unfairly 0.3.0 → 0.5.1

package/dist/lib/client.d.ts

@@ -0,0 +1,46 @@
+/**
+ * `createUnfairlyClient` — public factory for the agent runtime SDK.
+ *
+ * Resolves API base URL + token from explicit options or env vars. The
+ * default base URL is the hosted Unfairly app; self-hosters override it.
+ *
+ * The returned client is fluent-ish: `client.vault("slug").search(...)`
+ * mirrors how the MCP tools read in the wild. Stays HTTP-only — there's
+ * no Supabase or admin client in this package. Server work happens at
+ * `/api/sdk/v1/*` and reuses the shared `src/lib/vault/*` helpers.
+ */
+import { type FetchLike, type TransportFn } from "./transport.js";
+import { makeVaultSearch } from "./vault/search.js";
+import { makeVaultRead } from "./vault/read.js";
+import { makeVaultCheckpoint } from "./vault/checkpoint.js";
+import { makeEmit } from "./events/emit.js";
+import type { MeResponse } from "./types/index.js";
+export type UnfairlyClientOptions = {
+    /** MCP token (`mcp_xxx...`). Falls back to `process.env.UNFAIRLY_API_KEY`. */
+    apiKey?: string;
+    /** Override the API base URL (self-hosted / preview). */
+    baseUrl?: string;
+    /** Optional fetch impl override (mostly for tests). */
+    fetchImpl?: FetchLike;
+    /** Per-request timeout in ms. Default 30s. */
+    timeoutMs?: number;
+};
+export type VaultClient = {
+    search: ReturnType<typeof makeVaultSearch>;
+    readDocument: ReturnType<typeof makeVaultRead>;
+    checkpoint: ReturnType<typeof makeVaultCheckpoint>;
+};
+export type UnfairlyClient = {
+    /** Identify the token owner + the vaults you can reach. */
+    me(): Promise<MeResponse>;
+    /** Per-vault scoped helpers. */
+    vault(slug: string): VaultClient;
+    /** Emit a closed-allowlist event into the Unfairly Inngest queue. */
+    event: {
+        emit: ReturnType<typeof makeEmit>;
+    };
+    /** Escape hatch for callers that need to call an arbitrary route. */
+    raw: TransportFn;
+};
+export declare function createUnfairlyClient(opts?: UnfairlyClientOptions): UnfairlyClient;
+//# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,MAAM,MAAM,qBAAqB,GAAG;IAClC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IAC3C,YAAY,EAAE,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;IAC/C,UAAU,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,2DAA2D;IAC3D,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1B,gCAAgC;IAChC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IACjC,qEAAqE;IACrE,KAAK,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAA;KAAE,CAAC;IAC7C,qEAAqE;IACrE,GAAG,EAAE,WAAW,CAAC;CAClB,CAAC;AAyBF,wBAAgB,oBAAoB,CAClC,IAAI,GAAE,qBAA0B,GAC/B,cAAc,CA0BhB"}

