@possibl/rcrt-sdk 0.1.3 → 0.5.1

package/dist/members.js

@@ -0,0 +1,74 @@
+/**
+ * Members module — workspace membership + invitations.
+ *
+ *   GET/POST        /v1/tenants/{tenant_id}/members
+ *   PUT/DELETE      /v1/tenants/{tenant_id}/members/{user_id}
+ *   GET/POST        /v1/tenants/{tenant_id}/invitations
+ *   DELETE          /v1/tenants/{tenant_id}/invitations/{invitation_id}
+ *
+ * Accept/decline/pending live on the IdentityModule (`auth.*`) because
+ * they are keyed by the *caller's* email, not a workspace.
+ *
+ * Note: creating an invitation also sends the invite email server-side;
+ * there is no separate "resend" endpoint — re-create to resend.
+ */
+import { request } from './internal/fetch.js';
+export class MembersModule {
+    ctx;
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    tenant(tenantId) {
+        const id = tenantId ?? this.ctx.tenantId;
+        if (!id)
+            throw new Error('MembersModule requires a tenant id (set via setTenantId or pass explicitly)');
+        return id;
+    }
+    /** `GET /v1/tenants/{id}/members` */
+    async list(tenantId) {
+        const res = await request(this.ctx, `/v1/tenants/${this.tenant(tenantId)}/members`);
+        return res.members ?? [];
+    }
+    /** `POST /v1/tenants/{id}/members` — direct add (caller must know the user id). */
+    async add(userId, role, tenantId) {
+        await request(this.ctx, `/v1/tenants/${this.tenant(tenantId)}/members`, {
+            method: 'POST',
+            body: { user_id: userId, role },
+        });
+    }
+    /** `PUT /v1/tenants/{id}/members/{userId}` — change a member's role. */
+    async updateRole(userId, role, tenantId) {
+        await request(this.ctx, `/v1/tenants/${this.tenant(tenantId)}/members/${userId}`, {
+            method: 'PUT',
+            body: { role },
+        });
+    }
+    /** `DELETE /v1/tenants/{id}/members/{userId}` */
+    async remove(userId, tenantId) {
+        await request(this.ctx, `/v1/tenants/${this.tenant(tenantId)}/members/${userId}`, {
+            method: 'DELETE',
+        });
+    }
+    /** `GET /v1/tenants/{id}/invitations` — all invitations incl. resolved ones. */
+    async listInvitations(tenantId) {
+        const res = await request(this.ctx, `/v1/tenants/${this.tenant(tenantId)}/invitations`);
+        return res.invitations ?? [];
+    }
+    /**
+     * `POST /v1/tenants/{id}/invitations` — creates the invite AND sends
+     * the email. Role defaults server-side to 'member'.
+     */
+    async invite(email, options = {}) {
+        return request(this.ctx, `/v1/tenants/${this.tenant(options.tenantId)}/invitations`, {
+            method: 'POST',
+            body: { email, role: options.role, message: options.message },
+        });
+    }
+    /** `DELETE /v1/tenants/{id}/invitations/{invId}` — soft-cancel (status → cancelled). */
+    async cancelInvitation(invitationId, tenantId) {
+        await request(this.ctx, `/v1/tenants/${this.tenant(tenantId)}/invitations/${invitationId}`, {
+            method: 'DELETE',
+        });
+    }
+}
+//# sourceMappingURL=members.js.map

