@beacon-build/sdk 2.13.0 → 2.15.0

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @beacon-build/sdk Changelog
 
+## 2.15.0
+
+### Minor Changes
+
+- 57bfc98: feat: F640 guided UI onboarding wizard & F641 post-provisioning consolidation
+
+### Patch Changes
+
+- Updated dependencies [99c0781]
+- Updated dependencies [3a8f14d]
+- Updated dependencies [57bfc98]
+- Updated dependencies [a54e6df]
+- Updated dependencies [a862f99]
+    - @beacon-build/core@2.15.0
+
+## 2.14.0
+
+### Minor Changes
+
+- cba9332: FS71 Wave 2/3: Auth Completion & Core Provisioning Hub (F681 invite landing + SSO onboarding, F683 passwordless magic link authentication, F639 atomic project provisioning core with mandatory main agent, C1014 redesigned create project form with main agent)
+
+### Patch Changes
+
+- Updated dependencies [cba9332]
+- Updated dependencies [63e2cc5]
+- Updated dependencies [4a30189]
+    - @beacon-build/core@2.14.0
+
 ## 2.13.0
 
 ### Minor Changes

package/dist/clients/auth.client.d.ts

@@ -25,6 +25,11 @@ export interface MeResult {
         orgId?: string;
     }>;
 }
+export interface InviteDetails {
+    email: string;
+    role: string;
+    orgId?: string | null;
+}
 export interface AuthClient {
     login(email: string, password: string): Promise<LoginResult>;
     register(email: string, password: string, inviteToken?: string): Promise<RegisterResult>;
@@ -38,6 +43,11 @@ export interface AuthClient {
     confirmPasswordReset(token: string, newPassword: string): Promise<{
         success: boolean;
     }>;
+    getInvite(token: string): Promise<InviteDetails>;
+    requestMagicLink(email: string): Promise<{
+        success: boolean;
+    }>;
+    redeemMagicLink(token: string): Promise<LoginResult>;
 }
 /**
  * createAuthClient — creates an auth-flow client for /api/auth/* endpoints.

package/dist/clients/auth.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.client.d.ts","sourceRoot":"","sources":["../../src/clients/auth.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAGjD,MAAM,WAAW,WAAW;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,OAAO,CAAA;IACb;;;qDAGiD;IACjD,YAAY,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,QAAQ;IACrB,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,UAAU;IACvB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACxF,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAClE,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAC1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAiG5D"}
+{"version":3,"file":"auth.client.d.ts","sourceRoot":"","sources":["../../src/clients/auth.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAGjD,MAAM,WAAW,WAAW;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,OAAO,CAAA;IACb;;;qDAGiD;IACjD,YAAY,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,cAAc;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,aAAa;IAC1B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,QAAQ;IACrB,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,MAAM,WAAW,UAAU;IACvB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACxF,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAClE,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IACvF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAChD,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAC9D,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CACvD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAyH5D"}

package/dist/clients/auth.client.js

@@ -95,6 +95,24 @@ export function createAuthClient(baseUrl) {
             });
             return body.data;
         },
+        async getInvite(token) {
+            const body = await request(`/invite?token=${encodeURIComponent(token)}`, { method: 'GET' });
+            return body.data;
+        },
+        async requestMagicLink(email) {
+            const body = await request('/magic-link', {
+                method: 'POST',
+                body: JSON.stringify({ email }),
+            });
+            return body.data;
+        },
+        async redeemMagicLink(token) {
+            const body = await request('/magic-link/redeem', {
+                method: 'POST',
+                body: JSON.stringify({ token }),
+            });
+            return body.data;
+        },
     };
 }
 //# sourceMappingURL=auth.client.js.map

