@beacon-build/sdk 2.4.4 → 2.5.0

package/dist/clients/ops/thread-messaging.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-messaging.types.js","sourceRoot":"","sources":["../../../src/clients/ops/thread-messaging.types.ts"],"names":[],"mappings":""}

package/dist/clients/ops/tool-calls-ops.client.d.ts

@@ -0,0 +1,12 @@
+import type { IToolCallService, ToolCall, CreateToolCallInput } from '@beacon-build/core';
+import type { OpsApiClient } from '../../transport/ops-api-client.js';
+export declare class ToolCallsOpsClient implements IToolCallService {
+    private readonly api;
+    constructor(api: OpsApiClient);
+    create(input: CreateToolCallInput): Promise<ToolCall>;
+    updateStatus(id: string, status: 'pending' | 'success' | 'error', durationMs?: number, outputBytes?: number): Promise<void>;
+    setMessageId(ids: string[], messageId: string): Promise<void>;
+    findBySession(sessionId: string): Promise<ToolCall[]>;
+    findBySessionAndTools(sessionId: string, tools: string[]): Promise<ToolCall[]>;
+}
+//# sourceMappingURL=tool-calls-ops.client.d.ts.map

package/dist/clients/ops/tool-calls-ops.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-calls-ops.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/tool-calls-ops.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACR,gBAAgB,EAChB,QAAQ,EACR,mBAAmB,EAEtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AAMrE,qBAAa,kBAAmB,YAAW,gBAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,YAAY;IAExC,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKrD,YAAY,CACd,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,EACvC,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC;IAIV,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAOrD,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;CAOvF"}

package/dist/clients/ops/tool-calls-ops.client.js

@@ -0,0 +1,29 @@
+function dtoToToolCall(dto) {
+    return { ...dto, createdAt: new Date(dto.createdAt) };
+}
+export class ToolCallsOpsClient {
+    api;
+    constructor(api) {
+        this.api = api;
+    }
+    async create(input) {
+        const res = await this.api.post('/api/v1/tool-calls', input);
+        return dtoToToolCall(res.data);
+    }
+    async updateStatus(id, status, durationMs, outputBytes) {
+        await this.api.patch(`/api/v1/tool-calls/${id}`, { status, durationMs, outputBytes });
+    }
+    async setMessageId(ids, messageId) {
+        await this.api.post('/api/v1/tool-calls/set-message-id', { ids, messageId });
+    }
+    async findBySession(sessionId) {
+        const res = await this.api.get(`/api/v1/tool-calls/by-session/${encodeURIComponent(sessionId)}`);
+        return res.data.map(dtoToToolCall);
+    }
+    async findBySessionAndTools(sessionId, tools) {
+        const qs = tools.length > 0 ? `?tools=${tools.map(encodeURIComponent).join(',')}` : '';
+        const res = await this.api.get(`/api/v1/tool-calls/by-session/${encodeURIComponent(sessionId)}${qs}`);
+        return res.data.map(dtoToToolCall);
+    }
+}
+//# sourceMappingURL=tool-calls-ops.client.js.map

package/dist/clients/ops/tool-calls-ops.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-calls-ops.client.js","sourceRoot":"","sources":["../../../src/clients/ops/tool-calls-ops.client.ts"],"names":[],"mappings":"AAQA,SAAS,aAAa,CAAC,GAAgB;IACnC,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAA;AACzD,CAAC;AAED,MAAM,OAAO,kBAAkB;IACE;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD,KAAK,CAAC,MAAM,CAAC,KAA0B;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAwB,oBAAoB,EAAE,KAAK,CAAC,CAAA;QACnF,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,YAAY,CACd,EAAU,EACV,MAAuC,EACvC,UAAmB,EACnB,WAAoB;QAEpB,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IACzF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAa,EAAE,SAAiB;QAC/C,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1B,iCAAiC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACnE,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB,EAAE,KAAe;QAC1D,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACtF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1B,iCAAiC,kBAAkB,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CACxE,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IACtC,CAAC;CACJ"}

package/dist/clients/ops/usage-workflows-ops.client.d.ts

@@ -0,0 +1,22 @@
+import type { WorkflowLog } from '@beacon-build/core';
+import type { OpsApiClient } from '../../transport/ops-api-client.js';
+export interface LogWorkflowInput {
+    event: 'start' | 'complete' | 'abandon';
+    project: string;
+    workflow: string;
+    agentId?: string;
+    sessionId?: string;
+    durationMin?: number;
+    details?: Record<string, unknown>;
+}
+export declare class UsageWorkflowsOpsClient {
+    private readonly api;
+    constructor(api: OpsApiClient);
+    log(input: LogWorkflowInput): Promise<WorkflowLog>;
+    list(filter?: {
+        project?: string;
+        agentId?: string;
+        limit?: number;
+    }): Promise<WorkflowLog[]>;
+}
+//# sourceMappingURL=usage-workflows-ops.client.d.ts.map

package/dist/clients/ops/usage-workflows-ops.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-workflows-ops.client.d.ts","sourceRoot":"","sources":["../../../src/clients/ops/usage-workflows-ops.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAA;AAErE,MAAM,WAAW,gBAAgB;IAC7B,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAA;IACvC,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,qBAAa,uBAAuB;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,YAAY;IAExC,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC;IAQlD,IAAI,CACN,MAAM,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACpE,OAAO,CAAC,WAAW,EAAE,CAAC;CAW5B"}