package/dist/lib/client.js

@@ -0,0 +1,58 @@
+/**
+ * `createUnfairlyClient` — public factory for the agent runtime SDK.
+ *
+ * Resolves API base URL + token from explicit options or env vars. The
+ * default base URL is the hosted Unfairly app; self-hosters override it.
+ *
+ * The returned client is fluent-ish: `client.vault("slug").search(...)`
+ * mirrors how the MCP tools read in the wild. Stays HTTP-only — there's
+ * no Supabase or admin client in this package. Server work happens at
+ * `/api/sdk/v1/*` and reuses the shared `src/lib/vault/*` helpers.
+ */
+import { createTransport } from "./transport.js";
+import { makeVaultSearch } from "./vault/search.js";
+import { makeVaultRead } from "./vault/read.js";
+import { makeVaultCheckpoint } from "./vault/checkpoint.js";
+import { makeEmit } from "./events/emit.js";
+const DEFAULT_BASE_URL = "https://app.unfairly.ai";
+function resolveApiKey(opts) {
+    const key = opts.apiKey ??
+        (typeof process !== "undefined" && process.env
+            ? process.env.UNFAIRLY_API_KEY ?? process.env.UNFAIRLY_MCP_TOKEN
+            : undefined);
+    if (!key) {
+        throw new Error("unfairly: missing apiKey. Pass `{ apiKey }` or set UNFAIRLY_API_KEY in your environment.");
+    }
+    return key;
+}
+function resolveBaseUrl(opts) {
+    return (opts.baseUrl ??
+        (typeof process !== "undefined" && process.env
+            ? process.env.UNFAIRLY_BASE_URL ?? DEFAULT_BASE_URL
+            : DEFAULT_BASE_URL));
+}
+export function createUnfairlyClient(opts = {}) {
+    const apiKey = resolveApiKey(opts);
+    const baseUrl = resolveBaseUrl(opts);
+    const request = createTransport({
+        apiKey,
+        baseUrl,
+        fetchImpl: opts.fetchImpl,
+        timeoutMs: opts.timeoutMs,
+    });
+    const emit = makeEmit(request);
+    return {
+        me: () => request({
+            method: "GET",
+            path: "/api/sdk/v1/me",
+        }),
+        vault: (slug) => ({
+            search: makeVaultSearch(request, slug),
+            readDocument: makeVaultRead(request, slug),
+            checkpoint: makeVaultCheckpoint(request, slug),
+        }),
+        event: { emit },
+        raw: request,
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/lib/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAoC,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG5C,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AA8BnD,SAAS,aAAa,CAAC,IAA2B;IAChD,MAAM,GAAG,GACP,IAAI,CAAC,MAAM;QACX,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG;YAC5C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;YAChE,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,IAA2B;IACjD,OAAO,CACL,IAAI,CAAC,OAAO;QACZ,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG;YAC5C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,gBAAgB;YACnD,CAAC,CAAC,gBAAgB,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,MAAM;QACN,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE/B,OAAO;QACL,EAAE,EAAE,GAAG,EAAE,CACP,OAAO,CAAa;YAClB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,gBAAgB;SACvB,CAAC;QACJ,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;YACxB,MAAM,EAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC;YACtC,YAAY,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC;YAC1C,UAAU,EAAE,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC;SAC/C,CAAC;QACF,KAAK,EAAE,EAAE,IAAI,EAAE;QACf,GAAG,EAAE,OAAO;KACb,CAAC;AACJ,CAAC"}

package/dist/lib/events/emit.d.ts

@@ -0,0 +1,17 @@
+import type { TransportFn } from "../transport.js";
+import { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, type AllowedEventName, type EventPayload } from "../types/index.js";
+export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, type AllowedEventName, type EventPayload, };
+export type EmitResult = {
+    ok: true;
+    event_id?: string;
+};
+/**
+ * Emit a closed-allowlist event to the Unfairly events surface.
+ *
+ * Client-side validation matches the server's zod schema so callers get
+ * a synchronous error before the network round-trip. The server still
+ * validates — never trust the client — but this saves a round-trip on
+ * dev typos.
+ */
+export declare function makeEmit(request: TransportFn): <E extends AllowedEventName>(event: E, data: EventPayload<E>) => Promise<EmitResult>;
+//# sourceMappingURL=emit.d.ts.map

package/dist/lib/events/emit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.d.ts","sourceRoot":"","sources":["../../../src/lib/events/emit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,WAAW,IAChB,CAAC,SAAS,gBAAgB,EACnD,OAAO,CAAC,EACR,MAAM,YAAY,CAAC,CAAC,CAAC,KACpB,OAAO,CAAC,UAAU,CAAC,CAmBvB"}

