The consent & trust layer for AI agents

// userId: your own id for the person; you recorded their consent
// with pip.consent.recordGrant() when they agreed in your app
import { PipClient } from '@zyton/pip';
import { withConsentGate } from '@zyton/pip/consent-gate';

const pip = new PipClient({ apiKey: process.env.PIP_API_KEY });
const { entityId } = await pip.authenticate(); // swaps the key for a short-lived token
const gate = { consent: pip.consent, actorEntityId: entityId!, audit: pip.createAuditWriter() };

// read_inbox runs only while the person's consent covers reading their email
const readInbox = withConsentGate(
  gate,
  { toolName: 'read_inbox', subjectRef: userId, operation: 'read', dataCategories: ['email'] },
  (folder: string) => fetchInbox(folder),
);

await readInbox('INBOX'); // allowed, and recorded
// after you revoke their grant: throws ConsentDeniedError