@beacon-build/sdk 2.5.0 → 2.6.0

package/dist/clients/admin/portal.client.d.ts

@@ -1,104 +0,0 @@
-import type { HttpClient } from '../../transport/http-client.js';
-export type PortalType = 'workflows' | 'sops' | 'skills';
-export interface PortalListResponse {
-    data: unknown[];
-    meta: {
-        page: number;
-        limit: number;
-        total: number;
-    };
-}
-export interface PortalDetailResponse {
-    data: unknown;
-}
-export interface PortalSkillValidation {
-    valid: boolean;
-    errors: string[];
-    warnings: string[];
-    checks: {
-        id: string;
-        ok: boolean;
-    }[];
-}
-/**
- * AdminPortalClient — project portal operations (workflows, SOPs, skills).
- * Backs the portal UI (F271).
- *
- * FS54 hard cutover (2026-08-04): BOTH portal catalogs moved off the shared
- * `/projects/:slug/{type}` path onto their canonical resources, dispatched internally here so
- * `PortalService`/`PortalServiceImpl` (apps/platform) and every `sdk.portal.*` caller keep
- * their existing call shape unchanged:
- *  - `skills` → `/skill-executions/by-project/:slug{,/detail,/validate}` (C567, Chore 6)
- *  - `workflows`/`sops` → `/workflow-instances/catalog{,/detail}?project=&kind=workflow|sop`
- *    (C568, Chore 7 — member-facing projection of the consolidated workflow-instances resource).
- */
-export declare class AdminPortalClient {
-    private readonly http;
-    constructor(http: HttpClient);
-    /** List portal definitions of a given type for a project. */
-    list<T = PortalListResponse>(project: string, type: PortalType, options?: {
-        archived?: boolean;
-        limit?: number;
-        sort?: string;
-        /** F448/AC-9/AC-10: optional scope narrowing, mutually exclusive. */
-        agentId?: string;
-        beaconSessionId?: string;
-        /** C830: the Activity 24h/7d/30d window, ISO timestamps (pattern: metrics.client.ts).
-         *  Omitted defaults server-side to the last 30d. */
-        since?: string;
-        until?: string;
-    }): Promise<T>;
-    /** Detail for one portal definition, by name. */
-    detail<T = PortalDetailResponse>(project: string, type: PortalType, name: string): Promise<T>;
-    /** Validate a skill by name. */
-    validateSkill(project: string, name: string): Promise<{
-        data: PortalSkillValidation;
-    }>;
-    /**
-     * C954/AC-1/AC-2: archive/unarchive a capability (skill/sop/workflow) document. Calls the
-     * MEMBER-tier `PATCH /portal-capabilities/{project}/{type}/{name}/status` route — a real
-     * project owner or project admin (not necessarily a platform admin/vendor) can reach this.
-     * Deliberately a SEPARATE top-level path from `/documents` (not reusing that admin/vendor-
-     * tier prefix) — see the route's own doc comment for the routing collision that caused.
-     * 403s server-side (`assertCanManageCapabilityArchive`) for a caller without that grant.
-     */
-    setStatus(project: string, type: PortalType, name: string, status: 'active' | 'archived'): Promise<void>;
-    /**
-     * F589/F593 (AC-4/AC-15): create a local override of an inherited skill. Skills-only for
-     * now — the SOP/workflow catalog routes are not wired to the effective-set resolver yet
-     * (same increment boundary F592 already drew for source labels).
-     */
-    createOverride<T = {
-        data: unknown;
-    }>(project: string, name: string, justification: string): Promise<T>;
-    /** F589/F593 (AC-6): remove a local override, reverting to the inherited version. */
-    removeOverride(project: string, name: string): Promise<void>;
-    /** F589/F593 (AC-4/AC-7): fetch an override — both versions, attribution, drift status. */
-    getOverride<T = {
-        data: unknown;
-    }>(project: string, name: string): Promise<T>;
-    /**
-     * F589/F594 (AC-2/AC-9/AC-16): set (or clear) a capability's ACL visibility. Skills-only
-     * for now — same increment boundary as override above.
-     */
-    setVisibility<T = {
-        data: unknown;
-    }>(project: string, name: string, visibility: 'private' | 'org-only' | null): Promise<T>;
-    /** F589/F594 (AC-16): grant a private share (selected sub-org(s) or the whole subtree). */
-    createShare<T = {
-        data: unknown;
-    }>(project: string, name: string, share: {
-        scope: 'selected-org';
-        granteeOrgId: string;
-    } | {
-        scope: 'all-descendants';
-    }): Promise<T>;
-    /** F589/F594 (AC-16): list a capability's active private shares. */
-    getShares<T = {
-        data: unknown[];
-    }>(project: string, name: string): Promise<T>;
-    /** F589/F594 (AC-12): revoke a private share — omit `granteeOrgId` for the single
-     *  all-descendants grant. */
-    revokeShare(project: string, name: string, granteeOrgId?: string): Promise<void>;
-}
-//# sourceMappingURL=portal.client.d.ts.map

