@dakera-ai/dakera 0.9.2 → 0.9.5

package/dist/index.d.mts

@@ -493,6 +493,8 @@ interface ConsolidateRequest {
     threshold?: number;
     /** Dry run mode */
     dry_run?: boolean;
+    /** Optional DBSCAN algorithm config (CE-6) */
+    config?: ConsolidationConfig;
 }
 /** Response from consolidation */
 interface ConsolidateResponse {
@@ -502,6 +504,8 @@ interface ConsolidateResponse {
     removed_count: number;
     /** IDs of new consolidated memories */
     new_memories: MemoryId[];
+    /** Step-by-step consolidation log (CE-6) */
+    log?: ConsolidationLogEntry[];
 }
 /** Request for memory feedback */
 interface MemoryFeedbackRequest {
@@ -1467,6 +1471,81 @@ interface NamespaceKeyUsageResponse {
     bytes_transferred: number;
     avg_latency_ms: number;
 }
+/** Algorithm config for DBSCAN adaptive consolidation (CE-6). */
+interface ConsolidationConfig {
+    /** Clustering algorithm: `"dbscan"` (default) or `"greedy"`. */
+    algorithm?: 'dbscan' | 'greedy';
+    /** Minimum cluster samples for DBSCAN. */
+    min_samples?: number;
+    /** Epsilon distance parameter for DBSCAN. */
+    eps?: number;
+}
+/** One step in the consolidation execution log (CE-6). */
+interface ConsolidationLogEntry {
+    step: string;
+    memories_before: number;
+    memories_after: number;
+    duration_ms: number;
+}
+/** Response from POST /v1/import (DX-1). */
+interface MemoryImportResponse {
+    imported_count: number;
+    skipped_count: number;
+    errors: string[];
+}
+/** Response from GET /v1/export (DX-1). */
+interface MemoryExportResponse {
+    data: Record<string, unknown>[];
+    format: string;
+    count: number;
+}
+/** A single business-event entry from the audit log (OBS-1). */
+interface AuditEvent {
+    id: string;
+    event_type: string;
+    agent_id?: string;
+    namespace?: string;
+    timestamp: number;
+    details: Record<string, unknown>;
+}
+/** Response from GET /v1/audit (OBS-1). */
+interface AuditListResponse {
+    events: AuditEvent[];
+    total: number;
+    cursor?: string;
+}
+/** Response from POST /v1/audit/export (OBS-1). */
+interface AuditExportResponse {
+    data: string;
+    format: string;
+    count: number;
+}
+/** Result from POST /v1/extract (EXT-1). */
+interface ExtractionResult {
+    entities: Record<string, unknown>[];
+    provider: string;
+    model?: string;
+    duration_ms: number;
+}
+/** Metadata for an available extraction provider (EXT-1). */
+interface ExtractionProviderInfo {
+    name: string;
+    available: boolean;
+    models: string[];
+}
+/** Request body for POST /v1/admin/encryption/rotate-key (SEC-3). */
+interface RotateEncryptionKeyRequest {
+    /** New passphrase or 64-char hex key to rotate to. */
+    new_key: string;
+    /** If set, rotate only memories in this namespace. Omit to rotate all. */
+    namespace?: string;
+}
+/** Response from POST /v1/admin/encryption/rotate-key (SEC-3). */
+interface RotateEncryptionKeyResponse {
+    rotated: number;
+    skipped: number;
+    namespaces: string[];
+}
 
 /**
  * Dakera Client
@@ -2215,6 +2294,10 @@ declare class DakeraClient {
     /** Get server stats (version, total_vectors, namespace_count, uptime_seconds, timestamp).
      *  Requires Read scope — works with read-only API keys, unlike clusterStatus. */
     opsStats(): Promise<OpsStats>;
+    /** Get Prometheus metrics in text exposition format (INFRA-3).
+     *  Requires Admin scope. Returns the raw Prometheus text exposition
+     *  format string suitable for scraping by a Prometheus server. */
+    opsMetrics(): Promise<string>;
     /** Get cluster status */
     clusterStatus(): Promise<ClusterStatus>;
     /** Get cluster nodes */
@@ -2278,6 +2361,17 @@ declare class DakeraClient {
     decayUpdateConfig(request: DecayConfigUpdateRequest): Promise<DecayConfigUpdateResponse>;
     /** Get decay activity counters and last-cycle snapshot (DECAY-2). Requires Admin scope. */
     decayStats(): Promise<DecayStatsResponse>;
+    /**
+     * Re-encrypt all memory content blobs with a new AES-256-GCM key (SEC-3).
+     *
+     * After this call the new key is active in the running process.
+     * The operator must update `DAKERA_ENCRYPTION_KEY` and restart to make the
+     * rotation durable across restarts. Requires Admin scope.
+     *
+     * @param newKey - New passphrase or 64-char hex key.
+     * @param namespace - Rotate only this namespace. Omit to rotate all.
+     */
+    rotateEncryptionKey(newKey: string, namespace?: string): Promise<RotateEncryptionKeyResponse>;
     /** Create a new API key */
     createKey(request: CreateKeyRequest): Promise<ApiKey>;
     /** List all API keys */
@@ -2433,6 +2527,95 @@ declare class DakeraClient {
      * @param keyId      The key whose usage to retrieve.
      */
     getNamespaceKeyUsage(namespace: string, keyId: string): Promise<NamespaceKeyUsageResponse>;
+    /**
+     * Import memories from an external format (DX-1).
+     *
+     * @param data     Serialised memories (list of objects for jsonl/mem0/zep, or a CSV string).
+     * @param format   One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+     * @param agentId  Assign all imported memories to this agent.
+     * @param namespace Target namespace (defaults to the client's configured namespace).
+     */
+    importMemories(data: unknown, format?: 'jsonl' | 'mem0' | 'zep' | 'csv', agentId?: string, namespace?: string): Promise<MemoryImportResponse>;
+    /**
+     * Export memories in a portable format (DX-1).
+     *
+     * @param format    One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+     * @param agentId   Export only memories for this agent.
+     * @param namespace Source namespace (defaults to client namespace).
+     * @param limit     Maximum number of memories to export.
+     */
+    exportMemories(format?: 'jsonl' | 'mem0' | 'zep' | 'csv', agentId?: string, namespace?: string, limit?: number): Promise<MemoryExportResponse>;
+    /**
+     * List paginated audit log entries (OBS-1).
+     *
+     * @param agentId   Filter to events from this agent.
+     * @param eventType Filter to a specific event type string.
+     * @param fromTs    Unix timestamp lower bound (inclusive).
+     * @param toTs      Unix timestamp upper bound (exclusive).
+     * @param limit     Maximum number of events to return.
+     * @param cursor    Pagination cursor from a previous response.
+     */
+    listAuditEvents(opts?: {
+        agentId?: string;
+        eventType?: string;
+        fromTs?: number;
+        toTs?: number;
+        limit?: number;
+        cursor?: string;
+    }): Promise<AuditListResponse>;
+    /**
+     * Stream live audit events via SSE (OBS-1).
+     *
+     * Opens a long-lived connection to `GET /v1/audit/stream` and yields
+     * {@link DakeraEvent} objects as they arrive.
+     *
+     * @param agentId   Scope the stream to a specific agent.
+     * @param eventType Scope the stream to a specific event type.
+     */
+    streamAuditEvents(opts?: {
+        agentId?: string;
+        eventType?: string;
+    }): AsyncGenerator<DakeraEvent>;
+    /**
+     * Bulk-export audit log entries (OBS-1).
+     *
+     * @param format    `"jsonl"` (default) or `"csv"`.
+     * @param agentId   Filter to a specific agent.
+     * @param eventType Filter to a specific event type.
+     * @param fromTs    Unix timestamp lower bound.
+     * @param toTs      Unix timestamp upper bound.
+     */
+    exportAudit(opts?: {
+        format?: 'jsonl' | 'csv';
+        agentId?: string;
+        eventType?: string;
+        fromTs?: number;
+        toTs?: number;
+    }): Promise<AuditExportResponse>;
+    /**
+     * Extract entities from text using a pluggable provider (EXT-1).
+     *
+     * Provider hierarchy: per-request override > namespace default > GLiNER (bundled).
+     *
+     * @param text      Input text to extract from.
+     * @param namespace Namespace whose default extractor to inherit.
+     * @param provider  Override provider: `"gliner"`, `"openai"`, `"anthropic"`,
+     *                  `"openrouter"`, or `"ollama"`.
+     * @param model     Override model within the chosen provider.
+     */
+    extractText(text: string, namespace?: string, provider?: 'gliner' | 'openai' | 'anthropic' | 'openrouter' | 'ollama', model?: string): Promise<ExtractionResult>;
+    /**
+     * List available extraction providers and their supported models (EXT-1).
+     */
+    listExtractProviders(): Promise<ExtractionProviderInfo[]>;
+    /**
+     * Set the default extraction provider for a namespace (EXT-1).
+     *
+     * @param namespace The namespace to configure.
+     * @param provider  Default provider.
+     * @param model     Default model within the provider (optional).
+     */
+    configureNamespaceExtractor(namespace: string, provider: 'gliner' | 'openai' | 'anthropic' | 'openrouter' | 'ollama', model?: string): Promise<Record<string, unknown>>;
 }
 
