@loomcycle/client 1.124.0 → 1.126.0

package/dist/client.d.ts

@@ -24,11 +24,18 @@
  * full mapping table.
  */
 import { InteractiveSession } from "./interactive.js";
+import { LoomcycleOAuth } from "./oauth.js";
 import { ClientToolHost, type ConnectClientToolsOptions } from "./client-tools.js";
-import type { ChangeFeedFrame, StreamChangesOptions, CredentialListResponse, CredentialMeta, CryptoKeyEncoding, CryptoKeyExport, CryptoKeyExternal, CryptoKeyType, CryptoRequest, CryptoResultByOp, DecideRequest, DecideResponse, DecisionModelsResponse, CredentialScope, DirectoryInspection, DirectoryTenant, DirectoryUser, ErasureReport, ErasureResult, Agent, AgentEvent, AgentList, CancelAgentResult, ClientOptions, ContinueOptions, RunOverrideOptions, EffectiveConfigResponse, AgentOverridableResponse, RetuneRunResponse, RunConfigResponse, RunPromptResponse, CreateSnapshotOptions, EnsureCodeAgentOptions, EnsureCodeAgentResult, EnsureHookDefOptions, EnsureHookDefResult, HookDefInput, HookDefOverlay, HookDefRowResponse, CreateDefOptions, ForkDefOptions, HookDefForkOverlay, ScheduleDefInput, ScheduleDefOverlay, ScheduleDefRowResponse, WebhookDefInput, WebhookDefOverlay, WebhookDefRowResponse, EnsureMcpServerOptions, EnsureMcpServerResult, HealthResponse, InterruptListResponse, InterruptStatus, ListUserAgentsOptions, WalkRunsPage, AckChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAckResult, ChannelAwaitResult, ChannelBroadcastResult, ChannelDescriptor, ChannelPeekResult, ListTeamChannelsOptions, PeekTeamChannelOptions, ReleaseTeamChannelOptions, TeamChannelPeekResult, TeamChannelReleaseResult, TeamChannelsResult, ChannelPublishResult, ChannelPurgeResult, ChannelReleaseResult, ChannelSubscribeResult, CreateChannelOptions, ListChannelsResponse, PeekChannelOptions, PublishChannelOptions, ReleaseChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, SubscribeChannelOptions, UpdateChannelOptions, LibraryAgentDefinition, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, ListUsersResponse, UserRecord, CreateUserBody, UpdateUserBody, MintedUserToken, ListUserTokensResponse, RunnableAgentsResponse, LLMChatOptions, LLMChatResponse, LLMChatStreamItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, MCPServerDefVerifyResult, MemoryEmbedStatsResponse, MemoryEntriesResponse, MemoryEntryResponse, MemoryBackfillResponse, MemoryPurgeResponse, MemoryReembedResponse, MemoryScopeIDsResponse, MemoryScopesResponse, MemorySearchInput, MemorySearchResponse, PauseResult, RetentionOverride, PersistentVolumesResponse, EphemeralVolumesResponse, ResolveInterruptOptions, ResumeResult, ResolverMatrix, CompactRunResult, RunTreeDeletion, ReplaySessionResult, CancelTurnResult, ReviewRunResult, RunBatchOptions, RunBatchResult, RunOptions, ConfiguredRun, ConfiguredRunPatch, RunStateStreamItem, RuntimeStateResponse, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotRestoreResponse, StreamUserRunStatesOptions, SubstrateToolInput, SubstrateToolResponse, CreatedTeam, CreateTeamOptions, DefNamesResponse, ForkTeamOptions, ModelAliasesResponse, OperatorTokenDefNamesResponse, ProviderModelsResponse, RoutingResponse, ScheduleListResponse, SchedulePauseResult, ScheduleRunNowResult, ScheduleStateView, ListTeamsResponse, PromotedTeam, RetiredTeam, TeamBreakpoints, TeamDefDetail, TeamRunDetached, TeamRunTarget, TeamVerification, TeamDraft, TeamDraftVerification, TeamVersionList, TeamDiagram, TeamRunResult, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, HistoryToolInput, HistoryToolResponse, EvaluationSubmitInput, EvaluationGetInput, EvaluationListForRunInput, EvaluationListForDefInput, EvaluationAggregateInput, EvaluationInput, EvaluationSubmitResult, EvaluationRecord, EvaluationListForRunResult, EvaluationListForDefResult, EvaluationAggregate, TranscriptResponse, WhoamiResponse, UsageDimension, UsageReportResponse, TokenLimit, TokenLimitsResponse, ConfigResponse, SetTokenLimitRequest, AclBinding, AclBindingListResponse, AclCatalog, AclDefInput, AclDefListResponse, AclDefNamesResponse, AclDefRow, AclRule, AclValidateResult, AuthzDecision, AuthzEvaluationRequest, AuthzEvaluationsRequest, AuthzEvaluationsResponse, AuthzExplainResponse, AuthzSimulateRequest, AuthzSimulateResponse, CreateAclBindingBody, CreateGroupBody, GroupDetail, GroupEffective, GroupListResponse, GroupMemberChange, GroupMemberKind, GroupRow } from "./types.js";
+import type { ChangeFeedFrame, StreamChangesOptions, CredentialListResponse, CredentialMeta, CryptoKeyEncoding, CryptoKeyExport, CryptoKeyExternal, CryptoKeyType, CryptoRequest, CryptoResultByOp, DecideRequest, DecideResponse, DecisionModelsResponse, CredentialScope, DirectoryInspection, DirectoryTenant, DirectoryUser, ErasureReport, ErasureResult, Agent, AgentEvent, AgentList, CancelAgentResult, ClientOptions, ContinueOptions, RunOverrideOptions, EffectiveConfigResponse, RunFileInput, RunInboxDownload, AgentOverridableResponse, RetuneRunResponse, RunConfigResponse, RunPromptResponse, CreateSnapshotOptions, EnsureCodeAgentOptions, EnsureCodeAgentResult, EnsureHookDefOptions, EnsureHookDefResult, HookDefInput, HookDefOverlay, HookDefRowResponse, CreateDefOptions, ForkDefOptions, HookDefForkOverlay, ScheduleDefInput, ScheduleDefOverlay, ScheduleDefRowResponse, WebhookDefInput, WebhookDefOverlay, WebhookDefRowResponse, EnsureMcpServerOptions, EnsureMcpServerResult, HealthResponse, InterruptListResponse, InterruptStatus, ListUserAgentsOptions, WalkRunsPage, AckChannelOptions, AwaitChannelsOptions, BroadcastChannelsOptions, ChannelAckResult, ChannelAwaitResult, ChannelBroadcastResult, ChannelDescriptor, ChannelPeekResult, ListTeamChannelsOptions, PeekTeamChannelOptions, ReleaseTeamChannelOptions, TeamChannelPeekResult, TeamChannelReleaseResult, TeamChannelsResult, ChannelPublishResult, ChannelPurgeResult, ChannelReleaseResult, ChannelSubscribeResult, CreateChannelOptions, ListChannelsResponse, PeekChannelOptions, PublishChannelOptions, ReleaseChannelOptions, SetMemoryEntryOptions, SetMemoryEntryResponse, SubscribeChannelOptions, UpdateChannelOptions, LibraryAgentDefinition, LibraryListResponse, LibraryMcpServerDefinition, LibrarySkillDefinition, ListUsersResponse, UserRecord, CreateUserBody, UpdateUserBody, MintedUserToken, ListUserTokensResponse, UserIdentitiesResponse, AuthGateListResponse, CreateInviteBody, CreatedInvite, AuthInviteListResponse, CreatedPasswordReset, GateIdentitiesResponse, GateTenantStatus, RunnableAgentsResponse, LLMChatOptions, LLMChatResponse, LLMChatStreamItem, LLMEmbeddingsOptions, LLMEmbeddingsResponse, MCPServerDefVerifyResult, MemoryEmbedStatsResponse, MemoryEntriesResponse, MemoryEntryResponse, MemoryBackfillResponse, MemoryPurgeResponse, MemoryReembedResponse, MemoryScopeIDsResponse, MemoryScopesResponse, MemorySearchInput, MemorySearchResponse, PauseResult, RetentionOverride, PersistentVolumesResponse, EphemeralVolumesResponse, ResolveInterruptOptions, ResumeResult, ResolverMatrix, CompactRunResult, RunTreeDeletion, ReplaySessionResult, CancelTurnResult, ReviewRunResult, RunBatchOptions, RunBatchResult, RunOptions, ConfiguredRun, ConfiguredRunPatch, RunStateStreamItem, RuntimeStateResponse, SnapshotCreateResponse, SnapshotDescriptor, SnapshotEnvelope, SnapshotRestoreResponse, StreamUserRunStatesOptions, SubstrateToolInput, SubstrateToolResponse, CreatedTeam, CreateTeamOptions, DefNamesResponse, ForkTeamOptions, ModelAliasesResponse, OperatorTokenDefNamesResponse, ProviderModelsResponse, RoutingResponse, ScheduleListResponse, SchedulePauseResult, ScheduleRunNowResult, ScheduleStateView, ListTeamsResponse, PromotedTeam, RetiredTeam, TeamBreakpoints, TeamDefDetail, TeamRunDetached, TeamRunTarget, TeamVerification, TeamDraft, TeamDraftVerification, TeamVersionList, TeamDiagram, TeamRunResult, PathToolInput, PathToolResponse, DocumentToolInput, DocumentToolResponse, HistoryToolInput, HistoryToolResponse, EvaluationSubmitInput, EvaluationGetInput, EvaluationListForRunInput, EvaluationListForDefInput, EvaluationAggregateInput, EvaluationInput, EvaluationSubmitResult, EvaluationRecord, EvaluationListForRunResult, EvaluationListForDefResult, EvaluationAggregate, TranscriptResponse, WhoamiResponse, UsageDimension, UsageBucket, UsageReportResponse, TokenLimit, TokenLimitsResponse, ConfigResponse, SetTokenLimitRequest, AclBinding, AclBindingListResponse, AclCatalog, AclDefInput, AclDefListResponse, AclDefNamesResponse, AclDefRow, AclRule, AclValidateResult, AuthzDecision, AuthzEvaluationRequest, AuthzEvaluationsRequest, AuthzEvaluationsResponse, AuthzExplainResponse, AuthzSimulateRequest, AuthzSimulateResponse, CreateAclBindingBody, CreateGroupBody, GroupDetail, GroupEffective, GroupListResponse, GroupMemberChange, GroupMemberKind, GroupRow, AppClientConfig, AppClientEntry, ClientDefInput, ClientDefListResponse, ClientDefNamesResponse, ClientDefRecord, ClientDefRetireResult, ClientDefVerifyResult, DeviceLoginOptions, DeviceLoginResult } from "./types.js";
 export declare class LoomcycleClient {
     private ctx;
+    private readonly tokenProvider?;
+    private oauthHelper?;
+    private readonly rawFetch?;
     constructor(opts?: ClientOptions);
+    /** The app sign-in helper (RFC FL) for this server: same base URL and
+     *  fetch, never this client's bearer. See {@link LoomcycleOAuth}. */
+    get oauth(): LoomcycleOAuth;
     /**
      * Run an agent and stream events. Returns AsyncIterable<AgentEvent>;
      * the iterator completes when the server closes the SSE stream.
@@ -183,6 +190,33 @@ export declare class LoomcycleClient {
     getEffectiveConfig(runId: string, opts?: {
         signal?: AbortSignal;
     }): Promise<EffectiveConfigResponse>;
+    /** Run one File-tool op on a run's inbox from outside the run — the files the
+     *  run's tools returned. Mirrors `POST /v1/runs/{run_id}/file`, the HTTP twin
+     *  of the MCP `file` tool. Ops: stat, ls, extract, import, keep, rm, clear.
+     *  The response is the op's own JSON (narrow as needed).
+     *
+     *  Needs `runs:read`, and works on any run you can read; another tenant's run
+     *  is an opaque {@link NotFoundError}. extract, keep, rm and clear write, so
+     *  they need the run's owner or an admin — a tenant operator counts as one
+     *  for its own tenant's runs; anyone else gets a
+     *  {@link SubstrateToolRefusedError}, as does a refused op. */
+    runFile<T = unknown>(runId: string, input: RunFileInput, opts?: {
+        signal?: AbortSignal;
+    }): Promise<T>;
+    /** Download one file of a run's inbox. Mirrors
+     *  `GET /v1/runs/{run_id}/inbox/{path}` (HEAD with `head: true`). `path` is
+     *  relative to the inbox root (`documents/a.pdf`) or a reference
+     *  (`volume:inbox:documents/a.pdf`).
