@polymorfa/sdk 0.1.0-dev.20260922140944 → 0.1.0-dev.20260923093259

package/README.md

@@ -2,15 +2,16 @@
 
 The handwritten Polymorfa server SDK for TypeScript and Node.js.
 
-This package has not been published to npm. Build it from a clone of the
-development branch and install the packed tarball:
+Install the development prerelease from npm:
 
 ```bash
-npm ci
-npm run build:workspaces
-npm pack -w @polymorfa/sdk
+npm install @polymorfa/sdk@dev
 ```
 
+Pin an exact `0.1.0-dev.<timestamp>` version for reproducible installs. See the
+[repository installation guide](../../README.md#typescript-development-install)
+to build and install a packed tarball from source.
+
 The Calls client is part of this package as `@polymorfa/sdk/calls`.
 `@polymorfa/sdk/calls/internal` exists for the Polymorfa browser package;
 applications must not import it.
@@ -47,7 +48,7 @@ const platform = new Client({
     type: "organizationApiKey",
     value: process.env.POLYMORFA_PLATFORM_API_KEY!,
   },
-  apiVersion: "1.0.0",
+  apiVersion: "2026-03-20",
 });
 
 const project = platform.project("project_123");
@@ -84,9 +85,9 @@ v1 grammar and never decodes or decrypts the credential.
 The SDK rejects `pmfa_ct_` browser tokens and CLI-only `pmfa_ls_` listener
 credentials before a management request. It also rejects retired call-agent
 `pmfa_at_` and socket `pmfa_wst_` tickets and simulated-device `pmfa_sd_`
-capabilities as server API keys. It does not expose a listener,
-`AsyncIterable`, event emitter, or forwarding API. Live forwarding belongs to
-`polymorfa listen`.
+capabilities as server API keys. `Client.events.stream()` exposes an
+`AsyncIterable` for the separate [server event stream](#stream-events-in-real-time),
+subject to scope and beta access. Live forwarding belongs to `polymorfa listen`.
 
 ## System and Bridge clients
 
@@ -1499,7 +1500,9 @@ console.log(replay.data.operationId);
 
 List methods return `CursorPage<T>`. Mutations return owner-specific typed
 receipts and preserve response metadata, request IDs, and idempotency receipts.
-The SDK has no operation inspection or cancellation methods.
+Use `operations.get()` or `operations.wait()` to inspect asynchronous work,
+and `operations.cancel()` while `capabilities.cancellable` is true. Reads need
+`operations:read`; cancellation needs `operations:cancel`.
 
 Console and staff routes remain absent from the server client and its raw
 guidance. The CLI listener protocol stays private to the CLI.
@@ -1885,6 +1888,10 @@ has `delivery: "simulated"` and the event arrives as ordinary Test number
 activity. Both methods require an organization API key or project token with
 `sandbox:write` (trigger) or `sandbox:read` (list) and Test numbers access.
 
+Use `session.restriction_updated` with `{ restrictionActive: false }` to
+test a restriction ending, or `true` to test one starting. The `call.ended`
+fixture accepts `callEndReason: "call_restricted"` for a restricted call.
+
 Pass `{ idempotencyKey }` as the third argument to `triggerEvent` to retry
 safely. Repeating the request with the same key and body reuses the same event
 ID, so a retry after an uncertain response never creates a second event or

package/dist/calls/diagnostics.d.ts

@@ -4,7 +4,7 @@
  * codes are sent: no phone numbers, names, audio, video or device labels.
  */
 /** Package version sent with reports from `@polymorfa/sdk/calls`. */
-export declare const CALLS_SDK_VERSION = "0.1.0-dev.20260922140944";
+export declare const CALLS_SDK_VERSION = "0.1.0-dev.20260923093259";
 export type CallErrorCode = "media_permission_denied" | "device_not_found" | "device_in_use" | "ice_failed" | "negotiation_failed" | "media_timeout" | "reconnect_exhausted" | "token_refresh_failed" | "unsupported_browser" | "other";
 /** Figures measured for one connection. Omit what was not measured. */
 export interface CallQualityFigures {

