@sema-agent/sdk 0.0.46

package/LICENSE

@@ -0,0 +1,103 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             clay (github.com/clayboby)
+Licensed Work:        @sema-agent/clients
+                      The Licensed Work is (c) 2026 clay.
+Additional Use Grant: You may make production use of the Licensed Work for
+                      personal, educational, research, or other
+                      non-commercial purposes. Commercial production use
+                      requires a commercial license from the Licensor.
+Change Date:          2030-07-13
+Change License:       Apache License, Version 2.0
+
+For information about alternative licensing arrangements for the Licensed
+Work, please contact the Licensor.
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Third-party notices
+
+Versions of this package up to and including 1.277.1 were published under the
+MIT License; those published copies remain governed by the license they were
+distributed under. This package incorporates design and (where noted) prompt
+content adapted from MIT-licensed projects — see NOTICE.md for attributions.

package/README.md

@@ -0,0 +1,53 @@
+# @sema-agent/sdk
+
+Typed, zero-runtime-dependency SDK for the Sema agent fleet **usage plane** — the single contract entry for driving agents from business systems, AIs, and humans. Ships the `openapi.yaml` spec it is generated against so producer and consumer anchor the same wire.
+
+**Server-side only** — bearer tokens never enter the browser. Browser surfaces go through a BFF that holds the token (see `docs/browser.md` in the repository).
+
+## Install
+
+```bash
+npm install @sema-agent/sdk
+```
+
+Requires Node >= 20.
+
+## Quick start
+
+```ts
+import { AgentClient } from "@sema-agent/sdk";
+
+const client = new AgentClient({
+  baseUrl: process.env.SEMA_BASE_URL!,   // your worker / gateway endpoint
+  authToken: process.env.SEMA_TOKEN!,    // service bearer token (never hardcode)
+});
+
+// Submit a task and tail its durable, resumable event stream
+const task = await client.tasks.submit({ objective: "summarize the repo" });
+for await (const ev of client.runs.events(task.taskId)) {
+  if (ev.type === "text") console.log(ev.text);
+}
+```
+
+## Surface
+
+- `client.tasks` / `client.runs` — submit, durable runs, SSE event streams with resume.
+- `client.sessions` — session read/manage; `pushSessionBundle` / `pullSessionBundle` (top-level exports) move sessions between peers.
+- `client.approvals` — HITL: pending checkpoints, `decide` (approve/deny/answer), live `stream()`, per-session exemptions (`listExemptions` / `revokeExemption`).
+- `client.questions` — answer a live `AskUserQuestion` (`questions.respond`).
+- `client.elicitations` — answer an inbound MCP elicitation form.
+- `client.workflows`, `client.fleet`, `client.models`, `client.usage`, `client.trace`, … — see the typed exports in `dist/index.d.ts` and the bundled `openapi.yaml`.
+
+Typed errors (`APIError` hierarchy: `AuthError`, `RateLimitedError`, `ConflictError`, `ApprovalStaleError`, …) let callers branch on semantics instead of strings.
+
+## Contract
+
+The bundled spec is importable:
+
+```ts
+import specPath from "@sema-agent/sdk/openapi.yaml";
+```
+
+## License
+
+[BUSL-1.1](./LICENSE)

