@alfe.ai/gateway 0.9.10 → 0.9.12

package/dist/health.js

@@ -287,151 +287,6 @@ function pluginConnectionId() {
 	return createId(ID_PREFIXES.pluginConnection);
 }
 //#endregion
-//#region ../../packages-internal/api-client/dist/client.js
-/**
-* @alfe/api-client — Typed HTTP client for Alfe services.
-*
-* Platform-agnostic: works in React Native and browser environments.
-* Uses standard fetch() API — no Node.js dependencies.
-*/
-var AlfeApiClient = class {
-	apiBaseUrl;
-	getToken;
-	onAuthFailure;
-	constructor(options) {
-		this.apiBaseUrl = options.apiBaseUrl.replace(/\/+$/, "");
-		this.getToken = options.getToken;
-		this.onAuthFailure = options.onAuthFailure;
-	}
-	/**
-	* Shared fetch logic — handles auth, 401, and network errors.
-	*
-	* `skipAuth` callers (public endpoints like OAuth device-code) opt out of
-	* the auth-header injection AND the synthetic 401 short-circuit. Without
-	* this opt-out, a CLI calling /auth/device-code (no token yet by design)
-	* would never reach the network — the `getToken: () => null` path would
-	* synthesize a 401 and fire onAuthFailure, breaking the entire flow.
-	*/
-	async _fetch(path, options, skipAuth = false) {
-		try {
-			const url = `${this.apiBaseUrl}${path}`;
-			const headers = new Headers(options?.headers);
-			if (typeof options?.body === "string" && !headers.has("Content-Type")) headers.set("Content-Type", "application/json");
-			headers.set("x-correlation-id", correlationId());
-			if (!skipAuth) {
-				const token = await this.getToken();
-				if (!token) {
-					this.onAuthFailure?.();
-					return {
-						ok: false,
-						result: {
-							ok: false,
-							error: "No auth token available",
-							status: 401
-						}
-					};
-				}
-				headers.set("Authorization", `Bearer ${token}`);
-			}
-			const res = await fetch(url, {
-				...options,
-				headers
-			});
-			if (res.status === 401 && !skipAuth) {
-				this.onAuthFailure?.();
-				return {
-					ok: false,
-					result: {
-						ok: false,
-						error: "Session expired",
-						status: 401
-					}
-				};
-			}
-			const text = res.status === 204 ? "" : await res.text();
-			let body;
-			if (text) try {
-				body = JSON.parse(text);
-			} catch {
-				body = text;
-			}
-			if (!res.ok) {
-				const errBody = body;
-				return {
-					ok: false,
-					result: {
-						ok: false,
-						error: (typeof errBody === "object" ? errBody.message : void 0) ?? (typeof body === "string" ? body : `API error: ${String(res.status)}`),
-						status: res.status
-					}
-				};
-			}
-			return {
-				ok: true,
-				res,
-				body
-			};
-		} catch (err) {
-			return {
-				ok: false,
-				result: {
-					ok: false,
-					error: err instanceof Error ? err.message : "Network error"
-				}
-			};
-		}
-	}
-	/**
-	* Make an authenticated request to an Alfe API endpoint.
-	* Unwraps the @auriclabs/api-core `{ data, timestamp, requestId }` envelope.
-	*/
-	async request(path, options) {
-		const result = await this._fetch(path, options);
-		if (!result.ok) return result.result;
-		if (result.body === void 0) return {
-			ok: true,
-			data: void 0
-		};
-		return {
-			ok: true,
-			data: result.body.data
-		};
-	}
-	/**
-	* Make a request to a PUBLIC endpoint that does not require authentication.
-	* Skips both the Authorization header injection AND the onAuthFailure
-	* callback. Use for endpoints like /auth/device-code that the CLI hits
-	* before it has a token.
-	*/
-	async publicRequest(path, options) {
-		const result = await this._fetch(path, options, true);
-		if (!result.ok) return result.result;
-		if (result.body === void 0) return {
-			ok: true,
-			data: void 0
-		};
-		return {
-			ok: true,
-			data: result.body.data
-		};
-	}
-	/**
-	* Make an authenticated request that returns the body directly (no envelope unwrap).