package/dist/clients/ops/usage-workflows-ops.client.js

@@ -0,0 +1,23 @@
+export class UsageWorkflowsOpsClient {
+    api;
+    constructor(api) {
+        this.api = api;
+    }
+    async log(input) {
+        const res = await this.api.post('/api/v1/workflow-instances/log', input);
+        return res.data;
+    }
+    async list(filter = {}) {
+        const params = new URLSearchParams();
+        if (filter.project)
+            params.set('project', filter.project);
+        if (filter.agentId)
+            params.set('agentId', filter.agentId);
+        if (filter.limit != null)
+            params.set('limit', String(filter.limit));
+        const qs = params.toString();
+        const res = await this.api.get(`/api/v1/workflow-instances/log${qs ? `?${qs}` : ''}`);
+        return res.data;
+    }
+}
+//# sourceMappingURL=usage-workflows-ops.client.js.map

package/dist/clients/ops/usage-workflows-ops.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-workflows-ops.client.js","sourceRoot":"","sources":["../../../src/clients/ops/usage-workflows-ops.client.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,uBAAuB;IACH;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD,KAAK,CAAC,GAAG,CAAC,KAAuB;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAC3B,gCAAgC,EAChC,KAAK,CACR,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,CAAA;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CACN,SAAiE,EAAE;QAEnE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QACzD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACnE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAA;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1B,iCAAiC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACxD,CAAA;QACD,OAAO,GAAG,CAAC,IAAI,CAAA;IACnB,CAAC;CACJ"}

package/dist/factory/admin-sdk.d.ts

@@ -0,0 +1,96 @@
+import { AdminUsersClient } from '../clients/admin/users.client.js';
+import { AdminOrganizationsClient } from '../clients/admin/organizations.client.js';
+import { AccessGrantsClient } from '../clients/admin/access-grants.client.js';
+import { AdminProjectsClient } from '../clients/admin/projects.client.js';
+import { AdminAgentsClient } from '../clients/admin/agents.client.js';
+import { AgentControllerClient } from '../clients/agent/agent-controller.client.js';
+import { AdminRosterClient } from '../clients/admin/roster.client.js';
+import { AdminAssetsClient } from '../clients/admin/assets.client.js';
+import { AdminTasksClient } from '../clients/admin/tasks.client.js';
+import { AdminDocumentsClient } from '../clients/admin/documents.client.js';
+import { AdminMemoriesClient } from '../clients/admin/memories.client.js';
+import { AdminUsageClient } from '../clients/admin/usage.client.js';
+import { AdminMetricsClient } from '../clients/admin/metrics.client.js';
+import { AdminActivityClient } from '../clients/admin/activity.client.js';
+import { AdminSessionsClient } from '../clients/admin/sessions.client.js';
+import { AdminToolCallsClient } from '../clients/admin/tool-calls.client.js';
+import { AdminPlanningClient } from '../clients/admin/planning.client.js';
+import { AdminConversationMessagesClient } from '../clients/admin/conversation-messages.client.js';
+import { AdminDbClient } from '../clients/admin/db.client.js';
+import { AdminGithubProxyClient } from '../clients/admin/github-proxy.client.js';
+import { SettingsClient } from '../clients/admin/settings.client.js';
+import { TaskConfigClient } from '../clients/shared/task-config.client.js';
+import { AdminPortalClient } from '../clients/admin/portal.client.js';
+import { AdminExecutionsClient } from '../clients/admin/executions.client.js';
+import { OpsWorkersClient } from '../clients/ops/ops-workers.client.js';
+import { AdminOpsClient } from '../clients/admin/ops-admin.client.js';
+import { AdminModelHealthCheckClient } from '../clients/admin/model-health-check.client.js';
+import { AdminDaemonClient } from '../clients/admin/daemon-admin.client.js';
+export interface AdminSdkConfig {
+    /** Base URL for the beacon API (e.g. 'https://api.beacon.build') */
+    baseUrl: string;
+    /** User-JWT access token (alternative to getToken) */
+    accessToken?: string;
+    /** Callback to get the current access token — enables reactive token updates */
+    getToken?: () => string | Promise<string>;
+    /**
+     * Optional callback triggered on 401. C213: returning a fresh token string
+     * makes the HttpClient retry the request once with it (transparent
+     * silent-refresh); void/null means no refresh and the 401 propagates.
+     */
+    onUnauthorized?: () => void | Promise<string | null | void>;
+}
+export interface AdminSdk {
+    users: AdminUsersClient;
+    organizations: AdminOrganizationsClient;
+    /** F444/INV-13: Access Console grant/invite write endpoint. */
+    accessGrants: AccessGrantsClient;
+    projects: AdminProjectsClient;
+    agents: AdminAgentsClient;
+    /** F483: the human↔agent "Steuern" binding (F452 Stufe 5) — reuses the SAME
+     * transport-agnostic client `AgentSdk` (agent-sdk.ts) already wires; the Portal never had
+     * this client before F483, which is why `UserAgentsTab` was demo-only until then. */
+    agentControllers: AgentControllerClient;
+    /** C569/FS54 Chore 8: canonical roster (agent Capability-Role) resource. */
+    roster: AdminRosterClient;
+    assets: AdminAssetsClient;
+    tasks: AdminTasksClient;
+    documents: AdminDocumentsClient;
+    memories: AdminMemoriesClient;
+    usage: AdminUsageClient;
+    /** C823: F515's aggregated request-metering read API + C796's aggregated
+     *  campaign-analytics read API (both project-ownership-guarded, user-JWT). */
+    metrics: AdminMetricsClient;
+    /** F448/AC-12: scoped activity KPI summary. */
+    activity: AdminActivityClient;
+    sessions: AdminSessionsClient;
+    toolCalls: AdminToolCallsClient;
+    planning: AdminPlanningClient;
+    conversationMessages: AdminConversationMessagesClient;
+    db: AdminDbClient;
+    github: AdminGithubProxyClient;
+    /** F143: Config management (admin only) */
+    settings: SettingsClient;
+    /** F143: Task config (read-only for agents, read-write for admin) */
+    taskConfig: TaskConfigClient;
+    /** F293: Portal operations — workflows, SOPs, skills */
+    portal: AdminPortalClient;
+    /** F307: execution drill-down reads (workflow/SOP + skill) */
+    executions: AdminExecutionsClient;
+    /** F331/AC-12: ops worker status, config + run-history (admin-scoped). */
+    workers: OpsWorkersClient;
+    /** C789: Ops Cockpit health/stats/Argus reads (admin-scoped). */
+    opsAdmin: AdminOpsClient;
+    /** C790: model registry health-check reads/triggers (admin/vendor-scoped). */
+    modelHealthCheck: AdminModelHealthCheckClient;
+    /** C790: janitor daemon status/logs/embeddings/config (admin/vendor-scoped). */
+    daemonAdmin: AdminDaemonClient;
+}
+/**
+ * createAdminClient — creates an Admin SDK instance authenticated with a User-JWT.
+ * Use for admin UIs and user-scoped operations against /api/v1/*.
+ *
+ * INV-1: separate factory per auth mode — do not mix with createAgentClient or createOpsClient.
+ */
+export declare function createAdminClient(config: AdminSdkConfig): AdminSdk;
+//# sourceMappingURL=admin-sdk.d.ts.map

