@heossi/qnsi 0.3.2

package/dist/ai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.d.ts","sourceRoot":"","sources":["../src/ai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,qBAAa,QAAQ;IACR,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAI/C,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAItF,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;IAI1C,QAAQ,CAAC,OAAO,EAAE,MAAM;IAIxB,WAAW,CACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAK9C,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAS5E,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAMxF,cAAc,CAAC,GAAG,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAIxF,WAAW,CAAC,UAAU,EAAE,MAAM;IAI9B,aAAa,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;IAI7C,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAWhF,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAMpF,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;CAG5F"}

package/dist/ai.js

@@ -0,0 +1,53 @@
+/**
+ * QNSP AI Orchestrator — model registry, AI workloads with enclave
+ * attestation, inference, bias / prompt-injection monitoring. Wraps
+ * `apps/ai-orchestrator` (`/ai/v1`).
+ */
+const PATH_PREFIX = "/proxy/ai/v1";
+export class AiClient {
+    internal;
+    constructor(internal) {
+        this.internal = internal;
+    }
+    // ── Model registry ──────────────────────────────────────────────
+    registerModel(req, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/models`, req, opts);
+    }
+    listModels(query) {
+        return this.internal.request("GET", `${PATH_PREFIX}/models`, undefined, { query });
+    }
+    getModel(modelId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/models/${modelId}`);
+    }
+    updateModel(modelId, body, opts) {
+        return this.internal.request("PATCH", `${PATH_PREFIX}/models/${modelId}`, body, opts);
+    }
+    activateModel(modelId, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/models/${modelId}/activate`, undefined, opts);
+    }
+    deployModel(body, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/models/deploy`, body, opts);
+    }
+    // ── Workloads ───────────────────────────────────────────────────
+    submitWorkload(req, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/workloads`, req, opts);
+    }
+    getWorkload(workloadId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/workloads/${workloadId}`);
+    }
+    listWorkloads(query) {
+        return this.internal.request("GET", `${PATH_PREFIX}/workloads`, undefined, { query });
+    }
+    cancelWorkload(workloadId, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/workloads/${workloadId}/cancel`, undefined, opts);
+    }
+    // ── Inference ────────────────────────────────────────────────────
+    invokeInference(req, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/inference`, req, opts);
+    }
+    // ── Artifacts ────────────────────────────────────────────────────
+    registerArtifact(req, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/artifacts`, req, opts);
+    }
+}
+//# sourceMappingURL=ai.js.map

package/dist/ai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai.js","sourceRoot":"","sources":["../src/ai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,GAAG,cAAc,CAAC;AAkCnC,MAAM,OAAO,QAAQ;IACS;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,mEAAmE;IAEnE,aAAa,CAAC,GAAyB,EAAE,IAA6C;QACrF,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,UAAU,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,QAAQ,CAAC,OAAe;QACvB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,WAAW,OAAO,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,WAAW,CACV,OAAe,EACf,IAA6B,EAC7B,IAA6C;QAE7C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,WAAW,WAAW,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,aAAa,CAAC,OAAe,EAAE,IAA6C;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC3B,MAAM,EACN,GAAG,WAAW,WAAW,OAAO,WAAW,EAC3C,SAAS,EACT,IAAI,CACJ,CAAC;IACH,CAAC;IAED,WAAW,CAAC,IAA6B,EAAE,IAA6C;QACvF,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IAED,mEAAmE;IAEnE,cAAc,CAAC,GAA0B,EAAE,IAA6C;QACvF,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,WAAW,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,cAAc,UAAU,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,aAAa,CAAC,KAA+B;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,cAAc,CAAC,UAAkB,EAAE,IAA6C;QAC/E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC3B,MAAM,EACN,GAAG,WAAW,cAAc,UAAU,SAAS,EAC/C,SAAS,EACT,IAAI,CACJ,CAAC;IACH,CAAC;IAED,oEAAoE;IAEpE,eAAe,CAAC,GAAqB,EAAE,IAA6C;QACnF,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,oEAAoE;IAEpE,gBAAgB,CAAC,GAA4B,EAAE,IAA6C;QAC3F,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;CACD"}

