@astram/frontend-core 0.15.1 → 0.17.0

package/dist/agentClientData/clientDataService.d.ts

@@ -0,0 +1,144 @@
+/**
+ * createClientDataService — platform-agnostic calls to the client-data approval routes
+ * (model-provider-client-data SPEC v7 §3, §13): a tenant admin approves sending the company's real
+ * data to ONE deployment-approved model provider profile; a second admin may have to confirm; any
+ * holder can revoke. Like the other services it takes an injected HTTP client and receives the
+ * bearer token per call.
+ *
+ * Every method resolves to a plain result object (never throws): `{ ok:true, ... }` on success,
+ * `{ ok:false, status, code, error }` otherwise. `code` is one of the fixed codes in
+ * {@link CLIENT_DATA_ERROR_CODES} (or `null`), `error` is this package's fixed text for it; the
+ * server's own message is never passed on.
+ *
+ * The identity routes these hit (all gated on `identity:agent:client_data_approve`):
+ *   GET   /identity/agent/client-data                              → ClientDataOverview
+ *   POST  /identity/agent/client-data/approvals { profile, dataClasses, fileContent, reason, code }
+ *                                                                  → { uuid, state: 'pending'|'active' }
+ *   POST  /identity/agent/client-data/approvals/:uuid/confirm { code } → { uuid, state: 'active' }
+ *   POST  /identity/agent/client-data/approvals/:uuid/revoke { reason } → { uuid, state: 'revoked' }
+ *
+ * The step-up `code` (the admin's own authenticator code) travels in the body of request and
+ * confirm ONLY: never in a URL, never in a returned object or error, never logged. Revoke has no
+ * step-up. Labels come from the server (people are labels, never ids); `uuid` is for API calls only.
+ * Render every string as text.
+ */
+import type { HttpClient } from '../http/types.js';
+/** The fixed route error codes with their HTTP statuses (SPEC v7 §10, §13). */
+export declare const CLIENT_DATA_ERROR_STATUS: {
+    readonly invalid_request: 400;
+    readonly profile_not_client_data: 400;
+    readonly classes_exceed_deployment: 400;
+    readonly file_content_not_allowed: 400;
+    readonly forbidden: 403;
+    readonly step_up_required: 403;
+    readonly confirmer_is_requester: 403;
+    readonly approval_not_found: 404;
+    readonly approval_pending_exists: 409;
+    readonly approval_active_exists: 409;
+    readonly approval_not_pending: 409;
+    readonly approval_not_revocable: 409;
+    readonly approval_state_changed: 409;
+    readonly deployment_changed: 409;
+    readonly too_many_requests: 429;
+    readonly revoke_unavailable: 503;
+    readonly authentication_unavailable: 503;
+    readonly unavailable: 503;
+};
+export type ClientDataErrorCode = keyof typeof CLIENT_DATA_ERROR_STATUS;
+export declare const CLIENT_DATA_ERROR_CODES: readonly ClientDataErrorCode[];
+export declare function isClientDataErrorCode(v: unknown): v is ClientDataErrorCode;
+/** The short user-facing English text for a code (no ids, no server text). */
+export declare function clientDataErrorText(code: ClientDataErrorCode): string;
+export type ClientDataDataClass = 'internal' | 'confidential' | 'restricted';
+/** One deployment-approved profile (read-only; no secrets). `profile` is the profile name. */
+export interface DeploymentApproval {
+    profile: string;
+    provider: string;
+    /** The deployment approval's contract reference. */
+    reference: string;
+    region: string;
+    retentionDays: number;
+    dataClasses: string[];
+    fileContent: boolean;
+    approvedBy: string;
+    /** ISO date. */
+    approvedOn: string;
+}
+export type ClientDataApprovalState = 'pending' | 'active' | 'revoked' | 'superseded' | string;
+/** One approval with labels, never user ids. `uuid` is for API calls only. */
+export interface ClientDataApproval {
+    uuid: string;
+    profile: string;
+    provider: string;
+    state: ClientDataApprovalState;
+    dataClasses: string[];
+    fileContent: boolean;
+    requestedByLabel: string;
+    /** True when the caller made this request (hide Confirm). */
+    requestedByMe: boolean;
+    /** Epoch milliseconds. */
+    requestedAtMs: number | null;
+    confirmedByLabel: string | null;
+    confirmedAtMs: number | null;
+    revokedByLabel: string | null;
+    revokedAtMs: number | null;
+    reason: string;
+    revokeReason: string | null;
+    disclosureVersion: number;
+    /** False when the deployment approval no longer matches this approval. */
+    deploymentMatches: boolean;
+}
+export interface ClientDataOverview {
+    deployment: DeploymentApproval[];
+    twoPerson: boolean;
+    approvals: ClientDataApproval[];
+}
+/** The request body. `code` is the admin's own authenticator code (step-up). */
+export interface ClientDataRequestInput {
+    profile: string;
+    /** `internal` is always included by the server. */
+    dataClasses: readonly ClientDataDataClass[] | readonly string[];
