative usage and runtime, plus the standard token rate from the model's pricing.
+
+Budget is checked pre-call but not enforced mid-session: a session that started under budget can run past it. Revoke is the user's hard kill switch.
+
+### Streaming responses
+
+`tk.call()` is for non-streaming requests. Streaming responses bypass the unified envelope and are forwarded as-is, so use any vendor SDK with `baseURL: tk.proxyUrl(...)`:
+
+```typescript
+import Anthropic from '@anthropic-ai/sdk';
+
+const anthropic = new Anthropic({
+  apiKey: accessToken,
+  baseURL: tk.proxyUrl('anthropic'),
+});
+
+const stream = await anthropic.messages.stream({
+  model: 'claude-3-5-sonnet-latest',
+  max_tokens: 1024,
+  messages: [{ role: 'user', content: 'Tell me a story.' }],
+});
+
+for await (const event of stream) {
+  if (event.type === 'content_block_delta' && event.delta.type === 'text_delta') {
+    process.stdout.write(event.delta.text);
+  }
+}
+```
+
+## API
+
 <!-- GEN:API -->
 ### `.getAuthorizeUrl(options?: AuthorizeOptions) => string`
 
@@ -196,259 +197,274 @@ The Tokenite dashboard base URL
 ### `.proxyBase`: `string`
 
 The Tokenite proxy base URL
-<!-- /GEN:API -->
-
-## Types
-
+<!-- /GEN:API -->
+
+## Types
+
 <!-- GEN:TYPES -->
 ```typescript
-export type TokeniteConfig = {
-  /** Your app's client ID (from the Tokenite dashboard) */
-  readonly clientId: string;
-  /** Your app's client secret — only needed for server-side code exchange */
-  readonly clientSecret?: string;
-  /** The URL Tokenite redirects back to after authorization */
-  readonly redirectUri: string;
-  /** Tokenite base URL. Default: https://tokenite.ai */
-  readonly baseUrl?: string;
-  /** Tokenite proxy URL. Default: https://api.tokenite.ai */
-  readonly proxyUrl?: string;
-};
-
-export type AuthorizeOptions = {
-  /** Custom state parameter for CSRF protection. Auto-generated if not provided. */
-  readonly state?: string;
-  /** Suggested budget amount (user can override on consent screen) */
-  readonly suggestedBudget?: number;
-};
-
-export type PopupOptions = {
-  /** Suggested budget amount (user can override on consent screen) */
-  readonly suggestedBudget?: number;
-  /**
-   * How to host the consent screen.
-   *
-   * - `'iframe'` (default) — overlay an iframe modal in the current
-   *   window. Requires the dashboard to allow being framed by your
-   *   origin (`Content-Security-Policy: frame-ancestors`). Cleaner UX
-   *   but blocked by `X-Frame-Options: DENY`.
-   * - `'window'` — open a separate browser popup window via
-   *   `window.open`. Works regardless of frame policy, but the user
-   *   may be prompted by their popup blocker.
-   */
-  readonly mode?: 'iframe' | 'window';
-  /** Modal/popup width in pixels. Default: 480 */
-  readonly width?: number;
-  /** Modal/popup height in pixels. Default: 620 */
-  readonly height?: number;
-};
-
-export type PopupResult = {
-  /**
-   * OAuth authorization code returned by the consent screen.
-   * Send this to your backend, which exchanges it for an access token
-   * via `tk.exchangeCode(code)`. The exchange requires `clientSecret`
-   * and must never run in browser code.
-   */
-  readonly code: string;
-};
-
-export type TokenResponse = {
-  readonly access_token: string;
-  readonly token_type: string;
-};
-
-export type Provider = 'anthropic' | 'openai' | 'google' | 'grok' | 'bedrock';
-
-export type ProxyCallOptions = {
-  /** The user's Tokenite access token (returned by `tk.exchangeCode()`) */
-  readonly accessToken: string;
-  /** Which LLM provider to call */
-  readonly provider: Provider;
-  /** Path on the provider's API (e.g. `/v1/messages`, `/v1/chat/completions`) */
-  readonly path: string;
-  /** HTTP method. Default: `POST` */
-  readonly method?: string;
-  /** Request body — the vendor's request shape, JSON-serialised by the SDK */
-  readonly body: unknown;
-};
-
-// ─── Unified proxy response types ───
-//
-// Every non-streaming response from the Tokenite proxy returns one of
-// these shapes. SDK consumers can always check for `.error` to distinguish
-// success from failure — no vendor-specific parsing required.
-
-/** Normalised token counts (identical across all providers) */
-export type ProxyUsage = {
-  /** Number of tokens in the prompt / input */
-  readonly inputTokens: number;
-  /** Number of tokens in the completion / output */
-  readonly outputTokens: number;
-};
-
-/**
- * Successful proxy response.
- *
- * `data` contains the original vendor response body (e.g. Anthropic's
- * message object, OpenAI's chat completion, etc.). `provider`, `model`,
- * and `usage` are extracted and normalised by the proxy so you don't
- * need to parse vendor-specific fields.