package/dist/clients/auth.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.client.js","sourceRoot":"","sources":["../../src/clients/auth.client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAwClE;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAEvC,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,OAAoB,EAAE;QAC1D,IAAI,GAAa,CAAA;QACjB,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,IAAI,EAAE,EAAE;gBACzC,GAAG,IAAI;gBACP,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAE,IAAI,CAAC,OAAkC,IAAI,EAAE,CAAC;iBACtD;aACJ,CAAC,CAAA;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CACd,eAAe,EACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAChE,CAAA;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACxC,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAClC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;gBAC7B,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO;oBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAA;qBACjD,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;oBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAA;YAClE,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBACZ,2EAA2E;gBAC3E,0EAA0E;YAC9E,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QACjD,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAA;QAC7C,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACnC,CAAC;IAED,OAAO;QACH,KAAK,CAAC,KAAK,EAAE,QAAQ;YACjB,OAAO,OAAO,CAAc,QAAQ,EAAE;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;aAC5C,CAAC,CAAA;QACN,CAAC;QAED,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW;YACjC,OAAO,OAAO,CAAiB,WAAW,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;aACzD,CAAC,CAAA;QACN,CAAC;QAED,OAAO,CAAC,YAAY;YAChB,OAAO,OAAO,CAAgB,UAAU,EAAE;gBACtC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;aACzC,CAAC,CAAA;QACN,CAAC;QAED,MAAM,CAAC,YAAY;YACf,OAAO,OAAO,CAAO,SAAS,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;aACzC,CAAC,CAAA;QACN,CAAC;QAED,EAAE,CAAC,WAAW;YACV,OAAO,OAAO,CAAW,KAAK,EAAE;gBAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;aACtD,CAAC,CAAA;QACN,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI;YACf,MAAM,IAAI,GAAG,MAAM,OAAO,CAA8B,WAAW,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aACjC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA;QAC1B,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK;YAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAiC,iBAAiB,EAAE;gBAC1E,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAClC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW;YACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAiC,yBAAyB,EAAE;gBAClF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;aAC/C,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;KACJ,CAAA;AACL,CAAC"}
+{"version":3,"file":"auth.client.js","sourceRoot":"","sources":["../../src/clients/auth.client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAiDlE;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAEvC,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,OAAoB,EAAE;QAC1D,IAAI,GAAa,CAAA;QACjB,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,YAAY,IAAI,EAAE,EAAE;gBACzC,GAAG,IAAI;gBACP,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAE,IAAI,CAAC,OAAkC,IAAI,EAAE,CAAC;iBACtD;aACJ,CAAC,CAAA;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,IAAI,QAAQ,CACd,eAAe,EACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAChE,CAAA;QACL,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACxC,IAAI,OAAO,GAAG,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAA;YAClC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;gBAC7B,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO;oBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAA;qBACjD,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;oBAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAA;YAClE,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBACZ,2EAA2E;gBAC3E,0EAA0E;YAC9E,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;QACjD,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAc,CAAA;QAC7C,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACnC,CAAC;IAED,OAAO;QACH,KAAK,CAAC,KAAK,EAAE,QAAQ;YACjB,OAAO,OAAO,CAAc,QAAQ,EAAE;gBAClC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;aAC5C,CAAC,CAAA;QACN,CAAC;QAED,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW;YACjC,OAAO,OAAO,CAAiB,WAAW,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;aACzD,CAAC,CAAA;QACN,CAAC;QAED,OAAO,CAAC,YAAY;YAChB,OAAO,OAAO,CAAgB,UAAU,EAAE;gBACtC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;aACzC,CAAC,CAAA;QACN,CAAC;QAED,MAAM,CAAC,YAAY;YACf,OAAO,OAAO,CAAO,SAAS,EAAE;gBAC5B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;aACzC,CAAC,CAAA;QACN,CAAC;QAED,EAAE,CAAC,WAAW;YACV,OAAO,OAAO,CAAW,KAAK,EAAE;gBAC5B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;aACtD,CAAC,CAAA;QACN,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI;YACf,MAAM,IAAI,GAAG,MAAM,OAAO,CAA8B,WAAW,EAAE;gBACjE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aACjC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA;QAC1B,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK;YAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAiC,iBAAiB,EAAE;gBAC1E,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAClC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK,EAAE,WAAW;YACzC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAiC,yBAAyB,EAAE;gBAClF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;aAC/C,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK;YACjB,MAAM,IAAI,GAAG,MAAM,OAAO,CACtB,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC5C,EAAE,MAAM,EAAE,KAAK,EAAE,CACpB,CAAA;YACD,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,KAAK;YACxB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAiC,aAAa,EAAE;gBACtE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAClC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,KAAK;YACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAwB,oBAAoB,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;aAClC,CAAC,CAAA;YACF,OAAO,IAAI,CAAC,IAAI,CAAA;QACpB,CAAC;KACJ,CAAA;AACL,CAAC"}

package/dist/clients/onboarding.client.d.ts

@@ -0,0 +1,36 @@
+/**
+ * onboarding.client.ts — F640: Typed SDK client for Onboarding Draft CRUD.
+ * C1049: Typed SDK method, never raw fetch.
+ */
+import type { HttpClient } from '../transport/http-client.js';
+export interface OnboardingDraftDto {
+    id: string;
+    userId: string;
+    step: number;
+    data: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface SaveOnboardingDraftDto {
+    step: number;
+    data: Record<string, unknown>;
+}
+export declare class OnboardingClient {
+    private http;
+    constructor(http: HttpClient);
+    /**
+     * Get current onboarding draft for the authenticated user (F640).
+     */
+    getDraft(): Promise<OnboardingDraftDto | null>;
+    /**
+     * Upsert/save the onboarding draft for the authenticated user (F640).
+     */
+    saveDraft(draft: SaveOnboardingDraftDto): Promise<OnboardingDraftDto>;
+    /**
+     * Delete/discard the current onboarding draft for the authenticated user (F640).
+     */
+    deleteDraft(): Promise<{
+        success: boolean;
+    }>;
+}
+//# sourceMappingURL=onboarding.client.d.ts.map

package/dist/clients/onboarding.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.client.d.ts","sourceRoot":"","sources":["../../src/clients/onboarding.client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,sBAAsB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAChC;AAED,qBAAa,gBAAgB;IACb,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAIpD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI3E;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAGrD"}

package/dist/clients/onboarding.client.js

@@ -0,0 +1,25 @@
+export class OnboardingClient {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    /**
+     * Get current onboarding draft for the authenticated user (F640).
+     */
+    async getDraft() {
+        return this.http.get('/onboarding/draft');
+    }
+    /**
+     * Upsert/save the onboarding draft for the authenticated user (F640).
+     */
+    async saveDraft(draft) {
+        return this.http.put('/onboarding/draft', draft);
+    }
+    /**
+     * Delete/discard the current onboarding draft for the authenticated user (F640).
+     */
+    async deleteDraft() {
+        return this.http.delete('/onboarding/draft');
+    }
+}
+//# sourceMappingURL=onboarding.client.js.map

package/dist/clients/onboarding.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.client.js","sourceRoot":"","sources":["../../src/clients/onboarding.client.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,gBAAgB;IACL;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;OAEG;IACH,KAAK,CAAC,QAAQ;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAA4B,mBAAmB,CAAC,CAAA;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,KAA6B;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,mBAAmB,EAAE,KAAK,CAAC,CAAA;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAuB,mBAAmB,CAAC,CAAA;IACtE,CAAC;CACJ"}

