@beacon-build/sdk 1.43.1 → 1.45.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # @beacon-build/sdk Changelog
 
+## 1.45.0
+
+### Minor Changes
+
+- 22e60df: FS54/4 (C565): consolidate the tasks tri-surface (/v1/tasks + /agent/v1/tasks + old agent-tasks route tree) into ONE canonical /api/v1/tasks resource — hard cutover, no alias window. Audience (human/vendor vs agent) is now auth + in-handler dispatch on the SAME resource via honoTaskAuthGuard, not a separate URL namespace. SDK manifest + mcp/agent's task-watch/thread tool clients updated to the canonical URL.
+
+### Patch Changes
+
+- @beacon-build/core@1.45.0
+
+## 1.44.0
+
+### Minor Changes
+
+- 3f0ddd0: F438: polymorphic Project owner (User | Org) + ProjectAccess m:m sharing (GitHub-collaborator model), self-serve project create, transfer-ownership extended to a user target, and the corrected projects_tenant_isolation RLS policy.
+
+### Patch Changes
+
+- cf80475: F440: Admin-UI-Redesign (Flächen 1-3) — Organisationen/Benutzer/Rollenvergabe rebuilt on packages/ui (TreeNav, Dialog, Badge, SearchFilterBar); hierarchy-aware org-admin child-org creation and ancestor-aware member re-roling (new PATCH /v1/organizations/{id}/members/{userId}); viewer role + role field on GET /v1/users; last-admin self-protection and duplicate-membership guards. Fläche 4 (ProjectAccess) deferred to a follow-up after F438.
+- b496b14: F442: ProjectAccess UI (Fläche 4) — project workspace Access tab (owner + collaborator grants), SDK access-methods (accessList/accessGrant/accessRevoke) and Portal service/hook wiring for F438's ProjectAccess API
+- Updated dependencies [cf80475]
+- Updated dependencies [3f0ddd0]
+- Updated dependencies [b105793]
+    - @beacon-build/core@1.44.0
+
 ## 1.43.1
 
 ### Patch Changes

package/dist/clients/admin/agents.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/agents.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,QAAQ,EACR,eAAe,EACf,eAAe,EACf,OAAO,EACP,aAAa,EAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,cAAe,SAAQ,QAAQ;IAC5C,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,OAAO,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAK3C,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQpD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAUzE,UAAU,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAQxC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIhE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtE,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAU/D,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQhE,UAAU,CACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAajD,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG;QAAE,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC,CAAC;IAMxE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAShD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjE,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5C,oFAAoF;IAC9E,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAG3D"}
+{"version":3,"file":"agents.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/agents.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,QAAQ,EACR,eAAe,EACf,eAAe,EACf,OAAO,EACP,aAAa,EAChB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,cAAe,SAAQ,QAAQ;IAC5C,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,OAAO,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAK3C,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IASpD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAYzE,UAAU,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IASxC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIhE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3E,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQtE,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAW/D,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAShE,UAAU,CACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAcjD,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,GAAG;QAAE,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAA;KAAE,CAAC,CAAC;IAMxE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAShD,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjE,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5C,oFAAoF;IAC9E,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;CAG3D"}

package/dist/clients/admin/agents.client.js

@@ -11,7 +11,8 @@ export class AdminAgentsClient {
         try {
             return await this.http.get(`/agents/${encodeURIComponent(agentId)}`);
         }
-        catch {
+        catch (_err) {
+            // Deliberate: "not found" degrades to null for this lookup.
             return null;
         }
     }
@@ -22,15 +23,18 @@ export class AdminAgentsClient {
         try {
             return await this.http.get(`/agents/by-alias?${params.toString()}`);
         }
-        catch {
+        catch (_err) {
+            // Deliberate: "not found" degrades to null for this lookup.
             return null;
         }
     }
+    // C566: GET /sessions/active (was /agents/active) — same admin/vendor-gated tree.
     async listActive() {
         try {
-            return await this.http.get('/agents/active');
+            return await this.http.get('/sessions/active');
         }
-        catch {
+        catch (_err) {
+            // Deliberate: degrades to an empty list on failure.
             return [];
         }
     }
@@ -54,7 +58,8 @@ export class AdminAgentsClient {
         try {
             return await this.http.get(`/agents/${encodeURIComponent(agentId)}/config`);
         }
-        catch {
+        catch (_err) {
+            // Deliberate: degrades to an empty config on failure.
             return {};
         }
     }
@@ -67,11 +72,13 @@ export class AdminAgentsClient {
     // B300: no `cwd` — the server never read it. It was accepted here, sent over the wire, and
     // dropped at the route, so it read like an identity anchor while resolution stayed
     // project-only. A parameter that looks load-bearing and isn't is worse than none.
+    // C566: POST /sessions/resolve-affinity (was /agents/resolve-affinity).
     async resolveAffinity(project) {
         try {
-            return await this.http.post('/agents/resolve-affinity', { project });
+            return await this.http.post('/sessions/resolve-affinity', { project });
         }
-        catch {
+        catch (_err) {
+            // Deliberate: "cannot resolve" degrades to null for this lookup.
             return null;
         }
     }
@@ -82,7 +89,8 @@ export class AdminAgentsClient {
                 project,
             });
         }
-        catch {
+        catch (_err) {
+            // Deliberate: mint failure degrades to null for this caller.
             return null;
         }
     }

