@alfe.ai/agent-api-client 0.0.13 → 0.1.1

package/dist/index.js

@@ -1,4 +1,11 @@
 //#region src/index.ts
+/**
+* Encode each path segment but keep the `/` separators — `encodeURIComponent`
+* would escape the slashes too, breaking greedy proxy routes.
+*/
+function encodeFilePath(filePath) {
+	return filePath.split("/").map(encodeURIComponent).join("/");
+}
 var AgentApiClient = class {
 	apiKey;
 	apiUrl;
@@ -21,6 +28,57 @@ var AgentApiClient = class {
 		}
 		return (await res.json()).data;
 	}
+	async syncRegister(args) {
+		return this.request("/agent/sync/register", {
+			method: "POST",
+			body: JSON.stringify(args ?? {})
+		});
+	}
+	async syncGetManifest() {
+		return this.request("/agent/sync/manifest");
+	}
+	async syncPresign(args) {
+		return this.request("/agent/sync/presign", {
+			method: "POST",
+			body: JSON.stringify(args)
+		});
+	}
+	async syncConfirmUpload(args) {
+		return this.request("/agent/sync/confirm", {
+			method: "POST",
+			body: JSON.stringify(args)
+		});
+	}
+	async syncReconstruct(args) {
+		return this.request("/agent/sync/reconstruct", {
+			method: "POST",
+			body: JSON.stringify(args)
+		});
+	}
+	async syncGetStats() {
+		return this.request("/agent/sync/stats");
+	}
+	async syncListFiles(args) {
+		const qs = new URLSearchParams();
+		if (args?.prefix) qs.set("prefix", args.prefix);
+		const query = qs.toString();
+		return this.request(`/agent/sync/files${query ? `?${query}` : ""}`);
+	}
+	async syncListSessions() {
+		return this.request("/agent/sync/sessions");
+	}
+	async syncGetSession(sessionId) {
+		return this.request(`/agent/sync/sessions/${encodeURIComponent(sessionId)}`);
+	}
+	async syncDeleteFile(filePath) {
+		return this.request(`/agent/sync/files/${encodeFilePath(filePath)}`, { method: "DELETE" });
+	}
+	async sharedListFiles(args) {
+		return this.request(`/agent/org/files/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}`);
+	}
+	async sharedDownloadUrl(args) {
+		return this.request(`/agent/org/files/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/download/${encodeFilePath(args.filePath)}`);
+	}
 	async listIntegrations() {
 		return this.request("/agent/integrations");
 	}
@@ -118,9 +176,12 @@ var AgentApiClient = class {
 		});
 	}
 	/**
-	* Mint a fresh AES-256 data key for a new secret or rotation. The encryption
-	* context is rebuilt server-side from `auth.tenantId` + the body fields; the
-	* agent cannot forge context for a scope it doesn't own.
+	* Mint a fresh AES-256 data key for a specific (secret, field) pair. The
+	* encryption context is rebuilt server-side from `auth.tenantId` + the body
+	* fields including `fieldKey`; the agent cannot forge context for a scope
+	* or field it doesn't own. Legacy single-envelope secrets are migrated to
+	* `field#value` rows by the data migration, so call with `fieldKey: "value"`
+	* to reach them.
 	*/
 	async generateSecretDataKey(args) {
 		return this.request("/agent/secrets/generate-data-key", {
@@ -130,8 +191,9 @@ var AgentApiClient = class {
 	}
 	/**
 	* Unwrap a wrapped data key so the agent can decrypt the envelope locally.
-	* KMS Decrypt will fail with `InvalidCiphertextException` if the envelope
-	* was tampered with in a way that changes `{ tenantId, scope, scopeId, secretId }`.
+	* `fieldKey` MUST match the value supplied when the data key was generated
+	* (it's bound into KMS encryption context); mismatch fails with
+	* `InvalidCiphertextException`.
 	*/
 	async decryptSecretDataKey(args) {
 		return this.request("/agent/secrets/decrypt-data-key", {
@@ -139,23 +201,65 @@ var AgentApiClient = class {
 			body: JSON.stringify(args)
 		});
 	}
-	/** Upload a pre-encrypted envelope for a secret. */
-	async putSecretEnvelope(args) {
+	/**
+	* Create a new secret with one or more fields. Encrypted fields must arrive
+	* pre-sealed (the agent has already obtained per-field data keys via
+	* `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).
+	* Plaintext fields ship the value inline.
+	*/
+	async createSecret(args) {
 		const { scope, scopeId, secretId, ...body } = args;
 		return this.request(`/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}`, {
 			method: "PUT",
 			body: JSON.stringify(body)
 		});
 	}
-	/** Fetch the encrypted envelope for a single secret. */
-	async getSecretEnvelope(args) {
+	/** Fetch the secret aggregate plus per-field encrypted envelopes. */
+	async getSecret(args) {
 		return this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}`);
 	}
-	/** List metadata (never envelopes) for secrets in a scope. */
+	/** Fetch one field. Plaintext: value inline. Encrypted: envelope. */
+	async getSecretField(args) {
+		return this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}/fields/${encodeURIComponent(args.fieldKey)}`);
+	}
+	/** Add OR rotate one field. */
+	async setSecretField(args) {
+		const { scope, scopeId, secretId, fieldKey, ...body } = args;
+		return this.request(`/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}/fields/${encodeURIComponent(fieldKey)}`, {
+			method: "PUT",
+			body: JSON.stringify(body)
+		});
+	}
+	/** Remove one field. */
+	async removeSecretField(args) {
+		await this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}/fields/${encodeURIComponent(args.fieldKey)}`, { method: "DELETE" });
+	}
+	/** Update secret-level metadata (name/description/tags/category). */
+	async updateSecretMetadata(args) {
+		const { scope, scopeId, secretId, ...body } = args;
+		return this.request(`/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}`, {
+			method: "PATCH",
+			body: JSON.stringify(body)
+		});
+	}
+	/** List metadata for secrets in a scope. Optional filters route through the byFacet GSI. */
 	async listSecrets(args) {
-		return (await this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}`)).secrets;
+		const params = new URLSearchParams();
+		if (args.category) params.set("category", args.category);
+		if (args.tag) params.set("tag", args.tag);
+		if (args.fieldKey) params.set("fieldKey", args.fieldKey);
+		const qs = params.toString();
+		return (await this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}${qs ? `?${qs}` : ""}`)).secrets;
+	}
+	/** Bounded changelog read — metadata-only audit entries. */
+	async getSecretHistory(args) {
+		const params = new URLSearchParams();
+		if (args.limit) params.set("limit", String(args.limit));
+		if (args.cursor) params.set("cursor", args.cursor);
+		const qs = params.toString();
+		return this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}/history${qs ? `?${qs}` : ""}`);
 	}
-	/** Delete a secret. */
+	/** Delete a secret (and all its field rows + tag rows + changelog rows). */
 	async deleteSecret(args) {
 		await this.request(`/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}`, { method: "DELETE" });
 	}
@@ -169,26 +273,11 @@ var AgentApiClient = class {
 			body: JSON.stringify(args)
 		});
 	}
-	async enforcePolicy(args) {
-		return this.request("/agent/identity/enforce", {
-			method: "POST",
-			body: JSON.stringify(args)
-		});
-	}
-	async checkToolPermission(args) {
-		return this.request("/agent/identity/check-tool", {
-			method: "POST",
-			body: JSON.stringify(args)
-		});
-	}
 	async searchIdentities(args) {
 		const qs = new URLSearchParams();
 		if (args?.q) qs.set("q", args.q);
 		if (args?.status) qs.set("status", args.status);
-		if (args?.tag) qs.set("tag", args.tag);
-		if (args?.platform) qs.set("platform", args.platform);
 		if (args?.limit) qs.set("limit", String(args.limit));
-		if (args?.offset) qs.set("offset", String(args.offset));
 		const query = qs.toString();
 		return this.request(`/agent/identity/search${query ? `?${query}` : ""}`);
 	}
@@ -222,7 +311,6 @@ var AgentApiClient = class {
 	async getIdentityChangelog(identityId, args) {
 		const qs = new URLSearchParams();
 		if (args?.limit) qs.set("limit", String(args.limit));
-		if (args?.offset) qs.set("offset", String(args.offset));
 		const query = qs.toString();
 		return this.request(`/agent/identity/${encodeURIComponent(identityId)}/changelog${query ? `?${query}` : ""}`);
 	}
@@ -244,6 +332,29 @@ var AgentApiClient = class {
 			body: JSON.stringify(args)
 		});
 	}
+	/**
+	* Update display-shape fields on an Identity. Body excludes `email` /
+	* `phone` / `title` / `company` / `metadata` per Section D4 — contacts go
+	* via the verify flow, title/company live on OrgMembership, metadata is
+	* not agent-writable.
+	*/
+	async updateIdentity(identityId, args) {
+		return this.request(`/agent/identity/${encodeURIComponent(identityId)}/update`, {
+			method: "POST",
+			body: JSON.stringify(args)
+		});
+	}
+	/**
+	* Phase 2 (Section H): server-side verification of a Google Chat sender via
+	* the agent's existing Google OAuth credentials. Returns the resolved
+	* identity (created or matched via Scenario-B email enrichment).