+    fileContent: boolean;
+    /** 1–500 characters, no control characters. */
+    reason: string;
+    code: string;
+}
+export interface ClientDataConfirmInput {
+    code: string;
+}
+export interface ClientDataRevokeInput {
+    /** 1–200 characters, no control characters. */
+    reason: string;
+}
+export interface ClientDataFailure {
+    ok: false;
+    status: number;
+    code: ClientDataErrorCode | null;
+    error: string;
+}
+export type ListClientDataResult = ({
+    ok: true;
+} & ClientDataOverview) | ClientDataFailure;
+export type RequestClientDataResult = {
+    ok: true;
+    uuid: string;
+    state: 'pending' | 'active';
+} | ClientDataFailure;
+export type ConfirmClientDataResult = {
+    ok: true;
+    uuid: string;
+    state: 'active';
+} | ClientDataFailure;
+export type RevokeClientDataResult = {
+    ok: true;
+    uuid: string;
+    state: 'revoked';
+} | ClientDataFailure;
+export interface ClientDataService {
+    list(accessToken: string): Promise<ListClientDataResult>;
+    request(accessToken: string, input: ClientDataRequestInput): Promise<RequestClientDataResult>;
+    confirm(accessToken: string, uuid: string, input: ClientDataConfirmInput): Promise<ConfirmClientDataResult>;
+    revoke(accessToken: string, uuid: string, input: ClientDataRevokeInput): Promise<RevokeClientDataResult>;
+}
+export declare function createClientDataService(http: HttpClient): ClientDataService;
+//# sourceMappingURL=clientDataService.d.ts.map

package/dist/agentClientData/clientDataService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientDataService.d.ts","sourceRoot":"","sources":["../../src/agentClientData/clientDataService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;CAmB3B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAExE,eAAO,MAAM,uBAAuB,EAE/B,SAAS,mBAAmB,EAAE,CAAC;AAEpC,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,mBAAmB,CAE1E;AAwBD,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAErE;AAUD,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;AAE7E,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,GAAG,MAAM,CAAC;AAE/F,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,uBAAuB,CAAC;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,aAAa,EAAE,OAAO,CAAC;IACvB,0BAA0B;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,0EAA0E;IAC1E,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,kBAAkB,EAAE,CAAC;CACjC;AAED,gFAAgF;AAChF,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,WAAW,EAAE,SAAS,mBAAmB,EAAE,GAAG,SAAS,MAAM,EAAE,CAAC;IAChE,WAAW,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,kBAAkB,CAAC,GAAG,iBAAiB,CAAC;AAC3F,MAAM,MAAM,uBAAuB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAE,GAAG,iBAAiB,CAAC;AAC9E,MAAM,MAAM,uBAAuB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,GAAG,iBAAiB,CAAC;AAClE,MAAM,MAAM,sBAAsB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAAG,iBAAiB,CAAC;AAEnE,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzD,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9F,OAAO,CACL,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACpC;AAoED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,iBAAiB,CAwF3E"}

package/dist/agentClientData/clientDataService.js

@@ -0,0 +1,204 @@
+const BASE = '/identity/agent/client-data';
+/** The fixed route error codes with their HTTP statuses (SPEC v7 §10, §13). */
+export const CLIENT_DATA_ERROR_STATUS = {
+    invalid_request: 400,
+    profile_not_client_data: 400,
+    classes_exceed_deployment: 400,
+    file_content_not_allowed: 400,
+    forbidden: 403,
+    step_up_required: 403,
+    confirmer_is_requester: 403,
+    approval_not_found: 404,
+    approval_pending_exists: 409,
+    approval_active_exists: 409,
+    approval_not_pending: 409,
+    approval_not_revocable: 409,
+    approval_state_changed: 409,
+    deployment_changed: 409,
+    too_many_requests: 429,
+    revoke_unavailable: 503,
+    authentication_unavailable: 503,
+    unavailable: 503,
+};
+export const CLIENT_DATA_ERROR_CODES = Object.keys(CLIENT_DATA_ERROR_STATUS);
+export function isClientDataErrorCode(v) {
+    return typeof v === 'string' && Object.prototype.hasOwnProperty.call(CLIENT_DATA_ERROR_STATUS, v);
+}
+const CODE_TEXT = {
+    invalid_request: 'The request is not valid. Check the details and try again.',
+    profile_not_client_data: 'This model provider is not approved for client data.',
+    classes_exceed_deployment: 'The data classes go beyond what the deployment approved for this provider.',
+    file_content_not_allowed: 'The deployment does not allow file content for this provider.',
+    forbidden: 'You do not have access to perform this action.',
+    step_up_required: 'Enter the current code from your authenticator app to continue.',
+    confirmer_is_requester: 'A different administrator must confirm this request.',
+    approval_not_found: 'That approval was not found.',
