@beacon-build/sdk 3.30.0 → 3.30.3

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @beacon-build/sdk Changelog
 
+## 3.30.3
+
+### Patch Changes
+
+- @beacon-build/core@3.30.3
+
+## 3.30.2
+
+### Patch Changes
+
+- d253cd7: C1311: a recorded jev fail verdict can be labelled confirmed or false-alarm (POST /verification/shadow-gates/labels); GET /verification/shadow-gates and the release shadow-gate report show the jev fail count, labelled share and false-fail rate.
+- 0d28061: T559 AC-4: failed non-critical post-release steps print their error and the final line names them (never "deployed successfully"); the release bearer can read the shadow-gate report and the release-summary (ops-tier, ?project=); the per-kind shadow-gate count query runs on Postgres (GROUP BY 1, 2); consumer-notify addresses the integrator by project slug.
+- Updated dependencies [65e02b5]
+- Updated dependencies [eb71bc7]
+- Updated dependencies [126b9c7]
+- Updated dependencies [69cbe2b]
+- Updated dependencies [d253cd7]
+- Updated dependencies [c679b57]
+- Updated dependencies [4cb9b28]
+- Updated dependencies [8811471]
+- Updated dependencies [13bc902]
+- Updated dependencies [f3a24c2]
+- Updated dependencies [6cf01ba]
+- Updated dependencies [ed13107]
+- Updated dependencies [bf5fbb3]
+- Updated dependencies [18bd9c4]
+- Updated dependencies [b411909]
+- Updated dependencies [6aee43f]
+    - @beacon-build/core@3.30.2
+
+## 3.30.1
+
+### Patch Changes
+
+- e08b1ea: B1584: the client_credentials boot mint retries a transient refusal (5xx, network error) with bounded backoff and fails fast with the credential remediation only on an authentication refusal; Argus boots through it.
+- Updated dependencies [ec8b69b]
+- Updated dependencies [6a34e77]
+    - @beacon-build/core@3.30.1
+
 ## 3.30.0
 
 ### Minor Changes

package/dist/auth/rotating-jwt-provider.d.ts

@@ -77,11 +77,43 @@ export interface RotatingJwtProviderOptions {
      *  path an ordinary resolution failure already takes, because it bypasses that `.catch()`
      *  entirely and kills the whole process instead of just disabling one feature. */
     onBootMintFailure?: 'exit' | 'throw';
+    /** B1584: bounded backoff retry of a TRANSIENT boot-mint failure (see {@link isTransientMintError}):
+     *  a platform that is still starting (5xx, network error) is the normal case whenever the API and
+     *  its machine callers restart together, so it must not end the boot. Any other failure (an
+     *  authentication refusal, a malformed answer, the B710 timeout) still fails at once. Defaults to
+     *  {@link DEFAULT_BOOT_RETRY}; `false` turns the retry off. */
+    bootRetry?: false | BootRetryOptions;
 }
+export interface BootRetryOptions {
+    /** Total time the retries may take, ms (default 90 s): once the next wait would pass it, give up. */
+    windowMs?: number;
+    /** First wait, ms; doubles per attempt (default 1 s). */
+    initialDelayMs?: number;
+    /** Upper bound of one wait, ms (default 10 s). */
+    maxDelayMs?: number;
+    /** Test seam: the wait (default `setTimeout`). */
+    sleep?: (ms: number) => Promise<void>;
+    /** Test seam: the clock (default `Date.now`). */
+    now?: () => number;
+}
+export declare const DEFAULT_BOOT_RETRY: {
+    readonly windowMs: 90000;
+    readonly initialDelayMs: 1000;
+    readonly maxDelayMs: 10000;
+};
+/**
+ * B1584: the ONE classification of a mint failure as transient (the platform could not answer: retry)
+ * versus an authentication/contract failure (fail fast). A mint function marks a transient failure by
+ * throwing an error with `transient === true` (`ClientCredentialsMintError` does for a 5xx, a 408/429
+ * and a network error); every other error, a plain `Error` included, is not transient.
+ */
+export declare function isTransientMintError(err: unknown): err is Error & {
+    transient: true;
+};
 /**
  * Mint `mintFn` once at boot (fail-fast on failure — exits the process), then keep the
  * token rotating for the life of a long-running daemon on an unref'd timer. Returns a
  * PROVIDER — re-read per request — never a captured string.
  */
-export declare function createRotatingJwtProvider(mintFn: () => Promise<JwtMintResult>, { refreshMs, log, timeoutMs, onBootMintFailure, }: RotatingJwtProviderOptions): Promise<() => string>;
+export declare function createRotatingJwtProvider(mintFn: () => Promise<JwtMintResult>, { refreshMs, log, timeoutMs, onBootMintFailure, bootRetry, }: RotatingJwtProviderOptions): Promise<() => string>;
 //# sourceMappingURL=rotating-jwt-provider.d.ts.map