package/dist/lib/events/emit.js

@@ -0,0 +1,28 @@
+import { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, } from "../types/index.js";
+export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, };
+/**
+ * Emit a closed-allowlist event to the Unfairly events surface.
+ *
+ * Client-side validation matches the server's zod schema so callers get
+ * a synchronous error before the network round-trip. The server still
+ * validates — never trust the client — but this saves a round-trip on
+ * dev typos.
+ */
+export function makeEmit(request) {
+    return async function emit(event, data) {
+        if (!ALLOWED_EVENT_NAMES.includes(event)) {
+            throw new Error(`unfairly: unknown event "${event}". Allowed: ${ALLOWED_EVENT_NAMES.join(", ")}`);
+        }
+        const schema = EVENT_PAYLOAD_SCHEMAS[event];
+        const parsed = schema.safeParse(data);
+        if (!parsed.success) {
+            throw new Error(`unfairly: invalid payload for "${event}": ${JSON.stringify(parsed.error.flatten())}`);
+        }
+        return request({
+            method: "POST",
+            path: "/api/sdk/v1/events/emit",
+            body: { event, data: parsed.data },
+        });
+    };
+}
+//# sourceMappingURL=emit.js.map

package/dist/lib/events/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../../src/lib/events/emit.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,CAAC;AAIF;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAoB;IAC3C,OAAO,KAAK,UAAU,IAAI,CACxB,KAAQ,EACR,IAAqB;QAErB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,4BAA4B,KAAK,eAAe,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,kCAAkC,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAa;YACzB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;SACnC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * `unfairly` package library surface.
+ *
+ * Anything exported here is part of the public API contract. Keep this
+ * file curated — internal helpers (transport internals, CLI prompts)
+ * are NOT exported even though they live in this package.
+ */
+export { createUnfairlyClient } from "./client.js";
+export type { UnfairlyClient, UnfairlyClientOptions, VaultClient, } from "./client.js";
+export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, } from "./types/index.js";
+export type { AllowedEventName, EventPayload, CheckpointInput, CheckpointResult, TrustTier, SearchHit, SearchDocumentSummary, SearchResponse, VaultDocument, MeResponse, SdkErrorBody, } from "./types/index.js";
+export { UnfairlyApiError } from "./transport.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,WAAW,GACZ,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,UAAU,EACV,YAAY,GACb,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/lib/index.js

@@ -0,0 +1,11 @@
+/**
+ * `unfairly` package library surface.
+ *
+ * Anything exported here is part of the public API contract. Keep this
+ * file curated — internal helpers (transport internals, CLI prompts)
+ * are NOT exported even though they live in this package.
+ */
+export { createUnfairlyClient } from "./client.js";
+export { ALLOWED_EVENT_NAMES, EVENT_PAYLOAD_SCHEMAS, } from "./types/index.js";
+export { UnfairlyApiError } from "./transport.js";
+//# sourceMappingURL=index.js.map

package/dist/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAOnD,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAe1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/lib/transport.d.ts

@@ -0,0 +1,46 @@
+/**
+ * HTTP transport for the SDK.
+ *
+ * Stays intentionally tiny: builds a request, hits the Unfairly REST
+ * surface, parses JSON, throws a typed `UnfairlyApiError` on non-2xx.
+ *
+ * The `fetchImpl` override exists so tests can drop a fake fetch in
+ * without monkey-patching globalThis. Don't bake msw in here — keep this
+ * runtime-agnostic so the SDK works in Node, Bun, edge runtimes, etc.
+ *
+ * Token redaction: we never log the bearer token. The shape we log is
+ * `{ length, last4 }` only — see `redactToken`.
+ */
+import type { SdkErrorBody } from "./types/index.js";
+export type FetchLike = typeof fetch;
+export type TransportOptions = {
+    baseUrl: string;
+    apiKey: string;
+    fetchImpl?: FetchLike;
+    /** Per-request timeout in ms. Default 30s. */
+    timeoutMs?: number;
+    /** Optional User-Agent override; defaults to `unfairly/<version>`. */
+    userAgent?: string;
+};
+export declare class UnfairlyApiError extends Error {
+    readonly status: number;
+    readonly body: SdkErrorBody | {
+        raw: string;
+    };
+    constructor(status: number, body: SdkErrorBody | {
+        raw: string;
+    }, message?: string);
+}
+export declare function redactToken(token: string): {
+    length: number;
+    last4: string;
+};
+export type RequestOptions = {
+    method?: "GET" | "POST" | "PUT" | "DELETE";
+    path: string;
+    body?: unknown;
+    query?: Record<string, string | number | boolean | undefined>;
+};
+export declare function createTransport(opts: TransportOptions): <T>(req: RequestOptions) => Promise<T>;
+export type TransportFn = ReturnType<typeof createTransport>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/lib/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/lib/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;gBAElC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE,MAAM;CAMnF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAK5E;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC/D,CAAC;AAEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,IAWtB,CAAC,EAAE,KAAK,cAAc,KAAG,OAAO,CAAC,CAAC,CAAC,CAiDlE;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/lib/transport.js