package/dist/clients/projects.client.d.ts

@@ -0,0 +1,63 @@
+/**
+ * projects.client.ts — F639: Typed SDK client for Projects & Atomic Provisioning.
+ * C1049: Typed SDK method, never raw fetch.
+ */
+import type { HttpClient } from '../transport/http-client.js';
+export interface OwnerProvisionDto {
+    mode: 'create-org' | 'bind-org' | 'solo';
+    name?: string;
+    slug?: string;
+    orgId?: string;
+}
+export interface ProjectProvisionDetailsDto {
+    slug: string;
+    name: string;
+    stack?: string[];
+    repo?: string;
+    customer?: string;
+}
+export interface MainAgentProvisionDetailsDto {
+    alias: string;
+    character?: string;
+    roles?: string[];
+    domains?: string[];
+    avatar?: string;
+    defaultModel?: string;
+    instructions?: string;
+}
+export interface ProvisionProjectRequestDto {
+    project: ProjectProvisionDetailsDto;
+    owner: OwnerProvisionDto;
+    mainAgent?: MainAgentProvisionDetailsDto;
+}
+export interface ProvisionedProjectDto {
+    slug: string;
+    name: string;
+    orgId: string | null;
+    ownerUserId: string | null;
+    mainAgent?: {
+        id: string;
+        alias: string;
+        project: string | null;
+        roles?: string[];
+        config?: Record<string, unknown>;
+    };
+    controller?: {
+        agentId: string;
+        principalId: string;
+        grantedBy?: string | null;
+    };
+}
+export declare class ProjectsClient {
+    private http;
+    constructor(http: HttpClient);
+    /**
+     * Atomically provisions Owner + Project + Mandatory Main-Agent + Controller-Binding (F639).
+     */
+    provision(request: ProvisionProjectRequestDto): Promise<ProvisionedProjectDto>;
+    /**
+     * Alias for provision().
+     */
+    create(request: ProvisionProjectRequestDto): Promise<ProvisionedProjectDto>;
+}
+//# sourceMappingURL=projects.client.d.ts.map

package/dist/clients/projects.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.client.d.ts","sourceRoot":"","sources":["../../src/clients/projects.client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAE7D,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,YAAY,GAAG,UAAU,GAAG,MAAM,CAAA;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,4BAA4B;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,YAAY,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,0BAA0B;IACvC,OAAO,EAAE,0BAA0B,CAAA;IACnC,KAAK,EAAE,iBAAiB,CAAA;IACxB,SAAS,CAAC,EAAE,4BAA4B,CAAA;CAC3C;AAED,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KACnC,CAAA;IACD,UAAU,CAAC,EAAE;QACT,OAAO,EAAE,MAAM,CAAA;QACf,WAAW,EAAE,MAAM,CAAA;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAC5B,CAAA;CACJ;AAED,qBAAa,cAAc;IACX,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;OAEG;IACH,SAAS,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI9E;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAG9E"}

package/dist/clients/projects.client.js

@@ -0,0 +1,19 @@
+export class ProjectsClient {
+    http;
+    constructor(http) {
+        this.http = http;
+    }
+    /**
+     * Atomically provisions Owner + Project + Mandatory Main-Agent + Controller-Binding (F639).
+     */
+    provision(request) {
+        return this.http.post('/projects', request);
+    }
+    /**
+     * Alias for provision().
+     */
+    create(request) {
+        return this.provision(request);
+    }
+}
+//# sourceMappingURL=projects.client.js.map

package/dist/clients/projects.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projects.client.js","sourceRoot":"","sources":["../../src/clients/projects.client.ts"],"names":[],"mappings":"AAwDA,MAAM,OAAO,cAAc;IACH;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;OAEG;IACH,SAAS,CAAC,OAAmC;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAwB,WAAW,EAAE,OAAO,CAAC,CAAA;IACtE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAmC;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;CACJ"}

package/dist/factory/agent-sdk.d.ts

@@ -4,6 +4,7 @@ import { AgentCapabilityClient } from '../clients/agent/capability.client.js';
 import { AgentControllerClient } from '../clients/agent/agent-controller.client.js';
 import { TaskConfigClient } from '../clients/shared/task-config.client.js';
 import { SystemOneClient } from '../clients/agent/system-one.client.js';
+import { ProjectsClient } from '../clients/projects.client.js';
 export interface AgentSdkConfig {
     /** Base URL for the beacon API (e.g. 'https://api.beacon.build') */
     baseUrl: string;
@@ -21,6 +22,8 @@ export interface AgentSdkConfig {
 }
 export interface AgentSdk {
     tasks: AgentTasksClient;
+    /** F639: Projects client with atomic provisioning */
+    projects: ProjectsClient;
     /** F262: Semantic search across documents, messages, memories, conversations */
     search?: AgentSearchClient;
     /** F304: Unified capability resolver (ranked skills/sops/workflows) */

package/dist/factory/agent-sdk.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AAEvE,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,uEAAuE;IACvE,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,CAAA;IAC5B,kEAAkE;IAClE,gBAAgB,EAAE,qBAAqB,CAAA;IACvC,0FAA0F;IAC1F,SAAS,EAAE,eAAe,CAAA;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAoBlE"}
+{"version":3,"file":"agent-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAE9D,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,qDAAqD;IACrD,QAAQ,EAAE,cAAc,CAAA;IACxB,gFAAgF;IAChF,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,uEAAuE;IACvE,YAAY,CAAC,EAAE,qBAAqB,CAAA;IACpC,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,CAAA;IAC5B,kEAAkE;IAClE,gBAAgB,EAAE,qBAAqB,CAAA;IACvC,0FAA0F;IAC1F,SAAS,EAAE,eAAe,CAAA;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAsBlE"}

