@trustgateai/sdk 1.0.0

package/dist/index.js

@@ -0,0 +1,314 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  HEADER_PREFIX: () => HEADER_PREFIX,
+  SOURCE_TOOL_HEADER: () => SOURCE_TOOL_HEADER,
+  TrustGate: () => TrustGate,
+  buildContextHeaders: () => buildContextHeaders,
+  buildSourceToolJson: () => buildSourceToolJson,
+  createTrustGateLangChainConfig: () => createTrustGateLangChainConfig,
+  createTrustGateOpenAIOptions: () => createTrustGateOpenAIOptions,
+  getN8nHeaderSnippet: () => getN8nHeaderSnippet,
+  getTrustGateHeaders: () => getTrustGateHeaders,
+  getWorkflowContextFromEnv: () => getWorkflowContextFromEnv
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/version.ts
+var SDK_VERSION = "1.0.0";
+
+// src/context.ts
+var HEADER_PREFIX = "x-trustgate";
+var SOURCE_TOOL_HEADER = "x-trustgate-source-tool";
+var N8N_KEYS = [
+  "N8N_WORKFLOW_ID",
+  "N8N_EXECUTION_ID",
+  "N8N_WORKFLOW_NAME",
+  "N8N_EXECUTION_MODE"
+];
+var VERCEL_KEYS = [
+  "VERCEL",
+  "VERCEL_ENV",
+  "VERCEL_URL",
+  "VERCEL_GIT_COMMIT_REF",
+  "VERCEL_GIT_REPO_ID",
+  "VERCEL_GIT_COMMIT_SHA"
+];
+var GITHUB_KEYS = [
+  "GITHUB_ACTION",
+  "GITHUB_ACTIONS",
+  "GITHUB_WORKFLOW",
+  "GITHUB_RUN_ID",
+  "GITHUB_RUN_NUMBER",
+  "GITHUB_REPOSITORY",
+  "GITHUB_SHA"
+];
+function pickEnv(keys) {
+  const out = {};
+  for (const key of keys) {
+    const v = process.env[key];
+    if (v !== void 0 && v !== "") out[key] = v;
+  }
+  return out;
+}
+function getBaseMetadata() {
+  return {
+    sdk_version: SDK_VERSION,
+    node_version: process.version,
+    os: process.platform,
+    arch: process.arch
+  };
+}
+function getWorkflowContextFromEnv() {
+  const baseMeta = getBaseMetadata();
+  const n8n = pickEnv(N8N_KEYS);
+  if (Object.keys(n8n).length > 0) {
+    return {
+      source: "n8n",
+      workflow_id: n8n.N8N_WORKFLOW_ID,
+      execution_id: n8n.N8N_EXECUTION_ID,
+      metadata: { ...baseMeta, ...n8n }
+    };
+  }
+  const vercel = pickEnv(VERCEL_KEYS);
+  if (Object.keys(vercel).length > 0) {
+    return {
+      source: "vercel",
+      workflow_id: vercel.VERCEL_GIT_REPO_ID || vercel.VERCEL_URL,
+      execution_id: vercel.VERCEL_GIT_COMMIT_SHA,
+      metadata: { ...baseMeta, ...vercel }
+    };
+  }
+  const github = pickEnv(GITHUB_KEYS);
+  if (Object.keys(github).length > 0) {
+    return {
+      source: "github",
+      workflow_id: github.GITHUB_WORKFLOW || github.GITHUB_REPOSITORY,
+      execution_id: github.GITHUB_RUN_ID || github.GITHUB_RUN_NUMBER,
+      metadata: { ...baseMeta, ...github }
+    };
+  }
+  return {
+    source: "local_script",
+    metadata: baseMeta
+  };
+}
+function buildSourceToolJson(ctx) {
+  const meta = ctx.metadata ?? getBaseMetadata();
+  const payload = {
+    source: ctx.source,
+    metadata: meta
+  };
+  if (ctx.workflow_id !== void 0) payload.workflow_id = ctx.workflow_id;
+  if (ctx.execution_id !== void 0) payload.execution_id = ctx.execution_id;
+  if (ctx.workflow_step !== void 0) payload.workflow_step = ctx.workflow_step;
