@junejuly-lockstep/sdk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 JuneJuly Health
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,44 @@
+# @junejuly-lockstep/sdk
+
+A typed `fetch` client for the Lockstep platform API. Two clients:
+
+- `createIngestClient` authenticates with a project API key (`lsk_...`, sent as a bearer token) and
+  covers the routes the reconciler uses: presigned uploads, baselines, `POST /api/ingest/runs` and
+  `POST /api/ingest/models`.
+- `createSessionClient` rides the SPA's session cookie and covers the read and judgment API
+  (projects, journeys, board, cards, annotations, ops).
+
+Every response is validated with the `@junejuly-lockstep/model` schemas before it is returned; failures
+surface as `LockstepApiError` (HTTP status and body) or `LockstepNetworkError` (retries exhausted).
+ESM only, Node 20.18 or newer (or any runtime with a global `fetch`). No side effects.
+
+## Install
+
+```bash
+pnpm add @junejuly-lockstep/sdk @junejuly-lockstep/model
+```
+
+## Usage
+
+```ts
+import { createIngestClient, LockstepApiError } from '@junejuly-lockstep/sdk';
+
+const ingest = createIngestClient({
+  baseUrl: 'https://api.lockstep.example',
+  apiKey: process.env.LOCKSTEP_API_KEY!,
+});
+
+try {
+  const baselines = await ingest.getBaselines('FERN');
+  console.log(`${baselines.entries.length} approved baselines`);
+} catch (err) {
+  if (err instanceof LockstepApiError) console.error(err.status, err.message);
+  else throw err;
+}
+```
+
+`@junejuly-lockstep/sdk/testing` exports `fakeFetch`, a recording `fetch` double for unit tests of code that
+uses either client.
+
+Published from the [Lockstep monorepo](https://github.com/JuneJulyHealth/lockstep)
+(`packages/sdk`). Versioned in lockstep with `@junejuly-lockstep/model` and `@junejuly-lockstep/reconciler`.

package/dist/errors.d.ts

@@ -0,0 +1,28 @@
+/** Thrown for every non-2xx response (after retries) and for response bodies that fail schema validation. */
+export declare class LockstepApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    readonly method: string;
+    readonly url: string;
+    /** Machine-readable error code from the API body when the body followed `ApiErrorBody`. */
+    readonly code: string | null;
+    constructor(args: {
+        status: number;
+        body: unknown;
+        method: string;
+        url: string;
+        message?: string;
+    });
+}
+/** Thrown when fetch itself rejects (DNS, connection refused, aborted) after retries. */
+export declare class LockstepNetworkError extends Error {
+    readonly method: string;
+    readonly url: string;
+    readonly cause_: unknown;
+    constructor(args: {
+        method: string;
+        url: string;
+        cause: unknown;
+    });
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,6GAA6G;AAC7G,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEjB,IAAI,EAAE;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,OAAO,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB;CAkBF;AAED,yFAAyF;AACzF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;gBAEb,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE;CAQlE"}

