@beacon-build/sdk 1.46.6 → 1.46.8

package/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @beacon-build/sdk Changelog
 
+## 1.46.8
+
+### Patch Changes
+
+- 25d1028: fix(B552): resolve the wakeup relay's CCD session-id mismatch and GC unresolvable targets — the relay read the Claude CLI's own session*id (externalSessionIds.claude) instead of the CCD local*<uuid> host session id send_message actually needs; capture $CLAUDE_CODE_HOST_SESSION_ID via a new hook file, register it under a separate CCD_HOST_SESSION_PROVIDER key, and dead-letter a structurally unresolvable relay target much sooner than the general 7-day bound
+- 229899c: F474: actor_roles write-surface hardening — Layer 1 (createIdentityMarker() is the only sanctioned way to write the 'system'/'agent' Identity-Marker roles, create() rejects them unconditionally), a security-sensitive-table denylist on db_execute/POST /v1/ops/db/execute with a logged break-glass override, and a durable break-glass audit trail (admin_sql_audit_log).
+- d756c07: F460: invalidate a role-revoked actor's token immediately via a Postgres trigger on actor_roles, checked at all four JWT-verification paths; agents re-mint event-driven on 401 instead of going dark until session restart.
+- 1fe12ce: fix(B566): Ops Cockpit Worker/Queue stale reads — memoize Overview's since-boundary (fixes an endless-refetch churn bug), prefer the freshest of {persisted, live} lastRunAt so a healthy idle worker never looks frozen, only offer the Queue tab for queue-backed workers, and surface an expected-but-unbound worker as down instead of dropping it from the list.
+- 31b31fa: T229: seat-based caller-identity resolution (GET /sessions/resolve-caller), the AuthorizeAgentDeps HTTP seam (GET /ops/agent-authorization/trigger-check + project-by-repo), and the mcp-core caller-identity adapter wiring these into a real authorizeAgentOperation call, report-mode only.
+- Updated dependencies [04d2666]
+- Updated dependencies [25d1028]
+- Updated dependencies [6d0c478]
+- Updated dependencies [4cfc7d7]
+- Updated dependencies [c7c7576]
+- Updated dependencies [d79453f]
+- Updated dependencies [fe9b53d]
+- Updated dependencies [602b0b6]
+- Updated dependencies [229899c]
+- Updated dependencies [d756c07]
+- Updated dependencies [013ec2e]
+- Updated dependencies [31b31fa]
+- Updated dependencies [02ec53d]
+    - @beacon-build/core@1.46.8
+
+## 1.46.7
+
+### Patch Changes
+
+- d18021c: fix(B527): bound GET /sessions/:id/tool-calls to a DB-side per-tool summary instead of loading every tool call into memory
+- e81f782: F458: user-owned axis admin surface — /admin/users/:id (Projekte/Rollen/Organisationen), implicit-owner display state, ownership-transfer dialog, Global-scope revoke endpoint.
+- b80cd49: C638: add a human-readable, sequential lead ref (\`L-42\`) allocated from the generic ref_counters counter, with a backfill + counter-init migration and immutability enforced on PATCH.
+- Updated dependencies [d18021c]
+- Updated dependencies [57ff2c5]
+- Updated dependencies [4b7b4b6]
+- Updated dependencies [34dbe21]
+- Updated dependencies [e81f782]
+- Updated dependencies [b80cd49]
+- Updated dependencies [8b56de4]
+- Updated dependencies [3315d36]
+- Updated dependencies [75e0e6f]
+- Updated dependencies [d888e38]
+- Updated dependencies [d888e38]
+- Updated dependencies [d888e38]
+- Updated dependencies [a6124f5]
+    - @beacon-build/core@1.46.7
+
 ## 1.46.6
 
 ### Patch Changes

package/dist/clients/admin/access-grants.client.d.ts

@@ -52,5 +52,8 @@ export declare class AccessGrantsClient {
     constructor(http: HttpClient);
     create(input: CreateAccessGrantInput): Promise<AccessGrantResultDto>;
     listVendors(): Promise<GlobalVendorDto[]>;
+    /** F458/AC-14: `DELETE /global/{userId}` — vendor-only, idempotent (200 even if no row
+     * existed). */
+    revokeGlobal(userId: string): Promise<void>;
 }
 //# sourceMappingURL=access-grants.client.d.ts.map

package/dist/clients/admin/access-grants.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access-grants.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/access-grants.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,MAAM,gBAAgB,GACtB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAA;AAExB,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,gBAAgB,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,yBAAyB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACnC,SAAS,EAAE,yBAAyB,CAAA;IACpC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,EAAE,WAAW,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,gBAAgB,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,YAAY,GAAG,gBAAgB,CAAA;CACzC;AAED,MAAM,MAAM,oBAAoB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,aAAa,EAAE,CAAA;CAAE,GAC5C;IACI,IAAI,EAAE,SAAS,CAAA;IACf,MAAM,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,WAAW,EAAE,CAAA;KACxB,CAAA;CACJ,CAAA;AAEP,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIpE,WAAW,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;CAGlD"}
+{"version":3,"file":"access-grants.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/access-grants.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,MAAM,gBAAgB,GACtB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAA;AAExB,MAAM,WAAW,WAAW;IACxB,KAAK,EAAE,gBAAgB,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,yBAAyB;IACtC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACnC,SAAS,EAAE,yBAAyB,CAAA;IACpC,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,IAAI,EAAE,WAAW,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,gBAAgB,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,YAAY,GAAG,gBAAgB,CAAA;CACzC;AAED,MAAM,MAAM,oBAAoB,GAC1B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,aAAa,EAAE,CAAA;CAAE,GAC5C;IACI,IAAI,EAAE,SAAS,CAAA;IACf,MAAM,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,CAAA;QACb,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,WAAW,EAAE,CAAA;KACxB,CAAA;CACJ,CAAA;AAEP,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IACf,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIpE,WAAW,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAI/C;mBACe;IACT,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGpD"}

package/dist/clients/admin/access-grants.client.js

@@ -12,5 +12,10 @@ export class AccessGrantsClient {
     async listVendors() {
         return this.http.get('/access-grants/vendors');
     }
+    /** F458/AC-14: `DELETE /global/{userId}` — vendor-only, idempotent (200 even if no row
+     * existed). */
+    async revokeGlobal(userId) {
+        await this.http.delete(`/access-grants/global/${encodeURIComponent(userId)}`);
+    }
 }
 //# sourceMappingURL=access-grants.client.js.map

package/dist/clients/admin/access-grants.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"access-grants.client.js","sourceRoot":"","sources":["../../../src/clients/admin/access-grants.client.ts"],"names":[],"mappings":"AAgDA;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACE;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,MAAM,CAAC,KAA6B;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,CAAC,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,wBAAwB,CAAC,CAAA;IACrE,CAAC;CACJ"}
+{"version":3,"file":"access-grants.client.js","sourceRoot":"","sources":["../../../src/clients/admin/access-grants.client.ts"],"names":[],"mappings":"AAgDA;;GAEG;AACH,MAAM,OAAO,kBAAkB;IACE;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,MAAM,CAAC,KAA6B;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,CAAC,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,wBAAwB,CAAC,CAAA;IACrE,CAAC;IAED;mBACe;IACf,KAAK,CAAC,YAAY,CAAC,MAAc;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,yBAAyB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjF,CAAC;CACJ"}

package/dist/clients/admin/projects.client.d.ts

@@ -13,6 +13,18 @@ export interface ProjectOwnershipDto {
     orgId: string | null;
     ownerUserId: string | null;
 }
+/** F429/F438/F458: `POST /{slug}/transfer-ownership` body — exactly one of the two, server
+ * validates the XOR (400 if neither/both). */
+export type TransferOwnershipInput = {
+    newOrgId: string;
+} | {
+    newOwnerUserId: string;
+};
+export interface TransferOwnershipResultDto {
+    slug: string;
+    orgId: string | null;
+    ownerUserId: string | null;
+}
 /** F442/AC-8: a single `ProjectAccess` collaborator grant, as returned by `GET /{slug}/access`. */
 export interface ProjectAccessGrantDto {
     principalId: string;
@@ -58,6 +70,11 @@ export declare class AdminProjectsClient {
      * call target (mirrors `AdminOrganizationsClient.create()`). */
     create(input: CreateProjectInput): Promise<ProjectOwnershipDto>;
     delete(slug: string): Promise<void>;
+    /** F458/AC-11/AC-12: the Transfer-Ownership dialog's write target — the ALREADY-BUILT
+     * F429/F438 endpoint (`assertVendor`, audit-logged, idempotent server-side), this SDK
+     * client is F458's first real consumer of it (mirrors F429's own note "no SDK wrapper
+     * until a real consumer needs one"). */
+    transferOwnership(slug: string, input: TransferOwnershipInput): Promise<TransferOwnershipResultDto>;
     /** C585/AC-1: full-replace PATCH of `Project.config` — the lightweight Project-Settings
      * editor's single "Save" (owner, org-admin, or vendor — see `projects-config.ts`). */
     updateConfig(slug: string, config: Record<string, unknown>): Promise<void>;

package/dist/clients/admin/projects.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projects.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,mGAAmG;AACnG,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CACpB;AAED;iEACiE;AACjE,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,qBAAqB,EAAE,CAAA;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,iBAAiB,CAAA;CAC1B;AAED,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQvD;oEACgE;IAC1D,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC;0FACsF;IAChF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhF;iGAC6F;IACvF,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7D;iEAC6D;IACvD,WAAW,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,uBAAuB,GAC/B,OAAO,CAAC,2BAA2B,CAAC;IAOvC,wFAAwF;IAClF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpE,mFAAmF;IAC7E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAQjE,4FAA4F;IACtF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ1F,+DAA+D;IACzD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKhE"}
+{"version":3,"file":"projects.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;8CAC8C;AAC9C,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtF,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,mGAAmG;AACnG,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CACpB;AAED;iEACiE;AACjE,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,qBAAqB,EAAE,CAAA;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,iBAAiB,CAAA;CAC1B;AAED,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQvD;oEACgE;IAC1D,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC;;;4CAGwC;IAClC,iBAAiB,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,sBAAsB,GAC9B,OAAO,CAAC,0BAA0B,CAAC;IAOtC;0FACsF;IAChF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhF;iGAC6F;IACvF,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7D;iEAC6D;IACvD,WAAW,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,uBAAuB,GAC/B,OAAO,CAAC,2BAA2B,CAAC;IAOvC,wFAAwF;IAClF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpE,mFAAmF;IAC7E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAQjE,4FAA4F;IACtF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ1F,+DAA+D;IACzD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKhE"}