package/dist/clients/admin/portal.client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"portal.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/portal.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,MAAM,UAAU,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAA;AAExD,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,OAAO,EAAE,CAAA;IACf,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvD;AAED,MAAM,WAAW,oBAAoB;IACjC,IAAI,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,qBAAqB;IAClC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACxC;AAcD;;;;;;;;;;;GAWG;AACH,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,6DAA6D;IACvD,IAAI,CAAC,CAAC,GAAG,kBAAkB,EAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,OAAO,CAAC,EAAE;QACN,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,qEAAqE;QACrE,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB;4DACoD;QACpD,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,CAAA;KACjB,GACF,OAAO,CAAC,CAAC,CAAC;IAoBb,iDAAiD;IAC3C,MAAM,CAAC,CAAC,GAAG,oBAAoB,EACjC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,CAAC;IAYb,gCAAgC;IAC1B,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,qBAAqB,CAAA;KAAE,CAAC;IAO5F;;;;;;;OAOG;IACG,SAAS,CACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,QAAQ,GAAG,UAAU,GAC9B,OAAO,CAAC,IAAI,CAAC;IAOhB;;;;OAIG;IACG,cAAc,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,EACtC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACtB,OAAO,CAAC,CAAC,CAAC;IAOb,qFAAqF;IAC/E,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlE,2FAA2F;IACrF,WAAW,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAOnF;;;OAGG;IACG,aAAa,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,EACrC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,SAAS,GAAG,UAAU,GAAG,IAAI,GAC1C,OAAO,CAAC,CAAC,CAAC;IAOb,2FAA2F;IACrF,WAAW,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,EACnC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QAAE,KAAK,EAAE,cAAc,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE,GACtF,OAAO,CAAC,CAAC,CAAC;IAOb,oEAAoE;IAC9D,SAAS,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAOnF;iCAC6B;IACvB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAOzF"}

package/dist/clients/admin/portal.client.js

@@ -1,122 +0,0 @@
-/** `workflows`/`sops` PortalType → the workflow-instances catalog's `kind` query value. */
-function catalogKind(type) {
-    return type === 'workflows' ? 'workflow' : 'sop';
-}
-/** C954: PortalType (plural, UI-facing) → the singular `documents.type` value the
- *  capability-status PATCH route's path segment expects. */
-function capabilityDocType(type) {
-    if (type === 'skills')
-        return 'skill';
-    return catalogKind(type);
-}
-/**
- * AdminPortalClient — project portal operations (workflows, SOPs, skills).
- * Backs the portal UI (F271).
- *
- * FS54 hard cutover (2026-08-04): BOTH portal catalogs moved off the shared
- * `/projects/:slug/{type}` path onto their canonical resources, dispatched internally here so
- * `PortalService`/`PortalServiceImpl` (apps/platform) and every `sdk.portal.*` caller keep
- * their existing call shape unchanged:
- *  - `skills` → `/skill-executions/by-project/:slug{,/detail,/validate}` (C567, Chore 6)
- *  - `workflows`/`sops` → `/workflow-instances/catalog{,/detail}?project=&kind=workflow|sop`
- *    (C568, Chore 7 — member-facing projection of the consolidated workflow-instances resource).
- */
-export class AdminPortalClient {
-    http;
-    constructor(http) {
-        this.http = http;
-    }
-    /** List portal definitions of a given type for a project. */
-    async list(project, type, options) {
-        const qs = new URLSearchParams({ limit: String(options?.limit ?? 200) });
-        if (options?.archived)
-            qs.set('status', 'archived');
-        // C353: server-side row sort (activity/friction/success_rate/avg_cost) — omitted falls
-        // back to the route's default (most recently updated first).
-        if (options?.sort)
-            qs.set('sort', options.sort);
-        if (options?.agentId)
-            qs.set('agentId', options.agentId);
-        if (options?.beaconSessionId)
-            qs.set('beaconSessionId', options.beaconSessionId);
-        if (options?.since)
-            qs.set('since', options.since);
-        if (options?.until)
-            qs.set('until', options.until);
-        if (type === 'skills') {
-            return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}?${qs.toString()}`);
-        }
-        qs.set('project', project);
-        qs.set('kind', catalogKind(type));
-        return this.http.getEnvelope(`/workflow-instances/catalog?${qs.toString()}`);
-    }
-    /** Detail for one portal definition, by name. */
-    async detail(project, type, name) {
-        const qs = new URLSearchParams({ name });
-        if (type === 'skills') {
-            return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/detail?${qs.toString()}`);
-        }
-        qs.set('project', project);
-        qs.set('kind', catalogKind(type));
-        return this.http.getEnvelope(`/workflow-instances/catalog/detail?${qs.toString()}`);
-    }
-    /** Validate a skill by name. */
-    async validateSkill(project, name) {
-        const qs = new URLSearchParams({ name });
-        return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/validate?${qs.toString()}`);
-    }
-    /**
-     * C954/AC-1/AC-2: archive/unarchive a capability (skill/sop/workflow) document. Calls the
-     * MEMBER-tier `PATCH /portal-capabilities/{project}/{type}/{name}/status` route — a real
-     * project owner or project admin (not necessarily a platform admin/vendor) can reach this.
-     * Deliberately a SEPARATE top-level path from `/documents` (not reusing that admin/vendor-
-     * tier prefix) — see the route's own doc comment for the routing collision that caused.
-     * 403s server-side (`assertCanManageCapabilityArchive`) for a caller without that grant.
-     */
-    async setStatus(project, type, name, status) {
-        await this.http.patch(`/portal-capabilities/${encodeURIComponent(project)}/${encodeURIComponent(capabilityDocType(type))}/${encodeURIComponent(name)}/status`, { status });
-    }
-    /**
-     * F589/F593 (AC-4/AC-15): create a local override of an inherited skill. Skills-only for
-     * now — the SOP/workflow catalog routes are not wired to the effective-set resolver yet
-     * (same increment boundary F592 already drew for source labels).
-     */
-    async createOverride(project, name, justification) {
-        return this.http.postEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/override`, { name, justification });
-    }
-    /** F589/F593 (AC-6): remove a local override, reverting to the inherited version. */
-    async removeOverride(project, name) {
-        const qs = new URLSearchParams({ name });
-        await this.http.delete(`/skill-executions/by-project/${encodeURIComponent(project)}/override?${qs.toString()}`);
-    }
-    /** F589/F593 (AC-4/AC-7): fetch an override — both versions, attribution, drift status. */
-    async getOverride(project, name) {
-        const qs = new URLSearchParams({ name });
-        return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/override?${qs.toString()}`);
-    }
-    /**
-     * F589/F594 (AC-2/AC-9/AC-16): set (or clear) a capability's ACL visibility. Skills-only
-     * for now — same increment boundary as override above.
-     */
-    async setVisibility(project, name, visibility) {
-        return this.http.patch(`/skill-executions/by-project/${encodeURIComponent(project)}/visibility`, { name, visibility });
-    }
-    /** F589/F594 (AC-16): grant a private share (selected sub-org(s) or the whole subtree). */
-    async createShare(project, name, share) {
-        return this.http.postEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/share`, { name, ...share });
-    }
-    /** F589/F594 (AC-16): list a capability's active private shares. */
-    async getShares(project, name) {
-        const qs = new URLSearchParams({ name });
-        return this.http.getEnvelope(`/skill-executions/by-project/${encodeURIComponent(project)}/share?${qs.toString()}`);
-    }
-    /** F589/F594 (AC-12): revoke a private share — omit `granteeOrgId` for the single
-     *  all-descendants grant. */
-    async revokeShare(project, name, granteeOrgId) {
-        const qs = new URLSearchParams({ name });
-        if (granteeOrgId)
-            qs.set('granteeOrgId', granteeOrgId);
-        await this.http.delete(`/skill-executions/by-project/${encodeURIComponent(project)}/share?${qs.toString()}`);
-    }
-}
-//# sourceMappingURL=portal.client.js.map

