@kortix/sdk 0.9.98

package/dist/platform/projects-client/agent-config.d.ts

@@ -0,0 +1,58 @@
+/** A Kortix governance grant on the wire: an allowlist, or the sentinels. */
+export type AgentGrantSetV2 = 'all' | 'none' | string[];
+/** A single OpenCode permission action. */
+export type PermissionAction = 'ask' | 'allow' | 'deny';
+/** A permission rule: a bare action, or a glob-pattern → action map. */
+export type PermissionRule = PermissionAction | Record<string, PermissionAction>;
+/** The OpenCode `permission` tree — a bare action, or a per-capability object. */
+export type PermissionConfig = PermissionAction | Record<string, PermissionRule | PermissionAction>;
+/** The OpenCode BEHAVIOR half — everything that lives in the agent's own
+ *  `.md` frontmatter (+ `prompt`, the file's BODY text, not a path). */
+export interface OpencodeAgentConfig {
+    description?: string;
+    mode?: 'primary' | 'subagent' | 'all';
+    model?: string;
+    variant?: string;
+    temperature?: number;
+    top_p?: number;
+    /** The agent's system prompt — the `.md`'s BODY text (frontmatter stripped),
+     *  not a file path/reference. */
+    prompt?: string;
+    hidden?: boolean;
+    options?: Record<string, unknown>;
+    color?: string;
+    steps?: number;
+    permission?: PermissionConfig;
+}
+/** The full agent block on the wire — mirrors `AgentBlockV2` in
+ *  @kortix/manifest-schema PLUS the merged `opencode` behavior half (a wire-
+ *  only convenience; kortix.yaml itself never nests `opencode` — see the
+ *  module doc above). */
+export interface AgentConfigBlock {
+    enabled?: boolean;
+    connectors?: AgentGrantSetV2;
+    secrets?: AgentGrantSetV2;
+    skills?: AgentGrantSetV2;
+    kortix_cli?: AgentGrantSetV2;
+    workspace?: 'runtime' | 'read' | 'branch';
+    opencode?: OpencodeAgentConfig;
+}
+export interface AgentConfigResponse {
+    agent: string;
+    /** The manifest's declared schema version — 2 means the full editor applies. */
+    schema_version: number;
+    /** True iff the full block is editable (a kortix_version 2 manifest). */
+    editable: boolean;
+    /** The manifest's top-level `default_agent` (v2 only; null for v1). */
+    default_agent: string | null;
+    /** The declared block, or null for a v1 manifest / an agent not declared yet. */
+    block: AgentConfigBlock | null;
+}
+export declare function getAgentConfig(projectId: string, agentName: string): Promise<AgentConfigResponse>;
+export declare function updateAgentConfig(projectId: string, agentName: string, block: AgentConfigBlock): Promise<{
+    ok: boolean;
+    agent: string;
+    schema_version: number;
+    block: AgentConfigBlock | null;
+}>;
+//# sourceMappingURL=agent-config.d.ts.map

package/dist/platform/projects-client/agent-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/agent-config.ts"],"names":[],"mappings":"AAiBA,6EAA6E;AAC7E,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAExD,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;AAExD,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAEjF,kFAAkF;AAClF,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,gBAAgB,CAAC,CAAC;AAEpG;wEACwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,KAAK,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;qCACiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED;;;yBAGyB;AACzB,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,SAAS,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC1C,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iFAAiF;IACjF,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAChC;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,gCAMxE;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB;QAIf,OAAO;WACJ,MAAM;oBACG,MAAM;WACf,gBAAgB,GAAG,IAAI;GAGnC"}

package/dist/platform/projects-client/agent-config.js

@@ -0,0 +1,9 @@
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+export async function getAgentConfig(projectId, agentName) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/agents/${encodeURIComponent(agentName)}/config`));
+}
+export async function updateAgentConfig(projectId, agentName, block) {
+    return unwrap(await backendApi.put(`/projects/${projectId}/agents/${encodeURIComponent(agentName)}/config`, block));
+}
+//# sourceMappingURL=agent-config.js.map

