index.js

'use strict';

const DEFAULT_BASE_URL = 'https://trustloop-production.up.railway.app';

class TrustLoop {
  /**
   * @param {object} options
   * @param {string} options.apiKey - Your TrustLoop API key (tl_...)
   * @param {string} [options.baseUrl] - Override the API base URL (default: TrustLoop cloud)
   */
  constructor({ apiKey, baseUrl = DEFAULT_BASE_URL } = {}) {
    if (!apiKey) throw new Error('[TrustLoop] apiKey is required. Get yours at https://trustloop.live/signup');
    this.apiKey = apiKey;
    this.baseUrl = baseUrl.replace(/\/$/, '');
  }

  // ─── Internal ────────────────────────────────────────────────────────────

  async _request(method, path, body) {
    const url = `${this.baseUrl}${path}`;
    const headers = { 'x-api-key': this.apiKey, 'Content-Type': 'application/json' };
    const res = await fetch(url, {
      method,
      headers,
      body: body !== undefined ? JSON.stringify(body) : undefined,
    });
    if (!res.ok) {
      let msg;
      try { msg = (await res.json()).error || res.statusText; } catch { msg = res.statusText; }
      throw new TrustLoopError(msg, res.status);
    }
    const ct = res.headers.get('content-type') || '';
    if (ct.includes('text/csv')) return res.text();
    return res.json();
  }

  // ─── Core Governance ─────────────────────────────────────────────────────

  /**
   * Intercept a tool call before executing it.
   * Returns ALLOWED, BLOCKED, or PENDING (requires human approval).
   *
   * @param {string} toolName - The name of the tool being called
   * @param {object} [args={}] - The arguments being passed to the tool
   * @returns {Promise<InterceptResult>}
   *
   * @example
   * const result = await tl.intercept('send_email', { to: 'ceo@bank.com', body: '...' });
   * if (!result.allowed) throw new Error(result.message);
   */
  async intercept(toolName, args = {}) {
    return this._request('POST', '/api/intercept', { tool_name: toolName, arguments: args });
  }

  // ─── Audit Log ───────────────────────────────────────────────────────────

  /**
   * Fetch the audit log of all tool calls for your tenant.
   *
   * @param {object} [options]
   * @param {number} [options.limit=50] - Max records to return
   * @param {number} [options.offset=0] - Pagination offset
   * @param {string} [options.status] - Filter by status: ALLOWED, BLOCKED, PENDING, APPROVED, DENIED
   * @param {string} [options.toolName] - Filter by tool name
   * @returns {Promise<ToolCall[]>}
   */
  async getLogs({ limit = 50, offset = 0, status, toolName } = {}) {
    const params = new URLSearchParams({ limit, offset });
    if (status) params.set('status', status);
    if (toolName) params.set('tool_name', toolName);
    return this._request('GET', `/api/logs?${params}`);
  }

  /**
   * Export the full audit log as a CSV string.
   * @returns {Promise<string>} CSV content
   */
  async exportLogs() {
    return this._request('GET', '/api/logs/export');
  }

  /**
   * Get dashboard stats: totals, breakdown by status, and monthly usage.
   * @returns {Promise<Stats>}
   */
  async getStats() {
    return this._request('GET', '/api/stats');
  }

  // ─── Governance Rules ────────────────────────────────────────────────────

  /**
   * List all governance rules for your tenant.
   * @returns {Promise<Rule[]>}
   */
  async getRules() {
    return this._request('GET', '/api/approval-rules');
  }

  /**
   * Create a new governance rule in plain English.
   *
   * @param {object} rule
   * @param {string} rule.rule_text - Plain English rule (e.g. "Block any delete operations")
   * @param {'approve'|'block'} [rule.action='approve'] - What to do when rule matches
   * @param {string} [rule.approver_email] - Who to notify for approval (overrides default)
   * @returns {Promise<Rule>}
   *
   * @example
   * await tl.createRule({
   *   rule_text: 'Any wire transfer over £10,000 requires human approval',
   *   action: 'approve',
   *   approver_email: 'cfo@mycompany.com'
   * });
   */
  async createRule({ rule_text, action = 'approve', approver_email } = {}) {
    return this._request('POST', '/api/approval-rules', { rule_text, action, approver_email });
  }

  /**
   * Delete a governance rule by ID.
   * @param {string} ruleId
   * @returns {Promise<{success: boolean}>}
   */
  async deleteRule(ruleId) {
    return this._request('DELETE', `/api/approval-rules/${ruleId}`);
  }

