@tealbrick/provider-transport

Shared trusted-runtime transport for Teal Brick Voice and Vision. Node 24+, no harness dependency.

Exports exact endpoint/credential policy enforcement, credential resolution scoped to organization and agent, redirect refusal, timeout validation, abort-aware waits and bounded stream reads. It performs no user authentication: domain handlers must authenticate and authorize before calling upstream.

Use createProviderTransport({binding,endpoints,resolveCredential,errorPrefix}), then upstream({url,credentialRef},body,signal,contentType). HTTPS is required except explicitly approved loopback HTTP. Anonymous access must be explicitly approved. Never source endpoint policies or the credential resolver from an untrusted request. No retries or response persistence are performed.

This is portfolio support code, not a separate miniapp. Domain protocols remain owned by their packages.