@agent-os-sdk/client 0.9.26 → 0.9.28

package/dist/modules/agents.js

@@ -0,0 +1,296 @@
+/**
+ * Agents Module - Fully Typed
+ *
+ * Naming conventions:
+ * - get* for singular items: getAgent(id)
+ * - list* for collections: listAgents()
+ * - create*, update*, delete* for mutations
+ */
+export class AgentsModule {
+    client;
+    headers;
+    constructor(client, headers) {
+        this.client = client;
+        this.headers = headers;
+    }
+    // ======================== CRUD ========================
+    /**
+     * List all agents in the workspace.
+     * @example
+     * ```ts
+     * const { data } = await client.agents.list({ limit: 10 });
+     * data?.items.forEach(agent => console.log(agent.name));
+     * ```
+     */
+    async list(params) {
+        return this.client.GET("/v1/api/agents", {
+            params: { query: params },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Get a single agent by ID.
+     * @example
+     * ```ts
+     * const { data: agent } = await client.agents.get("agent-uuid");
+     * ```
+     */
+    async get(agentId) {
+        return this.client.GET("/v1/api/agents/{agentId}", {
+            params: { path: { agentId } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Create a new agent.
+     * Backend only accepts `name` per CreateAgentRequest DTO.
+     * @example
+     * ```ts
+     * const { data: agent } = await client.agents.create({ name: "My Agent" });
+     *
+     * // With idempotency (safe to retry)
+     * const { data: agent } = await client.agents.create({
+     *   name: "My Agent",
+     *   idempotency_key: "unique-key"
+     * });
+     * ```
+     */
+    async create(body) {
+        const headers = { ...this.headers() };
+        if (body.idempotency_key) {
+            headers["X-Idempotency-Key"] = body.idempotency_key;
+        }
+        return this.client.POST("/v1/api/agents", {
+            body: {
+                name: body.name,
+                metadata: body.metadata
+            },
+            headers,
+        });
+    }
+    /**
+     * Update an existing agent.
+     * Uses PATCH per backend AgentsController.
+     */
+    async update(agentId, body) {
+        return this.client.PATCH("/v1/api/agents/{id}", {
+            params: { path: { id: agentId } },
+            body,
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Delete an agent.
+     */
+    async delete(agentId) {
+        return this.client.DELETE("/v1/api/agents/{agentId}", {
+            params: { path: { agentId } },
+            headers: this.headers(),
+        });
+    }
+    // ======================== Runtime Contexts ========================
+    /**
+     * List current runtime contexts for an agent.
+     */
+    async listRuntimeContexts(agentId) {
+        return this.client.GET("/v1/api/agents/{agentId}/runtime-contexts", {
+            params: { path: { agentId } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Get the current runtime context for a given key.
+     */
+    async getRuntimeContext(agentId, contextKey) {
+        return this.client.GET("/v1/api/agents/{agentId}/runtime-contexts/{contextKey}", {
+            params: { path: { agentId, contextKey } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Create or update the current runtime context for a given key.
+     */
+    async upsertRuntimeContext(agentId, contextKey, body) {
+        return this.client.PUT("/v1/api/agents/{agentId}/runtime-contexts/{contextKey}", {
+            params: { path: { agentId, contextKey } },
+            body: {
+                content: body.content,
+                source: body.source ?? null,
+            },
+            headers: this.headers(),
+        });
+    }
+    // ======================== Portability ========================
+    /**
+     * Export an agent as a JSON bundle.
+     */
+    async export(agentId) {
+        return this.client.GET("/v1/api/agents/{id}/export", {
+            params: { path: { id: agentId } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Import an agent bundle.
+     */
+    async import(bundle) {
+        return this.client.POST("/v1/api/agents/import", {
+            body: bundle,
+            headers: this.headers(),
+        });
+    }
+    // ======================== Graph ========================
+    /**
+     * Get the graph for an agent (Mermaid or JSON).
+     */
+    async getGraph(agentId, format) {
+        return this.client.GET("/v1/api/agents/{agentId}/graph", {
+            params: { path: { agentId }, query: { format } },
+            headers: this.headers(),
+        });
+    }
+    /** Alias for getGraph (convenience) */
+    graph = (agentId, format) => this.getGraph(agentId, format);
+    /**
+     * Validate the graph configuration.
+     */
+    async validateGraph(agentId) {
+        return this.client.POST("/v1/api/agents/{agentId}/graph/validate", {
+            params: { path: { agentId } },