- */
-export type ProxySuccess = {
-  /** Which LLM provider handled the request */
-  readonly provider: Provider;
-  /** The model that generated the response */
-  readonly model: string;
-  /** Normalised token usage, or null if the provider didn't report it */
-  readonly usage: ProxyUsage | null;
-  /** The original, unmodified response body from the LLM provider */
-  readonly data: unknown;
-};
-
-/**
- * Where the error originated.
- *
- * - `"proxy"` — Tokenite rejected the request (auth, budget, config).
- * - `"provider"` — The upstream LLM returned an error (rate limit, overload, etc.).
- */
-export type ErrorSource = 'proxy' | 'provider';
-
-/**
- * Error response (both proxy-level and provider-level errors share this shape).
- *
- * **Proxy error codes** (`source: "proxy"`):
- * | Code | HTTP | Description |
- * |---|---|---|
- * | `TOKEN_INVALID` | 401 | Missing or invalid bearer token |
- * | `TOKEN_REVOKED` | 401 | Access token was revoked by the user |
- * | `TOKEN_SUSPENDED` | 403 | Access suspended by the user |
- * | `TOKEN_EXPIRED` | 401 | Access token past its expiration date |
- * | `BUDGET_EXCEEDED` | 402 | Spending reached the user-defined budget limit |
- * | `PROVIDER_KEY_MISSING` | 402 | No API key or credits available for the provider |
- * | `CREDITS_DEPLETED` | 402 | Insufficient platform credits |
- * | `APP_NOT_FOUND` | 404 | Application not found |
- * | `MODEL_NOT_ALLOWED` | 403 | Model not in the app's allowed models list |
- *
- * **Provider error codes** (`source: "provider"`):
- * | Code | HTTP | Description |
- * |---|---|---|
- * | `RATE_LIMITED` | 429 | Upstream rate limit hit — retry after backoff |
- * | `CONTEXT_LENGTH_EXCEEDED` | 400 | Request exceeds model's context window |
- * | `INVALID_REQUEST` | 400 | Provider rejected the request as malformed |
- * | `AUTHENTICATION_FAILED` | 401 | Provider rejected the API key |
- * | `PROVIDER_OVERLOADED` | 503 | Provider temporarily overloaded |
- * | `CONTENT_FILTERED` | 400 | Content blocked by safety filter |
- * | `PROVIDER_TIMEOUT` | 504 | Provider did not respond in time |
- * | `PROVIDER_ERROR` | 502 | Catch-all for other provider errors |
- */
-export type ProxyError = {
-  readonly error: {
-    /** Machine-readable error code */
-    readonly code: string;
-    /** Human-readable description */
-    readonly message: string;
-    /** Where the error originated */
-    readonly source: ErrorSource;
-    /** Optional structured context (e.g. `retryAfter`, `provider`, `providerMessage`) */
-    readonly details?: Record<string, unknown>;
-  };
-};
-
-/** Discriminated union for all non-streaming proxy responses */
-export type ProxyResponse = ProxySuccess | ProxyError;
-
-/** Type guard: returns true if the response is an error */
-export const isProxyError = (response: ProxyResponse): response is ProxyError =>
-  'error' in response;
-
-/** Type guard: returns true if the response is a success */
-export const isProxySuccess = (response: ProxyResponse): response is ProxySuccess =>
-  'provider' in response;
-
-// ─── Access context (tk.getAllowedProviders) ───
-
-/** Visual + identity metadata for a single provider */
-export type ProviderInfo = {
-  /** Stable provider id (same value as the `Provider` union) */
-  readonly id: Provider;
-  /** Human-readable name, e.g. "Anthropic" */
-  readonly displayName: string;
-  /** Brand colour (hex string, e.g. "#d97706") */
-  readonly color: string;
-  /** Absolute URL to the provider's logo (PNG or SVG) */
-  readonly logoUrl: string;
-  /** Whether the logo is a glyph/symbol or a full wordmark */
-  readonly logoStyle: 'symbol' | 'wordmark';
-};
-
-/** Summary of the app the access token belongs to */
-export type AppInfo = {
-  readonly id: string;
-  readonly name: string;
-  readonly description: string | null;
-  readonly websiteUrl: string | null;
-  /** Absolute URL to the app's icon (PNG/SVG). null when the developer hasn't set one — render initials or a generic glyph. */
-  readonly iconUrl: string | null;
-  /** Providers the app declares it needs */
-  readonly requiredProviders: readonly Provider[];
-  /** Fallback order when `allowSubstitution` is true */
-  readonly preferredProviders: readonly Provider[];
-  /** Whether the app accepts substitute providers when a required one isn't available */
-  readonly allowSubstitution: boolean;
-};
-
-/**
- * Full access context for a single access token.
- *
- * `providers` lists only the providers the user has an active key for —
- * exactly the set that will succeed through `tk.call()` (budget permitting).