package/dist/clients/admin/portal.client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"portal.client.js","sourceRoot":"","sources":["../../../src/clients/admin/portal.client.ts"],"names":[],"mappings":"AAoBA,2FAA2F;AAC3F,SAAS,WAAW,CAAC,IAA0B;IAC3C,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAA;AACpD,CAAC;AAED;4DAC4D;AAC5D,SAAS,iBAAiB,CAAC,IAAgB;IACvC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAA;IACrC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAA;AAC5B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CACN,OAAe,EACf,IAAgB,EAChB,OAWC;QAED,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,IAAI,OAAO,EAAE,QAAQ;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACnD,uFAAuF;QACvF,6DAA6D;QAC7D,IAAI,OAAO,EAAE,IAAI;YAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,OAAO,EAAE,OAAO;YAAE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAA;QACxD,IAAI,OAAO,EAAE,eAAe;YAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QAChF,IAAI,OAAO,EAAE,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,OAAO,EAAE,KAAK;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QAClD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CACjF,CAAA;QACL,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1B,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,+BAA+B,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CACR,OAAe,EACf,IAAgB,EAChB,IAAY;QAEZ,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACxF,CAAA;QACL,CAAC;QACD,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QAC1B,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAI,sCAAsC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,IAAY;QAC7C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC1F,CAAA;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CACX,OAAe,EACf,IAAgB,EAChB,IAAY,EACZ,MAA6B;QAE7B,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CACjB,wBAAwB,kBAAkB,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,EACvI,EAAE,MAAM,EAAE,CACb,CAAA;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAChB,OAAe,EACf,IAAY,EACZ,aAAqB;QAErB,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CACzB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,WAAW,EACtE,EAAE,IAAI,EAAE,aAAa,EAAE,CAC1B,CAAA;IACL,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,IAAY;QAC9C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC1F,CAAA;IACL,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,WAAW,CAAwB,OAAe,EAAE,IAAY;QAClE,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC1F,CAAA;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACf,OAAe,EACf,IAAY,EACZ,UAAyC;QAEzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAClB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,aAAa,EACxE,EAAE,IAAI,EAAE,UAAU,EAAE,CACvB,CAAA;IACL,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,WAAW,CACb,OAAe,EACf,IAAY,EACZ,KAAqF;QAErF,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CACzB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EACnE,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CACrB,CAAA;IACL,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,SAAS,CAA0B,OAAe,EAAE,IAAY;QAClE,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CACxB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvF,CAAA;IACL,CAAC;IAED;iCAC6B;IAC7B,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,YAAqB;QAClE,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxC,IAAI,YAAY;YAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,YAAY,CAAC,CAAA;QACtD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,gCAAgC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvF,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/projects.client.d.ts