-	* Use for APIs that don't use the @auriclabs/api-core response format (e.g. gateway).
-	*/
-	async rawRequest(path, options) {
-		const result = await this._fetch(path, options);
-		if (!result.ok) return result.result;
-		return {
-			ok: true,
-			data: result.body
-		};
-	}
-	getApiBaseUrl() {
-		return this.apiBaseUrl;
-	}
-};
-//#endregion
 //#region ../../packages-internal/types/dist/lib/enum-values.js
 /**
 * Converts a const enum object into a non-empty readonly tuple.
@@ -4154,7 +4009,8 @@ enumValues({
 	ClaudeMax: "claude-max",
 	OpenAICodexMax: "openai-codex-max",
 	OpenAICodexSubscription: "openai-codex-subscription",
-	GeminiMax: "gemini-max"
+	GeminiMax: "gemini-max",
+	AlfeAws: "alfe-aws"
 });
 enumValues({
 	Month: "month",
@@ -4227,6 +4083,179 @@ object({
 	ttsModel: _enum(TTS_MODELS).optional(),
 	enabled: boolean().optional()
 });
+//#endregion
+//#region ../../packages-internal/types/dist/access.js
+/**
+* Runtime catalog of declared permission subjects + allowed actions.
+*
+* Mirrors the compile-time `PermissionDefinitions` augmentation in
+* `@alfe/api-core/auriclabs-roles.ts`. Kept here so browser code
+* (dashboard) can consume it without pulling in server-only deps
+* (`@middy/core`, `aws-lambda`, etc.).
+*/
+const PERMISSION_CATALOG = {
+	all: ["manage"],
+	user: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	agent: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"exec",
+		"chat",
+		"manage"
+	],
+	chat: [
+		"read",
+		"write",
+		"upload",
+		"manage"
+	],
+	sync: [
+		"read",
+		"write",
+		"manage"
+	],
+	integration: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	gateway: ["connect", "manage"],
+	voice: ["read", "manage"],
+	identity: ["read", "manage"],
+	token: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	billing: ["read", "manage"],
+	template: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	team: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	project: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	org_file: ["read", "write"],
+	org_knowledge: ["read", "write"],
+	model_policy: ["read", "manage"],
+	data_boundary: ["read", "manage"],
+	secret: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	database: [
+		"read",
+		"write",
+		"manage"
+	],
+	role_management: ["read", "manage"],
+	org: ["read", "manage"],
+	connection: [
+		"create",
+		"read",
+		"update",
+		"delete",
+		"manage"
+	],
+	remote: ["control", "terminal"],
+	subscription: ["read", "manage"],
+	referral: ["manage"],
+	promo_code: ["manage"],
+	pricing: ["manage"],
+	access_gate: ["manage"],
+	dlq: ["read", "manage"],
+	support: ["read"],
+	discounts: ["manage"],
+	stats: ["read"],
+	mobile: ["read", "manage"],
+	impersonation: ["manage"],
+	partner: ["manage"]
+};
+/**
+* Subjects a tenant may grant via a custom role.
+*
+* Excludes `all` (platform-admin escape hatch) and every platform-only
+* permission subject listed after it in the catalog.
+*/
+const TENANT_ALLOWED_SUBJECTS = [
+	"agent",
+	"chat",
+	"sync",
+	"integration",
+	"secret",
+	"database",
+	"template",
+	"org_file",
+	"org_knowledge",
+	"team",
+	"project",
+	"model_policy",
+	"data_boundary",
+	"role_management",
+	"billing",
+	"identity",
+	"token",
+	"user",
+	"gateway",
+	"voice",
+	"org",
+	"connection",
+	"remote",
+	"subscription"
+];
+/**
+* Subjects a PLATFORM ADMIN may grant via a custom **admin** role (authored at
+* the flat `admin:` scope, stored under the `"system"` tenant). Two groups:
+*
+*   1. Platform-only subjects — every catalog subject that is NOT in
+*      `TENANT_ALLOWED_SUBJECTS` (and never `all`). Derived from
+*      `PERMISSION_CATALOG` so a newly-declared admin-only subject becomes
+*      grantable in custom admin roles automatically.