package/dist/platform/projects-client/agent-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-config.js","sourceRoot":"","sources":["../../../src/platform/projects-client/agent-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAyElC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,SAAiB;IACvE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,WAAW,kBAAkB,CAAC,SAAS,CAAC,SAAS,CACxE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,SAAiB,EACjB,KAAuB;IAEvB,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAKjB,aAAa,SAAS,WAAW,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CACnF,CAAC;AACJ,CAAC"}

package/dist/platform/projects-client/agent-scope.d.ts

@@ -0,0 +1,12 @@
+/** `'all'` = every item the launcher can see; a list = allowlist; `[]` = none. */
+export type AgentGrantSet = string[] | 'all';
+export declare function setAgentScope(projectId: string, agentName: string, scope: {
+    env?: AgentGrantSet;
+    connectors?: AgentGrantSet;
+}): Promise<{
+    ok: boolean;
+    agent: string;
+    env: AgentGrantSet;
+    connectors: AgentGrantSet;
+}>;
+//# sourceMappingURL=agent-scope.d.ts.map

package/dist/platform/projects-client/agent-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-scope.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/agent-scope.ts"],"names":[],"mappings":"AASA,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,MAAM,EAAE,GAAG,KAAK,CAAC;AAE7C,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,GAAG,CAAC,EAAE,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,aAAa,CAAA;CAAE;QAIlD,OAAO;WACJ,MAAM;SACR,aAAa;gBACN,aAAa;GAG9B"}

package/dist/platform/projects-client/agent-scope.js

@@ -0,0 +1,6 @@
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+export async function setAgentScope(projectId, agentName, scope) {
+    return unwrap(await backendApi.put(`/projects/${projectId}/agents/${encodeURIComponent(agentName)}/scope`, scope));
+}
+//# sourceMappingURL=agent-scope.js.map

package/dist/platform/projects-client/agent-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-scope.js","sourceRoot":"","sources":["../../../src/platform/projects-client/agent-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAWlC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,SAAiB,EACjB,KAA0D;IAE1D,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAKjB,aAAa,SAAS,WAAW,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAClF,CAAC;AACJ,CAAC"}

package/dist/platform/projects-client/apps.d.ts

@@ -0,0 +1,98 @@
+export type AppSourceGit = {
+    type: 'git';
+    repo: string | null;
+    branch: string | null;
+    root_path: string | null;
+};
+export type AppSourceTar = {
+    type: 'tar';
+    url: string;
+};
+export type AppSource = AppSourceGit | AppSourceTar;
+export interface AppBuild {
+    command: string | null;
+    out_dir: string | null;
+}
+export type DeploymentStatus = 'pending' | 'building' | 'deploying' | 'active' | 'failed' | 'stopped';
+export interface ProjectAppDeploymentRow {
+    deployment_id: string;
+    account_id: string;
+    project_id: string | null;
+    app_slug: string | null;
+    provider: string | null;
+    status: DeploymentStatus;
+    source_type: 'git' | 'tar';
+    source_ref: string | null;
+    framework: string | null;
+    domains: string[] | null;
+    live_url: string | null;
+    env_vars: Record<string, string> | null;
+    build_config: Record<string, unknown> | null;
+    error: string | null;
+    version: number;
+    freestyle_id: string | null;
+    metadata: Record<string, unknown> | null;
+    created_at: string;
+    updated_at: string;
+}
+export interface ProjectApp {
+    slug: string;
+    path: string;
+    name: string;
+    enabled: boolean;
+    domains: string[];
+    /** Domains the app will actually serve on: its declared `domains`, or the
+     *  auto-issued free `*.style.dev` URL when none are declared. Always at
+     *  least one entry. */
+    effective_domains: string[];
+    framework: string | null;
+    source: AppSource;
+    build: AppBuild | null;
+    env: Record<string, string>;
+    manifest_hash: string;
+    latest_deployment: ProjectAppDeploymentRow | null;
+    drift: boolean;
+}
+export interface ProjectAppParseError {
+    slug: string;
+    path: string;
+    error: string;
+}
+export interface ListProjectAppsResponse {
+    apps: ProjectApp[];
+    errors: ProjectAppParseError[];
+}
+export interface CreateOrUpdateProjectAppInput {
+    slug?: string;
+    name?: string;
+    enabled?: boolean;
+    /** Leave empty / omit to let the deployment provider issue an auto-domain
+     *  (Freestyle hands out a `*.style.dev` subdomain). */
+    domains?: string[];
+    framework?: string | null;
+    source: AppSource;
+    build?: AppBuild | null;
+    env?: Record<string, string>;
+}
+export declare function listProjectApps(projectId: string): Promise<ListProjectAppsResponse>;
+export declare function createProjectApp(projectId: string, input: CreateOrUpdateProjectAppInput): Promise<ListProjectAppsResponse>;
+export declare function updateProjectApp(projectId: string, slug: string, input: Partial<CreateOrUpdateProjectAppInput>): Promise<ListProjectAppsResponse>;
+export declare function deleteProjectApp(projectId: string, slug: string): Promise<ListProjectAppsResponse>;
+export interface DeployProjectAppResponse {
+    status: 'active' | 'failed';
+    app_slug: string;
+    deployment: ProjectAppDeploymentRow | null;
+}
+export declare function deployProjectApp(projectId: string, slug: string): Promise<DeployProjectAppResponse>;
+export interface StopProjectAppResponse {
+    ok: boolean;
+    deployment: ProjectAppDeploymentRow | null;
+}
+export declare function stopProjectApp(projectId: string, slug: string): Promise<StopProjectAppResponse>;
+export interface ProjectAppLogsResponse {
+    ok: boolean;
+    data?: unknown;
+    error?: string;
+}
+export declare function getProjectAppLogs(projectId: string, slug: string): Promise<ProjectAppLogsResponse>;
+//# sourceMappingURL=apps.d.ts.map