+	*/
+	async resolveGoogleChatSender(args) {
+		return this.request("/agent/google/resolve-sender", {
+			method: "POST",
+			body: JSON.stringify(args)
+		});
+	}
 	async memorySearch(query, opts) {
 		return this.request("/agent/memory/search", {
 			method: "POST",

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * @alfe.ai/agent-api-client — Agent self-service API client.\n *\n * Used by agents calling /agent/ endpoints. The agent authenticates\n * with its API key — the backend resolves agentId + tenantId from the token.\n * No agent ID needed in paths or config.\n */\n\nexport type {\n  IntegrationInstall,\n  IntegrationConfigResult,\n  RegistryEntry,\n  IntegrationConfigSchemaField,\n  SecretScope,\n  EncryptedEnvelopeV1,\n  SecretMetadata,\n  SecretEnvelopeResponse,\n  ScopeInfo,\n  GeneratedDataKey,\n} from \"@alfe/types\";\n\nimport type {\n  IntegrationInstall,\n  IntegrationConfigResult,\n  RegistryEntry,\n  SecretScope,\n  EncryptedEnvelopeV1,\n  SecretMetadata,\n  SecretEnvelopeResponse,\n  ScopeInfo,\n  GeneratedDataKey,\n} from \"@alfe/types\";\n\nexport interface AgentApiClientConfig {\n  apiKey: string;\n  apiUrl: string;\n}\n\nexport class AgentApiClient {\n  private readonly apiKey: string;\n  private readonly apiUrl: string;\n\n  constructor(config: AgentApiClientConfig) {\n    this.apiKey = config.apiKey;\n    this.apiUrl = config.apiUrl;\n  }\n\n  private async request<T>(path: string, options?: RequestInit): Promise<T> {\n    const url = `${this.apiUrl}${path}`;\n    const headers = new Headers(options?.headers);\n    headers.set(\"Authorization\", `Bearer ${this.apiKey}`);\n    headers.set(\"Content-Type\", \"application/json\");\n\n    const res = await fetch(url, { ...options, headers });\n\n    if (!res.ok) {\n      await res.text(); // drain body\n      throw new Error(`Agent API request failed (${String(res.status)})`);\n    }\n\n    const body = (await res.json()) as { data: T };\n    return body.data;\n  }\n\n  async listIntegrations(): Promise<IntegrationInstall[]> {\n    return this.request<IntegrationInstall[]>(\"/agent/integrations\");\n  }\n\n  async getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult> {\n    return this.request<IntegrationConfigResult>(\n      `/agent/integrations/${encodeURIComponent(integrationId)}/config`,\n    );\n  }\n\n  async updateIntegrationConfig(\n    integrationId: string,\n    config: Record<string, unknown>,\n  ): Promise<void> {\n    await this.request<unknown>(\n      `/agent/integrations/${encodeURIComponent(integrationId)}`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify({ config }),\n      },\n    );\n  }\n\n  async installIntegration(\n    integrationId: string,\n    options?: { version?: string; config?: Record<string, unknown> },\n  ): Promise<IntegrationInstall> {\n    return this.request<IntegrationInstall>(\"/agent/integrations\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        integrationId,\n        version: options?.version,\n        config: options?.config,\n      }),\n    });\n  }\n\n  async removeIntegration(integrationId: string): Promise<IntegrationInstall> {\n    return this.request<IntegrationInstall>(\n      `/agent/integrations/${encodeURIComponent(integrationId)}`,\n      { method: \"DELETE\" },\n    );\n  }\n\n  async getOAuthUrl(\n    provider: string,\n    scopes?: string[],\n  ): Promise<{ url: string; provider: string; expiresIn: number }> {\n    const params = new URLSearchParams({ provider });\n    if (scopes?.length) params.set(\"scopes\", scopes.join(\",\"));\n    return this.request(`/agent/integrations/oauth/url?${params.toString()}`);\n  }\n\n  async getOAuthStatus(\n    provider: string,\n  ): Promise<{ provider: string; connected: boolean; config?: Record<string, string> }> {\n    return this.request(\n      `/agent/integrations/oauth/status?provider=${encodeURIComponent(provider)}`,\n    );\n  }\n\n  async getRegistry(): Promise<{ integrations: RegistryEntry[] }> {\n    return this.request<{ integrations: RegistryEntry[] }>(\"/integrations/registry\");\n  }\n\n  async getGoogleCredentials(): Promise<{\n    accounts?: {\n      email: string;\n      refreshToken: string;\n      clientId: string;\n      clientSecret: string;\n      enabledServices?: string[];\n      isDefault: boolean;\n      displayName?: string;\n    }[];\n    email: string;\n    refreshToken: string;\n    clientId: string;\n    clientSecret: string;\n    projectId: string;\n    enabledServices?: string[];\n  }> {\n    return this.request(\"/agent/google/credentials\");\n  }\n\n  async disconnectGoogleAccount(email: string): Promise<{\n    accounts: { email: string; displayName?: string; isDefault: boolean }[];\n  }> {\n    return this.request(`/agent/google/accounts/${encodeURIComponent(email)}`, {\n      method: \"DELETE\",\n    });\n  }\n\n  async setDefaultGoogleAccount(email: string): Promise<{\n    accounts: { email: string; displayName?: string; isDefault: boolean }[];\n  }> {\n    return this.request(`/agent/google/accounts/${encodeURIComponent(email)}/default`, {\n      method: \"PUT\",\n    });\n  }\n\n  async getGoogleChatCredentials(): Promise<{\n    email: string;\n    refreshToken: string;\n    clientId: string;\n    clientSecret: string;\n    displayName?: string;\n  }> {\n    return this.request(\"/agent/google-chat/credentials\");\n  }\n\n  async getGithubCredentials(): Promise<{\n    login: string;\n    accessToken: string;\n  }> {\n    return this.request(\"/agent/github/credentials\");\n  }\n\n  async getXeroCredentials(): Promise<{\n    accessToken: string;\n    accessTokenExpiresAt: string;\n    xeroTenantId: string;\n  }> {\n    return this.request(\"/agent/xero/credentials\");\n  }\n\n  async refreshXeroToken(): Promise<{\n    accessToken: string;\n    expiresAt: string;\n  }> {\n    return this.request(\"/agent/xero/token\", { method: \"POST\" });\n  }\n\n  async getNotionCredentials(): Promise<{\n    accessToken: string;\n    workspaceId: string;\n    workspaceName: string;\n  }> {\n    return this.request(\"/agent/notion/credentials\");\n  }\n\n  async getAtlassianCredentials(): Promise<{\n    accessToken: string;\n    refreshToken: string;\n    accessTokenExpiresAt: string;\n    cloudId: string;\n    siteName: string;\n    siteUrl: string;\n    email: string;\n    enabledProducts: string[];\n    clientId: string;\n    clientSecret: string;\n  }> {\n    return this.request(\"/agent/atlassian/credentials\");\n  }\n\n  async refreshAtlassianToken(): Promise<{\n    accessToken: string;\n    expiresAt: string;\n  }> {\n    return this.request(\"/agent/atlassian/token\", { method: \"POST\" });\n  }\n\n  async getMYOBCredentials(): Promise<{\n    accessToken: string;\n    accessTokenExpiresAt: string;\n    myobBusinessId: string;\n    clientId: string;\n  }> {\n    return this.request(\"/agent/myob/credentials\");\n  }\n\n  async refreshMYOBToken(): Promise<{\n    accessToken: string;\n    expiresAt: string;\n  }> {\n    return this.request(\"/agent/myob/token\", { method: \"POST\" });\n  }\n\n  async getTeamsCredentials(): Promise<{\n    agentId: string;\n    tenantId: string;\n    azureAppId: string;\n    azureBotId: string;\n    azureClientSecret: string;\n    botDisplayName?: string;\n    teamsTenantId?: string;\n    serviceUrl?: string;\n  }> {\n    return this.request(\"/agent/microsoft/credentials\");\n  }\n\n  async sendTeamsMessage(data: {\n    conversationId: string;\n    text?: string;\n    adaptiveCard?: Record<string, unknown>;\n  }): Promise<{ ok: boolean; activityId: string }> {\n    return this.request(\"/agent/microsoft/send\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  async listTeamsChannels(): Promise<{\n    channels: { id: string; name: string; description?: string }[];\n  }> {\n    return this.request(\"/agent/microsoft/channels\");\n  }\n\n  async presignAttachments(files: { filename: string; mimeType: string; size: number }[]): Promise<{\n    attachments: { id: string; uploadUrl: string; downloadUrl: string; s3Key: string; expiresAt: string }[];\n  }> {\n    return this.request(\"/agent/chat/attachments/presign\", {\n      method: \"POST\",\n      body: JSON.stringify({ files }),\n    });\n  }\n\n  async recordActivity(data: {\n    userId?: string;\n    channel: string;\n    role: \"user\" | \"assistant\";\n  }): Promise<{ recorded: boolean }> {\n    return this.request<{ recorded: boolean }>(\"/agent/activity\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  // ─── Secrets ──────────────────────────────────────────────────\n  //\n  // Envelope CRUD + KMS proxy for per-scope encrypted secret storage.\n  // Agents never hold a KMS master key — these proxy endpoints mint one-shot\n  // AES-256 data keys bound (via KMS encryption context) to\n  // `{ tenantId, scope, scopeId, secretId }`. The agent performs AES-256-GCM\n  // locally; the backend only ever sees opaque envelopes.\n  //\n  // Routes resolve to the agent API gateway (mapping key `agent`), where\n  // services/secrets registers its routes with pathPrefix `/secrets`. With\n  // `apiUrl` set to the host root (e.g. `https://api.alfe.ai`), the full URL\n  // is `https://api.alfe.ai/agent/secrets/...`. This is the same mapping as\n  // `/agent/integrations/...` etc. — do NOT hit `/secrets/...` on the root\n  // host: that's the user-auth dashboard gateway, which rejects agent tokens.\n  //\n  // `plaintextKey` in responses is base64 — callers MUST decode to a Node\n  // `Buffer` immediately and zero it after use. NEVER keep plaintext keys\n  // as JS strings (strings are immutable and cannot be wiped).\n\n  /**\n   * Mint a fresh AES-256 data key for a new secret or rotation. The encryption\n   * context is rebuilt server-side from `auth.tenantId` + the body fields; the\n   * agent cannot forge context for a scope it doesn't own.\n   */\n  async generateSecretDataKey(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n  }): Promise<GeneratedDataKey> {\n    return this.request<GeneratedDataKey>(\"/agent/secrets/generate-data-key\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  /**\n   * Unwrap a wrapped data key so the agent can decrypt the envelope locally.