package/dist/auth/rotating-jwt-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rotating-jwt-provider.d.ts","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,MAAM,WAAW,cAAc;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAClE;AAED;;iFAEiF;AACjF,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;AAED;;kEAEkE;AAClE,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,MAAM,WAAW,0BAA0B;IACvC;;mEAE+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,cAAc,CAAA;IACnB;;;qCAGiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;sFASkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACvC;AAsDD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAmC,EACnC,iBAA0B,GAC7B,EAAE,0BAA0B,GAC9B,OAAO,CAAC,MAAM,MAAM,CAAC,CAsBvB"}
+{"version":3,"file":"rotating-jwt-provider.d.ts","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,MAAM,WAAW,cAAc;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAClE;AAED;;iFAEiF;AACjF,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;AAED;;kEAEkE;AAClE,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,MAAM,WAAW,0BAA0B;IACvC;;mEAE+D;IAC/D,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,cAAc,CAAA;IACnB;;;qCAGiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;sFASkF;IAClF,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IACpC;;;;mEAI+D;IAC/D,SAAS,CAAC,EAAE,KAAK,GAAG,gBAAgB,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC7B,qGAAqG;IACrG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kDAAkD;IAClD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB;AAED,eAAO,MAAM,kBAAkB;;;;CAIrB,CAAA;AAEV;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,KAAK,GAAG;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,CAErF;AAqGD;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC3C,MAAM,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAmC,EACnC,iBAA0B,EAC1B,SAAc,GACjB,EAAE,0BAA0B,GAC9B,OAAO,CAAC,MAAM,MAAM,CAAC,CAsBvB"}