package/dist/platform/projects-client/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/apps.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,KAAK,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,YAAY,CAAC;AAEpD,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAID,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,UAAU,GACV,WAAW,GACX,QAAQ,GACR,QAAQ,GACR,SAAS,CAAC;AAEd,MAAM,WAAW,uBAAuB;IACtC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;IACzB,WAAW,EAAE,KAAK,GAAG,KAAK,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;2BAEuB;IACvB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAClD,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,MAAM,EAAE,oBAAoB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;2DACuD;IACvD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAID,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAEzF;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAElC;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAC5C,OAAO,CAAC,uBAAuB,CAAC,CAElC;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,uBAAuB,CAAC,CAElC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC5C;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,wBAAwB,CAAC,CAInC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC5C;AAED,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,sBAAsB,CAAC,CAIjC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,sBAAsB,CAAC,CAEjC"}

package/dist/platform/projects-client/apps.js

@@ -0,0 +1,29 @@
+// Project apps/deployments — the `/v1/projects/:id/apps/*` family. Mirrors
+// the response shapes from suna/apps/api/src/projects/index.ts. The platform
+// serializes apps in snake_case so we keep that on the wire and translate at
+// the component boundary when needed.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+const base = (projectId) => `/projects/${projectId}/apps`;
+export async function listProjectApps(projectId) {
+    return unwrap(await backendApi.get(base(projectId)));
+}
+export async function createProjectApp(projectId, input) {
+    return unwrap(await backendApi.post(base(projectId), input));
+}
+export async function updateProjectApp(projectId, slug, input) {
+    return unwrap(await backendApi.patch(`${base(projectId)}/${slug}`, input));
+}
+export async function deleteProjectApp(projectId, slug) {
+    return unwrap(await backendApi.delete(`${base(projectId)}/${slug}`));
+}
+export async function deployProjectApp(projectId, slug) {
+    return unwrap(await backendApi.post(`${base(projectId)}/${slug}/deploy`, {}));
+}
+export async function stopProjectApp(projectId, slug) {
+    return unwrap(await backendApi.post(`${base(projectId)}/${slug}/stop`, {}));
+}
+export async function getProjectAppLogs(projectId, slug) {
+    return unwrap(await backendApi.get(`${base(projectId)}/${slug}/logs`));
+}
+//# sourceMappingURL=apps.js.map