+*   2. Dual-surface subjects an admin also curates platform-wide: `user`
+*      (platform user management), `role_management` (admin role authoring),
+*      and `subscription` (reviewing every tenant's plan/startup application).
+*
+* `all` is deliberately excluded — it is reserved for the built-in
+* `sys:admin:admin` super-admin role and must never be grantable through a
+* custom admin role. The complement of `TENANT_ALLOWED_SUBJECTS` keeps the
+* tenant vocabulary and the admin vocabulary from drifting into each other.
+*/
+const ADMIN_DUAL_SURFACE_SUBJECTS = [
+	"user",
+	"role_management",
+	"subscription"
+];
+const TENANT_ALLOWED_SUBJECT_LOOKUP = new Set(TENANT_ALLOWED_SUBJECTS);
+[...Object.keys(PERMISSION_CATALOG).filter((subject) => subject !== "all" && !TENANT_ALLOWED_SUBJECT_LOOKUP.has(subject)), ...ADMIN_DUAL_SURFACE_SUBJECTS];
 enumValues({
 	Org: "org",
 	Team: "team",
@@ -4353,6 +4382,26 @@ enumValues({
 	Demo: "demo",
 	Live: "live"
 });
+function createClerkReverificationResponse(afterMinutes) {
+	if (!Number.isInteger(afterMinutes) || afterMinutes < 0) throw new TypeError("afterMinutes must be a non-negative integer");
+	return { clerk_error: {
+		type: "forbidden",
+		reason: "reverification-error",
+		metadata: { reverification: {
+			level: "second_factor",
+			afterMinutes
+		} }
+	} };
+}
+/** Strictly identify the only authorization hint the API client may expose. */
+function isClerkReverificationResponse(value) {
+	if (!value || typeof value !== "object") return false;
+	const clerkError = value.clerk_error;
+	if (!clerkError || typeof clerkError !== "object") return false;
+	const error = clerkError;
+	const reverification = error.metadata?.reverification;
+	return error.type === "forbidden" && error.reason === "reverification-error" && reverification?.level === "second_factor" && Number.isInteger(reverification.afterMinutes) && reverification.afterMinutes >= 0;
+}
 //#endregion
 //#region ../../packages-internal/types/dist/models.js
 const AnthropicModel = {
@@ -4480,6 +4529,35 @@ _enum(QWEN_MODELS);
 string().trim().min(1);
 AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Chat, DeepSeekModel.Reasoner, DeepSeekModel.V4Flash, DeepSeekModel.V4Pro, GoogleModel.Gemini35Flash, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, GoogleModel.Gemini20Flash, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, MistralModel.MagistralMedium, MistralModel.MagistralSmall, MistralModel.DevstralMedium, XAIModel.Grok45, XAIModel.Grok43, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
 AnthropicModel.Opus5, AnthropicModel.Opus48, AnthropicModel.Opus47, AnthropicModel.Opus46, AnthropicModel.Sonnet5, AnthropicModel.Sonnet46, AnthropicModel.Haiku45, OpenAIModel.GPT4o, OpenAIModel.GPT4oMini, OpenAIModel.O3, OpenAIModel.GPT41, OpenAIModel.GPT41Mini, OpenAIModel.GPT41Nano, OpenAIModel.GPT54, OpenAIModel.GPT54Mini, OpenAIModel.GPT54Nano, OpenAIModel.GPT54Pro, OpenAIModel.GPT55, OpenAIModel.GPT55Pro, OpenAIModel.GPT56Sol, OpenAIModel.GPT56Terra, OpenAIModel.GPT56Luna, OpenAIModel.O3Mini, OpenAIModel.O4Mini, OpenAIModel.TextEmbedding3Small, OpenAIModel.TextEmbedding3Large, DeepSeekModel.Chat, DeepSeekModel.Reasoner, DeepSeekModel.V4Flash, DeepSeekModel.V4Pro, GoogleModel.Gemini35Flash, GoogleModel.Gemini31Pro, GoogleModel.Gemini31FlashLite, GoogleModel.Gemini25Pro, GoogleModel.Gemini25Flash, GoogleModel.Gemini25FlashLite, GoogleModel.Gemini20Flash, MiniMaxModel.M3, MiniMaxModel.M27, MiniMaxModel.M27HighSpeed, MiniMaxModel.M25, MiniMaxModel.M21, MiniMaxModel.M2, MistralModel.Large, MistralModel.Medium, MistralModel.Small, MistralModel.Codestral, MistralModel.Ministral8b, MistralModel.Ministral3b, MistralModel.MagistralMedium, MistralModel.MagistralSmall, MistralModel.DevstralMedium, XAIModel.Grok45, XAIModel.Grok43, XAIModel.Grok4, XAIModel.Grok41Fast, ZhipuModel.GLM52, ZhipuModel.GLM51, ZhipuModel.GLM46, ZhipuModel.GLM45, ZhipuModel.GLM45Air, MoonshotModel.K3, MoonshotModel.K26, MoonshotModel.K27Code, MoonshotModel.K27CodeHighSpeed, QwenModel.Qwen37Max, QwenModel.Qwen37Plus, QwenModel.Qwen36Flash, QwenModel.Qwen35Flash;