package/dist/clients/admin/projects.client.js

@@ -22,6 +22,13 @@ export class AdminProjectsClient {
     async delete(slug) {
         await this.http.delete(`/projects/${encodeURIComponent(slug)}`);
     }
+    /** F458/AC-11/AC-12: the Transfer-Ownership dialog's write target — the ALREADY-BUILT
+     * F429/F438 endpoint (`assertVendor`, audit-logged, idempotent server-side), this SDK
+     * client is F458's first real consumer of it (mirrors F429's own note "no SDK wrapper
+     * until a real consumer needs one"). */
+    async transferOwnership(slug, input) {
+        return this.http.post(`/projects/${encodeURIComponent(slug)}/transfer-ownership`, input);
+    }
     /** C585/AC-1: full-replace PATCH of `Project.config` — the lightweight Project-Settings
      * editor's single "Save" (owner, org-admin, or vendor — see `projects-config.ts`). */
     async updateConfig(slug, config) {

package/dist/clients/admin/projects.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"projects.client.js","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AA2DA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED;oEACgE;IAChE,KAAK,CAAC,MAAM,CAAC,KAAyB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IAED;0FACsF;IACtF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAA+B;QAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED;iGAC6F;IAC7F,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9F,CAAC;IAED;iEAC6D;IAC7D,KAAK,CAAC,WAAW,CACb,IAAY,EACZ,KAA8B;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAC9C,KAAK,CACR,CAAA;IACL,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,WAAmB;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,WAAW,CAAC,EAAE,CACpF,CAAA;IACL,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,WAAW,CAAC,IAAY;QAC1B,8FAA8F;QAC9F,gGAAgG;QAChG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,aAAa,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAClD,CAAA;IACL,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;QACrD,2FAA2F;QAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAC3E,EAAE,KAAK,EAAE,CACZ,CAAA;IACL,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,IAAY;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAA;IACL,CAAC;CACJ"}
+{"version":3,"file":"projects.client.js","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAqEA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,WAAW,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED;oEACgE;IAChE,KAAK,CAAC,MAAM,CAAC,KAAyB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IAED;;;4CAGwC;IACxC,KAAK,CAAC,iBAAiB,CACnB,IAAY,EACZ,KAA6B;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,qBAAqB,EAC1D,KAAK,CACR,CAAA;IACL,CAAC;IAED;0FACsF;IACtF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAA+B;QAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED;iGAC6F;IAC7F,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9F,CAAC;IAED;iEAC6D;IAC7D,KAAK,CAAC,WAAW,CACb,IAAY,EACZ,KAA8B;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAC9C,KAAK,CACR,CAAA;IACL,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,WAAmB;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,WAAW,CAAC,EAAE,CACpF,CAAA;IACL,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,WAAW,CAAC,IAAY;QAC1B,8FAA8F;QAC9F,gGAAgG;QAChG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,aAAa,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAClD,CAAA;IACL,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;QACrD,2FAA2F;QAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAC3E,EAAE,KAAK,EAAE,CACZ,CAAA;IACL,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,IAAY;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/sessions.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/sessions.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EAC1B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUzD,IAAI,CACN,MAAM,GAAE,cAAmB,GAC5B,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAepF,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAU5D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUnF,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAWvE;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUrE;;;;OAIG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAW3E;;;;;;;;OAQG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAKjE"}
+{"version":3,"file":"sessions.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/sessions.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EAC1B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,cAAc;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUzD,IAAI,CACN,MAAM,GAAE,cAAmB,GAC5B,OAAO,CAAC;QAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAepF,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAU5D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAUnF,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAcvE;;;OAGG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAUrE;;;;OAIG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAW3E;;;;;;;;OAQG;IACG,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAKjE"}

package/dist/clients/admin/sessions.client.js

@@ -42,6 +42,9 @@ export class AdminSessionsClient {
     }
     async toolCallSummary(sessionId) {
         try {
+            // B527: route now returns the standard `{ data }` envelope (CON-25) — was a bare
+            // `{ rows }` object. `HttpClient.get()` auto-unwraps `{ data }`, so this stays
+            // transparent: it already resolves to `{ rows }` here, unchanged.
             const res = await this.http.get(`/sessions/${encodeURIComponent(sessionId)}/tool-calls`);
             return res.rows;
         }

package/dist/clients/admin/sessions.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.client.js","sourceRoot":"","sources":["../../../src/clients/admin/sessions.client.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACvB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAC/C,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACN,SAAyB,EAAE;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QAChE,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAKjB,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC1B,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,wBAAwB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAC3D,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,UAAkB;QACjD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,kCAAkC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACxG,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACnC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3B,aAAa,kBAAkB,CAAC,SAAS,CAAC,aAAa,CAC1D,CAAA;YACD,OAAO,GAAG,CAAC,IAAI,CAAA;QACnB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACnC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,aAAa,kBAAkB,CAAC,SAAS,CAAC,mBAAmB,CAChE,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;QAC5C,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QAClC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3B,aAAa,kBAAkB,CAAC,SAAS,CAAC,YAAY,CACzD,CAAA;YACD,OAAO,GAAG,CAAC,SAAS,CAAA;QACxB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,SAAS,CAAC,kBAAkB,CAC/D,CAAA;IACL,CAAC;CACJ"}
+{"version":3,"file":"sessions.client.js","sourceRoot":"","sources":["../../../src/clients/admin/sessions.client.ts"],"names":[],"mappings":"AAgBA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACvB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAC/C,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACN,SAAyB,EAAE;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QAChE,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAKjB,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC1B,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,wBAAwB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAC3D,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,UAAkB;QACjD,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,kCAAkC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACxG,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACnC,IAAI,CAAC;YACD,iFAAiF;YACjF,+EAA+E;YAC/E,kEAAkE;YAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3B,aAAa,kBAAkB,CAAC,SAAS,CAAC,aAAa,CAC1D,CAAA;YACD,OAAO,GAAG,CAAC,IAAI,CAAA;QACnB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACnC,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CACtB,aAAa,kBAAkB,CAAC,SAAS,CAAC,mBAAmB,CAChE,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAA;QAC5C,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QAClC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3B,aAAa,kBAAkB,CAAC,SAAS,CAAC,YAAY,CACzD,CAAA;YACD,OAAO,GAAG,CAAC,SAAS,CAAA;QACxB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,SAAS,CAAC,kBAAkB,CAC/D,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/users.client.d.ts

@@ -1,6 +1,15 @@
-import type { UserDto } from '@beacon-build/core';
+import type { UserDto, ProjectApiItem } from '@beacon-build/core';
 import type { HttpClient } from '../../transport/http-client.js';
 import type { MultipartClient } from '../../transport/multipart-client.js';
+import type { ScopeSelectorDto } from './access-grants.client.js';
+/** F458/INV-2: one row of `GET /{id}/grants` — the SAME `EffectiveGrant` shape
+ * `getEffectiveGrants` (F444) produces server-side, wire-serialized (no `Date` fields to
+ * convert — `EffectiveGrant` carries none). */
+export interface EffectiveGrantDto {
+    scope: ScopeSelectorDto;
+    role: string;
+    source: 'actor_role' | 'project_access';
+}
 export interface UpdateProfileInput {
     name?: string;
 }
@@ -58,6 +67,13 @@ export declare class AdminUsersClient {
      */
     search(query: string): Promise<UserDto[]>;
     get(id: string): Promise<UserDto | null>;
+    /** F458/AC-3/AC-3a: `GET /{id}/owned-projects` — admin-gated (vendor OR any org-admin,
+     * mirrors `canManageUsers`), NOT scoped further to the caller's own visibility (that is
+     * exactly the gap AC-3a closes — see the route's doc comment). */
+    ownedProjects(id: string): Promise<ProjectApiItem[]>;
+    /** F458/INV-2: `GET /{id}/grants` — a thin facade over `getEffectiveGrants(id)` (F444),
+     * same admin gate as `ownedProjects` above. */
+    grants(id: string): Promise<EffectiveGrantDto[]>;
     listIdentities(): Promise<IdentityDto[]>;
     disconnectIdentity(provider: string): Promise<void>;
     setPassword(input: SetPasswordInput): Promise<void>;

package/dist/clients/admin/users.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/users.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAE1E,MAAM,WAAW,kBAAkB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD,MAAM,WAAW,WAAW;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,cAAc,GACpB,sBAAsB,GACtB,mBAAmB,GACnB,iCAAiC,CAAA;AAEvC;mFACmF;AACnF,MAAM,WAAW,kBAAkB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,CAAC,OAAO,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAA;CACxC;AAED,oFAAoF;AACpF,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC1B,YAAY,EAAE,OAAO,EAAE,CAAA;CAC1B;AAED,qBAAa,gBAAgB;IAErB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,eAAe;IAGzC,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC;IAItB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC;;;OAGG;IACG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKtE;;;;;;;;OAQG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAKzC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAUxC,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAIxC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,YAAY,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAIrC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAOpC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI/C,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE;;uFAEmF;IAC7E,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlE;2EACuE;IACjE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGzD"}
+{"version":3,"file":"users.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/users.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAI1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAEjE;;+CAE+C;AAC/C,MAAM,WAAW,iBAAiB;IAC9B,KAAK,EAAE,gBAAgB,CAAA;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAAA;CAC1C;AAED,MAAM,WAAW,kBAAkB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;CAChB;AAMD,MAAM,WAAW,WAAW;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,cAAc,GACpB,sBAAsB,GACtB,mBAAmB,GACnB,iCAAiC,CAAA;AAEvC;mFACmF;AACnF,MAAM,WAAW,kBAAkB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,CAAC,OAAO,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAA;CACxC;AAED,oFAAoF;AACpF,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,kBAAkB,EAAE,CAAA;IAC1B,YAAY,EAAE,OAAO,EAAE,CAAA;CAC1B;AAED,qBAAa,gBAAgB;IAErB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,SAAS;gBADT,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,eAAe;IAGzC,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC;IAItB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAI1D,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAInC;;;OAGG;IACG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKtE;;;;;;;;OAQG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAKzC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAQ9C;;sEAEkE;IAC5D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAI1D;mDAC+C;IACzC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAMhD,cAAc,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAIxC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,YAAY,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAIrC,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAOpC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI/C,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpE;;uFAEmF;IAC7E,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlE;2EACuE;IACjE,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGzD"}

package/dist/clients/admin/users.client.js

@@ -46,6 +46,17 @@ export class AdminUsersClient {
             return null;
         }
     }
+    /** F458/AC-3/AC-3a: `GET /{id}/owned-projects` — admin-gated (vendor OR any org-admin,
+     * mirrors `canManageUsers`), NOT scoped further to the caller's own visibility (that is
+     * exactly the gap AC-3a closes — see the route's doc comment). */
+    async ownedProjects(id) {
+        return this.http.get(`/users/${encodeURIComponent(id)}/owned-projects`);
+    }
+    /** F458/INV-2: `GET /{id}/grants` — a thin facade over `getEffectiveGrants(id)` (F444),
+     * same admin gate as `ownedProjects` above. */
+    async grants(id) {
+        return this.http.get(`/users/${encodeURIComponent(id)}/grants`);
+    }
     // ── F445: Login & Identities ────────────────────────────────────────────
     async listIdentities() {
         return this.http.get('/users/me/identities');