@@ -1,190 +0,0 @@
-import type { ProjectApiItem, ProjectAccessRole, ProjectIsolation } from '@beacon-build/core';
-import type { HttpClient } from '../../transport/http-client.js';
-/** F438/AC-5/AC-6/AC-20: self-serve create input — mirrors the `POST /v1/projects` request
- * shape. `ownerOrgId` omitted/undefined means the caller becomes the direct user-owner. */
-export interface CreateProjectInput {
-    slug: string;
-    name: string;
-    ownerOrgId?: string;
-}
-export interface ProjectOwnershipDto {
-    slug: string;
-    name: string;
-    orgId: string | null;
-    ownerUserId: string | null;
-}
-/** F429/F438/F458: `POST /{slug}/transfer-ownership` body — exactly one of the two, server
- * validates the XOR (400 if neither/both). */
-export type TransferOwnershipInput = {
-    newOrgId: string;
-} | {
-    newOwnerUserId: string;
-};
-export interface TransferOwnershipResultDto {
-    slug: string;
-    orgId: string | null;
-    ownerUserId: string | null;
-}
-/** B611: a resolved identity as inlined onto `GET /{slug}/access`'s owner/grants — resolved
- * SERVER-SIDE (not via the separate, vendor/org-admin-gated `GET /v1/users`, which 403s for a
- * plain project contributor and left the Access UI unable to resolve names, F442/B611). */
-export interface ProjectAccessIdentityDto {
-    id: string;
-    name: string | null;
-    email: string;
-    avatarUrl: string | null;
-}
-/** F442/AC-8: a single `ProjectAccess` collaborator grant, as returned by `GET /{slug}/access`.
- * `principal` (B611) is null only for the edge case of a grant whose user row no longer
- * exists — `principalId` stays the raw id for that fallback. */
-export interface ProjectAccessGrantDto {
-    principalId: string;
-    role: string;
-    invitedBy: string | null;
-    createdAt: string;
-    principal: ProjectAccessIdentityDto | null;
-}
-/** F442/AC-8/FLAG-1: `GET /{slug}/access` response — owner is NOT a grant row, surfaced
- * separately so the UI can render it distinctly (F442/INV-4). `owner` (B611) is the resolved
- * identity, null when `ownerUserId` is null or (edge case) its user row no longer exists. */
-export interface ProjectAccessListDto {
-    ownerUserId: string | null;
-    owner: ProjectAccessIdentityDto | null;
-    orgId: string | null;
-    grants: ProjectAccessGrantDto[];
-}
-/**
- * F442/AC-8: `POST /{slug}/access` body — upsert semantics (re-granting an existing
- * `principalId` updates its role, no duplicate-row error).
- * F452/AC-30: `role` is `ProjectAccessRole` — the SAME type `PROJECT_ACCESS_ROLES` enumerates,
- * never a second, hand-copied union (this was one — silently rejecting `reviewer`/`contributor`
- * at the SDK boundary even after the dialog above offered them).
- */
-export interface GrantProjectAccessInput {
-    principalId: string;
-    role: ProjectAccessRole;
-}
-export interface ProjectAccessGrantResultDto {
-    project: string;
-    principalId: string;
-    role: string;
-}
-/** F449/AC-9: a project secret's metadata — never a value (INV-1). */
-export interface ProjectSecretEntryDto {
-    name: string;
-    isSet: boolean;
-    updatedAt: string | null;
-}
-/** One org's row in the tree SKELETON — hierarchy shape + direct project COUNT, no project
- * payloads. Field names (`id`/`parentId`) mirror `OrganizationDto`/`OrgMemberTreeEntryDto`
- * so the same `buildOrgTree` groups this tree too (no second tree builder). */
-export interface OrgProjectTreeEntryDto {
-    id: string;
-    name: string;
-    parentId: string | null;
-    projectCount: number;
-}
-export interface ProjectOrgTreeDto {
-    orgs: OrgProjectTreeEntryDto[];
-    /** Always 0 for an org-admin scope. */
-    unaffiliatedCount: number;
-}
-/** GET /projects/org/{orgId}/projects and GET /projects/unaffiliated share this shape —
- * `ownerName`/`ownerEmail` are present for an unaffiliated (org-less) row only. */
-export interface TreeProjectDto {
-    slug: string;
-    name: string;
-    status: string;
-    ownerName?: string | null;
-    ownerEmail?: string | null;
-    path?: string;
-    codePath?: string;
-}
-/** C924 (F575/B827 follow-up): one row of `GET /projects/reach-summary`. */
-export interface ReachSummaryItemDto {
-    slug: string;
-    name: string;
-    status: string;
-}
-/** C924: `GET /projects/reach-summary`'s paginated envelope. */
-export interface ReachSummaryPageDto {
-    data: ReachSummaryItemDto[];
-    meta: {
-        page: number;
-        limit: number;
-        total: number;
-    };
-}
-export declare class AdminProjectsClient {
-    private readonly http;
-    constructor(http: HttpClient);