+            headers: this.headers(),
+        });
+    }
+    async getPublishPreview(agentId, irJson) {
+        if (irJson) {
+            return this.client.POST("/v1/api/agents/{id}/publish-preview", {
+                params: { path: { id: agentId } },
+                body: { ir_json: irJson },
+                headers: this.headers(),
+            });
+        }
+        return this.client.GET("/v1/api/agents/{id}/publish-preview", {
+            params: { path: { id: agentId } },
+            headers: this.headers(),
+        });
+    }
+    // ======================== Draft IR ========================
+    async getDraftIr(agentId) {
+        return this.client.GET("/v1/api/agents/{id}/draft/ir", {
+            params: { path: { id: agentId } },
+            headers: this.headers(),
+        });
+    }
+    async updateDraftIr(agentId, irJson, options) {
+        const headers = { ...this.headers() };
+        if (options?.if_match) {
+            headers["If-Match"] = options.if_match;
+        }
+        const response = await this.client.PUT("/v1/api/agents/{id}/draft/ir", {
+            params: { path: { id: agentId } },
+            body: {
+                ir_json: irJson,
+            },
+            headers,
+        });
+        const unwrapped = response.data &&
+            typeof response.data === "object" &&
+            "data" in response.data &&
+            typeof response.data.data === "object"
+            ? (response.data.data ?? undefined)
+            : response.data;
+        return {
+            ...response,
+            data: unwrapped,
+        };
+    }
+    // ======================== Publishing ========================
+    /**
+     * Publish the committed agent artifact pointed to by the current authoring revision.
+     * The client does not send authoring JSON anymore.
+     * @param agentId The agent UUID
+     * @param options Optional settings: version_label for tagging, set_as_live to make this the active version, idempotency_key for safe retries
+     * @returns Bundle response with version details
+     * @example
+     * ```ts
+     * const { data: bundle } = await client.agents.publish(agentId, {
+     *   idempotency_key: "publish-unique-key"
+     * });
+     * ```
+     */
+    async publish(agentId, options) {
+        const headers = { ...this.headers() };
+        if (options?.idempotency_key) {
+            headers["X-Idempotency-Key"] = options.idempotency_key;
+        }
+        return this.client.POST("/v1/api/agents/{id}/publish", {
+            params: { path: { id: agentId } },
+            body: {
+                version_label: options?.version_label ?? null,
+                set_as_live: options?.set_as_live ?? true,
+                required_tools: options?.required_tools ?? []
+            },
+            headers
+        });
+    }
+    async listPublishes(agentId) {
+        return this.client.GET("/v1/api/agents/{id}/publishes", {
+            params: { path: { id: agentId } },
+            headers: this.headers(),
+        });
+    }
+    async rollback(agentId, body) {
+        return this.client.POST("/v1/api/agents/{id}/rollback", {
+            params: { path: { id: agentId } },
+            body,
+            headers: this.headers(),
+        });
+    }
+    // ======================== Bundles ========================
+    /**
+     * Get the manifest for a specific bundle.
+     * Returns artifact metadata only.
+     * @example
+     * ```ts
+     * const { data } = await client.agents.getBundleManifest(agentId, bundleId);
+     * console.log(data?.artifact_hash);
+     * ```
+     */
+    async getBundleManifest(agentId, bundleId) {
+        return this.client.GET("/v1/api/agents/{agentId}/bundles/{bundleId}/manifest", {
+            params: { path: { agentId, bundleId } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Get Mermaid diagram for a specific bundle graph.
+     */
+    async getBundleMermaid(agentId, bundleId) {
+        return this.client.GET("/v1/api/agents/{agentId}/bundles/{bundleId}/graph/mermaid", {
+            params: { path: { agentId, bundleId } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Creates or updates an agent credential binding by binding key.
+     */
+    async upsertCredentialBinding(agentId, body) {
+        return this.client.POST("/v1/api/agents/{id}/credential-bindings", {
+            params: { path: { id: agentId } },
+            body: {
+                credential_instance_ref: body.credential_instance_ref,
+                binding_key: body.binding_key,
+                priority: body.priority ?? 0,
+            },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Lists credential bindings for an agent.
+     */
+    async listCredentialBindings(agentId) {
+        return this.client.GET("/v1/api/agents/{id}/credential-bindings", {
+            params: { path: { id: agentId } },
+            headers: this.headers(),
+        });
+    }
+}