@@ -0,0 +1,85 @@
+/**
+ * HTTP transport for the SDK.
+ *
+ * Stays intentionally tiny: builds a request, hits the Unfairly REST
+ * surface, parses JSON, throws a typed `UnfairlyApiError` on non-2xx.
+ *
+ * The `fetchImpl` override exists so tests can drop a fake fetch in
+ * without monkey-patching globalThis. Don't bake msw in here — keep this
+ * runtime-agnostic so the SDK works in Node, Bun, edge runtimes, etc.
+ *
+ * Token redaction: we never log the bearer token. The shape we log is
+ * `{ length, last4 }` only — see `redactToken`.
+ */
+export class UnfairlyApiError extends Error {
+    status;
+    body;
+    constructor(status, body, message) {
+        super(message ?? (("error" in body && body.error) || `Request failed (${status})`));
+        this.name = "UnfairlyApiError";
+        this.status = status;
+        this.body = body;
+    }
+}
+export function redactToken(token) {
+    return {
+        length: token.length,
+        last4: token.slice(-4),
+    };
+}
+export function createTransport(opts) {
+    const fetchImpl = opts.fetchImpl ?? globalThis.fetch;
+    if (!fetchImpl) {
+        throw new Error("unfairly: no fetch implementation found. Pass `fetchImpl` or run on Node 18+ / a fetch-capable runtime.");
+    }
+    const baseUrl = opts.baseUrl.replace(/\/$/, "");
+    const timeoutMs = opts.timeoutMs ?? 30_000;
+    const userAgent = opts.userAgent ?? "unfairly/0.5.0";
+    return async function request(req) {
+        const url = new URL(baseUrl + req.path);
+        if (req.query) {
+            for (const [k, v] of Object.entries(req.query)) {
+                if (v === undefined)
+                    continue;
+                url.searchParams.set(k, String(v));
+            }
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        let res;
+        try {
+            res = await fetchImpl(url.toString(), {
+                method: req.method ?? "GET",
+                headers: {
+                    Authorization: `Bearer ${opts.apiKey}`,
+                    "Content-Type": "application/json",
+                    Accept: "application/json",
+                    "User-Agent": userAgent,
+                },
+                body: req.body === undefined ? undefined : JSON.stringify(req.body),
+                signal: controller.signal,
+            });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        const text = await res.text();
+        let parsed = null;
+        if (text) {
+            try {
+                parsed = JSON.parse(text);
+            }
+            catch {
+                parsed = { raw: text };
+            }
+        }
+        if (!res.ok) {
+            const body = parsed && typeof parsed === "object"
+                ? parsed
+                : { raw: text };
+            throw new UnfairlyApiError(res.status, body);
+        }
+        return parsed;
+    };
+}
+//# sourceMappingURL=transport.js.map

package/dist/lib/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/lib/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAgBH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,MAAM,CAAS;IACf,IAAI,CAAiC;IAE9C,YAAY,MAAc,EAAE,IAAoC,EAAE,OAAgB;QAChF,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,mBAAmB,MAAM,GAAG,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KACvB,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,MAAM,SAAS,GAAc,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IAChE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,yGAAyG,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAErD,OAAO,KAAK,UAAU,OAAO,CAAI,GAAmB;QAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,IAAI,CAAC,KAAK,SAAS;oBAAE,SAAS;gBAC9B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAE9D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACpC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;gBAC3B,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;oBACtC,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,SAAS;iBACxB;gBACD,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBACnE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;QAC3B,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GACR,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAClC,CAAC,CAAE,MAAyC;gBAC5C,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/types/index.d.ts