package/dist/clients/admin/users.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"users.client.js","sourceRoot":"","sources":["../../../src/clients/admin/users.client.ts"],"names":[],"mappings":"AAiDA,MAAM,OAAO,gBAAgB;IAEJ;IACA;IAFrB,YACqB,IAAgB,EAChB,SAA0B;QAD1B,SAAI,GAAJ,IAAI,CAAY;QAChB,cAAS,GAAT,SAAS,CAAiB;IAC5C,CAAC;IAEJ,KAAK,CAAC,EAAE;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,WAAW,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAyB;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAU,WAAW,EAAE,KAAK,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAiB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAU,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAe;QAClC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,SAAS,EAAE,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAChB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,2EAA2E;IAE3E,KAAK,CAAC,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgB,sBAAsB,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACrC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;IACrD,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,YAAY;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAe,oBAAoB,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,iBAAiB;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,+BAA+B,CAAC,CAAA;QACzF,OAAO,MAAM,CAAC,OAAO,CAAA;IACzB,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAA0B,oBAAoB,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,KAAc;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;uFAEmF;IACnF,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,KAAa;QAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACxC,GAAG,EAAE,UAAU,IAAI,EAAE;YACrB,KAAK;YACL,MAAM,EAAE,IAAI;SACf,CAAC,CAAA;IACN,CAAC;IAED;2EACuE;IACvE,KAAK,CAAC,mBAAmB,CAAC,IAAY;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,kBAAkB,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;CACJ"}
+{"version":3,"file":"users.client.js","sourceRoot":"","sources":["../../../src/clients/admin/users.client.ts"],"names":[],"mappings":"AA8DA,MAAM,OAAO,gBAAgB;IAEJ;IACA;IAFrB,YACqB,IAAgB,EAChB,SAA0B;QAD1B,SAAI,GAAJ,IAAI,CAAY;QAChB,cAAS,GAAT,SAAS,CAAiB;IAC5C,CAAC;IAEJ,KAAK,CAAC,EAAE;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,WAAW,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAyB;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAU,WAAW,EAAE,KAAK,CAAC,CAAA;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAiB;QAChC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAU,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC9C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,MAAe;QAClC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,SAAS,EAAE,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAClD,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC7E,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAChB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAU,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED;;sEAEkE;IAClE,KAAK,CAAC,aAAa,CAAC,EAAU;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,UAAU,kBAAkB,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAA;IAC7F,CAAC;IAED;mDAC+C;IAC/C,KAAK,CAAC,MAAM,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,UAAU,kBAAkB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAA;IACxF,CAAC;IAED,2EAA2E;IAE3E,KAAK,CAAC,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAgB,sBAAsB,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACrC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,WAAW,CAAC,KAAuB;QACrC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;IACrD,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,YAAY;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAe,oBAAoB,CAAC,CAAA;IAC5D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,KAAK,CAAC,iBAAiB;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,+BAA+B,CAAC,CAAA;QACzF,OAAO,MAAM,CAAC,OAAO,CAAA;IACzB,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAA0B,oBAAoB,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAmB,EAAE,KAAc;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;uFAEmF;IACnF,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,KAAa;QAC9C,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACxC,GAAG,EAAE,UAAU,IAAI,EAAE;YACrB,KAAK;YACL,MAAM,EAAE,IAAI;SACf,CAAC,CAAA;IACN,CAAC;IAED;2EACuE;IACvE,KAAK,CAAC,mBAAmB,CAAC,IAAY;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,kBAAkB,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;CACJ"}

package/dist/clients/agent/agent-controller.client.d.ts

@@ -0,0 +1,44 @@
+import type { HttpClient } from '../../transport/http-client.js';
+/**
+ * F473/AC-18: the response shape services/api's `agent-controllers.ts` route always sends
+ * (mirrors `AgentControllerEntrySchema`, services/api/src/routes/agent-controllers.schemas.ts) —
+ * unchanged by F473 (see the spec's "API contract changes": the route is not modified).
+ */
+export interface AgentControllerEntryDto {
+    agentId: string;
+    principalId: string;
+    grantedBy: string | null;
+    createdAt: string;
+}
+export interface AgentControllerRevokeResult {
+    /**
+     * F473/AC-20: true iff a binding existed for this (agentId, principalId) pair BEFORE this
+     * call — lets a caller tell "just revoked" apart from "there was never a binding to
+     * revoke", even though the underlying DELETE route (F452 Stufe 5, `AC-14: unbind is
+     * idempotent`) always returns `{ ok: true }`/200 either way and carries no such signal
+     * itself. Reconstructed here, client-side, from a `list()` snapshot taken immediately
+     * before the delete — this does NOT change the route (still a single DELETE call
+     * server-side observes), and it does not add a second authorization path: `list()` and
+     * the delete both go through the SAME `mayManageAgentBindings`-gated route as always.
+     */
+    revoked: boolean;
+    entry: AgentControllerEntryDto | null;
+}
+/**
+ * F473/AC-18: thin wrapper over the EXISTING POST/GET/DELETE /v1/agent-controllers/{agentId}
+ * routes (F452 Stufe 5) — no authorization logic of its own, and no second copy of the
+ * (a)/(b)/(c) grant-authority rule. Every verdict (grant/list/revoke allowed or not) is
+ * decided server-side, exactly once, by `mayManageAgentBindings`
+ * (packages/core/src/agent-controller/authorize-manage-bindings.ts — the F452 owner
+ * directive: DRY access control, never mirrored). Removing that function breaks grant/list/
+ * revoke through this client exactly as it breaks the raw HTTP route — nothing here
+ * re-derives or short-circuits its verdict.
+ */
+export declare class AgentControllerClient {
+    private http;
+    constructor(http: HttpClient);
+    grant(agentId: string, principalId: string): Promise<AgentControllerEntryDto>;
+    list(agentId: string): Promise<AgentControllerEntryDto[]>;
+    revoke(agentId: string, principalId: string): Promise<AgentControllerRevokeResult>;
+}
+//# sourceMappingURL=agent-controller.client.d.ts.map

package/dist/clients/agent/agent-controller.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-controller.client.d.ts","sourceRoot":"","sources":["../../../src/clients/agent/agent-controller.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,2BAA2B;IACxC;;;;;;;;;OASG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAAA;CACxC;AAED;;;;;;;;;GASG;AACH,qBAAa,qBAAqB;IAClB,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAO7E,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;IAMnD,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAQ3F"}

package/dist/clients/agent/agent-controller.client.js

@@ -0,0 +1,29 @@
+/**
+ * F473/AC-18: thin wrapper over the EXISTING POST/GET/DELETE /v1/agent-controllers/{agentId}
+ * routes (F452 Stufe 5) — no authorization logic of its own, and no second copy of the
+ * (a)/(b)/(c) grant-authority rule. Every verdict (grant/list/revoke allowed or not) is
+ * decided server-side, exactly once, by `mayManageAgentBindings`
+ * (packages/core/src/agent-controller/authorize-manage-bindings.ts — the F452 owner
+ * directive: DRY access control, never mirrored). Removing that function breaks grant/list/
+ * revoke through this client exactly as it breaks the raw HTTP route — nothing here
+ * re-derives or short-circuits its verdict.
+ */
+export class AgentControllerClient {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    grant(agentId, principalId) {
+        return this.http.post(`/agent-controllers/${encodeURIComponent(agentId)}`, { principalId });
+    }
+    list(agentId) {
+        return this.http.get(`/agent-controllers/${encodeURIComponent(agentId)}`);
+    }
+    async revoke(agentId, principalId) {
+        const entries = await this.list(agentId);
+        const entry = entries.find((e) => e.principalId === principalId) ?? null;
+        await this.http.delete(`/agent-controllers/${encodeURIComponent(agentId)}/${encodeURIComponent(principalId)}`);
+        return { revoked: entry !== null, entry };
+    }
+}
+//# sourceMappingURL=agent-controller.client.js.map

package/dist/clients/agent/agent-controller.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-controller.client.js","sourceRoot":"","sources":["../../../src/clients/agent/agent-controller.client.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;GASG;AACH,MAAM,OAAO,qBAAqB;IACV;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC,KAAK,CAAC,OAAe,EAAE,WAAmB;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,EACnD,EAAE,WAAW,EAAE,CAClB,CAAA;IACL,CAAC;IAED,IAAI,CAAC,OAAe;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CACtD,CAAA;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,WAAmB;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,IAAI,IAAI,CAAA;QACxE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CACzF,CAAA;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,EAAE,CAAA;IAC7C,CAAC;CACJ"}

package/dist/clients/agent/search.client.d.ts

@@ -26,12 +26,15 @@ export declare class AgentSearchClient {
      * F262: Unified semantic search across documents, messages, memories, conversations.
      *
      * @param embedding — Pre-computed 768-dim vector (generated locally via LazyEmbeddingService)
+     * @param query — B565: raw query text — used ONLY as a substring fallback for messages
+     *   whose embedding hasn't been generated yet (async backfill lag / janitor outage)
      * @param sources — Which entities to search (default: all)
      * @param limit — Max results (default 20, max 100)
      * @param filters — Optional filters: project, agentId, threadId, actorId
      */
     unifiedSearch(input: {
         embedding: number[];
+        query?: string;
         sources?: ('documents' | 'memories' | 'conversations' | 'messages')[];
         limit?: number;
         filters?: {
@@ -47,6 +50,7 @@ export declare class AgentSearchClient {
      */
     searchMessages(input: {
         embedding: number[];
+        query?: string;
         limit?: number;
         filters?: {
             project?: string;

package/dist/clients/agent/search.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"search.client.d.ts","sourceRoot":"","sources":["../../../src/clients/agent/search.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAA;IAC1D,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,YAAY,EAAE,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED,qBAAa,iBAAiB;IACd,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;OAOG;IACG,aAAa,CAAC,KAAK,EAAE;QACvB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,UAAU,CAAC,EAAE,CAAA;QACrE,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;SACnB,CAAA;KACJ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIlC;;;OAGG;IACG,cAAc,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;SACnB,CAAA;KACJ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASlC;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAA;SACnB,CAAA;KACJ,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAQrC"}
+{"version":3,"file":"search.client.d.ts","sourceRoot":"","sources":["../../../src/clients/agent/search.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAA;IAC1D,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IAClC,OAAO,EAAE,YAAY,EAAE,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED,qBAAa,iBAAiB;IACd,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;OASG;IACG,aAAa,CAAC,KAAK,EAAE;QACvB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,CAAC,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,UAAU,CAAC,EAAE,CAAA;QACrE,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;SACnB,CAAA;KACJ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIlC;;;OAGG;IACG,cAAc,CAAC,KAAK,EAAE;QACxB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;SACnB,CAAA;KACJ,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAUlC;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE;QACzB,SAAS,EAAE,MAAM,EAAE,CAAA;QACnB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE;YACN,OAAO,CAAC,EAAE,MAAM,CAAA;SACnB,CAAA;KACJ,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAQrC"}