package/dist/clients/admin/agents.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.client.js","sourceRoot":"","sources":["../../../src/clients/admin/agents.client.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,OAAgB;QACvB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAa,UAAU,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACxF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7C,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC3C,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAkB,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACxF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,gBAAgB,CAAC,CAAA;QACnE,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAe;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAkB,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,KAAa;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,MAA2B;QAC7D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACpF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,GAAW,EAAE,KAAc;QACxD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE;YACnE,MAAM,EAAE,KAAK;YACb,GAAG;YACH,KAAK;SACR,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAC9B,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAClD,CAAA;QACL,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,GAAW;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE;YACnE,MAAM,EAAE,QAAQ;YAChB,GAAG;SACN,CAAC,CAAA;IACN,CAAC;IAED,2FAA2F;IAC3F,mFAAmF;IACnF,kFAAkF;IAClF,KAAK,CAAC,eAAe,CAAC,OAAe;QACjC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,0BAA0B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QACxF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACZ,OAAe,EACf,OAAe;QAEf,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuC,cAAc,EAAE;gBAC9E,OAAO;gBACP,OAAO;aACV,CAAC,CAAA;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqD,SAAS,CAAC,CAAA;IACvF,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,cAAc,CAAC,OAAe;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACjC,WAAW,kBAAkB,CAAC,OAAO,CAAC,kBAAkB,CAC3D,CAAA;QACD,OAAO,QAAQ,CAAC,GAAG,CAAA;IACvB,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,YAAoB;QACnD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,kBAAkB;IAElB,KAAK,CAAC,MAAM,CAAC,OAAe;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAO,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,4EAA4E;IAE5E,oFAAoF;IACpF,KAAK,CAAC,SAAS,CAAC,OAAe;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgB,WAAW,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5F,CAAC;CACJ"}
+{"version":3,"file":"agents.client.js","sourceRoot":"","sources":["../../../src/clients/admin/agents.client.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,OAAgB;QACvB,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAa,UAAU,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACxF,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,4DAA4D;YAC5D,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,OAAgB;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QAC7C,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC3C,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAkB,oBAAoB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACxF,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,4DAA4D;YAC5D,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,UAAU;QACZ,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,kBAAkB,CAAC,CAAA;QACrE,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,oDAAoD;YACpD,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAe;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAkB,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,KAAa;QACvC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,MAA2B;QAC7D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACpF,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,GAAW,EAAE,KAAc;QACxD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE;YACnE,MAAM,EAAE,KAAK;YACb,GAAG;YACH,KAAK;SACR,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe;QAC9B,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAClD,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,sDAAsD;YACtD,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,GAAW;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE;YACnE,MAAM,EAAE,QAAQ;YAChB,GAAG;SACN,CAAC,CAAA;IACN,CAAC;IAED,2FAA2F;IAC3F,mFAAmF;IACnF,kFAAkF;IAClF,wEAAwE;IACxE,KAAK,CAAC,eAAe,CAAC,OAAe;QACjC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,4BAA4B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;QAC1F,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,iEAAiE;YACjE,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACZ,OAAe,EACf,OAAe;QAEf,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuC,cAAc,EAAE;gBAC9E,OAAO;gBACP,OAAO;aACV,CAAC,CAAA;QACN,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,6DAA6D;YAC7D,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqD,SAAS,CAAC,CAAA;IACvF,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,cAAc,CAAC,OAAe;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CACjC,WAAW,kBAAkB,CAAC,OAAO,CAAC,kBAAkB,CAC3D,CAAA;QACD,OAAO,QAAQ,CAAC,GAAG,CAAA;IACvB,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,YAAoB;QACnD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,kBAAkB;IAElB,KAAK,CAAC,MAAM,CAAC,OAAe;QACxB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAO,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,4EAA4E;IAE5E,oFAAoF;IACpF,KAAK,CAAC,SAAS,CAAC,OAAe;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgB,WAAW,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5F,CAAC;CACJ"}