+  return JSON.stringify(payload);
+}
+function buildContextHeaders(ctx) {
+  const meta = ctx.metadata ?? getBaseMetadata();
+  const h = {
+    [SOURCE_TOOL_HEADER]: buildSourceToolJson({ ...ctx, metadata: meta }),
+    [`${HEADER_PREFIX}-source`]: ctx.source
+  };
+  if (ctx.workflow_id) h[`${HEADER_PREFIX}-workflow-id`] = ctx.workflow_id;
+  if (ctx.execution_id) h[`${HEADER_PREFIX}-execution-id`] = ctx.execution_id;
+  if (ctx.workflow_step) h[`${HEADER_PREFIX}-workflow-step`] = ctx.workflow_step;
+  for (const [k, v] of Object.entries(meta)) {
+    if (v) h[`${HEADER_PREFIX}-meta-${k.toLowerCase()}`] = String(v);
+  }
+  return h;
+}
+
+// src/client.ts
+function resolveContext(config, options) {
+  return options?.workflowContext ?? config.workflowContext ?? getWorkflowContextFromEnv();
+}
+function mergeHeaders(config, options, context) {
+  const out = {
+    "content-type": "application/json",
+    ...config.headers,
+    ...options?.headers
+  };
+  if (config.apiKey) {
+    out["authorization"] = `Bearer ${config.apiKey}`;
+    out["x-api-key"] = config.apiKey;
+  }
+  if (context) {
+    Object.assign(out, buildContextHeaders(context));
+  }
+  return out;
+}
+var TrustGate = class {
+  constructor(config) {
+    const baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.config = { ...config, baseUrl };
+  }
+  /** Base URL of the TrustGate gateway. */
+  get baseUrl() {
+    return this.config.baseUrl;
+  }
+  /**
+   * Get the current effective workflow context (from config override or process.env).
+   * Never null; defaults to source "local_script" when no managed env is detected.
+   */
+  getWorkflowContext(options) {
+    return resolveContext(this.config, options);
+  }
+  /**
+   * Perform a non-streaming JSON request through TrustGate.
+   */
+  async fetch(path, init = {}, options) {
+    const context = resolveContext(this.config, options);
+    const url = path.startsWith("http") ? path : `${this.config.baseUrl}/${path.replace(/^\//, "")}`;
+    const headers = mergeHeaders(this.config, options, context);
+    const timeout = options?.timeout ?? 6e4;
+    const controller = new AbortController();
+    const id = setTimeout(() => controller.abort(), timeout);
+    try {
+      const res = await fetch(url, {
+        ...init,
+        headers: { ...headers, ...init.headers },
+        signal: init.signal ?? controller.signal
+      });
+      return res;
+    } finally {
+      clearTimeout(id);
+    }
+  }
+  /**
+   * Perform a streaming request (SSE). Forwards the response stream and ensures
+   * workflow_id (and other context) is sent in the initial request so the
+   * background task is attributed correctly. Set Accept: text/event-stream
+   * when calling for SSE endpoints.
+   */
+  async fetchStream(path, init = {}, options) {
+    const context = resolveContext(this.config, options);
+    const url = path.startsWith("http") ? path : `${this.config.baseUrl}/${path.replace(/^\//, "")}`;
+    const headers = mergeHeaders(this.config, options, context);