- */
-export type AllowedProvidersResponse = {
-  readonly app: AppInfo;
-  readonly providers: readonly ProviderInfo[];
+export type TokeniteConfig = {
+  /** Your app's client ID (from the Tokenite dashboard) */
+  readonly clientId: string;
+  /** Your app's client secret — only needed for server-side code exchange */
+  readonly clientSecret?: string;
+  /** The URL Tokenite redirects back to after authorization */
+  readonly redirectUri: string;
+  /** Tokenite base URL. Default: https://tokenite.ai */
+  readonly baseUrl?: string;
+  /** Tokenite proxy URL. Default: https://api.tokenite.ai */
+  readonly proxyUrl?: string;
+};
+
+export type AuthorizeOptions = {
+  /** Custom state parameter for CSRF protection. Auto-generated if not provided. */
+  readonly state?: string;
+  /** Suggested budget amount (user can override on consent screen) */
+  readonly suggestedBudget?: number;
+};
+
+export type PopupOptions = {
+  /** Suggested budget amount (user can override on consent screen) */
+  readonly suggestedBudget?: number;
+  /**
+   * How to host the consent screen.
+   *
+   * - `'iframe'` (default) — overlay an iframe modal in the current
+   *   window. Requires the dashboard to allow being framed by your
+   *   origin (`Content-Security-Policy: frame-ancestors`). Cleaner UX
+   *   but blocked by `X-Frame-Options: DENY`.
+   * - `'window'` — open a separate browser popup window via
+   *   `window.open`. Works regardless of frame policy, but the user
+   *   may be prompted by their popup blocker.
+   */
+  readonly mode?: 'iframe' | 'window';
+  /** Modal/popup width in pixels. Default: 480 */
+  readonly width?: number;
+  /** Modal/popup height in pixels. Default: 620 */
+  readonly height?: number;
+};
+
+export type PopupResult = {
+  /**
+   * OAuth authorization code returned by the consent screen.
+   * Send this to your backend, which exchanges it for an access token
+   * via `tk.exchangeCode(code)`. The exchange requires `clientSecret`
+   * and must never run in browser code.
+   */
+  readonly code: string;
+};
+
+export type TokenResponse = {
+  readonly access_token: string;
+  readonly token_type: string;
+};
+
+export type Provider = 'anthropic' | 'openai' | 'google' | 'grok' | 'bedrock';
+
+export type ProxyCallOptions = {
+  /** The user's Tokenite access token (returned by `tk.exchangeCode()`) */
+  readonly accessToken: string;
+  /** Which LLM provider to call */
+  readonly provider: Provider;
+  /** Path on the provider's API (e.g. `/v1/messages`, `/v1/chat/completions`) */
+  readonly path: string;
+  /** HTTP method. Default: `POST` */
+  readonly method?: string;
+  /** Request body — the vendor's request shape, JSON-serialised by the SDK */
+  readonly body: unknown;
+};
+
+// ─── Unified proxy response types ───
+//
+// Every non-streaming response from the Tokenite proxy returns one of
+// these shapes. SDK consumers can always check for `.error` to distinguish
+// success from failure — no vendor-specific parsing required.
+
+/** Normalised token counts (identical across all providers) */
+export type ProxyUsage = {
+  /** Number of tokens in the prompt / input */
+  readonly inputTokens: number;
+  /** Number of tokens in the completion / output */
+  readonly outputTokens: number;
+};
+
+/**
+ * Successful proxy response.
+ *
+ * `data` contains the original vendor response body (e.g. Anthropic's
+ * message object, OpenAI's chat completion, etc.). `provider`, `model`,
+ * and `usage` are extracted and normalised by the proxy so you don't
+ * need to parse vendor-specific fields.
+ */
+export type ProxySuccess = {
+  /** Which LLM provider handled the request */
+  readonly provider: Provider;
+  /** The model that generated the response */
+  readonly model: string;
+  /** Normalised token usage, or null if the provider didn't report it */
+  readonly usage: ProxyUsage | null;
+  /** The original, unmodified response body from the LLM provider */
+  readonly data: unknown;
+};
+
+/**
+ * Where the error originated.
+ *
+ * - `"proxy"` — Tokenite rejected the request (auth, budget, config).
+ * - `"provider"` — The upstream LLM returned an error (rate limit, overload, etc.).
+ */
+export type ErrorSource = 'proxy' | 'provider';
+
+/**
+ * Error response (both proxy-level and provider-level errors share this shape).