-    /** F516/AC-1 stage 1: the tree skeleton (hierarchy + direct project counts, no payloads). */
-    getOrgTree(): Promise<ProjectOrgTreeDto>;
-    /** F516/AC-1 stage 2: one org's direct project list, loaded on that org's first expand. */
-    getOrgProjects(orgId: string): Promise<TreeProjectDto[]>;
-    /** F516: the always-visible "Ohne Organisation" section (vendor only — org-admin always
-     * gets `[]`). */
-    getUnaffiliatedProjects(): Promise<TreeProjectDto[]>;
-    /** C803: `scope: 'mine'` narrows to only the caller's explicit-role projects (ownership
-     * or a ProjectAccess grant) — the personal Projects page opts into this; every other
-     * caller of `list()` keeps the existing broader default.
-     * C821/AC-1: `includeArchived` (mine-scope only, server-side no-op otherwise) is the
-     * "Archivierte anzeigen" toggle's request half — previously never sent at all. */
-    list(options?: {
-        scope?: 'mine';
-        includeArchived?: boolean;
-    }): Promise<ProjectApiItem[]>;
-    /** C924 (F575/B827 follow-up): paginated `{slug,name,status}` list matching
-     * `resolveVisibleProjectSlugs` EXACTLY — for a caller (e.g. the Cost Cockpit) that must
-     * fully rely on its own reach set rather than defensively filter an already-capped list.
-     * See `services/api/src/routes/projects-reach-summary.ts`'s module doc for why `list()`
-     * above is not sufficient for this case. */
-    reachSummary(options?: {
-        page?: number;
-        limit?: number;
-    }): Promise<ReachSummaryPageDto>;
-    get(slug: string): Promise<ProjectApiItem | null>;
-    /** F438/AC-5/AC-6/AC-20: self-serve create — the Portal's `ProjectServiceImpl.create()`
-     * call target (mirrors `AdminOrganizationsClient.create()`). */
-    create(input: CreateProjectInput): Promise<ProjectOwnershipDto>;
-    /** F482/AC-3: archive a project — cascades to its active agents (server-side,
-     * one transaction). Idempotent. Replaces `delete()` (removed — the HTTP DELETE route
-     * now 405s unconditionally, INV-1). */
-    archive(slug: string): Promise<{
-        slug: string;
-        status: string;
-    }>;
-    /** F482/AC-3b: reactivate a project — its agents are NOT auto-reactivated (INV-8).
-     * Idempotent. */
-    reactivate(slug: string): Promise<{
-        slug: string;
-        status: string;
-    }>;
-    /** F458/AC-11/AC-12: the Transfer-Ownership dialog's write target — the ALREADY-BUILT
-     * F429/F438 endpoint (`assertVendor`, audit-logged, idempotent server-side), this SDK
-     * client is F458's first real consumer of it (mirrors F429's own note "no SDK wrapper
-     * until a real consumer needs one"). */
-    transferOwnership(slug: string, input: TransferOwnershipInput): Promise<TransferOwnershipResultDto>;
-    /** C585/AC-1: full-replace PATCH of `Project.config` — the lightweight Project-Settings
-     * editor's single "Save" (owner, org-admin, or vendor — see `projects-config.ts`). */
-    updateConfig(slug: string, config: Record<string, unknown>): Promise<void>;
-    /** F513/AC-2: full-replace PATCH of `Project.isolated` — the Visibility section's Save
-     * (owner, org-admin, or vendor — see `projects-config.ts`). Distinct from `updateConfig`:
-     * `isolated` is its own top-level column, not part of the `config` JSON blob. */
-    updateIsolation(slug: string, isolated: ProjectIsolation): Promise<void>;
-    /** F442/AC-8/FLAG-1: `GET /{slug}/access` — list the project's owner + collaborator
-     * grants. Guard is `assertOwnershipForSlug` (any caller who can already see the project). */
-    accessList(slug: string): Promise<ProjectAccessListDto>;
-    /** F442/AC-4/AC-5/AC-8/FLAG-1: `POST /{slug}/access` — grant (or, for an already-granted
-     * `principalId`, re-role via upsert — there is no PATCH). */
-    accessGrant(slug: string, input: GrantProjectAccessInput): Promise<ProjectAccessGrantResultDto>;
-    /** F442/AC-6/AC-8/FLAG-1: `DELETE /{slug}/access/{principalId}` — idempotent revoke. */
-    accessRevoke(slug: string, principalId: string): Promise<void>;
-    /** F449/AC-9: `GET /{slug}/secrets` — names + isSet + updatedAt, never a value. */
-    listSecrets(slug: string): Promise<ProjectSecretEntryDto[]>;
-    /** F449/AC-9: `PUT /{slug}/secrets/{name}` — plaintext sent once, encrypted server-side. */
-    setSecret(slug: string, name: string, value: string): Promise<ProjectSecretEntryDto>;
-    /** F449/AC-9: `DELETE /{slug}/secrets/{name}` — idempotent. */
-    removeSecret(slug: string, name: string): Promise<void>;
-}
-//# sourceMappingURL=projects.client.d.ts.map