\n   * KMS Decrypt will fail with `InvalidCiphertextException` if the envelope\n   * was tampered with in a way that changes `{ tenantId, scope, scopeId, secretId }`.\n   */\n  async decryptSecretDataKey(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    dataKeyCiphertext: string;\n  }): Promise<{ plaintextKey: string }> {\n    return this.request<{ plaintextKey: string }>(\"/agent/secrets/decrypt-data-key\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  /** Upload a pre-encrypted envelope for a secret. */\n  async putSecretEnvelope(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    secretName: string;\n    envelope: EncryptedEnvelopeV1;\n    description?: string;\n    tags?: string[];\n  }): Promise<{ secretId: string }> {\n    const { scope, scopeId, secretId, ...body } = args;\n    return this.request<{ secretId: string }>(\n      `/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}`,\n      {\n        method: \"PUT\",\n        body: JSON.stringify(body),\n      },\n    );\n  }\n\n  /** Fetch the encrypted envelope for a single secret. */\n  async getSecretEnvelope(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n  }): Promise<SecretEnvelopeResponse> {\n    return this.request<SecretEnvelopeResponse>(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}`,\n    );\n  }\n\n  /** List metadata (never envelopes) for secrets in a scope. */\n  async listSecrets(args: {\n    scope: SecretScope;\n    scopeId: string;\n  }): Promise<SecretMetadata[]> {\n    const resp = await this.request<{ secrets: SecretMetadata[] }>(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}`,\n    );\n    return resp.secrets;\n  }\n\n  /** Delete a secret. */\n  async deleteSecret(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n  }): Promise<void> {\n    await this.request<unknown>(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}`,\n      { method: \"DELETE\" },\n    );\n  }\n\n  /** Enumerate scopes (org/team/project/agent) this agent can access. */\n  async listSecretScopes(): Promise<ScopeInfo[]> {\n    const resp = await this.request<{ scopes: ScopeInfo[] }>(\"/agent/secrets/scopes\");\n    return resp.scopes;\n  }\n\n  // ─── Identity ─────────────────────────────────────────────\n  //\n  // Identity resolution, permission enforcement, and CRM tools.\n  // The agent API derives tenantId + agentId from the agent token.\n\n  async resolveIdentity(args: {\n    platform: string;\n    platformId: string;\n    displayName?: string;\n  }): Promise<{\n    identityId: string | null;\n    status: string;\n    accessAllowed: boolean;\n    created?: boolean;\n    reason?: string;\n  }> {\n    return this.request(\"/agent/identity/resolve\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async enforcePolicy(args: {\n    platform: string;\n    senderId: string;\n    channelId?: string;\n  }): Promise<{\n    identityId: string | null;\n    orgId: string | null;\n    role: string | null;\n    allowedTools: string[];\n    deniedTools: string[];\n    identified: boolean;\n  }> {\n    return this.request(\"/agent/identity/enforce\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async checkToolPermission(args: {\n    platform: string;\n    senderId: string;\n    toolName: string;\n    toolArgs?: Record<string, unknown>;\n    channelId?: string;\n  }): Promise<{ allowed: boolean; reason?: string }> {\n    return this.request(\"/agent/identity/check-tool\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async searchIdentities(args?: {\n    q?: string;\n    status?: string;\n    tag?: string;\n    platform?: string;\n    limit?: number;\n    offset?: number;\n  }): Promise<{ identities: unknown[] }> {\n    const qs = new URLSearchParams();\n    if (args?.q) qs.set(\"q\", args.q);\n    if (args?.status) qs.set(\"status\", args.status);\n    if (args?.tag) qs.set(\"tag\", args.tag);\n    if (args?.platform) qs.set(\"platform\", args.platform);\n    if (args?.limit) qs.set(\"limit\", String(args.limit));\n    if (args?.offset) qs.set(\"offset\", String(args.offset));\n    const query = qs.toString();\n    return this.request(`/agent/identity/search${query ? `?${query}` : \"\"}`);\n  }\n\n  async getIdentityContext(identityId: string): Promise<{\n    identity: unknown;\n    recentChanges: unknown[];\n  }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/context`);\n  }\n\n  async mergeIdentities(survivorId: string, args: {\n    mergedId: string;\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean; error?: string }> {\n    return this.request(`/agent/identity/${encodeURIComponent(survivorId)}/merge`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async unmergeIdentity(identityId: string, args: {\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean; error?: string }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/unmerge`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async addIdentityNote(identityId: string, args: {\n    content: string;\n    category?: string;\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ noteId: string | null }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/notes`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async tagIdentity(identityId: string, args: {\n    tag: string;\n    action: \"add\" | \"remove\";\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/tags`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async getIdentityChangelog(identityId: string, args?: {\n    limit?: number;\n    offset?: number;\n  }): Promise<{ entries: unknown[] }> {\n    const qs = new URLSearchParams();\n    if (args?.limit) qs.set(\"limit\", String(args.limit));\n    if (args?.offset) qs.set(\"offset\", String(args.offset));\n    const query = qs.toString();\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/changelog${query ? `?${query}` : \"\"}`);\n  }\n\n  async rollbackIdentity(identityId: string, args: {\n    targetVersion: number;\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean; entry?: unknown }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/rollback`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async requestIdentityVerification(args: {\n    claimedIdentityId: string;\n    requestingIdentityId: string;\n    requestingPlatform: string;\n    requestingPlatformId: string;\n    preferredChannel?: \"sms\" | \"email\";\n  }): Promise<{\n    verificationId: string;\n    channel: string;\n    deliveredTo: string;\n    expiresAt: string;\n    availableChannels: { channel: string; deliveredTo: string }[];\n  } | { error: string }> {\n    return this.request(\"/agent/identity/verify/request\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async confirmIdentityVerification(args: {\n    verificationId: string;\n    phrase: string;\n  }): Promise<{ verified: boolean; identityId?: string; error?: string }> {\n    return this.request(\"/agent/identity/verify/confirm\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  // ─── Memory ──────────────────────────────────────────────\n  //\n  // Cloud memory (Turbopuffer vectors + DynamoDB knowledge graph).\n  // The agent API derives tenantId + agentId from the agent token.\n\n  async memorySearch(query: string, opts?: {\n    limit?: number;\n    topic?: string;\n    subtopic?: string;\n    tag?: string;\n    includeKnowledge?: boolean;\n  }): Promise<{\n    facts: { subject: string; predicate: string; object: string; since: string; confidence: number }[];\n    memories: { id: string; text: string; topic: string; subtopic: string; tag: string; importance: number; timestamp: number; score: number }[];\n  }> {\n    return this.request(\"/agent/memory/search\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        query,\n        limit: opts?.limit ?? 10,\n        topic: opts?.topic,\n        subtopic: opts?.subtopic,\n        tag: opts?.tag,\n        includeKnowledge: opts?.includeKnowledge ?? true,\n      }),\n    });\n  }\n\n  async memoryStore(text: string, opts?: {\n    topic?: string;\n    subtopic?: string;\n    tag?: string;\n    importance?: number;\n  }): Promise<{ memoryId: string }> {\n    return this.request(\"/agent/memory/store\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        text,\n        topic: opts?.topic ?? \"general\",\n        subtopic: opts?.subtopic ?? \"general\",\n        tag: opts?.tag ?? \"fact\",\n        importance: opts?.importance ?? 0.7,\n      }),\n    });\n  }\n\n  async memoryIngest(sessionKey: string, messages: {\n    role: string;\n    content: string;\n    index: number;\n    timestamp?: string;\n  }[], metadata?: {\n    channelId?: string;\n    userId?: string;\n    userName?: string;\n  }): Promise<{ queued: boolean; messageCount: number }> {\n    return this.request(\"/agent/memory/ingest\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        sessionKey,\n        lastProcessedIndex: messages.length > 0 ? messages[messages.length - 1].index : -1,\n        messages,\n        metadata,\n      }),\n    });\n  }\n\n  async memoryLoadContext(tier?: number, topicHint?: string): Promise<{\n    formatted: string;\n    [key: string]: unknown;\n  }> {\n    const params = new URLSearchParams();\n    if (tier !== undefined) params.set(\"tier\", String(tier));\n    if (topicHint) params.set(\"topicHint\", topicHint);\n    const qs = params.toString();\n    return this.request(`/agent/memory/context${qs ? `?