package/dist/modules/apiTokens.d.ts

@@ -0,0 +1,62 @@
+import type { APIResponse, RawClient } from "../client/raw.js";
+export interface ApiToken {
+    id: string;
+    name: string;
+    token_prefix: string;
+    scopes: string[];
+    created_at: string;
+    expires_at?: string | null;
+    last_used_at?: string | null;
+}
+export interface ApiTokenSecret extends ApiToken {
+    token: string;
+    workspace_id: string;
+}
+export interface CreateTokenRequest {
+    name: string;
+    scopes?: string[];
+    expires_at?: string | null;
+    environment?: "live" | "test";
+}
+export interface RotateTokenResponse extends ApiTokenSecret {
+    rotated_from: string;
+}
+export interface ScopeInfo {
+    key: string;
+    description: string;
+}
+export interface ScopeListResponse {
+    scopes: ScopeInfo[];
+}
+export declare class ApiTokensModule {
+    private client;
+    constructor(client: RawClient);
+    private headers;
+    /**
+     * List all API tokens for the current workspace.
+     */
+    list(): Promise<APIResponse<{
+        tokens: ApiToken[];
+    }>>;
+    /**
+     * Create a new API token.
+     * The full token secret is only returned in this response.
+     */
+    create(body: CreateTokenRequest): Promise<APIResponse<ApiTokenSecret>>;
+    /**
+     * List all available scopes.
+     */
+    listScopes(): Promise<APIResponse<ScopeListResponse>>;
+    /**
+     * Revoke an API token immediately.
+     */
+    revoke(id: string): Promise<APIResponse<{
+        message: string;
+    }>>;
+    /**
+     * Rotate a token (revoke old, create new).
+     * Returns the new token secret.
+     */
+    rotate(id: string): Promise<APIResponse<RotateTokenResponse>>;
+}
+//# sourceMappingURL=apiTokens.d.ts.map

package/dist/modules/apiTokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiTokens.d.ts","sourceRoot":"","sources":["../../src/modules/apiTokens.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,cAAe,SAAQ,QAAQ;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,mBAAoB,SAAQ,cAAc;IACvD,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAC9B,MAAM,EAAE,SAAS,EAAE,CAAC;CACvB;AAED,qBAAa,eAAe;IACxB,OAAO,CAAC,MAAM,CAAY;gBAEd,MAAM,EAAE,SAAS;IAI7B,OAAO,CAAC,OAAO;IAMf;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;QAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC,CAAC;IAM1D;;;OAGG;IACG,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAO5E;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAM3D;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAOnE;;;OAGG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;CAMtE"}

package/dist/modules/apiTokens.js

@@ -0,0 +1,56 @@
+export class ApiTokensModule {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    headers() {
+        return {
+            "Content-Type": "application/json",
+        };
+    }
+    /**
+     * List all API tokens for the current workspace.
+     */
+    async list() {
+        return this.client.GET("/v1/api/tokens", {
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Create a new API token.
+     * The full token secret is only returned in this response.
+     */
+    async create(body) {
+        return this.client.POST("/v1/api/tokens", {
+            body,
+            headers: this.headers(),
+        });
+    }
+    /**
+     * List all available scopes.
+     */
+    async listScopes() {
+        return this.client.GET("/v1/api/tokens/available-scopes", {
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Revoke an API token immediately.
+     */
+    async revoke(id) {
+        return this.client.DELETE("/v1/api/tokens/{id}", {
+            params: { path: { id } },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Rotate a token (revoke old, create new).
+     * Returns the new token secret.
+     */
+    async rotate(id) {
+        return this.client.POST("/v1/api/tokens/{id}/rotate", {
+            params: { path: { id } },
+            headers: this.headers(),
+        });
+    }
+}