@@ -0,0 +1,167 @@
+/**
+ * SDK shared types.
+ *
+ * `ALLOWED_EVENT_NAMES` is the CLOSED allowlist of events external callers
+ * are allowed to emit via `/api/sdk/v1/events/emit`. The server validates
+ * incoming events against this same list and per-event payload schema
+ * before forwarding to Inngest. Adding an event here without also adding
+ * a schema below + an Inngest function on the server side means the event
+ * lands in the queue with nobody listening — keep the three in lockstep.
+ *
+ * Why a closed list: Codex flagged an earlier draft as an "arbitrary
+ * event injection" vector. Anything that's not on this list is rejected
+ * with a 400, regardless of token scope.
+ */
+import { z } from "zod";
+export declare const ALLOWED_EVENT_NAMES: readonly ["growth-agent/signal.detected", "funding-agent/update.requested", "vault/content.landed"];
+export type AllowedEventName = (typeof ALLOWED_EVENT_NAMES)[number];
+export declare const EVENT_PAYLOAD_SCHEMAS: {
+    readonly "growth-agent/signal.detected": z.ZodObject<{
+        signal_id: z.ZodString;
+        source: z.ZodEnum<["x-listener", "linkedin-listener", "hn-listener", "manual"]>;
+        trust_tier: z.ZodEnum<["gold", "silver", "bronze"]>;
+        dedupe_key: z.ZodString;
+        payload: z.ZodObject<{
+            text: z.ZodString;
+            blocks: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
+            url: z.ZodOptional<z.ZodString>;
+            author: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            text: string;
+            url?: string | undefined;
+            blocks?: unknown[] | undefined;
+            author?: string | undefined;
+        }, {
+            text: string;
+            url?: string | undefined;
+            blocks?: unknown[] | undefined;
+            author?: string | undefined;
+        }>;
+    }, "strip", z.ZodTypeAny, {
+        trust_tier: "gold" | "silver" | "bronze";
+        signal_id: string;
+        source: "x-listener" | "linkedin-listener" | "hn-listener" | "manual";
+        dedupe_key: string;
+        payload: {
+            text: string;
+            url?: string | undefined;
+            blocks?: unknown[] | undefined;
+            author?: string | undefined;
+        };
+    }, {
+        trust_tier: "gold" | "silver" | "bronze";
+        signal_id: string;
+        source: "x-listener" | "linkedin-listener" | "hn-listener" | "manual";
+        dedupe_key: string;
+        payload: {
+            text: string;
+            url?: string | undefined;
+            blocks?: unknown[] | undefined;
+            author?: string | undefined;
+        };
+    }>;
+    readonly "funding-agent/update.requested": z.ZodObject<{
+        vault_slug: z.ZodString;
+        window: z.ZodDefault<z.ZodEnum<["7d", "14d", "30d"]>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        vault_slug: string;
+        window: "7d" | "14d" | "30d";
+        reason?: string | undefined;
+    }, {
+        vault_slug: string;
+        window?: "7d" | "14d" | "30d" | undefined;
+        reason?: string | undefined;
+    }>;
+    readonly "vault/content.landed": z.ZodObject<{
+        vault_slug: z.ZodString;
+        document_id: z.ZodString;
+        trust_tier: z.ZodEnum<["gold", "silver", "bronze"]>;
+        source: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        trust_tier: "gold" | "silver" | "bronze";
+        vault_slug: string;
+        document_id: string;
+        source?: string | undefined;
+    }, {
+        trust_tier: "gold" | "silver" | "bronze";
+        vault_slug: string;
+        document_id: string;
+        source?: string | undefined;
+    }>;
+};
+export type EventPayload<E extends AllowedEventName> = z.infer<(typeof EVENT_PAYLOAD_SCHEMAS)[E]>;
+/**
+ * Checkpoint write payload. Intentionally OMITS `actor_email` /
+ * `actor_kind`: the server derives identity from the token owner. The
+ * SDK route rejects request bodies that include those fields.
+ */
+export type CheckpointInput = {
+    built: string;
+    decided: string;
+    broken?: string;
+    next?: string;
+    host?: "claude-code" | "codex" | "other";
+    files?: string[];
+    open_questions?: string;
+    session_id?: string;
+    low_signal?: boolean;
+};
+export type CheckpointResult = {
+    id: string;
+    created_at: string;
+};
+export type TrustTier = "gold" | "silver" | "bronze";
+export type SearchHit = {
+    id: string;
+    document_id: string;
+    room_id: string;
+    content: string;
+    similarity: number;
+};
+export type SearchDocumentSummary = {
+    id: string;
+    name: string;
+    slug: string | null;
+    trust_tier: TrustTier | string;
+    room_id: string;
+    section_name: string | null;
+};
+export type SearchResponse = {
+    hits: SearchHit[];
+    documents: SearchDocumentSummary[];
+};
+export type VaultDocument = {
+    id: string;
+    room_id: string;
+    name: string;
+    slug: string | null;
+    trust_tier: TrustTier | string;
+    summary: string | null;
+    markdown_content: string | null;
+    file_url: string | null;
+    section_id: string | null;
+    section_name: string | null;
+};
+export type MeResponse = {
+    ok: true;
+    token_owner: {
+        user_id: string;
+        email: string;
+        kind: "human" | "agent" | "connector";
+    };
+    vaults: Array<{
+        id: string;
+        slug: string;
+        name: string;
+        role: string;
+    }>;
+};
+export type SdkErrorBody = {
+    ok: false;
+    error: string;
+    message?: string;
+    details?: unknown;
+    allowed?: readonly string[];
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,mBAAmB,qGAItB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AA6BpE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAIyB,CAAC;AAE5D,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAC5D,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAClC,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAErD,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,SAAS,EAAE,qBAAqB,EAAE,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,EAAE,SAAS,GAAG,MAAM,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,WAAW,CAAC;KACvC,CAAC;IACF,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC"}