+enumValues({
+	Standard: "standard",
+	AwsPrivate: "aws_private"
+});
+enumValues({ ApSoutheast2: "ap-southeast-2" });
+enumValues({
+	Standard: "standard",
+	Requested: "requested",
+	Provisioning: "provisioning",
+	Ready: "ready",
+	CuttingOver: "cutting_over",
+	Active: "active",
+	Failing: "failing",
+	Decommissioning: "decommissioning"
+});
+enumValues({
+	RegionalShared: "regional_shared",
+	Dedicated: "dedicated"
+});
+enumValues({
+	Inference: "inference",
+	AuthProjection: "auth_projection",
+	ChatGateway: "chat_gateway",
+	AgentCompute: "agent_compute",
+	Attachments: "attachments",
+	Memory: "memory",
+	CapabilityPolicy: "capability_policy",
+	Observability: "observability"
+});
 enumValues({
 	PendingChallenge: "pending_challenge",
 	Creating: "creating",
@@ -4568,6 +4646,8 @@ const NotificationType = {
 	BrowserTakeoverRequested: "browser_takeover_requested",
 	InviteCreated: "onboarding.invite.created",
 	OrgClaimed: "onboarding.org.claimed",
+	ElevatedSupportRequested: "partner.elevated_support.requested",
+	ElevatedSupportStarted: "partner.elevated_support.started",
 	TeamMemberAdded: "team.member.added",
 	ProjectMemberAdded: "project.member.added",
 	IntegrationInstalled: "integration.installed",
@@ -4582,7 +4662,213 @@ const RecipientStrategy = {
 	TenantAdmins: "tenant_admins",
 	SpecificUser: "specific_user"
 };
-NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.StartupGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.GrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.EnterpriseGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
+NotificationType.PaymentSucceeded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PaymentFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.TopUpCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AutoRechargeCompleted, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AutoRechargeFailed, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.SubscriptionCreated, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.SubscriptionCancelled, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.StartupGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.GrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.EnterpriseGrantEnded, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.SubscriptionPastDue, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationChannel.Sms, NotificationType.BalanceThresholdWarning, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.PlatformTierPriceIncrease, NotificationCategory.Billing, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.AgentCreated, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentProvisionFailed, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentBillingSuspended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.AgentDisconnectedExtended, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.BrowserTakeoverRequested, NotificationCategory.Agents, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.InviteCreated, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationType.OrgClaimed, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ElevatedSupportRequested, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ElevatedSupportStarted, NotificationCategory.System, RecipientStrategy.TenantAdmins, NotificationChannel.Email, NotificationChannel.Push, NotificationType.TeamMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.ProjectMemberAdded, NotificationCategory.Team, RecipientStrategy.SpecificUser, NotificationChannel.Email, NotificationChannel.Push, NotificationType.IntegrationInstalled, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push, NotificationType.IntegrationRemoved, NotificationCategory.Integrations, RecipientStrategy.TenantAdmins, NotificationChannel.Push;
+//#endregion
+//#region ../../packages-internal/api-client/dist/client.js
+/**
+* @alfe/api-client — Typed HTTP client for Alfe services.