+ *
+ * **Proxy error codes** (`source: "proxy"`):
+ * | Code | HTTP | Description |
+ * |---|---|---|
+ * | `TOKEN_INVALID` | 401 | Missing or invalid bearer token |
+ * | `TOKEN_REVOKED` | 401 | Access token was revoked by the user |
+ * | `TOKEN_SUSPENDED` | 403 | Access suspended by the user |
+ * | `TOKEN_EXPIRED` | 401 | Access token past its expiration date |
+ * | `BUDGET_EXCEEDED` | 402 | Spending reached the user-defined budget limit |
+ * | `PROVIDER_KEY_MISSING` | 402 | No API key or credits available for the provider |
+ * | `CREDITS_DEPLETED` | 402 | Insufficient platform credits |
+ * | `APP_NOT_FOUND` | 404 | Application not found |
+ * | `MODEL_NOT_ALLOWED` | 403 | Model not in the app's allowed models list |
+ *
+ * **Provider error codes** (`source: "provider"`):
+ * | Code | HTTP | Description |
+ * |---|---|---|
+ * | `RATE_LIMITED` | 429 | Upstream rate limit hit — retry after backoff |
+ * | `CONTEXT_LENGTH_EXCEEDED` | 400 | Request exceeds model's context window |
+ * | `INVALID_REQUEST` | 400 | Provider rejected the request as malformed |
+ * | `AUTHENTICATION_FAILED` | 401 | Provider rejected the API key |
+ * | `PROVIDER_OVERLOADED` | 503 | Provider temporarily overloaded |
+ * | `CONTENT_FILTERED` | 400 | Content blocked by safety filter |
+ * | `PROVIDER_TIMEOUT` | 504 | Provider did not respond in time |
+ * | `PROVIDER_ERROR` | 502 | Catch-all for other provider errors |
+ */
+export type ProxyError = {
+  readonly error: {
+    /** Machine-readable error code */
+    readonly code: string;
+    /** Human-readable description */
+    readonly message: string;
+    /** Where the error originated */
+    readonly source: ErrorSource;
+    /** Optional structured context (e.g. `retryAfter`, `provider`, `providerMessage`) */
+    readonly details?: Record<string, unknown>;
+  };
+};
+
+/** Discriminated union for all non-streaming proxy responses */
+export type ProxyResponse = ProxySuccess | ProxyError;
+
+/** Type guard: returns true if the response is an error */
+export const isProxyError = (response: ProxyResponse): response is ProxyError =>
+  'error' in response;
+
+/** Type guard: returns true if the response is a success */
+export const isProxySuccess = (response: ProxyResponse): response is ProxySuccess =>
+  'provider' in response;
+
+// ─── Access context (tk.getAccessContext) ───
+
+/**
+ * Identity of the user who holds this access token.
+ *
+ * Use `id` as the stable key for per-user state in your app — it survives
+ * token refreshes, re-logins, and device switches. `email` is suitable for
+ * display in your UI; treat it as user-controlled and re-fetch on each
+ * session if you cache it.
+ */
+export type UserInfo = {
+  /** Stable Tokenite user id (UUID) */
+  readonly id: string;
+  /** The user's email address as registered with Tokenite */
+  readonly email: string;
+};
+
+/** Visual + identity metadata for a single provider */
+export type ProviderInfo = {
+  /** Stable provider id (same value as the `Provider` union) */
+  readonly id: Provider;
+  /** Human-readable name, e.g. "Anthropic" */
+  readonly displayName: string;
+  /** Brand colour (hex string, e.g. "#d97706") */
+  readonly color: string;
+  /** Absolute URL to the provider's logo (PNG or SVG) */
+  readonly logoUrl: string;
+  /** Whether the logo is a glyph/symbol or a full wordmark */
+  readonly logoStyle: 'symbol' | 'wordmark';
+};
+
+/** Summary of the app the access token belongs to */
+export type AppInfo = {
+  readonly id: string;
+  readonly name: string;
+  readonly description: string | null;
+  readonly websiteUrl: string | null;
+  /** Absolute URL to the app's icon (PNG/SVG). null when the developer hasn't set one — render initials or a generic glyph. */
+  readonly iconUrl: string | null;
+};
+
+/**
+ * Full access context for a single access token: the app it belongs to,
+ * the user who holds it, and the providers it can call.
+ *
+ * `providers` lists only the providers the user has an active key for —
+ * exactly the set that will succeed through `tk.call()` (budget permitting).
+ *
+ * `user` identifies the human who holds the token. Use `user.id` as the
+ * stable key for any per-user state in your app — it survives token
+ * refreshes and re-logins, unlike the access token itself.
+ */
+export type AccessContext = {
+  readonly app: AppInfo;
+  readonly user: UserInfo;
+  readonly providers: readonly ProviderInfo[];
 };
 ```
-<!-- /GEN:TYPES -->
-
-## Error Codes
-
-Non-streaming proxy responses return a unified error envelope:
-
-```json
-{ "error": { "code": "...", "message": "...", "source": "proxy" | "provider", "details": { } } }
-```
-
-`source` distinguishes errors raised by the Tokenite proxy from errors forwarded from the upstream LLM. Use the `isProxyError` type guard to narrow a `ProxyResponse` before reading `error.code`.