package/dist/audit.d.ts

@@ -0,0 +1,18 @@
+/**
+ * QNSP Audit — immutable, hash-chained event log. Wraps
+ * `apps/audit-service` (`/audit/v1`).
+ */
+import type { Internal, RequestOptions } from "./_internal.js";
+export interface LogEventRequest {
+    readonly eventType: string;
+    readonly payload: Record<string, unknown>;
+    readonly tags?: readonly string[];
+}
+export declare class AuditClient {
+    private readonly internal;
+    constructor(internal: Internal);
+    logEvent(req: LogEventRequest, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    ingestEvents(events: readonly LogEventRequest[], opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    listEvents(query?: RequestOptions["query"]): Promise<Record<string, unknown>>;
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,qBAAa,WAAW;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI5E,YAAY,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAI9F,UAAU,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;CAG1C"}

package/dist/audit.js

@@ -0,0 +1,21 @@
+/**
+ * QNSP Audit — immutable, hash-chained event log. Wraps
+ * `apps/audit-service` (`/audit/v1`).
+ */
+const PATH_PREFIX = "/proxy/audit/v1";
+export class AuditClient {
+    internal;
+    constructor(internal) {
+        this.internal = internal;
+    }
+    logEvent(req, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/events`, req, opts);
+    }
+    ingestEvents(events, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/events/batch`, { events }, opts);
+    }
+    listEvents(query) {
+        return this.internal.request("GET", `${PATH_PREFIX}/events`, undefined, { query });
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAQtC,MAAM,OAAO,WAAW;IACM;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,QAAQ,CAAC,GAAoB,EAAE,IAA6C;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,YAAY,CAAC,MAAkC,EAAE,IAA6C;QAC7F,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,eAAe,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACvF,CAAC;IAED,UAAU,CAAC,KAA+B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,SAAS,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;CACD"}

package/dist/auth.d.ts

@@ -0,0 +1,31 @@
+/**
+ * QNSP Auth — JWT issuance, refresh, revocation, WebAuthn passkeys, MFA,
+ * federated identity (SAML / OIDC), risk-based authentication. Wraps
+ * `apps/auth-service` (`/auth/v1`).
+ */
+import type { Internal } from "./_internal.js";
+export interface LoginRequest {
+    readonly email: string;
+    readonly password: string;
+    readonly tenantId: string;
+}
+export declare class AuthClient {
+    private readonly internal;
+    constructor(internal: Internal);
+    login(req: LoginRequest): Promise<Record<string, unknown>>;
+    refreshToken(refreshToken: string): Promise<Record<string, unknown>>;
+    revoke(refreshToken: string): Promise<void>;
+    registerPasskeyStart(userId: string, tenantId: string): Promise<Record<string, unknown>>;
+    registerPasskeyComplete(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    authenticatePasskeyStart(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    authenticatePasskeyComplete(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    listPasskeys(userId: string, tenantId: string): Promise<Record<string, unknown>>;
+    deletePasskey(credentialId: string): Promise<void>;
+    mfaChallenge(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    mfaVerify(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    federateSAML(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    federateOIDC(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    evaluateRisk(body: Record<string, unknown>): Promise<Record<string, unknown>>;
+    listRiskPolicies(tenantId: string): Promise<Record<string, unknown>>;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAI/C,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,UAAU;IACV,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,KAAK,CAAC,GAAG,EAAE,YAAY;IAIvB,YAAY,CAAC,YAAY,EAAE,MAAM;IAI3B,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjD,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAOrD,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIrD,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAItD,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAIzD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAMvC,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMxD,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1C,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAMvC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1C,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAM1C,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAI1C,gBAAgB,CAAC,QAAQ,EAAE,MAAM;CAKjC"}