package/dist/clients/admin/projects.client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"projects.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE;2FAC2F;AAC3F,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;8CAC8C;AAC9C,MAAM,MAAM,sBAAsB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtF,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED;;2FAE2F;AAC3F,MAAM,WAAW,wBAAwB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED;;gEAEgE;AAChE,MAAM,WAAW,qBAAqB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,wBAAwB,GAAG,IAAI,CAAA;CAC7C;AAED;;6FAE6F;AAC7F,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,wBAAwB,GAAG,IAAI,CAAA;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,qBAAqB,EAAE,CAAA;CAClC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,iBAAiB,CAAA;CAC1B;AAED,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAID;;+EAE+E;AAC/E,MAAM,WAAW,sBAAsB;IACnC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,sBAAsB,EAAE,CAAA;IAC9B,uCAAuC;IACvC,iBAAiB,EAAE,MAAM,CAAA;CAC5B;AAED;mFACmF;AACnF,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACjB;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAChC,IAAI,EAAE,mBAAmB,EAAE,CAAA;IAC3B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;CACvD;AAED,qBAAa,mBAAmB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,6FAA6F;IACvF,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI9C,2FAA2F;IACrF,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAM9D;qBACiB;IACX,uBAAuB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAI1D;;;;sFAIkF;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAQ9F;;;;gDAI4C;IACtC,YAAY,CAAC,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAWvF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAQvD;oEACgE;IAC1D,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIrE;;2CAEuC;IACjC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMtE;qBACiB;IACX,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAMzE;;;4CAGwC;IAClC,iBAAiB,CACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,sBAAsB,GAC9B,OAAO,CAAC,0BAA0B,CAAC;IAOtC;0FACsF;IAChF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhF;;qFAEiF;IAC3E,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9E;iGAC6F;IACvF,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7D;iEAC6D;IACvD,WAAW,CACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,uBAAuB,GAC/B,OAAO,CAAC,2BAA2B,CAAC;IAOvC,wFAAwF;IAClF,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpE,mFAAmF;IAC7E,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAQjE,4FAA4F;IACtF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAQ1F,+DAA+D;IACzD,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAKhE"}