package/dist/auth/rotating-jwt-provider.js

@@ -44,6 +44,20 @@
  *  the 60s external MCP-client readiness gate observed live, leaving headroom for the rest
  *  of `register()`/`connect()` to run inside that same window. */
 export const DEFAULT_MINT_TIMEOUT_MS = 30_000;
+export const DEFAULT_BOOT_RETRY = {
+    windowMs: 90_000,
+    initialDelayMs: 1_000,
+    maxDelayMs: 10_000,
+};
+/**
+ * B1584: the ONE classification of a mint failure as transient (the platform could not answer: retry)
+ * versus an authentication/contract failure (fail fast). A mint function marks a transient failure by
+ * throwing an error with `transient === true` (`ClientCredentialsMintError` does for a 5xx, a 408/429
+ * and a network error); every other error, a plain `Error` included, is not transient.
+ */
+export function isTransientMintError(err) {
+    return err instanceof Error && err.transient === true;
+}
 /**
  * B710: race `mintFn()` against a timer so a hung network call can never block its caller
  * past `timeoutMs`. The timer is cleared on either outcome (settle-first wins) and never
@@ -65,9 +79,50 @@ function withMintTimeout(mintFn, timeoutMs) {
         });
     });
 }
-async function mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure) {
+/**
+ * B1584: `withMintTimeout(mintFn)` with a bounded exponential-backoff retry of a TRANSIENT failure.
+ * One log line per failed attempt. When the window runs out the error names the real cause - the
+ * authorization server is unavailable (last status, attempts, duration) - and carries none of the
+ * mint function's credential remediation (the credentials were never judged wrong).
+ */
+async function mintWithBootRetry(mintFn, log, timeoutMs, retry) {
+    if (retry === false)
+        return withMintTimeout(mintFn, timeoutMs);
+    const windowMs = retry.windowMs ?? DEFAULT_BOOT_RETRY.windowMs;
+    const initialDelayMs = retry.initialDelayMs ?? DEFAULT_BOOT_RETRY.initialDelayMs;
+    const maxDelayMs = retry.maxDelayMs ?? DEFAULT_BOOT_RETRY.maxDelayMs;
+    const now = retry.now ?? Date.now;
+    const sleep = retry.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const startedAt = now();
+    for (let attempt = 1;; attempt++) {
+        try {
+            return await withMintTimeout(mintFn, timeoutMs);
+        }
+        catch (err) {
+            if (!isTransientMintError(err))
+                throw err;
+            const status = err.status;
+            const delayMs = Math.min(maxDelayMs, initialDelayMs * 2 ** (attempt - 1));
+            const elapsedMs = now() - startedAt;
+            if (elapsedMs + delayMs > windowMs) {
+                const seconds = Math.round(elapsedMs / 1000);
+                throw new Error(`authorization server unavailable: ${attempt} attempts over ${seconds}s, ` +
+                    `last ${typeof status === 'number' ? `status ${status}` : 'error (no HTTP answer)'}` +
+                    ` - ${err.message}`);
+            }
+            log.info('rotating JWT boot mint attempt failed (transient) - retrying', {
+                attempt,
+                status: typeof status === 'number' ? status : null,
+                error: err.message,
+                retryInMs: delayMs,
+            });
+            await sleep(delayMs);
+        }
+    }
+}
+async function mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure, bootRetry) {
     try {
-        const { token, logContext } = await withMintTimeout(mintFn, timeoutMs);
+        const { token, logContext } = await mintWithBootRetry(mintFn, log, timeoutMs, bootRetry);
         log.info('minted rotating JWT at boot', logContext);
         return token;
     }
@@ -89,8 +144,8 @@ async function mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure) {
  * token rotating for the life of a long-running daemon on an unref'd timer. Returns a
  * PROVIDER — re-read per request — never a captured string.
  */
-export async function createRotatingJwtProvider(mintFn, { refreshMs, log, timeoutMs = DEFAULT_MINT_TIMEOUT_MS, onBootMintFailure = 'exit', }) {
-    let current = await mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure);
+export async function createRotatingJwtProvider(mintFn, { refreshMs, log, timeoutMs = DEFAULT_MINT_TIMEOUT_MS, onBootMintFailure = 'exit', bootRetry = {}, }) {
+    let current = await mintAtBoot(mintFn, log, timeoutMs, onBootMintFailure, bootRetry);
     const timer = setInterval(() => {
         void (async () => {
             try {