package/dist/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../src/members.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAsB9C,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAE1C,MAAM,CAAC,QAAiB;QAC9B,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACxG,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,IAAI,CAAC,QAAiB;QAC1B,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,GAAG,EACR,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAC/C,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,QAAiB;QACvD,MAAM,OAAO,CAAO,IAAI,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;SAChC,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,QAAiB;QAC9D,MAAM,OAAO,CAAO,IAAI,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,MAAM,EAAE,EAAE;YACtF,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,IAAI,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAiB;QAC5C,MAAM,OAAO,CAAO,IAAI,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,MAAM,EAAE,EAAE;YACtF,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,eAAe,CAAC,QAAiB;QACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,GAAG,EACR,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CACnD,CAAC;QACF,OAAO,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,UAAkE,EAAE;QAEpE,OAAO,OAAO,CAAmB,IAAI,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE;YACrG,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,gBAAgB,CAAC,YAAoB,EAAE,QAAiB;QAC5D,MAAM,OAAO,CAAO,IAAI,CAAC,GAAG,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,YAAY,EAAE,EAAE;YAChG,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/org.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Org admin module — `/v1/orgs/*` management surface.
+ *
+ * Everything here requires org-admin (or platform-admin) rights on the
+ * target org. Tenant scoping does not apply — calls are addressed by
+ * org id, not by the client's X-Tenant-ID.
+ */
+import type { FetchContext } from './internal/fetch.js';
+export interface OrgSummary {
+    id: string;
+    name: string;
+    slug?: string;
+    allowed_domains?: string[];
+    [key: string]: unknown;
+}
+export interface OrgMember {
+    user_id: string;
+    email?: string;
+    name?: string;
+    role: string;
+    [key: string]: unknown;
+}
+export interface OrgTenant {
+    id: string;
+    name: string;
+    slug?: string;
+    org_id?: string;
+    [key: string]: unknown;
+}
+/** Response of `POST /v1/orgs/{org_id}/customers` — a child customer org + its default workspace. */
+export interface CustomerOrgResponse {
+    org?: {
+        id: string;
+        name?: string;
+    };
+    workspace?: {
+        id: string;
+        name?: string;
+    };
+    [key: string]: unknown;
+}
+/**
+ * A stored org LLM provider credential.
+ *
+ * `org_llm_providers` is now purely a credential store keyed by route (see
+ * docs/design/LLM_PROVIDER_MODEL_RESOLUTION.md). `is_default` is retained only
+ * as a convenience flag for credential listing and does NOT influence
+ * resolution. The removed `fallback_for_id` column and the tier-override
+ * surface are gone — model selection is the agent breadcrumb's concrete
+ * `route/provider/model` address.
+ */
+export interface OrgLLMProvider {
+    id: string;
+    provider_type: string;
+    name: string;
+    is_default: boolean;
+}
+export declare class OrgModule {
+    private readonly ctx;
+    constructor(ctx: FetchContext);
+    /** `GET /v1/orgs/{org_id}` */
+    get(orgId: string): Promise<OrgSummary>;
+    /** `GET /v1/orgs/{org_id}/members` */
+    listMembers(orgId: string): Promise<OrgMember[]>;
+    /**
+     * `GET /v1/orgs/{org_id}/tenants` — all workspaces in the org.
+     *
+     * Privacy note for fleet apps: never enumerate a *customer-run*
+     * platform org's tenants; use org-level rollups instead.
+     */
+    listTenants(orgId: string): Promise<OrgTenant[]>;
+    /** `POST /v1/orgs/{org_id}/tenants` — create a workspace inside the org. Returns the new tenant id. */
+    createTenant(orgId: string, name: string, slug?: string): Promise<OrgTenant>;
+    /**
+     * `POST /v1/orgs/{org_id}/customers` — create a child customer org
+     * (optionally adopting an existing workspace as its default).
+     */
+    createCustomerOrg(orgId: string, opts: {
+        name: string;
+        adoptTenantId?: string;
+    }): Promise<CustomerOrgResponse>;
+    /** `GET /v1/orgs/{org_id}/llm-providers` — list stored BYO credentials (no fallback role). */
+    listLLMProviders(orgId: string): Promise<OrgLLMProvider[]>;
+}
+//# sourceMappingURL=org.d.ts.map

package/dist/org.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.d.ts","sourceRoot":"","sources":["../src/org.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGxD,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qGAAqG;AACrG,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpC,SAAS,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,YAAY;IAE9C,8BAA8B;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,sCAAsC;IAChC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQtD;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQtD,uGAAuG;IACjG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAclF;;;OAGG;IACG,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,mBAAmB,CAAC;IAgB/B,8FAA8F;IACxF,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;CAOjE"}

