@glyphp/client

A client for the Glyph Protocol — discover and call glyphs on any Glyph server.

import { GlyphClient } from '@glyphp/client'

const client = new GlyphClient({ baseUrl: 'http://localhost:3100' })

// Handshake — negotiates the protocol version and returns the lexicon
const { lexicon } = await client.connect()

// Fetch a glyph card
const card = await client.getCard('greet')

// Call a glyph; `invoke` returns just the payload
const result = await client.invoke('greet', { name: 'Ada' })

For a glyph whose card declares cost.requiresConfirmation, call prepare() first to obtain a single-use confirmation token, then pass it to call().

Rendering tool output for an LLM

renderEnvelope turns a SealedEnvelope into the exact text block to hand a model. The payload is wrapped in a per-render, cryptographically-random boundary nonce that untrusted content cannot predict — so a tool result cannot forge the closing marker and "break out" of the data channel. Emit dataPreamble() once as a trusted system message to explain the convention.

import { GlyphClient, renderEnvelope, dataPreamble } from '@glyphp/client'

const envelope = await client.call('search', { q: 'glyph protocol' })

// systemMessage: dataPreamble().content
// toolResult:    the delimited, inert data block
const block = renderEnvelope(envelope, { verify: (e) => Boolean(e.receipt) })

This raises the floor against prompt injection; it does not eliminate it. See spec/trust.md.