+*
+* Platform-agnostic: works in React Native and browser environments.
+* Uses standard fetch() API — no Node.js dependencies.
+*/
+var AlfeApiClient = class {
+	apiBaseUrl;
+	getToken;
+	onAuthFailure;
+	constructor(options) {
+		this.apiBaseUrl = options.apiBaseUrl.replace(/\/+$/, "");
+		this.getToken = options.getToken;
+		this.onAuthFailure = options.onAuthFailure;
+	}
+	/**
+	* Shared fetch logic — handles auth, 401, and network errors.
+	*
+	* `skipAuth` callers (public endpoints like OAuth device-code) opt out of
+	* the auth-header injection AND the synthetic 401 short-circuit. Without
+	* this opt-out, a CLI calling /auth/device-code (no token yet by design)
+	* would never reach the network — the `getToken: () => null` path would
+	* synthesize a 401 and fire onAuthFailure, breaking the entire flow.
+	*/
+	async _fetchResponse(path, options, skipAuth = false) {
+		try {
+			const url = `${this.apiBaseUrl}${path}`;
+			const headers = new Headers(options?.headers);
+			if (typeof options?.body === "string" && !headers.has("Content-Type")) headers.set("Content-Type", "application/json");
+			headers.set("x-correlation-id", correlationId());
+			if (!skipAuth) {
+				const token = await this.getToken();
+				if (!token) {
+					this.onAuthFailure?.();
+					return {
+						ok: false,
+						result: {
+							ok: false,
+							error: "No auth token available",
+							status: 401
+						}
+					};
+				}
+				headers.set("Authorization", `Bearer ${token}`);
+			}
+			const res = await fetch(url, {
+				...options,
+				headers
+			});
+			if (res.status === 401 && !skipAuth) {
+				this.onAuthFailure?.();
+				return {
+					ok: false,
+					result: {
+						ok: false,
+						error: "Session expired",
+						status: 401
+					}
+				};
+			}
+			if (!res.ok) {
+				const text = res.status === 204 ? "" : await res.text();
+				let body;
+				if (text) try {
+					body = JSON.parse(text);
+				} catch {
+					body = text;
+				}
+				const errBody = body;
+				const errorMessage = typeof errBody === "object" ? errBody.message : void 0;
+				return {
+					ok: false,
+					body,
+					result: {
+						ok: false,
+						error: errorMessage ?? (typeof body === "string" ? body : `API error: ${String(res.status)}`),
+						status: res.status
+					}
+				};
+			}
+			return {
+				ok: true,
+				res
+			};
+		} catch (err) {
+			return {
+				ok: false,
+				result: {
+					ok: false,
+					error: err instanceof Error ? err.message : "Network error"
+				}
+			};
+		}
+	}
+	async _fetch(path, options, skipAuth = false) {
+		const response = await this._fetchResponse(path, options, skipAuth);
+		if (!response.ok) return response;
+		const text = response.res.status === 204 ? "" : await response.res.text();
+		let body;
+		if (text) try {
+			body = JSON.parse(text);
+		} catch {
+			body = text;
+		}
+		return {
+			ok: true,
+			res: response.res,
+			body
+		};
+	}
+	/**
+	* Make an authenticated request to an Alfe API endpoint.
+	* Unwraps the @auriclabs/api-core `{ data, timestamp, requestId }` envelope.
+	*/
+	async request(path, options) {
+		const result = await this._fetch(path, options);
+		if (!result.ok) return result.result;
+		if (result.body === void 0) return {
+			ok: true,
+			data: void 0
+		};
+		return {
+			ok: true,
+			data: result.body.data
+		};
+	}
+	/**
+	* Make an authenticated request whose 403 response may ask Clerk to
+	* reverify the current session. Unlike `request`, this preserves only the
+	* strictly validated Clerk hint; all ordinary failures retain `ApiResult`.
+	*/
+	async reverifiableRequest(path, options) {
+		const result = await this._fetch(path, options);
+		if (!result.ok) {
+			if (isClerkReverificationResponse(result.body)) return createClerkReverificationResponse(result.body.clerk_error.metadata.reverification.afterMinutes);
+			return result.result;
+		}
+		if (result.body === void 0) return {
+			ok: true,
+			data: void 0
+		};
+		return {
+			ok: true,
+			data: result.body.data
+		};
+	}
+	/**
+	* Make a request to a PUBLIC endpoint that does not require authentication.