package/dist/lib/types/index.js

@@ -0,0 +1,50 @@
+/**
+ * SDK shared types.
+ *
+ * `ALLOWED_EVENT_NAMES` is the CLOSED allowlist of events external callers
+ * are allowed to emit via `/api/sdk/v1/events/emit`. The server validates
+ * incoming events against this same list and per-event payload schema
+ * before forwarding to Inngest. Adding an event here without also adding
+ * a schema below + an Inngest function on the server side means the event
+ * lands in the queue with nobody listening — keep the three in lockstep.
+ *
+ * Why a closed list: Codex flagged an earlier draft as an "arbitrary
+ * event injection" vector. Anything that's not on this list is rejected
+ * with a 400, regardless of token scope.
+ */
+import { z } from "zod";
+export const ALLOWED_EVENT_NAMES = [
+    "growth-agent/signal.detected",
+    "funding-agent/update.requested",
+    "vault/content.landed",
+];
+// Source of truth for the growth-agent signal payload shape.
+const GrowthSignalPayloadSchema = z.object({
+    signal_id: z.string().min(1).max(100),
+    source: z.enum(["x-listener", "linkedin-listener", "hn-listener", "manual"]),
+    trust_tier: z.enum(["gold", "silver", "bronze"]),
+    dedupe_key: z.string().min(1).max(200),
+    payload: z.object({
+        text: z.string().max(5000),
+        blocks: z.array(z.unknown()).max(50).optional(),
+        url: z.string().url().optional(),
+        author: z.string().max(200).optional(),
+    }),
+});
+const FundingUpdateRequestedSchema = z.object({
+    vault_slug: z.string().min(1).max(120),
+    window: z.enum(["7d", "14d", "30d"]).default("7d"),
+    reason: z.string().max(500).optional(),
+});
+const VaultContentLandedSchema = z.object({
+    vault_slug: z.string().min(1).max(120),
+    document_id: z.string().min(1).max(120),
+    trust_tier: z.enum(["gold", "silver", "bronze"]),
+    source: z.string().max(200).optional(),
+});
+export const EVENT_PAYLOAD_SCHEMAS = {
+    "growth-agent/signal.detected": GrowthSignalPayloadSchema,
+    "funding-agent/update.requested": FundingUpdateRequestedSchema,
+    "vault/content.landed": VaultContentLandedSchema,
+};
+//# sourceMappingURL=index.js.map