package/dist/auth/rotating-jwt-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"rotating-jwt-provider.js","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAeH;;kEAEkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AA0B7C;;;;;GAKG;AACH,SAAS,eAAe,CACpB,MAAoC,EACpC,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC,CAAA;QAChE,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,EAAE,CAAC,IAAI,CACT,CAAC,MAAM,EAAE,EAAE;YACP,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,GAAG,CAAC,CAAA;QACf,CAAC,CACJ,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,MAAoC,EACpC,GAAmB,EACnB,SAAiB,EACjB,iBAAmC;IAEnC,IAAI,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACtE,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAA;QACnD,OAAO,KAAK,CAAA;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAA;QACF,8EAA8E;QAC9E,oFAAoF;QACpF,mFAAmF;QACnF,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAoC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAS,GAAG,uBAAuB,EACnC,iBAAiB,GAAG,MAAM,GACD;IAE7B,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAA;IAEzE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3B,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,IAAI,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBACtE,OAAO,GAAG,KAAK,CAAA;gBACf,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,uEAAuE;gBACvE,0EAA0E;gBAC1E,mDAAmD;gBACnD,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBACvD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC,CAAA;YACN,CAAC;QACL,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;AACxB,CAAC"}
+{"version":3,"file":"rotating-jwt-provider.js","sourceRoot":"","sources":["../../src/auth/rotating-jwt-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAeH;;kEAEkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AA6C7C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAC9B,QAAQ,EAAE,MAAM;IAChB,cAAc,EAAE,KAAK;IACrB,UAAU,EAAE,MAAM;CACZ,CAAA;AAEV;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC7C,OAAO,GAAG,YAAY,KAAK,IAAK,GAA+B,CAAC,SAAS,KAAK,IAAI,CAAA;AACtF,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CACpB,MAAoC,EACpC,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,SAAS,IAAI,CAAC,CAAC,CAAA;QAChE,CAAC,EAAE,SAAS,CAAC,CAAA;QACb,KAAK,CAAC,KAAK,EAAE,CAAA;QACb,MAAM,EAAE,CAAC,IAAI,CACT,CAAC,MAAM,EAAE,EAAE;YACP,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,OAAO,CAAC,MAAM,CAAC,CAAA;QACnB,CAAC,EACD,CAAC,GAAG,EAAE,EAAE;YACJ,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,GAAG,CAAC,CAAA;QACf,CAAC,CACJ,CAAA;IACL,CAAC,CAAC,CAAA;AACN,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC5B,MAAoC,EACpC,GAAmB,EACnB,SAAiB,EACjB,KAA+B;IAE/B,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAA;IAC9D,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,kBAAkB,CAAC,cAAc,CAAA;IAChF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,kBAAkB,CAAC,UAAU,CAAA;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1F,MAAM,SAAS,GAAG,GAAG,EAAE,CAAA;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC;YACD,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAA;YACzC,MAAM,MAAM,GAAI,GAA4B,CAAC,MAAM,CAAA;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAA;YACzE,MAAM,SAAS,GAAG,GAAG,EAAE,GAAG,SAAS,CAAA;YACnC,IAAI,SAAS,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;gBAC5C,MAAM,IAAI,KAAK,CACX,qCAAqC,OAAO,kBAAkB,OAAO,KAAK;oBACtE,QAAQ,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,wBAAwB,EAAE;oBACpF,MAAM,GAAG,CAAC,OAAO,EAAE,CAC1B,CAAA;YACL,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBACrE,OAAO;gBACP,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAClD,KAAK,EAAE,GAAG,CAAC,OAAO;gBAClB,SAAS,EAAE,OAAO;aACrB,CAAC,CAAA;YACF,MAAM,KAAK,CAAC,OAAO,CAAC,CAAA;QACxB,CAAC;IACL,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CACrB,MAAoC,EACpC,GAAmB,EACnB,SAAiB,EACjB,iBAAmC,EACnC,SAAmC;IAEnC,IAAI,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;QACxF,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,UAAU,CAAC,CAAA;QACnD,OAAO,KAAK,CAAA;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,GAAG,CAAC,KAAK,CAAC,+BAA+B,EAAE;YACvC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAA;QACF,8EAA8E;QAC9E,oFAAoF;QACpF,mFAAmF;QACnF,IAAI,iBAAiB,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,MAAoC,EACpC,EACI,SAAS,EACT,GAAG,EACH,SAAS,GAAG,uBAAuB,EACnC,iBAAiB,GAAG,MAAM,EAC1B,SAAS,GAAG,EAAE,GACW;IAE7B,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAA;IAEpF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC3B,KAAK,CAAC,KAAK,IAAI,EAAE;YACb,IAAI,CAAC;gBACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;gBACtE,OAAO,GAAG,KAAK,CAAA;gBACf,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,UAAU,CAAC,CAAA;YAC9D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,uEAAuE;gBACvE,0EAA0E;gBAC1E,mDAAmD;gBACnD,GAAG,CAAC,KAAK,CAAC,+CAA+C,EAAE;oBACvD,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBAC1D,CAAC,CAAA;YACN,CAAC;QACL,CAAC,CAAC,EAAE,CAAA;IACR,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,KAAK,CAAC,KAAK,EAAE,CAAA;IAEb,OAAO,GAAG,EAAE,CAAC,OAAO,CAAA;AACxB,CAAC"}

package/dist/clients/agent/verification-shadow-violations.client.d.ts

@@ -21,9 +21,27 @@ export interface ShadowViolationReportView {
     /** The rendered report lines. */
     report: string[];
 }
+/** C1311/AC-1: the label of a recorded jev fail verdict. */
+export type JevFailLabel = 'confirmed' | 'false-alarm';
+export interface JevFailLabelView {
+    eventId: string;
+    label: JevFailLabel;
+    reason: string;
+    labelledBy: string;
+    labelledAt: string;
+}
 export declare class VerificationShadowViolationsClient {
     private http;
     constructor(http: HttpClient);
+    /**
+     * POST /verification/shadow-gates/labels - label a recorded jev fail `confirmed` or `false-alarm`
+     * with a reason (C1311/AC-1). A second label replaces the first; the first stays in the task history.
+     */
+    labelJevFail(input: {
+        eventId: string;
+        label: JevFailLabel;
+        reason: string;
+    }): Promise<JevFailLabelView>;
     /** GET /verification/shadow-gates/violations?since= - the violations since the release started. */
     report(since?: string): Promise<ShadowViolationReportView>;
 }