package/dist/clients/agent/search.client.js

@@ -15,6 +15,8 @@ export class AgentSearchClient {
      * F262: Unified semantic search across documents, messages, memories, conversations.
      *
      * @param embedding — Pre-computed 768-dim vector (generated locally via LazyEmbeddingService)
+     * @param query — B565: raw query text — used ONLY as a substring fallback for messages
+     *   whose embedding hasn't been generated yet (async backfill lag / janitor outage)
      * @param sources — Which entities to search (default: all)
      * @param limit — Max results (default 20, max 100)
      * @param filters — Optional filters: project, agentId, threadId, actorId
@@ -29,6 +31,7 @@ export class AgentSearchClient {
     async searchMessages(input) {
         return this.unifiedSearch({
             embedding: input.embedding,
+            query: input.query,
             sources: ['messages'],
             limit: input.limit,
             filters: input.filters,

package/dist/clients/agent/search.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"search.client.js","sourceRoot":"","sources":["../../../src/clients/agent/search.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH,MAAM,OAAO,iBAAiB;IACN;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,KAUnB;QACG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAwB,SAAS,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,KAQpB;QACG,OAAO,IAAI,CAAC,aAAa,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,CAAC,UAAU,CAAC;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAA;IACN,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,KAMrB;QACG,OAAO,IAAI,CAAC,aAAa,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAA;IACN,CAAC;CACJ"}
+{"version":3,"file":"search.client.js","sourceRoot":"","sources":["../../../src/clients/agent/search.client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH,MAAM,OAAO,iBAAiB;IACN;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CAAC,KAWnB;QACG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAwB,SAAS,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,KASpB;QACG,OAAO,IAAI,CAAC,aAAa,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,CAAC,UAAU,CAAC;YACrB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAA;IACN,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,KAMrB;QACG,OAAO,IAAI,CAAC,aAAa,CAAC;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,CAAC,WAAW,CAAC;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;SACzB,CAAC,CAAA;IACN,CAAC;CACJ"}

package/dist/clients/ops/agent-authorization-ops.client.d.ts

@@ -0,0 +1,29 @@
+import type { CapabilitySource } from '@beacon-build/core';
+import type { OpsApiClient } from '../../transport/ops-api-client.js';
+/**
+ * T229/AC-4 — the SDK-side calls to `services/api/src/routes/ops-agent-authorization.ts`
+ * (`/v1/ops/agent-authorization/*`). Kept as its own client (not folded into `AgentsOpsClient`,
+ * loc-guard, and thematically a different domain — agent-controller/project-access, not
+ * agents/sessions) — consumed by `mcp/beacon`'s new caller-identity adapter.
+ */
+export declare class AgentAuthorizationOpsClient {
+    private readonly api;
+    constructor(api: OpsApiClient);
+    /** AC-4(b/c): isBound + getCapabilitySources in ONE round trip — the two `AuthorizeAgentDeps`
+     *  reads `mayTriggerAgent` (`@beacon-build/core`) needs (F473 replaced `getProjectRole` with
+     *  `getCapabilitySources`). Fails open (empty defaults) on a transport error — the caller's
+     *  adapter treats that identically to an unknown human (AC-4's "a network/HTTP failure...
+     *  fails open" clause), never breaks the underlying GitHub/ops call. */
+    checkTrigger(agentId: string, humanActorId: string, project: string): Promise<{
+        bound: boolean;
+        capabilitySources: CapabilitySource[];
+    }>;
+    /** F451/AC-1a reverse lookup, now HTTP-reachable for a no-direct-DB-access caller (T229/
+     *  AC-3). `null` covers both "no project claims this repo" and "ambiguous" — resolved
+     *  server-side, never guessed. */
+    findProjectByRepo(repoFullName: string): Promise<{
+        slug: string;
+        kind: 'method' | 'code';
+    } | null>;
+}
+//# sourceMappingURL=agent-authorization-ops.client.d.ts.map

package/dist/clients/ops/agent-authorization-ops.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-authorization-ops.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/agent-authorization-ops.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AAErE;;;;;GAKG;AACH,qBAAa,2BAA2B;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,YAAY;IAE9C;;;;4EAIwE;IAClE,YAAY,CACd,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,iBAAiB,EAAE,gBAAgB,EAAE,CAAA;KAAE,CAAC;IAUrE;;sCAEkC;IAC5B,iBAAiB,CACnB,YAAY,EAAE,MAAM,GACrB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAU/D"}

package/dist/clients/ops/agent-authorization-ops.client.js

@@ -0,0 +1,34 @@
+/**
+ * T229/AC-4 — the SDK-side calls to `services/api/src/routes/ops-agent-authorization.ts`
+ * (`/v1/ops/agent-authorization/*`). Kept as its own client (not folded into `AgentsOpsClient`,
+ * loc-guard, and thematically a different domain — agent-controller/project-access, not
+ * agents/sessions) — consumed by `mcp/beacon`'s new caller-identity adapter.
+ */
+export class AgentAuthorizationOpsClient {
+    api;
+    constructor(api) {
+        this.api = api;
+    }
+    /** AC-4(b/c): isBound + getCapabilitySources in ONE round trip — the two `AuthorizeAgentDeps`
+     *  reads `mayTriggerAgent` (`@beacon-build/core`) needs (F473 replaced `getProjectRole` with
+     *  `getCapabilitySources`). Fails open (empty defaults) on a transport error — the caller's
+     *  adapter treats that identically to an unknown human (AC-4's "a network/HTTP failure...
+     *  fails open" clause), never breaks the underlying GitHub/ops call. */
+    async checkTrigger(agentId, humanActorId, project) {
+        const params = new URLSearchParams({ agentId, humanActorId, project });
+        const res = await this.api
+            .get(`/api/v1/ops/agent-authorization/trigger-check?${params.toString()}`)
+            .catch(() => null);
+        return res?.data ?? { bound: false, capabilitySources: [] };
+    }
+    /** F451/AC-1a reverse lookup, now HTTP-reachable for a no-direct-DB-access caller (T229/
+     *  AC-3). `null` covers both "no project claims this repo" and "ambiguous" — resolved
+     *  server-side, never guessed. */
+    async findProjectByRepo(repoFullName) {
+        const res = await this.api
+            .get(`/api/v1/ops/agent-authorization/project-by-repo?repoFullName=${encodeURIComponent(repoFullName)}`)
+            .catch(() => null);
+        return res?.data ?? null;
+    }
+}
+//# sourceMappingURL=agent-authorization-ops.client.js.map

package/dist/clients/ops/agent-authorization-ops.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-authorization-ops.client.js","sourceRoot":"","sources":["../../../src/clients/ops/agent-authorization-ops.client.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,OAAO,2BAA2B;IACP;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD;;;;4EAIwE;IACxE,KAAK,CAAC,YAAY,CACd,OAAe,EACf,YAAoB,EACpB,OAAe;QAEf,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAA;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG;aACrB,GAAG,CAED,iDAAiD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;aACvE,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACtB,OAAO,GAAG,EAAE,IAAI,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAA;IAC/D,CAAC;IAED;;sCAEkC;IAClC,KAAK,CAAC,iBAAiB,CACnB,YAAoB;QAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG;aACrB,GAAG,CAGA,gEAAgE,kBAAkB,CAAC,YAAY,CAAC,EAAE,CACrG;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACtB,OAAO,GAAG,EAAE,IAAI,IAAI,IAAI,CAAA;IAC5B,CAAC;CACJ"}

package/dist/clients/ops/ops-db.client.d.ts

@@ -33,6 +33,7 @@ export declare class OpsDbClient {
      */
     execute(sql: string, params?: unknown[], opts?: {
         confirm?: boolean;
+        allowDenylistedTable?: boolean;
     }): Promise<{
         rowsAffected: number;
     }>;

package/dist/clients/ops/ops-db.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops-db.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/ops-db.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAEH,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACvB,MAAM,+BAA+B,CAAA;AAEtC,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,gBAAgB,CAAA;CAC5B;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,gBAAgB,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,CAAA;CACxC;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,gBAAgB,CAAA;IACzB,OAAO,EAAE,IAAI,CAAA;CAChB;AAED,qBAAa,WAAW;IAIhB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ3B,OAAO,CAAC,GAAG,CAAW;gBAGD,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,MAAM;IAQ7B,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI/C;;;OAGG;IACG,KAAK,CACP,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,GACnB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAOnE;;;;;OAKG;IACG,OAAO,CACT,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,EAClB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAC7B,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAQpC,OAAO,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe;IAIhD,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe;IAM1C,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe;IAItC,UAAU,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAIhC,eAAe,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAGzE"}
+{"version":3,"file":"ops-db.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/ops-db.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAEH,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACvB,MAAM,+BAA+B,CAAA;AAEtC,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,gBAAgB,CAAA;CAC5B;AAED,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,gBAAgB,CAAA;IACzB,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,CAAA;CACxC;AAED,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,gBAAgB,CAAA;IACzB,OAAO,EAAE,IAAI,CAAA;CAChB;AAED,qBAAa,WAAW;IAIhB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAJ3B,OAAO,CAAC,GAAG,CAAW;gBAGD,GAAG,EAAE,YAAY,EACjB,MAAM,EAAE,MAAM;IAQ7B,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAI/C;;;OAGG;IACG,KAAK,CACP,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,GACnB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAOnE;;;;;OAKG;IACG,OAAO,CACT,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,OAAO,EAAE,EAIlB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;KAAE,GAC7D,OAAO,CAAC;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAapC,OAAO,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe;IAIhD,IAAI,CAAC,IAAI,EAAE,aAAa,GAAG,eAAe;IAM1C,KAAK,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe;IAItC,UAAU,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAIhC,eAAe,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAGzE"}

package/dist/clients/ops/ops-db.client.js

@@ -28,8 +28,17 @@ export class OpsDbClient {
      * safety model: SELECT is rejected, DDL is prod-guarded, and DML against prod/staging
      * requires `confirm=true`. Returns the number of affected rows.
      */
-    async execute(sql, params, opts) {
-        const res = await this.api.post('/api/v1/ops/db/execute', { sql, params, confirm: opts?.confirm });
+    async execute(sql, params, 
+    // F474/AC-4/M-6a: allowDenylistedTable is the explicit, logged break-glass override
+    // for the server-side table denylist — never a default, opt-in per call. Reserved for
+    // the AC-7 sanctioned cleanup path.
+    opts) {
+        const res = await this.api.post('/api/v1/ops/db/execute', {
+            sql,
+            params,
+            confirm: opts?.confirm,
+            allow_denylisted_table: opts?.allowDenylistedTable,
+        });
         return res.data;
     }
     migrate(opts) {