package/dist/clients/admin/executions.client.d.ts

@@ -17,13 +17,17 @@ export interface ListInstancesParams {
 /**
  * AdminExecutionsClient — by-id drill-down reads for the F307 Execution Log UI, plus the F381
  * Läufe view's cross-cutting list reads. Wraps existing routes (F381 adds no server endpoint
- * except the AC-4 `statuses` filter on the pre-existing `/workflow-runner/instances`):
- *  - F308 `GET /workflow-runner/workflow-executions/:id` → `{ data: ExecutionDetail }`
- *  - `GET /skills/:id` → `{ data: SkillExecution }` (mapped to ExecutionDetail by the consumer).
- *  - F381 `GET /skills` → `{ data: SkillExecution[], total }`
- *  - F381 `GET /workflow-runner/instances` → `{ data: WorkflowInstance[] }`
- *  - F381 `GET /workflow-runner/definitions/:id` → `{ data: WorkflowDefinition }` (name/type
+ * except the AC-4 `statuses` filter on the pre-existing `/workflow-instances/instances`):
+ *  - F308 `GET /workflow-instances/workflow-executions/:id` → `{ data: ExecutionDetail }`
+ *  - `GET /skill-executions/:id` → `{ data: SkillExecution }` (mapped to ExecutionDetail by the
+ *    consumer). Renamed from `/skills/:id` under FS54 Chore 6 (C567).
+ *  - F381 `GET /skill-executions` → `{ data: SkillExecution[], total }` (renamed from `/skills`).
+ *  - F381 `GET /workflow-instances/instances` → `{ data: WorkflowInstance[] }`
+ *  - F381 `GET /workflow-instances/definitions/:id` → `{ data: WorkflowDefinition }` (name/type
  *    resolution for an instance row; existing route, not new).
+ *
+ * C568 (FS54/7): paths renamed from `/workflow-runner/*` to `/workflow-instances/*` — the
+ * consolidated canonical resource; no shape/contract change.
  */
 export declare class AdminExecutionsClient {
     private readonly http;
@@ -42,8 +46,10 @@ export declare class AdminExecutionsClient {
     getDefinition<T>(id: string): Promise<T>;
     /**
      * F424: vendor-gated force-terminate for a skill execution — distinct from the
-     * self-service `POST /skills/:id/fail`. 403s for a non-vendor caller. Idempotent —
-     * safe to call again on an already-terminal execution.
+     * self-service `POST /skill-executions/:id/fail`. 403s for a non-vendor caller. Idempotent —
+     * safe to call again on an already-terminal execution. Renamed from
+     * `/admin/executions/:id/terminate` under FS54 Chore 6 (C567) — now a sub-path of the
+     * canonical resource.
      */
     terminate<T>(id: string): Promise<T>;
 }

package/dist/clients/admin/executions.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"executions.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/executions.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,uGAAuG;AACvG,MAAM,WAAW,yBAAyB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;IAC3C,iBAAiB,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAA;IACtD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAYD;;;;;;;;;;GAUG;AACH,qBAAa,qBAAqB;IAClB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,2EAA2E;IACrE,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAM/C,kFAAkF;IAC5E,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAI/C,kGAAkG;IAC5F,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAItD,uFAAuF;IACjF,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,mFAAmF;IAC7E,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IAO/D,qFAAqF;IAC/E,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAI9C;;;;OAIG;IACG,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAG7C"}
+{"version":3,"file":"executions.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/executions.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,uGAAuG;AACvG,MAAM,WAAW,yBAAyB;IACtC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAA;IAC3C,iBAAiB,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAA;IACtD,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAYD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,qBAAqB;IAClB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,2EAA2E;IACrE,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAM/C,kFAAkF;IAC5E,cAAc,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAI/C,kGAAkG;IAC5F,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAMtD,uFAAuF;IACjF,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3E,mFAAmF;IAC7E,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IAO/D,qFAAqF;IAC/E,aAAa,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAI9C;;;;;;OAMG;IACG,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAG7C"}