+	* Skips both the Authorization header injection AND the onAuthFailure
+	* callback. Use for endpoints like /auth/device-code that the CLI hits
+	* before it has a token.
+	*/
+	async publicRequest(path, options) {
+		const result = await this._fetch(path, options, true);
+		if (!result.ok) return result.result;
+		if (result.body === void 0) return {
+			ok: true,
+			data: void 0
+		};
+		return {
+			ok: true,
+			data: result.body.data
+		};
+	}
+	/**
+	* Make an authenticated request that returns the body directly (no envelope unwrap).
+	* Use for APIs that don't use the @auriclabs/api-core response format (e.g. gateway).
+	*/
+	async rawRequest(path, options) {
+		const result = await this._fetch(path, options);
+		if (!result.ok) return result.result;
+		return {
+			ok: true,
+			data: result.body
+		};
+	}
+	/**
+	* Make an authenticated request without attempting text/JSON decoding.
+	* Use for downloads such as a Teams app ZIP where UTF-8 conversion would
+	* corrupt the payload.
+	*/
+	async binaryRequest(path, options) {
+		const result = await this._fetchResponse(path, options);
+		if (!result.ok) return result.result;
+		try {
+			return {
+				ok: true,
+				data: {
+					body: await result.res.arrayBuffer(),
+					contentType: result.res.headers.get("Content-Type") ?? void 0,
+					contentDisposition: result.res.headers.get("Content-Disposition") ?? void 0
+				}
+			};
+		} catch (err) {
+			return {
+				ok: false,
+				error: err instanceof Error ? err.message : "Failed to read binary response"
+			};
+		}
+	}
+	getApiBaseUrl() {
+		return this.apiBaseUrl;
+	}
+};
 //#endregion
 //#region ../../packages-internal/api-client/dist/services/auth.js
 var AuthService = class {
@@ -4592,7 +4878,7 @@ var AuthService = class {
 	}
 	prefix = "/auth";
 	validate(token) {
-		return this.client.request(`${this.prefix}/validate`, {
+		return this.client.publicRequest(`${this.prefix}/validate`, {
 			method: "POST",
 			body: JSON.stringify({ token })
 		});
@@ -4609,6 +4895,24 @@ var AuthService = class {
 	deleteToken(tokenId) {
 		return this.client.request(`${this.prefix}/tokens/${encodeURIComponent(tokenId)}`, { method: "DELETE" });
 	}
+	mintPartnerDelegation(input) {
+		return this.client.request(`${this.prefix}/partner-delegations`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	mintPartnerElevatedDelegation(input) {
+		return this.client.request(`${this.prefix}/partner-delegations/elevated`, {
+			method: "POST",
+			body: JSON.stringify(input)
+		});
+	}
+	refreshPartnerDelegation(delegationId) {
+		return this.client.request(`${this.prefix}/partner-delegations/${encodeURIComponent(delegationId)}/refresh`, { method: "POST" });
+	}
+	revokePartnerDelegation(delegationId) {
+		return this.client.request(`${this.prefix}/partner-delegations/${encodeURIComponent(delegationId)}`, { method: "DELETE" });
+	}
 	/**
 	* Start a device-code flow. Called by the CLI when the user runs
 	* `alfe login` and picks the browser path. The returned `device_code`
@@ -4967,6 +5271,12 @@ var IntegrationsService = class {
 	listSlackChannels(agentId) {
 		return this.client.request(`/slack/agents/${encodeURIComponent(agentId)}/channels`);
 	}
+	createSlackApp(agentId) {
+		return this.client.request("/slack/apps/create", {
+			method: "POST",