package/dist/factory/admin-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/admin-sdk.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAA;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAA;AAE3E,MAAM,WAAW,cAAc;IAC3B,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,sDAAsD;IACtD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACzC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;CAC9D;AAED,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,aAAa,EAAE,wBAAwB,CAAA;IACvC,+DAA+D;IAC/D,YAAY,EAAE,kBAAkB,CAAA;IAChC,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,MAAM,EAAE,iBAAiB,CAAA;IACzB;;yFAEqF;IACrF,gBAAgB,EAAE,qBAAqB,CAAA;IACvC,4EAA4E;IAC5E,MAAM,EAAE,iBAAiB,CAAA;IACzB,MAAM,EAAE,iBAAiB,CAAA;IACzB,KAAK,EAAE,gBAAgB,CAAA;IACvB,SAAS,EAAE,oBAAoB,CAAA;IAC/B,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,KAAK,EAAE,gBAAgB,CAAA;IACvB;kFAC8E;IAC9E,OAAO,EAAE,kBAAkB,CAAA;IAC3B,+CAA+C;IAC/C,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,SAAS,EAAE,oBAAoB,CAAA;IAC/B,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,oBAAoB,EAAE,+BAA+B,CAAA;IACrD,EAAE,EAAE,aAAa,CAAA;IACjB,MAAM,EAAE,sBAAsB,CAAA;IAC9B,2CAA2C;IAC3C,QAAQ,EAAE,cAAc,CAAA;IACxB,qEAAqE;IACrE,UAAU,EAAE,gBAAgB,CAAA;IAC5B,wDAAwD;IACxD,MAAM,EAAE,iBAAiB,CAAA;IACzB,8DAA8D;IAC9D,UAAU,EAAE,qBAAqB,CAAA;IACjC,0EAA0E;IAC1E,OAAO,EAAE,gBAAgB,CAAA;IACzB,iEAAiE;IACjE,QAAQ,EAAE,cAAc,CAAA;IACxB,8EAA8E;IAC9E,gBAAgB,EAAE,2BAA2B,CAAA;IAC7C,gFAAgF;IAChF,WAAW,EAAE,iBAAiB,CAAA;CACjC;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAyElE"}