+     *
+     *  Any reader of the run may download (`runs:read`). `range` is sent as the
+     *  Range header (`bytes=0-1023`). The inbox is deleted when its run ends, so
+     *  a finished run's file — like a missing file, run, or another tenant's run —
+     *  is a {@link NotFoundError}. */
+    downloadRunInboxFile(runId: string, path: string, opts?: {
+        range?: string;
+        head?: boolean;
+        signal?: AbortSignal;
+    }): Promise<RunInboxDownload>;
     /** Which per-run overrides a run of `name` may set, for this caller — what a
      *  run form needs before it sends anything. Mirrors
      *  `GET /v1/_agentdef/{name}/overridable`.
@@ -474,8 +508,11 @@ export declare class LoomcycleClient {
         signal?: AbortSignal;
     }): Promise<WalkRunsPage>;
     /** Aggregated token-usage + cost report (RFC AV). Group by any of
-     *  tenant/user/provider/model/source over an optional time window; group by
-     *  `source` for the operator-vs-tenant split. Tenant-scoped server-side: a
+     *  tenant/user/provider/model/source/purpose/tier/user_tier/agent/class over
+     *  an optional time window, split into periods with `bucket`;
+     *  group by `source` for the operator-vs-tenant split, by `purpose` to see
+     *  what OCR and speech-to-text cost (a row's `audio_seconds` is the audio its
+     *  speech-to-text calls transcribed). Tenant-scoped server-side: a
      *  tenant principal sees only its own tenant (the `tenant` focus is
      *  admin-only). Mirrors `GET /v1/_usage`. */
     usageReport(opts?: {
@@ -486,6 +523,16 @@ export declare class LoomcycleClient {
         to?: string;
         /** Super-admin tenant focus (?tenant=); ignored for a tenant principal. */
         tenant?: string;
+        /** Split the window into UTC periods; each row then carries `period`.
+         *  `hour` reaches only `detail_since` onward. */
+        bucket?: UsageBucket;
+        /** Keep the `top` largest values of the first `groupBy` dimension (by
+         *  `topBy`, default cost); the rest fold into rows marked `other`. */
+        top?: number;
+        topBy?: "cost" | "tokens" | "calls";
+        /** Keep rows whose dimension is one of the values. `tenant` is not a
+         *  filter: it is the `tenant` focus above. */
+        filters?: Partial<Record<Exclude<UsageDimension, "tenant">, string[]>>;
         signal?: AbortSignal;
     }): Promise<UsageReportResponse>;
     /** Instance configuration: build identity, the feature matrix, and the live
@@ -606,12 +653,16 @@ export declare class LoomcycleClient {
      *  "isolated" confines the member to its own user scope. 409 on a duplicate
      *  (tenant, subject). */
     createUser(body: CreateUserBody, opts?: {
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<UserRecord>;
     /** Patch mutable fields on a user in the caller's own tenant. An omitted key
      *  leaves the column unchanged. Disabling a user (status:"disabled") also
-     *  revokes its delegated tokens server-side. Cross-tenant target → 404. */
+     *  revokes its delegated tokens server-side. A pending user is activated by
+     *  {@link approveUser}, not here (409 `use_approve`). Cross-tenant target →
+     *  404. */
     updateUser(subject: string, body: UpdateUserBody, opts?: {
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<UserRecord>;
     /** Delete the user identity row in the caller's own tenant (204). Its
@@ -619,8 +670,126 @@ export declare class LoomcycleClient {
      *  Owned data (runs / sessions / memory) is left intact — this is not
      *  erasure ({@link erasureExecute}). Cross-tenant target → 404. */
     deleteUser(subject: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<void>;
+    /** Approve a user awaiting approval: `pending` → `active`
+     *  (`POST /v1/_users/{subject}/approve`). A sign-in gate configured with
+     *  `new_user.status: pending` provisions people who can sign in but are
+     *  refused everything until this call. Returns the updated record. 409
+     *  `not_pending` for a user that is not pending; 404 for an unknown or