+    const mergedHeaders = {
+      accept: "text/event-stream",
+      ...headers,
+      ...init.headers
+    };
+    const res = await fetch(url, {
+      ...init,
+      headers: mergedHeaders,
+      signal: init.signal
+    });
+    if (!res.ok || !res.body) {
+      return res;
+    }
+    if (!res.headers.get("content-type")?.includes("text/event-stream")) {
+      return res;
+    }
+    return new Response(res.body, {
+      status: res.status,
+      statusText: res.statusText,
+      headers: res.headers
+    });
+  }
+};
+
+// src/n8n.ts
+function getN8nHeaderSnippet(apiKey, baseUrl) {
+  const key = apiKey ?? process.env.TRUSTGATE_API_KEY ?? "";
+  const url = baseUrl ?? process.env.TRUSTGATE_BASE_URL ?? "";
+  const ctx = getWorkflowContextFromEnv();
+  const contextHeaders = buildContextHeaders(ctx);
+  const headers = [];
+  if (url) {
+    headers.push({ name: `${HEADER_PREFIX}-gateway-url`, value: url });
+  }
+  if (key) {
+    headers.push({ name: "authorization", value: `Bearer ${key}` });
+    headers.push({ name: "x-api-key", value: key });
+  }
+  for (const [name, value] of Object.entries(contextHeaders)) {
+    headers.push({ name, value });
+  }
+  const json = JSON.stringify(
+    headers.reduce((acc, { name, value }) => {
+      acc[name] = value;
+      return acc;
+    }, {}),
+    null,
+    2
+  );
+  return { headers, json };
+}
+
+// src/middleware/vercel-ai.ts
+function getTrustGateHeaders(workflowContext) {
+  const ctx = workflowContext ?? getWorkflowContextFromEnv();
+  return buildContextHeaders(ctx);
+}
+function createTrustGateOpenAIOptions(options) {
+  const baseUrl = options.baseUrl.replace(/\/$/, "");
+  const headers = {
+    ...options.headers,
+    ...getTrustGateHeaders(options.workflowContext)
+  };
+  if (options.apiKey) {
+    headers["authorization"] = `Bearer ${options.apiKey}`;
+    headers["x-api-key"] = options.apiKey;
+  }
+  return {
+    baseURL: baseUrl,
+    apiKey: options.openaiApiKey ?? options.apiKey,
+    headers: Object.keys(headers).length ? headers : void 0
+  };
+}
+
+// src/middleware/langchain.ts
+function createTrustGateLangChainConfig(config) {
+  const baseUrl = config.baseUrl.replace(/\/$/, "");
+  const ctx = config.workflowContext ?? getWorkflowContextFromEnv();
+  const headers = {
+    ...config.headers,
+    ...buildContextHeaders(ctx)
+  };
+  if (config.apiKey) {
+    headers["authorization"] = `Bearer ${config.apiKey}`;
+    headers["x-api-key"] = config.apiKey;
+  }
+  return {
+    baseURL: baseUrl,
+    defaultHeaders: Object.keys(headers).length ? headers : void 0,
+    configuration: {
+      baseURL: baseUrl,
+      defaultHeaders: Object.keys(headers).length ? headers : void 0
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  HEADER_PREFIX,
+  SOURCE_TOOL_HEADER,
+  TrustGate,
+  buildContextHeaders,
+  buildSourceToolJson,
+  createTrustGateLangChainConfig,
+  createTrustGateOpenAIOptions,
+  getN8nHeaderSnippet,
+  getTrustGateHeaders,
+  getWorkflowContextFromEnv
+});