${qs}` : \"\"}`);\n  }\n\n  async memoryLookupEntity(subject: string): Promise<{\n    subject: string;\n    triples: { tripleId: string; predicate: string; object: string; validFrom: string; validTo?: string; confidence: number }[];\n  }> {\n    return this.request(`/agent/memory/knowledge/entities?subject=${encodeURIComponent(subject)}`);\n  }\n\n  async memoryNavigate(): Promise<{\n    topics: { name: string; tripleCount: number; subtopics: string[] }[];\n    cursor: string | null;\n  }> {\n    return this.request(\"/agent/memory/navigate\");\n  }\n\n  async memoryDelete(memoryId: string): Promise<{ deleted: boolean }> {\n    return this.request(`/agent/memory/${encodeURIComponent(memoryId)}`, {\n      method: \"DELETE\",\n    });\n  }\n\n  async memoryStats(): Promise<{\n    vectorCount: number;\n    tripleCount: number;\n    storageEstimateBytes: number;\n    lastIngestionAt?: string;\n  }> {\n    return this.request(\"/agent/memory/stats\");\n  }\n\n  // ─── Search ──────────────────────────────────────────────\n\n  async searchWeb(params: {\n    query: string;\n    count?: number;\n    offset?: number;\n    country?: string;\n    freshness?: string;\n  }): Promise<unknown> {\n    return this.request(\"/agent/search/web\", {\n      method: \"POST\",\n      body: JSON.stringify(params),\n    });\n  }\n\n  async searchImages(params: {\n    query: string;\n    count?: number;\n  }): Promise<unknown> {\n    return this.request(\"/agent/search/images\", {\n      method: \"POST\",\n      body: JSON.stringify(params),\n    });\n  }\n\n  async searchNews(params: {\n    query: string;\n    count?: number;\n    freshness?: string;\n  }): Promise<unknown> {\n    return this.request(\"/agent/search/news\", {\n      method: \"POST\",\n      body: JSON.stringify(params),\n    });\n  }\n\n  // ─── Database ───────────────────────────────────────────\n\n  async registerDatabaseCredentials(): Promise<{\n    connectionString: string;\n    username: string;\n    password: string;\n    databases: string[];\n  }> {\n    return this.request(\"/agent/database/register\", { method: \"POST\" });\n  }\n\n  async reportDatabaseAudit(entry: {\n    database: string;\n    collection: string;\n    operation: string;\n    summary?: string;\n  }): Promise<void> {\n    await this.request(\"/agent/database/audit\", {\n      method: \"POST\",\n      body: JSON.stringify(entry),\n    }).catch(() => {\n      // Fire and forget — audit failure doesn't affect operations\n    });\n  }\n}\n"],"mappings":";AAsCA,IAAa,iBAAb,MAA4B;CAC1B;CACA;CAEA,YAAY,QAA8B;AACxC,OAAK,SAAS,OAAO;AACrB,OAAK,SAAS,OAAO;;CAGvB,MAAc,QAAW,MAAc,SAAmC;EACxE,MAAM,MAAM,GAAG,KAAK,SAAS;EAC7B,MAAM,UAAU,IAAI,QAAQ,SAAS,QAAQ;AAC7C,UAAQ,IAAI,iBAAiB,UAAU,KAAK,SAAS;AACrD,UAAQ,IAAI,gBAAgB,mBAAmB;EAE/C,MAAM,MAAM,MAAM,MAAM,KAAK;GAAE,GAAG;GAAS;GAAS,CAAC;AAErD,MAAI,CAAC,IAAI,IAAI;AACX,SAAM,IAAI,MAAM;AAChB,SAAM,IAAI,MAAM,6BAA6B,OAAO,IAAI,OAAO,CAAC,GAAG;;AAIrE,UADc,MAAM,IAAI,MAAM,EAClB;;CAGd,MAAM,mBAAkD;AACtD,SAAO,KAAK,QAA8B,sBAAsB;;CAGlE,MAAM,qBAAqB,eAAyD;AAClF,SAAO,KAAK,QACV,uBAAuB,mBAAmB,cAAc,CAAC,SAC1D;;CAGH,MAAM,wBACJ,eACA,QACe;AACf,QAAM,KAAK,QACT,uBAAuB,mBAAmB,cAAc,IACxD;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;GACjC,CACF;;CAGH,MAAM,mBACJ,eACA,SAC6B;AAC7B,SAAO,KAAK,QAA4B,uBAAuB;GAC7D,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,SAAS,SAAS;IAClB,QAAQ,SAAS;IAClB,CAAC;GACH,CAAC;;CAGJ,MAAM,kBAAkB,eAAoD;AAC1E,SAAO,KAAK,QACV,uBAAuB,mBAAmB,cAAc,IACxD,EAAE,QAAQ,UAAU,CACrB;;CAGH,MAAM,YACJ,UACA,QAC+D;EAC/D,MAAM,SAAS,IAAI,gBAAgB,EAAE,UAAU,CAAC;AAChD,MAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,OAAO,KAAK,IAAI,CAAC;AAC1D,SAAO,KAAK,QAAQ,iCAAiC,OAAO,UAAU,GAAG;;CAG3E,MAAM,eACJ,UACoF;AACpF,SAAO,KAAK,QACV,6CAA6C,mBAAmB,SAAS,GAC1E;;CAGH,MAAM,cAA0D;AAC9D,SAAO,KAAK,QAA2C,yBAAyB;;CAGlF,MAAM,uBAgBH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,wBAAwB,OAE3B;AACD,SAAO,KAAK,QAAQ,0BAA0B,mBAAmB,MAAM,IAAI,EACzE,QAAQ,UACT,CAAC;;CAGJ,MAAM,wBAAwB,OAE3B;AACD,SAAO,KAAK,QAAQ,0BAA0B,mBAAmB,MAAM,CAAC,WAAW,EACjF,QAAQ,OACT,CAAC;;CAGJ,MAAM,2BAMH;AACD,SAAO,KAAK,QAAQ,iCAAiC;;CAGvD,MAAM,uBAGH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,qBAIH;AACD,SAAO,KAAK,QAAQ,0BAA0B;;CAGhD,MAAM,mBAGH;AACD,SAAO,KAAK,QAAQ,qBAAqB,EAAE,QAAQ,QAAQ,CAAC;;CAG9D,MAAM,uBAIH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,0BAWH;AACD,SAAO,KAAK,QAAQ,+BAA+B;;CAGrD,MAAM,wBAGH;AACD,SAAO,KAAK,QAAQ,0BAA0B,EAAE,QAAQ,QAAQ,CAAC;;CAGnE,MAAM,qBAKH;AACD,SAAO,KAAK,QAAQ,0BAA0B;;CAGhD,MAAM,mBAGH;AACD,SAAO,KAAK,QAAQ,qBAAqB,EAAE,QAAQ,QAAQ,CAAC;;CAG9D,MAAM,sBASH;AACD,SAAO,KAAK,QAAQ,+BAA+B;;CAGrD,MAAM,iBAAiB,MAI0B;AAC/C,SAAO,KAAK,QAAQ,yBAAyB;GAC3C,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,oBAEH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,mBAAmB,OAEtB;AACD,SAAO,KAAK,QAAQ,mCAAmC;GACrD,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAChC,CAAC;;CAGJ,MAAM,eAAe,MAIc;AACjC,SAAO,KAAK,QAA+B,mBAAmB;GAC5D,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;CA2BJ,MAAM,sBAAsB,MAIE;AAC5B,SAAO,KAAK,QAA0B,oCAAoC;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;CAQJ,MAAM,qBAAqB,MAKW;AACpC,SAAO,KAAK,QAAkC,mCAAmC;GAC/E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;CAIJ,MAAM,kBAAkB,MAQU;EAChC,MAAM,EAAE,OAAO,SAAS,UAAU,GAAG,SAAS;AAC9C,SAAO,KAAK,QACV,kBAAkB,mBAAmB,MAAM,CAAC,GAAG,mBAAmB,QAAQ,CAAC,GAAG,mBAAmB,SAAS,IAC1G;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CACF;;;CAIH,MAAM,kBAAkB,MAIY;AAClC,SAAO,KAAK,QACV,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,GAC1H;;;CAIH,MAAM,YAAY,MAGY;AAI5B,UAHa,MAAM,KAAK,QACtB,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,GACrF,EACW;;;CAId,MAAM,aAAa,MAID;AAChB,QAAM,KAAK,QACT,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,IACzH,EAAE,QAAQ,UAAU,CACrB;;;CAIH,MAAM,mBAAyC;AAE7C,UADa,MAAM,KAAK,QAAiC,wBAAwB,EACrE;;CAQd,MAAM,gBAAgB,MAUnB;AACD,SAAO,KAAK,QAAQ,2BAA2B;GAC7C,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,cAAc,MAWjB;AACD,SAAO,KAAK,QAAQ,2BAA2B;GAC7C,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,oBAAoB,MAMyB;AACjD,SAAO,KAAK,QAAQ,8BAA8B;GAChD,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,iBAAiB,MAOgB;EACrC,MAAM,KAAK,IAAI,iBAAiB;AAChC,MAAI,MAAM,EAAG,IAAG,IAAI,KAAK,KAAK,EAAE;AAChC,MAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,OAAO;AAC/C,MAAI,MAAM,IAAK,IAAG,IAAI,OAAO,KAAK,IAAI;AACtC,MAAI,MAAM,SAAU,IAAG,IAAI,YAAY,KAAK,SAAS;AACrD,MAAI,MAAM,MAAO,IAAG,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;AACpD,MAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,OAAO,KAAK,OAAO,CAAC;EACvD,MAAM,QAAQ,GAAG,UAAU;AAC3B,SAAO,KAAK,QAAQ,yBAAyB,QAAQ,IAAI,UAAU,KAAK;;CAG1E,MAAM,mBAAmB,YAGtB;AACD,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,UAAU;;CAGlF,MAAM,gBAAgB,YAAoB,MAGG;AAC3C,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,SAAS;GAC7E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,gBAAgB,YAAoB,MAEG;AAC3C,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,WAAW;GAC/E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,gBAAgB,YAAoB,MAIH;AACrC,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,SAAS;GAC7E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,YAAY,YAAoB,MAIT;AAC3B,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,QAAQ;GAC5E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,qBAAqB,YAAoB,MAGX;EAClC,MAAM,KAAK,IAAI,iBAAiB;AAChC,MAAI,MAAM,MAAO,IAAG,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;AACpD,MAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,OAAO,KAAK,OAAO,CAAC;EACvD,MAAM,QAAQ,GAAG,UAAU;AAC3B,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,YAAY,QAAQ,IAAI,UAAU,KAAK;;CAG/G,MAAM,iBAAiB,YAAoB,MAGG;AAC5C,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,YAAY;GAChF,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,4BAA4B,MAYX;AACrB,SAAO,KAAK,QAAQ,kCAAkC;GACpD,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,4BAA4B,MAGsC;AACtE,SAAO,KAAK,QAAQ,kCAAkC;GACpD,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAQJ,MAAM,aAAa,OAAe,MAS/B;AACD,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,OAAO,MAAM,SAAS;IACtB,OAAO,MAAM;IACb,UAAU,MAAM;IAChB,KAAK,MAAM;IACX,kBAAkB,MAAM,oBAAoB;IAC7C,CAAC;GACH,CAAC;;CAGJ,MAAM,YAAY,MAAc,MAKE;AAChC,SAAO,KAAK,QAAQ,uBAAuB;GACzC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,OAAO,MAAM,SAAS;IACtB,UAAU,MAAM,YAAY;IAC5B,KAAK,MAAM,OAAO;IAClB,YAAY,MAAM,cAAc;IACjC,CAAC;GACH,CAAC;;CAGJ,MAAM,aAAa,YAAoB,UAKlC,UAIkD;AACrD,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,oBAAoB,SAAS,SAAS,IAAI,SAAS,SAAS,SAAS,GAAG,QAAQ;IAChF;IACA;IACD,CAAC;GACH,CAAC;;CAGJ,MAAM,kBAAkB,MAAe,WAGpC;EACD,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,SAAS,KAAA,EAAW,QAAO,IAAI,QAAQ,OAAO,KAAK,CAAC;AACxD,MAAI,UAAW,QAAO,IAAI,aAAa,UAAU;EACjD,MAAM,KAAK,OAAO,UAAU;AAC5B,SAAO,KAAK,QAAQ,wBAAwB,KAAK,IAAI,OAAO,KAAK;;CAGnE,MAAM,mBAAmB,SAGtB;AACD,SAAO,KAAK,QAAQ,4CAA4C,mBAAmB,QAAQ,GAAG;;CAGhG,MAAM,iBAGH;AACD,SAAO,KAAK,QAAQ,yBAAyB;;CAG/C,MAAM,aAAa,UAAiD;AAClE,SAAO,KAAK,QAAQ,iBAAiB,mBAAmB,SAAS,IAAI,EACnE,QAAQ,UACT,CAAC;;CAGJ,MAAM,cAKH;AACD,SAAO,KAAK,QAAQ,sBAAsB;;CAK5C,MAAM,UAAU,QAMK;AACnB,SAAO,KAAK,QAAQ,qBAAqB;GACvC,QAAQ;GACR,MAAM,KAAK,UAAU,OAAO;GAC7B,CAAC;;CAGJ,MAAM,aAAa,QAGE;AACnB,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU,OAAO;GAC7B,CAAC;;CAGJ,MAAM,WAAW,QAII;AACnB,SAAO,KAAK,QAAQ,sBAAsB;GACxC,QAAQ;GACR,MAAM,KAAK,UAAU,OAAO;GAC7B,CAAC;;CAKJ,MAAM,8BAKH;AACD,SAAO,KAAK,QAAQ,4BAA4B,EAAE,QAAQ,QAAQ,CAAC;;CAGrE,MAAM,oBAAoB,OAKR;AAChB,QAAM,KAAK,QAAQ,yBAAyB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU,MAAM;GAC5B,CAAC,CAAC,YAAY,GAEb"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * @alfe.ai/agent-api-client — Agent self-service API client.\n *\n * Used by agents calling /agent/ endpoints. The agent authenticates\n * with its API key — the backend resolves agentId + tenantId from the token.\n * No agent ID needed in paths or config.