package/dist/clients/ops/ops-db.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"ops-db.client.js","sourceRoot":"","sources":["../../../src/clients/ops/ops-db.client.ts"],"names":[],"mappings":"AACA,OAAO,EACH,SAAS,GAGZ,MAAM,+BAA+B,CAAA;AAgBtC,MAAM,OAAO,WAAW;IAIC;IACA;IAJb,GAAG,CAAW;IAEtB,YACqB,GAAiB,EACjB,MAAc;QADd,QAAG,GAAH,GAAG,CAAc;QACjB,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC;YACrB,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE;YACzB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE;SACrD,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,KAAK;QACP,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAA0B,sBAAsB,CAAC,CAAA;IACxE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACP,GAAW,EACX,MAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAE5B,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3C,OAAO,GAAG,CAAC,IAAI,CAAA;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACT,GAAW,EACX,MAAkB,EAClB,IAA4B;QAE5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3B,wBAAwB,EACxB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAC1C,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,CAAA;IACnB,CAAC;IAED,OAAO,CAAC,IAAsB;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,CAAC,IAAmB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE;YACzD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;SAC5B,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,IAAoB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAY,2BAA2B,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,eAAe;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAuC,iCAAiC,CAAC,CAAA;IAChG,CAAC;CACJ"}
+{"version":3,"file":"ops-db.client.js","sourceRoot":"","sources":["../../../src/clients/ops/ops-db.client.ts"],"names":[],"mappings":"AACA,OAAO,EACH,SAAS,GAGZ,MAAM,+BAA+B,CAAA;AAgBtC,MAAM,OAAO,WAAW;IAIC;IACA;IAJb,GAAG,CAAW;IAEtB,YACqB,GAAiB,EACjB,MAAc;QADd,QAAG,GAAH,GAAG,CAAc;QACjB,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC;YACrB,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE;YACzB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE;SACrD,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,KAAK;QACP,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAA0B,sBAAsB,CAAC,CAAA;IACxE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CACP,GAAW,EACX,MAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAE5B,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3C,OAAO,GAAG,CAAC,IAAI,CAAA;IACnB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACT,GAAW,EACX,MAAkB;IAClB,oFAAoF;IACpF,sFAAsF;IACtF,oCAAoC;IACpC,IAA4D;QAE5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3B,wBAAwB,EACxB;YACI,GAAG;YACH,MAAM;YACN,OAAO,EAAE,IAAI,EAAE,OAAO;YACtB,sBAAsB,EAAE,IAAI,EAAE,oBAAoB;SACrD,CACJ,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,CAAA;IACnB,CAAC;IAED,OAAO,CAAC,IAAsB;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,CAAC,IAAmB;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE;YACzD,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,MAAM;SAC5B,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,IAAoB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;IACpF,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAY,2BAA2B,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,eAAe;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAuC,iCAAiC,CAAC,CAAA;IAChG,CAAC;CACJ"}

package/dist/clients/ops/ops-workers.client.d.ts

@@ -123,7 +123,8 @@ export interface WorkersTransport {
 export declare class OpsWorkersClient {
     private readonly transport;
     constructor(transport: WorkersTransport);
-    /** GET /admin/ops/workers → { workers } */
+    /** GET /admin/ops/workers → { data } (B566/#4 follow-up, CON-25 standard envelope —
+     *  was a bare { workers } object before) */
     list(): Promise<WorkerStatusDto[]>;
     /** GET /admin/ops/workers/:name → WorkerStatusDto */
     get(name: string): Promise<WorkerStatusDto>;

package/dist/clients/ops/ops-workers.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops-workers.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/ops-workers.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,UAAU,GAAG,aAAa,CAAA;AACtC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAA;AAElE;sGACsG;AACtG,MAAM,MAAM,cAAc,GACpB,aAAa,GACb,WAAW,GACX,YAAY,GACZ,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,CAAA;AAEhB,MAAM,WAAW,qBAAqB;IAClC,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;IACzB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE;QACV,OAAO,EAAE,MAAM,CAAA;QACf,cAAc,EAAE,MAAM,CAAA;KACzB,CAAA;CACJ;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,UAAU,CAAA;IAChB,iFAAiF;IACjF,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,qBAAqB,CAAA;IAChC;iFAC6E;IAC7E,WAAW,EAAE,OAAO,CAAA;IACpB,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,YAAY;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,gBAAgB,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,aAAa,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAChC,SAAS,EAAE,OAAO,CAAA;IAClB;kFAC8E;IAC9E,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAA;CACtC;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,UAAU,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,YAAY,EAAE,CAAA;IACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B,sDAAsD;IACtD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACjD,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACpD;AAID,qBAAa,gBAAgB;IACb,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,gBAAgB;IAExD,2CAA2C;IACrC,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAKxC,qDAAqD;IAC/C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIjD,2EAA2E;IACrE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAQvE,2DAA2D;IACrD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAO9E,qEAAqE;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAMxD;;;;OAIG;IACG,QAAQ,CAAC,KAAK,GAAE,eAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAiB7E"}
+{"version":3,"file":"ops-workers.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/ops-workers.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,UAAU,GAAG,aAAa,CAAA;AACtC,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,gBAAgB,CAAA;AAElE;sGACsG;AACtG,MAAM,MAAM,cAAc,GACpB,aAAa,GACb,WAAW,GACX,YAAY,GACZ,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,CAAA;AAEhB,MAAM,WAAW,qBAAqB;IAClC,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;IACzB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,YAAY,EAAE;QACV,OAAO,EAAE,MAAM,CAAA;QACf,cAAc,EAAE,MAAM,CAAA;KACzB,CAAA;CACJ;AAED,MAAM,WAAW,gBAAgB;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,UAAU,CAAA;IAChB,iFAAiF;IACjF,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,qBAAqB,CAAA;IAChC;iFAC6E;IAC7E,WAAW,EAAE,OAAO,CAAA;IACpB,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,YAAY;IACzB,OAAO,EAAE,OAAO,CAAA;IAChB,cAAc,EAAE,MAAM,CAAA;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,gBAAgB,CAAA;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,aAAa,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAChC,SAAS,EAAE,OAAO,CAAA;IAClB;kFAC8E;IAC9E,MAAM,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAAA;CACtC;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gBAAgB;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,UAAU,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,YAAY,EAAE,CAAA;IACpB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC7B,sDAAsD;IACtD,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IACjD,KAAK,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACpD;AAID,qBAAa,gBAAgB;IACb,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,gBAAgB;IAExD;gDAC4C;IACtC,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAKxC,qDAAqD;IAC/C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIjD,2EAA2E;IACrE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAQvE,2DAA2D;IACrD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAO9E,qEAAqE;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAMxD;;;;OAIG;IACG,QAAQ,CAAC,KAAK,GAAE,eAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAiB7E"}

package/dist/clients/ops/ops-workers.client.js

@@ -4,10 +4,11 @@ export class OpsWorkersClient {
     constructor(transport) {
         this.transport = transport;
     }
-    /** GET /admin/ops/workers → { workers } */
+    /** GET /admin/ops/workers → { data } (B566/#4 follow-up, CON-25 standard envelope —
+     *  was a bare { workers } object before) */
     async list() {
         const res = await this.transport.getRaw(BASE);
-        return res.workers ?? [];
+        return res.data ?? [];
     }
     /** GET /admin/ops/workers/:name → WorkerStatusDto */
     async get(name) {

package/dist/clients/ops/ops-workers.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"ops-workers.client.js","sourceRoot":"","sources":["../../../src/clients/ops/ops-workers.client.ts"],"names":[],"mappings":"AA2IA,MAAM,IAAI,GAAG,2BAA2B,CAAA;AAExC,MAAM,OAAO,gBAAgB;IACI;IAA7B,YAA6B,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;IAAG,CAAC;IAE5D,2CAA2C;IAC3C,KAAK,CAAC,IAAI;QACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAiC,IAAI,CAAC,CAAA;QAC7E,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAA;IAC5B,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAkB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,KAAc;QACzC,MAAM,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CACnC,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CACzD,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACzB,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAwB;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CACvB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAC5C,KAAK,CACR,CAAA;IACL,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CACtB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAChD,CAAA;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAyB,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,IAAI,KAAK,CAAC,IAAI;YAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAClD,IAAI,KAAK,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QACrD,IAAI,KAAK,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,KAAK,CAAC,QAAQ;YAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,KAAK,CAAC,UAAU;YAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAEvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAGpC,yBAAyB,MAAM,EAAE,CAAC,CAAA;QACrC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IACnD,CAAC;CACJ"}
+{"version":3,"file":"ops-workers.client.js","sourceRoot":"","sources":["../../../src/clients/ops/ops-workers.client.ts"],"names":[],"mappings":"AA2IA,MAAM,IAAI,GAAG,2BAA2B,CAAA;AAExC,MAAM,OAAO,gBAAgB;IACI;IAA7B,YAA6B,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;IAAG,CAAC;IAE5D;gDAC4C;IAC5C,KAAK,CAAC,IAAI;QACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAA8B,IAAI,CAAC,CAAA;QAC1E,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACzB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAkB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,KAAc;QACzC,MAAM,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CACnC,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CACzD,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,CAAA;IACzB,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAwB;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CACvB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAC5C,KAAK,CACR,CAAA;IACL,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CACtB,GAAG,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAChD,CAAA;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,QAAyB,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,IAAI,KAAK,CAAC,IAAI;YAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAClD,IAAI,KAAK,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QACrD,IAAI,KAAK,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;QAC7C,IAAI,KAAK,CAAC,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAChD,IAAI,KAAK,CAAC,QAAQ;YAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;QACtD,IAAI,KAAK,CAAC,UAAU;YAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAEvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAGpC,yBAAyB,MAAM,EAAE,CAAC,CAAA;QACrC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;IACnD,CAAC;CACJ"}

package/dist/clients/ops/sessions-ops.client.d.ts

@@ -26,13 +26,33 @@ export declare class SessionsOpsClient {
     triggeredByHuman?: string, 
     /** B510/AC-6/AC-7: a single-use spawn credential — see `CreateSessionBodySchema.
      *  spawnCredential`'s doc comment (services/api). */
-    spawnCredential?: string): Promise<CreateSessionResult>;
+    spawnCredential?: string, 
+    /**
+     * B552: the CCD (Claude Code harness) HOST session id (`local_<uuid>`) — a SEPARATE
+     * mapping from `external.externalSessionId` above (the CLI's own per-turn id, a
+     * different identifier space; see `CCD_HOST_SESSION_PROVIDER`'s doc comment,
+     * `@beacon-build/core`). Registered on whichever row this call resolves to, same as
+     * `externalSessionId`, but under its own provider key — never used for create-vs-reuse
+     * resolution.
+     */
+    ccdHostSessionId?: string): Promise<CreateSessionResult>;
     heartbeat(sessionId: string): Promise<void>;
     terminate(sessionId: string): Promise<void>;
     terminateByAgent(agentId: string): Promise<void>;
     byKey(sessionKey: string): Promise<SessionSummaryDto | null>;
     byExternal(provider: string, externalId: string): Promise<SessionSummaryDto | null>;
     registerExternalId(sessionId: string, provider: string, externalId: string): Promise<void>;
+    /**
+     * T229/AC-2/AC-7 — GET /sessions/resolve-caller?seat=X. The identity-resolution primitive
+     * `mcp/beacon` (no direct DB access) calls per call to learn "who is calling me right now"
+     * from its own `cwd`-derived seat. `null` covers BOTH zero-match AND ambiguous-match
+     * (resolved server-side, `resolveCallerBySeat` — see that function's doc) — the caller
+     * cannot and does not need to distinguish the two.
+     */
+    resolveCallerBySeat(seat: string): Promise<{
+        agentId: string;
+        triggeredByActorId: string | null;
+    } | null>;
     toolCallSummary(sessionId: string): Promise<ToolCallSummaryDto[]>;
 }
 //# sourceMappingURL=sessions-ops.client.d.ts.map