package/dist/index.mjs

@@ -0,0 +1,144 @@
+import {
+  createTrustGateLangChainConfig
+} from "./chunk-R2YXTU4L.mjs";
+import {
+  createTrustGateOpenAIOptions,
+  getTrustGateHeaders
+} from "./chunk-UUGIIO3Q.mjs";
+import {
+  HEADER_PREFIX,
+  SOURCE_TOOL_HEADER,
+  buildContextHeaders,
+  buildSourceToolJson,
+  getWorkflowContextFromEnv
+} from "./chunk-SV5FTXAH.mjs";
+
+// src/client.ts
+function resolveContext(config, options) {
+  return options?.workflowContext ?? config.workflowContext ?? getWorkflowContextFromEnv();
+}
+function mergeHeaders(config, options, context) {
+  const out = {
+    "content-type": "application/json",
+    ...config.headers,
+    ...options?.headers
+  };
+  if (config.apiKey) {
+    out["authorization"] = `Bearer ${config.apiKey}`;
+    out["x-api-key"] = config.apiKey;
+  }
+  if (context) {
+    Object.assign(out, buildContextHeaders(context));
+  }
+  return out;
+}
+var TrustGate = class {
+  constructor(config) {
+    const baseUrl = config.baseUrl.replace(/\/$/, "");
+    this.config = { ...config, baseUrl };
+  }
+  /** Base URL of the TrustGate gateway. */
+  get baseUrl() {
+    return this.config.baseUrl;
+  }
+  /**
+   * Get the current effective workflow context (from config override or process.env).
+   * Never null; defaults to source "local_script" when no managed env is detected.
+   */
+  getWorkflowContext(options) {
+    return resolveContext(this.config, options);
+  }
+  /**
+   * Perform a non-streaming JSON request through TrustGate.
+   */
+  async fetch(path, init = {}, options) {
+    const context = resolveContext(this.config, options);
+    const url = path.startsWith("http") ? path : `${this.config.baseUrl}/${path.replace(/^\//, "")}`;
+    const headers = mergeHeaders(this.config, options, context);
+    const timeout = options?.timeout ?? 6e4;
+    const controller = new AbortController();
+    const id = setTimeout(() => controller.abort(), timeout);
+    try {
+      const res = await fetch(url, {
+        ...init,
+        headers: { ...headers, ...init.headers },
+        signal: init.signal ?? controller.signal
+      });
+      return res;
+    } finally {
+      clearTimeout(id);
+    }
+  }
+  /**
+   * Perform a streaming request (SSE). Forwards the response stream and ensures
+   * workflow_id (and other context) is sent in the initial request so the
+   * background task is attributed correctly. Set Accept: text/event-stream
+   * when calling for SSE endpoints.
+   */
+  async fetchStream(path, init = {}, options) {
+    const context = resolveContext(this.config, options);
+    const url = path.startsWith("http") ? path : `${this.config.baseUrl}/${path.replace(/^\//, "")}`;
+    const headers = mergeHeaders(this.config, options, context);
+    const mergedHeaders = {
+      accept: "text/event-stream",
+      ...headers,
+      ...init.headers
+    };
+    const res = await fetch(url, {
+      ...init,
+      headers: mergedHeaders,
+      signal: init.signal
+    });
+    if (!res.ok || !res.body) {
+      return res;
+    }
+    if (!res.headers.get("content-type")?.includes("text/event-stream")) {
+      return res;
+    }
+    return new Response(res.body, {
+      status: res.status,
+      statusText: res.statusText,
+      headers: res.headers
+    });
+  }
+};
+
+// src/n8n.ts
+function getN8nHeaderSnippet(apiKey, baseUrl) {
+  const key = apiKey ?? process.env.TRUSTGATE_API_KEY ?? "";
+  const url = baseUrl ?? process.env.TRUSTGATE_BASE_URL ?? "";
+  const ctx = getWorkflowContextFromEnv();
+  const contextHeaders = buildContextHeaders(ctx);
+  const headers = [];
+  if (url) {
+    headers.push({ name: `${HEADER_PREFIX}-gateway-url`, value: url });
+  }
+  if (key) {
+    headers.push({ name: "authorization", value: `Bearer ${key}` });
+    headers.push({ name: "x-api-key", value: key });
+  }
+  for (const [name, value] of Object.entries(contextHeaders)) {
+    headers.push({ name, value });
+  }
+  const json = JSON.stringify(
+    headers.reduce((acc, { name, value }) => {
+      acc[name] = value;
+      return acc;
+    }, {}),
+    null,
+    2
+  );
+  return { headers, json };
+}
+export {
+  HEADER_PREFIX,
+  SOURCE_TOOL_HEADER,
+  TrustGate,
+  buildContextHeaders,
+  buildSourceToolJson,
+  createTrustGateLangChainConfig,
+  createTrustGateOpenAIOptions,
+  getN8nHeaderSnippet,
+  getTrustGateHeaders,
+  getWorkflowContextFromEnv
+};