package/dist/clients/admin/executions.client.js

@@ -11,13 +11,17 @@ function qs(params) {
 /**
  * AdminExecutionsClient — by-id drill-down reads for the F307 Execution Log UI, plus the F381
  * Läufe view's cross-cutting list reads. Wraps existing routes (F381 adds no server endpoint
- * except the AC-4 `statuses` filter on the pre-existing `/workflow-runner/instances`):
- *  - F308 `GET /workflow-runner/workflow-executions/:id` → `{ data: ExecutionDetail }`
- *  - `GET /skills/:id` → `{ data: SkillExecution }` (mapped to ExecutionDetail by the consumer).
- *  - F381 `GET /skills` → `{ data: SkillExecution[], total }`
- *  - F381 `GET /workflow-runner/instances` → `{ data: WorkflowInstance[] }`
- *  - F381 `GET /workflow-runner/definitions/:id` → `{ data: WorkflowDefinition }` (name/type
+ * except the AC-4 `statuses` filter on the pre-existing `/workflow-instances/instances`):
+ *  - F308 `GET /workflow-instances/workflow-executions/:id` → `{ data: ExecutionDetail }`
+ *  - `GET /skill-executions/:id` → `{ data: SkillExecution }` (mapped to ExecutionDetail by the
+ *    consumer). Renamed from `/skills/:id` under FS54 Chore 6 (C567).
+ *  - F381 `GET /skill-executions` → `{ data: SkillExecution[], total }` (renamed from `/skills`).
+ *  - F381 `GET /workflow-instances/instances` → `{ data: WorkflowInstance[] }`
+ *  - F381 `GET /workflow-instances/definitions/:id` → `{ data: WorkflowDefinition }` (name/type
  *    resolution for an instance row; existing route, not new).
+ *
+ * C568 (FS54/7): paths renamed from `/workflow-runner/*` to `/workflow-instances/*` — the
+ * consolidated canonical resource; no shape/contract change.
  */
 export class AdminExecutionsClient {
     http;
@@ -26,36 +30,38 @@ export class AdminExecutionsClient {
     }
     /** F308: unified ExecutionDetail for a SOP/workflow run by instance id. */
     async workflowDetail(id) {
-        return this.http.getEnvelope(`/workflow-runner/workflow-executions/${encodeURIComponent(id)}`);
+        return this.http.getEnvelope(`/workflow-instances/workflow-executions/${encodeURIComponent(id)}`);
     }
     /** Raw skill execution by id; the platform service maps it to ExecutionDetail. */
     async skillExecution(id) {
-        return this.http.getEnvelope(`/skills/${encodeURIComponent(id)}`);
+        return this.http.getEnvelope(`/skill-executions/${encodeURIComponent(id)}`);
     }
     /** C352/AC-4: flattened friction occurrences for a project, grouped by repetition client-side. */
     async projectFrictions(project) {
-        return this.http.getEnvelope(`/skills/frictions?project=${encodeURIComponent(project)}`);
+        return this.http.getEnvelope(`/skill-executions/frictions?project=${encodeURIComponent(project)}`);
     }
     /** F381: raw skill-execution list (Live/Roster/Recent sections read this directly). */
     async listSkillExecutions(params) {
-        return this.http.getEnvelope(`/skills${qs({ ...params })}`);
+        return this.http.getEnvelope(`/skill-executions${qs({ ...params })}`);
     }
     /** F381/AC-4: raw workflow-instance list, `statuses` joined into one CSV param. */
     async listInstances(params) {
         const { statuses, ...rest } = params;
-        return this.http.getEnvelope(`/workflow-runner/instances${qs({ ...rest, statuses: statuses?.join(',') })}`);
+        return this.http.getEnvelope(`/workflow-instances/instances${qs({ ...rest, statuses: statuses?.join(',') })}`);
     }
     /** F381: resolve a workflow instance's definition (name + type) for card display. */
     async getDefinition(id) {
-        return this.http.getEnvelope(`/workflow-runner/definitions/${encodeURIComponent(id)}`);
+        return this.http.getEnvelope(`/workflow-instances/definitions/${encodeURIComponent(id)}`);
     }
     /**
      * F424: vendor-gated force-terminate for a skill execution — distinct from the
-     * self-service `POST /skills/:id/fail`. 403s for a non-vendor caller. Idempotent —
-     * safe to call again on an already-terminal execution.
+     * self-service `POST /skill-executions/:id/fail`. 403s for a non-vendor caller. Idempotent —
+     * safe to call again on an already-terminal execution. Renamed from
+     * `/admin/executions/:id/terminate` under FS54 Chore 6 (C567) — now a sub-path of the
+     * canonical resource.
      */
     async terminate(id) {
-        return this.http.post(`/admin/executions/${encodeURIComponent(id)}/terminate`);
+        return this.http.post(`/skill-executions/${encodeURIComponent(id)}/terminate`);
     }
 }
 //# sourceMappingURL=executions.client.js.map

package/dist/clients/admin/executions.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"executions.client.js","sourceRoot":"","sources":["../../../src/clients/admin/executions.client.ts"],"names":[],"mappings":"AAmBA,SAAS,EAAE,CAAC,MAA6D;IACrE,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAA;IAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtB,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAqB;IACD;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,2EAA2E;IAC3E,KAAK,CAAC,cAAc,CAAI,EAAU;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,wCAAwC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACnE,CAAA;IACL,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,cAAc,CAAI,EAAU;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,WAAW,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,gBAAgB,CAAI,OAAe;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,6BAA6B,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,mBAAmB,CAAI,MAAiC;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,UAAU,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,aAAa,CAAI,MAA2B;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,6BAA6B,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAChF,CAAA;IACL,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,aAAa,CAAI,EAAU;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,gCAAgC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAI,EAAU;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAI,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAA;IACrF,CAAC;CACJ"}
+{"version":3,"file":"executions.client.js","sourceRoot":"","sources":["../../../src/clients/admin/executions.client.ts"],"names":[],"mappings":"AAmBA,SAAS,EAAE,CAAC,MAA6D;IACrE,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAA;IAC/B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtB,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,qBAAqB;IACD;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,2EAA2E;IAC3E,KAAK,CAAC,cAAc,CAAI,EAAU;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,2CAA2C,kBAAkB,CAAC,EAAE,CAAC,EAAE,CACtE,CAAA;IACL,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,cAAc,CAAI,EAAU;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,gBAAgB,CAAI,OAAe;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,uCAAuC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CACvE,CAAA;IACL,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,mBAAmB,CAAI,MAAiC;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,oBAAoB,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;IAC5E,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,aAAa,CAAI,MAA2B;QAC9C,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;QACpC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CACnF,CAAA;IACL,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,aAAa,CAAI,EAAU;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,mCAAmC,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAI,EAAU;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAI,qBAAqB,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,CAAA;IACrF,CAAC;CACJ"}