 /**
@@ -2497,4 +2680,4 @@ declare class TimeoutError extends DakeraError {
     constructor(message: string);
 }
 
-export { type AccessPatternHint, type AgentFeedbackSummary, type AgentId, type AgentNetworkEdge, type AgentNetworkInfo, type AgentNetworkNode, type AgentNetworkStats, type AgentStats, type AgentSummary, type AggregationGroup, type AggregationRequest, type AggregationResponse, type AnalyticsOptions, type AnalyticsOverview, type ApiKey, AuthenticationError, AuthorizationError, type AutoPilotConfig, type AutoPilotConfigRequest, type AutoPilotConfigResponse, type AutoPilotConsolidationResult, type AutoPilotDedupResult, type AutoPilotStatusResponse, type AutoPilotTriggerAction, type AutoPilotTriggerResponse, type BackupInfo, type BatchForgetRequest, type BatchForgetResponse, type BatchMemoryFilter, type BatchQuerySpec, type BatchRecallRequest, type BatchRecallResponse, type BatchTextQueryOptions, type BatchTextQueryResponse, type Branded, type CacheStats, type ClientOptions, type ClusterNode, type ClusterStatus, type ColumnUpsertRequest, type ConfigureNamespaceRequest, type ConfigureNamespaceResponse, ConnectionError, type ConsolidateRequest, type ConsolidateResponse, type ConsolidationResultSnapshot, type CreateKeyRequest, type CreateNamespaceKeyResponse, type CrossAgentNetworkRequest, type CrossAgentNetworkResponse, DakeraClient, DakeraError, type DakeraEvent, type DecayConfigResponse, type DecayConfigUpdateRequest, type DecayConfigUpdateResponse, type DecayStatsResponse, type DedupResultSnapshot, type DeduplicateRequest, type DeduplicateResponse, type DeleteOptions, type DeleteResponse, type DistanceMetric, type Document, type DocumentInput, type EdgeType, type EmbeddingModel, type EntityExtractionResponse, ErrorCode, type ExportRequest, type ExportResponse, type ExportedVector, type ExtractedEntity, type FeedbackHealthResponse, type FeedbackHistoryEntry, type FeedbackHistoryResponse, type FeedbackResponse, type FeedbackSignal, type FilterExpression, type FilterOperators, type FullKnowledgeGraphRequest, type FullTextSearchResult, type GraphEdge, type GraphExport, type GraphLinkResponse, type GraphNode, type GraphPath, type HealthResponse, type HybridSearchResult, type IndexStats, type JobProgressEvent, type KeyUsage, type KnowledgeEdge, type KnowledgeGraphRequest, type KnowledgeGraphResponse, type KnowledgeNode, type LastDecayCycleStats, type LatencyAnalytics, type ListNamespaceKeysResponse, type ListSessionsOptions, type Memory, type MemoryEntitiesResponse, type MemoryEvent, type MemoryFeedbackBodyRequest, type MemoryFeedbackRequest, type MemoryFeedbackResponse, type MemoryGraph, type MemoryGraphOptions, type MemoryId, type MemoryImportancePatchRequest, type MemoryType, type MultiVectorSearchRequest, type MultiVectorSearchResponse, type MultiVectorSearchResult, type NamespaceCreatedEvent, type NamespaceDeletedEvent, type NamespaceInfo, type NamespaceKeyInfo, type NamespaceKeyUsageResponse, type NamespaceNerConfig, NotFoundError, type OpStatus, type OperationProgressEvent, type OpsStats, type QueryExplainRequest, type QueryExplainResponse, type QueryOptions, type QueryResult, RateLimitError, type RateLimitHeaders, type ReadConsistency, type RecallRequest, type RecalledMemory, type RetryConfig, type SearchResult, ServerError, type Session, type SessionId, type SlowQuery, type StalenessConfig, type StartSessionRequest, type StorageAnalytics, type StoreMemoryRequest, type StoreMemoryResponse, type StreamLaggedEvent, type SummarizeRequest, type SummarizeResponse, type TextDocument, type TextQueryOptions, type TextQueryResponse, type TextSearchResult, type TextUpsertOptions, type TextUpsertResponse, type ThroughputAnalytics, TimeoutError, type TtlConfig, type UnifiedQueryRequest, type UnifiedQueryResponse, type UnifiedSearchResult, type UpdateImportanceRequest, type UpdateMemoryRequest, type UpsertOptions, type UpsertResponse, ValidationError, type Vector, type VectorId, type VectorInput, type VectorMutationOp, type VectorsMutatedEvent, type WarmCacheRequest, type WarmCacheResponse, type WarmingPriority, type WarmingTargetTier, agentId, memoryId, sessionId, vectorId };