+     *  cross-tenant subject. An `auth:manage` credential may approve only a user
+     *  at its floor (403 `target_beyond_floor`). */
+    approveUser(subject: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<UserRecord>;
+    /** The identity-provider accounts a user signs in with
+     *  (`GET /v1/_users/{subject}/identities`): one row per linked gate, never a
+     *  secret. A user reads its own; a tenant operator or an admin reads any in
+     *  the tenant. Password-gate logins, with whether a password and an
+     *  authenticator are set, are {@link listGateIdentities}. */
+    listUserIdentities(subject: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<UserIdentitiesResponse>;
+    /** Unlink one identity-provider account from a user
+     *  (`DELETE /v1/_users/{subject}/identities/{gate}`, 204). Sessions made
+     *  through it end on their next request. For a tenant operator or an admin;
+     *  a user unlinking its own account must do it from a recently
+     *  signed-in Web UI session, so a bearer is refused (403
+     *  `link_needs_own_session`). A password gate's login is removed with
+     *  {@link removeGateCredentials} instead (409 `password_gate`). 404
+     *  `identity_not_found` when no account of that gate is linked. */
+    unlinkUserIdentity(subject: string, gate: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<void>;
+    /** Sign in through the server's device gate (RFC 8628): shows the person a
+     *  code through `onPrompt`, polls until they approve it in a signed-in Web
+     *  UI session (`/ui/device`), and returns the token issued to them. The
+     *  token is the approver's own member token, at most the device gate's
+     *  `token_ttl` and never past the approving session or the credential it
+     *  was made from. Sends no bearer: a client constructed without one can
+     *  call it. Throws {@link DeviceLoginError} when the login is denied,
+     *  expires, or the server refuses it; 404 `device_login_disabled` when no
+     *  device gate is configured. */
+    deviceLogin(opts: DeviceLoginOptions): Promise<DeviceLoginResult>;
+    /** Every configured sign-in gate (`GET /v1/_authgate`): kind, label,
+     *  whether a browser can sign in through it, its identity map and an
+     *  external gate's key fingerprint and removal timing — never key
+     *  material. **Admin token only.** `probe: true` also fetches each
+     *  external gate's discovery document (bounded) and compares it with the
+     *  registration. */
+    listAuthGates(opts?: {
+        probe?: boolean;
+        signal?: AbortSignal;
+    }): Promise<AuthGateListResponse>;
+    /** Invite a person to sign in through a password gate
+     *  (`POST /v1/_authgate/{gate}/invites`). Without `subject` the invite
+     *  makes a new user, at the gate's new-user floor unless the gate is
+     *  trusted; with one it gives that existing user a login (409
+     *  `credential_exists` if it has one — issue a reset instead). Returns the
+     *  one-time link, shown once. */
+    createInvite(gate: string, body: CreateInviteBody, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<CreatedInvite>;
+    /** A password gate's invites in the tenant, live and past
+     *  (`GET /v1/_authgate/{gate}/invites`), never their codes. An admin naming
+     *  no tenant lists every tenant's. */
+    listInvites(gate: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<AuthInviteListResponse>;
+    /** Revoke a live invite (`DELETE /v1/_authgate/{gate}/invites/{id}`, 204).
+     *  409 `invite_not_live` when it was already redeemed, revoked or expired;
+     *  another tenant's invite is a 404. */
+    revokeInvite(gate: string, inviteId: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<void>;
+    /** Issue a one-time link that sets a new password for a user with a login
+     *  at the gate (`POST /v1/_authgate/{gate}/resets`). A user with an
+     *  authenticator still needs a code from it. Completing the reset ends the
+     *  user's sessions from the old password and retires its delegated tokens.