package/dist/clients/admin/organizations.client.d.ts

@@ -26,6 +26,7 @@ export declare class AdminOrganizationsClient {
     update(slug: string, input: UpdateOrganizationInput): Promise<OrganizationDto>;
     delete(slug: string): Promise<void>;
     addMember(slug: string, input: AddMemberInput): Promise<OrganizationMemberDto>;
+    updateMemberRole(slug: string, userId: string, role: string): Promise<OrganizationMemberDto>;
     removeMember(slug: string, userId: string): Promise<void>;
     getAncestors(id: string): Promise<OrganizationDto[]>;
     getDescendants(id: string): Promise<OrganizationDto[]>;

package/dist/clients/admin/organizations.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/organizations.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EACxB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,wBAAwB;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAI3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAU7D,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC;IAIhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI9E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAO9E,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAMpD,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAK/D"}
+{"version":3,"file":"organizations.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/organizations.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EACxB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,qBAAa,wBAAwB;IACrB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAI3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAa7D,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC;IAIhE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI9E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ9E,gBAAgB,CAClB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,qBAAqB,CAAC;IAO3B,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAMpD,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAK/D"}

package/dist/clients/admin/organizations.client.js

@@ -10,7 +10,10 @@ export class AdminOrganizationsClient {
         try {
             return await this.http.get(`/organizations/${encodeURIComponent(slug)}`);
         }
-        catch {
+        catch (_err) {
+            // Deliberate: a 404 (or any fetch failure) resolves to `null` — the caller's
+            // "not found" contract, not a swallowed bug (pre-existing behavior, unrelated to
+            // F440 — only the binding name changed to satisfy beacon/no-silent-catch).
             return null;
         }
     }
@@ -26,6 +29,10 @@ export class AdminOrganizationsClient {
     async addMember(slug, input) {
         return this.http.post(`/organizations/${encodeURIComponent(slug)}/members`, input);
     }
+    // F440/API Contract Changes item 2: re-role an existing member.
+    async updateMemberRole(slug, userId, role) {
+        return this.http.patch(`/organizations/${encodeURIComponent(slug)}/members/${encodeURIComponent(userId)}`, { role });
+    }
     async removeMember(slug, userId) {
         await this.http.delete(`/organizations/${encodeURIComponent(slug)}/members/${encodeURIComponent(userId)}`);
     }

package/dist/clients/admin/organizations.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.client.js","sourceRoot":"","sources":["../../../src/clients/admin/organizations.client.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,wBAAwB;IACJ;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAA6B,gBAAgB,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC/C,CAAA;QACL,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAkB,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAA8B;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAkB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAChG,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAqB;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,UAAU,EACpD,KAAK,CACR,CAAA;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAAc;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CACrF,CAAA;IACL,CAAC;IAED,sFAAsF;IAEtF,KAAK,CAAC,YAAY,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,YAAY,CACvD,CAAA;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,cAAc,CACzD,CAAA;IACL,CAAC;CACJ"}
+{"version":3,"file":"organizations.client.js","sourceRoot":"","sources":["../../../src/clients/admin/organizations.client.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,wBAAwB;IACJ;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAA6B,gBAAgB,CAAC,CAAA;IACtE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC/C,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,6EAA6E;YAC7E,iFAAiF;YACjF,2EAA2E;YAC3E,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAkB,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACnE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAA8B;QACrD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAkB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAChG,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAqB;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,UAAU,EACpD,KAAK,CACR,CAAA;IACL,CAAC;IAED,gEAAgE;IAChE,KAAK,CAAC,gBAAgB,CAClB,IAAY,EACZ,MAAc,EACd,IAAY;QAEZ,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAClB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAClF,EAAE,IAAI,EAAE,CACX,CAAA;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAAc;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CACrF,CAAA;IACL,CAAC;IAED,sFAAsF;IAEtF,KAAK,CAAC,YAAY,CAAC,EAAU;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,YAAY,CACvD,CAAA;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,cAAc,CACzD,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/portal.client.d.ts

@@ -23,6 +23,14 @@ export interface PortalSkillValidation {
 /**
  * AdminPortalClient — project portal operations (workflows, SOPs, skills).
  * Backs the portal UI (F271).
+ *
+ * FS54 hard cutover (2026-08-04): BOTH portal catalogs moved off the shared
+ * `/projects/:slug/{type}` path onto their canonical resources, dispatched internally here so
+ * `PortalService`/`PortalServiceImpl` (apps/platform) and every `sdk.portal.*` caller keep
+ * their existing call shape unchanged:
+ *  - `skills` → `/skill-executions/by-project/:slug{,/detail,/validate}` (C567, Chore 6)
+ *  - `workflows`/`sops` → `/workflow-instances/catalog{,/detail}?project=&kind=workflow|sop`
+ *    (C568, Chore 7 — member-facing projection of the consolidated workflow-instances resource).
  */
 export declare class AdminPortalClient {
     private readonly http;