package/dist/clients/ops/sessions-ops.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions-ops.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/sessions-ops.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AAErE,MAAM,WAAW,iBAAiB;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAA;AAEnD,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,YAAY;IAExC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAYzD,IAAI,CAAC,MAAM,GAAE,iBAAsB,GAAG,OAAO,CAAC;QAChD,QAAQ,EAAE,kBAAkB,EAAE,CAAA;QAC9B,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;KAChB,CAAC;IAeI,MAAM,CACR,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,cAAc,EACxB,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,EAC3D,IAAI,CAAC,EAAE,MAAM;IACb;sFACkF;IAClF,gBAAgB,CAAC,EAAE,MAAM;IACzB;yDACqD;IACrD,eAAe,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,mBAAmB,CAAC;IAsBzB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAM5D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAQnF,kBAAkB,CACpB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAOV,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAW1E"}
+{"version":3,"file":"sessions-ops.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/sessions-ops.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AAErE,MAAM,WAAW,iBAAiB;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAA;AAEnD,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,YAAY;IAExC,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAYzD,IAAI,CAAC,MAAM,GAAE,iBAAsB,GAAG,OAAO,CAAC;QAChD,QAAQ,EAAE,kBAAkB,EAAE,CAAA;QAC9B,KAAK,EAAE,MAAM,CAAA;QACb,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,MAAM,CAAA;KAChB,CAAC;IAeI,MAAM,CACR,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,cAAc,EACxB,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,EAC3D,IAAI,CAAC,EAAE,MAAM;IACb;sFACkF;IAClF,gBAAgB,CAAC,EAAE,MAAM;IACzB;yDACqD;IACrD,eAAe,CAAC,EAAE,MAAM;IACxB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IAuBzB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAM5D,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAQnF,kBAAkB,CACpB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;;;OAMG;IACG,mBAAmB,CACrB,IAAI,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IASnE,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAc1E"}

package/dist/clients/ops/sessions-ops.client.js

@@ -32,7 +32,16 @@ export class SessionsOpsClient {
     triggeredByHuman, 
     /** B510/AC-6/AC-7: a single-use spawn credential — see `CreateSessionBodySchema.
      *  spawnCredential`'s doc comment (services/api). */
-    spawnCredential) {
+    spawnCredential, 
+    /**
+     * B552: the CCD (Claude Code harness) HOST session id (`local_<uuid>`) — a SEPARATE
+     * mapping from `external.externalSessionId` above (the CLI's own per-turn id, a
+     * different identifier space; see `CCD_HOST_SESSION_PROVIDER`'s doc comment,
+     * `@beacon-build/core`). Registered on whichever row this call resolves to, same as
+     * `externalSessionId`, but under its own provider key — never used for create-vs-reuse
+     * resolution.
+     */
+    ccdHostSessionId) {
         // F319: forward the detected runtime dimensions (client/env/cwd) so the
         // session row captures them; the API validates the enum values (AC-9).
         // B384: `seat` (the deterministic `deriveSeat` output) is now the SOLE
@@ -51,6 +60,7 @@ export class SessionsOpsClient {
             provider: external?.provider ?? undefined,
             triggeredByHuman: triggeredByHuman ?? undefined,
             spawnCredential: spawnCredential ?? undefined,
+            ccdHostSessionId: ccdHostSessionId ?? undefined,
         });
     }
     async heartbeat(sessionId) {
@@ -82,10 +92,26 @@ export class SessionsOpsClient {
             externalId,
         });
     }
+    /**
+     * T229/AC-2/AC-7 — GET /sessions/resolve-caller?seat=X. The identity-resolution primitive
+     * `mcp/beacon` (no direct DB access) calls per call to learn "who is calling me right now"
+     * from its own `cwd`-derived seat. `null` covers BOTH zero-match AND ambiguous-match
+     * (resolved server-side, `resolveCallerBySeat` — see that function's doc) — the caller
+     * cannot and does not need to distinguish the two.
+     */
+    async resolveCallerBySeat(seat) {
+        const res = await this.api
+            .get(`/api/v1/sessions/resolve-caller?seat=${encodeURIComponent(seat)}`)
+            .catch(() => null);
+        return res?.data ?? null;
+    }
     async toolCallSummary(sessionId) {
         try {
+            // B527: route now returns the standard `{ data }` envelope (CON-25) — was a bare
+            // `{ rows }` object. `OpsApiClient.get()` (unlike `HttpClient.get()`) does NOT
+            // auto-unwrap `{ data }`, so this call site reads `.data.rows` explicitly.
             const res = await this.api.get(`/api/v1/sessions/${encodeURIComponent(sessionId)}/tool-calls`);
-            return res.rows;
+            return res.data.rows;
         }
         catch (_err) {
             // Deliberate: degrades to an empty list — named `_err` per beacon/no-silent-catch.

package/dist/clients/ops/sessions-ops.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions-ops.client.js","sourceRoot":"","sources":["../../../src/clients/ops/sessions-ops.client.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACvB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CACrB,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACtD,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,8EAA8E;YAC9E,0BAA0B;YAC1B,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAA4B,EAAE;QAMrC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QAChE,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAKhB,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CACR,OAAe,EACf,OAAe,EACf,IAA8B,EAC9B,OAAwB,EACxB,QAA2D,EAC3D,IAAa;IACb;sFACkF;IAClF,gBAAyB;IACzB;yDACqD;IACrD,eAAwB;QAExB,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,gFAAgF;QAChF,yEAAyE;QACzE,6EAA6E;QAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAsB,kBAAkB,EAAE;YAC1D,OAAO;YACP,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,SAAS;YACpC,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,SAAS;YAC9B,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,SAAS;YAC9B,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,IAAI,SAAS;YAC3D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS;YACzC,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;YAC/C,eAAe,EAAE,eAAe,IAAI,SAAS;SAChD,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC7B,MAAM,IAAI,CAAC,GAAG;aACT,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC;aACnE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC7B,MAAM,IAAI,CAAC,GAAG;aACT,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC;aACnE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAClC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,GAAG;aACV,GAAG,CAAoB,+BAA+B,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;aACvF,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,UAAkB;QACjD,OAAO,IAAI,CAAC,GAAG;aACV,GAAG,CACA,yCAAyC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAC/G;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,kBAAkB,CACpB,SAAiB,EACjB,QAAgB,EAChB,UAAkB;QAElB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,cAAc,EAAE;YACjF,QAAQ;YACR,UAAU;SACb,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACnC,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1B,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,aAAa,CACjE,CAAA;YACD,OAAO,GAAG,CAAC,IAAI,CAAA;QACnB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,mFAAmF;YACnF,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;CACJ"}
+{"version":3,"file":"sessions-ops.client.js","sourceRoot":"","sources":["../../../src/clients/ops/sessions-ops.client.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACvB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CACrB,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACtD,CAAA;QACL,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,8EAA8E;YAC9E,0BAA0B;YAC1B,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAA4B,EAAE;QAMrC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QAChE,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAKhB,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CACR,OAAe,EACf,OAAe,EACf,IAA8B,EAC9B,OAAwB,EACxB,QAA2D,EAC3D,IAAa;IACb;sFACkF;IAClF,gBAAyB;IACzB;yDACqD;IACrD,eAAwB;IACxB;;;;;;;OAOG;IACH,gBAAyB;QAEzB,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,gFAAgF;QAChF,yEAAyE;QACzE,6EAA6E;QAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAsB,kBAAkB,EAAE;YAC1D,OAAO;YACP,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,SAAS;YACpC,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,SAAS;YAC9B,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,SAAS;YAC9B,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,IAAI,SAAS;YAC3D,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS;YACzC,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;YAC/C,eAAe,EAAE,eAAe,IAAI,SAAS;YAC7C,gBAAgB,EAAE,gBAAgB,IAAI,SAAS;SAClD,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC7B,MAAM,IAAI,CAAC,GAAG;aACT,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC;aACnE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB;QAC7B,MAAM,IAAI,CAAC,GAAG;aACT,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC;aACnE,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACxB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAClC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,GAAG;aACV,GAAG,CAAoB,+BAA+B,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;aACvF,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,UAAkB;QACjD,OAAO,IAAI,CAAC,GAAG;aACV,GAAG,CACA,yCAAyC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAC/G;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,kBAAkB,CACpB,SAAiB,EACjB,QAAgB,EAChB,UAAkB;QAElB,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,cAAc,EAAE;YACjF,QAAQ;YACR,UAAU;SACb,CAAC,CAAA;IACN,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CACrB,IAAY;QAEZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG;aACrB,GAAG,CAED,wCAAwC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;aACrE,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACtB,OAAO,GAAG,EAAE,IAAI,IAAI,IAAI,CAAA;IAC5B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACnC,IAAI,CAAC;YACD,iFAAiF;YACjF,+EAA+E;YAC/E,2EAA2E;YAC3E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1B,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,aAAa,CACjE,CAAA;YACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAA;QACxB,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,mFAAmF;YACnF,OAAO,EAAE,CAAA;QACb,CAAC;IACL,CAAC;CACJ"}

package/dist/factory/agent-sdk.d.ts

@@ -1,14 +1,22 @@
 import { AgentTasksClient } from '../clients/agent/tasks.client.js';
 import { AgentSearchClient } from '../clients/agent/search.client.js';
 import { AgentCapabilityClient } from '../clients/agent/capability.client.js';
+import { AgentControllerClient } from '../clients/agent/agent-controller.client.js';
 import { TaskConfigClient } from '../clients/shared/task-config.client.js';
 export interface AgentSdkConfig {
     /** Base URL for the beacon API (e.g. 'https://api.beacon.build') */
     baseUrl: string;
     /** Agent-JWT (project-scoped, issued by POST /api/v1/agent-token) */
     agentToken: string;
-    /** Optional callback triggered on 401 */
-    onUnauthorized?: () => void;
+    /**
+     * F460/AC-10: widened to match `HttpClientConfig.onUnauthorized` — was structurally
+     * `() => void`, which could never hand back a fresh token and so could never trigger
+     * `HttpClient`'s single-retry-on-401 path (C213). A consumer that returns a fresh token
+     * string here now gets the SAME transparent-silent-refresh behavior the user-facing SDK
+     * path already has; a void/null/undefined return still means "no refresh happened", same
+     * as before (Superset — every pre-F460 `() => void` callback keeps working unchanged).
+     */
+    onUnauthorized?: () => void | Promise<string | null | void>;
 }
 export interface AgentSdk {
     tasks: AgentTasksClient;
@@ -18,6 +26,8 @@ export interface AgentSdk {
     capabilities?: AgentCapabilityClient;
     /** F143: Task config (read-only) — uses /api/v1 basePath */
     taskConfig: TaskConfigClient;
+    /** F473/AC-18: agent_controller_grant/_list/_revoke MCP tools. */
+    agentControllers: AgentControllerClient;
 }
 /**
  * createAgentClient — creates an Agent SDK instance authenticated with an Agent-JWT.