+export { type AccessPatternHint, type AgentFeedbackSummary, type AgentId, type AgentNetworkEdge, type AgentNetworkInfo, type AgentNetworkNode, type AgentNetworkStats, type AgentStats, type AgentSummary, type AggregationGroup, type AggregationRequest, type AggregationResponse, type AnalyticsOptions, type AnalyticsOverview, type ApiKey, type AuditEvent, type AuditExportResponse, type AuditListResponse, AuthenticationError, AuthorizationError, type AutoPilotConfig, type AutoPilotConfigRequest, type AutoPilotConfigResponse, type AutoPilotConsolidationResult, type AutoPilotDedupResult, type AutoPilotStatusResponse, type AutoPilotTriggerAction, type AutoPilotTriggerResponse, type BackupInfo, type BatchForgetRequest, type BatchForgetResponse, type BatchMemoryFilter, type BatchQuerySpec, type BatchRecallRequest, type BatchRecallResponse, type BatchTextQueryOptions, type BatchTextQueryResponse, type Branded, type CacheStats, type ClientOptions, type ClusterNode, type ClusterStatus, type ColumnUpsertRequest, type ConfigureNamespaceRequest, type ConfigureNamespaceResponse, ConnectionError, type ConsolidateRequest, type ConsolidateResponse, type ConsolidationConfig, type ConsolidationLogEntry, type ConsolidationResultSnapshot, type CreateKeyRequest, type CreateNamespaceKeyResponse, type CrossAgentNetworkRequest, type CrossAgentNetworkResponse, DakeraClient, DakeraError, type DakeraEvent, type DecayConfigResponse, type DecayConfigUpdateRequest, type DecayConfigUpdateResponse, type DecayStatsResponse, type DedupResultSnapshot, type DeduplicateRequest, type DeduplicateResponse, type DeleteOptions, type DeleteResponse, type DistanceMetric, type Document, type DocumentInput, type EdgeType, type EmbeddingModel, type EntityExtractionResponse, ErrorCode, type ExportRequest, type ExportResponse, type ExportedVector, type ExtractedEntity, type ExtractionProviderInfo, type ExtractionResult, type FeedbackHealthResponse, type FeedbackHistoryEntry, type FeedbackHistoryResponse, type FeedbackResponse, type FeedbackSignal, type FilterExpression, type FilterOperators, type FullKnowledgeGraphRequest, type FullTextSearchResult, type GraphEdge, type GraphExport, type GraphLinkResponse, type GraphNode, type GraphPath, type HealthResponse, type HybridSearchResult, type IndexStats, type JobProgressEvent, type KeyUsage, type KnowledgeEdge, type KnowledgeGraphRequest, type KnowledgeGraphResponse, type KnowledgeNode, type LastDecayCycleStats, type LatencyAnalytics, type ListNamespaceKeysResponse, type ListSessionsOptions, type Memory, type MemoryEntitiesResponse, type MemoryEvent, type MemoryExportResponse, type MemoryFeedbackBodyRequest, type MemoryFeedbackRequest, type MemoryFeedbackResponse, type MemoryGraph, type MemoryGraphOptions, type MemoryId, type MemoryImportResponse, type MemoryImportancePatchRequest, type MemoryType, type MultiVectorSearchRequest, type MultiVectorSearchResponse, type MultiVectorSearchResult, type NamespaceCreatedEvent, type NamespaceDeletedEvent, type NamespaceInfo, type NamespaceKeyInfo, type NamespaceKeyUsageResponse, type NamespaceNerConfig, NotFoundError, type OpStatus, type OperationProgressEvent, type OpsStats, type QueryExplainRequest, type QueryExplainResponse, type QueryOptions, type QueryResult, RateLimitError, type RateLimitHeaders, type ReadConsistency, type RecallRequest, type RecalledMemory, type RetryConfig, type RotateEncryptionKeyRequest, type RotateEncryptionKeyResponse, type SearchResult, ServerError, type Session, type SessionId, type SlowQuery, type StalenessConfig, type StartSessionRequest, type StorageAnalytics, type StoreMemoryRequest, type StoreMemoryResponse, type StreamLaggedEvent, type SummarizeRequest, type SummarizeResponse, type TextDocument, type TextQueryOptions, type TextQueryResponse, type TextSearchResult, type TextUpsertOptions, type TextUpsertResponse, type ThroughputAnalytics, TimeoutError, type TtlConfig, type UnifiedQueryRequest, type UnifiedQueryResponse, type UnifiedSearchResult, type UpdateImportanceRequest, type UpdateMemoryRequest, type UpsertOptions, type UpsertResponse, ValidationError, type Vector, type VectorId, type VectorInput, type VectorMutationOp, type VectorsMutatedEvent, type WarmCacheRequest, type WarmCacheResponse, type WarmingPriority, type WarmingTargetTier, agentId, memoryId, sessionId, vectorId };