+    approval_pending_exists: 'A request is already waiting for confirmation.',
+    approval_active_exists: 'This approval is already active.',
+    approval_not_pending: 'This request is no longer waiting for confirmation.',
+    approval_not_revocable: 'This approval can no longer be revoked.',
+    approval_state_changed: 'This approval changed while it was being revoked. Try again.',
+    deployment_changed: 'The deployment approval changed since this request. Make a new request.',
+    too_many_requests: 'Too many attempts. Try again later.',
+    revoke_unavailable: 'The revoke could not be made safe. Nothing was changed. Try again.',
+    authentication_unavailable: 'Verification is temporarily unavailable. Try again.',
+    unavailable: 'This action is temporarily unavailable. Nothing was changed. Try again.',
+};
+/** The short user-facing English text for a code (no ids, no server text). */
+export function clientDataErrorText(code) {
+    return CODE_TEXT[code];
+}
+/** Fixed text per status when no known code came back. */
+const STATUS_TEXT = {
+    0: 'Could not reach the server. Check your connection and try again.',
+    401: 'Please sign in again.',
+    403: 'You do not have access to perform this action.',
+    503: 'Client data approval is temporarily unavailable. Try again shortly.',
+};
+const isRecord = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const strOr = (v, d = '') => (typeof v === 'string' ? v : d);
+const strOrNull = (v) => (typeof v === 'string' ? v : null);
+const numOrNull = (v) => typeof v === 'number' && Number.isFinite(v) ? v : null;
+const strings = (v) => Array.isArray(v) ? v.filter((x) => typeof x === 'string') : [];
+function fail(status, data, generic) {
+    const body = isRecord(data) ? data : {};
+    const code = isClientDataErrorCode(body.code) ? body.code : null;
+    return {
+        ok: false,
+        status,
+        code,
+        error: code !== null ? CODE_TEXT[code] : (STATUS_TEXT[status] ?? generic),
+    };
+}
+/** A transport exception becomes a typed failure; the thrown text is never kept. */
+function thrown(generic) {
+    return { ok: false, status: 0, code: null, error: STATUS_TEXT[0] ?? generic };
+}
+function toDeployment(raw) {
+    if (!isRecord(raw) || typeof raw.profile !== 'string')
+        return null;
+    return {
+        profile: raw.profile,
+        provider: strOr(raw.provider),
+        reference: strOr(raw.reference),
+        region: strOr(raw.region),
+        retentionDays: typeof raw.retentionDays === 'number' ? raw.retentionDays : 0,
+        dataClasses: strings(raw.dataClasses),
+        fileContent: raw.fileContent === true,
+        approvedBy: strOr(raw.approvedBy),
+        approvedOn: strOr(raw.approvedOn),
+    };
+}
+function toApproval(raw) {
+    if (!isRecord(raw) || typeof raw.uuid !== 'string' || typeof raw.state !== 'string')
+        return null;
+    return {
+        uuid: raw.uuid,
+        profile: strOr(raw.profile),
+        provider: strOr(raw.provider),
+        state: raw.state,
+        dataClasses: strings(raw.dataClasses),
+        fileContent: raw.fileContent === true,
+        requestedByLabel: strOr(raw.requestedByLabel),
+        requestedByMe: raw.requestedByMe === true,
+        requestedAtMs: numOrNull(raw.requestedAtMs),
+        confirmedByLabel: strOrNull(raw.confirmedByLabel),
+        confirmedAtMs: numOrNull(raw.confirmedAtMs),
+        revokedByLabel: strOrNull(raw.revokedByLabel),
+        revokedAtMs: numOrNull(raw.revokedAtMs),
+        reason: strOr(raw.reason),
+        revokeReason: strOrNull(raw.revokeReason),
+        disclosureVersion: typeof raw.disclosureVersion === 'number' ? raw.disclosureVersion : 1,
+        deploymentMatches: raw.deploymentMatches !== false,
+    };
+}
+const one = (uuid) => `${BASE}/approvals/${encodeURIComponent(uuid)}`;
+export function createClientDataService(http) {
+    return {
+        async list(accessToken) {
+            const generic = 'Could not load the client data approvals.';
+            try {
+                const r = await http.get(BASE, { bearerToken: accessToken });
+                if (!r.ok)
+                    return fail(r.status, r.data, generic);
+                const d = isRecord(r.data) ? r.data : {};
+                const deployment = [];
+                for (const x of Array.isArray(d.deployment) ? d.deployment : []) {
+                    const row = toDeployment(x);
+                    if (row !== null)
+                        deployment.push(row);
+                }
+                const approvals = [];
+                for (const x of Array.isArray(d.approvals) ? d.approvals : []) {
+                    const row = toApproval(x);
+                    if (row !== null)
+                        approvals.push(row);
+                }
+                // Fail safe: an absent flag means the stricter two-person rule.