package/dist/factory/admin-sdk.js

@@ -0,0 +1,112 @@
+import { HttpClient } from '../transport/http-client.js';
+import { MultipartClient } from '../transport/multipart-client.js';
+import { BinaryClient } from '../transport/binary-client.js';
+import { AdminUsersClient } from '../clients/admin/users.client.js';
+import { AdminOrganizationsClient } from '../clients/admin/organizations.client.js';
+import { AccessGrantsClient } from '../clients/admin/access-grants.client.js';
+import { AdminProjectsClient } from '../clients/admin/projects.client.js';
+import { AdminAgentsClient } from '../clients/admin/agents.client.js';
+import { AgentControllerClient } from '../clients/agent/agent-controller.client.js';
+import { AdminRosterClient } from '../clients/admin/roster.client.js';
+import { AdminAssetsClient } from '../clients/admin/assets.client.js';
+import { AdminTasksClient } from '../clients/admin/tasks.client.js';
+import { AdminDocumentsClient } from '../clients/admin/documents.client.js';
+import { AdminMemoriesClient } from '../clients/admin/memories.client.js';
+import { AdminUsageClient } from '../clients/admin/usage.client.js';
+import { AdminMetricsClient } from '../clients/admin/metrics.client.js';
+import { AdminActivityClient } from '../clients/admin/activity.client.js';
+import { AdminSessionsClient } from '../clients/admin/sessions.client.js';
+import { AdminToolCallsClient } from '../clients/admin/tool-calls.client.js';
+import { AdminPlanningClient } from '../clients/admin/planning.client.js';
+import { AdminConversationMessagesClient } from '../clients/admin/conversation-messages.client.js';
+import { AdminDbClient } from '../clients/admin/db.client.js';
+import { AdminGithubProxyClient } from '../clients/admin/github-proxy.client.js';
+import { SettingsClient } from '../clients/admin/settings.client.js';
+import { TaskConfigClient } from '../clients/shared/task-config.client.js';
+import { AdminPortalClient } from '../clients/admin/portal.client.js';
+import { AdminExecutionsClient } from '../clients/admin/executions.client.js';
+import { OpsWorkersClient } from '../clients/ops/ops-workers.client.js';
+import { AdminOpsClient } from '../clients/admin/ops-admin.client.js';
+import { AdminModelHealthCheckClient } from '../clients/admin/model-health-check.client.js';
+import { AdminDaemonClient } from '../clients/admin/daemon-admin.client.js';
+/**
+ * createAdminClient — creates an Admin SDK instance authenticated with a User-JWT.
+ * Use for admin UIs and user-scoped operations against /api/v1/*.
+ *
+ * INV-1: separate factory per auth mode — do not mix with createAgentClient or createOpsClient.
+ */
+export function createAdminClient(config) {
+    // Use getToken callback if provided, otherwise wrap accessToken
+    const getToken = config.getToken ?? (() => config.accessToken ?? '');
+    const http = new HttpClient({
+        baseUrl: config.baseUrl,
+        basePath: '/api/v1',
+        getToken,
+        onUnauthorized: config.onUnauthorized,
+    });
+    const multipart = new MultipartClient({
+        baseUrl: config.baseUrl,
+        basePath: '/api/v1',
+        getAuthHeader: async () => `Bearer ${await getToken()}`,
+        // Multipart uploads are non-idempotent → fire-and-forget the refresh
+        // trigger (no auto-retry); discard the returned token. Swallow callback
+        // errors so a throwing refresh hook never surfaces as an unhandled
+        // rejection — the 401 still propagates as SdkError from the upload.
+        onUnauthorized: config.onUnauthorized
+            ? () => {
+                void Promise.resolve(config.onUnauthorized()).catch(() => { });
+            }
+            : undefined,
+    });
+    // B302: binary transport for storage-proxy endpoints (F224 — same pattern as
+    // OpsStorageClient) — task attachment view/download stream through the API, never
+    // a direct/presigned storage URL.
+    const binary = new BinaryClient({
+        baseUrl: config.baseUrl,
+        basePath: '/api/v1',
+        getAuthHeader: async () => `Bearer ${await getToken()}`,
+    });
+    return {
+        users: new AdminUsersClient(http, multipart),
+        organizations: new AdminOrganizationsClient(http),
+        accessGrants: new AccessGrantsClient(http),
+        projects: new AdminProjectsClient(http),
+        agents: new AdminAgentsClient(http),
+        agentControllers: new AgentControllerClient(http),
+        roster: new AdminRosterClient(http),
+        assets: new AdminAssetsClient(http, multipart),
+        tasks: new AdminTasksClient(http, multipart, binary),
+        documents: new AdminDocumentsClient(http),
+        memories: new AdminMemoriesClient(http),
+        usage: new AdminUsageClient(http),
+        metrics: new AdminMetricsClient(http),
+        activity: new AdminActivityClient(http),
+        sessions: new AdminSessionsClient(http),
+        toolCalls: new AdminToolCallsClient(http),
+        planning: new AdminPlanningClient(http),
+        conversationMessages: new AdminConversationMessagesClient(http),
+        db: new AdminDbClient(http),
+        github: new AdminGithubProxyClient(http),
+        settings: new SettingsClient(http),
+        taskConfig: new TaskConfigClient(http),
+        portal: new AdminPortalClient(http),
+        executions: new AdminExecutionsClient(http),
+        // F331/AC-12: workers client over the JWT HttpClient. HttpClient prefixes
+        // basePath '/api/v1', so strip that from the client's absolute paths.
+        // getEnvelope keeps the raw body so the client unwraps { data } itself.
+        workers: new OpsWorkersClient({
+            getRaw: (path) => http.getEnvelope(stripApiV1(path)),
+            post: (path, body) => http.post(stripApiV1(path), body),
+            patch: (path, body) => http.patch(stripApiV1(path), body),
+            delete: (path) => http.delete(stripApiV1(path)),
+        }),
+        opsAdmin: new AdminOpsClient(http),
+        modelHealthCheck: new AdminModelHealthCheckClient(http),
+        daemonAdmin: new AdminDaemonClient(http),
+    };
+}
+/** HttpClient already prefixes '/api/v1' (basePath) — drop it from absolute paths. */
+function stripApiV1(path) {
+    return path.startsWith('/api/v1') ? path.slice('/api/v1'.length) : path;
+}
+//# sourceMappingURL=admin-sdk.js.map