package/dist/modules/approvals.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Approvals Module - Human-in-the-Loop Native
+ *
+ * Wave 2.x: Real implementation for HITL workflow.
+ * Endpoints: /v1/api/workspaces/{workspaceId}/approvals
+ */
+import type { RawClient, APIResponse } from "../client/raw.js";
+export type ApprovalStatus = "pending" | "approved" | "denied" | "expired";
+export interface Approval {
+    id: string;
+    run_id: string;
+    attempt_id: string;
+    policy_name: string;
+    reason: string;
+    status: ApprovalStatus;
+    created_at: string;
+    expires_at?: string;
+    decided_at?: string;
+    decided_by_actor?: string;
+    payload?: Record<string, unknown>;
+}
+export interface ApprovalDecision {
+    decision: "approve" | "deny";
+    comment?: string;
+}
+export interface ApprovalListResponse {
+    items: Approval[];
+    total: number;
+}
+export interface ApprovalStatusResponse {
+    id: string;
+    status: ApprovalStatus;
+    expires_at?: string;
+    decided_at?: string;
+    decided_by_actor?: string;
+    decision_comment?: string;
+}
+export declare class ApprovalsModule {
+    private client;
+    private headers;
+    constructor(client: RawClient, headers: () => Record<string, string>);
+    /**
+     * List approvals for a workspace.
+     * @param workspaceId - Workspace ID
+     * @param params - Filter options
+     */
+    list(workspaceId: string, params?: {
+        status?: ApprovalStatus;
+        limit?: number;
+    }): Promise<APIResponse<ApprovalListResponse>>;
+    /**
+     * Get a specific approval by ID.
+     * @param workspaceId - Workspace ID
+     * @param approvalId - Approval ID
+     */
+    get(workspaceId: string, approvalId: string): Promise<APIResponse<Approval>>;
+    /**
+     * Approve an approval request.
+     * @param workspaceId - Workspace ID
+     * @param approvalId - Approval ID
+     * @param comment - Optional reason for approval
+     */
+    approve(workspaceId: string, approvalId: string, comment?: string): Promise<APIResponse<ApprovalStatusResponse>>;
+    /**
+     * Deny an approval request.
+     * @param workspaceId - Workspace ID
+     * @param approvalId - Approval ID
+     * @param comment - Optional reason for denial
+     */
+    deny(workspaceId: string, approvalId: string, comment?: string): Promise<APIResponse<ApprovalStatusResponse>>;
+    /**
+     * Shorthand: List pending approvals for a workspace.
+     */
+    listPending(workspaceId: string, limit?: number): Promise<APIResponse<ApprovalListResponse>>;
+    reject: (workspaceId: string, approvalId: string, comment?: string) => Promise<APIResponse<ApprovalStatusResponse>>;
+}
+//# sourceMappingURL=approvals.d.ts.map

package/dist/modules/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../src/modules/approvals.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAM/D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3E,MAAM,WAAW,QAAQ;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,EAAE,SAAS,GAAG,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAMD,qBAAa,eAAe;IAEpB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,OAAO;gBADP,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAGjD;;;;OAIG;IACG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;QACrC,MAAM,CAAC,EAAE,cAAc,CAAC;QACxB,KAAK,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAgB9C;;;;OAIG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAYlF;;;;;OAKG;IACG,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAgBtH;;;;;OAKG;IACG,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAgBnH;;OAEG;IACG,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAK9F,MAAM,gBAxBkB,MAAM,cAAc,MAAM,YAAY,MAAM,KAAG,OAAO,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC,CAwBhG;CACtB"}