package/dist/index.d.ts

@@ -493,6 +493,8 @@ interface ConsolidateRequest {
     threshold?: number;
     /** Dry run mode */
     dry_run?: boolean;
+    /** Optional DBSCAN algorithm config (CE-6) */
+    config?: ConsolidationConfig;
 }
 /** Response from consolidation */
 interface ConsolidateResponse {
@@ -502,6 +504,8 @@ interface ConsolidateResponse {
     removed_count: number;
     /** IDs of new consolidated memories */
     new_memories: MemoryId[];
+    /** Step-by-step consolidation log (CE-6) */
+    log?: ConsolidationLogEntry[];
 }
 /** Request for memory feedback */
 interface MemoryFeedbackRequest {
@@ -1467,6 +1471,81 @@ interface NamespaceKeyUsageResponse {
     bytes_transferred: number;
     avg_latency_ms: number;
 }
+/** Algorithm config for DBSCAN adaptive consolidation (CE-6). */
+interface ConsolidationConfig {
+    /** Clustering algorithm: `"dbscan"` (default) or `"greedy"`. */
+    algorithm?: 'dbscan' | 'greedy';
+    /** Minimum cluster samples for DBSCAN. */
+    min_samples?: number;
+    /** Epsilon distance parameter for DBSCAN. */
+    eps?: number;
+}
+/** One step in the consolidation execution log (CE-6). */
+interface ConsolidationLogEntry {
+    step: string;
+    memories_before: number;
+    memories_after: number;
+    duration_ms: number;
+}
+/** Response from POST /v1/import (DX-1). */
+interface MemoryImportResponse {
+    imported_count: number;
+    skipped_count: number;
+    errors: string[];
+}
+/** Response from GET /v1/export (DX-1). */
+interface MemoryExportResponse {
+    data: Record<string, unknown>[];
+    format: string;
+    count: number;
+}
+/** A single business-event entry from the audit log (OBS-1). */
+interface AuditEvent {
+    id: string;
+    event_type: string;
+    agent_id?: string;
+    namespace?: string;
+    timestamp: number;
+    details: Record<string, unknown>;
+}
+/** Response from GET /v1/audit (OBS-1). */
+interface AuditListResponse {
+    events: AuditEvent[];
+    total: number;
+    cursor?: string;
+}
+/** Response from POST /v1/audit/export (OBS-1). */
+interface AuditExportResponse {
+    data: string;
+    format: string;
+    count: number;
+}
+/** Result from POST /v1/extract (EXT-1). */
+interface ExtractionResult {
+    entities: Record<string, unknown>[];
+    provider: string;
+    model?: string;
+    duration_ms: number;
+}
+/** Metadata for an available extraction provider (EXT-1). */
+interface ExtractionProviderInfo {
+    name: string;
+    available: boolean;
+    models: string[];
+}
+/** Request body for POST /v1/admin/encryption/rotate-key (SEC-3). */
+interface RotateEncryptionKeyRequest {
+    /** New passphrase or 64-char hex key to rotate to. */
+    new_key: string;
+    /** If set, rotate only memories in this namespace. Omit to rotate all. */
+    namespace?: string;
+}
+/** Response from POST /v1/admin/encryption/rotate-key (SEC-3). */
+interface RotateEncryptionKeyResponse {
+    rotated: number;
+    skipped: number;
+    namespaces: string[];
+}
 
 /**
  * Dakera Client
@@ -2215,6 +2294,10 @@ declare class DakeraClient {
     /** Get server stats (version, total_vectors, namespace_count, uptime_seconds, timestamp).
      *  Requires Read scope — works with read-only API keys, unlike clusterStatus. */
     opsStats(): Promise<OpsStats>;
+    /** Get Prometheus metrics in text exposition format (INFRA-3).
+     *  Requires Admin scope. Returns the raw Prometheus text exposition
+     *  format string suitable for scraping by a Prometheus server. */
+    opsMetrics(): Promise<string>;
     /** Get cluster status */
     clusterStatus(): Promise<ClusterStatus>;
     /** Get cluster nodes */
@@ -2278,6 +2361,17 @@ declare class DakeraClient {
     decayUpdateConfig(request: DecayConfigUpdateRequest): Promise<DecayConfigUpdateResponse>;
     /** Get decay activity counters and last-cycle snapshot (DECAY-2). Requires Admin scope. */
     decayStats(): Promise<DecayStatsResponse>;
+    /**
+     * Re-encrypt all memory content blobs with a new AES-256-GCM key (SEC-3).
+     *
+     * After this call the new key is active in the running process.
+     * The operator must update `DAKERA_ENCRYPTION_KEY` and restart to make the
+     * rotation durable across restarts. Requires Admin scope.
+     *
+     * @param newKey - New passphrase or 64-char hex key.
+     * @param namespace - Rotate only this namespace. Omit to rotate all.
+     */
+    rotateEncryptionKey(newKey: string, namespace?: string): Promise<RotateEncryptionKeyResponse>;
     /** Create a new API key */
     createKey(request: CreateKeyRequest): Promise<ApiKey>;
     /** List all API keys */
@@ -2433,6 +2527,95 @@ declare class DakeraClient {
      * @param keyId      The key whose usage to retrieve.
      */
     getNamespaceKeyUsage(namespace: string, keyId: string): Promise<NamespaceKeyUsageResponse>;
+    /**
+     * Import memories from an external format (DX-1).
+     *
+     * @param data     Serialised memories (list of objects for jsonl/mem0/zep, or a CSV string).
+     * @param format   One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+     * @param agentId  Assign all imported memories to this agent.
+     * @param namespace Target namespace (defaults to the client's configured namespace).
+     */
+    importMemories(data: unknown, format?: 'jsonl' | 'mem0' | 'zep' | 'csv', agentId?: string, namespace?: string): Promise<MemoryImportResponse>;
+    /**
+     * Export memories in a portable format (DX-1).
+     *
+     * @param format    One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+     * @param agentId   Export only memories for this agent.
+     * @param namespace Source namespace (defaults to client namespace).
+     * @param limit     Maximum number of memories to export.
+     */
+    exportMemories(format?: 'jsonl' | 'mem0' | 'zep' | 'csv', agentId?: string, namespace?: string, limit?: number): Promise<MemoryExportResponse>;
+    /**
+     * List paginated audit log entries (OBS-1).
+     *
+     * @param agentId   Filter to events from this agent.
+     * @param eventType Filter to a specific event type string.
+     * @param fromTs    Unix timestamp lower bound (inclusive).
+     * @param toTs      Unix timestamp upper bound (exclusive).
+     * @param limit     Maximum number of events to return.
+     * @param cursor    Pagination cursor from a previous response.
+     */
+    listAuditEvents(opts?: {
+        agentId?: string;
+        eventType?: string;
+        fromTs?: number;
+        toTs?: number;
+        limit?: number;
+        cursor?: string;
+    }): Promise<AuditListResponse>;
+    /**
+     * Stream live audit events via SSE (OBS-1).
+     *
+     * Opens a long-lived connection to `GET /v1/audit/stream` and yields
+     * {@link DakeraEvent} objects as they arrive.
+     *
+     * @param agentId   Scope the stream to a specific agent.
+     * @param eventType Scope the stream to a specific event type.
+     */
+    streamAuditEvents(opts?: {
+        agentId?: string;
+        eventType?: string;
+    }): AsyncGenerator<DakeraEvent>;
+    /**
+     * Bulk-export audit log entries (OBS-1).
+     *
+     * @param format    `"jsonl"` (default) or `"csv"`.
+     * @param agentId   Filter to a specific agent.
+     * @param eventType Filter to a specific event type.
+     * @param fromTs    Unix timestamp lower bound.
+     * @param toTs      Unix timestamp upper bound.
+     */
+    exportAudit(opts?: {
+        format?: 'jsonl' | 'csv';
+        agentId?: string;
+        eventType?: string;
+        fromTs?: number;
+        toTs?: number;
+    }): Promise<AuditExportResponse>;
+    /**
+     * Extract entities from text using a pluggable provider (EXT-1).
+     *
+     * Provider hierarchy: per-request override > namespace default > GLiNER (bundled).
+     *
+     * @param text      Input text to extract from.
+     * @param namespace Namespace whose default extractor to inherit.
+     * @param provider  Override provider: `"gliner"`, `"openai"`, `"anthropic"`,
+     *                  `"openrouter"`, or `"ollama"`.
+     * @param model     Override model within the chosen provider.
+     */
+    extractText(text: string, namespace?: string, provider?: 'gliner' | 'openai' | 'anthropic' | 'openrouter' | 'ollama', model?: string): Promise<ExtractionResult>;
+    /**
+     * List available extraction providers and their supported models (EXT-1).
+     */
+    listExtractProviders(): Promise<ExtractionProviderInfo[]>;
+    /**
+     * Set the default extraction provider for a namespace (EXT-1).
+     *
+     * @param namespace The namespace to configure.
+     * @param provider  Default provider.
+     * @param model     Default model within the provider (optional).
+     */
+    configureNamespaceExtractor(namespace: string, provider: 'gliner' | 'openai' | 'anthropic' | 'openrouter' | 'ollama', model?: string): Promise<Record<string, unknown>>;
 }
 