package/dist/auth.js

@@ -0,0 +1,69 @@
+/**
+ * QNSP Auth — JWT issuance, refresh, revocation, WebAuthn passkeys, MFA,
+ * federated identity (SAML / OIDC), risk-based authentication. Wraps
+ * `apps/auth-service` (`/auth/v1`).
+ */
+const PATH_PREFIX = "/proxy/auth/v1";
+export class AuthClient {
+    internal;
+    constructor(internal) {
+        this.internal = internal;
+    }
+    login(req) {
+        return this.internal.request("POST", `${PATH_PREFIX}/login`, req);
+    }
+    refreshToken(refreshToken) {
+        return this.internal.request("POST", `${PATH_PREFIX}/refresh`, { refreshToken });
+    }
+    async revoke(refreshToken) {
+        await this.internal.request("POST", `${PATH_PREFIX}/revoke`, { refreshToken });
+    }
+    // ── WebAuthn passkeys ────────────────────────────────────────────
+    registerPasskeyStart(userId, tenantId) {
+        return this.internal.request("POST", `${PATH_PREFIX}/passkeys/register/start`, {
+            userId,
+            tenantId,
+        });
+    }
+    registerPasskeyComplete(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/passkeys/register/complete`, body);
+    }
+    authenticatePasskeyStart(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/passkeys/authenticate/start`, body);
+    }
+    authenticatePasskeyComplete(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/passkeys/authenticate/complete`, body);
+    }
+    listPasskeys(userId, tenantId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/passkeys`, undefined, {
+            query: { userId, tenantId },
+        });
+    }
+    async deletePasskey(credentialId) {
+        await this.internal.request("DELETE", `${PATH_PREFIX}/passkeys/${credentialId}`);
+    }
+    // ── MFA ──────────────────────────────────────────────────────────
+    mfaChallenge(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/mfa/challenge`, body);
+    }
+    mfaVerify(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/mfa/verify`, body);
+    }
+    // ── Federated identity ──────────────────────────────────────────
+    federateSAML(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/federate/saml`, body);
+    }
+    federateOIDC(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/federate/oidc`, body);
+    }
+    // ── Risk-based auth ──────────────────────────────────────────────
+    evaluateRisk(body) {
+        return this.internal.request("POST", `${PATH_PREFIX}/risk/evaluate`, body);
+    }
+    listRiskPolicies(tenantId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/risk/policies`, undefined, {
+            query: { tenantId },
+        });
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAQrC,MAAM,OAAO,UAAU;IACO;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,KAAK,CAAC,GAAiB;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,YAAY,CAAC,YAAoB;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB;QAChC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,SAAS,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,oEAAoE;IAEpE,oBAAoB,CAAC,MAAc,EAAE,QAAgB;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,0BAA0B,EAAE;YAC9E,MAAM;YACN,QAAQ;SACR,CAAC,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,IAA6B;QACpD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,6BAA6B,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;IAED,wBAAwB,CAAC,IAA6B;QACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,8BAA8B,EAAE,IAAI,CAAC,CAAC;IAC1F,CAAC;IAED,2BAA2B,CAAC,IAA6B;QACxD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,iCAAiC,EAAE,IAAI,CAAC,CAAC;IAC7F,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,QAAgB;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,WAAW,EAAE,SAAS,EAAE;YACzE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC3B,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB;QACvC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,WAAW,aAAa,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,oEAAoE;IAEpE,YAAY,CAAC,IAA6B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,SAAS,CAAC,IAA6B;QACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,aAAa,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IAED,mEAAmE;IAEnE,YAAY,CAAC,IAA6B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,YAAY,CAAC,IAA6B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,oEAAoE;IAEpE,YAAY,CAAC,IAA6B;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,gBAAgB,EAAE,SAAS,EAAE;YAC9E,KAAK,EAAE,EAAE,QAAQ,EAAE;SACnB,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/autogen/executor.d.ts