package/dist/clients/agent/verification-shadow-violations.client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verification-shadow-violations.client.d.ts","sourceRoot":"","sources":["../../../src/clients/agent/verification-shadow-violations.client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,wBAAwB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,yBAAyB;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,wBAAwB,EAAE,CAAA;KAAE,EAAE,CAAA;IAChF,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,qBAAa,kCAAkC;IAC/B,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC,mGAAmG;IACnG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAM7D"}
+{"version":3,"file":"verification-shadow-violations.client.d.ts","sourceRoot":"","sources":["../../../src/clients/agent/verification-shadow-violations.client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAEhE,MAAM,WAAW,wBAAwB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,yBAAyB;IACtC,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,wBAAwB,EAAE,CAAA;KAAE,EAAE,CAAA;IAChF,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,4DAA4D;AAC5D,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,CAAA;AAEtD,MAAM,WAAW,gBAAgB;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,YAAY,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACrB;AAED,qBAAa,kCAAkC;IAC/B,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE;QAChB,OAAO,EAAE,MAAM,CAAA;QACf,KAAK,EAAE,YAAY,CAAA;QACnB,MAAM,EAAE,MAAM,CAAA;KACjB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI7B,mGAAmG;IACnG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAM7D"}

package/dist/clients/agent/verification-shadow-violations.client.js

@@ -3,6 +3,13 @@ export class VerificationShadowViolationsClient {
     constructor(http) {
         this.http = http;
     }
+    /**
+     * POST /verification/shadow-gates/labels - label a recorded jev fail `confirmed` or `false-alarm`
+     * with a reason (C1311/AC-1). A second label replaces the first; the first stays in the task history.
+     */
+    labelJevFail(input) {
+        return this.http.post('/verification/shadow-gates/labels', input);
+    }
     /** GET /verification/shadow-gates/violations?since= - the violations since the release started. */
     report(since) {
         const qs = since ? `?since=${encodeURIComponent(since)}` : '';

package/dist/clients/agent/verification-shadow-violations.client.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-shadow-violations.client.js","sourceRoot":"","sources":["../../../src/clients/agent/verification-shadow-violations.client.ts"],"names":[],"mappings":"AAsBA,MAAM,OAAO,kCAAkC;IACvB;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC,mGAAmG;IACnG,MAAM,CAAC,KAAc;QACjB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,wCAAwC,EAAE,EAAE,CAC/C,CAAA;IACL,CAAC;CACJ"}
+{"version":3,"file":"verification-shadow-violations.client.js","sourceRoot":"","sources":["../../../src/clients/agent/verification-shadow-violations.client.ts"],"names":[],"mappings":"AAiCA,MAAM,OAAO,kCAAkC;IACvB;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;OAGG;IACH,YAAY,CAAC,KAIZ;QACG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,mCAAmC,EAAE,KAAK,CAAC,CAAA;IACvF,CAAC;IAED,mGAAmG;IACnG,MAAM,CAAC,KAAc;QACjB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAChB,wCAAwC,EAAE,EAAE,CAC/C,CAAA;IACL,CAAC;CACJ"}