-
-### Proxy errors (`source: "proxy"`)
-
-| Code | Status | Meaning |
-|------|--------|---------|
-| `TOKEN_INVALID` | 401 | Missing or unrecognized access token |
-| `TOKEN_REVOKED` | 401 | User revoked access |
-| `TOKEN_EXPIRED` | 401 | Token expired (30-day lifetime) |
-| `TOKEN_SUSPENDED` | 403 | User temporarily suspended access |
-| `BUDGET_EXCEEDED` | 402 | Spending limit reached |
-| `PROVIDER_KEY_MISSING` | 402 | No API key or credits available for the provider |
-| `CREDITS_DEPLETED` | 402 | Insufficient platform credits |
-| `MODEL_NOT_ALLOWED` | 403 | Model not in your app's allowed list |
-| `AGENT_SCOPE_MISSING` | 403 | App doesn't have the managed-agents scope (set `allowsManagedAgents: true` at app creation) |
-| `APP_NOT_FOUND` | 404 | Application not found |
-
-### Provider errors (`source: "provider"`)
-
-| Code | Status | Meaning |
-|------|--------|---------|
-| `RATE_LIMITED` | 429 | Upstream rate limit hit — retry after backoff |
-| `CONTEXT_LENGTH_EXCEEDED` | 400 | Request exceeds the model's context window |
-| `INVALID_REQUEST` | 400 | Provider rejected the request as malformed |
-| `CONTENT_FILTERED` | 400 | Content blocked by the provider's safety filter |
-| `AUTHENTICATION_FAILED` | 401 | Provider rejected the API key |
-| `PROVIDER_OVERLOADED` | 503 | Provider temporarily overloaded |
-| `PROVIDER_TIMEOUT` | 504 | Provider did not respond in time |
-| `PROVIDER_ERROR` | 502 | Catch-all for other provider errors |
-
-## License
-
-MIT
+<!-- /GEN:TYPES -->
+
+## Error Codes
+
+Non-streaming proxy responses return a unified error envelope:
+
+```json
+{ "error": { "code": "...", "message": "...", "source": "proxy" | "provider", "details": { } } }
+```
+
+`source` distinguishes errors raised by the Tokenite proxy from errors forwarded from the upstream LLM. Use the `isProxyError` type guard to narrow a `ProxyResponse` before reading `error.code`.
+
+### Proxy errors (`source: "proxy"`)
+
+| Code | Status | Meaning |
+|------|--------|---------|
+| `TOKEN_INVALID` | 401 | Missing or unrecognized access token |
+| `TOKEN_REVOKED` | 401 | User revoked access |
+| `TOKEN_EXPIRED` | 401 | Token expired (30-day lifetime) |
+| `TOKEN_SUSPENDED` | 403 | User temporarily suspended access |
+| `BUDGET_EXCEEDED` | 402 | Spending limit reached |
+| `PROVIDER_KEY_MISSING` | 402 | No API key or credits available for the provider |
+| `CREDITS_DEPLETED` | 402 | Insufficient platform credits |
+| `MODEL_NOT_ALLOWED` | 403 | Model not in your app's allowed list |
+| `AGENT_SCOPE_MISSING` | 403 | App doesn't have the managed-agents scope (set `allowsManagedAgents: true` at app creation) |
+| `APP_NOT_FOUND` | 404 | Application not found |
+
+### Provider errors (`source: "provider"`)
+
+| Code | Status | Meaning |
+|------|--------|---------|
+| `RATE_LIMITED` | 429 | Upstream rate limit hit — retry after backoff |
+| `CONTEXT_LENGTH_EXCEEDED` | 400 | Request exceeds the model's context window |
+| `INVALID_REQUEST` | 400 | Provider rejected the request as malformed |
+| `CONTENT_FILTERED` | 400 | Content blocked by the provider's safety filter |
+| `AUTHENTICATION_FAILED` | 401 | Provider rejected the API key |
+| `PROVIDER_OVERLOADED` | 503 | Provider temporarily overloaded |
+| `PROVIDER_TIMEOUT` | 504 | Provider did not respond in time |
+| `PROVIDER_ERROR` | 502 | Catch-all for other provider errors |
+
+## License
+
+MIT

package/dist/admin/types.d.ts

@@ -6,9 +6,6 @@ export type AppRecord = {
     readonly builderId: string;
     readonly name: string;
     readonly callbackUrl: string;
-    readonly requiredProviders: readonly Provider[];
-    readonly preferredProviders: readonly Provider[];
-    readonly allowSubstitution: boolean;
     readonly allowedModels?: readonly string[];
     readonly modelStrategy: ModelStrategy;
     readonly requiredTier?: RequiredTier;
@@ -24,9 +21,6 @@ export type CreatedApp = AppRecord & {
 export type CreateAppInput = {
     readonly name: string;
     readonly callbackUrl: string;
-    readonly requiredProviders: readonly Provider[];
-    readonly preferredProviders?: readonly Provider[];
-    readonly allowSubstitution?: boolean;
     readonly allowedModels?: readonly string[];
     readonly modelStrategy?: ModelStrategy;
     readonly requiredTier?: RequiredTier;

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { TokeniteConfig, AuthorizeOptions, PopupOptions, PopupResult, TokenResponse, Provider, ProxyCallOptions, ProxyResponse, AllowedProvidersResponse } from './types.js';
+import type { TokeniteConfig, AuthorizeOptions, PopupOptions, PopupResult, TokenResponse, Provider, ProxyCallOptions, ProxyResponse, AccessContext } from './types.js';
 /**
  * Tokenite client.
  *
@@ -91,21 +91,26 @@ export declare const Tokenite: (config: TokeniteConfig) => {
      */
     call: (options: ProxyCallOptions) => Promise<ProxyResponse>;
     /**
-     * Fetch the access context for an access token: which app it belongs
-     * to and which providers the user has authorised it to call.
+     * Fetch the full access context for an access token: which app it
+     * belongs to, who holds the token, and which providers it can call.
      *
      * The returned `providers` list is exactly the set that will succeed
      * through `tk.call()` (budget permitting). Use it to render a picker,
      * gate UI, or detect that the user is missing a required provider.