 /**
@@ -2497,4 +2680,4 @@ declare class TimeoutError extends DakeraError {
     constructor(message: string);
 }
 
-export { type AccessPatternHint, type AgentFeedbackSummary, type AgentId, type AgentNetworkEdge, type AgentNetworkInfo, type AgentNetworkNode, type AgentNetworkStats, type AgentStats, type AgentSummary, type AggregationGroup, type AggregationRequest, type AggregationResponse, type AnalyticsOptions, type AnalyticsOverview, type ApiKey, AuthenticationError, AuthorizationError, type AutoPilotConfig, type AutoPilotConfigRequest, type AutoPilotConfigResponse, type AutoPilotConsolidationResult, type AutoPilotDedupResult, type AutoPilotStatusResponse, type AutoPilotTriggerAction, type AutoPilotTriggerResponse, type BackupInfo, type BatchForgetRequest, type BatchForgetResponse, type BatchMemoryFilter, type BatchQuerySpec, type BatchRecallRequest, type BatchRecallResponse, type BatchTextQueryOptions, type BatchTextQueryResponse, type Branded, type CacheStats, type ClientOptions, type ClusterNode, type ClusterStatus, type ColumnUpsertRequest, type ConfigureNamespaceRequest, type ConfigureNamespaceResponse, ConnectionError, type ConsolidateRequest, type ConsolidateResponse, type ConsolidationResultSnapshot, type CreateKeyRequest, type CreateNamespaceKeyResponse, type CrossAgentNetworkRequest, type CrossAgentNetworkResponse, DakeraClient, DakeraError, type DakeraEvent, type DecayConfigResponse, type DecayConfigUpdateRequest, type DecayConfigUpdateResponse, type DecayStatsResponse, type DedupResultSnapshot, type DeduplicateRequest, type DeduplicateResponse, type DeleteOptions, type DeleteResponse, type DistanceMetric, type Document, type DocumentInput, type EdgeType, type EmbeddingModel, type EntityExtractionResponse, ErrorCode, type ExportRequest, type ExportResponse, type ExportedVector, type ExtractedEntity, type FeedbackHealthResponse, type FeedbackHistoryEntry, type FeedbackHistoryResponse, type FeedbackResponse, type FeedbackSignal, type FilterExpression, type FilterOperators, type FullKnowledgeGraphRequest, type FullTextSearchResult, type GraphEdge, type GraphExport, type GraphLinkResponse, type GraphNode, type GraphPath, type HealthResponse, type HybridSearchResult, type IndexStats, type JobProgressEvent, type KeyUsage, type KnowledgeEdge, type KnowledgeGraphRequest, type KnowledgeGraphResponse, type KnowledgeNode, type LastDecayCycleStats, type LatencyAnalytics, type ListNamespaceKeysResponse, type ListSessionsOptions, type Memory, type MemoryEntitiesResponse, type MemoryEvent, type MemoryFeedbackBodyRequest, type MemoryFeedbackRequest, type MemoryFeedbackResponse, type MemoryGraph, type MemoryGraphOptions, type MemoryId, type MemoryImportancePatchRequest, type MemoryType, type MultiVectorSearchRequest, type MultiVectorSearchResponse, type MultiVectorSearchResult, type NamespaceCreatedEvent, type NamespaceDeletedEvent, type NamespaceInfo, type NamespaceKeyInfo, type NamespaceKeyUsageResponse, type NamespaceNerConfig, NotFoundError, type OpStatus, type OperationProgressEvent, type OpsStats, type QueryExplainRequest, type QueryExplainResponse, type QueryOptions, type QueryResult, RateLimitError, type RateLimitHeaders, type ReadConsistency, type RecallRequest, type RecalledMemory, type RetryConfig, type SearchResult, ServerError, type Session, type SessionId, type SlowQuery, type StalenessConfig, type StartSessionRequest, type StorageAnalytics, type StoreMemoryRequest, type StoreMemoryResponse, type StreamLaggedEvent, type SummarizeRequest, type SummarizeResponse, type TextDocument, type TextQueryOptions, type TextQueryResponse, type TextSearchResult, type TextUpsertOptions, type TextUpsertResponse, type ThroughputAnalytics, TimeoutError, type TtlConfig, type UnifiedQueryRequest, type UnifiedQueryResponse, type UnifiedSearchResult, type UpdateImportanceRequest, type UpdateMemoryRequest, type UpsertOptions, type UpsertResponse, ValidationError, type Vector, type VectorId, type VectorInput, type VectorMutationOp, type VectorsMutatedEvent, type WarmCacheRequest, type WarmCacheResponse, type WarmingPriority, type WarmingTargetTier, agentId, memoryId, sessionId, vectorId };