package/dist/clients/admin/portal.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portal.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/portal.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAA;AAExD,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvD;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,qBAAqB;IAClC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACxC;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,6DAA6D;IACvD,IAAI,CAAC,CAAC,GAAG,kBAAkB,EAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,CAAC,CAAC;IAWb,iDAAiD;IAC3C,MAAM,CAAC,CAAC,GAAG,oBAAoB,EACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,CAAC;IAOb,gCAAgC;IAC1B,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAM/F"}
+{"version":3,"file":"portal.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/portal.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAA;AAExD,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvD;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,qBAAqB;IAClC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACxC;AAOD;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,6DAA6D;IACvD,IAAI,CAAC,CAAC,GAAG,kBAAkB,EAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAChE,OAAO,CAAC,CAAC,CAAC;IAgBb,iDAAiD;IAC3C,MAAM,CAAC,CAAC,GAAG,oBAAoB,EACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,CAAC;IAYb,gCAAgC;IAC1B,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAM/F"}

package/dist/clients/admin/portal.client.js

@@ -1,6 +1,18 @@
+/** `workflows`/`sops` PortalType → the workflow-instances catalog's `kind` query value. */
+function catalogKind(type) {
+    return type === 'workflows' ? 'workflow' : 'sop';
+}
 /**
  * AdminPortalClient — project portal operations (workflows, SOPs, skills).
  * Backs the portal UI (F271).
+ *
+ * FS54 hard cutover (2026-08-04): BOTH portal catalogs moved off the shared
+ * `/projects/:slug/{type}` path onto their canonical resources, dispatched internally here so
+ * `PortalService`/`PortalServiceImpl` (apps/platform) and every `sdk.portal.*` caller keep
+ * their existing call shape unchanged:
+ *  - `skills` → `/skill-executions/by-project/:slug{,/detail,/validate}` (C567, Chore 6)
+ *  - `workflows`/`sops` → `/workflow-instances/catalog{,/detail}?project=&kind=workflow|sop`
+ *    (C568, Chore 7 — member-facing projection of the consolidated workflow-instances resource).
  */
 export class AdminPortalClient {
     http;
@@ -16,17 +28,27 @@ export class AdminPortalClient {
         // back to the route's default (most recently updated first).
         if (options?.sort)
             qs.set('sort', options.sort);
-        return this.http.getEnvelope(`/projects/${encodeURIComponent(project)}/${type}?${qs.toString()}`);
+        if (type === 'skills') {
+            return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}?${qs.toString()}`);
+        }
+        qs.set('project', project);
+        qs.set('kind', catalogKind(type));
+        return this.http.getEnvelope(`/workflow-instances/catalog?${qs.toString()}`);
     }
     /** Detail for one portal definition, by name. */
     async detail(project, type, name) {
         const qs = new URLSearchParams({ name });
-        return this.http.getEnvelope(`/projects/${encodeURIComponent(project)}/${type}/detail?${qs.toString()}`);
+        if (type === 'skills') {
+            return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/detail?${qs.toString()}`);
+        }
+        qs.set('project', project);
+        qs.set('kind', catalogKind(type));
+        return this.http.getEnvelope(`/workflow-instances/catalog/detail?${qs.toString()}`);
     }
     /** Validate a skill by name. */
     async validateSkill(project, name) {
         const qs = new URLSearchParams({ name });
-        return this.http.getEnvelope(`/projects/${encodeURIComponent(project)}/skills/validate?${qs.toString()}`);
+        return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/validate?${qs.toString()}`);
     }
 }
 //# sourceMappingURL=portal.client.js.map

package/dist/clients/admin/portal.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"portal.client.js","sourceRoot":"","sources":["../../../src/clients/admin/portal.client.ts"],"names":[],"mappings":"AAoBA;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CACN,OAAe,EACf,IAAgB,EAChB,OAA+D;QAE/D,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,IAAI,OAAO,EAAE,QAAQ;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACnD,uFAAuF;QACvF,6DAA6D;QAC7D,IAAI,OAAO,EAAE,IAAI;YAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,aAAa,kBAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CACtE,CAAA;IACL,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CACR,OAAe,EACf,IAAgB,EAChB,IAAY;QAEZ,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,aAAa,kBAAkB,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC7E,CAAA;IACL,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,IAAY;QAC7C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,aAAa,kBAAkB,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC9E,CAAA;IACL,CAAC;CACJ"}
+{"version":3,"file":"portal.client.js","sourceRoot":"","sources":["../../../src/clients/admin/portal.client.ts"],"names":[],"mappings":"AAoBA,2FAA2F;AAC3F,SAAS,WAAW,CAAC,IAA0B;IAC3C,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAA;AACpD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CACN,OAAe,EACf,IAAgB,EAChB,OAA+D;QAE/D,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,IAAI,OAAO,EAAE,QAAQ;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACnD,uFAAuF;QACvF,6DAA6D;QAC7D,IAAI,OAAO,EAAE,IAAI;YAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CACjF,CAAA;QACL,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1B,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,+BAA+B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CACR,OAAe,EACf,IAAgB,EAChB,IAAY;QAEZ,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACxF,CAAA;QACL,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1B,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,sCAAsC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,IAAY;QAC7C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC1F,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/projects.client.d.ts