package/dist/modules/approvals.js

@@ -0,0 +1,91 @@
+/**
+ * Approvals Module - Human-in-the-Loop Native
+ *
+ * Wave 2.x: Real implementation for HITL workflow.
+ * Endpoints: /v1/api/workspaces/{workspaceId}/approvals
+ */
+// ============================================================================
+// Module
+// ============================================================================
+export class ApprovalsModule {
+    client;
+    headers;
+    constructor(client, headers) {
+        this.client = client;
+        this.headers = headers;
+    }
+    /**
+     * List approvals for a workspace.
+     * @param workspaceId - Workspace ID
+     * @param params - Filter options
+     */
+    async list(workspaceId, params) {
+        return this.client.GET("/v1/api/workspaces/{workspaceId}/approvals", {
+            params: {
+                path: { workspaceId },
+                query: {
+                    status: params?.status,
+                    limit: params?.limit ?? 50
+                }
+            },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Get a specific approval by ID.
+     * @param workspaceId - Workspace ID
+     * @param approvalId - Approval ID
+     */
+    async get(workspaceId, approvalId) {
+        return this.client.GET("/v1/api/workspaces/{workspaceId}/approvals/{approvalId}", {
+            params: {
+                path: { workspaceId, approvalId }
+            },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Approve an approval request.
+     * @param workspaceId - Workspace ID
+     * @param approvalId - Approval ID
+     * @param comment - Optional reason for approval
+     */
+    async approve(workspaceId, approvalId, comment) {
+        return this.client.POST("/v1/api/workspaces/{workspaceId}/approvals/{approvalId}/decision", {
+            params: {
+                path: { workspaceId, approvalId }
+            },
+            body: {
+                decision: "approve",
+                comment
+            },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Deny an approval request.
+     * @param workspaceId - Workspace ID
+     * @param approvalId - Approval ID
+     * @param comment - Optional reason for denial
+     */
+    async deny(workspaceId, approvalId, comment) {
+        return this.client.POST("/v1/api/workspaces/{workspaceId}/approvals/{approvalId}/decision", {
+            params: {
+                path: { workspaceId, approvalId }
+            },
+            body: {
+                decision: "deny",
+                comment
+            },
+            headers: this.headers(),
+        });
+    }
+    /**
+     * Shorthand: List pending approvals for a workspace.
+     */
+    async listPending(workspaceId, limit = 50) {
+        return this.list(workspaceId, { status: "pending", limit });
+    }
+    // Convenience aliases
+    reject = this.deny;
+}

package/dist/modules/audit.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Audit Module - Fully Typed
+ */
+import type { RawClient, APIResponse } from "../client/raw.js";
+export interface AuditLogEntry {
+    id: string;
+    tenant_id: string;
+    workspace_id?: string;
+    actor: string;
+    actor_type: "user" | "system" | "api_token";
+    action: string;
+    resource: string;
+    resource_id?: string;
+    metadata?: Record<string, unknown>;
+    ip_address?: string;
+    user_agent?: string;
+    created_at: string;
+}
+export interface AuditListResponse {
+    items: AuditLogEntry[];
+    total: number;
+}
+export declare class AuditModule {
+    private client;
+    private headers;
+    constructor(client: RawClient, headers: () => Record<string, string>);
+    /**
+     * List audit log entries.
+     */
+    list(params?: {
+        actor?: string;
+        action?: string;
+        resource?: string;
+        workspace_id?: string;
+        from?: string;
+        to?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<APIResponse<AuditListResponse>>;
+    /**
+     * Get a specific audit log entry.
+     */
+    get(auditId: string): Promise<APIResponse<AuditLogEntry>>;
+    /**
+     * Search audit logs by action pattern.
+     */
+    search(params?: {
+        query?: string;
+        from?: string;
+        to?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<APIResponse<AuditListResponse>>;
+    /**
+     * Iterate through all audit logs with automatic pagination.
+     *
+     * @example
+     * ```ts
+     * // Get all audit logs for a specific action
+     * for await (const entry of client.audit.iterate({ action: "agent.created" })) {
+     *     console.log(entry.actor, entry.action);
+     * }
+     * ```
+     */
+    iterate(filters?: {
+        actor?: string;
+        action?: string;
+        resource?: string;
+        workspace_id?: string;
+        from?: string;
+        to?: string;
+    }, options?: {
+        pageSize?: number;
+        maxItems?: number;
+        signal?: AbortSignal;
+    }): AsyncGenerator<AuditLogEntry, void, unknown>;
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/modules/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/modules/audit.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAC9B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,WAAW;IACR,OAAO,CAAC,MAAM;IAAa,OAAO,CAAC,OAAO;gBAAlC,MAAM,EAAE,SAAS,EAAU,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAEpF;;OAEG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAiB3C;;OAEG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;IAO/D;;OAEG;IACG,MAAM,CAAC,MAAM,CAAC,EAAE;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAiB3C;;;;;;;;;;OAUG;IACI,OAAO,CACV,OAAO,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,EAAE,CAAC,EAAE,MAAM,CAAC;KACf,EACD,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACzE,cAAc,CAAC,aAAa,EAAE,IAAI,EAAE,OAAO,CAAC;CA6BlD"}