package/dist/middleware/langchain.d.mts

@@ -0,0 +1,41 @@
+import { T as TrustGateConfig } from '../types-BxyYog9f.mjs';
+
+/**
+ * LangChain middleware: use TrustGate as the OpenAI endpoint with one line.
+ *
+ * ChatOpenAI (and other LangChain OpenAI integrations) support baseURL and
+ * defaultHeaders. Point them to your TrustGate gateway and inject workflow
+ * context so Shadow AI detection can attribute requests.
+ *
+ * Example:
+ *
+ *   import { ChatOpenAI } from '@langchain/openai';
+ *   import { createTrustGateLangChainConfig } from 'trustgate-node/middleware/langchain';
+ *
+ *   const config = createTrustGateLangChainConfig({
+ *     baseUrl: process.env.TRUSTGATE_BASE_URL!,
+ *     apiKey: process.env.TRUSTGATE_API_KEY,
+ *   });
+ *
+ *   const llm = new ChatOpenAI({
+ *     ...config,
+ *     modelName: 'gpt-4',
+ *     temperature: 0,
+ *   });
+ */
+
+/**
+ * Configuration to pass to LangChain's ChatOpenAI (or other OpenAI-based classes).
+ * Sets baseURL and defaultHeaders (lowercase keys) so requests go through TrustGate
+ * with workflow context and x-trustgate-source-tool JSON for Shadow AI detection.
+ */
+declare function createTrustGateLangChainConfig(config: TrustGateConfig): {
+    configuration?: {
+        baseURL: string;
+        defaultHeaders?: Record<string, string>;
+    };
+    baseURL?: string;
+    defaultHeaders?: Record<string, string>;
+};
+
+export { createTrustGateLangChainConfig };

package/dist/middleware/langchain.d.ts

@@ -0,0 +1,41 @@
+import { T as TrustGateConfig } from '../types-BxyYog9f.js';
+
+/**
+ * LangChain middleware: use TrustGate as the OpenAI endpoint with one line.
+ *
+ * ChatOpenAI (and other LangChain OpenAI integrations) support baseURL and
+ * defaultHeaders. Point them to your TrustGate gateway and inject workflow
+ * context so Shadow AI detection can attribute requests.
+ *
+ * Example:
+ *
+ *   import { ChatOpenAI } from '@langchain/openai';
+ *   import { createTrustGateLangChainConfig } from 'trustgate-node/middleware/langchain';
+ *
+ *   const config = createTrustGateLangChainConfig({
+ *     baseUrl: process.env.TRUSTGATE_BASE_URL!,
+ *     apiKey: process.env.TRUSTGATE_API_KEY,
+ *   });
+ *
+ *   const llm = new ChatOpenAI({
+ *     ...config,
+ *     modelName: 'gpt-4',
+ *     temperature: 0,
+ *   });
+ */
+
+/**
+ * Configuration to pass to LangChain's ChatOpenAI (or other OpenAI-based classes).
+ * Sets baseURL and defaultHeaders (lowercase keys) so requests go through TrustGate
+ * with workflow context and x-trustgate-source-tool JSON for Shadow AI detection.
+ */
+declare function createTrustGateLangChainConfig(config: TrustGateConfig): {
+    configuration?: {
+        baseURL: string;
+        defaultHeaders?: Record<string, string>;
+    };
+    baseURL?: string;
+    defaultHeaders?: Record<string, string>;
+};
+
+export { createTrustGateLangChainConfig };