+export { type AccessPatternHint, type AgentFeedbackSummary, type AgentId, type AgentNetworkEdge, type AgentNetworkInfo, type AgentNetworkNode, type AgentNetworkStats, type AgentStats, type AgentSummary, type AggregationGroup, type AggregationRequest, type AggregationResponse, type AnalyticsOptions, type AnalyticsOverview, type ApiKey, type AuditEvent, type AuditExportResponse, type AuditListResponse, AuthenticationError, AuthorizationError, type AutoPilotConfig, type AutoPilotConfigRequest, type AutoPilotConfigResponse, type AutoPilotConsolidationResult, type AutoPilotDedupResult, type AutoPilotStatusResponse, type AutoPilotTriggerAction, type AutoPilotTriggerResponse, type BackupInfo, type BatchForgetRequest, type BatchForgetResponse, type BatchMemoryFilter, type BatchQuerySpec, type BatchRecallRequest, type BatchRecallResponse, type BatchTextQueryOptions, type BatchTextQueryResponse, type Branded, type CacheStats, type ClientOptions, type ClusterNode, type ClusterStatus, type ColumnUpsertRequest, type ConfigureNamespaceRequest, type ConfigureNamespaceResponse, ConnectionError, type ConsolidateRequest, type ConsolidateResponse, type ConsolidationConfig, type ConsolidationLogEntry, type ConsolidationResultSnapshot, type CreateKeyRequest, type CreateNamespaceKeyResponse, type CrossAgentNetworkRequest, type CrossAgentNetworkResponse, DakeraClient, DakeraError, type DakeraEvent, type DecayConfigResponse, type DecayConfigUpdateRequest, type DecayConfigUpdateResponse, type DecayStatsResponse, type DedupResultSnapshot, type DeduplicateRequest, type DeduplicateResponse, type DeleteOptions, type DeleteResponse, type DistanceMetric, type Document, type DocumentInput, type EdgeType, type EmbeddingModel, type EntityExtractionResponse, ErrorCode, type ExportRequest, type ExportResponse, type ExportedVector, type ExtractedEntity, type ExtractionProviderInfo, type ExtractionResult, type FeedbackHealthResponse, type FeedbackHistoryEntry, type FeedbackHistoryResponse, type FeedbackResponse, type FeedbackSignal, type FilterExpression, type FilterOperators, type FullKnowledgeGraphRequest, type FullTextSearchResult, type GraphEdge, type GraphExport, type GraphLinkResponse, type GraphNode, type GraphPath, type HealthResponse, type HybridSearchResult, type IndexStats, type JobProgressEvent, type KeyUsage, type KnowledgeEdge, type KnowledgeGraphRequest, type KnowledgeGraphResponse, type KnowledgeNode, type LastDecayCycleStats, type LatencyAnalytics, type ListNamespaceKeysResponse, type ListSessionsOptions, type Memory, type MemoryEntitiesResponse, type MemoryEvent, type MemoryExportResponse, type MemoryFeedbackBodyRequest, type MemoryFeedbackRequest, type MemoryFeedbackResponse, type MemoryGraph, type MemoryGraphOptions, type MemoryId, type MemoryImportResponse, type MemoryImportancePatchRequest, type MemoryType, type MultiVectorSearchRequest, type MultiVectorSearchResponse, type MultiVectorSearchResult, type NamespaceCreatedEvent, type NamespaceDeletedEvent, type NamespaceInfo, type NamespaceKeyInfo, type NamespaceKeyUsageResponse, type NamespaceNerConfig, NotFoundError, type OpStatus, type OperationProgressEvent, type OpsStats, type QueryExplainRequest, type QueryExplainResponse, type QueryOptions, type QueryResult, RateLimitError, type RateLimitHeaders, type ReadConsistency, type RecallRequest, type RecalledMemory, type RetryConfig, type RotateEncryptionKeyRequest, type RotateEncryptionKeyResponse, type SearchResult, ServerError, type Session, type SessionId, type SlowQuery, type StalenessConfig, type StartSessionRequest, type StorageAnalytics, type StoreMemoryRequest, type StoreMemoryResponse, type StreamLaggedEvent, type SummarizeRequest, type SummarizeResponse, type TextDocument, type TextQueryOptions, type TextQueryResponse, type TextSearchResult, type TextUpsertOptions, type TextUpsertResponse, type ThroughputAnalytics, TimeoutError, type TtlConfig, type UnifiedQueryRequest, type UnifiedQueryResponse, type UnifiedSearchResult, type UpdateImportanceRequest, type UpdateMemoryRequest, type UpsertOptions, type UpsertResponse, ValidationError, type Vector, type VectorId, type VectorInput, type VectorMutationOp, type VectorsMutatedEvent, type WarmCacheRequest, type WarmCacheResponse, type WarmingPriority, type WarmingTargetTier, agentId, memoryId, sessionId, vectorId };