+			body: JSON.stringify({ agentId })
+		});
+	}
 	sendSlackMessage(agentId, channel, text) {
 		return this.client.request(`/slack/agents/${encodeURIComponent(agentId)}/send`, {
 			method: "POST",
@@ -6416,25 +6726,44 @@ var ConfigReconciler = class {
 			status: "applied"
 		};
 		const failures = [];
+		const inconclusiveKeys = [];
 		for (const [key, want] of entries) try {
 			if (getConfigRaw) {
-				if (await getConfigRaw(key) === want) {
+				let current;
+				try {
+					current = await getConfigRaw(key);
+				} catch (err) {
+					log$4.warn({
+						key,
+						err: err instanceof Error ? err.message : String(err)
+					}, "Config diff read failed — attempting the write");
+				}
+				if (current === want) {
 					log$4.debug({ key }, "Config already at desired value — no-op");
 					continue;
 				}
 			}
 			await setConfigRaw(key, want);
 			if (getConfigRaw) {
-				if (!await this.verify(getConfigRaw, key, want)) failures.push(`${key}: verify failed (read-back did not match)`);
+				const outcome = await this.verify(getConfigRaw, key, want);
+				if (outcome === "mismatched") failures.push(`${key}: verify failed (read-back did not match)`);
+				else if (outcome === "inconclusive") inconclusiveKeys.push(key);
 			}
 		} catch (err) {
 			const msg = err instanceof Error ? err.message : String(err);
-			if (getConfigRaw && await this.verify(getConfigRaw, key, want)) {
-				log$4.warn({
-					key,
-					err: msg
-				}, "config set errored but value landed — treating as applied");
-				continue;
+			if (getConfigRaw) {
+				const outcome = await this.verify(getConfigRaw, key, want);
+				if (outcome === "matched") {
+					log$4.warn({
+						key,
+						err: msg
+					}, "config set errored but value landed — treating as applied");
+					continue;
+				}
+				if (outcome === "inconclusive") {
+					inconclusiveKeys.push(key);
+					continue;
+				}
 			}
 			failures.push(`${key}: ${msg}`);
 		}
@@ -6451,6 +6780,13 @@ var ConfigReconciler = class {
 				reason
 			};
 		}
+		if (inconclusiveKeys.length > 0) {
+			log$4.warn({
+				version: desired.version,
+				keys: inconclusiveKeys
+			}, "Config reconcile verification was inconclusive — leaving version pending");
+			return null;
+		}
 		log$4.info({
 			version: desired.version,
 			keys: entries.length
@@ -6461,11 +6797,21 @@ var ConfigReconciler = class {
 		};
 	}
 	async verify(getConfigRaw, key, want) {
+		let observedValue = false;
 		for (let attempt = 0; attempt <= this.verifyRetries; attempt++) {
-			if (await getConfigRaw(key) === want) return true;
+			try {
+				const current = await getConfigRaw(key);
+				if (current === want) return "matched";
+				if (current !== void 0) observedValue = true;
+			} catch (err) {
+				log$4.debug({
+					key,
+					err: err instanceof Error ? err.message : String(err)
+				}, "Config verify read failed");
+			}
 			if (attempt < this.verifyRetries && this.verifyRetryDelayMs > 0) await delay(this.verifyRetryDelayMs * 2 ** attempt);
 		}
-		return false;
+		return observedValue ? "mismatched" : "inconclusive";
 	}
 };
 //#endregion
@@ -7735,7 +8081,7 @@ function warnFailedMcpServers(bundler, log, reason) {
 * List every server entry in the alfe bundler store. Lets agents inspect
 * what they've already registered before adding a new one.