package/dist/platform/projects-client/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../../../src/platform/projects-client/apps.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAgGlC,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC,aAAa,SAAS,OAAO,CAAC;AAElE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,GAAG,CAA0B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,KAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAA0B,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,IAAY,EACZ,KAA6C;IAE7C,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,KAAK,CAA0B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,IAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,MAAM,CAA0B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,IAAY;IAEZ,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAA2B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC,CACzF,CAAC;AACJ,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,IAAY;IAEZ,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,EAAE,EAAE,CAAC,CACrF,CAAC;AACJ,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,IAAY;IAEZ,OAAO,MAAM,CAAC,MAAM,UAAU,CAAC,GAAG,CAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC;AACjG,CAAC"}

package/dist/platform/projects-client/audit.d.ts

@@ -0,0 +1,85 @@
+export interface AuditEvent {
+    event_id: string;
+    occurred_at: string;
+    actor_user_id: string | null;
+    action: string;
+    resource_type: string | null;
+    resource_id: string | null;
+    before: unknown;
+    after: unknown;
+    ip: string | null;
+    user_agent: string | null;
+    metadata: unknown;
+}
+export interface AuditEventList {
+    events: AuditEvent[];
+    /** Keyset pagination cursor for the next page; null when this is the last page. */
+    next_cursor: string | null;
+}
+export interface ListAccountAuditOptions {
+    /** Prefix match on `action` (e.g. `"iam.policy."`). */
+    action?: string;
+    /** Only events at or after this ISO-8601 instant. */
+    since?: string;
+    /** Keyset cursor from a previous page's `next_cursor`. */
+    cursor?: string;
+    /** Default 50, max 200 (server-clamped). */
+    limit?: number;
+}
+export declare function listAccountAudit(accountId: string, options?: ListAccountAuditOptions): Promise<AuditEventList>;
+export interface ExportAccountAuditOptions {
+    format?: 'csv' | 'jsonl';
+    action?: string;
+    since?: string;
+}
+/**
+ * Stream an audit slice as CSV or JSONL (hard-capped at 10,000 rows per
+ * request — page via repeated `since=` calls for more). The underlying REST
+ * client sniffs `content-type`: a `text/csv` response resolves to a `string`;
+ * `application/x-ndjson` (the JSONL response) doesn't match the client's
+ * `text/*` check and resolves to a `Blob` instead — `await blob.text()` to
+ * read it as a string.
+ */
+export declare function exportAccountAudit(accountId: string, options?: ExportAccountAuditOptions): Promise<string | Blob>;
+export interface AuditWebhookTestResult {
+    ok: boolean;
+    status?: number;
+    error?: string;
+}
+export interface AuditWebhook {
+    webhook_id: string;
+    name: string;
+    url: string;
+    enabled: boolean;
+    action_prefix: string | null;
+    last_delivered_at: string | null;
+    last_error_at: string | null;
+    last_error: string | null;
+    created_at: string;
+    updated_at: string;
+    /** Only present on the create response — the plaintext signing secret,
+     *  shown exactly once. */
+    secret?: string;
+    /** Only present on the create response — the outcome of the one-shot test delivery. */
+    test?: AuditWebhookTestResult;
+}
+export interface AuditWebhookListResponse {
+    webhooks: AuditWebhook[];
+}
+export declare function listAccountAuditWebhooks(accountId: string): Promise<AuditWebhookListResponse>;
+export interface CreateAuditWebhookInput {
+    name: string;
+    url: string;
+    action_prefix?: string;
+}
+export declare function createAccountAuditWebhook(accountId: string, input: CreateAuditWebhookInput): Promise<AuditWebhook>;
+export interface UpdateAuditWebhookInput {
+    name?: string;
+    enabled?: boolean;
+    action_prefix?: string | null;
+}
+export declare function updateAccountAuditWebhook(accountId: string, webhookId: string, input: UpdateAuditWebhookInput): Promise<AuditWebhook>;
+export declare function removeAccountAuditWebhook(accountId: string, webhookId: string): Promise<{
+    deleted: boolean;
+}>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/platform/projects-client/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/audit.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,mFAAmF;IACnF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,uBAAuB,2BAU1F;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,yBAAyB,GAClC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB;8BAC0B;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,IAAI,CAAC,EAAE,sBAAsB,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,MAAM,qCAI/D;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,yBAK/B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,yBAQ/B;AAED,wBAAsB,yBAAyB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;aAE7C,OAAO;GAI7C"}