package/dist/calls/diagnostics.js

@@ -4,7 +4,7 @@
  * codes are sent: no phone numbers, names, audio, video or device labels.
  */
 /** Package version sent with reports from `@polymorfa/sdk/calls`. */
-export const CALLS_SDK_VERSION = "0.1.0-dev.20260922140944";
+export const CALLS_SDK_VERSION = "0.1.0-dev.20260923093259";
 /** Platform limits per connection, applied locally to avoid refusals. */
 const QUALITY_INTERVAL_MS = 5_000;
 const ERRORS_PER_MINUTE = 20;

package/dist/messaging/testing-configuration.d.ts

@@ -18,7 +18,7 @@ export interface TestingHistoryMessage {
     fromMe: boolean;
 }
 /** Fixture names accepted by `testing.triggerEvent`, in catalog order. */
-export declare const TEST_EVENT_FIXTURES: readonly ["message.received", "message.ack", "message.failed", "call.received", "call.missed", "call.ended", "session.status", "template.status", "bansafe.enforcement", "bansafe.risk_changed"];
+export declare const TEST_EVENT_FIXTURES: readonly ["message.received", "message.ack", "message.failed", "call.received", "call.missed", "call.ended", "session.status", "session.restriction_updated", "template.status", "bansafe.enforcement", "bansafe.risk_changed"];
 /** Named test-event fixtures. Each name is the event type it produces. */
 export type TestEventFixture = (typeof TEST_EVENT_FIXTURES)[number];
 /** Optional payload overrides. Each fixture accepts only the fields it lists. */
@@ -44,7 +44,9 @@ export interface TestEventOverrides {
     /** call.ended: connected duration in seconds. */
     durationSeconds?: number;
     /** call.ended: termination reason. */
-    callEndReason?: "user_hangup" | "timeout" | "lost_connection" | "rejected";
+    callEndReason?: "user_hangup" | "timeout" | "lost_connection" | "rejected" | "call_restricted";
+    /** session.restriction_updated: whether the restriction starts or ends. */
+    restrictionActive?: boolean;
     /** session.status: status. */
     status?: "CONNECTING" | "CONNECTED" | "DISCONNECTED";
     /** session.status: reason. */

package/dist/messaging/testing-configuration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"testing-configuration.d.ts","sourceRoot":"","sources":["../../src/messaging/testing-configuration.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACtC,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,MAAM,yBAAyB,GACjC,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,kMAWtB,CAAC;AAEX,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IACjE,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,SAAS,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IACtD,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,aAAa,CAAC,EACV,mBAAmB,GACnB,uBAAuB,GACvB,aAAa,GACb,aAAa,GACb,mBAAmB,CAAC;IACxB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,aAAa,CAAC,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,GAAG,UAAU,CAAC;IAC3E,8BAA8B;IAC9B,MAAM,CAAC,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,CAAC;IACrD,8BAA8B;IAC9B,YAAY,CAAC,EACT,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,cAAc,CAAC;IACnB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,cAAc,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACzC,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,eAAe,CAAC,EACd,aAAa,GAAG,aAAa,GAAG,UAAU,GAAG,eAAe,CAAC;IAC/D,4CAA4C;IAC5C,SAAS,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;CACtD;AAED,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,QAAQ,EAAE,WAAW,GAAG,WAAW,CAAC;IACpC,4FAA4F;IAC5F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qGAAqG;IACrG,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,KAAK,CAAC,MAAM,kBAAkB,CAAC,CAAC;CAC5C"}
+{"version":3,"file":"testing-configuration.d.ts","sourceRoot":"","sources":["../../src/messaging/testing-configuration.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACtC,aAAa,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,MAAM,yBAAyB,GACjC,cAAc,GACd,gBAAgB,GAChB,aAAa,GACb,eAAe,GACf,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,iOAYtB,CAAC;AAEX,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IACjE,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,SAAS,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IACtD,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,aAAa,CAAC,EACV,mBAAmB,GACnB,uBAAuB,GACvB,aAAa,GACb,aAAa,GACb,mBAAmB,CAAC;IACxB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,aAAa,CAAC,EACV,aAAa,GACb,SAAS,GACT,iBAAiB,GACjB,UAAU,GACV,iBAAiB,CAAC;IACtB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,8BAA8B;IAC9B,MAAM,CAAC,EAAE,YAAY,GAAG,WAAW,GAAG,cAAc,CAAC;IACrD,8BAA8B;IAC9B,YAAY,CAAC,EACT,SAAS,GACT,gBAAgB,GAChB,QAAQ,GACR,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,cAAc,CAAC;IACnB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,cAAc,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACzC,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,eAAe,CAAC,EACd,aAAa,GAAG,aAAa,GAAG,UAAU,GAAG,eAAe,CAAC;IAC/D,4CAA4C;IAC5C,SAAS,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;CACtD;AAED,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,QAAQ,EAAE,WAAW,GAAG,WAAW,CAAC;IACpC,4FAA4F;IAC5F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,qGAAqG;IACrG,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,gBAAgB,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,KAAK,CAAC,MAAM,kBAAkB,CAAC,CAAC;CAC5C"}