package/dist/org.js

@@ -0,0 +1,70 @@
+/**
+ * Org admin module — `/v1/orgs/*` management surface.
+ *
+ * Everything here requires org-admin (or platform-admin) rights on the
+ * target org. Tenant scoping does not apply — calls are addressed by
+ * org id, not by the client's X-Tenant-ID.
+ */
+import { request } from './internal/fetch.js';
+export class OrgModule {
+    ctx;
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    /** `GET /v1/orgs/{org_id}` */
+    async get(orgId) {
+        return request(this.ctx, `/v1/orgs/${encodeURIComponent(orgId)}`);
+    }
+    /** `GET /v1/orgs/{org_id}/members` */
+    async listMembers(orgId) {
+        const res = await request(this.ctx, `/v1/orgs/${encodeURIComponent(orgId)}/members`);
+        return Array.isArray(res) ? res : (res?.members ?? []);
+    }
+    /**
+     * `GET /v1/orgs/{org_id}/tenants` — all workspaces in the org.
+     *
+     * Privacy note for fleet apps: never enumerate a *customer-run*
+     * platform org's tenants; use org-level rollups instead.
+     */
+    async listTenants(orgId) {
+        const res = await request(this.ctx, `/v1/orgs/${encodeURIComponent(orgId)}/tenants`);
+        return Array.isArray(res) ? res : (res?.tenants ?? []);
+    }
+    /** `POST /v1/orgs/{org_id}/tenants` — create a workspace inside the org. Returns the new tenant id. */
+    async createTenant(orgId, name, slug) {
+        const res = await request(this.ctx, `/v1/orgs/${encodeURIComponent(orgId)}/tenants`, {
+            method: 'POST',
+            body: { name, ...(slug ? { slug } : {}) },
+        });
+        // Normalise the gateway's historical response shapes.
+        const r = res;
+        if (r.tenant?.id)
+            return r.tenant;
+        const id = r.id ?? r.tenant_id ?? '';
+        return { id, name: r.name ?? name, org_id: orgId };
+    }
+    /**
+     * `POST /v1/orgs/{org_id}/customers` — create a child customer org
+     * (optionally adopting an existing workspace as its default).
+     */
+    async createCustomerOrg(orgId, opts) {
+        return request(this.ctx, `/v1/orgs/${encodeURIComponent(orgId)}/customers`, {
+            method: 'POST',
+            body: { name: opts.name, ...(opts.adoptTenantId ? { adopt_tenant_id: opts.adoptTenantId } : {}) },
+        });
+    }
+    // ── LLM provider credentials ────────────────────────────────────
+    //
+    // `org_llm_providers` is a pure credential store keyed by route. The
+    // tier-override surface (getLLMTiers/upsertLLMTier/deleteLLMTier and the
+    // `/v1/orgs/{org}/llm-tiers` endpoints) was removed: model selection is the
+    // agent breadcrumb's concrete `route/provider/model` address, expanded from
+    // authoring tiers at publish time. See
+    // docs/design/LLM_PROVIDER_MODEL_RESOLUTION.md.
+    /** `GET /v1/orgs/{org_id}/llm-providers` — list stored BYO credentials (no fallback role). */
+    async listLLMProviders(orgId) {
+        const res = await request(this.ctx, `/v1/orgs/${encodeURIComponent(orgId)}/llm-providers`);
+        return Array.isArray(res) ? res : (res?.providers ?? []);
+    }
+}
+//# sourceMappingURL=org.js.map

package/dist/org.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org.js","sourceRoot":"","sources":["../src/org.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAkD9C,MAAM,OAAO,SAAS;IACS;IAA7B,YAA6B,GAAiB;QAAjB,QAAG,GAAH,GAAG,CAAc;IAAG,CAAC;IAElD,8BAA8B;IAC9B,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,OAAO,OAAO,CAAa,IAAI,CAAC,GAAG,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,GAAG,EACR,YAAY,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAChD,CAAC;QACF,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,GAAG,EACR,YAAY,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAChD,CAAC;QACF,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,IAAY,EAAE,IAAa;QAC3D,MAAM,GAAG,GAAG,MAAM,OAAO,CAEvB,IAAI,CAAC,GAAG,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC1C,CAAC,CAAC;QACH,sDAAsD;QACtD,MAAM,CAAC,GAAG,GAA6E,CAAC;QACxF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAAE,OAAO,CAAC,CAAC,MAAM,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,IAA8C;QAE9C,OAAO,OAAO,CAAsB,IAAI,CAAC,GAAG,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,YAAY,EAAE;YAC/F,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAClG,CAAC,CAAC;IACL,CAAC;IAED,mEAAmE;IACnE,EAAE;IACF,qEAAqE;IACrE,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,uCAAuC;IACvC,gDAAgD;IAEhD,8FAA8F;IAC9F,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,GAAG,EACR,YAAY,kBAAkB,CAAC,KAAK,CAAC,gBAAgB,CACtD,CAAC;QACF,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;CACF"}