+                return { ok: true, deployment, twoPerson: d.twoPerson !== false, approvals };
+            }
+            catch {
+                return thrown(generic);
+            }
+        },
+        /** Request (two-person) or grant (single admin) an approval; only documented fields are sent. */
+        async request(accessToken, input) {
+            const generic = 'Could not send the request.';
+            try {
+                const body = {
+                    profile: input.profile,
+                    dataClasses: [...input.dataClasses],
+                    fileContent: input.fileContent,
+                    reason: input.reason,
+                    code: input.code,
+                };
+                const r = await http.post(`${BASE}/approvals`, body, { bearerToken: accessToken });
+                if (!r.ok)
+                    return fail(r.status, r.data, generic);
+                const d = isRecord(r.data) ? r.data : {};
+                if (typeof d.uuid !== 'string' || (d.state !== 'pending' && d.state !== 'active')) {
+                    return { ok: false, status: r.status, code: null, error: generic };
+                }
+                return { ok: true, uuid: d.uuid, state: d.state };
+            }
+            catch {
+                return thrown(generic);
+            }
+        },
+        /** The second administrator confirms; the body is the step-up code only. */
+        async confirm(accessToken, uuid, input) {
+            const generic = 'Could not confirm the request.';
+            try {
+                const r = await http.post(`${one(uuid)}/confirm`, { code: input.code }, { bearerToken: accessToken });
+                if (!r.ok)
+                    return fail(r.status, r.data, generic);
+                const d = isRecord(r.data) ? r.data : {};
+                if (typeof d.uuid !== 'string' || d.state !== 'active') {
+                    return { ok: false, status: r.status, code: null, error: generic };
+                }
+                return { ok: true, uuid: d.uuid, state: 'active' };
+            }
+            catch {
+                return thrown(generic);
+            }
+        },
+        /** Revoke a pending or active approval; no step-up code is sent. */
+        async revoke(accessToken, uuid, input) {
+            const generic = 'Could not revoke the approval.';
+            try {
+                const r = await http.post(`${one(uuid)}/revoke`, { reason: input.reason }, { bearerToken: accessToken });
+                if (!r.ok)
+                    return fail(r.status, r.data, generic);
+                const d = isRecord(r.data) ? r.data : {};
+                if (typeof d.uuid !== 'string' || d.state !== 'revoked') {
+                    return { ok: false, status: r.status, code: null, error: generic };
+                }
+                return { ok: true, uuid: d.uuid, state: 'revoked' };
+            }
+            catch {
+                return thrown(generic);
+            }
+        },
+    };
+}
+//# sourceMappingURL=clientDataService.js.map

package/dist/agentClientData/clientDataService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientDataService.js","sourceRoot":"","sources":["../../src/agentClientData/clientDataService.ts"],"names":[],"mappings":"AA0BA,MAAM,IAAI,GAAG,6BAA6B,CAAC;AAE3C,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,eAAe,EAAE,GAAG;IACpB,uBAAuB,EAAE,GAAG;IAC5B,yBAAyB,EAAE,GAAG;IAC9B,wBAAwB,EAAE,GAAG;IAC7B,SAAS,EAAE,GAAG;IACd,gBAAgB,EAAE,GAAG;IACrB,sBAAsB,EAAE,GAAG;IAC3B,kBAAkB,EAAE,GAAG;IACvB,uBAAuB,EAAE,GAAG;IAC5B,sBAAsB,EAAE,GAAG;IAC3B,oBAAoB,EAAE,GAAG;IACzB,sBAAsB,EAAE,GAAG;IAC3B,sBAAsB,EAAE,GAAG;IAC3B,kBAAkB,EAAE,GAAG;IACvB,iBAAiB,EAAE,GAAG;IACtB,kBAAkB,EAAE,GAAG;IACvB,0BAA0B,EAAE,GAAG;IAC/B,WAAW,EAAE,GAAG;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAChD,wBAAwB,CACS,CAAC;AAEpC,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,SAAS,GAAkD;IAC/D,eAAe,EAAE,4DAA4D;IAC7E,uBAAuB,EAAE,sDAAsD;IAC/E,yBAAyB,EACvB,4EAA4E;IAC9E,wBAAwB,EAAE,+DAA+D;IACzF,SAAS,EAAE,gDAAgD;IAC3D,gBAAgB,EAAE,iEAAiE;IACnF,sBAAsB,EAAE,sDAAsD;IAC9E,kBAAkB,EAAE,8BAA8B;IAClD,uBAAuB,EAAE,gDAAgD;IACzE,sBAAsB,EAAE,kCAAkC;IAC1D,oBAAoB,EAAE,qDAAqD;IAC3E,sBAAsB,EAAE,yCAAyC;IACjE,sBAAsB,EAAE,8DAA8D;IACtF,kBAAkB,EAAE,yEAAyE;IAC7F,iBAAiB,EAAE,qCAAqC;IACxD,kBAAkB,EAAE,oEAAoE;IACxF,0BAA0B,EAAE,qDAAqD;IACjF,WAAW,EAAE,yEAAyE;CACvF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,0DAA0D;AAC1D,MAAM,WAAW,GAAqC;IACpD,CAAC,EAAE,kEAAkE;IACrE,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,gDAAgD;IACrD,GAAG,EAAE,qEAAqE;CAC3E,CAAC;AAqGF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAC5D,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAC,GAAG,EAAE,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,MAAM,SAAS,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpF,MAAM,SAAS,GAAG,CAAC,CAAU,EAAiB,EAAE,CAC9C,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CACvC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAE9E,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa,EAAE,OAAe;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM;QACN,IAAI;QACJ,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7B,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACzB,aAAa,EAAE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC5E,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,WAAW,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI;QACrC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,WAAW,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI;QACrC,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC7C,aAAa,EAAE,GAAG,CAAC,aAAa,KAAK,IAAI;QACzC,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3C,gBAAgB,EAAE,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC;QACjD,aAAa,EAAE,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;QAC3C,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7C,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;QACvC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACzB,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;QACzC,iBAAiB,EAAE,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACxF,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,KAAK;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,IAAI,cAAc,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAE9E,MAAM,UAAU,uBAAuB,CAAC,IAAgB;IACtD,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,WAAW;YACpB,MAAM,OAAO,GAAG,2CAA2C,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAyB,EAAE,CAAC;gBAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBAChE,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,GAAG,KAAK,IAAI;wBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACzC,CAAC;gBACD,MAAM,SAAS,GAAyB,EAAE,CAAC;gBAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;oBAC1B,IAAI,GAAG,KAAK,IAAI;wBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxC,CAAC;gBACD,gEAAgE;gBAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,EAAE,CAAC;YAC/E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,iGAAiG;QACjG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK;YAC9B,MAAM,OAAO,GAAG,6BAA6B,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG;oBACX,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;oBACnC,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAC;gBACF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;oBAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBACrE,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK;YACpC,MAAM,OAAO,GAAG,gCAAgC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,EACtB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EACpB,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;gBACF,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBACrE,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK;YACnC,MAAM,OAAO,GAAG,gCAAgC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EACrB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;gBACF,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;gBACrE,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agentClientData/disclosureService.d.ts

@@ -0,0 +1,93 @@
+/**
+ * createClientDataDisclosureService — platform-agnostic calls to the client-data disclosure routes
+ * (model-provider-client-data SPEC v7 §5 C "Acknowledgement", §5 D "Disclosure"): before an AI
+ * assistant task may send a company's real data to the model provider, each user acknowledges the
+ * CURRENT version of the disclosure of the company's active approval. Like the other services it
+ * takes an injected HTTP client and receives the bearer token per call.
+ *
+ * Every method resolves to a plain result object (never throws): `{ ok:true, ... }` on success,
+ * `{ ok:false, status, code, error }` otherwise. `code` is one of the fixed codes in
+ * {@link DISCLOSURE_ERROR_CODES} (or `null`), `error` is this package's fixed text for it; the
+ * server's own message is never passed on.
+ *
+ * The identity routes these hit (the session user and company only; nothing is taken from the body):
+ *   GET   /identity/agent/client-data/disclosure                       → the active approvals' disclosures
+ *   POST  /identity/agent/client-data/disclosure/:approvalUuid/ack { version }
+ *                                                                      → 200; 409 disclosure_version_stale
+ *                                                                        carries the current disclosure
+ *
+ * A disclosure is shown as text: `statements` are server-written sentences (render as plain text),
+ * `masking` lists names and versions only (never a pattern). `approvalUuid` is for API calls only.