package/dist/factory/admin-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-sdk.js","sourceRoot":"","sources":["../../src/factory/admin-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAA;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAA;AACzE,OAAO,EAAE,+BAA+B,EAAE,MAAM,kDAAkD,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAA;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAA;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+CAA+C,CAAA;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAA;AAgE3E;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACpD,gEAAgE;IAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IAEpE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC;QACxB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,QAAQ;QACR,cAAc,EAAE,MAAM,CAAC,cAAc;KACxC,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,MAAM,QAAQ,EAAE,EAAE;QACvD,qEAAqE;QACrE,wEAAwE;QACxE,mEAAmE;QACnE,oEAAoE;QACpE,cAAc,EAAE,MAAM,CAAC,cAAc;YACjC,CAAC,CAAC,GAAG,EAAE;gBACD,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,cAAe,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAClE,CAAC;YACH,CAAC,CAAC,SAAS;KAClB,CAAC,CAAA;IAEF,6EAA6E;IAC7E,kFAAkF;IAClF,kCAAkC;IAClC,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,MAAM,QAAQ,EAAE,EAAE;KAC1D,CAAC,CAAA;IAEF,OAAO;QACH,KAAK,EAAE,IAAI,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC;QAC5C,aAAa,EAAE,IAAI,wBAAwB,CAAC,IAAI,CAAC;QACjD,YAAY,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC;QAC1C,QAAQ,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;QACnC,gBAAgB,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC;QACjD,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9C,KAAK,EAAE,IAAI,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;QACpD,SAAS,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC;QACzC,QAAQ,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;QACvC,KAAK,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC;QACjC,OAAO,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC;QACrC,QAAQ,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;QACvC,SAAS,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC;QACzC,QAAQ,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC;QACvC,oBAAoB,EAAE,IAAI,+BAA+B,CAAC,IAAI,CAAC;QAC/D,EAAE,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC;QAC3B,MAAM,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC;QACxC,QAAQ,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC;QAClC,UAAU,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC;QACtC,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;QACnC,UAAU,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC;QAC3C,0EAA0E;QAC1E,sEAAsE;QACtE,wEAAwE;QACxE,OAAO,EAAE,IAAI,gBAAgB,CAAC;YAC1B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;YACvD,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;YACzD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;SAClD,CAAC;QACF,QAAQ,EAAE,IAAI,cAAc,CAAC,IAAI,CAAC;QAClC,gBAAgB,EAAE,IAAI,2BAA2B,CAAC,IAAI,CAAC;QACvD,WAAW,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC;KAC3C,CAAA;AACL,CAAC;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAC3E,CAAC"}

package/dist/factory/ops-sdk.d.ts

@@ -0,0 +1,74 @@
+import { TasksOpsClient } from '../clients/ops/tasks-ops.client.js';
+import { SessionsOpsClient } from '../clients/ops/sessions-ops.client.js';
+import { AgentsOpsClient } from '../clients/ops/agents-ops.client.js';
+import { MemoriesOpsClient } from '../clients/ops/memories-ops.client.js';
+import { DocumentsOpsClient } from '../clients/ops/documents-ops.client.js';
+import { ProjectsOpsClient } from '../clients/ops/projects-ops.client.js';
+import { ConversationMessagesOpsClient } from '../clients/ops/conversation-messages-ops.client.js';
+import { UsageWorkflowsOpsClient } from '../clients/ops/usage-workflows-ops.client.js';
+import { RealtimeOpsClient } from '../clients/ops/realtime-ops.client.js';
+import { OpsDbClient } from '../clients/ops/ops-db.client.js';
+import { OpsStorageClient } from '../clients/ops/ops-storage.client.js';
+import { OpsNorthflankClient } from '../clients/ops/ops-northflank.client.js';
+import { OpsMqClient } from '../clients/ops/ops-mq.client.js';
+import { OpsLogsClient } from '../clients/ops/ops-logs.client.js';
+import { OpsWorkersClient } from '../clients/ops/ops-workers.client.js';
+import { LeadsOpsClient } from '../clients/ops/leads-ops.client.js';
+import { AgentAuthorizationOpsClient } from '../clients/ops/agent-authorization-ops.client.js';
+import { MetricsOpsClient } from '../clients/ops/metrics-ops.client.js';
+import { CampaignEventsOpsClient } from '../clients/ops/campaign-events-ops.client.js';
+import { GithubCredentialOpsClient } from '../clients/ops/github-credential-ops.client.js';
+export interface OpsSdkConfig {
+    /** Base URL for the beacon API (e.g. 'https://api.beacon.build') */
+    baseUrl: string;
+    /** OPS_API_KEY. F437: optional when `jwt` is supplied — at least one is required. */
+    apiKey?: string;
+    /** F437/AC-8: a minted Argus (or other) agent-JWT — takes precedence over `apiKey`
+     *  when both are set (C434's `jwt ?? apiKey` rule, same as `OpsApiClient`). */
+    jwt?: string;
+    /** Max retry attempts for 5xx/network errors (default: 3) */
+    retries?: number;
+    /** Base delay ms for exponential backoff (default: 100) */
+    retryBaseMs?: number;
+    /** B843 (C902): override which HTTP statuses are retried (default: `{429,500,502,503,504}`).
+     *  Forwarded verbatim to the underlying `OpsApiClient` — see its config for the rationale
+     *  (mcp-core's remote-ops mint round-trip passes a full-5xx predicate to keep the B591 shape). */
+    retryableStatus?: (status: number) => boolean;
+}
+export interface OpsSdk {
+    tasks: TasksOpsClient;
+    sessions: SessionsOpsClient;
+    agents: AgentsOpsClient;
+    memories: MemoriesOpsClient;
+    documents: DocumentsOpsClient;
+    projects: ProjectsOpsClient;
+    conversationMessages: ConversationMessagesOpsClient;
+    usageWorkflows: UsageWorkflowsOpsClient;
+    realtime: RealtimeOpsClient;
+    db: OpsDbClient;
+    storage: OpsStorageClient;
+    northflank: OpsNorthflankClient;
+    mq: OpsMqClient;
+    logs: OpsLogsClient;
+    workers: OpsWorkersClient;
+    /** F454: Lead-Entität + CRUD (Ingest + Verwaltung, FS56/DSC-020 Step 1). */
+    leads: LeadsOpsClient;
+    /** T229/AC-4: isBound/getCapabilitySources HTTP deps + the project-by-repo reverse lookup. */
+    agentAuthorization: AgentAuthorizationOpsClient;
+    /** C823/F515-AC-6: on-demand, Ops-gated request-correlation read (logs-sourced). */
+    metrics: MetricsOpsClient;
+    /** C823/B762/C796-AC-2: anonymous-web campaign-attribution event ingest. */
+    campaignEvents: CampaignEventsOpsClient;
+    /** F526/AC-2/AC-3: cross-process GitHub write-credential resolution for mcp/beacon. */
+    githubCredential: GithubCredentialOpsClient;
+}
+/**
+ * createOpsClient — creates an Ops SDK instance authenticated with an OPS_API_KEY.
+ * Use for daemon/runtime/MCP server operations against /api/v1/*.
+ * Includes retry with exponential backoff (3 attempts by default).
+ *
+ * INV-1: separate factory per auth mode — do not mix with createAdminClient or createAgentClient.
+ * INV-9: no onUnauthorized hook — Ops keys are rotated via secrets_sync, not interactively.
+ */
+export declare function createOpsClient(config: OpsSdkConfig): OpsSdk;
+//# sourceMappingURL=ops-sdk.d.ts.map