package/dist/platform/projects-client/audit.js

@@ -0,0 +1,51 @@
+// Account audit log — the Enterprise "what changed" trail, backed by
+// `kortix.audit_events` (every mutation the global middleware + IAM helpers
+// record) plus per-account outbound webhooks that mirror it to a SIEM. Reads
+// are gated on `audit.read` + the account's `auditAccess` entitlement server-side.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+export async function listAccountAudit(accountId, options) {
+    const search = new URLSearchParams();
+    if (options?.action)
+        search.set('action', options.action);
+    if (options?.since)
+        search.set('since', options.since);
+    if (options?.cursor)
+        search.set('cursor', options.cursor);
+    if (options?.limit != null)
+        search.set('limit', String(options.limit));
+    const qs = search.toString();
+    return unwrap(await backendApi.get(`/accounts/${accountId}/audit${qs ? `?${qs}` : ''}`));
+}
+/**
+ * Stream an audit slice as CSV or JSONL (hard-capped at 10,000 rows per
+ * request — page via repeated `since=` calls for more). The underlying REST
+ * client sniffs `content-type`: a `text/csv` response resolves to a `string`;
+ * `application/x-ndjson` (the JSONL response) doesn't match the client's
+ * `text/*` check and resolves to a `Blob` instead — `await blob.text()` to
+ * read it as a string.
+ */
+export async function exportAccountAudit(accountId, options) {
+    const search = new URLSearchParams();
+    if (options?.format)
+        search.set('format', options.format);
+    if (options?.action)
+        search.set('action', options.action);
+    if (options?.since)
+        search.set('since', options.since);
+    const qs = search.toString();
+    return unwrap(await backendApi.get(`/accounts/${accountId}/audit/export${qs ? `?${qs}` : ''}`));
+}
+export async function listAccountAuditWebhooks(accountId) {
+    return unwrap(await backendApi.get(`/accounts/${accountId}/audit/webhooks`));
+}
+export async function createAccountAuditWebhook(accountId, input) {
+    return unwrap(await backendApi.post(`/accounts/${accountId}/audit/webhooks`, input));
+}
+export async function updateAccountAuditWebhook(accountId, webhookId, input) {
+    return unwrap(await backendApi.patch(`/accounts/${accountId}/audit/webhooks/${webhookId}`, input));
+}
+export async function removeAccountAuditWebhook(accountId, webhookId) {
+    return unwrap(await backendApi.delete(`/accounts/${accountId}/audit/webhooks/${webhookId}`));
+}
+//# sourceMappingURL=audit.js.map

package/dist/platform/projects-client/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/platform/projects-client/audit.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,4EAA4E;AAC5E,6EAA6E;AAC7E,mFAAmF;AAEnF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAiClC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAiC;IACzF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,OAAO,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,KAAK,IAAI,IAAI;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAAiB,aAAa,SAAS,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAC1F,CAAC;AACJ,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,OAAmC;IAEnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,OAAO,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,EAAE,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAAgB,aAAa,SAAS,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAChG,CAAC;AACJ,CAAC;AA8BD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IAC9D,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAA2B,aAAa,SAAS,iBAAiB,CAAC,CACxF,CAAC;AACJ,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,KAA8B;IAE9B,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAAe,aAAa,SAAS,iBAAiB,EAAE,KAAK,CAAC,CACpF,CAAC;AACJ,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,SAAiB,EACjB,KAA8B;IAE9B,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CACpB,aAAa,SAAS,mBAAmB,SAAS,EAAE,EACpD,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,SAAiB;IAClF,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,MAAM,CACrB,aAAa,SAAS,mBAAmB,SAAS,EAAE,CACrD,CACF,CAAC;AACJ,CAAC"}