+ */
+import type { HttpClient } from '../http/types.js';
+/** The fixed route error codes with their HTTP statuses. */
+export declare const DISCLOSURE_ERROR_STATUS: {
+    readonly invalid_request: 400;
+    readonly approval_not_found: 404;
+    readonly disclosure_version_stale: 409;
+};
+export type DisclosureErrorCode = keyof typeof DISCLOSURE_ERROR_STATUS;
+export declare const DISCLOSURE_ERROR_CODES: readonly DisclosureErrorCode[];
+export declare function isDisclosureErrorCode(v: unknown): v is DisclosureErrorCode;
+/** The short user-facing English text for a code (no ids, no server text). */
+export declare function disclosureErrorText(code: DisclosureErrorCode): string;
+/** The masking policy as the disclosure shows it: names, versions and limits only. */
+export interface ClientDataDisclosureMasking {
+    mode: string;
+    budgetMs: number;
+    ip: boolean;
+    nationalIds: string[];
+    detectors: {
+        kind: string;
+        version: number;
+    }[];
+    declaredKinds: string[];
+    headerHints: Record<string, string[]>;
+}
+/** One active approval's disclosure for the session company. */
+export interface ClientDataDisclosure {
+    /** For API calls only (the acknowledgement route); never show it. */
+    approvalUuid: string;
+    profile: string;
+    provider: string;
+    region: string;
+    retentionDays: number;
+    dataClasses: string[];
+    fileContent: boolean;
+    masking: ClientDataDisclosureMasking | null;
+    /** Server-written sentences, in order (render as plain text). */
+    statements: string[];
+    /** The version to acknowledge. */
+    version: number;
+    /** The digest of the canonical disclosure (display a short form at most). */
+    digest: string;
+    /** True when the session user has acknowledged exactly this version. */
+    acknowledged: boolean;
+}
+export interface DisclosureFailure {
+    ok: false;
+    status: number;
+    code: DisclosureErrorCode | null;
+    error: string;
+    /** Set on `disclosure_version_stale` (409): the current disclosure to show before re-acknowledging. */
+    disclosure?: ClientDataDisclosure;
+}
+export type GetDisclosureResult = {
+    ok: true;
+    disclosures: ClientDataDisclosure[];
+} | DisclosureFailure;
+export type AcknowledgeDisclosureResult = {
+    ok: true;
+    approvalUuid: string;
+    version: number;
+} | DisclosureFailure;
+export interface AcknowledgeDisclosureInput {
+    /** The disclosure version the user read (`ClientDataDisclosure.version`). */
+    version: number;
+}
+export interface ClientDataDisclosureService {
+    getDisclosure(accessToken: string): Promise<GetDisclosureResult>;
+    acknowledgeDisclosure(accessToken: string, approvalUuid: string, input: AcknowledgeDisclosureInput): Promise<AcknowledgeDisclosureResult>;
+}
+export declare function createClientDataDisclosureService(http: HttpClient): ClientDataDisclosureService;
+//# sourceMappingURL=disclosureService.d.ts.map

package/dist/agentClientData/disclosureService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosureService.d.ts","sourceRoot":"","sources":["../../src/agentClientData/disclosureService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAInD,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB;;;;CAI1B,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,uBAAuB,CAAC;AAEvE,eAAO,MAAM,sBAAsB,EAE9B,SAAS,mBAAmB,EAAE,CAAC;AAEpC,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,mBAAmB,CAE1E;AASD,8EAA8E;AAC9E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAErE;AAUD,sFAAsF;AACtF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACvC;AAED,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAAC;IAC5C,iEAAiE;IACjE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kCAAkC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,uGAAuG;IACvG,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED,MAAM,MAAM,mBAAmB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,oBAAoB,EAAE,CAAA;CAAE,GAAG,iBAAiB,CAAC;AACxE,MAAM,MAAM,2BAA2B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,CAAC;AAE1E,MAAM,WAAW,0BAA0B;IACzC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,2BAA2B;IAC1C,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjE,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC,CAAC;CACzC;AA6ED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,UAAU,GAAG,2BAA2B,CAwC/F"}

package/dist/agentClientData/disclosureService.js

@@ -0,0 +1,135 @@
+const BASE = '/identity/agent/client-data/disclosure';
+/** The fixed route error codes with their HTTP statuses. */
+export const DISCLOSURE_ERROR_STATUS = {
+    invalid_request: 400,
+    approval_not_found: 404,
+    disclosure_version_stale: 409,
+};
+export const DISCLOSURE_ERROR_CODES = Object.keys(DISCLOSURE_ERROR_STATUS);
+export function isDisclosureErrorCode(v) {
+    return typeof v === 'string' && Object.prototype.hasOwnProperty.call(DISCLOSURE_ERROR_STATUS, v);
+}
+const CODE_TEXT = {
+    invalid_request: 'The request is not valid. Check the details and try again.',
+    approval_not_found: 'That approval was not found. It may have ended.',
+    disclosure_version_stale: 'The notice changed since you opened it. Read the current notice and acknowledge it again.',
+};
+/** The short user-facing English text for a code (no ids, no server text). */
+export function disclosureErrorText(code) {
+    return CODE_TEXT[code];
+}
+/** Fixed text per status when no known code came back. */
+const STATUS_TEXT = {
+    0: 'Could not reach the server. Check your connection and try again.',
+    401: 'Please sign in again.',
+    403: 'You do not have access to perform this action.',
+    503: 'The notice is temporarily unavailable. Try again shortly.',
+};
+const isRecord = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const strOr = (v, d = '') => (typeof v === 'string' ? v : d);
+const numOr = (v, d) => typeof v === 'number' && Number.isFinite(v) ? v : d;
+const strings = (v) => Array.isArray(v) ? v.filter((x) => typeof x === 'string') : [];
+function toMasking(raw) {
+    if (!isRecord(raw))
+        return null;
+    const detectors = [];
+    for (const d of Array.isArray(raw.detectors) ? raw.detectors : []) {
+        if (isRecord(d) && typeof d.kind === 'string') {
+            detectors.push({ kind: d.kind, version: numOr(d.version, 1) });
+        }
+    }
+    const headerHints = {};
+    if (isRecord(raw.headerHints)) {
+        for (const [kind, words] of Object.entries(raw.headerHints))
+            headerHints[kind] = strings(words);
+    }
+    return {
+        mode: strOr(raw.mode),
+        budgetMs: numOr(raw.budgetMs, 0),
+        ip: raw.ip === true,
+        nationalIds: strings(raw.nationalIds),
+        detectors,
+        declaredKinds: strings(raw.declaredKinds),
+        headerHints,
+    };
+}
+function toDisclosure(raw) {
+    // The server names the approval `uuid` (identity `ClientDataDisclosureView`); the client calls it
+    // `approvalUuid` to keep it apart from other ids in a consumer's state.