package/dist/index.js

@@ -1435,6 +1435,12 @@ var DakeraClient = class {
   async opsStats() {
     return this.request("GET", "/v1/ops/stats");
   }
+  /** Get Prometheus metrics in text exposition format (INFRA-3).
+   *  Requires Admin scope. Returns the raw Prometheus text exposition
+   *  format string suitable for scraping by a Prometheus server. */
+  async opsMetrics() {
+    return this.request("GET", "/v1/ops/metrics");
+  }
   /** Get cluster status */
   async clusterStatus() {
     return this.request("GET", "/v1/admin/cluster/status");
@@ -1538,6 +1544,25 @@ var DakeraClient = class {
   async decayStats() {
     return this.request("GET", "/v1/admin/decay/stats");
   }
+  /**
+   * Re-encrypt all memory content blobs with a new AES-256-GCM key (SEC-3).
+   *
+   * After this call the new key is active in the running process.
+   * The operator must update `DAKERA_ENCRYPTION_KEY` and restart to make the
+   * rotation durable across restarts. Requires Admin scope.
+   *
+   * @param newKey - New passphrase or 64-char hex key.
+   * @param namespace - Rotate only this namespace. Omit to rotate all.
+   */
+  async rotateEncryptionKey(newKey, namespace) {
+    const body = { new_key: newKey };
+    if (namespace !== void 0) body.namespace = namespace;
+    return this.request(
+      "POST",
+      "/v1/admin/encryption/rotate-key",
+      body
+    );
+  }
   // ===========================================================================
   // API Key Operations
   // ===========================================================================
@@ -1848,6 +1873,139 @@ var DakeraClient = class {
   async getNamespaceKeyUsage(namespace, keyId) {
     return this.request("GET", `/v1/namespaces/${namespace}/keys/${keyId}/usage`);
   }
+  // ===========================================================================
+  // DX-1: Memory Import / Export
+  // ===========================================================================
+  /**
+   * Import memories from an external format (DX-1).
+   *
+   * @param data     Serialised memories (list of objects for jsonl/mem0/zep, or a CSV string).
+   * @param format   One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+   * @param agentId  Assign all imported memories to this agent.
+   * @param namespace Target namespace (defaults to the client's configured namespace).
+   */
+  async importMemories(data, format = "jsonl", agentId2, namespace) {
+    const body = { data, format };
+    if (agentId2 !== void 0) body.agent_id = agentId2;
+    if (namespace !== void 0) body.namespace = namespace;
+    return this.request("POST", "/v1/import", body);
+  }
+  /**
+   * Export memories in a portable format (DX-1).
+   *
+   * @param format    One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+   * @param agentId   Export only memories for this agent.
+   * @param namespace Source namespace (defaults to client namespace).
+   * @param limit     Maximum number of memories to export.
+   */
+  async exportMemories(format = "jsonl", agentId2, namespace, limit) {
+    const params = new URLSearchParams({ format });
+    if (agentId2 !== void 0) params.set("agent_id", agentId2);
+    if (namespace !== void 0) params.set("namespace", namespace);
+    if (limit !== void 0) params.set("limit", String(limit));
+    return this.request("GET", `/v1/export?${params}`);
+  }
+  // ===========================================================================
+  // OBS-1: Business-Event Audit Log
+  // ===========================================================================
+  /**
+   * List paginated audit log entries (OBS-1).
+   *
+   * @param agentId   Filter to events from this agent.
+   * @param eventType Filter to a specific event type string.
+   * @param fromTs    Unix timestamp lower bound (inclusive).
+   * @param toTs      Unix timestamp upper bound (exclusive).
+   * @param limit     Maximum number of events to return.
+   * @param cursor    Pagination cursor from a previous response.
+   */
+  async listAuditEvents(opts) {
+    const params = new URLSearchParams();
+    if (opts?.agentId) params.set("agent_id", opts.agentId);
+    if (opts?.eventType) params.set("event_type", opts.eventType);
+    if (opts?.fromTs !== void 0) params.set("from", String(opts.fromTs));
+    if (opts?.toTs !== void 0) params.set("to", String(opts.toTs));
+    if (opts?.limit !== void 0) params.set("limit", String(opts.limit));
+    if (opts?.cursor) params.set("cursor", opts.cursor);
+    const qs = params.toString();
+    return this.request("GET", qs ? `/v1/audit?${qs}` : "/v1/audit");
+  }
+  /**
+   * Stream live audit events via SSE (OBS-1).
+   *
+   * Opens a long-lived connection to `GET /v1/audit/stream` and yields
+   * {@link DakeraEvent} objects as they arrive.
+   *
+   * @param agentId   Scope the stream to a specific agent.
+   * @param eventType Scope the stream to a specific event type.
+   */
+  async *streamAuditEvents(opts) {
+    const params = new URLSearchParams();
+    if (opts?.agentId) params.set("agent_id", opts.agentId);
+    if (opts?.eventType) params.set("event_type", opts.eventType);
+    const qs = params.toString();
+    const url = `${this.baseUrl}/v1/audit/stream${qs ? `?${qs}` : ""}`;
+    yield* this._streamSse(url);
+  }
+  /**
+   * Bulk-export audit log entries (OBS-1).
+   *
+   * @param format    `"jsonl"` (default) or `"csv"`.
+   * @param agentId   Filter to a specific agent.
+   * @param eventType Filter to a specific event type.
+   * @param fromTs    Unix timestamp lower bound.
+   * @param toTs      Unix timestamp upper bound.
+   */
+  async exportAudit(opts) {
+    const body = { format: opts?.format ?? "jsonl" };
+    if (opts?.agentId) body.agent_id = opts.agentId;
+    if (opts?.eventType) body.event_type = opts.eventType;
+    if (opts?.fromTs !== void 0) body.from = opts.fromTs;
+    if (opts?.toTs !== void 0) body.to = opts.toTs;
+    return this.request("POST", "/v1/audit/export", body);
+  }
+  // ===========================================================================
+  // EXT-1: External Extraction Providers
+  // ===========================================================================
+  /**
+   * Extract entities from text using a pluggable provider (EXT-1).
+   *
+   * Provider hierarchy: per-request override > namespace default > GLiNER (bundled).
+   *
+   * @param text      Input text to extract from.
+   * @param namespace Namespace whose default extractor to inherit.
+   * @param provider  Override provider: `"gliner"`, `"openai"`, `"anthropic"`,
+   *                  `"openrouter"`, or `"ollama"`.
+   * @param model     Override model within the chosen provider.
+   */
+  async extractText(text, namespace, provider, model) {
+    const body = { text };
+    if (namespace !== void 0) body.namespace = namespace;
+    if (provider !== void 0) body.provider = provider;
+    if (model !== void 0) body.model = model;
+    return this.request("POST", "/v1/extract", body);
+  }
+  /**
+   * List available extraction providers and their supported models (EXT-1).
+   */
+  async listExtractProviders() {
+    const result = await this.request(
+      "GET",
+      "/v1/extract/providers"
+    );
+    return Array.isArray(result) ? result : result.providers;
+  }
+  /**
+   * Set the default extraction provider for a namespace (EXT-1).
+   *
+   * @param namespace The namespace to configure.
+   * @param provider  Default provider.
+   * @param model     Default model within the provider (optional).
+   */
+  async configureNamespaceExtractor(namespace, provider, model) {
+    const body = { provider };
+    if (model !== void 0) body.model = model;
+    return this.request("PATCH", `/v1/namespaces/${encodeURIComponent(namespace)}/extractor`, body);
+  }
 };
 