package/dist/errors.js

@@ -0,0 +1,41 @@
+import { ApiErrorBody } from '@junejuly-lockstep/model';
+/** Thrown for every non-2xx response (after retries) and for response bodies that fail schema validation. */
+export class LockstepApiError extends Error {
+    status;
+    body;
+    method;
+    url;
+    /** Machine-readable error code from the API body when the body followed `ApiErrorBody`. */
+    code;
+    constructor(args) {
+        const parsed = ApiErrorBody.safeParse(args.body);
+        const detail = parsed.success
+            ? parsed.data.message
+            : typeof args.body === 'string'
+                ? args.body
+                : '';
+        super(args.message ??
+            `${args.method} ${args.url} failed with ${args.status}${detail ? `: ${detail}` : ''}`);
+        this.name = 'LockstepApiError';
+        this.status = args.status;
+        this.body = args.body;
+        this.method = args.method;
+        this.url = args.url;
+        this.code = parsed.success ? parsed.data.error : null;
+    }
+}
+/** Thrown when fetch itself rejects (DNS, connection refused, aborted) after retries. */
+export class LockstepNetworkError extends Error {
+    method;
+    url;
+    cause_;
+    constructor(args) {
+        const reason = args.cause instanceof Error ? args.cause.message : String(args.cause);
+        super(`${args.method} ${args.url} could not be reached: ${reason}`);
+        this.name = 'LockstepNetworkError';
+        this.method = args.method;
+        this.url = args.url;
+        this.cause_ = args.cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,6GAA6G;AAC7G,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,MAAM,CAAS;IACf,IAAI,CAAU;IACd,MAAM,CAAS;IACf,GAAG,CAAS;IACrB,2FAA2F;IAClF,IAAI,CAAgB;IAE7B,YAAY,IAMX;QACC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO;YAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO;YACrB,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,CAAC,IAAI,CAAC,IAAI;gBACX,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CACH,IAAI,CAAC,OAAO;YACV,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,gBAAgB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACxF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;CACF;AAED,yFAAyF;AACzF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,MAAM,CAAS;IACf,GAAG,CAAS;IACZ,MAAM,CAAU;IAEzB,YAAY,IAAqD;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrF,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3B,CAAC;CACF"}

package/dist/http.d.ts

@@ -0,0 +1,53 @@
+import type { z } from 'zod';
+export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+export interface RetryPolicy {
+    /** Number of retries after the first attempt. Default 3 for idempotent GETs, 0 otherwise. */
+    retries: number;
+    /** Base delay in ms; attempt n waits base * 2^n. Default 250. */
+    baseDelayMs: number;
+    /** Injectable sleep for tests. */
+    sleep: (ms: number) => Promise<void>;
+}
+export declare const DEFAULT_RETRY: RetryPolicy;
+export interface HttpOptions {
+    baseUrl: string;
+    fetch?: FetchLike;
+    retry?: Partial<RetryPolicy>;
+    /** Headers added to every request. */
+    headers?: Record<string, string>;
+    /** Passed through to fetch (e.g. `credentials: 'include'`). */
+    init?: RequestInit;
+}
+export interface RequestSpec<T> {
+    method: 'GET' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    query?: Record<string, string | number | boolean | undefined>;
+    body?: unknown;
+    headers?: Record<string, string>;
+    /** Output schema; the input type is free so schemas with defaults work. */
+    schema: z.ZodType<T, z.ZodTypeDef, unknown>;
+    /** Override: retry even when not a GET, or disable retry on a GET. */
+    idempotent?: boolean;
+    /** `If-None-Match` value; a 304 resolves with `notModified: true`. */
+    etag?: string | null;
+}
+export interface Conditional<T> {
+    data: T | null;
+    etag: string | null;
+    notModified: boolean;
+}
+/**
+ * Join base, path and query. The base may be absolute (`https://api.example`) or relative
+ * (`''` or `/api-prefix`) for same-origin use in the SPA.
+ */
+export declare function joinUrl(baseUrl: string, path: string, query?: RequestSpec<unknown>['query']): string;
+export declare function createHttp(options: HttpOptions): {
+    request: <T>(spec: RequestSpec<T>) => Promise<T>;
+    conditional: <T>(spec: RequestSpec<T>) => Promise<Conditional<T>>;
+    raw: <T>(spec: RequestSpec<T>) => Promise<{
+        response: Response;
+        url: string;
+    }>;
+};
+export type Http = ReturnType<typeof createHttp>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG7B,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,MAAM,WAAW,WAAW;IAC1B,6FAA6F;IAC7F,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,eAAO,MAAM,aAAa,EAAE,WAI3B,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7B,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,+DAA+D;IAC/D,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,2EAA2E;IAC3E,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5C,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GACpC,MAAM,CASR;AAMD,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW;cAiFtB,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC;kBA7BhC,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;UAhDzD,CAAC,QAAQ,WAAW,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;EAmF1F;AAED,MAAM,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC"}