  // ─── Kill Switch ─────────────────────────────────────────────────────────

  /**
   * List all tools currently on the kill-switch (blocked) list.
   * @returns {Promise<BlockedTool[]>}
   */
  async getBlockedTools() {
    return this._request('GET', '/api/blocked-tools');
  }

  /**
   * Instantly block a tool by name. Any agent call to this tool will be
   * rejected immediately, before any rule evaluation.
   *
   * @param {string} toolName - The tool name to block
   * @param {string} [reason=''] - Why this tool is blocked (for audit trail)
   * @returns {Promise<BlockedTool>}
   *
   * @example
   * await tl.blockTool('drop_table', 'Emergency: destructive DB operations disabled');
   */
  async blockTool(toolName, reason = '') {
    return this._request('POST', '/api/blocked-tools', { tool_name: toolName, reason });
  }

  /**
   * Remove a tool from the kill-switch list.
   * @param {string} toolName
   * @returns {Promise<{success: boolean}>}
   */
  async unblockTool(toolName) {
    return this._request('DELETE', `/api/blocked-tools/${encodeURIComponent(toolName)}`);
  }

  // ─── Human Approvals ─────────────────────────────────────────────────────

  /**
   * List all tool calls currently awaiting human approval.
   * @returns {Promise<PendingApproval[]>}
   */
  async getPendingApprovals() {
    return this._request('GET', '/api/pending-approvals');
  }

  /**
   * Programmatically approve or deny a pending tool call.
   * (Approvers can also click the email link — this is for API-driven workflows.)
   *
   * @param {string} approvalId - The pending approval ID
   * @param {'approved'|'denied'} action
   * @returns {Promise<PendingApproval>}
   */
  async decide(approvalId, action) {
    return this._request('POST', `/api/pending-approvals/${approvalId}/decide`, { action });
  }

  // ─── Notifications ───────────────────────────────────────────────────────

  /**
   * Get current notification settings (email, Slack, Teams, Discord).
   * @returns {Promise<NotificationSettings>}
   */
  async getNotifications() {
    return this._request('GET', '/api/notification-settings');
  }

  /**
   * Update notification settings.
   *
   * @param {object} settings
   * @param {string} [settings.notify_email] - Email to notify on pending approvals
   * @param {string} [settings.slack_webhook_url]
   * @param {string} [settings.teams_webhook_url]
   * @param {string} [settings.discord_webhook_url]
   * @returns {Promise<NotificationSettings>}
   */
  async updateNotifications(settings) {
    return this._request('PUT', '/api/notification-settings', settings);
  }

  // ─── Static Helpers ──────────────────────────────────────────────────────

  /**
   * Get the OpenAI client configuration to route through TrustLoop.
   * Pass the returned config to the OpenAI constructor.
   *
   * @param {string} openaiApiKey - Your OpenAI API key
   * @param {string} trustLoopApiKey - Your TrustLoop API key
   * @param {object} [options]
   * @param {string} [options.baseUrl] - Override TrustLoop base URL
   * @returns {object} Config object for `new OpenAI(config)`
   *
   * @example
   * import OpenAI from 'openai';
   * import TrustLoop from 'trustloop';
   *
   * const client = new OpenAI(
   *   TrustLoop.openai('sk-your-openai-key', 'tl_your-trustloop-key')
   * );
   * // All tool calls are now governed automatically
   */
  static openai(openaiApiKey, trustLoopApiKey, { baseUrl = DEFAULT_BASE_URL } = {}) {
    return {
      apiKey: openaiApiKey,
      baseURL: `${baseUrl}/v1`,
      defaultHeaders: { 'x-api-key': trustLoopApiKey },
    };
  }

  /**
   * Get the MCP server URL for use in Claude Desktop or Cline config.
   *
   * @param {string} trustLoopApiKey - Your TrustLoop API key
   * @param {object} [options]
   * @param {string} [options.baseUrl] - Override TrustLoop base URL
   * @returns {string} The SSE URL to paste into your MCP client config
   *
   * @example
   * // claude_desktop_config.json
   * {
   *   "mcpServers": {
   *     "trustloop": {
   *       "url": TrustLoop.mcpUrl('tl_your-key')
   *     }
   *   }
   * }
   */
  static mcpUrl(trustLoopApiKey, { baseUrl = DEFAULT_BASE_URL } = {}) {
    return `${baseUrl}/sse?api_key=${trustLoopApiKey}`;
  }
}

class TrustLoopError extends Error {
  constructor(message, status) {
    super(message);
    this.name = 'TrustLoopError';
    this.status = status;
  }
}

module.exports = TrustLoop;
module.exports.TrustLoop = TrustLoop;
module.exports.TrustLoopError = TrustLoopError;
module.exports.default = TrustLoop;