package/dist/client.d.ts

@@ -0,0 +1,55 @@
+import { TasksResource } from "./resources/tasks.js";
+import { RunsResource } from "./resources/runs.js";
+import { SessionsResource } from "./resources/sessions.js";
+import { ApprovalsResource } from "./resources/approvals.js";
+import { ElicitationsResource } from "./resources/elicitations.js";
+import { QuestionsResource } from "./resources/questions.js";
+import { AssistantResource } from "./resources/assistant.js";
+import { TraceResource } from "./resources/trace.js";
+import { LeaderResource } from "./resources/leader.js";
+import { MemoryResource } from "./resources/memory.js";
+import { ImagesResource } from "./resources/images.js";
+import { ModelsResource } from "./resources/models.js";
+import { UsageResource } from "./resources/usage.js";
+import { PolicyResource } from "./resources/policy.js";
+import { WorkflowsResource } from "./resources/workflows.js";
+import { FleetResource } from "./resources/fleet.js";
+import type { Principal, Capabilities } from "./types.js";
+export type AgentAuthToken = string | {
+    mode: "loopback-unauthed";
+};
+export interface AgentClientConfig {
+    baseUrl: string;
+    authToken: AgentAuthToken;
+    principal: Principal;
+    timeoutMs?: number;
+    maxRetries?: number;
+    allowBrowser?: boolean;
+    fetch?: typeof fetch;
+}
+export declare class AgentClient {
+    readonly tasks: TasksResource;
+    readonly runs: RunsResource;
+    readonly sessions: SessionsResource;
+    readonly approvals: ApprovalsResource;
+    readonly elicitations: ElicitationsResource;
+    readonly questions: QuestionsResource;
+    readonly assistant: AssistantResource;
+    readonly trace: TraceResource;
+    readonly leader: LeaderResource;
+    readonly memory: MemoryResource;
+    readonly images: ImagesResource;
+    readonly models: ModelsResource;
+    readonly usage: UsageResource;
+    readonly policy: PolicyResource;
+    readonly workflows: WorkflowsResource;
+    readonly fleet: FleetResource;
+    private readonly config;
+    private readonly transport;
+    capabilities(opts?: {
+        signal?: AbortSignal;
+    }): Promise<Capabilities>;
+    withPrincipal(principal: Principal): AgentClient;
+    constructor(config: AgentClientConfig);
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAQ1D,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAcpE,MAAM,WAAW,iBAAiB;IAEhC,OAAO,EAAE,MAAM,CAAC;IAGhB,SAAS,EAAE,cAAc,CAAC;IAE1B,SAAS,EAAE,SAAS,CAAC;IAErB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,WAAW;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAGtC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAK5C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAEtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAItC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAItC,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAOpE,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW;gBAKpC,MAAM,EAAE,iBAAiB;CA4DtC"}