package/dist/middleware/langchain.js

@@ -0,0 +1,156 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/middleware/langchain.ts
+var langchain_exports = {};
+__export(langchain_exports, {
+  createTrustGateLangChainConfig: () => createTrustGateLangChainConfig
+});
+module.exports = __toCommonJS(langchain_exports);
+
+// src/version.ts
+var SDK_VERSION = "1.0.0";
+
+// src/context.ts
+var HEADER_PREFIX = "x-trustgate";
+var SOURCE_TOOL_HEADER = "x-trustgate-source-tool";
+var N8N_KEYS = [
+  "N8N_WORKFLOW_ID",
+  "N8N_EXECUTION_ID",
+  "N8N_WORKFLOW_NAME",
+  "N8N_EXECUTION_MODE"
+];
+var VERCEL_KEYS = [
+  "VERCEL",
+  "VERCEL_ENV",
+  "VERCEL_URL",
+  "VERCEL_GIT_COMMIT_REF",
+  "VERCEL_GIT_REPO_ID",
+  "VERCEL_GIT_COMMIT_SHA"
+];
+var GITHUB_KEYS = [
+  "GITHUB_ACTION",
+  "GITHUB_ACTIONS",
+  "GITHUB_WORKFLOW",
+  "GITHUB_RUN_ID",
+  "GITHUB_RUN_NUMBER",
+  "GITHUB_REPOSITORY",
+  "GITHUB_SHA"
+];
+function pickEnv(keys) {
+  const out = {};
+  for (const key of keys) {
+    const v = process.env[key];
+    if (v !== void 0 && v !== "") out[key] = v;
+  }
+  return out;
+}
+function getBaseMetadata() {
+  return {
+    sdk_version: SDK_VERSION,
+    node_version: process.version,
+    os: process.platform,
+    arch: process.arch
+  };
+}
+function getWorkflowContextFromEnv() {
+  const baseMeta = getBaseMetadata();
+  const n8n = pickEnv(N8N_KEYS);
+  if (Object.keys(n8n).length > 0) {
+    return {
+      source: "n8n",
+      workflow_id: n8n.N8N_WORKFLOW_ID,
+      execution_id: n8n.N8N_EXECUTION_ID,
+      metadata: { ...baseMeta, ...n8n }
+    };
+  }
+  const vercel = pickEnv(VERCEL_KEYS);
+  if (Object.keys(vercel).length > 0) {
+    return {
+      source: "vercel",
+      workflow_id: vercel.VERCEL_GIT_REPO_ID || vercel.VERCEL_URL,
+      execution_id: vercel.VERCEL_GIT_COMMIT_SHA,
+      metadata: { ...baseMeta, ...vercel }
+    };
+  }
+  const github = pickEnv(GITHUB_KEYS);
+  if (Object.keys(github).length > 0) {
+    return {
+      source: "github",
+      workflow_id: github.GITHUB_WORKFLOW || github.GITHUB_REPOSITORY,
+      execution_id: github.GITHUB_RUN_ID || github.GITHUB_RUN_NUMBER,
+      metadata: { ...baseMeta, ...github }
+    };
+  }
+  return {
+    source: "local_script",
+    metadata: baseMeta
+  };
+}
+function buildSourceToolJson(ctx) {
+  const meta = ctx.metadata ?? getBaseMetadata();
+  const payload = {
+    source: ctx.source,
+    metadata: meta
+  };
+  if (ctx.workflow_id !== void 0) payload.workflow_id = ctx.workflow_id;
+  if (ctx.execution_id !== void 0) payload.execution_id = ctx.execution_id;
+  if (ctx.workflow_step !== void 0) payload.workflow_step = ctx.workflow_step;
+  return JSON.stringify(payload);
+}
+function buildContextHeaders(ctx) {
+  const meta = ctx.metadata ?? getBaseMetadata();
+  const h = {
+    [SOURCE_TOOL_HEADER]: buildSourceToolJson({ ...ctx, metadata: meta }),
+    [`${HEADER_PREFIX}-source`]: ctx.source
+  };
+  if (ctx.workflow_id) h[`${HEADER_PREFIX}-workflow-id`] = ctx.workflow_id;
+  if (ctx.execution_id) h[`${HEADER_PREFIX}-execution-id`] = ctx.execution_id;
+  if (ctx.workflow_step) h[`${HEADER_PREFIX}-workflow-step`] = ctx.workflow_step;
+  for (const [k, v] of Object.entries(meta)) {
+    if (v) h[`${HEADER_PREFIX}-meta-${k.toLowerCase()}`] = String(v);
+  }
+  return h;
+}
+
+// src/middleware/langchain.ts
+function createTrustGateLangChainConfig(config) {
+  const baseUrl = config.baseUrl.replace(/\/$/, "");
+  const ctx = config.workflowContext ?? getWorkflowContextFromEnv();
+  const headers = {
+    ...config.headers,
+    ...buildContextHeaders(ctx)
+  };
+  if (config.apiKey) {
+    headers["authorization"] = `Bearer ${config.apiKey}`;
+    headers["x-api-key"] = config.apiKey;
+  }
+  return {
+    baseURL: baseUrl,
+    defaultHeaders: Object.keys(headers).length ? headers : void 0,
+    configuration: {
+      baseURL: baseUrl,
+      defaultHeaders: Object.keys(headers).length ? headers : void 0
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createTrustGateLangChainConfig
+});

package/dist/middleware/langchain.mjs

@@ -0,0 +1,7 @@
+import {
+  createTrustGateLangChainConfig
+} from "../chunk-R2YXTU4L.mjs";
+import "../chunk-SV5FTXAH.mjs";
+export {
+  createTrustGateLangChainConfig
+};