package/dist/factory/ops-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops-sdk.d.ts","sourceRoot":"","sources":["../../src/factory/ops-sdk.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAA;AAE1F,MAAM,WAAW,YAAY;IACzB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAA;IACf,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;mFAC+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;sGAEkG;IAClG,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAA;CAChD;AAED,MAAM,WAAW,MAAM;IACnB,KAAK,EAAE,cAAc,CAAA;IACrB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,SAAS,EAAE,kBAAkB,CAAA;IAC7B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oBAAoB,EAAE,6BAA6B,CAAA;IACnD,cAAc,EAAE,uBAAuB,CAAA;IACvC,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,EAAE,EAAE,WAAW,CAAA;IACf,OAAO,EAAE,gBAAgB,CAAA;IACzB,UAAU,EAAE,mBAAmB,CAAA;IAC/B,EAAE,EAAE,WAAW,CAAA;IACf,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,gBAAgB,CAAA;IACzB,4EAA4E;IAC5E,KAAK,EAAE,cAAc,CAAA;IACrB,8FAA8F;IAC9F,kBAAkB,EAAE,2BAA2B,CAAA;IAC/C,oFAAoF;IACpF,OAAO,EAAE,gBAAgB,CAAA;IACzB,4EAA4E;IAC5E,cAAc,EAAE,uBAAuB,CAAA;IACvC,uFAAuF;IACvF,gBAAgB,EAAE,yBAAyB,CAAA;CAC9C;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CA0D5D"}

package/dist/factory/ops-sdk.js

@@ -0,0 +1,88 @@
+import { OpsApiClient } from '../transport/ops-api-client.js';
+import { MultipartClient } from '../transport/multipart-client.js';
+import { TasksOpsClient } from '../clients/ops/tasks-ops.client.js';
+import { SessionsOpsClient } from '../clients/ops/sessions-ops.client.js';
+import { AgentsOpsClient } from '../clients/ops/agents-ops.client.js';
+import { MemoriesOpsClient } from '../clients/ops/memories-ops.client.js';
+import { DocumentsOpsClient } from '../clients/ops/documents-ops.client.js';
+import { ProjectsOpsClient } from '../clients/ops/projects-ops.client.js';
+import { ConversationMessagesOpsClient } from '../clients/ops/conversation-messages-ops.client.js';
+import { UsageWorkflowsOpsClient } from '../clients/ops/usage-workflows-ops.client.js';
+import { RealtimeOpsClient } from '../clients/ops/realtime-ops.client.js';
+import { OpsDbClient } from '../clients/ops/ops-db.client.js';
+import { OpsStorageClient } from '../clients/ops/ops-storage.client.js';
+import { OpsNorthflankClient } from '../clients/ops/ops-northflank.client.js';
+import { OpsMqClient } from '../clients/ops/ops-mq.client.js';
+import { OpsLogsClient } from '../clients/ops/ops-logs.client.js';
+import { OpsWorkersClient } from '../clients/ops/ops-workers.client.js';
+import { LeadsOpsClient } from '../clients/ops/leads-ops.client.js';
+import { AgentAuthorizationOpsClient } from '../clients/ops/agent-authorization-ops.client.js';
+import { MetricsOpsClient } from '../clients/ops/metrics-ops.client.js';
+import { CampaignEventsOpsClient } from '../clients/ops/campaign-events-ops.client.js';
+import { GithubCredentialOpsClient } from '../clients/ops/github-credential-ops.client.js';
+/**
+ * createOpsClient — creates an Ops SDK instance authenticated with an OPS_API_KEY.
+ * Use for daemon/runtime/MCP server operations against /api/v1/*.
+ * Includes retry with exponential backoff (3 attempts by default).
+ *
+ * INV-1: separate factory per auth mode — do not mix with createAdminClient or createAgentClient.
+ * INV-9: no onUnauthorized hook — Ops keys are rotated via secrets_sync, not interactively.
+ */
+export function createOpsClient(config) {
+    // Copilot review finding on PR #634: with neither credential set, the old code silently
+    // built a client whose getAuthToken() returns '' — every sub-client then sends an empty
+    // Bearer token and gets a confusing 401 instead of a clear configuration error at the
+    // point of misuse. Fail fast here instead (matches the doc comment's "at least one is
+    // required" contract).
+    if (!config.apiKey?.trim() && !config.jwt?.trim()) {
+        throw new Error('createOpsClient: at least one of apiKey or jwt must be provided');
+    }
+    const api = new OpsApiClient({
+        baseUrl: config.baseUrl,
+        apiKey: config.apiKey,
+        jwt: config.jwt,
+        retries: config.retries,
+        retryBaseMs: config.retryBaseMs,
+        retryableStatus: config.retryableStatus,
+    });
+    // F437/AC-8: the EFFECTIVE bearer (jwt when present, else apiKey — C434's rule,
+    // `OpsApiClient.getAuthToken()`) for the sub-clients below that build their own raw
+    // fetch/SSE requests outside `api`'s `executeWithRetry` and so need the token value
+    // directly, not just an `OpsApiClient` instance.
+    const authToken = api.getAuthToken();
+    const multipart = new MultipartClient({
+        baseUrl: config.baseUrl,
+        basePath: '/api/v1',
+        getAuthHeader: async () => `Bearer ${authToken}`,
+    });
+    return {
+        tasks: new TasksOpsClient(api),
+        sessions: new SessionsOpsClient(api),
+        agents: new AgentsOpsClient(api),
+        memories: new MemoriesOpsClient(api),
+        documents: new DocumentsOpsClient(api),
+        projects: new ProjectsOpsClient(api),
+        conversationMessages: new ConversationMessagesOpsClient(api),
+        usageWorkflows: new UsageWorkflowsOpsClient(api),
+        realtime: new RealtimeOpsClient(api),
+        db: new OpsDbClient(api, authToken),
+        storage: new OpsStorageClient(api, multipart, authToken),
+        northflank: new OpsNorthflankClient(api, authToken),
+        mq: new OpsMqClient(api),
+        logs: new OpsLogsClient(api),
+        leads: new LeadsOpsClient(api),
+        agentAuthorization: new AgentAuthorizationOpsClient(api),
+        metrics: new MetricsOpsClient(api),
+        campaignEvents: new CampaignEventsOpsClient(api),
+        githubCredential: new GithubCredentialOpsClient(api),
+        // OpsApiClient uses full /api/v1/* paths and does not unwrap the { data }
+        // envelope — exactly the WorkersTransport contract.
+        workers: new OpsWorkersClient({
+            getRaw: (path) => api.get(path),
+            post: (path, body) => api.post(path, body),
+            patch: (path, body) => api.patch(path, body),
+            delete: (path) => api.delete(path),
+        }),
+    };
+}
+//# sourceMappingURL=ops-sdk.js.map