package/dist/factory/agent-sdk.js

@@ -5,6 +5,7 @@ import { AgentCapabilityClient } from '../clients/agent/capability.client.js';
 import { AgentControllerClient } from '../clients/agent/agent-controller.client.js';
 import { TaskConfigClient } from '../clients/shared/task-config.client.js';
 import { SystemOneClient } from '../clients/agent/system-one.client.js';
+import { ProjectsClient } from '../clients/projects.client.js';
 /**
  * createAgentClient — creates an Agent SDK instance authenticated with an Agent-JWT.
  * Every agent client is canonical under /api/v1/* : tasks (C565 removed the legacy
@@ -26,6 +27,8 @@ export function createAgentClient(config) {
     return {
         // C565: tasks canonical under /api/v1/tasks.
         tasks: new AgentTasksClient(v1Http),
+        // F639: projects canonical under /api/v1/projects.
+        projects: new ProjectsClient(v1Http),
         // C572-FS54/10: search + capabilities canonical under /api/v1/*.
         search: new AgentSearchClient(v1Http),
         capabilities: new AgentCapabilityClient(v1Http),

package/dist/factory/agent-sdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-sdk.js","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AAgCvE;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACpD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,OAAO;QACH,6CAA6C;QAC7C,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACnC,iEAAiE;QACjE,MAAM,EAAE,IAAI,iBAAiB,CAAC,MAAM,CAAC;QACrC,YAAY,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAC/C,UAAU,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACxC,mFAAmF;QACnF,gBAAgB,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;QACnD,4EAA4E;QAC5E,SAAS,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;KACzC,CAAA;AACL,CAAC"}
+{"version":3,"file":"agent-sdk.js","sourceRoot":"","sources":["../../src/factory/agent-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAkC9D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACpD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU;QACjC,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,OAAO;QACH,6CAA6C;QAC7C,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACnC,mDAAmD;QACnD,QAAQ,EAAE,IAAI,cAAc,CAAC,MAAM,CAAC;QACpC,iEAAiE;QACjE,MAAM,EAAE,IAAI,iBAAiB,CAAC,MAAM,CAAC;QACrC,YAAY,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAC/C,UAAU,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;QACxC,mFAAmF;QACnF,gBAAgB,EAAE,IAAI,qBAAqB,CAAC,MAAM,CAAC;QACnD,4EAA4E;QAC5E,SAAS,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC;KACzC,CAAA;AACL,CAAC"}

package/dist/factory/user-sdk.d.ts

@@ -0,0 +1,22 @@
+import { ProjectsClient } from '../clients/projects.client.js';
+import { OnboardingClient } from '../clients/onboarding.client.js';
+export interface UserSdkConfig {
+    /** Base URL for the beacon API (e.g. 'https://api.beacon.build') */
+    baseUrl: string;
+    /** User access token or token getter function */
+    userToken: string | (() => string | Promise<string>);
+    onUnauthorized?: () => void | Promise<string | null | void>;
+}
+export interface UserSdk {
+    /** Projects client with atomic provisioning (F639) */
+    projects: ProjectsClient;
+    /** Onboarding client for guided wizard draft CRUD (F640) */
+    onboarding: OnboardingClient;
+}
+/**
+ * createUserClient — creates an SDK instance authenticated with a user JWT.
+ * Used for user-scoped operations such as atomic project provisioning where
+ * the caller must be a human user (F639).
+ */
+export declare function createUserClient(config: UserSdkConfig): UserSdk;
+//# sourceMappingURL=user-sdk.d.ts.map

package/dist/factory/user-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/user-sdk.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAElE,MAAM,WAAW,aAAa;IAC1B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,iDAAiD;IACjD,SAAS,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IACpD,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,OAAO;IACpB,sDAAsD;IACtD,QAAQ,EAAE,cAAc,CAAA;IACxB,4DAA4D;IAC5D,UAAU,EAAE,gBAAgB,CAAA;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAe/D"}

package/dist/factory/user-sdk.js

@@ -0,0 +1,23 @@
+import { HttpClient } from '../transport/http-client.js';
+import { ProjectsClient } from '../clients/projects.client.js';
+import { OnboardingClient } from '../clients/onboarding.client.js';
+/**
+ * createUserClient — creates an SDK instance authenticated with a user JWT.
+ * Used for user-scoped operations such as atomic project provisioning where
+ * the caller must be a human user (F639).
+ */
+export function createUserClient(config) {
+    const token = config.userToken;
+    const getToken = typeof token === 'function' ? token : () => token;
+    const v1Http = new HttpClient({
+        baseUrl: config.baseUrl,
+        basePath: '/api/v1',
+        getToken,
+        onUnauthorized: config.onUnauthorized,
+    });
+    return {
+        projects: new ProjectsClient(v1Http),
+        onboarding: new OnboardingClient(v1Http),
+    };
+}
+//# sourceMappingURL=user-sdk.js.map

package/dist/factory/user-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-sdk.js","sourceRoot":"","sources":["../../src/factory/user-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAiBlE;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAA;IAC9B,MAAM,QAAQ,GACV,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAA;IACrD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ;QACR,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,OAAO;QACH,QAAQ,EAAE,IAAI,cAAc,CAAC,MAAM,CAAC;QACpC,UAAU,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;KAC3C,CAAA;AACL,CAAC"}