 // src/types.ts

package/dist/index.mjs

@@ -1395,6 +1395,12 @@ var DakeraClient = class {
   async opsStats() {
     return this.request("GET", "/v1/ops/stats");
   }
+  /** Get Prometheus metrics in text exposition format (INFRA-3).
+   *  Requires Admin scope. Returns the raw Prometheus text exposition
+   *  format string suitable for scraping by a Prometheus server. */
+  async opsMetrics() {
+    return this.request("GET", "/v1/ops/metrics");
+  }
   /** Get cluster status */
   async clusterStatus() {
     return this.request("GET", "/v1/admin/cluster/status");
@@ -1498,6 +1504,25 @@ var DakeraClient = class {
   async decayStats() {
     return this.request("GET", "/v1/admin/decay/stats");
   }
+  /**
+   * Re-encrypt all memory content blobs with a new AES-256-GCM key (SEC-3).
+   *
+   * After this call the new key is active in the running process.
+   * The operator must update `DAKERA_ENCRYPTION_KEY` and restart to make the
+   * rotation durable across restarts. Requires Admin scope.
+   *
+   * @param newKey - New passphrase or 64-char hex key.
+   * @param namespace - Rotate only this namespace. Omit to rotate all.
+   */
+  async rotateEncryptionKey(newKey, namespace) {
+    const body = { new_key: newKey };
+    if (namespace !== void 0) body.namespace = namespace;
+    return this.request(
+      "POST",
+      "/v1/admin/encryption/rotate-key",
+      body
+    );
+  }
   // ===========================================================================
   // API Key Operations
   // ===========================================================================
@@ -1808,6 +1833,139 @@ var DakeraClient = class {
   async getNamespaceKeyUsage(namespace, keyId) {
     return this.request("GET", `/v1/namespaces/${namespace}/keys/${keyId}/usage`);
   }
+  // ===========================================================================
+  // DX-1: Memory Import / Export
+  // ===========================================================================
+  /**
+   * Import memories from an external format (DX-1).
+   *
+   * @param data     Serialised memories (list of objects for jsonl/mem0/zep, or a CSV string).
+   * @param format   One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+   * @param agentId  Assign all imported memories to this agent.
+   * @param namespace Target namespace (defaults to the client's configured namespace).
+   */
+  async importMemories(data, format = "jsonl", agentId2, namespace) {
+    const body = { data, format };
+    if (agentId2 !== void 0) body.agent_id = agentId2;
+    if (namespace !== void 0) body.namespace = namespace;
+    return this.request("POST", "/v1/import", body);
+  }
+  /**
+   * Export memories in a portable format (DX-1).
+   *
+   * @param format    One of `"jsonl"`, `"mem0"`, `"zep"`, `"csv"`. Defaults to `"jsonl"`.
+   * @param agentId   Export only memories for this agent.
+   * @param namespace Source namespace (defaults to client namespace).
+   * @param limit     Maximum number of memories to export.
+   */
+  async exportMemories(format = "jsonl", agentId2, namespace, limit) {
+    const params = new URLSearchParams({ format });
+    if (agentId2 !== void 0) params.set("agent_id", agentId2);
+    if (namespace !== void 0) params.set("namespace", namespace);
+    if (limit !== void 0) params.set("limit", String(limit));
+    return this.request("GET", `/v1/export?${params}`);
+  }
+  // ===========================================================================
+  // OBS-1: Business-Event Audit Log
+  // ===========================================================================
+  /**
+   * List paginated audit log entries (OBS-1).
+   *
+   * @param agentId   Filter to events from this agent.
+   * @param eventType Filter to a specific event type string.
+   * @param fromTs    Unix timestamp lower bound (inclusive).
+   * @param toTs      Unix timestamp upper bound (exclusive).
+   * @param limit     Maximum number of events to return.
+   * @param cursor    Pagination cursor from a previous response.
+   */
+  async listAuditEvents(opts) {
+    const params = new URLSearchParams();
+    if (opts?.agentId) params.set("agent_id", opts.agentId);
+    if (opts?.eventType) params.set("event_type", opts.eventType);
+    if (opts?.fromTs !== void 0) params.set("from", String(opts.fromTs));
+    if (opts?.toTs !== void 0) params.set("to", String(opts.toTs));
+    if (opts?.limit !== void 0) params.set("limit", String(opts.limit));
+    if (opts?.cursor) params.set("cursor", opts.cursor);
+    const qs = params.toString();
+    return this.request("GET", qs ? `/v1/audit?${qs}` : "/v1/audit");
+  }
+  /**
+   * Stream live audit events via SSE (OBS-1).
+   *
+   * Opens a long-lived connection to `GET /v1/audit/stream` and yields
+   * {@link DakeraEvent} objects as they arrive.
+   *
+   * @param agentId   Scope the stream to a specific agent.
+   * @param eventType Scope the stream to a specific event type.
+   */
+  async *streamAuditEvents(opts) {
+    const params = new URLSearchParams();
+    if (opts?.agentId) params.set("agent_id", opts.agentId);
+    if (opts?.eventType) params.set("event_type", opts.eventType);
+    const qs = params.toString();
+    const url = `${this.baseUrl}/v1/audit/stream${qs ? `?${qs}` : ""}`;
+    yield* this._streamSse(url);
+  }
+  /**
+   * Bulk-export audit log entries (OBS-1).
+   *
+   * @param format    `"jsonl"` (default) or `"csv"`.
+   * @param agentId   Filter to a specific agent.
+   * @param eventType Filter to a specific event type.
+   * @param fromTs    Unix timestamp lower bound.
+   * @param toTs      Unix timestamp upper bound.
+   */
+  async exportAudit(opts) {
+    const body = { format: opts?.format ?? "jsonl" };
+    if (opts?.agentId) body.agent_id = opts.agentId;
+    if (opts?.eventType) body.event_type = opts.eventType;
+    if (opts?.fromTs !== void 0) body.from = opts.fromTs;
+    if (opts?.toTs !== void 0) body.to = opts.toTs;
+    return this.request("POST", "/v1/audit/export", body);
+  }
+  // ===========================================================================
+  // EXT-1: External Extraction Providers
+  // ===========================================================================
+  /**
+   * Extract entities from text using a pluggable provider (EXT-1).
+   *
+   * Provider hierarchy: per-request override > namespace default > GLiNER (bundled).
+   *
+   * @param text      Input text to extract from.
+   * @param namespace Namespace whose default extractor to inherit.
+   * @param provider  Override provider: `"gliner"`, `"openai"`, `"anthropic"`,
+   *                  `"openrouter"`, or `"ollama"`.
+   * @param model     Override model within the chosen provider.
+   */
+  async extractText(text, namespace, provider, model) {
+    const body = { text };
+    if (namespace !== void 0) body.namespace = namespace;
+    if (provider !== void 0) body.provider = provider;
+    if (model !== void 0) body.model = model;
+    return this.request("POST", "/v1/extract", body);
+  }
+  /**
+   * List available extraction providers and their supported models (EXT-1).
+   */
+  async listExtractProviders() {
+    const result = await this.request(
+      "GET",
+      "/v1/extract/providers"
+    );
+    return Array.isArray(result) ? result : result.providers;
+  }
+  /**
+   * Set the default extraction provider for a namespace (EXT-1).
+   *
+   * @param namespace The namespace to configure.
+   * @param provider  Default provider.
+   * @param model     Default model within the provider (optional).
+   */
+  async configureNamespaceExtractor(namespace, provider, model) {
+    const body = { provider };
+    if (model !== void 0) body.model = model;
+    return this.request("PATCH", `/v1/namespaces/${encodeURIComponent(namespace)}/extractor`, body);
+  }
 };
 
 // src/types.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dakera-ai/dakera",
-  "version": "0.9.2",
+  "version": "0.9.5",
   "description": "TypeScript/JavaScript SDK for Dakera AI memory platform",
   "main": "dist/index.js",
   "module": "dist/index.mjs",