      *
+     * The returned `user` identifies the token holder. Use `user.id` as
+     * the stable key for any per-user state in your app — it survives
+     * token refreshes and re-logins, unlike the access token itself.
+     *
      * ```typescript
-     * const { app, providers } = await tk.getAllowedProviders(accessToken);
+     * const { app, user, providers } = await tk.getAccessContext(accessToken);
+     * console.log(`Signed in as ${user.email}`);
      * for (const p of providers) {
      *   console.log(p.displayName, p.logoUrl);
      * }
      * ```
      */
-    getAllowedProviders: (accessToken: string) => Promise<AllowedProvidersResponse>;
+    getAccessContext: (accessToken: string) => Promise<AccessContext>;
     /**
      * Get the proxy URL for a specific provider.
      * Use as `baseURL` in a vendor SDK for streaming requests, which

package/dist/client.js

@@ -1,6 +1,14 @@
 import { extractErrorMessage } from './error.js';
-const DEFAULT_BASE_URL = 'https://tokenite.ai';
-const DEFAULT_PROXY_URL = 'https://api.tokenite.ai';
+// `tokenite.ai` is the marketing site. The dashboard (which hosts the
+// OAuth consent screen and the API the SDK calls — /oauth/authorize,
+// /api/oauth/token) lives at `app.tokenite.ai`. Older versions of this
+// SDK pointed at `tokenite.ai` and only worked because that hostname
+// was aliased to the dashboard CloudFront; the marketing-site move on
+// 2026-05-06 broke that. Marketing CF now redirects /oauth/* and
+// /api/* to app.tokenite.ai, so older SDK installs continue to work,
+// but new installs should hit the dashboard directly.
+const DEFAULT_BASE_URL = 'https://app.tokenite.ai';
+const DEFAULT_PROXY_URL = 'https://proxy.tokenite.ai';
 const IFRAME_WIDTH = 480;
 const IFRAME_HEIGHT = 620;
 /**
@@ -156,27 +164,32 @@ export const Tokenite = (config) => {
             return (await response.json());
         },
         /**
-         * Fetch the access context for an access token: which app it belongs
-         * to and which providers the user has authorised it to call.
+         * Fetch the full access context for an access token: which app it
+         * belongs to, who holds the token, and which providers it can call.
          *
          * The returned `providers` list is exactly the set that will succeed
          * through `tk.call()` (budget permitting). Use it to render a picker,
          * gate UI, or detect that the user is missing a required provider.
          *
+         * The returned `user` identifies the token holder. Use `user.id` as
+         * the stable key for any per-user state in your app — it survives
+         * token refreshes and re-logins, unlike the access token itself.
+         *
          * ```typescript
-         * const { app, providers } = await tk.getAllowedProviders(accessToken);
+         * const { app, user, providers } = await tk.getAccessContext(accessToken);
+         * console.log(`Signed in as ${user.email}`);
          * for (const p of providers) {
          *   console.log(p.displayName, p.logoUrl);
          * }
          * ```
          */
-        getAllowedProviders: async (accessToken) => {
-            const response = await fetch(`${proxyBase}/me/providers`, {
+        getAccessContext: async (accessToken) => {
+            const response = await fetch(`${proxyBase}/me`, {
                 headers: { 'authorization': `Bearer ${accessToken}` },
             });
             if (!response.ok) {
                 const body = await response.json().catch(() => null);
-                throw new Error(extractErrorMessage(body, `Failed to fetch allowed providers (${response.status})`));
+                throw new Error(extractErrorMessage(body, `Failed to fetch access context (${response.status})`));
             }
             const data = (await response.json());
             return {
@@ -203,25 +216,33 @@ const generateState = () => Array.from(crypto.getRandomValues(new Uint8Array(16)
     .map((b) => b.toString(16).padStart(2, '0'))
     .join('');
 const absoluteUrl = (maybeRelative, base) => /^https?:\/\//i.test(maybeRelative) ? maybeRelative : `${base}${maybeRelative}`;
-// ─── Popup hosts ───
-//
-// Two transports for the consent screen, sharing the same postMessage
-// protocol with the dashboard:
-//   { type: 'tokenite:auth-success', code }
-//   { type: 'tokenite:auth-error',   error }
+const handleAuthMessage = (event, baseUrl, resolve, reject, cleanup) => {
+    if (event.origin !== baseUrl)
+        return;
+    const data = event.data;
+    if (data.type === 'tokenite:auth-success' && data.code) {
+        cleanup();
+        resolve({ code: data.code });
+        return;
+    }
+    if (data.type === 'tokenite:auth-error') {
+        cleanup();
+        reject(new Error(data.error ?? 'Authorization denied'));
+    }
+};
 const openIframeModal = (url, width, height, baseUrl) => {
     const overlay = document.createElement('div');
-    overlay.style.cssText = `
-    position: fixed; inset: 0; z-index: 999999;
-    background: rgba(0,0,0,0.5); backdrop-filter: blur(2px);
-    display: flex; align-items: center; justify-content: center;
+    overlay.style.cssText = `
+    position: fixed; inset: 0; z-index: 999999;
+    background: rgba(0,0,0,0.5); backdrop-filter: blur(2px);