\n */\n\nexport type {\n  IntegrationInstall,\n  IntegrationConfigResult,\n  RegistryEntry,\n  IntegrationConfigSchemaField,\n  SecretScope,\n  EncryptedEnvelopeV1,\n  SecretMetadata,\n  SecretAggregate,\n  Field,\n  FieldFormat,\n  FieldSensitivity,\n  FieldView,\n  FieldEnvelope,\n  SecretCategory,\n  ChangelogEntry,\n  ChangelogAction,\n  ChangelogActor,\n  ScopeInfo,\n  GeneratedDataKey,\n} from \"@alfe/types\";\n\nimport type {\n  IntegrationInstall,\n  IntegrationConfigResult,\n  RegistryEntry,\n  SecretScope,\n  EncryptedEnvelopeV1,\n  SecretMetadata,\n  SecretAggregate,\n  FieldFormat,\n  FieldSensitivity,\n  FieldEnvelope,\n  SecretCategory,\n  ChangelogEntry,\n  ScopeInfo,\n  GeneratedDataKey,\n} from \"@alfe/types\";\n\nexport interface AgentApiClientConfig {\n  apiKey: string;\n  apiUrl: string;\n}\n\n// ─── Sync types ──────────────────────────────────────────\n\nexport interface SyncAgentInfo {\n  agentId: string;\n  tenantId: string;\n  displayName: string;\n  s3Prefix: string;\n  status: \"stale\" | \"syncing\" | \"synced\";\n  fileCount?: number;\n  totalSize?: number;\n  lastSync?: string;\n}\n\nexport interface SyncManifestEntry {\n  hash: string;\n  size: number;\n  modified: string;\n  etag?: string;\n  storageClass?: string;\n  compressed?: boolean;\n}\n\nexport interface SyncManifest {\n  version: 1;\n  agentId: string;\n  lastSync: string;\n  files: Record<string, SyncManifestEntry>;\n}\n\nexport interface SyncPresignedUrl {\n  path: string;\n  url: string;\n  expiresAt: string;\n}\n\nexport interface SyncConfirmedUpload {\n  filePath: string;\n  hash: string;\n  size: number;\n  storageClass: \"STANDARD\" | \"GLACIER_IR\";\n  syncedAt: string;\n}\n\nexport interface SyncReconstructFile {\n  path: string;\n  size: number;\n  url: string;\n  storageClass?: string;\n  compressed?: boolean;\n}\n\nexport interface SyncReconstructBundle {\n  agentId: string;\n  mode: \"full\" | \"active\" | \"memory\";\n  fileCount: number;\n  totalSize: number;\n  files: SyncReconstructFile[];\n  expiresAt: string;\n}\n\nexport interface SyncAgentStats {\n  agentId: string;\n  standardBytes: number;\n  glacierBytes: number;\n  fileCount: number;\n  lastSyncAt: string | null;\n}\n\nexport interface SyncFileEntry {\n  filePath: string;\n  size: number;\n  modified: string;\n  contentHash: string;\n  storageClass?: string;\n  compressed?: boolean;\n}\n\nexport interface SyncSessionEntry {\n  sessionId: string;\n  size: number;\n  lastModified: string;\n  storageClass?: string;\n  isArchived: boolean;\n}\n\nexport interface SyncSessionContent {\n  sessionId: string;\n  content: string;\n  compressed: boolean;\n}\n\nexport interface SharedFileEntry {\n  filePath: string;\n  fileName: string;\n  size: number;\n  contentType?: string;\n}\n\n/**\n * Encode each path segment but keep the `/` separators — `encodeURIComponent`\n * would escape the slashes too, breaking greedy proxy routes.\n */\nfunction encodeFilePath(filePath: string): string {\n  return filePath.split(\"/\").map(encodeURIComponent).join(\"/\");\n}\n\nexport class AgentApiClient {\n  private readonly apiKey: string;\n  private readonly apiUrl: string;\n\n  constructor(config: AgentApiClientConfig) {\n    this.apiKey = config.apiKey;\n    this.apiUrl = config.apiUrl;\n  }\n\n  private async request<T>(path: string, options?: RequestInit): Promise<T> {\n    const url = `${this.apiUrl}${path}`;\n    const headers = new Headers(options?.headers);\n    headers.set(\"Authorization\", `Bearer ${this.apiKey}`);\n    headers.set(\"Content-Type\", \"application/json\");\n\n    const res = await fetch(url, { ...options, headers });\n\n    if (!res.ok) {\n      await res.text(); // drain body\n      throw new Error(`Agent API request failed (${String(res.status)})`);\n    }\n\n    const body = (await res.json()) as { data: T };\n    return body.data;\n  }\n\n  // ─── Sync ────────────────────────────────────────────────\n  //\n  // Workspace backup. The agent only ever calls /agent/sync/* — file\n  // bytes go to/from S3 via presigned URLs (S3 fetch is the one\n  // legitimate raw-fetch in a plugin). Dashboard editing uses the\n  // user-API at /sync/agents/{agentId}/* and is not exposed here.\n\n  async syncRegister(args?: { displayName?: string }): Promise<{ agent: SyncAgentInfo }> {\n    return this.request(\"/agent/sync/register\", {\n      method: \"POST\",\n      body: JSON.stringify(args ?? {}),\n    });\n  }\n\n  async syncGetManifest(): Promise<SyncManifest> {\n    return this.request(\"/agent/sync/manifest\");\n  }\n\n  async syncPresign(args: {\n    files: { path: string; operation: \"put\" | \"get\"; contentType?: string }[];\n  }): Promise<{ urls: SyncPresignedUrl[] }> {\n    return this.request(\"/agent/sync/presign\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async syncConfirmUpload(args: {\n    filePath: string;\n    hash: string;\n    size: number;\n    storageClass?: \"STANDARD\" | \"GLACIER_IR\";\n  }): Promise<SyncConfirmedUpload> {\n    return this.request(\"/agent/sync/confirm\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async syncReconstruct(args: {\n    mode: \"full\" | \"active\" | \"memory\";\n  }): Promise<SyncReconstructBundle> {\n    return this.request(\"/agent/sync/reconstruct\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async syncGetStats(): Promise<SyncAgentStats> {\n    return this.request(\"/agent/sync/stats\");\n  }\n\n  async syncListFiles(args?: { prefix?: string }): Promise<{ files: SyncFileEntry[] }> {\n    const qs = new URLSearchParams();\n    if (args?.prefix) qs.set(\"prefix\", args.prefix);\n    const query = qs.toString();\n    return this.request(`/agent/sync/files${query ? `?${query}` : \"\"}`);\n  }\n\n  async syncListSessions(): Promise<{ sessions: SyncSessionEntry[] }> {\n    return this.request(\"/agent/sync/sessions\");\n  }\n\n  async syncGetSession(sessionId: string): Promise<SyncSessionContent> {\n    return this.request(`/agent/sync/sessions/${encodeURIComponent(sessionId)}`);\n  }\n\n  async syncDeleteFile(filePath: string): Promise<{ removed: boolean }> {\n    return this.request(`/agent/sync/files/${encodeFilePath(filePath)}`, {\n      method: \"DELETE\",\n    });\n  }\n\n  // ─── Shared (org/team/project) files ─────────────────────\n  //\n  // Used by the sync plugin's shared-sync engine to mirror org-scoped\n  // files into the agent's `shared/` directory. Routes live in services/org.\n\n  async sharedListFiles(args: {\n    scope: \"org\" | \"team\" | \"project\";\n    scopeId: string;\n  }): Promise<{ files: SharedFileEntry[]; nextCursor: string | null }> {\n    return this.request(\n      `/agent/org/files/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}`,\n    );\n  }\n\n  async sharedDownloadUrl(args: {\n    scope: \"org\" | \"team\" | \"project\";\n    scopeId: string;\n    filePath: string;\n  }): Promise<{ downloadUrl: string; expiresIn: number }> {\n    return this.request(\n      `/agent/org/files/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/download/${encodeFilePath(args.filePath)}`,\n    );\n  }\n\n  async listIntegrations(): Promise<IntegrationInstall[]> {\n    return this.request<IntegrationInstall[]>(\"/agent/integrations\");\n  }\n\n  async getIntegrationConfig(integrationId: string): Promise<IntegrationConfigResult> {\n    return this.request<IntegrationConfigResult>(\n      `/agent/integrations/${encodeURIComponent(integrationId)}/config`,\n    );\n  }\n\n  async updateIntegrationConfig(\n    integrationId: string,\n    config: Record<string, unknown>,\n  ): Promise<void> {\n    await this.request<unknown>(\n      `/agent/integrations/${encodeURIComponent(integrationId)}`,\n      {\n        method: \"PATCH\",\n        body: JSON.stringify({ config }),\n      },\n    );\n  }\n\n  async installIntegration(\n    integrationId: string,\n    options?: { version?: string; config?: Record<string, unknown> },\n  ): Promise<IntegrationInstall> {\n    return this.request<IntegrationInstall>(\"/agent/integrations\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        integrationId,\n        version: options?.version,\n        config: options?.config,\n      }),\n    });\n  }\n\n  async removeIntegration(integrationId: string): Promise<IntegrationInstall> {\n    return this.request<IntegrationInstall>(\n      `/agent/integrations/${encodeURIComponent(integrationId)}`,\n      { method: \"DELETE\" },\n    );\n  }\n\n  async getOAuthUrl(\n    provider: string,\n    scopes?: string[],\n  ): Promise<{ url: string; provider: string; expiresIn: number }> {\n    const params = new URLSearchParams({ provider });\n    if (scopes?.length) params.set(\"scopes\", scopes.join(\",\"));\n    return this.request(`/agent/integrations/oauth/url?${params.toString()}`);\n  }\n\n  async getOAuthStatus(\n    provider: string,\n  ): Promise<{ provider: string; connected: boolean; config?: Record<string, string> }> {\n    return this.request(\n      `/agent/integrations/oauth/status?provider=${encodeURIComponent(provider)}`,\n    );\n  }\n\n  async getRegistry(): Promise<{ integrations: RegistryEntry[] }> {\n    return this.request<{ integrations: RegistryEntry[] }>(\"/integrations/registry\");\n  }\n\n  async getGoogleCredentials(): Promise<{\n    accounts?: {\n      email: string;\n      refreshToken: string;\n      clientId: string;\n      clientSecret: string;\n      enabledServices?: string[];\n      isDefault: boolean;\n      displayName?: string;\n    }[];\n    email: string;\n    refreshToken: string;\n    clientId: string;\n    clientSecret: string;\n    projectId: string;\n    enabledServices?: string[];\n  }> {\n    return this.request(\"/agent/google/credentials\");\n  }\n\n  async disconnectGoogleAccount(email: string): Promise<{\n    accounts: { email: string; displayName?: string; isDefault: boolean }[];\n  }> {\n    return this.request(`/agent/google/accounts/${encodeURIComponent(email)}`, {\n      method: \"DELETE\",\n    });\n  }\n\n  async setDefaultGoogleAccount(email: string): Promise<{\n    accounts: { email: string; displayName?: string; isDefault: boolean }[];\n  }> {\n    return this.request(`/agent/google/accounts/${encodeURIComponent(email)}/default`, {\n      method: \"PUT\",\n    });\n  }\n\n  async getGoogleChatCredentials(): Promise<{\n    email: string;\n    refreshToken: string;\n    clientId: string;\n    clientSecret: string;\n    displayName?: string;\n  }> {\n    return this.request(\"/agent/google-chat/credentials\");\n  }\n\n  async getGithubCredentials(): Promise<{\n    login: string;\n    accessToken: string;\n  }> {\n    return this.request(\"/agent/github/credentials\");\n  }\n\n  async getXeroCredentials(): Promise<{\n    accessToken: string;\n    accessTokenExpiresAt: string;\n    xeroTenantId: string;\n  }> {\n    return this.request(\"/agent/xero/credentials\");\n  }\n\n  async refreshXeroToken(): Promise<{\n    accessToken: string;\n    expiresAt: string;\n  }> {\n    return this.request(\"/agent/xero/token\", { method: \"POST\" });\n  }\n\n  async getNotionCredentials(): Promise<{\n    accessToken: string;\n    workspaceId: string;\n    workspaceName: string;\n  }> {\n    return this.request(\"/agent/notion/credentials\");\n  }\n\n  async getAtlassianCredentials(): Promise<{\n    accessToken: string;\n    refreshToken: string;\n    accessTokenExpiresAt: string;\n    cloudId: string;\n    siteName: string;\n    siteUrl: string;\n    email: string;\n    enabledProducts: string[];\n    clientId: string;\n    clientSecret: string;\n  }> {\n    return this.request(\"/agent/atlassian/credentials\");\n  }\n\n  async refreshAtlassianToken(): Promise<{\n    accessToken: string;\n    expiresAt: string;\n  }> {\n    return this.request(\"/agent/atlassian/token\", { method: \"POST\" });\n  }\n\n  async getMYOBCredentials(): Promise<{\n    accessToken: string;\n    accessTokenExpiresAt: string;\n    myobBusinessId: string;\n    clientId: string;\n  }> {\n    return this.request(\"/agent/myob/credentials\");\n  }\n\n  async refreshMYOBToken(): Promise<{\n    accessToken: string;\n    expiresAt: string;\n  }> {\n    return this.request(\"/agent/myob/token\", { method: \"POST\" });\n  }\n\n  async getTeamsCredentials(): Promise<{\n    agentId: string;\n    tenantId: string;\n    azureAppId: string;\n    azureBotId: string;\n    azureClientSecret: string;\n    botDisplayName?: string;\n    teamsTenantId?: string;\n    serviceUrl?: string;\n  }> {\n    return this.request(\"/agent/microsoft/credentials\");\n  }\n\n  async sendTeamsMessage(data: {\n    conversationId: string;\n    text?: string;\n    adaptiveCard?: Record<string, unknown>;\n  }): Promise<{ ok: boolean; activityId: string }> {\n    return this.request(\"/agent/microsoft/send\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  async listTeamsChannels(): Promise<{\n    channels: { id: string; name: string; description?: string }[];\n  }> {\n    return this.request(\"/agent/microsoft/channels\");\n  }\n\n  async presignAttachments(files: { filename: string; mimeType: string; size: number }[]): Promise<{\n    attachments: { id: string; uploadUrl: string; downloadUrl: string; s3Key: string; expiresAt: string }[];\n  }> {\n    return this.request(\"/agent/chat/attachments/presign\", {\n      method: \"POST\",\n      body: JSON.stringify({ files }),\n    });\n  }\n\n  async recordActivity(data: {\n    userId?: string;\n    channel: string;\n    role: \"user\" | \"assistant\";\n  }): Promise<{ recorded: boolean }> {\n    return this.request<{ recorded: boolean }>(\"/agent/activity\", {\n      method: \"POST\",\n      body: JSON.stringify(data),\n    });\n  }\n\n  // ─── Secrets ──────────────────────────────────────────────────\n  //\n  // Envelope CRUD + KMS proxy for per-scope encrypted secret storage.\n  // Agents never hold a KMS master key — these proxy endpoints mint one-shot\n  // AES-256 data keys bound (via KMS encryption context) to\n  // `{ tenantId, scope, scopeId, secretId }`. The agent performs AES-256-GCM\n  // locally; the backend only ever sees opaque envelopes.\n  //\n  // Routes resolve to the agent API gateway (mapping key `agent`), where\n  // services/secrets registers its routes with pathPrefix `/secrets`. With\n  // `apiUrl` set to the host root (e.g. `https://api.alfe.ai`), the full URL\n  // is `https://api.alfe.ai/agent/secrets/...`. This is the same mapping as\n  // `/agent/integrations/...` etc. — do NOT hit `/secrets/...` on the root\n  // host: that's the user-auth dashboard gateway, which rejects agent tokens.\n  //\n  // `plaintextKey` in responses is base64 — callers MUST decode to a Node\n  // `Buffer` immediately and zero it after use. NEVER keep plaintext keys\n  // as JS strings (strings are immutable and cannot be wiped).\n\n  /**\n   * Mint a fresh AES-256 data key for a specific (secret, field) pair. The\n   * encryption context is rebuilt server-side from `auth.tenantId` + the body\n   * fields including `fieldKey`; the agent cannot forge context for a scope\n   * or field it doesn't own. Legacy single-envelope secrets are migrated to\n   * `field#value` rows by the data migration, so call with `fieldKey: \"value\"`\n   * to reach them.\n   */\n  async generateSecretDataKey(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    fieldKey: string;\n  }): Promise<GeneratedDataKey> {\n    return this.request<GeneratedDataKey>(\"/agent/secrets/generate-data-key\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  /**\n   * Unwrap a wrapped data key so the agent can decrypt the envelope locally.\n   * `fieldKey` MUST match the value supplied when the data key was generated\n   * (it's bound into KMS encryption context); mismatch fails with\n   * `InvalidCiphertextException`.\n   */\n  async decryptSecretDataKey(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    fieldKey: string;\n    dataKeyCiphertext: string;\n  }): Promise<{ plaintextKey: string }> {\n    return this.request<{ plaintextKey: string }>(\"/agent/secrets/decrypt-data-key\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  /**\n   * Create a new secret with one or more fields. Encrypted fields must arrive\n   * pre-sealed (the agent has already obtained per-field data keys via\n   * `generateSecretDataKey({ ..., fieldKey })` and AES-encrypted locally).\n   * Plaintext fields ship the value inline.\n   */\n  async createSecret(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    secretName: string;\n    category?: SecretCategory;\n    description?: string;\n    tags?: string[];\n    fields: {\n      key: string;\n      format?: FieldFormat;\n      sensitivity: FieldSensitivity;\n      value?: string;\n      envelope?: EncryptedEnvelopeV1;\n    }[];\n    reason?: string;\n  }): Promise<SecretAggregate> {\n    const { scope, scopeId, secretId, ...body } = args;\n    return this.request<SecretAggregate>(\n      `/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}`,\n      {\n        method: \"PUT\",\n        body: JSON.stringify(body),\n      },\n    );\n  }\n\n  /** Fetch the secret aggregate plus per-field encrypted envelopes. */\n  async getSecret(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n  }): Promise<{ aggregate: SecretAggregate; envelopes: FieldEnvelope[] }> {\n    return this.request<{ aggregate: SecretAggregate; envelopes: FieldEnvelope[] }>(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}`,\n    );\n  }\n\n  /** Fetch one field. Plaintext: value inline. Encrypted: envelope. */\n  async getSecretField(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    fieldKey: string;\n  }): Promise<{\n    key: string;\n    sensitivity: FieldSensitivity;\n    format?: FieldFormat;\n    value?: string;\n    envelope?: EncryptedEnvelopeV1;\n    rotatedAt?: string;\n    createdAt: string;\n    updatedAt: string;\n  }> {\n    return this.request(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}/fields/${encodeURIComponent(args.fieldKey)}`,\n    );\n  }\n\n  /** Add OR rotate one field. */\n  async setSecretField(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    fieldKey: string;\n    sensitivity: FieldSensitivity;\n    format?: FieldFormat;\n    value?: string;\n    envelope?: EncryptedEnvelopeV1;\n    reason?: string;\n  }): Promise<{ fieldKey: string; rotated: boolean }> {\n    const { scope, scopeId, secretId, fieldKey, ...body } = args;\n    return this.request(\n      `/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}/fields/${encodeURIComponent(fieldKey)}`,\n      { method: \"PUT\", body: JSON.stringify(body) },\n    );\n  }\n\n  /** Remove one field. */\n  async removeSecretField(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    fieldKey: string;\n  }): Promise<void> {\n    await this.request(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}/fields/${encodeURIComponent(args.fieldKey)}`,\n      { method: \"DELETE\" },\n    );\n  }\n\n  /** Update secret-level metadata (name/description/tags/category). */\n  async updateSecretMetadata(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    secretName?: string;\n    description?: string;\n    tags?: string[];\n    category?: SecretCategory;\n    reason?: string;\n  }): Promise<SecretAggregate> {\n    const { scope, scopeId, secretId, ...body } = args;\n    return this.request<SecretAggregate>(\n      `/agent/secrets/${encodeURIComponent(scope)}/${encodeURIComponent(scopeId)}/${encodeURIComponent(secretId)}`,\n      { method: \"PATCH\", body: JSON.stringify(body) },\n    );\n  }\n\n  /** List metadata for secrets in a scope. Optional filters route through the byFacet GSI. */\n  async listSecrets(args: {\n    scope: SecretScope;\n    scopeId: string;\n    category?: SecretCategory;\n    tag?: string;\n    fieldKey?: string;\n  }): Promise<SecretMetadata[]> {\n    const params = new URLSearchParams();\n    if (args.category) params.set(\"category\", args.category);\n    if (args.tag) params.set(\"tag\", args.tag);\n    if (args.fieldKey) params.set(\"fieldKey\", args.fieldKey);\n    const qs = params.toString();\n    const resp = await this.request<{ secrets: SecretMetadata[] }>(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}${qs ? `?${qs}` : \"\"}`,\n    );\n    return resp.secrets;\n  }\n\n  /** Bounded changelog read — metadata-only audit entries. */\n  async getSecretHistory(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n    limit?: number;\n    cursor?: string;\n  }): Promise<{ entries: ChangelogEntry[]; nextCursor?: string }> {\n    const params = new URLSearchParams();\n    if (args.limit) params.set(\"limit\", String(args.limit));\n    if (args.cursor) params.set(\"cursor\", args.cursor);\n    const qs = params.toString();\n    return this.request(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}/history${qs ? `?