package/dist/index.d.ts

@@ -15,7 +15,8 @@
  * use. See that package's `index.ts` for the internal surface.
  */
 export { createAgentClient, type AgentSdk, type AgentSdkConfig } from './factory/agent-sdk.js';
-export { createAuthClient, type AuthClient, type LoginResult, type RegisterResult, type RefreshResult, type MeResult, } from './clients/auth.client.js';
+export { createUserClient, type UserSdk, type UserSdkConfig } from './factory/user-sdk.js';
+export { createAuthClient, type AuthClient, type LoginResult, type RegisterResult, type RefreshResult, type MeResult, type InviteDetails, } from './clients/auth.client.js';
 export { RealtimeSdkClient, type RealtimeSdkClientConfig } from './realtime/realtime.client.js';
 export * from './index.auth-and-capture.js';
 export { computePermissions, type Permissions, type RoleRow } from './permissions.js';
@@ -27,6 +28,8 @@ export { BinaryClient, type BinaryClientConfig, type BinaryDownloadResult, } fro
 export { AgentCapabilityClient, type CapabilityCandidateDto, } from './clients/agent/capability.client.js';
 export { AgentControllerClient, type AgentControllerEntryDto, type AgentControllerRevokeResult, type AgentControllerPrincipalIdentity, type MainAgentValidityDto, } from './clients/agent/agent-controller.client.js';
 export { SystemOneClient, type SystemOneClassifyRequest, type SystemOneClassifyResult, type SystemOneClassifyOk, type SystemOneClassifySkipped, type SystemOneQuestion, type SystemOneNoulQuestion, type SystemOneChoiceQuestion, type SystemOneScoreQuestion, type SystemOneAnswer, type SystemOneNoulAnswer, type SystemOneChoiceAnswer, type SystemOneScoreAnswer, type SystemOneUsage, } from './clients/agent/system-one.client.js';
+export { ProjectsClient, type OwnerProvisionDto, type ProjectProvisionDetailsDto, type MainAgentProvisionDetailsDto, type ProvisionProjectRequestDto, type ProvisionedProjectDto, } from './clients/projects.client.js';
+export { OnboardingClient, type OnboardingDraftDto, type SaveOnboardingDraftDto, } from './clients/onboarding.client.js';
 export { SDK_MANIFEST, SDK_NEGATIVE_LIST, type ManifestEntry, type ManifestNegativeEntry, type SdkAuthMode, } from './manifest.js';
 export { TaskConfigClient } from './clients/shared/task-config.client.js';
 export type { TaskConfigResponse } from './clients/shared/task-config.client.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAG9F,OAAO,EACH,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,QAAQ,GAChB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAK/F,cAAc,6BAA6B,CAAA;AAG3C,OAAO,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAGrF,OAAO,EACH,QAAQ,EACR,KAAK,YAAY,EACjB,eAAe,EACf,gBAAgB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAE7F,OAAO,EACH,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC5B,MAAM,8BAA8B,CAAA;AAGrC,OAAO,EACH,qBAAqB,EACrB,KAAK,sBAAsB,GAC9B,MAAM,sCAAsC,CAAA;AAE7C,OAAO,EACH,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,oBAAoB,GAC5B,MAAM,4CAA4C,CAAA;AAEnD,OAAO,EACH,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,cAAc,GACtB,MAAM,sCAAsC,CAAA;AAG7C,OAAO,EACH,YAAY,EACZ,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACnB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAGhF,YAAY,EAER,OAAO,EACP,aAAa,EACb,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EAEvB,MAAM,EACN,UAAU,EACV,WAAW,EACX,iBAAiB,EAEjB,QAAQ,EACR,eAAe,EACf,eAAe,EAEf,OAAO,EAEP,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EAErB,cAAc,EAEd,QAAQ,EAER,KAAK,EAEL,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAEhB,WAAW,EACX,kBAAkB,EAElB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EAEZ,eAAe,EACf,eAAe,EACf,iBAAiB,EAEjB,WAAW,EAEX,YAAY,EAEZ,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,YAAY,GACf,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,iBAAiB,EAAE,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,KAAK,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAG1F,OAAO,EACH,gBAAgB,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,aAAa,GACrB,MAAM,0BAA0B,CAAA;AAGjC,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,+BAA+B,CAAA;AAK/F,cAAc,6BAA6B,CAAA;AAG3C,OAAO,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAGrF,OAAO,EACH,QAAQ,EACR,KAAK,YAAY,EACjB,eAAe,EACf,gBAAgB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAE7F,OAAO,EACH,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC5B,MAAM,8BAA8B,CAAA;AAGrC,OAAO,EACH,qBAAqB,EACrB,KAAK,sBAAsB,GAC9B,MAAM,sCAAsC,CAAA;AAE7C,OAAO,EACH,