blockintel-gate-sdk 0.3.5 → 0.3.6

package/dist/index.d.cts

@@ -252,10 +252,6 @@ interface GateClientConfig {
     onMetrics?: (metrics: Metrics) => void | Promise<void>;
     signerId?: string;
     heartbeatRefreshIntervalSeconds?: number;
-    /** API key for Control Plane heartbeat endpoint (x-gate-heartbeat-key). Required when not local. Fallback: GATE_HEARTBEAT_KEY env. */
-    heartbeatApiKey?: string;
-    /** When true or GATE_SDK_DEBUG=1, log sanitized request/response (no secrets, no body values). */
-    debug?: boolean;
     /**
      * Break-glass token (optional, for emergency override)
      *
@@ -511,6 +507,32 @@ declare class GateClient {
  */
 declare function createGateClient(config: GateClientConfig): GateClient;
 
+/**
+ * Gate - Simplified API for Nexus-style injection
+ *
+ * Provides a drop-in compatible API for code injected by Nexus:
+ *   import { Gate } from "blockintel-gate-sdk";
+ *   const gate = new Gate({ apiKey: process.env.BLOCKINTEL_API_KEY });
+ *   const tx = await gate.guard(ctx, async () => wallet.sendTransaction({ ... }));
+ *
+ * In passthrough mode (no baseUrl/tenantId, or Nexus sandbox): executes the callback.
+ * For full policy evaluation, use GateClient.evaluate() with tx params before sending.
+ */
+declare class Gate {
+    private readonly apiKey?;
+    constructor(opts?: {
+        apiKey?: string;
+    });
+    /**
+     * Guard a signing operation. In passthrough mode, executes the callback.
+     * For full Gate integration, use GateClient with evaluate() before sending.
+     */
+    guard<T>(_ctx: {
+        requestId: string;
+        reason: string;
+    }, cb: () => Promise<T>): Promise<T>;
+}
+
 /**
  * BlockIntel Gate SDK - Error Types
  */
@@ -649,8 +671,6 @@ interface HttpClientConfig {
     baseUrl: string;
     timeoutMs?: number;
     userAgent?: string;
-    /** When true or GATE_SDK_DEBUG=1, log sanitized request/response (no secrets, no body values). */
-    debug?: boolean;
     retryOptions?: {
         maxAttempts?: number;
         baseDelayMs?: number;
@@ -673,7 +693,6 @@ declare class HttpClient {
     private readonly timeoutMs;
     private readonly userAgent;
     private readonly retryOptions;
-    private readonly debug;
     constructor(config: HttpClientConfig);
     /**
      * Make an HTTP request with retry and timeout
@@ -712,7 +731,6 @@ declare class HeartbeatManager {
     private readonly baseRefreshIntervalSeconds;
     private readonly clientInstanceId;
     private readonly sdkVersion;
-    private readonly apiKey;
     private currentToken;
     private refreshTimer;
     private started;
@@ -726,16 +744,11 @@ declare class HeartbeatManager {
         refreshIntervalSeconds?: number;
         clientInstanceId?: string;
         sdkVersion?: string;
-        /** API key for heartbeat endpoint auth (x-gate-heartbeat-key). Required unless local mode. */
-        apiKey?: string;
     });
     /**
-     * Start background heartbeat refresher.
-     * Optionally wait for initial token (first evaluate() will otherwise wait up to 2s for token).
+     * Start background heartbeat refresher
      */
-    start(options?: {
-        waitForInitial?: boolean;
-    }): void;
+    start(): void;
     /**
      * Schedule next refresh with jitter and backoff
      */
@@ -763,7 +776,6 @@ declare class HeartbeatManager {
     /**
      * Acquire a new heartbeat token from Control Plane
      * NEVER logs token value (security)
-     * Requires x-gate-heartbeat-key header (apiKey) for authentication.
      */
     private acquireHeartbeat;
     /**
@@ -772,4 +784,4 @@ declare class HeartbeatManager {
     getClientInstanceId(): string;
 }
 
-export { BlockIntelAuthError, BlockIntelBlockedError, BlockIntelStepUpRequiredError, BlockIntelUnavailableError, type DefenseEvaluateRequestV2, type DefenseEvaluateResponseV2, GateClient, type GateClientConfig, type GateDecision, GateError, GateErrorCode, type GateStepUpStatus, HeartbeatManager, type HeartbeatToken, type Provenance, ProvenanceProvider, type SigningContext, type StepUpFinalResult, type StepUpMetadata, StepUpNotConfiguredError, type StepUpStatusResponse, type TransactionIntentV2, type WrapKmsClientOptions, type WrappedKmsClient, createGateClient, GateClient as default, wrapKmsClient };
+export { BlockIntelAuthError, BlockIntelBlockedError, BlockIntelStepUpRequiredError, BlockIntelUnavailableError, type DefenseEvaluateRequestV2, type DefenseEvaluateResponseV2, Gate, GateClient, type GateClientConfig, type GateDecision, GateError, GateErrorCode, type GateStepUpStatus, HeartbeatManager, type HeartbeatToken, type Provenance, ProvenanceProvider, type SigningContext, type StepUpFinalResult, type StepUpMetadata, StepUpNotConfiguredError, type StepUpStatusResponse, type TransactionIntentV2, type WrapKmsClientOptions, type WrappedKmsClient, createGateClient, GateClient as default, wrapKmsClient };