package/dist/types/engine.d.ts

@@ -0,0 +1,69 @@
+/**
+ * LLM engine selection types — the TypeScript mirror of the Go contract in
+ * `pkg/rcrt/types.go` (`EngineConfig`) and `internal/llm/address.go`
+ * (`ModelAddress`). See docs/design/LLM_PROVIDER_MODEL_RESOLUTION.md.
+ *
+ * The canonical address `route/provider/model` stored in an agent breadcrumb's
+ * `engine_config.model` is the SINGLE source of truth for LLM selection. It is
+ * ALWAYS concrete at runtime (tiers are expanded to a concrete address at
+ * publish time). There is no runtime tier indirection, no org override layer,
+ * and no fallbacks.
+ */
+/**
+ * The parsed form of a canonical `route/provider/model` address.
+ *
+ *  - `route`    = transport/adapter that makes the call (`vertex_ai`,
+ *                 `openrouter`, `sovereign`, …). The special route `tier` is
+ *                 AUTHORING-ONLY and is never valid at runtime.
+ *  - `provider` = vendor namespace within the route, may be empty
+ *                 (`anthropic`, `google`, `custom`, ``).
+ *  - `model`    = the concrete model id (may itself contain slashes).
+ *
+ * Examples:
+ *  - `vertex_ai//gemini-3.1-pro-preview`        → { route: 'vertex_ai', provider: '', model: 'gemini-3.1-pro-preview' }
+ *  - `openrouter/anthropic/claude-fable-5`      → { route: 'openrouter', provider: 'anthropic', model: 'claude-fable-5' }
+ *  - `vertex_ai/anthropic/claude-sonnet-4-6`    → { route: 'vertex_ai', provider: 'anthropic', model: 'claude-sonnet-4-6' }
+ */
+export interface ModelAddress {
+    route: string;
+    /** Vendor namespace within the route; may be empty (`route//model`). */
+    provider: string;
+    model: string;
+}
+/**
+ * Parse a canonical `route/provider/model` address. Splits into at most three
+ * segments so the `model` segment may contain further slashes. Throws on a
+ * malformed/empty address (no default — fail loudly, mirroring the Go
+ * `ParseModelAddress`).
+ */
+export declare function parseModelAddress(s: string): ModelAddress;
+/**
+ * Render a {@link ModelAddress} back to canonical `route/provider/model` form.
+ * An empty provider renders as `route//model`.
+ */
+export declare function formatModelAddress(addr: ModelAddress): string;
+/** The authoring-only route. An address with this route is an unexpanded tier. */
+export declare const ROUTE_TIER = "tier";
+/** True if the address is an unexpanded authoring-only tier address. */
+export declare function isTierAddress(addr: ModelAddress): boolean;
+/** Authoring-sugar intelligence tiers; expanded to a concrete address at publish time. */
+export type IntelligenceTier = 'efficient' | 'balanced' | 'expert' | 'max';
+/**
+ * EngineConfig — which LLM engine an agent uses. Mirrors the Go `EngineConfig`
+ * in `pkg/rcrt/types.go`.
+ *
+ * `model` is the runtime source of truth: a canonical `route/provider/model`
+ * address. `tool` and `intelligence_level` are AUTHORING-ONLY sugar that are
+ * stripped at publish time once a concrete `model` address is present.
+ */
+export interface EngineConfig {
+    /** Engine kind: `llm` | `human`. */
+    type: string;
+    /** Authoring-only legacy provider hint; stripped at publish. */
+    tool?: string;
+    /** Canonical `route/provider/model` address — runtime SSOT. */
+    model?: string;
+    /** Authoring-only sugar; expanded to `model` at publish. */
+    intelligence_level?: IntelligenceTier;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/types/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/types/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,YAAY,CAkBzD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAE7D;AAED,kFAAkF;AAClF,eAAO,MAAM,UAAU,SAAS,CAAC;AAEjC,wEAAwE;AACxE,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAEzD;AAED,0FAA0F;AAC1F,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,kBAAkB,CAAC,EAAE,gBAAgB,CAAC;CACvC"}