@@ -1,10 +1,59 @@
 import type { ProjectApiItem } from '@beacon-build/core';
 import type { HttpClient } from '../../transport/http-client.js';
+/** F438/AC-5/AC-6/AC-20: self-serve create input — mirrors the `POST /v1/projects` request
+ * shape. `ownerOrgId` omitted/undefined means the caller becomes the direct user-owner. */
+export interface CreateProjectInput {
+    slug: string;
+    name: string;
+    ownerOrgId?: string;
+}
+export interface ProjectOwnershipDto {
+    slug: string;
+    name: string;
+    orgId: string | null;
+    ownerUserId: string | null;
+}
+/** F442/AC-8: a single `ProjectAccess` collaborator grant, as returned by `GET /{slug}/access`. */
+export interface ProjectAccessGrantDto {
+    principalId: string;
+    role: string;
+    invitedBy: string | null;
+    createdAt: string;
+}
+/** F442/AC-8/FLAG-1: `GET /{slug}/access` response — owner is NOT a grant row, surfaced
+ * separately so the UI can render it distinctly (F442/INV-4). */
+export interface ProjectAccessListDto {
+    ownerUserId: string | null;
+    orgId: string | null;
+    grants: ProjectAccessGrantDto[];
+}
+/** F442/AC-8: `POST /{slug}/access` body — upsert semantics (re-granting an existing
+ * `principalId` updates its role, no duplicate-row error). */
+export interface GrantProjectAccessInput {
+    principalId: string;
+    role: 'admin' | 'member' | 'viewer';
+}
+export interface ProjectAccessGrantResultDto {
+    project: string;
+    principalId: string;
+    role: string;
+}
 export declare class AdminProjectsClient {
     private readonly http;
     constructor(http: HttpClient);
     list(): Promise<ProjectApiItem[]>;
     get(slug: string): Promise<ProjectApiItem | null>;
+    /** F438/AC-5/AC-6/AC-20: self-serve create — the Portal's `ProjectServiceImpl.create()`
+     * call target (mirrors `AdminOrganizationsClient.create()`). */
+    create(input: CreateProjectInput): Promise<ProjectOwnershipDto>;
     delete(slug: string): Promise<void>;
+    /** F442/AC-8/FLAG-1: `GET /{slug}/access` — list the project's owner + collaborator
+     * grants. Guard is `assertOwnershipForSlug` (any caller who can already see the project). */
+    accessList(slug: string): Promise<ProjectAccessListDto>;
+    /** F442/AC-4/AC-5/AC-8/FLAG-1: `POST /{slug}/access` — grant (or, for an already-granted
+     * `principalId`, re-role via upsert — there is no PATCH). */
+    accessGrant(slug: string, input: GrantProjectAccessInput): Promise<ProjectAccessGrantResultDto>;
+    /** F442/AC-6/AC-8/FLAG-1: `DELETE /{slug}/access/{principalId}` — idempotent revoke. */
+    accessRevoke(slug: string, principalId: string): Promise<void>;
 }
 //# sourceMappingURL=projects.client.d.ts.map

package/dist/clients/admin/projects.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQjD,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG5C"}
+{"version":3,"file":"projects.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,mGAAmG;AACnG,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CACpB;AAED;iEACiE;AACjE,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,qBAAqB,EAAE,CAAA;CAClC;AAED;8DAC8D;AAC9D,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAA;CACtC;AAED,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACf;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQvD;oEACgE;IAC1D,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC;iGAC6F;IACvF,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7D;iEAC6D;IACvD,WAAW,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,uBAAuB,GAC/B,OAAO,CAAC,2BAA2B,CAAC;IAOvC,wFAAwF;IAClF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKvE"}

package/dist/clients/admin/projects.client.js

@@ -10,12 +10,31 @@ export class AdminProjectsClient {
         try {
             return await this.http.get(`/projects/${encodeURIComponent(slug)}`);
         }
-        catch {
+        catch (_err) {
             return null;
         }
     }
+    /** F438/AC-5/AC-6/AC-20: self-serve create — the Portal's `ProjectServiceImpl.create()`
+     * call target (mirrors `AdminOrganizationsClient.create()`). */
+    async create(input) {
+        return this.http.post('/projects', input);
+    }
     async delete(slug) {
         await this.http.delete(`/projects/${encodeURIComponent(slug)}`);
     }
+    /** F442/AC-8/FLAG-1: `GET /{slug}/access` — list the project's owner + collaborator
+     * grants. Guard is `assertOwnershipForSlug` (any caller who can already see the project). */
+    async accessList(slug) {
+        return this.http.get(`/projects/${encodeURIComponent(slug)}/access`);
+    }
+    /** F442/AC-4/AC-5/AC-8/FLAG-1: `POST /{slug}/access` — grant (or, for an already-granted
+     * `principalId`, re-role via upsert — there is no PATCH). */
+    async accessGrant(slug, input) {
+        return this.http.post(`/projects/${encodeURIComponent(slug)}/access`, input);
+    }
+    /** F442/AC-6/AC-8/FLAG-1: `DELETE /{slug}/access/{principalId}` — idempotent revoke. */
+    async accessRevoke(slug, principalId) {
+        await this.http.delete(`/projects/${encodeURIComponent(slug)}/access/${encodeURIComponent(principalId)}`);
+    }
 }
 //# sourceMappingURL=projects.client.js.map