+    display: flex; align-items: center; justify-content: center;
   `;
     const container = document.createElement('div');
-    container.style.cssText = `
-    background: white; border-radius: 12px; overflow: hidden;
-    box-shadow: 0 20px 60px rgba(0,0,0,0.3);
-    width: ${width}px; max-width: calc(100vw - 32px);
-    height: ${height}px; max-height: calc(100vh - 32px);
+    container.style.cssText = `
+    background: white; border-radius: 12px; overflow: hidden;
+    box-shadow: 0 20px 60px rgba(0,0,0,0.3);
+    width: ${width}px; max-width: calc(100vw - 32px);
+    height: ${height}px; max-height: calc(100vh - 32px);
   `;
     const iframe = document.createElement('iframe');
     iframe.src = url;
@@ -231,23 +252,11 @@ const openIframeModal = (url, width, height, baseUrl) => {
     overlay.appendChild(container);
     document.body.appendChild(overlay);
     return new Promise((resolve, reject) => {
-        const onMessage = (event) => {
-            if (event.origin !== baseUrl)
-                return;
-            const data = event.data;
-            if (data.type === 'tokenite:auth-success' && data.code) {
-                cleanup();
-                resolve({ code: data.code });
-            }
-            if (data.type === 'tokenite:auth-error') {
-                cleanup();
-                reject(new Error(data.error ?? 'Authorization denied'));
-            }
-        };
         const cleanup = () => {
             window.removeEventListener('message', onMessage);
             overlay.remove();
         };
+        const onMessage = (event) => handleAuthMessage(event, baseUrl, resolve, reject, cleanup);
         overlay.addEventListener('click', (e) => {
             if (e.target === overlay) {
                 cleanup();
@@ -264,23 +273,13 @@ const openWindowPopup = (url, width, height, baseUrl, redirectUri) => {
     if (!popup)
         return Promise.reject(new Error('Popup blocked'));
     return new Promise((resolve, reject) => {
-        const onMessage = (event) => {
-            if (event.origin !== baseUrl)
-                return;
-            const data = event.data;
-            if (data.type === 'tokenite:auth-success' && data.code) {
-                cleanup();
-                resolve({ code: data.code });
-            }
-            if (data.type === 'tokenite:auth-error') {
-                cleanup();
-                reject(new Error(data.error ?? 'Authorization denied'));
-            }
+        const cleanup = () => {
+            window.removeEventListener('message', onMessage);
+            clearInterval(poll);
+            if (!popup.closed)
+                popup.close();
         };
-        // Cross-origin popups can't postMessage until they navigate back to
-        // our origin (the redirect URI). As a fallback, poll for that
-        // navigation by trying to read the popup's URL — same-origin reads
-        // succeed, cross-origin throws and we keep polling.
+        const onMessage = (event) => handleAuthMessage(event, baseUrl, resolve, reject, cleanup);
         const poll = setInterval(() => {
             if (popup.closed) {
                 cleanup();
@@ -297,16 +296,8 @@ const openWindowPopup = (url, width, height, baseUrl, redirectUri) => {
                     }
                 }
             }
-            catch {
-                // cross-origin — keep polling
-            }
+            catch { /* cross-origin until navigation back to redirectUri */ }
         }, 300);
-        const cleanup = () => {
-            window.removeEventListener('message', onMessage);
-            clearInterval(poll);
-            if (!popup.closed)
-                popup.close();
-        };
         window.addEventListener('message', onMessage);
     });
 };

package/dist/client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=client.test.d.ts.map

package/dist/client.test.js

@@ -0,0 +1,66 @@
+import { describe, it, expect } from 'vitest';
+import { TokenWallet } from './client.js';
+const tw = TokenWallet({
+    clientId: 'test-app-id',
+    clientSecret: 'test-secret',
+    redirectUri: 'https://myapp.com/callback',
+    baseUrl: 'https://tokenwallet.ai',
+    proxyUrl: 'https://api.tokenwallet.ai',
+});
+describe('TokenWallet', () => {
+    describe('getAuthorizeUrl', () => {
+        it('builds correct OAuth URL', () => {
+            const url = tw.getAuthorizeUrl({ state: 'abc123' });
+            expect(url).toBe('https://tokenwallet.ai/oauth/authorize?client_id=test-app-id&redirect_uri=https%3A%2F%2Fmyapp.com%2Fcallback&response_type=code&state=abc123');
+        });
+        it('auto-generates state if not provided', () => {
+            const url = tw.getAuthorizeUrl();
+            expect(url).toContain('state=');
+            expect(url).toContain('client_id=test-app-id');
+        });
+        it('generates different state each time', () => {
+            const url1 = tw.getAuthorizeUrl();
+            const url2 = tw.getAuthorizeUrl();
+            const state1 = new URL(url1).searchParams.get('state');
+            const state2 = new URL(url2).searchParams.get('state');
+            expect(state1).not.toBe(state2);
+        });
+        it('includes suggested budget and period when provided', () => {