+     *  404 `login_not_found` when the user has no login at the gate. */
+    createPasswordReset(gate: string, subject: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<CreatedPasswordReset>;
+    /** Remove a user's password, authenticator and recovery codes at a gate
+     *  (`DELETE /v1/_authgate/{gate}/credentials/{subject}`, 204). The login
+     *  stays reserved, so a later {@link createPasswordReset} restores access. */
+    removeGateCredentials(gate: string, subject: string, opts?: {
+        tenant?: string;
         signal?: AbortSignal;
     }): Promise<void>;
+    /** Change the login a user signs in with at a gate
+     *  (`PATCH /v1/_authgate/{gate}/logins/{subject}`). The subject does not
+     *  change, so nothing the user owns moves. Returns the normalised login;
+     *  409 `login_taken` when another user has it. */
+    renameGateLogin(gate: string, subject: string, login: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<{
+        subject: string;
+        login: string;
+    }>;
+    /** A user's logins at every gate, and whether it has a password and a
+     *  confirmed authenticator (`GET /v1/_authgate/{gate}/identities`) — never
+     *  a secret. `gate` must name a password gate. */
+    listGateIdentities(gate: string, subject: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<GateIdentitiesResponse>;
+    /** Whether the tenant has, or ever had, a user and whether an owner invite
+     *  is live (`GET /v1/_authgate/{gate}/tenant-status`) — what deciding on an
+     *  owner invite needs, and nothing about who the users are. */
+    getGateTenantStatus(gate: string, opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<GateTenantStatus>;
     /** Mint a bearer token for one of the caller's own ACTIVE users. The granted
      *  scopes are DERIVED server-side from the member's access_mode (never sent),
      *  and the plaintext `token` is returned exactly ONCE — store it now, it is
@@ -1236,6 +1405,59 @@ export declare class LoomcycleClient {
     volumeDef(input: SubstrateToolInput, opts?: {
         signal?: AbortSignal;
     }): Promise<SubstrateToolResponse>;
+    /** The ClientDef op dispatch, as sent: `{op, name?, def_id?, client?,
+     *  description?, tenant?, content_sha256?}`. The typed methods below are
+     *  the usual way in. */
+    clientDef(input: ClientDefInput, opts?: {
+        signal?: AbortSignal;
+    }): Promise<unknown>;
+    /** Register an app (`op: "create"`). Its redirect URIs and origins are
+     *  checked as strictly as a config client's. `tenant` is for an admin: the
+     *  tenant whose people it signs in, "" (the default) for every tenant. */
+    createClientDef(name: string, client: AppClientConfig, opts?: {
+        description?: string;
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<ClientDefRecord>;
+    /** Change an app (`op: "update"`): a new version, whole. Codes issued
+     *  under the old version that were not exchanged yet stop working. */
+    updateClientDef(name: string, client: AppClientConfig, opts?: {
+        description?: string;
+        signal?: AbortSignal;
+    }): Promise<ClientDefRecord>;
+    /** One app by name (a config client too) or one version by `def_id`
+     *  (`op: "get"`). */
+    getClientDef(ref: {
+        name?: string;
+        def_id?: string;
+    }, opts?: {
+        signal?: AbortSignal;
+    }): Promise<AppClientEntry>;
+    /** The apps the caller may see, config ones included (`op: "list"`). An
+     *  admin may focus one tenant with `tenant` ("" = the every-tenant ones). */
+    listClientDefs(opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<ClientDefListResponse>;
+    /** Take an app out of service (`op: "retire"`): its unused codes are
+     *  voided, its sign-ins revoked and their access tokens retired. The name
+     *  is not reusable. */
+    retireClientDef(name: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<ClientDefRetireResult>;
+    /** Whether an app is deployed and, with `contentSha256`, whether it matches
+     *  (`op: "verify"`). An absent app answers `deployed: false`. */
+    verifyClientDef(name: string, opts?: {
+        contentSha256?: string;
+        signal?: AbortSignal;
+    }): Promise<ClientDefVerifyResult>;
+    /** The apps the caller may see, by name (`GET /v1/_clientdef/names`). An
+     *  admin may focus one tenant with `tenant`; unlike the other families'
+     *  name lists, `""` is a focus too (the every-tenant apps). */
+    listClientDefNames(opts?: {
+        tenant?: string;
+        signal?: AbortSignal;
+    }): Promise<ClientDefNamesResponse>;
     private listDefNames;
     /** Every AgentDef name (`GET /v1/_agentdef/names`). */
     listAgentDefNames(opts?: {