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,oBAAoB,GAC5B,MAAM,4CAA4C,CAAA;AAEnD,OAAO,EACH,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,cAAc,GACtB,MAAM,sCAAsC,CAAA;AAG7C,OAAO,EACH,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC7B,MAAM,8BAA8B,CAAA;AAGrC,OAAO,EACH,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,GAC9B,MAAM,gCAAgC,CAAA;AAGvC,OAAO,EACH,YAAY,EACZ,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,GACnB,MAAM,eAAe,CAAA;AAGtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAGhF,YAAY,EAER,OAAO,EACP,aAAa,EACb,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,cAAc,EAEd,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EAEvB,MAAM,EACN,UAAU,EACV,WAAW,EACX,iBAAiB,EAEjB,QAAQ,EACR,eAAe,EACf,eAAe,EAEf,OAAO,EAEP,eAAe,EACf,wBAAwB,EACxB,0BAA0B,EAC1B,qBAAqB,EAErB,cAAc,EAEd,QAAQ,EAER,KAAK,EAEL,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAEhB,WAAW,EACX,kBAAkB,EAElB,WAAW,EACX,YAAY,EACZ,WAAW,EACX,YAAY,EAEZ,eAAe,EACf,eAAe,EACf,iBAAiB,EAEjB,WAAW,EAEX,YAAY,EAEZ,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,YAAY,GACf,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -16,6 +16,7 @@
  */
 // ── Factory functions ──────────────────────────────────────────────────────────
 export { createAgentClient } from './factory/agent-sdk.js';
+export { createUserClient } from './factory/user-sdk.js';
 // ── Auth client ────────────────────────────────────────────────────────────────
 export { createAuthClient, } from './clients/auth.client.js';
 // ── Realtime (implemented in F141) ────────────────────────────────────────────
@@ -40,6 +41,10 @@ export { AgentCapabilityClient, } from './clients/agent/capability.client.js';
 export { AgentControllerClient, } from './clients/agent/agent-controller.client.js';
 // F687: System-One/Jev governed classify capability.
 export { SystemOneClient, } from './clients/agent/system-one.client.js';
+// F639: Atomic project provisioning
+export { ProjectsClient, } from './clients/projects.client.js';
+// F640: Onboarding draft client
+export { OnboardingClient, } from './clients/onboarding.client.js';
 // ── Manifest (for drift testing) ──────────────────────────────────────────────
 export { SDK_MANIFEST, SDK_NEGATIVE_LIST, } from './manifest.js';
 // F143: shared Task Config client (used by both public agent + internal admin surfaces)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,kFAAkF;AAClF,OAAO,EAAE,iBAAiB,EAAsC,MAAM,wBAAwB,CAAA;AAE9F,kFAAkF;AAClF,OAAO,EACH,gBAAgB,GAMnB,MAAM,0BAA0B,CAAA;AAEjC,iFAAiF;AACjF,OAAO,EAAE,iBAAiB,EAAgC,MAAM,+BAA+B,CAAA;AAE/F,iFAAiF;AACjF,uFAAuF;AACvF,yEAAyE;AACzE,cAAc,6BAA6B,CAAA;AAE3C,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAkC,MAAM,kBAAkB,CAAA;AAErF,iFAAiF;AACjF,OAAO,EACH,QAAQ,EAER,eAAe,EACf,gBAAgB,GACnB,MAAM,uBAAuB,CAAA;AAE9B,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAyB,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,SAAS,EAA+C,MAAM,2BAA2B,CAAA;AAClG,OAAO,EAAE,eAAe,EAA8B,MAAM,iCAAiC,CAAA;AAC7F,uKAAuK;AACvK,OAAO,EACH,YAAY,GAGf,MAAM,8BAA8B,CAAA;AAErC,iFAAiF;AACjF,OAAO,EACH,qBAAqB,GAExB,MAAM,sCAAsC,CAAA;AAC7C,8DAA8D;AAC9D,OAAO,EACH,qBAAqB,GAKxB,MAAM,4CAA4C,CAAA;AACnD,qDAAqD;AACrD,OAAO,EACH,eAAe,GAclB,MAAM,sCAAsC,CAAA;AAE7C,iFAAiF;AACjF,OAAO,EACH,YAAY,EACZ,iBAAiB,GAIpB,MAAM,eAAe,CAAA;AAEtB,wFAAwF;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,kFAAkF;AAClF,OAAO,EAAE,iBAAiB,EAAsC,MAAM,wBAAwB,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAoC,MAAM,uBAAuB,CAAA;AAE1F,kFAAkF;AAClF,OAAO,EACH,gBAAgB,GAOnB,MAAM,0BAA0B,CAAA;AAEjC,iFAAiF;AACjF,OAAO,EAAE,iBAAiB,EAAgC,MAAM,+BAA+B,CAAA;AAE/F,iFAAiF;AACjF,uFAAuF;AACvF,yEAAyE;AACzE,cAAc,6BAA6B,CAAA;AAE3C,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAkC,MAAM,kBAAkB,CAAA;AAErF,iFAAiF;AACjF,OAAO,EACH,QAAQ,EAER,eAAe,EACf,gBAAgB,GACnB,MAAM,uBAAuB,CAAA;AAE9B,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAyB,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,SAAS,EAA+C,MAAM,2BAA2B,CAAA;AAClG,OAAO,EAAE,eAAe,EAA8B,MAAM,iCAAiC,CAAA;AAC7F,uKAAuK;AACvK,OAAO,EACH,YAAY,GAGf,MAAM,8BAA8B,CAAA;AAErC,iFAAiF;AACjF,OAAO,EACH,qBAAqB,GAExB,MAAM,sCAAsC,CAAA;AAC7C,8DAA8D;AAC9D,OAAO,EACH,qBAAqB,GAKxB,MAAM,4CAA4C,CAAA;AACnD,qDAAqD;AACrD,OAAO,EACH,eAAe,GAclB,MAAM,sCAAsC,CAAA;AAE7C,oCAAoC;AACpC,OAAO,EACH,cAAc,GAMjB,MAAM,8BAA8B,CAAA;AAErC,gCAAgC;AAChC,OAAO,EACH,gBAAgB,GAGnB,MAAM,gCAAgC,CAAA;AAEvC,iFAAiF;AACjF,OAAO,EACH,YAAY,EACZ,iBAAiB,GAIpB,MAAM,eAAe,CAAA;AAEtB,wFAAwF;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAA"}