package/dist/index.auth-and-capture.d.ts

@@ -9,7 +9,7 @@
  * dependency and stays here so `@beacon-build/sdk-internal`'s own Argus-JWT helper (and any
  * other rotating-credential consumer) can build on it without pulling in anything internal.
  */
-export { createRotatingJwtProvider, type RotatingJwtLog, type JwtMintResult, type RotatingJwtProviderOptions, } from './auth/rotating-jwt-provider.js';
+export { createRotatingJwtProvider, isTransientMintError, DEFAULT_BOOT_RETRY, type BootRetryOptions, type RotatingJwtLog, type JwtMintResult, type RotatingJwtProviderOptions, } from './auth/rotating-jwt-provider.js';
 export { CaptureClient, type CapturedEntry, type CapturedToolUse, type CaptureJob, } from './clients/capture.client.js';
 export { KnowledgeClient, type KnowledgeSearchOptions, type KnowledgeNodeGetOptions, type KnowledgeOutlineOptions, type KnowledgeHistoryOptions, type KnowledgeDiffOptions, type KnowledgeCreateNodeInput, type KnowledgePatchInput, type KnowledgeDraftInput, type KnowledgeDecisionInput, type KnowledgeQuestionInput, type KnowledgeLinkInput, type KnowledgeTransitionInput, type KnowledgeSetMasterInput, type KnowledgeApproveDraftsOptions, type KnowledgeContextOptions, type KnowledgeContextResult, type KnowledgeModelOptions, type KnowledgeModelResult, type ModelSchema, type ModelType, type ModelField, type ModelReference, type ModelRelation, type ModelSection, type KnowledgeModelI18nOptions, type KnowledgeModelI18nResult, type ModelI18nLanguage, type ModelTypeText, type TaskModelLinkType, type TaskModelLinkInput, type TaskModelLink, type TaskModelLinkResult, type TaskModelLinkWarning, type NodeTaskLink, type KnowledgeAudience, type KnowledgeMaster, type KnowledgeNodeScope, type KnowledgeListScope, type KnowledgeListSort, type KnowledgeListOptions, type KnowledgeListResult, type KnowledgeNodeSummary, type KnowledgeNodeDegree, type KnowledgeDegreeOptions, type KnowledgeSearchHit, type KnowledgeSearchResult, type KnowledgeSource, type KnowledgeAccess, type KnowledgeAllowedAction, type KnowledgeAllowedActions, type KnowledgeNodeResult, type KnowledgeNodeReference, type KnowledgeNodeSection, type KnowledgeFinding, type KnowledgeRelation, type KnowledgeRelationDirection, type KnowledgeRelationsOptions, type KnowledgeRelationsResult, type KnowledgeOutlineResult, type KnowledgeHistoryVersion, type KnowledgeHistoryEvent, type KnowledgeHistoryResult, type KnowledgeDiffResult, type KnowledgeDiffSection, type KnowledgeTransitionResult, type KnowledgeReviewItem, type KnowledgeWriteBack, type KnowledgeReviewQueueOptions, type KnowledgeReviewQueueResult, type KnowledgeComment, type KnowledgeAddCommentInput, type KnowledgeListCommentsOptions, type KnowledgeApprovalRule, } from './clients/knowledge.client.js';
 //# sourceMappingURL=index.auth-and-capture.d.ts.map

package/dist/index.auth-and-capture.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.auth-and-capture.d.ts","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACH,yBAAyB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,0BAA0B,GAClC,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EACH,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,UAAU,GAClB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EACH,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAElC,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,GAC7B,MAAM,+BAA+B,CAAA"}
+{"version":3,"file":"index.auth-and-capture.d.ts","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACH,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,0BAA0B,GAClC,MAAM,iCAAiC,CAAA;AAGxC,OAAO,EACH,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,UAAU,GAClB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EACH,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAElC,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAEjB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAEzB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,GAC7B,MAAM,+BAA+B,CAAA"}

package/dist/index.auth-and-capture.js

@@ -10,7 +10,7 @@
  * other rotating-credential consumer) can build on it without pulling in anything internal.
  */
 // ── Rotating JWT provider (C573 — DRY, B468 follow-up) ────────────────────────
-export { createRotatingJwtProvider, } from './auth/rotating-jwt-provider.js';
+export { createRotatingJwtProvider, isTransientMintError, DEFAULT_BOOT_RETRY, } from './auth/rotating-jwt-provider.js';
 // ── Capture client (C958 — DRY: sidecar + portal ingest) ──────────────────────
 export { CaptureClient, } from './clients/capture.client.js';
 // ── Knowledge client (F738) ──────────────────────────────────────────────────