package/dist/types/engine.js

@@ -0,0 +1,53 @@
+/**
+ * LLM engine selection types — the TypeScript mirror of the Go contract in
+ * `pkg/rcrt/types.go` (`EngineConfig`) and `internal/llm/address.go`
+ * (`ModelAddress`). See docs/design/LLM_PROVIDER_MODEL_RESOLUTION.md.
+ *
+ * The canonical address `route/provider/model` stored in an agent breadcrumb's
+ * `engine_config.model` is the SINGLE source of truth for LLM selection. It is
+ * ALWAYS concrete at runtime (tiers are expanded to a concrete address at
+ * publish time). There is no runtime tier indirection, no org override layer,
+ * and no fallbacks.
+ */
+/**
+ * Parse a canonical `route/provider/model` address. Splits into at most three
+ * segments so the `model` segment may contain further slashes. Throws on a
+ * malformed/empty address (no default — fail loudly, mirroring the Go
+ * `ParseModelAddress`).
+ */
+export function parseModelAddress(s) {
+    const raw = (s ?? '').trim();
+    if (raw === '')
+        throw new Error('empty model address');
+    // Split into at most three parts: route, provider, model-with-slashes.
+    const firstSlash = raw.indexOf('/');
+    if (firstSlash === -1) {
+        throw new Error(`malformed model address "${s}": expected route/provider/model`);
+    }
+    const secondSlash = raw.indexOf('/', firstSlash + 1);
+    if (secondSlash === -1) {
+        throw new Error(`malformed model address "${s}": expected route/provider/model`);
+    }
+    const route = raw.slice(0, firstSlash).trim();
+    const provider = raw.slice(firstSlash + 1, secondSlash).trim();
+    const model = raw.slice(secondSlash + 1).trim();
+    if (route === '')
+        throw new Error(`malformed model address "${s}": empty route`);
+    if (model === '')
+        throw new Error(`malformed model address "${s}": empty model`);
+    return { route, provider, model };
+}
+/**
+ * Render a {@link ModelAddress} back to canonical `route/provider/model` form.
+ * An empty provider renders as `route//model`.
+ */
+export function formatModelAddress(addr) {
+    return `${addr.route}/${addr.provider}/${addr.model}`;
+}
+/** The authoring-only route. An address with this route is an unexpanded tier. */
+export const ROUTE_TIER = 'tier';
+/** True if the address is an unexpanded authoring-only tier address. */
+export function isTierAddress(addr) {
+    return addr.route === ROUTE_TIER;
+}
+//# sourceMappingURL=engine.js.map

package/dist/types/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/types/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAwBH;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAG,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACvD,uEAAuE;IACvE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,kCAAkC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,WAAW,KAAK,CAAC,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,kCAAkC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACjF,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;IACjF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AAEjC,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC;AACnC,CAAC"}

package/dist/types/index.d.ts

@@ -1,3 +1,4 @@
 export * from './breadcrumb.js';
 export * from './card.js';
+export * from './engine.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/types/index.js

@@ -1,3 +1,4 @@
 export * from './breadcrumb.js';
 export * from './card.js';
+export * from './engine.js';
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/package.json

@@ -1,23 +1,23 @@
 {
   "name": "@possibl/rcrt-sdk",
-  "version": "0.1.3",
+  "version": "0.5.1",
   "description": "TypeScript SDK for the RCRT multi-tenant AI BaaS — isomorphic (web + node + React Native)",
   "type": "module",
   "//": "In-repo consumers (tests, dashboard) see raw src/*.ts via `main`/`exports`. publishConfig overrides these at publish time to point at compiled dist/ so npm installs are clean JS + .d.ts.",
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "types": "./src/index.ts",
-      "default": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
     },
     "./types": {
-      "types": "./src/types/index.ts",
-      "default": "./src/types/index.ts"
+      "types": "./dist/types/index.d.ts",
+      "default": "./dist/types/index.js"
     },
     "./generated": {
-      "types": "./src/generated/index.ts",
-      "default": "./src/generated/index.ts"
+      "types": "./dist/generated/index.d.ts",
+      "default": "./dist/generated/index.js"
     }
   },
   "publishConfig": {