@@ -0,0 +1,200 @@
+/**
+ * QNSP AutoGen Executor — `@heossi/qnsi/autogen` subpath.
+ *
+ * Submits code-execution workloads to QNSP AI orchestrator enclaves and waits
+ * for completion, returning structured output with the enclave attestation
+ * proof. Provides a function-executor interface compatible with AutoGen's code
+ * execution pattern — without importing from `autogen` directly.
+ *
+ * Folded in from the former standalone `@heossi/qnsi-autogen-qnsp` package
+ * (2026-05-16). The workload submit/get HTTP is inlined here (faithful to the
+ * former `@heossi/qnsi-ai-sdk` `AiOrchestratorClient`: Bearer auth,
+ * `idempotency-key` header, `env` defaulted, bounded retry) so this subpath
+ * has no `@heossi/qnsi-*` workspace dependency — same pattern as
+ * `../_activation`. Tier/enclave access is enforced authoritatively by the
+ * edge-gateway + ai-orchestrator server side (a 402/403 surfaces as an Error);
+ * the former client-side tier pre-check was advisory only and is intentionally
+ * dropped (single source of truth = server).
+ */
+export type WorkloadStatus = "pending" | "scheduled" | "running" | "canceling" | "succeeded" | "failed" | "canceled";
+export type WorkloadPriority = "low" | "normal" | "high";
+export type SchedulingPolicy = "spot" | "on-demand" | "mixed";
+export interface WorkloadResources {
+    readonly cpu: number;
+    readonly memoryGiB: number;
+    readonly gpu: number;
+    readonly acceleratorType: string;
+}
+export interface WorkloadArtifactBinding {
+    readonly artifactId: string;
+    readonly mountPath: string;
+    readonly accessMode: "read" | "read-write";
+}
+export interface WorkloadManifest {
+    readonly pqcSignature: string;
+    readonly algorithm: string;
+    readonly issuedAt: string;
+    readonly [key: string]: unknown;
+}
+export interface WorkloadSecurityProfile {
+    readonly controlPlaneTokenSha256: string | null;
+    readonly pqcSignatures: ReadonlyArray<{
+        provider: string;
+        algorithm: string;
+    }>;
+    readonly hardwareProvider: string | null;
+    readonly attestationStatus: string | null;
+    readonly attestationProof: string | null;
+}
+export interface SubmitWorkloadRequest {
+    readonly tenantId: string;
+    readonly name: string;
+    readonly priority: WorkloadPriority;
+    readonly schedulingPolicy: SchedulingPolicy;
+    readonly containerImage: string;
+    readonly command: readonly string[];
+    readonly env?: Record<string, string>;
+    readonly resources: WorkloadResources;
+    readonly artifacts: readonly WorkloadArtifactBinding[];
+    readonly manifest: WorkloadManifest;
+    readonly labels?: Record<string, string>;
+    readonly idempotencyKey?: string;
+}
+export interface SubmitWorkloadResponse {
+    readonly workloadId: string;
+    readonly status: WorkloadStatus;
+    readonly replayed: boolean;
+    readonly acceptedAt: string | null;
+}
+export interface WorkloadSummary {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly name: string;
+    readonly status: WorkloadStatus;
+    readonly priority: WorkloadPriority;
+    readonly schedulingPolicy: SchedulingPolicy;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly acceptedAt: string | null;
+    readonly completedAt: string | null;
+    readonly labels: Record<string, string> | null;
+    readonly security: WorkloadSecurityProfile;
+}
+export interface WorkloadDetail extends WorkloadSummary {
+    readonly manifest: WorkloadManifest;
+    readonly resources: WorkloadResources;
+    readonly artifacts: readonly WorkloadArtifactBinding[];
+    readonly schedulerMetadata: Record<string, unknown> | null;
+}
+export interface QnspExecutorConfig {
+    /**
+     * QNSP API key. Get one at https://cloud.qnsp.cuilabs.io/api-keys
+     * The API key carries the tenant ID — no separate tenantId needed.
+     */
+    readonly apiKey: string;
+    /**
+     * Tenant ID for all workload submissions.
+     * Optional — when omitted, the tenant is resolved automatically from the API key
+     * via SDK activation. Only provide this if you need to override the resolved tenant.
+     */
+    readonly tenantId?: string;
+    /**
+     * Base URL for the QNSP API.
+     * Defaults to https://api.qnsp.cuilabs.io
+     */
+    readonly baseUrl?: string;
+    /**
+     * Container image to use for code execution workloads.
+     * Defaults to "qnsp/enclave-python-runtime:latest"
+     */
+    readonly containerImage?: string;
+    /**
