SDK and Runtime Modes

DSAR exposes several public surfaces depending on whether you are hosting the runtime, calling it, or abstracting over multiple environments.

Choose the Right Package

@dsar/backend

Use @dsar/backend when DSAR is part of your own application or deployment.

import { dsarInstance } from "@dsar/backend";

const runtime = dsarInstance({ basePath: "/api/v1" });

Related docs:

• Backend Runtime Core
• API Contract Surface
• Integration Guides

@dsar/node-sdk

Use the Node SDK from trusted server-side code:

import { createNodeSdk } from "@dsar/node-sdk";

const client = createNodeSdk({
	baseUrl: "https://api.example.com/api/v1",
	token: process.env.DSAR_API_TOKEN,
	timeoutMs: 10_000,
	retryMaxAttempts: 2,
});

Highlights:

• grouped namespaces such as requests, subjects, policies, retention, audit, webhooks, and system
• per-request overrides for headers and idempotency
• unwrap(), expect(), and orElse() helpers on results
• binary helpers for verification evidence and fulfilment artifact flows

@dsar/cli

Use the CLI for operational access and parity with the HTTP contract.

Examples:

dsar status --api-url https://api.example.com/api/v1
dsar requests get req-123 --api-url https://api.example.com/api/v1

Related docs:

• DSAR CLI
• API Reference

@dsar/core Modes

@dsar/core lets application code depend on a stable interface while choosing a runtime mode:

• managed: HTTP-backed client for a hosted DSAR deployment
• self-hosted: HTTP-backed client for your own DSAR runtime
• custom: supply your own handler for deterministic routing
• offline: use fixtures without a backend dependency

import { buildCoreClient } from "@dsar/core";

const client = buildCoreClient({
	mode: "managed",
	baseUrl: "https://api.example.com/api/v1",
	token: process.env.DSAR_API_TOKEN,
});

Auth Guidance

DSAR_API_TOKEN and other DSAR bearer credentials are machine-access credentials. Keep them server-side. For browser-facing subject portals or operator dashboards, authenticate the user in the host app first and then call DSAR from trusted backend code.

See Auth Model.