package/dist/index.auth-and-capture.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.auth-and-capture.js","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,iFAAiF;AACjF,OAAO,EACH,yBAAyB,GAI5B,MAAM,iCAAiC,CAAA;AAExC,iFAAiF;AACjF,OAAO,EACH,aAAa,GAIhB,MAAM,6BAA6B,CAAA;AAEpC,gFAAgF;AAChF,OAAO,EACH,eAAe,GAgFlB,MAAM,+BAA+B,CAAA"}
+{"version":3,"file":"index.auth-and-capture.js","sourceRoot":"","sources":["../src/index.auth-and-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,iFAAiF;AACjF,OAAO,EACH,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,GAKrB,MAAM,iCAAiC,CAAA;AAExC,iFAAiF;AACjF,OAAO,EACH,aAAa,GAIhB,MAAM,6BAA6B,CAAA;AAEpC,gFAAgF;AAChF,OAAO,EACH,eAAe,GAgFlB,MAAM,+BAA+B,CAAA"}

package/dist/manifest.agent-verification-entries.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.agent-verification-entries.d.ts","sourceRoot":"","sources":["../src/manifest.agent-verification-entries.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AASxD,eAAO,MAAM,mCAAmC,EAAE,aAAa,EA4C9D,CAAA"}
+{"version":3,"file":"manifest.agent-verification-entries.d.ts","sourceRoot":"","sources":["../src/manifest.agent-verification-entries.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AASxD,eAAO,MAAM,mCAAmC,EAAE,aAAa,EAkD9D,CAAA"}

package/dist/manifest.agent-verification-entries.js

@@ -33,6 +33,8 @@ export const MANIFEST_AGENT_VERIFICATION_ENTRIES = [
     entry('GET', '/api/v1/verification/spot-checks', 'verificationSpotChecks.list'),
     // C1289/AC-6: the shadow-violation report of a release (per gate: task, cause, first-seen time)
     entry('GET', '/api/v1/verification/shadow-gates/violations', 'verificationShadowViolations.report'),
+    // C1311/AC-1: label a recorded jev fail verdict confirmed / false-alarm (the false-fail rate's input)
+    entry('POST', '/api/v1/verification/shadow-gates/labels', 'verificationShadowViolations.labelJevFail'),
     // NOTE (F783 release fix, F603/AC-3): `POST /api/v1/pr-merge-waivers` is deliberately NOT here. It
     // is a vendor-tier route (the registry's derived tier), so it must never appear in this PUBLIC
     // manifest; `PrMergeWaiversClient` is the typed caller, the route is covered by SDK_NEGATIVE_LIST.