package/dist/lib/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/types/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,8BAA8B;IAC9B,gCAAgC;IAChC,sBAAsB;CACd,CAAC;AAIX,6DAA6D;AAC7D,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC5E,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACvC,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,8BAA8B,EAAE,yBAAyB;IACzD,gCAAgC,EAAE,4BAA4B;IAC9D,sBAAsB,EAAE,wBAAwB;CACS,CAAC"}

package/dist/lib/vault/checkpoint.d.ts

@@ -0,0 +1,12 @@
+import type { TransportFn } from "../transport.js";
+import type { CheckpointInput, CheckpointResult } from "../types/index.js";
+/**
+ * Save a checkpoint to the vault.
+ *
+ * `actor_email` and `actor_kind` are intentionally not part of
+ * `CheckpointInput`. The server derives identity from the bearer token
+ * owner; supplying those fields in the request body is a no-op at best
+ * and rejected at worst.
+ */
+export declare function makeVaultCheckpoint(request: TransportFn, slug: string): (input: CheckpointInput) => Promise<CheckpointResult>;
+//# sourceMappingURL=checkpoint.d.ts.map

package/dist/lib/vault/checkpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.d.ts","sourceRoot":"","sources":["../../../src/lib/vault/checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE3E;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,IACnC,OAAO,eAAe,KAAG,OAAO,CAAC,gBAAgB,CAAC,CAOpF"}

package/dist/lib/vault/checkpoint.js

@@ -0,0 +1,18 @@
+/**
+ * Save a checkpoint to the vault.
+ *
+ * `actor_email` and `actor_kind` are intentionally not part of
+ * `CheckpointInput`. The server derives identity from the bearer token
+ * owner; supplying those fields in the request body is a no-op at best
+ * and rejected at worst.
+ */
+export function makeVaultCheckpoint(request, slug) {
+    return async function checkpoint(input) {
+        return request({
+            method: "POST",
+            path: `/api/sdk/v1/vault/${encodeURIComponent(slug)}/checkpoint`,
+            body: input,
+        });
+    };
+}
+//# sourceMappingURL=checkpoint.js.map

package/dist/lib/vault/checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint.js","sourceRoot":"","sources":["../../../src/lib/vault/checkpoint.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAoB,EAAE,IAAY;IACpE,OAAO,KAAK,UAAU,UAAU,CAAC,KAAsB;QACrD,OAAO,OAAO,CAAmB;YAC/B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,aAAa;YAChE,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/lib/vault/read.d.ts

@@ -0,0 +1,4 @@
+import type { TransportFn } from "../transport.js";
+import type { VaultDocument } from "../types/index.js";
+export declare function makeVaultRead(request: TransportFn, slug: string): (nameOrSlug: string) => Promise<VaultDocument>;
+//# sourceMappingURL=read.d.ts.map

package/dist/lib/vault/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../../src/lib/vault/read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,wBAAgB,aAAa,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,IAC3B,YAAY,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC,CAM/E"}

package/dist/lib/vault/read.js

@@ -0,0 +1,9 @@
+export function makeVaultRead(request, slug) {
+    return async function readDocument(nameOrSlug) {
+        return request({
+            method: "GET",
+            path: `/api/sdk/v1/vault/${encodeURIComponent(slug)}/documents/${encodeURIComponent(nameOrSlug)}`,
+        });
+    };
+}
+//# sourceMappingURL=read.js.map

package/dist/lib/vault/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../../src/lib/vault/read.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,aAAa,CAAC,OAAoB,EAAE,IAAY;IAC9D,OAAO,KAAK,UAAU,YAAY,CAAC,UAAkB;QACnD,OAAO,OAAO,CAAgB;YAC5B,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,cAAc,kBAAkB,CAAC,UAAU,CAAC,EAAE;SAClG,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}