package/dist/http.js

@@ -0,0 +1,121 @@
+import { LockstepApiError, LockstepNetworkError } from './errors.js';
+export const DEFAULT_RETRY = {
+    retries: 3,
+    baseDelayMs: 250,
+    sleep: (ms) => new Promise((r) => setTimeout(r, ms)),
+};
+/**
+ * Join base, path and query. The base may be absolute (`https://api.example`) or relative
+ * (`''` or `/api-prefix`) for same-origin use in the SPA.
+ */
+export function joinUrl(baseUrl, path, query) {
+    const base = baseUrl.replace(/\/+$/, '');
+    const pathname = `${base}${path.startsWith('/') ? path : `/${path}`}`;
+    const params = new URLSearchParams();
+    for (const [k, v] of Object.entries(query ?? {})) {
+        if (v !== undefined)
+            params.set(k, String(v));
+    }
+    const qs = params.toString();
+    return qs ? `${pathname}?${qs}` : pathname;
+}
+function isRetryable(status) {
+    return status === 408 || status === 425 || status === 429 || status >= 500;
+}
+export function createHttp(options) {
+    const fetchImpl = options.fetch ?? ((input, init) => globalThis.fetch(input, init));
+    const retry = { ...DEFAULT_RETRY, ...options.retry };
+    async function raw(spec) {
+        const url = joinUrl(options.baseUrl, spec.path, spec.query);
+        const idempotent = spec.idempotent ?? spec.method === 'GET';
+        const maxAttempts = (idempotent ? retry.retries : 0) + 1;
+        const headers = {
+            accept: 'application/json',
+            ...options.headers,
+            ...spec.headers,
+        };
+        if (spec.body !== undefined)
+            headers['content-type'] = 'application/json';
+        if (spec.etag)
+            headers['if-none-match'] = spec.etag;
+        let lastError;
+        for (let attempt = 0; attempt < maxAttempts; attempt++) {
+            if (attempt > 0)
+                await retry.sleep(retry.baseDelayMs * 2 ** (attempt - 1));
+            try {
+                const response = await fetchImpl(url, {
+                    ...options.init,
+                    method: spec.method,
+                    headers,
+                    body: spec.body === undefined ? undefined : JSON.stringify(spec.body),
+                });
+                if (response.ok ||
+                    response.status === 304 ||
+                    !isRetryable(response.status) ||
+                    attempt === maxAttempts - 1) {
+                    return { response, url };
+                }
+                lastError = new LockstepApiError({
+                    status: response.status,
+                    body: await readBody(response),
+                    method: spec.method,
+                    url,
+                });
+            }
+            catch (err) {
+                lastError = err;
+                if (attempt === maxAttempts - 1) {
+                    throw new LockstepNetworkError({ method: spec.method, url, cause: err });
+                }
+            }
+        }
+        throw lastError instanceof Error
+            ? lastError
+            : new LockstepNetworkError({ method: spec.method, url, cause: lastError });
+    }
+    async function conditional(spec) {
+        const { response, url } = await raw(spec);
+        const etag = response.headers.get('etag');
+        if (response.status === 304)
+            return { data: null, etag: etag ?? spec.etag ?? null, notModified: true };
+        if (!response.ok) {
+            throw new LockstepApiError({
+                status: response.status,
+                body: await readBody(response),
+                method: spec.method,
+                url,
+            });
+        }
+        const body = await readBody(response);
+        const parsed = spec.schema.safeParse(body);
+        if (!parsed.success) {
+            throw new LockstepApiError({
+                status: response.status,
+                body,
+                method: spec.method,
+                url,
+                message: `${spec.method} ${url} returned a body that does not match the expected schema: ${parsed.error.issues
+                    .map((i) => `${i.path.join('.') || '<root>'}: ${i.message}`)
+                    .join('; ')}`,
+            });
+        }
+        return { data: parsed.data, etag, notModified: false };
+    }
+    async function request(spec) {
+        const result = await conditional({ ...spec, etag: null });
+        return result.data;
+    }
+    return { request, conditional, raw };
+}
+async function readBody(response) {
+    const text = await response.text();
+    if (!text)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return text;
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAarE,MAAM,CAAC,MAAM,aAAa,GAAgB;IACxC,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,GAAG;IAChB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;CACrD,CAAC;AAgCF;;;GAGG;AACH,MAAM,UAAU,OAAO,CACrB,OAAe,EACf,IAAY,EACZ,KAAqC;IAErC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAoB;IAC7C,MAAM,SAAS,GAAc,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAgB,EAAE,GAAG,aAAa,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAElE,KAAK,UAAU,GAAG,CAAI,IAAoB;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;QAC5D,MAAM,WAAW,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,GAAG,OAAO,CAAC,OAAO;YAClB,GAAG,IAAI,CAAC,OAAO;SAChB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC1E,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QAEpD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;oBACpC,GAAG,OAAO,CAAC,IAAI;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;iBACtE,CAAC,CAAC;gBACH,IACE,QAAQ,CAAC,EAAE;oBACX,QAAQ,CAAC,MAAM,KAAK,GAAG;oBACvB,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC7B,OAAO,KAAK,WAAW,GAAG,CAAC,EAC3B,CAAC;oBACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;gBAC3B,CAAC;gBACD,SAAS,GAAG,IAAI,gBAAgB,CAAC;oBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC;oBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,GAAG;iBACJ,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,OAAO,KAAK,WAAW,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,YAAY,KAAK;YAC9B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,UAAU,WAAW,CAAI,IAAoB;QAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YACzB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,gBAAgB,CAAC;gBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,gBAAgB,CAAC;gBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI;gBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG;gBACH,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,6DAA6D,MAAM,CAAC,KAAK,CAAC,MAAM;qBAC3G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;qBAC3D,IAAI,CAAC,IAAI,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,OAAO,CAAI,IAAoB;QAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,MAAM,CAAC,IAAS,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;AACvC,CAAC;AAID,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { LockstepApiError, LockstepNetworkError } from './errors.js';
+export { createIngestClient, INGEST_ROUTES } from './ingest.js';
+export type { IngestClient, IngestClientOptions } from './ingest.js';
+export { createSessionClient, SESSION_ROUTES } from './session.js';
+export type { ConditionalOptions, JudgmentAction, RunArtifactsResponse, SessionClient, SessionClientOptions, } from './session.js';
+export { joinUrl, DEFAULT_RETRY } from './http.js';
+export type { Conditional, FetchLike, RetryPolicy } from './http.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnE,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { LockstepApiError, LockstepNetworkError } from './errors.js';
+export { createIngestClient, INGEST_ROUTES } from './ingest.js';
+export { createSessionClient, SESSION_ROUTES } from './session.js';
+export { joinUrl, DEFAULT_RETRY } from './http.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAQnE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}

package/dist/ingest.d.ts

@@ -0,0 +1,32 @@
+import { BaselineManifest, IngestRunResponse, ModelSyncPayload, ModelSyncResponse, PresignRequest, PresignResponse, RunPayload } from '@junejuly-lockstep/model';
+import { type FetchLike, type RetryPolicy } from './http.js';
+export interface IngestClientOptions {
+    /** Platform API origin, e.g. https://api.lockstep.example */
+    baseUrl: string;
+    /** Project API key, `lsk_...`. Sent as `Authorization: Bearer`. */
+    apiKey: string;
+    fetch?: FetchLike;
+    retry?: Partial<RetryPolicy>;
+}
+/** Routes the reconciler uses. Kept in one place so the API can be reconciled against them. */
+export declare const INGEST_ROUTES: {
+    readonly presign: "/api/ingest/presign";
+    readonly runs: "/api/ingest/runs";
+    readonly baselines: "/api/ingest/baselines";
+    readonly models: "/api/ingest/models";
+};
+export interface IngestClient {
+    /** POST /api/ingest/presign: batch presigned PUT URLs (max 50 files per call). */
+    presign(req: PresignRequest): Promise<PresignResponse>;
+    /** GET /api/ingest/baselines?project=KEY: current approved baselines with presigned GET URLs. */
+    getBaselines(projectKey: string): Promise<BaselineManifest>;
+    /** POST /api/ingest/runs: the complete run payload. */
+    postRun(payload: RunPayload): Promise<IngestRunResponse>;
+    /**
+     * POST /api/ingest/models: parsed journey models and scenarios at a commit (M3 model sync, run
+     * by `lockstep sync-models` in client CI on push; the platform never evaluates journey files).
+     */
+    syncModels(payload: ModelSyncPayload): Promise<ModelSyncResponse>;
+}
+export declare function createIngestClient(options: IngestClientOptions): IngestClient;
+//# sourceMappingURL=ingest.d.ts.map