package/dist/manifest.negative-list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.negative-list.d.ts","sourceRoot":"","sources":["../src/manifest.negative-list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE,eAAO,MAAM,iBAAiB,EAAE,qBAAqB,EA6HpD,CAAA"}
+{"version":3,"file":"manifest.negative-list.d.ts","sourceRoot":"","sources":["../src/manifest.negative-list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAEhE,eAAO,MAAM,iBAAiB,EAAE,qBAAqB,EA0MpD,CAAA"}

package/dist/manifest.negative-list.js

@@ -125,6 +125,51 @@ export const SDK_NEGATIVE_LIST = [
         path: '/api/github/proxy',
         reason: 'GitHub webhook receiver (routes-github.ts) — server-to-server, no SDK use case',
     },
+    {
+        method: 'POST',
+        path: '/api/auth/device/authorize',
+        reason: 'F688/AC-5: RFC 8628 device_authorization_endpoint — called by a cloud/remote OAuth CLIENT (no localhost loopback), never the beacon SDK (auth-device.routes.ts)',
+    },
+    {
+        method: 'GET',
+        path: '/api/auth/device',
+        reason: 'F688/AC-5: RFC 8628 human-facing code-entry form, opened in a plain browser — never the SDK',
+    },
+    {
+        method: 'GET',
+        path: '/api/auth/device-consent',
+        reason: 'F688/AC-5: RFC 8628 human-facing confirm/deny step, opened in a plain browser — never the SDK',
+    },
+    {
+        method: 'GET',
+        path: '/api/auth/device-consent/deny',
+        reason: 'F688/AC-5: RFC 8628 access_denied decline link, followed by a plain browser — never the SDK',
+    },
+    {
+        method: 'GET',
+        path: '/api/auth/device-consent-callback',
+        reason: 'F688/AC-5: same-origin landing after Portal login, reached via browser redirect — never the SDK',
+    },
+    {
+        method: 'POST',
+        path: '/api/auth/device/token',
+        reason: 'F688/AC-5: RFC 8628 token_endpoint — polled by the cloud/remote OAuth CLIENT itself, never the beacon SDK',
+    },
+    {
+        method: 'POST',
+        path: '/api/v1/oauth/gateway-mint',
+        reason: 'F688: server-to-server OAuth-resource-server mint boundary — called by apps/agent/server/mcp-gateway/user-principal-client.ts via raw fetch (a different deployable process), not the SDK',
+    },
+    {
+        method: 'POST',
+        path: '/api/v1/oauth/internal/revocation-check',
+        reason: 'F690/AC-3: internal service-to-service boundary — called by apps/agent/server/mcp-gateway/oauth-observability-wiring.ts via raw fetch with a shared secret, not the SDK (see oauth-internal.routes.ts)',
+    },
+    {
+        method: 'POST',
+        path: '/api/v1/oauth/internal/diagnostics/rejection',
+        reason: 'F690/AC-4: internal service-to-service boundary — same rationale as /api/v1/oauth/internal/revocation-check above',
+    },
     {
         method: 'POST',
         path: '/api/v1/probe/{projectId}/{envId}/{serviceId}/*',
@@ -135,5 +180,36 @@ export const SDK_NEGATIVE_LIST = [
         path: '/api/v1/probe/{projectId}/{envId}/{serviceId}/*',
         reason: 'C1002/AC-12: internal environment probe passthrough — no SDK use case',
     },
+    // ── F689: pre-existing F496 routes surfaced by this task's first-ever full INV-3 run —
+    // genuine gaps predating F689 (F496 never added manifest/negative-list coverage for its
+    // own routes), not something F689 introduced. The `/api/v1/ops/*` wildcard entry above
+    // only covers the ops sub-router's own literal Hono catch-all route, NOT these specific,
+    // individually-registered ones (this test does an EXACT string match, no wildcard
+    // resolution) — each needs its own entry.
+    {
+        method: 'GET',
+        path: '/api/v1/identity/jwks.json',
+        reason: "F496 public JWKS endpoint — consumed by external target-project verifiers via jose's createRemoteJWKSet, never by this platform's own SDK",
+    },
+    {
+        method: 'GET',
+        path: '/api/v1/ops/identity/jwks',
+        reason: "F496 ops-guarded JWKS status — consumed by the beacon-ops MCP's jwks_status tool via raw fetch (Argus cross-deployment JWT), not the SDK (F689's own admin.identity.getJwksStatus is a DIFFERENT, vendor-gated route, /api/v1/admin/identity/jwks)",
+    },
+    {
+        method: 'POST',
+        path: '/api/v1/ops/identity/jwks/rotations',
+        reason: "F496 ops-guarded rotate — consumed by the beacon-ops MCP's jwks_rotate tool via raw fetch, not the SDK (F689's admin.identity.rotateJwks is the DIFFERENT vendor-gated route, /api/v1/admin/identity/jwks/rotations)",
+    },
+    {
+        method: 'POST',
+        path: '/api/v1/ops/identity/jwks/revocations',
+        reason: "F496 ops-guarded revoke — consumed by the beacon-ops MCP's jwks_revoke tool via raw fetch, not the SDK (F689's admin.identity.revokeJwksKey is the DIFFERENT vendor-gated route, /api/v1/admin/identity/jwks/revocations)",
+    },
+    {
+        method: 'POST',
+        path: '/api/v1/ops/identity/federated-tokens',
+        reason: 'F496 ops-guarded federated-token mint — consumed by agent/service callers via raw fetch (cross-project trust primitive), no admin-UI/SDK use case',
+    },
 ];
 //# sourceMappingURL=manifest.negative-list.js.map