package/dist/index.d.ts

@@ -252,10 +252,6 @@ interface GateClientConfig {
     onMetrics?: (metrics: Metrics) => void | Promise<void>;
     signerId?: string;
     heartbeatRefreshIntervalSeconds?: number;
-    /** API key for Control Plane heartbeat endpoint (x-gate-heartbeat-key). Required when not local. Fallback: GATE_HEARTBEAT_KEY env. */
-    heartbeatApiKey?: string;
-    /** When true or GATE_SDK_DEBUG=1, log sanitized request/response (no secrets, no body values). */
-    debug?: boolean;
     /**
      * Break-glass token (optional, for emergency override)
      *
@@ -511,6 +507,32 @@ declare class GateClient {
  */
 declare function createGateClient(config: GateClientConfig): GateClient;
 
+/**
+ * Gate - Simplified API for Nexus-style injection
+ *
+ * Provides a drop-in compatible API for code injected by Nexus:
+ *   import { Gate } from "blockintel-gate-sdk";
+ *   const gate = new Gate({ apiKey: process.env.BLOCKINTEL_API_KEY });
+ *   const tx = await gate.guard(ctx, async () => wallet.sendTransaction({ ... }));
+ *
+ * In passthrough mode (no baseUrl/tenantId, or Nexus sandbox): executes the callback.
+ * For full policy evaluation, use GateClient.evaluate() with tx params before sending.
+ */
+declare class Gate {
+    private readonly apiKey?;
+    constructor(opts?: {
+        apiKey?: string;
+    });
+    /**
+     * Guard a signing operation. In passthrough mode, executes the callback.
+     * For full Gate integration, use GateClient with evaluate() before sending.
+     */
+    guard<T>(_ctx: {
+        requestId: string;
+        reason: string;
+    }, cb: () => Promise<T>): Promise<T>;
+}
+
 /**
  * BlockIntel Gate SDK - Error Types
  */
@@ -649,8 +671,6 @@ interface HttpClientConfig {
     baseUrl: string;
     timeoutMs?: number;
     userAgent?: string;
-    /** When true or GATE_SDK_DEBUG=1, log sanitized request/response (no secrets, no body values). */
-    debug?: boolean;
     retryOptions?: {
         maxAttempts?: number;
         baseDelayMs?: number;
@@ -673,7 +693,6 @@ declare class HttpClient {
     private readonly timeoutMs;
     private readonly userAgent;
     private readonly retryOptions;
-    private readonly debug;
     constructor(config: HttpClientConfig);
     /**
      * Make an HTTP request with retry and timeout
@@ -712,7 +731,6 @@ declare class HeartbeatManager {
     private readonly baseRefreshIntervalSeconds;
     private readonly clientInstanceId;
     private readonly sdkVersion;
-    private readonly apiKey;
     private currentToken;
     private refreshTimer;
     private started;
@@ -726,16 +744,11 @@ declare class HeartbeatManager {
         refreshIntervalSeconds?: number;
         clientInstanceId?: string;
         sdkVersion?: string;
-        /** API key for heartbeat endpoint auth (x-gate-heartbeat-key). Required unless local mode. */
-        apiKey?: string;
     });
     /**
-     * Start background heartbeat refresher.
-     * Optionally wait for initial token (first evaluate() will otherwise wait up to 2s for token).
+     * Start background heartbeat refresher
      */
-    start(options?: {
-        waitForInitial?: boolean;
-    }): void;
+    start(): void;
     /**
      * Schedule next refresh with jitter and backoff
      */
@@ -763,7 +776,6 @@ declare class HeartbeatManager {
     /**
      * Acquire a new heartbeat token from Control Plane
      * NEVER logs token value (security)
-     * Requires x-gate-heartbeat-key header (apiKey) for authentication.
      */
     private acquireHeartbeat;
     /**
@@ -772,4 +784,4 @@ declare class HeartbeatManager {
     getClientInstanceId(): string;
 }
 
-export { BlockIntelAuthError, BlockIntelBlockedError, BlockIntelStepUpRequiredError, BlockIntelUnavailableError, type DefenseEvaluateRequestV2, type DefenseEvaluateResponseV2, GateClient, type GateClientConfig, type GateDecision, GateError, GateErrorCode, type GateStepUpStatus, HeartbeatManager, type HeartbeatToken, type Provenance, ProvenanceProvider, type SigningContext, type StepUpFinalResult, type StepUpMetadata, StepUpNotConfiguredError, type StepUpStatusResponse, type TransactionIntentV2, type WrapKmsClientOptions, type WrappedKmsClient, createGateClient, GateClient as default, wrapKmsClient };
+export { BlockIntelAuthError, BlockIntelBlockedError, BlockIntelStepUpRequiredError, BlockIntelUnavailableError, type DefenseEvaluateRequestV2, type DefenseEvaluateResponseV2, Gate, GateClient, type GateClientConfig, type GateDecision, GateError, GateErrorCode, type GateStepUpStatus, HeartbeatManager, type HeartbeatToken, type Provenance, ProvenanceProvider, type SigningContext, type StepUpFinalResult, type StepUpMetadata, StepUpNotConfiguredError, type StepUpStatusResponse, type TransactionIntentV2, type WrapKmsClientOptions, type WrappedKmsClient, createGateClient, GateClient as default, wrapKmsClient };