package/dist/clients/admin/projects.client.js

@@ -1,122 +0,0 @@
-export class AdminProjectsClient {
-    http;
-    constructor(http) {
-        this.http = http;
-    }
-    /** F516/AC-1 stage 1: the tree skeleton (hierarchy + direct project counts, no payloads). */
-    async getOrgTree() {
-        return this.http.get('/projects/tree');
-    }
-    /** F516/AC-1 stage 2: one org's direct project list, loaded on that org's first expand. */
-    async getOrgProjects(orgId) {
-        return this.http.get(`/projects/org/${encodeURIComponent(orgId)}/projects`);
-    }
-    /** F516: the always-visible "Ohne Organisation" section (vendor only — org-admin always
-     * gets `[]`). */
-    async getUnaffiliatedProjects() {
-        return this.http.get('/projects/unaffiliated');
-    }
-    /** C803: `scope: 'mine'` narrows to only the caller's explicit-role projects (ownership
-     * or a ProjectAccess grant) — the personal Projects page opts into this; every other
-     * caller of `list()` keeps the existing broader default.
-     * C821/AC-1: `includeArchived` (mine-scope only, server-side no-op otherwise) is the
-     * "Archivierte anzeigen" toggle's request half — previously never sent at all. */
-    async list(options) {
-        const params = new URLSearchParams();
-        if (options?.scope)
-            params.set('scope', options.scope);
-        if (options?.includeArchived)
-            params.set('includeArchived', 'true');
-        const query = params.toString() ? `?${params.toString()}` : '';
-        return this.http.get(`/projects${query}`);
-    }
-    /** C924 (F575/B827 follow-up): paginated `{slug,name,status}` list matching
-     * `resolveVisibleProjectSlugs` EXACTLY — for a caller (e.g. the Cost Cockpit) that must
-     * fully rely on its own reach set rather than defensively filter an already-capped list.
-     * See `services/api/src/routes/projects-reach-summary.ts`'s module doc for why `list()`
-     * above is not sufficient for this case. */
-    async reachSummary(options) {
-        const params = new URLSearchParams();
-        if (options?.page)
-            params.set('page', String(options.page));
-        if (options?.limit)
-            params.set('limit', String(options.limit));
-        const query = params.toString() ? `?${params.toString()}` : '';
-        // `getEnvelope` (F291 pattern), NOT `get` — the caller needs BOTH `data` AND `meta.total`
-        // (`get`'s default `{data}`-only unwrap would silently drop `meta`, same reason
-        // pagination-total callers elsewhere use `getEnvelope`).
-        return this.http.getEnvelope(`/projects/reach-summary${query}`);
-    }
-    async get(slug) {
-        try {
-            return await this.http.get(`/projects/${encodeURIComponent(slug)}`);
-        }
-        catch (_err) {
-            return null;
-        }
-    }
-    /** F438/AC-5/AC-6/AC-20: self-serve create — the Portal's `ProjectServiceImpl.create()`
-     * call target (mirrors `AdminOrganizationsClient.create()`). */
-    async create(input) {
-        return this.http.post('/projects', input);
-    }
-    /** F482/AC-3: archive a project — cascades to its active agents (server-side,
-     * one transaction). Idempotent. Replaces `delete()` (removed — the HTTP DELETE route
-     * now 405s unconditionally, INV-1). */
-    async archive(slug) {
-        return this.http.post(`/projects/${encodeURIComponent(slug)}/archive`);
-    }
-    /** F482/AC-3b: reactivate a project — its agents are NOT auto-reactivated (INV-8).
-     * Idempotent. */
-    async reactivate(slug) {
-        return this.http.post(`/projects/${encodeURIComponent(slug)}/reactivate`);
-    }
-    /** F458/AC-11/AC-12: the Transfer-Ownership dialog's write target — the ALREADY-BUILT
-     * F429/F438 endpoint (`assertVendor`, audit-logged, idempotent server-side), this SDK
-     * client is F458's first real consumer of it (mirrors F429's own note "no SDK wrapper
-     * until a real consumer needs one"). */
-    async transferOwnership(slug, input) {
-        return this.http.post(`/projects/${encodeURIComponent(slug)}/transfer-ownership`, input);
-    }
-    /** C585/AC-1: full-replace PATCH of `Project.config` — the lightweight Project-Settings
-     * editor's single "Save" (owner, org-admin, or vendor — see `projects-config.ts`). */
-    async updateConfig(slug, config) {
-        await this.http.patch(`/projects/${encodeURIComponent(slug)}/config`, { config });
-    }
-    /** F513/AC-2: full-replace PATCH of `Project.isolated` — the Visibility section's Save
-     * (owner, org-admin, or vendor — see `projects-config.ts`). Distinct from `updateConfig`:
-     * `isolated` is its own top-level column, not part of the `config` JSON blob. */
-    async updateIsolation(slug, isolated) {
-        await this.http.patch(`/projects/${encodeURIComponent(slug)}/isolation`, { isolated });
-    }
-    /** F442/AC-8/FLAG-1: `GET /{slug}/access` — list the project's owner + collaborator
-     * grants. Guard is `assertOwnershipForSlug` (any caller who can already see the project). */
-    async accessList(slug) {
-        return this.http.get(`/projects/${encodeURIComponent(slug)}/access`);
-    }
-    /** F442/AC-4/AC-5/AC-8/FLAG-1: `POST /{slug}/access` — grant (or, for an already-granted
-     * `principalId`, re-role via upsert — there is no PATCH). */
-    async accessGrant(slug, input) {
-        return this.http.post(`/projects/${encodeURIComponent(slug)}/access`, input);
-    }
-    /** F442/AC-6/AC-8/FLAG-1: `DELETE /{slug}/access/{principalId}` — idempotent revoke. */
-    async accessRevoke(slug, principalId) {
-        await this.http.delete(`/projects/${encodeURIComponent(slug)}/access/${encodeURIComponent(principalId)}`);
-    }
-    /** F449/AC-9: `GET /{slug}/secrets` — names + isSet + updatedAt, never a value. */
-    async listSecrets(slug) {
-        // this.http already unwraps the `{ data }` envelope (http-client.ts), so return it directly —
-        // a second `.data` here was double-unwrapping to `undefined` (react-query "data is undefined").
-        return this.http.get(`/projects/${encodeURIComponent(slug)}/secrets`);
-    }
-    /** F449/AC-9: `PUT /{slug}/secrets/{name}` — plaintext sent once, encrypted server-side. */
-    async setSecret(slug, name, value) {
-        // this.http already unwraps the `{ data }` envelope — return directly (no second `.data`).
-        return this.http.put(`/projects/${encodeURIComponent(slug)}/secrets/${encodeURIComponent(name)}`, { value });
-    }
-    /** F449/AC-9: `DELETE /{slug}/secrets/{name}` — idempotent. */
-    async removeSecret(slug, name) {
-        await this.http.delete(`/projects/${encodeURIComponent(slug)}/secrets/${encodeURIComponent(name)}`);
-    }
-}
-//# sourceMappingURL=projects.client.js.map