package/dist/manifest.negative-list.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.negative-list.js","sourceRoot":"","sources":["../src/manifest.negative-list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAA4B;IACtD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,+CAA+C;KAC1D;IACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,EAAE;IACvE;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,4DAA4D;KACvE;IACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,2BAA2B,EAAE;IACzE;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,0DAA0D;KACrE;IAED,+EAA+E;IAC/E;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,qEAAqE;KAChF;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,+LAA+L;KAC1M;IACD;QACI,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gFAAgF;KAC3F;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,6JAA6J;KACxK;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,+IAA+I;KAC1J;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,4IAA4I;KACvJ;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,qJAAqJ;KAChK;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,gIAAgI;KAC3I;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,4IAA4I;KACvJ;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,iJAAiJ;KAC5J;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,gFAAgF;KAC3F;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;CACJ,CAAA"}
+{"version":3,"file":"manifest.negative-list.js","sourceRoot":"","sources":["../src/manifest.negative-list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAA4B;IACtD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,+CAA+C;KAC1D;IACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,EAAE;IACvE;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,4DAA4D;KACvE;IACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,2BAA2B,EAAE;IACzE;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,0DAA0D;KACrE;IAED,+EAA+E;IAC/E;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,qEAAqE;KAChF;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,+LAA+L;KAC1M;IACD;QACI,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,+CAA+C;KAC1D;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,gFAAgF;KAC3F;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,6JAA6J;KACxK;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,+IAA+I;KAC1J;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,4IAA4I;KACvJ;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,qJAAqJ;KAChK;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,gIAAgI;KAC3I;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,4IAA4I;KACvJ;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,iJAAiJ;KAC5J;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE,gFAAgF;KAC3F;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,iKAAiK;KAC5K;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,6FAA6F;KACxG;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,MAAM,EAAE,+FAA+F;KAC1G;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,+BAA+B;QACrC,MAAM,EAAE,6FAA6F;KACxG;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,mCAAmC;QACzC,MAAM,EAAE,iGAAiG;KAC5G;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,2GAA2G;KACtH;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,2LAA2L;KACtM;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yCAAyC;QAC/C,MAAM,EAAE,wMAAwM;KACnN;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,8CAA8C;QACpD,MAAM,EAAE,mHAAmH;KAC9H;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,iDAAiD;QACvD,MAAM,EAAE,uEAAuE;KAClF;IAED,wFAAwF;IACxF,wFAAwF;IACxF,uFAAuF;IACvF,yFAAyF;IACzF,kFAAkF;IAClF,0CAA0C;IAC1C;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,4BAA4B;QAClC,MAAM,EAAE,2IAA2I;KACtJ;IACD;QACI,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,oPAAoP;KAC/P;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,qCAAqC;QAC3C,MAAM,EAAE,sNAAsN;KACjO;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,2NAA2N;KACtO;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,uCAAuC;QAC7C,MAAM,EAAE,mJAAmJ;KAC9J;CACJ,CAAA"}

package/dist/manifest.public-entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.public-entries.d.ts","sourceRoot":"","sources":["../src/manifest.public-entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,eAAO,MAAM,uBAAuB,EAAE,aAAa,EAmBlD,CAAA"}
+{"version":3,"file":"manifest.public-entries.d.ts","sourceRoot":"","sources":["../src/manifest.public-entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,eAAO,MAAM,uBAAuB,EAAE,aAAa,EAgClD,CAAA"}

package/dist/manifest.public-entries.js

@@ -24,5 +24,18 @@ export const MANIFEST_PUBLIC_ENTRIES = [
         sdkPath: 'auth.confirmPasswordReset',
         authMode: 'public',
     },
+    { method: 'GET', path: '/api/auth/invite', sdkPath: 'auth.getInvite', authMode: 'public' },
+    {
+        method: 'POST',
+        path: '/api/auth/magic-link',
+        sdkPath: 'auth.requestMagicLink',
+        authMode: 'public',
+    },
+    {
+        method: 'POST',
+        path: '/api/auth/magic-link/redeem',
+        sdkPath: 'auth.redeemMagicLink',
+        authMode: 'public',
+    },
 ];
 //# sourceMappingURL=manifest.public-entries.js.map

package/dist/manifest.public-entries.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.public-entries.js","sourceRoot":"","sources":["../src/manifest.public-entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAoB;IACpD,6EAA6E;IAC7E,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE;IACtF,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC5F,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC1F,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE;IACxF,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC/E;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,QAAQ;KACrB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,QAAQ;KACrB;CACJ,CAAA"}
+{"version":3,"file":"manifest.public-entries.js","sourceRoot":"","sources":["../src/manifest.public-entries.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAoB;IACpD,6EAA6E;IAC7E,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE;IACtF,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC5F,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC1F,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE;IACxF,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC/E;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,QAAQ;KACrB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,2BAA2B;QACpC,QAAQ,EAAE,QAAQ;KACrB;IACD,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC1F;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,QAAQ;KACrB;IACD;QACI,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,sBAAsB;QAC/B,QAAQ,EAAE,QAAQ;KACrB;CACJ,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beacon-build/sdk",
-  "version": "2.13.0",
+  "version": "2.15.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -26,7 +26,7 @@
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",
     "event-source-polyfill": "^1.0.31",
-    "@beacon-build/core": "2.13.0"
+    "@beacon-build/core": "2.15.0"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",