package/dist/clients/admin/projects.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.client.js","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;CACJ"}
+{"version":3,"file":"projects.client.js","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AA+CA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED;oEACgE;IAChE,KAAK,CAAC,MAAM,CAAC,KAAyB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IAED;iGAC6F;IAC7F,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9F,CAAC;IAED;iEAC6D;IAC7D,KAAK,CAAC,WAAW,CACb,IAAY,EACZ,KAA8B;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAC9C,KAAK,CACR,CAAA;IACL,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,WAAmB;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,WAAW,CAAC,EAAE,CACpF,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/roster.client.d.ts

@@ -0,0 +1,27 @@
+import type { HttpClient } from '../../transport/http-client.js';
+/** C569/FS54 Chore 8: mirrors `packages/core`'s `RosterEntry` read projection. */
+export interface RosterEntryDto {
+    actorId: string;
+    actorKind: 'agent';
+    alias: string | null;
+    project: string | null;
+    roles: string[];
+}
+export interface RosterListFilter {
+    project?: string;
+}
+export declare class AdminRosterClient {
+    private readonly http;
+    constructor(http: HttpClient);
+    list(filter?: RosterListFilter): Promise<RosterEntryDto[]>;
+    get(actorId: string): Promise<RosterEntryDto>;
+    /**
+     * Bulk-replaces the full Capability-Role set. §7 hard-cutover: the canonical write path
+     * for a multi-select role editor — replaces the removed `roles` field on
+     * `PATCH /agents/{id}/identity`.
+     */
+    replace(actorId: string, roles: string[]): Promise<RosterEntryDto>;
+    grantAccess(actorId: string, role: string): Promise<RosterEntryDto>;
+    revokeAccess(actorId: string, role: string): Promise<RosterEntryDto>;
+}
+//# sourceMappingURL=roster.client.d.ts.map

package/dist/clients/admin/roster.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/roster.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAK1D,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAInD;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAIlE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMnE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAK7E"}

package/dist/clients/admin/roster.client.js

@@ -0,0 +1,30 @@
+export class AdminRosterClient {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    async list(filter) {
+        const query = filter?.project ? `?project=${encodeURIComponent(filter.project)}` : '';
+        return this.http.get(`/roster${query}`);
+    }
+    async get(actorId) {
+        return this.http.get(`/roster/${encodeURIComponent(actorId)}`);
+    }
+    /**
+     * Bulk-replaces the full Capability-Role set. §7 hard-cutover: the canonical write path
+     * for a multi-select role editor — replaces the removed `roles` field on
+     * `PATCH /agents/{id}/identity`.
+     */
+    async replace(actorId, roles) {
+        return this.http.put(`/roster/${encodeURIComponent(actorId)}`, { roles });
+    }
+    async grantAccess(actorId, role) {
+        return this.http.post(`/roster/${encodeURIComponent(actorId)}/access`, {
+            role,
+        });
+    }
+    async revokeAccess(actorId, role) {
+        return this.http.delete(`/roster/${encodeURIComponent(actorId)}/access/${encodeURIComponent(role)}`);
+    }
+}
+//# sourceMappingURL=roster.client.js.map

package/dist/clients/admin/roster.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.client.js","sourceRoot":"","sources":["../../../src/clients/admin/roster.client.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,MAAyB;QAChC,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,UAAU,KAAK,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,KAAe;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE;YACnF,IAAI;SACP,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,IAAY;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACnB,WAAW,kBAAkB,CAAC,OAAO,CAAC,WAAW,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/sessions.client.d.ts

@@ -28,6 +28,10 @@ export declare class AdminSessionsClient {
      * F424: vendor-gated force-terminate — distinct from the agent self-service
      * `POST /sessions/:id/terminate` (F217). 403s for a non-vendor caller. Idempotent —
      * safe to call again on an already-terminated session.
+     *
+     * C566 (FS54/5): path moved from `/admin/sessions/{id}/terminate` to the canonical
+     * `/sessions/{id}/force-terminate` (same admin/vendor-gated tree, projection not
+     * namespace).
      */
     terminate(sessionId: string): Promise<SessionSummaryDto>;
 }

package/dist/clients/admin/sessions.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/sessions.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EACrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUzD,IAAI,CACN,MAAM,GAAE,cAAmB,GAC5B,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAepF,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAU5D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUnF,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAWvE;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUrE;;;;OAIG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAKjE"}
+{"version":3,"file":"sessions.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/sessions.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EACrB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUzD,IAAI,CACN,MAAM,GAAE,cAAmB,GAC5B,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAepF,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAU5D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUnF,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAWvE;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUrE;;;;;;;;OAQG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAKjE"}