 */
-function handleMcpListServers(manager) {
+function handleMcpListServers(manager, liveStatusAvailable = manager?.serverStatuses !== void 0) {
 	if (!manager) return {
 		ok: false,
 		error: {
@@ -7743,21 +8089,24 @@ function handleMcpListServers(manager) {
 			message: "MCP manager not initialized"
 		}
 	};
-	const statuses = manager.serverStatuses ? manager.serverStatuses() : [];
+	const statuses = liveStatusAvailable && manager.serverStatuses ? manager.serverStatuses() : [];
 	const byName = new Map(statuses.map((s) => [s.name, s]));
 	return {
 		ok: true,
-		payload: { servers: manager.listServers().map(({ id, entry }) => ({
-			id,
-			entry: toPublicServerEntry(entry),
-			fingerprint: serverLaunchFingerprint(entry),
-			status: byName.get(id) ?? {
-				name: id,
-				connected: false,
-				toolCount: 0,
-				consecutiveFailures: 0
-			}
-		})) }
+		payload: { servers: manager.listServers().map(({ id, entry }) => {
+			const status = byName.get(id);
+			return {
+				id,
+				entry: toPublicServerEntry(entry),
+				fingerprint: serverLaunchFingerprint(entry),
+				...liveStatusAvailable ? { status: status ?? {
+					name: id,
+					connected: false,
+					toolCount: 0,
+					consecutiveFailures: 0
+				} } : {}
+			};
+		}) }
 	};
 }
 function toPublicServerEntry(entry) {
@@ -7786,10 +8135,12 @@ const MCP_ADD_WARM_TIMEOUT_MS = 12e3;
 * server actually works. Owned as `'manual'` so the agent can later remove it
 * without an expectedOwner conflict — matches what `alfe mcp add` does from the
 * CLI. Registration is durable regardless of the probe outcome: a probe
-* failure (or a runtime with no daemon bundler, e.g. hermes) still returns
-* `ok` with `connected: false`; the store watcher / runtime picks the entry up.
+* failure still returns `ok`; the store watcher / runtime picks the entry up.
+* A runtime that mirrors the store but owns its MCP children (Hermes and
+* Claude Code) has no daemon-side status authority, so it omits connected/tool
+* fields instead of presenting unknown as a definite disconnection.
 */
-async function handleMcpAddServer(params, manager) {
+async function handleMcpAddServer(params, manager, liveStatusAvailable = manager?.warmServer !== void 0) {
 	if (!manager) return {
 		ok: false,
 		error: {
@@ -7833,7 +8184,7 @@ async function handleMcpAddServer(params, manager) {
 		};
 	}
 	let status = null;
-	if (manager.warmServer) try {
+	if (liveStatusAvailable && manager.warmServer) try {
 		status = await manager.warmServer(p.id, MCP_ADD_WARM_TIMEOUT_MS);
 	} catch (err) {
 		logger$1.warn({
@@ -7845,9 +8196,11 @@ async function handleMcpAddServer(params, manager) {
 		ok: true,
 		payload: {
 			id: p.id,
-			connected: status?.connected ?? false,
-			toolCount: status?.toolCount ?? 0,
-			...status?.lastError !== void 0 ? { error: status.lastError } : {}
+			...status ? {
+				connected: status.connected,
+				toolCount: status.toolCount,
+				...status.lastError !== void 0 ? { error: status.lastError } : {}
+			} : {}
 		}
 	};
 }
@@ -25076,8 +25429,8 @@ function handlePluginRequest(method, params, pluginId) {
 		case "integration.report": return Promise.resolve(handleIntegrationReport(params, pluginId));
 		case "mcp.list_tools": return Promise.resolve(handleMcpListTools(mcpBundler));
 		case "mcp.call_tool": return handleMcpCallTool(mcpBundler, params);
-		case "mcp.list_servers": return Promise.resolve(handleMcpListServers(mcpManagerRef));
-		case "mcp.add_server": return handleMcpAddServer(params, mcpManagerRef);
+		case "mcp.list_servers": return Promise.resolve(handleMcpListServers(mcpManagerRef, mcpBundler !== null));
+		case "mcp.add_server": return handleMcpAddServer(params, mcpManagerRef, mcpBundler !== null);
 		case "mcp.remove_server": return handleMcpRemoveServer(params, mcpManagerRef);
 		default: return Promise.resolve({
 			ok: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alfe.ai/gateway",
-  "version": "0.9.10",
+  "version": "0.9.12",
   "description": "Alfe local gateway daemon — persistent control plane for agent integrations",
   "type": "module",
   "bin": {
@@ -23,7 +23,7 @@
     "pino-roll": "^1.2.0",
     "smol-toml": ">=1.6.1",
     "ws": "^8.18.0",
-    "@alfe.ai/agent-api-client": "^0.16.0",
+    "@alfe.ai/agent-api-client": "^0.17.0",
     "@alfe.ai/ai-proxy-local": "^0.0.16",
     "@alfe.ai/config": "^0.4.1",
     "@alfe.ai/integration-manifest": "^0.3.6",