package/dist/factory/agent-sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAE1E,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,IAAI,CAAA;CAC9B;AAED,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,uEAAuE;IACvE,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,CAAA;CAC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAgBlE"}
+{"version":3,"file":"agent-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAE1E,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,uEAAuE;IACvE,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,CAAA;IAC5B,kEAAkE;IAClE,gBAAgB,EAAE,qBAAqB,CAAA;CAC1C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAkBlE"}

package/dist/factory/agent-sdk.js

@@ -2,6 +2,7 @@ import { HttpClient } from '../transport/http-client.js';
 import { AgentTasksClient } from '../clients/agent/tasks.client.js';
 import { AgentSearchClient } from '../clients/agent/search.client.js';
 import { AgentCapabilityClient } from '../clients/agent/capability.client.js';
+import { AgentControllerClient } from '../clients/agent/agent-controller.client.js';
 import { TaskConfigClient } from '../clients/shared/task-config.client.js';
 /**
  * createAgentClient — creates an Agent SDK instance authenticated with an Agent-JWT.
@@ -28,6 +29,8 @@ export function createAgentClient(config) {
         search: new AgentSearchClient(v1Http),
         capabilities: new AgentCapabilityClient(v1Http),
         taskConfig: new TaskConfigClient(v1Http),
+        // F473/AC-18: canonical under /api/v1/agent-controllers (F452 Stufe 5, unchanged).
+        agentControllers: new AgentControllerClient(v1Http),
     };
 }
 //# sourceMappingURL=agent-sdk.js.map

package/dist/factory/agent-sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-sdk.js","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAqB1E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACpD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,OAAO;QACH,6CAA6C;QAC7C,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACnC,iEAAiE;QACjE,MAAM,EAAE,IAAI,iBAAiB,CAAC,MAAM,CAAC;QACrC,YAAY,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAC/C,UAAU,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;KAC3C,CAAA;AACL,CAAC"}
+{"version":3,"file":"agent-sdk.js","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AA8B1E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACpD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,OAAO;QACH,6CAA6C;QAC7C,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACnC,iEAAiE;QACjE,MAAM,EAAE,IAAI,iBAAiB,CAAC,MAAM,CAAC;QACrC,YAAY,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAC/C,UAAU,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACxC,mFAAmF;QACnF,gBAAgB,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;KACtD,CAAA;AACL,CAAC"}

package/dist/factory/ops-sdk.d.ts

@@ -14,6 +14,7 @@ import { OpsMqClient } from '../clients/ops/ops-mq.client.js';
 import { OpsLogsClient } from '../clients/ops/ops-logs.client.js';
 import { OpsWorkersClient } from '../clients/ops/ops-workers.client.js';
 import { LeadsOpsClient } from '../clients/ops/leads-ops.client.js';
+import { AgentAuthorizationOpsClient } from '../clients/ops/agent-authorization-ops.client.js';
 export interface OpsSdkConfig {
     /** Base URL for the beacon API (e.g. 'https://api.beacon.build') */
     baseUrl: string;
@@ -45,6 +46,8 @@ export interface OpsSdk {
     workers: OpsWorkersClient;
     /** F454: Lead-Entität + CRUD (Ingest + Verwaltung, FS56/DSC-020 Step 1). */
     leads: LeadsOpsClient;
+    /** T229/AC-4: isBound/getCapabilitySources HTTP deps + the project-by-repo reverse lookup. */
+    agentAuthorization: AgentAuthorizationOpsClient;
 }
 /**
  * createOpsClient — creates an Ops SDK instance authenticated with an OPS_API_KEY.

package/dist/factory/ops-sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ops-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/ops-sdk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAEnE,MAAM,WAAW,YAAY;IACzB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;mFAC+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,MAAM;IACnB,KAAK,EAAE,cAAc,CAAA;IACrB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,SAAS,EAAE,kBAAkB,CAAA;IAC7B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oBAAoB,EAAE,6BAA6B,CAAA;IACnD,cAAc,EAAE,uBAAuB,CAAA;IACvC,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,EAAE,EAAE,WAAW,CAAA;IACf,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,mBAAmB,CAAA;IAC/B,EAAE,EAAE,WAAW,CAAA;IACf,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,gBAAgB,CAAA;IACzB,4EAA4E;IAC5E,KAAK,EAAE,cAAc,CAAA;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAoD5D"}
+{"version":3,"file":"ops-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/ops-sdk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAA;AAE9F,MAAM,WAAW,YAAY;IACzB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;mFAC+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,MAAM;IACnB,KAAK,EAAE,cAAc,CAAA;IACrB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,SAAS,EAAE,kBAAkB,CAAA;IAC7B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oBAAoB,EAAE,6BAA6B,CAAA;IACnD,cAAc,EAAE,uBAAuB,CAAA;IACvC,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,EAAE,EAAE,WAAW,CAAA;IACf,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,mBAAmB,CAAA;IAC/B,EAAE,EAAE,WAAW,CAAA;IACf,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,gBAAgB,CAAA;IACzB,4EAA4E;IAC5E,KAAK,EAAE,cAAc,CAAA;IACrB,8FAA8F;IAC9F,kBAAkB,EAAE,2BAA2B,CAAA;CAClD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAqD5D"}

package/dist/factory/ops-sdk.js

@@ -16,6 +16,7 @@ import { OpsMqClient } from '../clients/ops/ops-mq.client.js';
 import { OpsLogsClient } from '../clients/ops/ops-logs.client.js';
 import { OpsWorkersClient } from '../clients/ops/ops-workers.client.js';
 import { LeadsOpsClient } from '../clients/ops/leads-ops.client.js';
+import { AgentAuthorizationOpsClient } from '../clients/ops/agent-authorization-ops.client.js';
 /**
  * createOpsClient — creates an Ops SDK instance authenticated with an OPS_API_KEY.
  * Use for daemon/runtime/MCP server operations against /api/v1/*.
@@ -66,6 +67,7 @@ export function createOpsClient(config) {
         mq: new OpsMqClient(api),
         logs: new OpsLogsClient(api),
         leads: new LeadsOpsClient(api),
+        agentAuthorization: new AgentAuthorizationOpsClient(api),
         // OpsApiClient uses full /api/v1/* paths and does not unwrap the { data }
         // envelope — exactly the WorkersTransport contract.
         workers: new OpsWorkersClient({

package/dist/factory/ops-sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"ops-sdk.js","sourceRoot":"","sources":["../../src/factory/ops-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAoCnE;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAChD,wFAAwF;IACxF,wFAAwF;IACxF,sFAAsF;IACtF,sFAAsF;IACtF,uBAAuB;IACvB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC,CAAA;IACF,gFAAgF;IAChF,oFAAoF;IACpF,oFAAoF;IACpF,iDAAiD;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAA;IAEpC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,SAAS,EAAE;KACnD,CAAC,CAAA;IAEF,OAAO;QACH,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;QAC9B,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,MAAM,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC;QAChC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,SAAS,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC;QACtC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,oBAAoB,EAAE,IAAI,6BAA6B,CAAC,GAAG,CAAC;QAC5D,cAAc,EAAE,IAAI,uBAAuB,CAAC,GAAG,CAAC;QAChD,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;QACnC,OAAO,EAAE,IAAI,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC;QACxD,UAAU,EAAE,IAAI,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC;QACnD,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC;QACxB,IAAI,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC;QAC5B,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;QAC9B,0EAA0E;QAC1E,oDAAoD;QACpD,OAAO,EAAE,IAAI,gBAAgB,CAAC;YAC1B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YAC1C,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;SAC/C,CAAC;KACL,CAAA;AACL,CAAC"}
+{"version":3,"file":"ops-sdk.js","sourceRoot":"","sources":["../../src/factory/ops-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAA;AAsC9F;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAChD,wFAAwF;IACxF,wFAAwF;IACxF,sFAAsF;IACtF,sFAAsF;IACtF,uBAAuB;IACvB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;KAClC,CAAC,CAAA;IACF,gFAAgF;IAChF,oFAAoF;IACpF,oFAAoF;IACpF,iDAAiD;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAA;IAEpC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,SAAS,EAAE;KACnD,CAAC,CAAA;IAEF,OAAO;QACH,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;QAC9B,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,MAAM,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC;QAChC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,SAAS,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC;QACtC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,oBAAoB,EAAE,IAAI,6BAA6B,CAAC,GAAG,CAAC;QAC5D,cAAc,EAAE,IAAI,uBAAuB,CAAC,GAAG,CAAC;QAChD,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;QACnC,OAAO,EAAE,IAAI,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC;QACxD,UAAU,EAAE,IAAI,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC;QACnD,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC;QACxB,IAAI,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC;QAC5B,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;QAC9B,kBAAkB,EAAE,IAAI,2BAA2B,CAAC,GAAG,CAAC;QACxD,0EAA0E;QAC1E,oDAAoD;QACpD,OAAO,EAAE,IAAI,gBAAgB,CAAC;YAC1B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YAC1C,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;SAC/C,CAAC;KACL,CAAA;AACL,CAAC"}