package/dist/clients/admin/projects.client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"projects.client.js","sourceRoot":"","sources":["../../../src/clients/admin/projects.client.ts"],"names":[],"mappings":"AA+HA,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,6FAA6F;IAC7F,KAAK,CAAC,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAoB,gBAAgB,CAAC,CAAA;IAC7D,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,cAAc,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,WAAW,CACxD,CAAA;IACL,CAAC;IAED;qBACiB;IACjB,KAAK,CAAC,uBAAuB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,wBAAwB,CAAC,CAAA;IACpE,CAAC;IAED;;;;sFAIkF;IAClF,KAAK,CAAC,IAAI,CAAC,OAAuD;QAC9D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,OAAO,EAAE,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;QACtD,IAAI,OAAO,EAAE,eAAe;YAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,YAAY,KAAK,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED;;;;gDAI4C;IAC5C,KAAK,CAAC,YAAY,CAAC,OAA2C;QAC1D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QACpC,IAAI,OAAO,EAAE,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC3D,IAAI,OAAO,EAAE,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC9D,0FAA0F;QAC1F,gFAAgF;QAChF,yDAAyD;QACzD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAsB,0BAA0B,KAAK,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvF,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACf,CAAC;IACL,CAAC;IAED;oEACgE;IAChE,KAAK,CAAC,MAAM,CAAC,KAAyB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,WAAW,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC;IAED;;2CAEuC;IACvC,KAAK,CAAC,OAAO,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAClD,CAAA;IACL,CAAC;IAED;qBACiB;IACjB,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,aAAa,CACrD,CAAA;IACL,CAAC;IAED;;;4CAGwC;IACxC,KAAK,CAAC,iBAAiB,CACnB,IAAY,EACZ,KAA6B;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,qBAAqB,EAC1D,KAAK,CACR,CAAA;IACL,CAAC;IAED;0FACsF;IACtF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,MAA+B;QAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED;;qFAEiF;IACjF,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,QAA0B;QAC1D,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC1F,CAAC;IAED;iGAC6F;IAC7F,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAuB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC9F,CAAC;IAED;iEAC6D;IAC7D,KAAK,CAAC,WAAW,CACb,IAAY,EACZ,KAA8B;QAE9B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACjB,aAAa,kBAAkB,CAAC,IAAI,CAAC,SAAS,EAC9C,KAAK,CACR,CAAA;IACL,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,WAAmB;QAChD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,WAAW,CAAC,EAAE,CACpF,CAAA;IACL,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,WAAW,CAAC,IAAY;QAC1B,8FAA8F;QAC9F,gGAAgG;QAChG,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,aAAa,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAClD,CAAA;IACL,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa;QACrD,2FAA2F;QAC3F,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAC3E,EAAE,KAAK,EAAE,CACZ,CAAA;IACL,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,IAAY;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAClB,aAAa,kBAAkB,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAA;IACL,CAAC;CACJ"}

package/dist/clients/admin/roster.client.d.ts

@@ -1,27 +0,0 @@
-import type { HttpClient } from '../../transport/http-client.js';
-/** C569/FS54 Chore 8: mirrors `packages/core`'s `RosterEntry` read projection. */
-export interface RosterEntryDto {
-    actorId: string;
-    actorKind: 'agent';
-    alias: string | null;
-    project: string | null;
-    roles: string[];
-}
-export interface RosterListFilter {
-    project?: string;
-}
-export declare class AdminRosterClient {
-    private readonly http;
-    constructor(http: HttpClient);
-    list(filter?: RosterListFilter): Promise<RosterEntryDto[]>;
-    get(actorId: string): Promise<RosterEntryDto>;
-    /**
-     * Bulk-replaces the full Capability-Role set. §7 hard-cutover: the canonical write path
-     * for a multi-select role editor — replaces the removed `roles` field on
-     * `PATCH /agents/{id}/identity`.
-     */
-    replace(actorId: string, roles: string[]): Promise<RosterEntryDto>;
-    grantAccess(actorId: string, role: string): Promise<RosterEntryDto>;
-    revokeAccess(actorId: string, role: string): Promise<RosterEntryDto>;
-}
-//# sourceMappingURL=roster.client.d.ts.map

package/dist/clients/admin/roster.client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"roster.client.d.ts","sourceRoot":"","sources":["../../../src/clients/admin/roster.client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,qBAAa,iBAAiB;IACd,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,IAAI,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAK1D,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAInD;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAIlE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMnE,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAK7E"}

package/dist/clients/admin/roster.client.js

@@ -1,30 +0,0 @@
-export class AdminRosterClient {
-    http;
-    constructor(http) {
-        this.http = http;
-    }
-    async list(filter) {
-        const query = filter?.project ? `?project=${encodeURIComponent(filter.project)}` : '';
-        return this.http.get(`/roster${query}`);
-    }
-    async get(actorId) {
-        return this.http.get(`/roster/${encodeURIComponent(actorId)}`);
-    }
-    /**
-     * Bulk-replaces the full Capability-Role set. §7 hard-cutover: the canonical write path
-     * for a multi-select role editor — replaces the removed `roles` field on
-     * `PATCH /agents/{id}/identity`.
-     */
-    async replace(actorId, roles) {
-        return this.http.put(`/roster/${encodeURIComponent(actorId)}`, { roles });
-    }
-    async grantAccess(actorId, role) {
-        return this.http.post(`/roster/${encodeURIComponent(actorId)}/access`, {
-            role,
-        });
-    }
-    async revokeAccess(actorId, role) {
-        return this.http.delete(`/roster/${encodeURIComponent(actorId)}/access/${encodeURIComponent(role)}`);
-    }
-}
-//# sourceMappingURL=roster.client.js.map

package/dist/clients/admin/roster.client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"roster.client.js","sourceRoot":"","sources":["../../../src/clients/admin/roster.client.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,iBAAiB;IACG;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,MAAyB;QAChC,MAAM,KAAK,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmB,UAAU,KAAK,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAClF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,KAAe;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAY;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAiB,WAAW,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE;YACnF,IAAI;SACP,CAAC,CAAA;IACN,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,IAAY;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACnB,WAAW,kBAAkB,CAAC,OAAO,CAAC,WAAW,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAA;IACL,CAAC;CACJ"}