package/dist/manifest.agent-verification-entries.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.agent-verification-entries.js","sourceRoot":"","sources":["../src/manifest.agent-verification-entries.ts"],"names":[],"mappings":"AAQA,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAE,IAAY,EAAE,OAAe,EAAiB,EAAE,CAAC,CAAC;IACrF,MAAM;IACN,IAAI;IACJ,OAAO;IACP,QAAQ,EAAE,OAAO;CACpB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAoB;IAChE,KAAK,CAAC,MAAM,EAAE,2BAA2B,EAAE,wBAAwB,CAAC;IACpE,KAAK,CAAC,MAAM,EAAE,uCAAuC,EAAE,yBAAyB,CAAC;IACjF,KAAK,CAAC,KAAK,EAAE,gCAAgC,EAAE,sBAAsB,CAAC;IACtE,KAAK,CAAC,MAAM,EAAE,qCAAqC,EAAE,2BAA2B,CAAC;IACjF,KAAK,CAAC,KAAK,EAAE,gCAAgC,EAAE,kBAAkB,CAAC;IAClE,wFAAwF;IACxF,KAAK,CAAC,MAAM,EAAE,iCAAiC,EAAE,0BAA0B,CAAC;IAC5E,yFAAyF;IACzF,KAAK,CAAC,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,CAAC;IAC/D,KAAK,CAAC,MAAM,EAAE,uCAAuC,EAAE,2BAA2B,CAAC;IACnF,yEAAyE;IACzE,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,CAAC;IACzD,4FAA4F;IAC5F,KAAK,CAAC,MAAM,EAAE,4BAA4B,EAAE,8BAA8B,CAAC;IAC3E,kGAAkG;IAClG,KAAK,CACD,MAAM,EACN,iDAAiD,EACjD,oCAAoC,CACvC;IACD,KAAK,CAAC,MAAM,EAAE,kCAAkC,EAAE,mCAAmC,CAAC;IACtF,yFAAyF;IACzF,KAAK,CAAC,MAAM,EAAE,sCAAsC,EAAE,mCAAmC,CAAC;IAC1F,iGAAiG;IACjG,KAAK,CAAC,MAAM,EAAE,iCAAiC,EAAE,qBAAqB,CAAC;IACvE,8FAA8F;IAC9F,KAAK,CACD,MAAM,EACN,4CAA4C,EAC5C,yCAAyC,CAC5C;IACD,mFAAmF;IACnF,KAAK,CAAC,MAAM,EAAE,kCAAkC,EAAE,6BAA6B,CAAC;IAChF,KAAK,CAAC,KAAK,EAAE,kCAAkC,EAAE,6BAA6B,CAAC;IAC/E,gGAAgG;IAChG,KAAK,CACD,KAAK,EACL,8CAA8C,EAC9C,qCAAqC,CACxC;IACD,mGAAmG;IACnG,+FAA+F;IAC/F,mGAAmG;CACtG,CAAA"}
+{"version":3,"file":"manifest.agent-verification-entries.js","sourceRoot":"","sources":["../src/manifest.agent-verification-entries.ts"],"names":[],"mappings":"AAQA,MAAM,KAAK,GAAG,CAAC,MAAsB,EAAE,IAAY,EAAE,OAAe,EAAiB,EAAE,CAAC,CAAC;IACrF,MAAM;IACN,IAAI;IACJ,OAAO;IACP,QAAQ,EAAE,OAAO;CACpB,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAoB;IAChE,KAAK,CAAC,MAAM,EAAE,2BAA2B,EAAE,wBAAwB,CAAC;IACpE,KAAK,CAAC,MAAM,EAAE,uCAAuC,EAAE,yBAAyB,CAAC;IACjF,KAAK,CAAC,KAAK,EAAE,gCAAgC,EAAE,sBAAsB,CAAC;IACtE,KAAK,CAAC,MAAM,EAAE,qCAAqC,EAAE,2BAA2B,CAAC;IACjF,KAAK,CAAC,KAAK,EAAE,gCAAgC,EAAE,kBAAkB,CAAC;IAClE,wFAAwF;IACxF,KAAK,CAAC,MAAM,EAAE,iCAAiC,EAAE,0BAA0B,CAAC;IAC5E,yFAAyF;IACzF,KAAK,CAAC,KAAK,EAAE,2BAA2B,EAAE,oBAAoB,CAAC;IAC/D,KAAK,CAAC,MAAM,EAAE,uCAAuC,EAAE,2BAA2B,CAAC;IACnF,yEAAyE;IACzE,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,kBAAkB,CAAC;IACzD,4FAA4F;IAC5F,KAAK,CAAC,MAAM,EAAE,4BAA4B,EAAE,8BAA8B,CAAC;IAC3E,kGAAkG;IAClG,KAAK,CACD,MAAM,EACN,iDAAiD,EACjD,oCAAoC,CACvC;IACD,KAAK,CAAC,MAAM,EAAE,kCAAkC,EAAE,mCAAmC,CAAC;IACtF,yFAAyF;IACzF,KAAK,CAAC,MAAM,EAAE,sCAAsC,EAAE,mCAAmC,CAAC;IAC1F,iGAAiG;IACjG,KAAK,CAAC,MAAM,EAAE,iCAAiC,EAAE,qBAAqB,CAAC;IACvE,8FAA8F;IAC9F,KAAK,CACD,MAAM,EACN,4CAA4C,EAC5C,yCAAyC,CAC5C;IACD,mFAAmF;IACnF,KAAK,CAAC,MAAM,EAAE,kCAAkC,EAAE,6BAA6B,CAAC;IAChF,KAAK,CAAC,KAAK,EAAE,kCAAkC,EAAE,6BAA6B,CAAC;IAC/E,gGAAgG;IAChG,KAAK,CACD,KAAK,EACL,8CAA8C,EAC9C,qCAAqC,CACxC;IACD,sGAAsG;IACtG,KAAK,CACD,MAAM,EACN,0CAA0C,EAC1C,2CAA2C,CAC9C;IACD,mGAAmG;IACnG,+FAA+F;IAC/F,mGAAmG;CACtG,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beacon-build/sdk",
-  "version": "3.30.0",
+  "version": "3.30.3",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,7 +28,7 @@
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",
     "event-source-polyfill": "^1.0.31",
-    "@beacon-build/core": "3.30.0"
+    "@beacon-build/core": "3.30.3"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",