package/dist/index.d.ts

@@ -31,11 +31,14 @@ export type { AdminTaskListFilter, AdminTaskPage, AdminTaskCounts, TaskMessageDt
 export type { TaskEventDto, TaskEventsListResponse } from './clients/admin/task-events.types.js';
 export { AdminAssetsClient } from './clients/admin/assets.client.js';
 export { AgentCapabilityClient, type CapabilityCandidateDto, } from './clients/agent/capability.client.js';
+export { AgentControllerClient, type AgentControllerEntryDto, type AgentControllerRevokeResult, } from './clients/agent/agent-controller.client.js';
 export { AdminProjectsClient } from './clients/admin/projects.client.js';
+export type { TransferOwnershipInput, TransferOwnershipResultDto, } from './clients/admin/projects.client.js';
 export { AdminPlanningClient } from './clients/admin/planning.client.js';
 export { AdminGithubProxyClient } from './clients/admin/github-proxy.client.js';
 export { AdminUsersClient } from './clients/admin/users.client.js';
 export type { GroupedOrgUsersDto, UsersGroupedByOrgDto } from './clients/admin/users.client.js';
+export type { EffectiveGrantDto } from './clients/admin/users.client.js';
 export type { IdentityDto, SessionDto, SetPasswordInput, UserSettingKey, } from './clients/admin/users.client.js';
 export { AdminOrganizationsClient, type MemberCandidateDto, type InviteGrantDto, type InviteDto, type OrgConfigAllDto, } from './clients/admin/organizations.client.js';
 export { AccessGrantsClient, type ScopeSelectorDto, type GrantRowDto, type AccessGrantCandidateInput, type CreateAccessGrantInput, type GrantedRowDto, type AccessGrantResultDto, type GlobalVendorDto, } from './clients/admin/access-grants.client.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAGtF,OAAO,EACH,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,QAAQ,GAChB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAG/F,OAAO,EACH,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,0BAA0B,GAClC,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAGrF,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGnE,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AACrF,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAG7F,OAAO,EACH,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC5B,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,YAAY,EACR,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GACpB,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAA;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EACH,qBAAqB,EACrB,KAAK,sBAAsB,GAC9B,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAE/F,YAAY,EACR,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,cAAc,GACjB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACH,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,eAAe,GACvB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACvB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACxB,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EACH,YAAY,EACZ,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACnB,MAAM,eAAe,CAAA;AAMtB,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,EAAE,eAAe,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACtF,OAAO,EAAE,iBAAiB,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AAC5F,OAAO,EAAE,cAAc,IAAI,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AAC1E,YAAY,EACR,iBAAiB,IAAI,cAAc,EACnC,mBAAmB,GACtB,MAAM,sCAAsC,CAAA;AAG7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAA;AACtE,YAAY,EACR,eAAe,EACf,YAAY,EACZ,YAAY,IAAI,eAAe,EAC/B,iBAAiB,EACjB,gBAAgB,IAAI,mBAAmB,EACvC,UAAU,IAAI,aAAa,EAC3B,cAAc,IAAI,iBAAiB,EACnC,WAAW,IAAI,cAAc,EAC7B,qBAAqB,IAAI,wBAAwB,EACjD,mBAAmB,IAAI,sBAAsB,EAE7C,eAAe,IAAI,kBAAkB,EACrC,oBAAoB,IAAI,uBAAuB,GAClD,MAAM,qCAAqC,CAAA;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,YAAY,EACR,YAAY,EACZ,eAAe,EACf,oBAAoB,EAEpB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACvB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAGhF,YAAY,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAC5E,YAAY,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,YAAY,EACR,UAAU,IAAI,aAAa,EAC3B,kBAAkB,IAAI,qBAAqB,EAC3C,oBAAoB,IAAI,uBAAuB,EAC/C,qBAAqB,GACxB,MAAM,kCAAkC,CAAA;AAGzC,YAAY,EAER,OAAO,EACP,aAAa,EACb,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EAEvB,MAAM,EACN,UAAU,EACV,WAAW,EACX,iBAAiB,EAEjB,QAAQ,EACR,eAAe,EACf,eAAe,EAEf,OAAO,EAEP,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EAErB,cAAc,EAEd,QAAQ,EAER,KAAK,EAEL,QAAQ,EACR,gBAAgB,EAEhB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAEhB,WAAW,EACX,kBAAkB,EAElB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EAEZ,eAAe,EACf,eAAe,EACf,iBAAiB,EAEjB,WAAW,EAEX,YAAY,EAEZ,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,YAAY,GACf,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAE,KAAK,MAAM,EAAE,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAGtF,OAAO,EACH,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,QAAQ,GAChB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAG/F,OAAO,EACH,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,0BAA0B,GAClC,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAGrF,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAGnE,OAAO,EAAE,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AACrF,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAG7F,OAAO,EACH,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC5B,MAAM,8BAA8B,CAAA;AAErC,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,YAAY,EACR,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GACpB,MAAM,iCAAiC,CAAA;AACxC,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAA;AAChG,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EACH,qBAAqB,EACrB,KAAK,sBAAsB,GAC9B,MAAM,sCAAsC,CAAA;AAE7C,OAAO,EACH,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,GACnC,MAAM,4CAA4C,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAExE,YAAY,EACR,sBAAsB,EACtB,0BAA0B,GAC7B,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AAE/F,YAAY,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAExE,YAAY,EACR,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,cAAc,GACjB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EACH,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,eAAe,GACvB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACvB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACxB,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EACH,YAAY,EACZ,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACnB,MAAM,eAAe,CAAA;AAMtB,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,EAAE,eAAe,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACtF,OAAO,EAAE,iBAAiB,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AAC5F,OAAO,EAAE,cAAc,IAAI,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AAC1E,YAAY,EACR,iBAAiB,IAAI,cAAc,EACnC,mBAAmB,GACtB,MAAM,sCAAsC,CAAA;AAG7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAA;AACtE,YAAY,EACR,eAAe,EACf,YAAY,EACZ,YAAY,IAAI,eAAe,EAC/B,iBAAiB,EACjB,gBAAgB,IAAI,mBAAmB,EACvC,UAAU,IAAI,aAAa,EAC3B,cAAc,IAAI,iBAAiB,EACnC,WAAW,IAAI,cAAc,EAC7B,qBAAqB,IAAI,wBAAwB,EACjD,mBAAmB,IAAI,sBAAsB,EAE7C,eAAe,IAAI,kBAAkB,EACrC,oBAAoB,IAAI,uBAAuB,GAClD,MAAM,qCAAqC,CAAA;AAG5C,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,YAAY,EACR,YAAY,EACZ,eAAe,EACf,oBAAoB,EAEpB,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,GACvB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAGhF,YAAY,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAC5E,YAAY,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,YAAY,EACR,UAAU,IAAI,aAAa,EAC3B,kBAAkB,IAAI,qBAAqB,EAC3C,oBAAoB,IAAI,uBAAuB,EAC/C,qBAAqB,GACxB,MAAM,kCAAkC,CAAA;AAGzC,YAAY,EAER,OAAO,EACP,aAAa,EACb,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EAEvB,MAAM,EACN,UAAU,EACV,WAAW,EACX,iBAAiB,EAEjB,QAAQ,EACR,eAAe,EACf,eAAe,EAEf,OAAO,EAEP,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EAErB,cAAc,EAEd,QAAQ,EAER,KAAK,EAEL,QAAQ,EACR,gBAAgB,EAEhB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAEhB,WAAW,EACX,kBAAkB,EAElB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EAEZ,eAAe,EACf,eAAe,EACf,iBAAiB,EAEjB,WAAW,EAEX,YAAY,EAEZ,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,YAAY,GACf,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -40,6 +40,8 @@ export { AdminAgentsClient } from './clients/admin/agents.client.js';
 export { AdminTasksClient } from './clients/admin/tasks.client.js';
 export { AdminAssetsClient } from './clients/admin/assets.client.js';
 export { AgentCapabilityClient, } from './clients/agent/capability.client.js';
+// F473/AC-18: agent_controller_grant/_list/_revoke MCP tools.
+export { AgentControllerClient, } from './clients/agent/agent-controller.client.js';
 export { AdminProjectsClient } from './clients/admin/projects.client.js';
 export { AdminPlanningClient } from './clients/admin/planning.client.js';
 export { AdminGithubProxyClient } from './clients/admin/github-proxy.client.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,kFAAkF;AAClF,OAAO,EAAE,iBAAiB,EAAsC,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,iBAAiB,EAAsC,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAkC,MAAM,sBAAsB,CAAA;AAEtF,kFAAkF;AAClF,OAAO,EACH,gBAAgB,GAMnB,MAAM,0BAA0B,CAAA;AAEjC,iFAAiF;AACjF,OAAO,EAAE,iBAAiB,EAAgC,MAAM,+BAA+B,CAAA;AAE/F,iFAAiF;AACjF,OAAO,EACH,yBAAyB,GAI5B,MAAM,iCAAiC,CAAA;AAExC,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAkC,MAAM,kBAAkB,CAAA;AAErF,iFAAiF;AACjF,OAAO,EAAE,QAAQ,EAAqB,MAAM,uBAAuB,CAAA;AAEnE,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAA2B,MAAM,+BAA+B,CAAA;AACrF,OAAO,EAAE,UAAU,EAAyB,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,eAAe,EAA8B,MAAM,iCAAiC,CAAA;AAC7F,wFAAwF;AACxF,iFAAiF;AACjF,OAAO,EACH,YAAY,GAGf,MAAM,8BAA8B,CAAA;AACrC,uFAAuF;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,iFAAiF;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAkBlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EACH,qBAAqB,GAExB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AASlE,OAAO,EACH,wBAAwB,GAK3B,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,kBAAkB,GAQrB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,iBAAiB,GAGpB,MAAM,kCAAkC,CAAA;AAEzC,iFAAiF;AACjF,OAAO,EACH,YAAY,EACZ,iBAAiB,GAIpB,MAAM,eAAe,CAAA;AAEtB,iFAAiF;AACjF,6DAA6D;AAC7D,2FAA2F;AAC3F,gFAAgF;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,EAAE,eAAe,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACtF,OAAO,EAAE,iBAAiB,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AAC5F,OAAO,EAAE,cAAc,IAAI,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AAOnF,8CAA8C;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAA;AAiBtE,uBAAuB;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAUnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAMzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,kFAAkF;AAClF,OAAO,EAAE,iBAAiB,EAAsC,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,iBAAiB,EAAsC,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAkC,MAAM,sBAAsB,CAAA;AAEtF,kFAAkF;AAClF,OAAO,EACH,gBAAgB,GAMnB,MAAM,0BAA0B,CAAA;AAEjC,iFAAiF;AACjF,OAAO,EAAE,iBAAiB,EAAgC,MAAM,+BAA+B,CAAA;AAE/F,iFAAiF;AACjF,OAAO,EACH,yBAAyB,GAI5B,MAAM,iCAAiC,CAAA;AAExC,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAkC,MAAM,kBAAkB,CAAA;AAErF,iFAAiF;AACjF,OAAO,EAAE,QAAQ,EAAqB,MAAM,uBAAuB,CAAA;AAEnE,gFAAgF;AAChF,OAAO,EAAE,YAAY,EAA2B,MAAM,+BAA+B,CAAA;AACrF,OAAO,EAAE,UAAU,EAAyB,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,eAAe,EAA8B,MAAM,iCAAiC,CAAA;AAC7F,wFAAwF;AACxF,iFAAiF;AACjF,OAAO,EACH,YAAY,GAGf,MAAM,8BAA8B,CAAA;AACrC,uFAAuF;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAElE,iFAAiF;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAkBlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EACH,qBAAqB,GAExB,MAAM,sCAAsC,CAAA;AAC7C,8DAA8D;AAC9D,OAAO,EACH,qBAAqB,GAGxB,MAAM,4CAA4C,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAMxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAWlE,OAAO,EACH,wBAAwB,GAK3B,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,kBAAkB,GAQrB,MAAM,yCAAyC,CAAA;AAChD,OAAO,EACH,iBAAiB,GAGpB,MAAM,kCAAkC,CAAA;AAEzC,iFAAiF;AACjF,OAAO,EACH,YAAY,EACZ,iBAAiB,GAIpB,MAAM,eAAe,CAAA;AAEtB,iFAAiF;AACjF,6DAA6D;AAC7D,2FAA2F;AAC3F,gFAAgF;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAA;AACpE,OAAO,EAAE,eAAe,IAAI,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACtF,OAAO,EAAE,iBAAiB,IAAI,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AAC5F,OAAO,EAAE,cAAc,IAAI,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AAOnF,8CAA8C;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAA;AAiBtE,uBAAuB;AACvB,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAUnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AAMzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beacon-build/sdk",
-  "version": "1.46.6",
+  "version": "1.46.8",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -26,7 +26,7 @@
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",
     "event-source-polyfill": "^1.0.31",
-    "@beacon-build/core": "1.46.6"
+    "@beacon-build/core": "1.46.8"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",