+     * CPU allocation for each workload (fractional cores).
+     * Defaults to 1.
+     */
+    readonly cpu?: number;
+    /**
+     * Memory allocation in GiB for each workload.
+     * Defaults to 2.
+     */
+    readonly memoryGiB?: number;
+    /**
+     * GPU allocation. Defaults to 0 (CPU-only).
+     * Set > 0 to use GPU enclaves (requires enterprise tier + enclave-gpu-capacity add-on).
+     */
+    readonly gpu?: number;
+    /**
+     * Accelerator type when gpu > 0.
+     * Defaults to "nvidia-a100".
+     */
+    readonly acceleratorType?: string;
+    /**
+     * Maximum time in milliseconds to wait for a workload to complete.
+     * Defaults to 300000 (5 minutes).
+     */
+    readonly pollTimeoutMs?: number;
+    /**
+     * Interval in milliseconds between workload status polls.
+     * Defaults to 2000 (2 seconds).
+     */
+    readonly pollIntervalMs?: number;
+    /**
+     * Per-request timeout in milliseconds. Defaults to 30000.
+     */
+    readonly requestTimeoutMs?: number;
+}
+export interface ExecuteCodeRequest {
+    /** The code to execute inside the enclave. */
+    readonly code: string;
+    /**
+     * Programming language / runtime. Used to select the execution command.
+     * Defaults to "python".
+     */
+    readonly language?: "python" | "bash" | "javascript";
+    /** Environment variables to inject into the workload. */
+    readonly env?: Record<string, string>;
+    /** Human-readable name for this workload (used in audit logs). */
+    readonly name?: string;
+    /**
+     * Idempotency key — if provided, duplicate submissions with the same key
+     * return the original workload result instead of creating a new one.
+     */
+    readonly idempotencyKey?: string;
+}
+export interface ExecuteCodeResult {
+    /** The workload ID assigned by the AI orchestrator. */
+    readonly workloadId: string;
+    /** Final workload status. */
+    readonly status: WorkloadStatus;
+    /** Whether this result was replayed from a previous idempotent submission. */
+    readonly replayed: boolean;
+    /** PQC attestation proof from the enclave (if available). */
+    readonly attestationProof: string | null;
+    /** Hardware provider for the enclave (if available). */
+    readonly hardwareProvider: string | null;
+    /** ISO timestamp when the workload was accepted. */
+    readonly acceptedAt: string | null;
+    /** ISO timestamp when the workload completed. */
+    readonly completedAt: string | null;
+}
+/**
+ * AutoGen-compatible code executor backed by QNSP AI orchestrator enclaves.
+ *
+ * @example
+ * ```typescript
+ * import { QnspExecutor } from "@heossi/qnsi/autogen";
+ *
+ * const executor = new QnspExecutor({ apiKey: process.env.QNSP_API_KEY });
+ * const result = await executor.execute({ code: "print('hi')", language: "python" });
+ * console.log(result.status, result.attestationProof);
+ * ```
+ */
+export declare class QnspExecutor {
+    #private;
+    constructor(config: QnspExecutorConfig);
+    /**
+     * Execute code inside a QNSP enclave and wait for the result.
+     */
+    execute(request: ExecuteCodeRequest): Promise<ExecuteCodeResult>;
+}
+//# sourceMappingURL=executor.d.ts.map

package/dist/autogen/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/autogen/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAsBH,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,WAAW,GACX,SAAS,GACT,WAAW,GACX,WAAW,GACX,QAAQ,GACR,UAAU,CAAC;AAEd,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AACzD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,YAAY,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC3C;AAED,MAAM,WAAW,cAAe,SAAQ,eAAe;IACtD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACvD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3D;AAID,MAAM,WAAW,kBAAkB;IAClC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;OAEG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IAClC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC;IACrD,yDAAyD;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,kEAAkE;IAClE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IACjC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6BAA6B;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,wDAAwD;IACxD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,oDAAoD;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AA0BD;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;;gBAcZ,MAAM,EAAE,kBAAkB;IAyGtC;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAuHtE"}