+            const url = tw.getAuthorizeUrl({ state: 's1', suggestedBudget: 10, suggestedPeriod: 'weekly' });
+            const parsed = new URL(url);
+            expect(parsed.searchParams.get('suggested_budget')).toBe('10');
+            expect(parsed.searchParams.get('suggested_period')).toBe('weekly');
+        });
+        it('omits budget params when not provided', () => {
+            const url = tw.getAuthorizeUrl({ state: 's2' });
+            const parsed = new URL(url);
+            expect(parsed.searchParams.has('suggested_budget')).toBe(false);
+            expect(parsed.searchParams.has('suggested_period')).toBe(false);
+        });
+    });
+    describe('proxyUrl', () => {
+        it('returns correct URL for anthropic', () => {
+            expect(tw.proxyUrl('anthropic')).toBe('https://api.tokenwallet.ai/anthropic');
+        });
+        it('returns correct URL for openai', () => {
+            expect(tw.proxyUrl('openai')).toBe('https://api.tokenwallet.ai/openai');
+        });
+        it('returns correct URL for google', () => {
+            expect(tw.proxyUrl('google')).toBe('https://api.tokenwallet.ai/google');
+        });
+    });
+    describe('exchangeCode', () => {
+        it('throws if clientSecret is not set', async () => {
+            const noSecret = TokenWallet({ clientId: 'x', redirectUri: 'http://x.com/cb' });
+            await expect(noSecret.exchangeCode('code123')).rejects.toThrow('clientSecret is required');
+        });
+    });
+    describe('defaults', () => {
+        it('uses default base URL', () => {
+            const client = TokenWallet({ clientId: 'x', redirectUri: 'http://x.com/cb' });
+            expect(client.baseUrl).toBe('https://tokenwallet.ai');
+            expect(client.proxyBase).toBe('https://api.tokenwallet.ai');
+        });
+    });
+});
+//# sourceMappingURL=client.test.js.map

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { Tokenite } from './client.js';
-export type { TokeniteConfig, AuthorizeOptions, PopupOptions, PopupResult, TokenResponse, Provider, ProxyCallOptions, ProxyUsage, ProxySuccess, ProxyError, ProxyResponse, ErrorSource, ProviderInfo, AppInfo, AllowedProvidersResponse, } from './types.js';
+export type { TokeniteConfig, AuthorizeOptions, PopupOptions, PopupResult, TokenResponse, Provider, ProxyCallOptions, ProxyUsage, ProxySuccess, ProxyError, ProxyResponse, ErrorSource, ProviderInfo, AppInfo, UserInfo, AccessContext, } from './types.js';
 export { isProxyError, isProxySuccess } from './types.js';
 export { extractErrorMessage } from './error.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types.d.ts

@@ -140,6 +140,20 @@ export type ProxyResponse = ProxySuccess | ProxyError;
 export declare const isProxyError: (response: ProxyResponse) => response is ProxyError;
 /** Type guard: returns true if the response is a success */
 export declare const isProxySuccess: (response: ProxyResponse) => response is ProxySuccess;
+/**
+ * Identity of the user who holds this access token.
+ *
+ * Use `id` as the stable key for per-user state in your app — it survives
+ * token refreshes, re-logins, and device switches. `email` is suitable for
+ * display in your UI; treat it as user-controlled and re-fetch on each
+ * session if you cache it.
+ */
+export type UserInfo = {
+    /** Stable Tokenite user id (UUID) */
+    readonly id: string;
+    /** The user's email address as registered with Tokenite */
+    readonly email: string;
+};
 /** Visual + identity metadata for a single provider */
 export type ProviderInfo = {
     /** Stable provider id (same value as the `Provider` union) */
@@ -161,21 +175,21 @@ export type AppInfo = {
     readonly websiteUrl: string | null;
     /** Absolute URL to the app's icon (PNG/SVG). null when the developer hasn't set one — render initials or a generic glyph. */
     readonly iconUrl: string | null;
-    /** Providers the app declares it needs */
-    readonly requiredProviders: readonly Provider[];
-    /** Fallback order when `allowSubstitution` is true */
-    readonly preferredProviders: readonly Provider[];
-    /** Whether the app accepts substitute providers when a required one isn't available */
-    readonly allowSubstitution: boolean;
 };
 /**
- * Full access context for a single access token.
+ * Full access context for a single access token: the app it belongs to,
+ * the user who holds it, and the providers it can call.
  *
  * `providers` lists only the providers the user has an active key for —
  * exactly the set that will succeed through `tk.call()` (budget permitting).
+ *
+ * `user` identifies the human who holds the token. Use `user.id` as the
+ * stable key for any per-user state in your app — it survives token
+ * refreshes and re-logins, unlike the access token itself.
  */
-export type AllowedProvidersResponse = {
+export type AccessContext = {
     readonly app: AppInfo;
+    readonly user: UserInfo;
     readonly providers: readonly ProviderInfo[];
 };
 //# sourceMappingURL=types.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tokenite/sdk",
-  "version": "1.0.1",
+  "version": "2.0.1",
   "description": "SDK for integrating \"Login with Tokenite\" into your app. Your users bring their own AI tokens — you pay nothing.",
   "type": "module",
   "exports": {