package/dist/factory/ops-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ops-sdk.js","sourceRoot":"","sources":["../../src/factory/ops-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AACnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAA;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AACtF,OAAO,EAAE,yBAAyB,EAAE,MAAM,gDAAgD,CAAA;AAgD1F;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAChD,wFAAwF;IACxF,wFAAwF;IACxF,sFAAsF;IACtF,sFAAsF;IACtF,uBAAuB;IACvB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;KAC1C,CAAC,CAAA;IACF,gFAAgF;IAChF,oFAAoF;IACpF,oFAAoF;IACpF,iDAAiD;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAA;IAEpC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QAClC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,SAAS;QACnB,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,SAAS,EAAE;KACnD,CAAC,CAAA;IAEF,OAAO;QACH,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;QAC9B,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,MAAM,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC;QAChC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,SAAS,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC;QACtC,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,oBAAoB,EAAE,IAAI,6BAA6B,CAAC,GAAG,CAAC;QAC5D,cAAc,EAAE,IAAI,uBAAuB,CAAC,GAAG,CAAC;QAChD,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC;QACpC,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;QACnC,OAAO,EAAE,IAAI,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC;QACxD,UAAU,EAAE,IAAI,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC;QACnD,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC;QACxB,IAAI,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC;QAC5B,KAAK,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC;QAC9B,kBAAkB,EAAE,IAAI,2BAA2B,CAAC,GAAG,CAAC;QACxD,OAAO,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC;QAClC,cAAc,EAAE,IAAI,uBAAuB,CAAC,GAAG,CAAC;QAChD,gBAAgB,EAAE,IAAI,yBAAyB,CAAC,GAAG,CAAC;QACpD,0EAA0E;QAC1E,oDAAoD;QACpD,OAAO,EAAE,IAAI,gBAAgB,CAAC;YAC1B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAC/B,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YAC1C,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC;YAC5C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;SACrC,CAAC;KACL,CAAA;AACL,CAAC"}

package/dist/index.additional-client-types.d.ts

@@ -0,0 +1,24 @@
+/**
+ * index.additional-client-types.ts — C823 (loc-guard extraction, index.ts's 300-line
+ * threshold).
+ *
+ * Re-exports the "Additional client types" section that used to live inline in index.ts,
+ * PLUS the new F515 metering / C796 campaign-analytics client types this task adds:
+ *   clients/admin/usage.client.ts             — pre-existing (AggregatedUsageFilter, Cost
+ *                                                Explorer types)
+ *   clients/admin/activity.client.ts          — pre-existing (ActivitySummary* types)
+ *   clients/admin/documents.client.ts         — pre-existing (DocumentListResult)
+ *   clients/admin/metrics.client.ts           — admin.metrics.requests()/campaigns()
+ *   clients/ops/metrics-ops.client.ts         — ops.metrics.correlation()
+ *   clients/ops/campaign-events-ops.client.ts — ops.campaignEvents.create()
+ */
+export type { AggregatedUsageFilter } from './clients/admin/usage.client.js';
+export type { ExecutionCostFilter, ExecutionCostRow, ExecutionCostData, } from './clients/admin/usage.client.js';
+export type { ExplorerDimension, ExplorerFilter, ExplorerItem, ExplorerTotals, ExplorerChildrenCounts, ExplorerResult, } from './clients/admin/usage.client.js';
+export type { ActivitySummaryDto, ActivitySummaryFilter, ActivityTaskRow, } from './clients/admin/activity.client.js';
+export type { DocumentListResult } from './clients/admin/documents.client.js';
+export type { MetricsRequestsGroupBy, MetricsRequestsFilter, MetricsRow, MetricsRequestsResult, CampaignMetricsGroupBy, CampaignMetricsFilter, CampaignMetricsRow, } from './clients/admin/metrics.client.js';
+export type { MetricsCorrelationFilter, CorrelatedRequestRecord, } from './clients/ops/metrics-ops.client.js';
+export type { CampaignEventType, CampaignEventInput, } from './clients/ops/campaign-events-ops.client.js';
+export type { OwnerScopeParams, OwnerScopeTree, OwnerScopeTreeNode, OwnerScopeProject, } from './clients/ops/thread-messaging.owner-scope.js';
+//# sourceMappingURL=index.additional-client-types.d.ts.map