package/dist/ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.d.ts","sourceRoot":"","sources":["../src/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,UAAU,EACX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAc,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAEzE,MAAM,WAAW,mBAAmB;IAClC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC9B;AAED,+FAA+F;AAC/F,eAAO,MAAM,aAAa;;;;;CAKhB,CAAC;AAEX,MAAM,WAAW,YAAY;IAC3B,kFAAkF;IAClF,OAAO,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACvD,iGAAiG;IACjG,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5D,uDAAuD;IACvD,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzD;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACnE;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAiD7E"}

package/dist/ingest.js

@@ -0,0 +1,60 @@
+import { BaselineManifest, IngestRunResponse, ModelSyncPayload, ModelSyncResponse, PresignRequest, PresignResponse, RunPayload, } from '@junejuly-lockstep/model';
+import { createHttp } from './http.js';
+/** Routes the reconciler uses. Kept in one place so the API can be reconciled against them. */
+export const INGEST_ROUTES = {
+    presign: '/api/ingest/presign',
+    runs: '/api/ingest/runs',
+    baselines: '/api/ingest/baselines',
+    models: '/api/ingest/models',
+};
+export function createIngestClient(options) {
+    if (!options.apiKey)
+        throw new Error('createIngestClient: apiKey is required');
+    if (!options.apiKey.startsWith('lsk_')) {
+        throw new Error('createIngestClient: apiKey must be a project key starting with lsk_');
+    }
+    const http = createHttp({
+        baseUrl: options.baseUrl,
+        fetch: options.fetch,
+        retry: options.retry,
+        headers: { authorization: `Bearer ${options.apiKey}` },
+    });
+    return {
+        async presign(req) {
+            const body = PresignRequest.parse(req);
+            return http.request({
+                method: 'POST',
+                path: INGEST_ROUTES.presign,
+                body,
+                schema: PresignResponse,
+            });
+        },
+        async getBaselines(projectKey) {
+            return http.request({
+                method: 'GET',
+                path: INGEST_ROUTES.baselines,
+                query: { project: projectKey },
+                schema: BaselineManifest,
+            });
+        },
+        async postRun(payload) {
+            const body = RunPayload.parse(payload);
+            return http.request({
+                method: 'POST',
+                path: INGEST_ROUTES.runs,
+                body,
+                schema: IngestRunResponse,
+            });
+        },
+        async syncModels(payload) {
+            const body = ModelSyncPayload.parse(payload);
+            return http.request({
+                method: 'POST',
+                path: INGEST_ROUTES.models,
+                body,
+                schema: ModelSyncResponse,
+            });
+        },
+    };
+}
+//# sourceMappingURL=ingest.js.map

package/dist/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../src/ingest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,UAAU,GACX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,UAAU,EAAoC,MAAM,WAAW,CAAC;AAWzE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,qBAAqB;IAC9B,IAAI,EAAE,kBAAkB;IACxB,SAAS,EAAE,uBAAuB;IAClC,MAAM,EAAE,oBAAoB;CACpB,CAAC;AAgBX,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE;KACvD,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,aAAa,CAAC,OAAO;gBAC3B,IAAI;gBACJ,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,UAAU;YAC3B,OAAO,IAAI,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,aAAa,CAAC,SAAS;gBAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;gBAC9B,MAAM,EAAE,gBAAgB;aACzB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,IAAI;gBACJ,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC,OAAO,CAAC;gBAClB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,aAAa,CAAC,MAAM;gBAC1B,IAAI;gBACJ,MAAM,EAAE,iBAAiB;aAC1B,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}