package/dist/messaging/testing-configuration.js

@@ -7,6 +7,7 @@ export const TEST_EVENT_FIXTURES = [
     "call.missed",
     "call.ended",
     "session.status",
+    "session.restriction_updated",
     "template.status",
     "bansafe.enforcement",
     "bansafe.risk_changed",

package/dist/messaging/testing-configuration.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing-configuration.js","sourceRoot":"","sources":["../../src/messaging/testing-configuration.ts"],"names":[],"mappings":"AAwBA,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kBAAkB;IAClB,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;CACd,CAAC"}
+{"version":3,"file":"testing-configuration.js","sourceRoot":"","sources":["../../src/messaging/testing-configuration.ts"],"names":[],"mappings":"AAwBA,0EAA0E;AAC1E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kBAAkB;IAClB,aAAa;IACb,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,6BAA6B;IAC7B,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;CACd,CAAC"}

package/dist/transport/idempotency.d.ts

@@ -3,8 +3,9 @@ import type { RequestOptions } from "./types.js";
  * Give a non-idempotent messaging write a stable Idempotency-Key.
  *
  * A caller-supplied key wins. Otherwise one random key is generated per call,
- * so every automatic retry of that call reuses it and the API replays the
- * original result instead of performing the write again.
+ * so every automatic retry of that call reuses it. The endpoint determines the
+ * retry response: completed messaging writes return idempotency_completed
+ * without the original response body.
  */
 export declare function withIdempotencyKey(options: RequestOptions): RequestOptions;
 //# sourceMappingURL=idempotency.d.ts.map

package/dist/transport/idempotency.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/transport/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CAG1E"}
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/transport/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CAG1E"}

package/dist/transport/idempotency.js

@@ -2,8 +2,9 @@
  * Give a non-idempotent messaging write a stable Idempotency-Key.
  *
  * A caller-supplied key wins. Otherwise one random key is generated per call,
- * so every automatic retry of that call reuses it and the API replays the
- * original result instead of performing the write again.
+ * so every automatic retry of that call reuses it. The endpoint determines the
+ * retry response: completed messaging writes return idempotency_completed
+ * without the original response body.
  */
 export function withIdempotencyKey(options) {
     if (options.idempotencyKey !== undefined)

package/dist/transport/idempotency.js.map

@@ -1 +1 @@
-{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/transport/idempotency.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACzD,OAAO,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;AACxE,CAAC"}
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/transport/idempotency.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACzD,OAAO,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;AACxE,CAAC"}

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SDK_VERSION = "0.1.0-dev.20260922140944";
+export declare const SDK_VERSION = "0.1.0-dev.20260923093259";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,2 +1,2 @@
-export const SDK_VERSION = "0.1.0-dev.20260922140944";
+export const SDK_VERSION = "0.1.0-dev.20260923093259";
 //# sourceMappingURL=version.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@polymorfa/sdk",
-  "version": "0.1.0-dev.20260922140944",
+  "version": "0.1.0-dev.20260923093259",
   "description": "Handwritten Polymorfa server SDK for TypeScript and Node.js",
   "type": "module",
   "license": "MIT",