+    if (!isRecord(raw) || typeof raw.uuid !== 'string')
+        return null;
+    return {
+        approvalUuid: raw.uuid,
+        profile: strOr(raw.profile),
+        provider: strOr(raw.provider),
+        region: strOr(raw.region),
+        retentionDays: numOr(raw.retentionDays, 0),
+        dataClasses: strings(raw.dataClasses),
+        fileContent: raw.fileContent === true,
+        masking: toMasking(raw.masking),
+        statements: strings(raw.statements),
+        version: numOr(raw.version, 1),
+        digest: strOr(raw.digest),
+        // Fail safe: anything but an explicit true is "not acknowledged".
+        acknowledged: raw.acknowledged === true,
+    };
+}
+function fail(status, data, generic) {
+    const body = isRecord(data) ? data : {};
+    const code = isDisclosureErrorCode(body.code) ? body.code : null;
+    const out = {
+        ok: false,
+        status,
+        code,
+        error: code !== null ? CODE_TEXT[code] : (STATUS_TEXT[status] ?? generic),
+    };
+    if (code === 'disclosure_version_stale') {
+        // The 409 body carries the current disclosure in `disclosure` (no `acknowledged`: false here).
+        const current = toDisclosure(body.disclosure);
+        if (current !== null)
+            out.disclosure = current;
+    }
+    return out;
+}
+/** A transport exception becomes a typed failure; the thrown text is never kept. */
+function thrown(generic) {
+    return { ok: false, status: 0, code: null, error: STATUS_TEXT[0] ?? generic };
+}
+export function createClientDataDisclosureService(http) {
+    return {
+        async getDisclosure(accessToken) {
+            const generic = 'Could not load the notice.';
+            try {
+                const r = await http.get(BASE, { bearerToken: accessToken });
+                if (!r.ok)
+                    return fail(r.status, r.data, generic);
+                // The route answers `{ approvals: [...] }`.
+                const list = isRecord(r.data) && Array.isArray(r.data.approvals) ? r.data.approvals : [];
+                const disclosures = [];
+                for (const x of list) {
+                    const row = toDisclosure(x);
+                    if (row !== null)
+                        disclosures.push(row);
+                }
+                return { ok: true, disclosures };
+            }
+            catch {
+                return thrown(generic);
+            }
+        },
+        /** Acknowledge the version the user read; the body is `{ version }` only. */
+        async acknowledgeDisclosure(accessToken, approvalUuid, input) {
+            const generic = 'Could not record your acknowledgement.';
+            try {
+                const r = await http.post(`${BASE}/${encodeURIComponent(approvalUuid)}/ack`, { version: input.version }, { bearerToken: accessToken });
+                if (!r.ok)
+                    return fail(r.status, r.data, generic);
+                return { ok: true, approvalUuid, version: input.version };
+            }
+            catch {
+                return thrown(generic);
+            }
+        },
+    };
+}
+//# sourceMappingURL=disclosureService.js.map

package/dist/agentClientData/disclosureService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosureService.js","sourceRoot":"","sources":["../../src/agentClientData/disclosureService.ts"],"names":[],"mappings":"AAuBA,MAAM,IAAI,GAAG,wCAAwC,CAAC;AAEtD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,GAAG;IACvB,wBAAwB,EAAE,GAAG;CACrB,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,IAAI,CAC/C,uBAAuB,CACU,CAAC;AAEpC,MAAM,UAAU,qBAAqB,CAAC,CAAU;IAC9C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,SAAS,GAAkD;IAC/D,eAAe,EAAE,4DAA4D;IAC7E,kBAAkB,EAAE,iDAAiD;IACrE,wBAAwB,EACtB,2FAA2F;CAC9F,CAAC;AAEF,8EAA8E;AAC9E,MAAM,UAAU,mBAAmB,CAAC,IAAyB;IAC3D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,0DAA0D;AAC1D,MAAM,WAAW,GAAqC;IACpD,CAAC,EAAE,kEAAkE;IACrE,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,gDAAgD;IACrD,GAAG,EAAE,2DAA2D;CACjE,CAAC;AA8DF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAC5D,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE3D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAC,GAAG,EAAE,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,CAAS,EAAU,EAAE,CAC9C,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CACvC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAE9E,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAwC,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClE,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAA6B,EAAE,CAAC;IACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAClG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACrB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,IAAI;QACnB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,SAAS;QACT,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACzC,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