${qs}` : \"\"}`,\n    );\n  }\n\n  /** Delete a secret (and all its field rows + tag rows + changelog rows). */\n  async deleteSecret(args: {\n    scope: SecretScope;\n    scopeId: string;\n    secretId: string;\n  }): Promise<void> {\n    await this.request<unknown>(\n      `/agent/secrets/${encodeURIComponent(args.scope)}/${encodeURIComponent(args.scopeId)}/${encodeURIComponent(args.secretId)}`,\n      { method: \"DELETE\" },\n    );\n  }\n\n  /** Enumerate scopes (org/team/project/agent) this agent can access. */\n  async listSecretScopes(): Promise<ScopeInfo[]> {\n    const resp = await this.request<{ scopes: ScopeInfo[] }>(\"/agent/secrets/scopes\");\n    return resp.scopes;\n  }\n\n  // ─── Identity ─────────────────────────────────────────────\n  //\n  // Identity resolution, permission enforcement, and CRM tools.\n  // The agent API derives tenantId + agentId from the agent token.\n\n  async resolveIdentity(args: {\n    provider: string;\n    platformId: string;\n    kind?: \"user\" | \"agent\" | \"service\" | \"bot\" | \"workspace\";\n    displayName?: string;\n  }): Promise<{\n    identityId: string | null;\n    status: string;\n    accessAllowed: boolean;\n    created?: boolean;\n    reason?: string;\n  }> {\n    return this.request(\"/agent/identity/resolve\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async searchIdentities(args?: {\n    q?: string;\n    status?: string;\n    limit?: number;\n  }): Promise<{ identities: unknown[] }> {\n    const qs = new URLSearchParams();\n    if (args?.q) qs.set(\"q\", args.q);\n    if (args?.status) qs.set(\"status\", args.status);\n    if (args?.limit) qs.set(\"limit\", String(args.limit));\n    const query = qs.toString();\n    return this.request(`/agent/identity/search${query ? `?${query}` : \"\"}`);\n  }\n\n  async getIdentityContext(identityId: string): Promise<{\n    context: unknown;\n  }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/context`);\n  }\n\n  async mergeIdentities(survivorId: string, args: {\n    mergedId: string;\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean; error?: string }> {\n    return this.request(`/agent/identity/${encodeURIComponent(survivorId)}/merge`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async unmergeIdentity(identityId: string, args: {\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean; error?: string }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/unmerge`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async addIdentityNote(identityId: string, args: {\n    content: string;\n    category?: string;\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ noteId: string | null }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/notes`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async tagIdentity(identityId: string, args: {\n    tag: string;\n    action: \"add\" | \"remove\";\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/tags`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async getIdentityChangelog(identityId: string, args?: {\n    limit?: number;\n  }): Promise<{ entries: unknown[] }> {\n    const qs = new URLSearchParams();\n    if (args?.limit) qs.set(\"limit\", String(args.limit));\n    const query = qs.toString();\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/changelog${query ? `?${query}` : \"\"}`);\n  }\n\n  async rollbackIdentity(identityId: string, args: {\n    targetVersion: number;\n    changedBy: { type: string; id: string; name?: string };\n  }): Promise<{ ok: boolean; entry?: unknown }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/rollback`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async requestIdentityVerification(args: {\n    claimedIdentityId: string;\n    requestingIdentityId: string;\n    requestingProvider: string;\n    requestingPlatformId: string;\n    preferredChannel?: \"mobile\" | \"email\";\n    /**\n     * Phase 2: agent-supplied contact endpoint. When provided, the top-level\n     * `preferredChannel` is ignored — the contact's channel wins.\n     */\n    contact?: { channel: \"email\" | \"mobile\"; value: string };\n  }): Promise<{\n    verificationId: string;\n    channel: string;\n    deliveredTo: string;\n    expiresAt: string;\n    availableChannels: { channel: string; deliveredTo: string }[];\n  } | { error: string }> {\n    return this.request(\"/agent/identity/verify/request\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  async confirmIdentityVerification(args: {\n    claimedIdentityId: string;\n    verificationId: string;\n    phrase: string;\n  }): Promise<{\n    verified: boolean;\n    identityId?: string;\n    /** Phase 2: how the confirm resolved — Scenario A vs B. */\n    action?: \"merged\" | \"contact_verified\";\n    error?: string;\n  }> {\n    return this.request(\"/agent/identity/verify/confirm\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  /**\n   * Update display-shape fields on an Identity. Body excludes `email` /\n   * `phone` / `title` / `company` / `metadata` per Section D4 — contacts go\n   * via the verify flow, title/company live on OrgMembership, metadata is\n   * not agent-writable.\n   */\n  async updateIdentity(\n    identityId: string,\n    args: {\n      name?: string;\n      avatarUrl?: string;\n      timezone?: string;\n      locale?: string;\n    },\n  ): Promise<{ ok: boolean }> {\n    return this.request(`/agent/identity/${encodeURIComponent(identityId)}/update`, {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  /**\n   * Phase 2 (Section H): server-side verification of a Google Chat sender via\n   * the agent's existing Google OAuth credentials. Returns the resolved\n   * identity (created or matched via Scenario-B email enrichment).\n   */\n  async resolveGoogleChatSender(args: {\n    senderUserId: string;\n    spaceId?: string;\n  }): Promise<{\n    identityId: string | null;\n    status: string;\n    accessAllowed: boolean;\n  }> {\n    return this.request(\"/agent/google/resolve-sender\", {\n      method: \"POST\",\n      body: JSON.stringify(args),\n    });\n  }\n\n  // ─── Memory ──────────────────────────────────────────────\n  //\n  // Cloud memory (Turbopuffer vectors + DynamoDB knowledge graph).\n  // The agent API derives tenantId + agentId from the agent token.\n\n  async memorySearch(query: string, opts?: {\n    limit?: number;\n    topic?: string;\n    subtopic?: string;\n    tag?: string;\n    includeKnowledge?: boolean;\n  }): Promise<{\n    facts: { subject: string; predicate: string; object: string; since: string; confidence: number }[];\n    memories: { id: string; text: string; topic: string; subtopic: string; tag: string; importance: number; timestamp: number; score: number }[];\n  }> {\n    return this.request(\"/agent/memory/search\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        query,\n        limit: opts?.limit ?? 10,\n        topic: opts?.topic,\n        subtopic: opts?.subtopic,\n        tag: opts?.tag,\n        includeKnowledge: opts?.includeKnowledge ?? true,\n      }),\n    });\n  }\n\n  async memoryStore(text: string, opts?: {\n    topic?: string;\n    subtopic?: string;\n    tag?: string;\n    importance?: number;\n  }): Promise<{ memoryId: string }> {\n    return this.request(\"/agent/memory/store\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        text,\n        topic: opts?.topic ?? \"general\",\n        subtopic: opts?.subtopic ?? \"general\",\n        tag: opts?.tag ?? \"fact\",\n        importance: opts?.importance ?? 0.7,\n      }),\n    });\n  }\n\n  async memoryIngest(sessionKey: string, messages: {\n    role: string;\n    content: string;\n    index: number;\n    timestamp?: string;\n  }[], metadata?: {\n    channelId?: string;\n    userId?: string;\n    userName?: string;\n  }): Promise<{ queued: boolean; messageCount: number }> {\n    return this.request(\"/agent/memory/ingest\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        sessionKey,\n        lastProcessedIndex: messages.length > 0 ? messages[messages.length - 1].index : -1,\n        messages,\n        metadata,\n      }),\n    });\n  }\n\n  async memoryLoadContext(tier?: number, topicHint?: string): Promise<{\n    formatted: string;\n    [key: string]: unknown;\n  }> {\n    const params = new URLSearchParams();\n    if (tier !== undefined) params.set(\"tier\", String(tier));\n    if (topicHint) params.set(\"topicHint\", topicHint);\n    const qs = params.toString();\n    return this.request(`/agent/memory/context${qs ? `?${qs}` : \"\"}`);\n  }\n\n  async memoryLookupEntity(subject: string): Promise<{\n    subject: string;\n    triples: { tripleId: string; predicate: string; object: string; validFrom: string; validTo?: string; confidence: number }[];\n  }> {\n    return this.request(`/agent/memory/knowledge/entities?subject=${encodeURIComponent(subject)}`);\n  }\n\n  async memoryNavigate(): Promise<{\n    topics: { name: string; tripleCount: number; subtopics: string[] }[];\n    cursor: string | null;\n  }> {\n    return this.request(\"/agent/memory/navigate\");\n  }\n\n  async memoryDelete(memoryId: string): Promise<{ deleted: boolean }> {\n    return this.request(`/agent/memory/${encodeURIComponent(memoryId)}`, {\n      method: \"DELETE\",\n    });\n  }\n\n  async memoryStats(): Promise<{\n    vectorCount: number;\n    tripleCount: number;\n    storageEstimateBytes: number;\n    lastIngestionAt?: string;\n  }> {\n    return this.request(\"/agent/memory/stats\");\n  }\n\n  // ─── Search ──────────────────────────────────────────────\n\n  async searchWeb(params: {\n    query: string;\n    count?: number;\n    offset?: number;\n    country?: string;\n    freshness?: string;\n  }): Promise<unknown> {\n    return this.request(\"/agent/search/web\", {\n      method: \"POST\",\n      body: JSON.stringify(params),\n    });\n  }\n\n  async searchImages(params: {\n    query: string;\n    count?: number;\n  }): Promise<unknown> {\n    return this.request(\"/agent/search/images\", {\n      method: \"POST\",\n      body: JSON.stringify(params),\n    });\n  }\n\n  async searchNews(params: {\n    query: string;\n    count?: number;\n    freshness?: string;\n  }): Promise<unknown> {\n    return this.request(\"/agent/search/news\", {\n      method: \"POST\",\n      body: JSON.stringify(params),\n    });\n  }\n\n  // ─── Database ───────────────────────────────────────────\n\n  async