package/dist/index.additional-client-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.additional-client-types.d.ts","sourceRoot":"","sources":["../src/index.additional-client-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,YAAY,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAA;AAC5E,YAAY,EACR,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GACpB,MAAM,iCAAiC,CAAA;AAExC,YAAY,EACR,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,cAAc,GACjB,MAAM,iCAAiC,CAAA;AACxC,YAAY,EACR,kBAAkB,EAClB,qBAAqB,EACrB,eAAe,GAClB,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAA;AAE7E,YAAY,EACR,sBAAsB,EACtB,qBAAqB,EACrB,UAAU,EACV,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,GACrB,MAAM,mCAAmC,CAAA;AAC1C,YAAY,EACR,wBAAwB,EACxB,uBAAuB,GAC1B,MAAM,qCAAqC,CAAA;AAC5C,YAAY,EACR,iBAAiB,EACjB,kBAAkB,GACrB,MAAM,6CAA6C,CAAA;AAKpD,YAAY,EACR,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,GACpB,MAAM,+CAA+C,CAAA"}

package/dist/index.additional-client-types.js

@@ -0,0 +1,16 @@
+/**
+ * index.additional-client-types.ts — C823 (loc-guard extraction, index.ts's 300-line
+ * threshold).
+ *
+ * Re-exports the "Additional client types" section that used to live inline in index.ts,
+ * PLUS the new F515 metering / C796 campaign-analytics client types this task adds:
+ *   clients/admin/usage.client.ts             — pre-existing (AggregatedUsageFilter, Cost
+ *                                                Explorer types)
+ *   clients/admin/activity.client.ts          — pre-existing (ActivitySummary* types)
+ *   clients/admin/documents.client.ts         — pre-existing (DocumentListResult)
+ *   clients/admin/metrics.client.ts           — admin.metrics.requests()/campaigns()
+ *   clients/ops/metrics-ops.client.ts         — ops.metrics.correlation()
+ *   clients/ops/campaign-events-ops.client.ts — ops.campaignEvents.create()
+ */
+export {};
+//# sourceMappingURL=index.additional-client-types.js.map

package/dist/index.additional-client-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.additional-client-types.js","sourceRoot":"","sources":["../src/index.additional-client-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/dist/legacy/sdk-factory.d.ts

@@ -0,0 +1,37 @@
+/**
+ * SdkFactory — legacy wrapper for backward compatibility.
+ * @deprecated Use createAgentClient() + createOpsClient() instead.
+ *
+ * Previously in @beacon-build/client. Preserved for mcp/agent migration.
+ */
+import type { AgentContext } from '@beacon-build/core';
+import { AgentTasksClient } from '../clients/agent/tasks.client.js';
+import { AgentMessagingClient } from '../clients/agent/messaging.client.js';
+import { MemoriesOpsClient } from '../clients/ops/memories-ops.client.js';
+import { SessionsOpsClient } from '../clients/ops/sessions-ops.client.js';
+import { ToolCallsOpsClient } from '../clients/ops/tool-calls-ops.client.js';
+import { AgentsOpsClient } from '../clients/ops/agents-ops.client.js';
+import { TaskConfigClient } from '../clients/shared/task-config.client.js';
+export interface AgentSdkOptions {
+    /** Agent-scoped JWT issued by POST /api/v1/agent-token */
+    agentToken: string;
+    /** Base URL for the beacon API */
+    apiUrl: string;
+    /** OpsApiKey for /api/v1 endpoints */
+    apiKey: string;
+}
+export interface AgentSdk {
+    tasks: AgentTasksClient;
+    messaging: AgentMessagingClient;
+    memories: MemoriesOpsClient;
+    sessions: SessionsOpsClient;
+    toolCalls: ToolCallsOpsClient;
+    agents: AgentsOpsClient;
+    /** F143: Task config client for accessing task configuration */
+    taskConfig: TaskConfigClient;
+}
+/** @deprecated Use createAgentClient() + createOpsClient() instead */
+export declare class SdkFactory {
+    static forAgent(_context: AgentContext, opts: AgentSdkOptions): AgentSdk;
+}
+//# sourceMappingURL=sdk-factory.d.ts.map

package/dist/legacy/sdk-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-factory.d.ts","sourceRoot":"","sources":["../../src/legacy/sdk-factory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAGtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAA;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAA;AAE1E,MAAM,WAAW,eAAe;IAC5B,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAA;IAClB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAA;IACd,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,QAAQ;IACrB,KAAK,EAAE,gBAAgB,CAAA;IACvB,SAAS,EAAE,oBAAoB,CAAA;IAC/B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,SAAS,EAAE,kBAAkB,CAAA;IAC7B,MAAM,EAAE,eAAe,CAAA;IACvB,gEAAgE;IAChE,UAAU,EAAE,gBAAgB,CAAA;CAC/B;AAED,sEAAsE;AACtE,qBAAa,UAAU;IACnB,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,QAAQ;CAiB3E"}