,kGAAkG;IAClG,wEAAwE;IACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO;QACL,YAAY,EAAE,GAAG,CAAC,IAAI;QACtB,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACzB,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QAC1C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QACrC,WAAW,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI;QACrC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9B,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACzB,kEAAkE;QAClE,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa,EAAE,OAAe;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,GAAG,GAAsB;QAC7B,EAAE,EAAE,KAAK;QACT,MAAM;QACN,IAAI;QACJ,KAAK,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC;KAC1E,CAAC;IACF,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;QACxC,+FAA+F;QAC/F,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,IAAI;YAAE,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAS,MAAM,CAAC,OAAe;IAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAgB;IAChE,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,WAAW;YAC7B,MAAM,OAAO,GAAG,4BAA4B,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,4CAA4C;gBAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,MAAM,WAAW,GAA2B,EAAE,CAAC;gBAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,GAAG,KAAK,IAAI;wBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1C,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,KAAK,CAAC,qBAAqB,CACzB,WAAW,EACX,YAAY,EACZ,KAAK;YAEL,MAAM,OAAO,GAAG,wCAAwC,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CACvB,GAAG,IAAI,IAAI,kBAAkB,CAAC,YAAY,CAAC,MAAM,EACjD,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAC1B,EAAE,WAAW,EAAE,WAAW,EAAE,CAC7B,CAAC;gBACF,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -5,5 +5,9 @@ export * from './auth/index.js';
 export * from './agent/index.js';
 export { createProposalService, previewCellText, PROPOSAL_ERROR_CODES, } from './proposals/proposalService.js';
 export type { ProposalService, ProposalState, ProposalOrigin, ProposalErrorCode, ProposalSummary, ProposalListQuery, ProposalEvidenceRef, ProposalMetadata, ProposalImpact, ProposalItemView, ProposalHistoryRow, ProposalDetail, ProposalDraft, SubmittedProposal, ProposalSelectionChange, ProposalFailure, ListProposalsResult, GetProposalResult, SubmitProposalResult, SelectProposalItemsResult, ProposalTransitionResult, ApplyProposalResult, } from './proposals/proposalService.js';
+export { createClientDataService, clientDataErrorText, isClientDataErrorCode, CLIENT_DATA_ERROR_CODES, CLIENT_DATA_ERROR_STATUS, } from './agentClientData/clientDataService.js';
+export type { ClientDataService, ClientDataErrorCode, ClientDataDataClass, DeploymentApproval, ClientDataApproval, ClientDataApprovalState, ClientDataOverview, ClientDataRequestInput, ClientDataConfirmInput, ClientDataRevokeInput, ClientDataFailure, ListClientDataResult, RequestClientDataResult, ConfirmClientDataResult, RevokeClientDataResult, } from './agentClientData/clientDataService.js';
+export { createClientDataDisclosureService, disclosureErrorText, isDisclosureErrorCode, DISCLOSURE_ERROR_CODES, DISCLOSURE_ERROR_STATUS, } from './agentClientData/disclosureService.js';
+export type { ClientDataDisclosureService, ClientDataDisclosure, ClientDataDisclosureMasking, DisclosureErrorCode, DisclosureFailure, GetDisclosureResult, AcknowledgeDisclosureResult, AcknowledgeDisclosureInput, } from './agentClientData/disclosureService.js';
 export type { PermissionCatalogRow } from './auth/identityService.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AAExC,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE9F,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,oBAAoB,GACrB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,wCAAwC,CAAC;AAEhD,OAAO,EACL,iCAAiC,EACjC,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wCAAwC,CAAC;AAChD,YAAY,EACV,2BAA2B,EAC3B,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,wCAAwC,CAAC;AAEhD,YAAY,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/index.js

@@ -5,4 +5,8 @@ export * from './auth/index.js';
 export * from './agent/index.js';
 // Governed proposals client (G-036 M3 / G-037 D4): values are text, ids are for linking only.
 export { createProposalService, previewCellText, PROPOSAL_ERROR_CODES, } from './proposals/proposalService.js';
+// Client-data approval client (model-provider-client-data P2): the step-up code is never echoed.
+export { createClientDataService, clientDataErrorText, isClientDataErrorCode, CLIENT_DATA_ERROR_CODES, CLIENT_DATA_ERROR_STATUS, } from './agentClientData/clientDataService.js';
+// Client-data disclosure acknowledgement client (model-provider-client-data step 4).
+export { createClientDataDisclosureService, disclosureErrorText, isDisclosureErrorCode, DISCLOSURE_ERROR_CODES, DISCLOSURE_ERROR_STATUS, } from './agentClientData/disclosureService.js';
 //# sourceMappingURL=index.js.map