registerDatabaseCredentials(): Promise<{\n    connectionString: string;\n    username: string;\n    password: string;\n    databases: string[];\n  }> {\n    return this.request(\"/agent/database/register\", { method: \"POST\" });\n  }\n\n  async reportDatabaseAudit(entry: {\n    database: string;\n    collection: string;\n    operation: string;\n    summary?: string;\n  }): Promise<void> {\n    await this.request(\"/agent/database/audit\", {\n      method: \"POST\",\n      body: JSON.stringify(entry),\n    }).catch(() => {\n      // Fire and forget — audit failure doesn't affect operations\n    });\n  }\n}\n"],"mappings":";;;;;AA0JA,SAAS,eAAe,UAA0B;AAChD,QAAO,SAAS,MAAM,IAAI,CAAC,IAAI,mBAAmB,CAAC,KAAK,IAAI;;AAG9D,IAAa,iBAAb,MAA4B;CAC1B;CACA;CAEA,YAAY,QAA8B;AACxC,OAAK,SAAS,OAAO;AACrB,OAAK,SAAS,OAAO;;CAGvB,MAAc,QAAW,MAAc,SAAmC;EACxE,MAAM,MAAM,GAAG,KAAK,SAAS;EAC7B,MAAM,UAAU,IAAI,QAAQ,SAAS,QAAQ;AAC7C,UAAQ,IAAI,iBAAiB,UAAU,KAAK,SAAS;AACrD,UAAQ,IAAI,gBAAgB,mBAAmB;EAE/C,MAAM,MAAM,MAAM,MAAM,KAAK;GAAE,GAAG;GAAS;GAAS,CAAC;AAErD,MAAI,CAAC,IAAI,IAAI;AACX,SAAM,IAAI,MAAM;AAChB,SAAM,IAAI,MAAM,6BAA6B,OAAO,IAAI,OAAO,CAAC,GAAG;;AAIrE,UADc,MAAM,IAAI,MAAM,EAClB;;CAUd,MAAM,aAAa,MAAoE;AACrF,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU,QAAQ,EAAE,CAAC;GACjC,CAAC;;CAGJ,MAAM,kBAAyC;AAC7C,SAAO,KAAK,QAAQ,uBAAuB;;CAG7C,MAAM,YAAY,MAEwB;AACxC,SAAO,KAAK,QAAQ,uBAAuB;GACzC,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,kBAAkB,MAKS;AAC/B,SAAO,KAAK,QAAQ,uBAAuB;GACzC,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,gBAAgB,MAEa;AACjC,SAAO,KAAK,QAAQ,2BAA2B;GAC7C,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,eAAwC;AAC5C,SAAO,KAAK,QAAQ,oBAAoB;;CAG1C,MAAM,cAAc,MAAiE;EACnF,MAAM,KAAK,IAAI,iBAAiB;AAChC,MAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,OAAO;EAC/C,MAAM,QAAQ,GAAG,UAAU;AAC3B,SAAO,KAAK,QAAQ,oBAAoB,QAAQ,IAAI,UAAU,KAAK;;CAGrE,MAAM,mBAA8D;AAClE,SAAO,KAAK,QAAQ,uBAAuB;;CAG7C,MAAM,eAAe,WAAgD;AACnE,SAAO,KAAK,QAAQ,wBAAwB,mBAAmB,UAAU,GAAG;;CAG9E,MAAM,eAAe,UAAiD;AACpE,SAAO,KAAK,QAAQ,qBAAqB,eAAe,SAAS,IAAI,EACnE,QAAQ,UACT,CAAC;;CAQJ,MAAM,gBAAgB,MAG+C;AACnE,SAAO,KAAK,QACV,oBAAoB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,GACvF;;CAGH,MAAM,kBAAkB,MAIgC;AACtD,SAAO,KAAK,QACV,oBAAoB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,YAAY,eAAe,KAAK,SAAS,GACjI;;CAGH,MAAM,mBAAkD;AACtD,SAAO,KAAK,QAA8B,sBAAsB;;CAGlE,MAAM,qBAAqB,eAAyD;AAClF,SAAO,KAAK,QACV,uBAAuB,mBAAmB,cAAc,CAAC,SAC1D;;CAGH,MAAM,wBACJ,eACA,QACe;AACf,QAAM,KAAK,QACT,uBAAuB,mBAAmB,cAAc,IACxD;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC;GACjC,CACF;;CAGH,MAAM,mBACJ,eACA,SAC6B;AAC7B,SAAO,KAAK,QAA4B,uBAAuB;GAC7D,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,SAAS,SAAS;IAClB,QAAQ,SAAS;IAClB,CAAC;GACH,CAAC;;CAGJ,MAAM,kBAAkB,eAAoD;AAC1E,SAAO,KAAK,QACV,uBAAuB,mBAAmB,cAAc,IACxD,EAAE,QAAQ,UAAU,CACrB;;CAGH,MAAM,YACJ,UACA,QAC+D;EAC/D,MAAM,SAAS,IAAI,gBAAgB,EAAE,UAAU,CAAC;AAChD,MAAI,QAAQ,OAAQ,QAAO,IAAI,UAAU,OAAO,KAAK,IAAI,CAAC;AAC1D,SAAO,KAAK,QAAQ,iCAAiC,OAAO,UAAU,GAAG;;CAG3E,MAAM,eACJ,UACoF;AACpF,SAAO,KAAK,QACV,6CAA6C,mBAAmB,SAAS,GAC1E;;CAGH,MAAM,cAA0D;AAC9D,SAAO,KAAK,QAA2C,yBAAyB;;CAGlF,MAAM,uBAgBH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,wBAAwB,OAE3B;AACD,SAAO,KAAK,QAAQ,0BAA0B,mBAAmB,MAAM,IAAI,EACzE,QAAQ,UACT,CAAC;;CAGJ,MAAM,wBAAwB,OAE3B;AACD,SAAO,KAAK,QAAQ,0BAA0B,mBAAmB,MAAM,CAAC,WAAW,EACjF,QAAQ,OACT,CAAC;;CAGJ,MAAM,2BAMH;AACD,SAAO,KAAK,QAAQ,iCAAiC;;CAGvD,MAAM,uBAGH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,qBAIH;AACD,SAAO,KAAK,QAAQ,0BAA0B;;CAGhD,MAAM,mBAGH;AACD,SAAO,KAAK,QAAQ,qBAAqB,EAAE,QAAQ,QAAQ,CAAC;;CAG9D,MAAM,uBAIH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,0BAWH;AACD,SAAO,KAAK,QAAQ,+BAA+B;;CAGrD,MAAM,wBAGH;AACD,SAAO,KAAK,QAAQ,0BAA0B,EAAE,QAAQ,QAAQ,CAAC;;CAGnE,MAAM,qBAKH;AACD,SAAO,KAAK,QAAQ,0BAA0B;;CAGhD,MAAM,mBAGH;AACD,SAAO,KAAK,QAAQ,qBAAqB,EAAE,QAAQ,QAAQ,CAAC;;CAG9D,MAAM,sBASH;AACD,SAAO,KAAK,QAAQ,+BAA+B;;CAGrD,MAAM,iBAAiB,MAI0B;AAC/C,SAAO,KAAK,QAAQ,yBAAyB;GAC3C,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,oBAEH;AACD,SAAO,KAAK,QAAQ,4BAA4B;;CAGlD,MAAM,mBAAmB,OAEtB;AACD,SAAO,KAAK,QAAQ,mCAAmC;GACrD,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAChC,CAAC;;CAGJ,MAAM,eAAe,MAIc;AACjC,SAAO,KAAK,QAA+B,mBAAmB;GAC5D,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;;;;CA8BJ,MAAM,sBAAsB,MAKE;AAC5B,SAAO,KAAK,QAA0B,oCAAoC;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;;CASJ,MAAM,qBAAqB,MAMW;AACpC,SAAO,KAAK,QAAkC,mCAAmC;GAC/E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;;CASJ,MAAM,aAAa,MAgBU;EAC3B,MAAM,EAAE,OAAO,SAAS,UAAU,GAAG,SAAS;AAC9C,SAAO,KAAK,QACV,kBAAkB,mBAAmB,MAAM,CAAC,GAAG,mBAAmB,QAAQ,CAAC,GAAG,mBAAmB,SAAS,IAC1G;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CACF;;;CAIH,MAAM,UAAU,MAIwD;AACtE,SAAO,KAAK,QACV,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,GAC1H;;;CAIH,MAAM,eAAe,MAclB;AACD,SAAO,KAAK,QACV,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,CAAC,UAAU,mBAAmB,KAAK,SAAS,GACtK;;;CAIH,MAAM,eAAe,MAU+B;EAClD,MAAM,EAAE,OAAO,SAAS,UAAU,UAAU,GAAG,SAAS;AACxD,SAAO,KAAK,QACV,kBAAkB,mBAAmB,MAAM,CAAC,GAAG,mBAAmB,QAAQ,CAAC,GAAG,mBAAmB,SAAS,CAAC,UAAU,mBAAmB,SAAS,IACjJ;GAAE,QAAQ;GAAO,MAAM,KAAK,UAAU,KAAK;GAAE,CAC9C;;;CAIH,MAAM,kBAAkB,MAKN;AAChB,QAAM,KAAK,QACT,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,CAAC,UAAU,mBAAmB,KAAK,SAAS,IACrK,EAAE,QAAQ,UAAU,CACrB;;;CAIH,MAAM,qBAAqB,MASE;EAC3B,MAAM,EAAE,OAAO,SAAS,UAAU,GAAG,SAAS;AAC9C,SAAO,KAAK,QACV,kBAAkB,mBAAmB,MAAM,CAAC,GAAG,mBAAmB,QAAQ,CAAC,GAAG,mBAAmB,SAAS,IAC1G;GAAE,QAAQ;GAAS,MAAM,KAAK,UAAU,KAAK;GAAE,CAChD;;;CAIH,MAAM,YAAY,MAMY;EAC5B,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,KAAK,SAAU,QAAO,IAAI,YAAY,KAAK,SAAS;AACxD,MAAI,KAAK,IAAK,QAAO,IAAI,OAAO,KAAK,IAAI;AACzC,MAAI,KAAK,SAAU,QAAO,IAAI,YAAY,KAAK,SAAS;EACxD,MAAM,KAAK,OAAO,UAAU;AAI5B,UAHa,MAAM,KAAK,QACtB,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,GAAG,KAAK,IAAI,OAAO,KACxG,EACW;;;CAId,MAAM,iBAAiB,MAMyC;EAC9D,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,KAAK,MAAO,QAAO,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;AACvD,MAAI,KAAK,OAAQ,QAAO,IAAI,UAAU,KAAK,OAAO;EAClD,MAAM,KAAK,OAAO,UAAU;AAC5B,SAAO,KAAK,QACV,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,CAAC,UAAU,KAAK,IAAI,OAAO,KACrJ;;;CAIH,MAAM,aAAa,MAID;AAChB,QAAM,KAAK,QACT,kBAAkB,mBAAmB,KAAK,MAAM,CAAC,GAAG,mBAAmB,KAAK,QAAQ,CAAC,GAAG,mBAAmB,KAAK,SAAS,IACzH,EAAE,QAAQ,UAAU,CACrB;;;CAIH,MAAM,mBAAyC;AAE7C,UADa,MAAM,KAAK,QAAiC,wBAAwB,EACrE;;CAQd,MAAM,gBAAgB,MAWnB;AACD,SAAO,KAAK,QAAQ,2BAA2B;GAC7C,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,iBAAiB,MAIgB;EACrC,MAAM,KAAK,IAAI,iBAAiB;AAChC,MAAI,MAAM,EAAG,IAAG,IAAI,KAAK,KAAK,EAAE;AAChC,MAAI,MAAM,OAAQ,IAAG,IAAI,UAAU,KAAK,OAAO;AAC/C,MAAI,MAAM,MAAO,IAAG,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;EACpD,MAAM,QAAQ,GAAG,UAAU;AAC3B,SAAO,KAAK,QAAQ,yBAAyB,QAAQ,IAAI,UAAU,KAAK;;CAG1E,MAAM,mBAAmB,YAEtB;AACD,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,UAAU;;CAGlF,MAAM,gBAAgB,YAAoB,MAGG;AAC3C,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,SAAS;GAC7E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,gBAAgB,YAAoB,MAEG;AAC3C,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,WAAW;GAC/E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,gBAAgB,YAAoB,MAIH;AACrC,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,SAAS;GAC7E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,YAAY,YAAoB,MAIT;AAC3B,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,QAAQ;GAC5E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,qBAAqB,YAAoB,MAEX;EAClC,MAAM,KAAK,IAAI,iBAAiB;AAChC,MAAI,MAAM,MAAO,IAAG,IAAI,SAAS,OAAO,KAAK,MAAM,CAAC;EACpD,MAAM,QAAQ,GAAG,UAAU;AAC3B,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,YAAY,QAAQ,IAAI,UAAU,KAAK;;CAG/G,MAAM,iBAAiB,YAAoB,MAGG;AAC5C,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,YAAY;GAChF,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,4BAA4B,MAiBX;AACrB,SAAO,KAAK,QAAQ,kCAAkC;GACpD,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAGJ,MAAM,4BAA4B,MAU/B;AACD,SAAO,KAAK,QAAQ,kCAAkC;GACpD,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;;CASJ,MAAM,eACJ,YACA,MAM0B;AAC1B,SAAO,KAAK,QAAQ,mBAAmB,mBAAmB,WAAW,CAAC,UAAU;GAC9E,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;;;;;;CAQJ,MAAM,wBAAwB,MAO3B;AACD,SAAO,KAAK,QAAQ,gCAAgC;GAClD,QAAQ;GACR,MAAM,KAAK,UAAU,KAAK;GAC3B,CAAC;;CAQJ,MAAM,aAAa,OAAe,MAS/B;AACD,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,OAAO,MAAM,SAAS;IACtB,OAAO,MAAM;IACb,UAAU,MAAM;IAChB,KAAK,MAAM;IACX,kBAAkB,MAAM,oBAAoB;IAC7C,CAAC;GACH,CAAC;;CAGJ,MAAM,YAAY,MAAc,MAKE;AAChC,SAAO,KAAK,QAAQ,uBAAuB;GACzC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,OAAO,MAAM,SAAS;IACtB,UAAU,MAAM,YAAY;IAC5B,KAAK,MAAM,OAAO;IAClB,YAAY,MAAM,cAAc;IACjC,CAAC;GACH,CAAC;;CAGJ,MAAM,aAAa,YAAoB,UAKlC,UAIkD;AACrD,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB;IACA,oBAAoB,SAAS,SAAS,IAAI,SAAS,SAAS,SAAS,GAAG,QAAQ;IAChF;IACA;IACD,CAAC;GACH,CAAC;;CAGJ,MAAM,kBAAkB,MAAe,WAGpC;EACD,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,SAAS,KAAA,EAAW,QAAO,IAAI,QAAQ,OAAO,KAAK,CAAC;AACxD,MAAI,UAAW,QAAO,IAAI,aAAa,UAAU;EACjD,MAAM,KAAK,OAAO,UAAU;AAC5B,SAAO,KAAK,QAAQ,wBAAwB,KAAK,IAAI,OAAO,KAAK;;CAGnE,MAAM,mBAAmB,SAGtB;AACD,SAAO,KAAK,QAAQ,4CAA4C,mBAAmB,QAAQ,GAAG;;CAGhG,MAAM,iBAGH;AACD,SAAO,KAAK,QAAQ,yBAAyB;;CAG/C,MAAM,aAAa,UAAiD;AAClE,SAAO,KAAK,QAAQ,iBAAiB,mBAAmB,SAAS,IAAI,EACnE,QAAQ,UACT,CAAC;;CAGJ,MAAM,cAKH;AACD,SAAO,KAAK,QAAQ,sBAAsB;;CAK5C,MAAM,UAAU,QAMK;AACnB,SAAO,KAAK,QAAQ,qBAAqB;GACvC,QAAQ;GACR,MAAM,KAAK,UAAU,OAAO;GAC7B,CAAC;;CAGJ,MAAM,aAAa,QAGE;AACnB,SAAO,KAAK,QAAQ,wBAAwB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU,OAAO;GAC7B,CAAC;;CAGJ,MAAM,WAAW,QAII;AACnB,SAAO,KAAK,QAAQ,sBAAsB;GACxC,QAAQ;GACR,MAAM,KAAK,UAAU,OAAO;GAC7B,CAAC;;CAKJ,MAAM,8BAKH;AACD,SAAO,KAAK,QAAQ,4BAA4B,EAAE,QAAQ,QAAQ,CAAC;;CAGrE,MAAM,oBAAoB,OAKR;AAChB,QAAM,KAAK,QAAQ,yBAAyB;GAC1C,QAAQ;GACR,MAAM,KAAK,UAAU,MAAM;GAC5B,CAAC,CAAC,YAAY,GAEb"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/agent-api-client",
-  "version": "0.0.13",
+  "version": "0.1.1",
   "description": "Agent self-service API client — agents calling /agents/ endpoints",
   "type": "module",
   "main": "./dist/index.js",