package/dist/client.js

@@ -0,0 +1,113 @@
+import { Transport } from "./transport.js";
+import { TasksResource } from "./resources/tasks.js";
+import { RunsResource } from "./resources/runs.js";
+import { SessionsResource } from "./resources/sessions.js";
+import { ApprovalsResource } from "./resources/approvals.js";
+import { ElicitationsResource } from "./resources/elicitations.js";
+import { QuestionsResource } from "./resources/questions.js";
+import { AssistantResource } from "./resources/assistant.js";
+import { TraceResource } from "./resources/trace.js";
+import { LeaderResource } from "./resources/leader.js";
+import { MemoryResource } from "./resources/memory.js";
+import { ImagesResource } from "./resources/images.js";
+import { ModelsResource } from "./resources/models.js";
+import { UsageResource } from "./resources/usage.js";
+import { PolicyResource } from "./resources/policy.js";
+import { WorkflowsResource } from "./resources/workflows.js";
+import { FleetResource } from "./resources/fleet.js";
+function isLoopbackBaseUrl(baseUrl) {
+    let hostname;
+    try {
+        hostname = new URL(baseUrl).hostname;
+    }
+    catch {
+        return false;
+    }
+    const h = hostname.toLowerCase();
+    return h === "localhost" || h === "[::1]" || h === "::1" || /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h);
+}
+export class AgentClient {
+    tasks;
+    runs;
+    sessions;
+    approvals;
+    elicitations;
+    questions;
+    assistant;
+    trace;
+    leader;
+    memory;
+    images;
+    models;
+    usage;
+    policy;
+    workflows;
+    fleet;
+    config;
+    transport;
+    capabilities(opts) {
+        return this.transport.request({ method: "GET", path: "/v1/capabilities", signal: opts?.signal });
+    }
+    withPrincipal(principal) {
+        if (!principal)
+            throw new Error("AgentClient.withPrincipal: principal is required (use 'anon:<id>' to be explicitly anonymous).");
+        return new AgentClient({ ...this.config, principal });
+    }
+    constructor(config) {
+        this.config = { ...config };
+        if (!config.principal)
+            throw new Error("AgentClient: `principal` is required (principal-first). Use 'anon:<id>' to be explicitly anonymous.");
+        const loopbackUnauthed = typeof config.authToken === "object" && config.authToken !== null;
+        if (loopbackUnauthed) {
+            if (config.authToken.mode !== "loopback-unauthed") {
+                throw new Error("AgentClient: unknown authToken shape — expected a SERVICE_AUTH_TOKEN string or { mode: \"loopback-unauthed\" }.");
+            }
+            if (!isLoopbackBaseUrl(config.baseUrl)) {
+                throw new Error("AgentClient: `loopback-unauthed` requires a loopback baseUrl (127.0.0.1 / localhost / ::1). A non-loopback worker is fail-closed — pass the real `authToken`.");
+            }
+        }
+        else if (!config.authToken) {
+            throw new Error("AgentClient: `authToken` is required (worker is fail-closed).");
+        }
+        if (!config.allowBrowser && typeof globalThis.window !== "undefined") {
+            throw new Error("AgentClient: refusing to construct a token-bearing client in a browser (secret discipline). A browser must call its own BFF; only the server holds SERVICE_AUTH_TOKEN.");
+        }
+        const authToken = typeof config.authToken === "string" ? config.authToken : undefined;
+        const principal = config.principal;
+        const opts = {
+            baseUrl: config.baseUrl,
+            timeoutMs: config.timeoutMs ?? 60_000,
+            maxRetries: config.maxRetries ?? 2,
+            fetchImpl: config.fetch ?? fetch,
+            buildHeaders: (idempotencyKey) => {
+                const h = {};
+                if (authToken !== undefined)
+                    h.authorization = `Bearer ${authToken}`;
+                h["x-agent-principal"] = principal;
+                h["content-type"] = "application/json";
+                if (idempotencyKey)
+                    h["idempotency-key"] = idempotencyKey;
+                return h;
+            },
+        };
+        const t = new Transport(opts);
+        this.transport = t;
+        this.tasks = new TasksResource(t);
+        this.runs = new RunsResource(t);
+        this.sessions = new SessionsResource(t);
+        this.approvals = new ApprovalsResource(t);
+        this.elicitations = new ElicitationsResource(t);
+        this.questions = new QuestionsResource(t);
+        this.assistant = new AssistantResource(t);
+        this.trace = new TraceResource(t);
+        this.leader = new LeaderResource(t);
+        this.memory = new MemoryResource(t);
+        this.images = new ImagesResource(t);
+        this.models = new ModelsResource(t);
+        this.usage = new UsageResource(t);
+        this.policy = new PolicyResource(t);
+        this.workflows = new WorkflowsResource(t);
+        this.fleet = new FleetResource(t);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAYrD,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC;AAkBD,MAAM,OAAO,WAAW;IACb,KAAK,CAAgB;IACrB,IAAI,CAAe;IACnB,QAAQ,CAAmB;IAC3B,SAAS,CAAoB;IAG7B,YAAY,CAAuB;IAKnC,SAAS,CAAoB;IAE7B,SAAS,CAAoB;IAC7B,KAAK,CAAgB;IACrB,MAAM,CAAiB;IACvB,MAAM,CAAiB;IAEvB,MAAM,CAAiB;IAEvB,MAAM,CAAiB;IAEvB,KAAK,CAAgB;IAErB,MAAM,CAAiB;IAEvB,SAAS,CAAoB;IAI7B,KAAK,CAAgB;IAEb,MAAM,CAAoB;IAC1B,SAAS,CAAY;IAItC,YAAY,CAAC,IAA+B;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAe,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjH,CAAC;IAKD,aAAa,CAAC,SAAoB;QAChC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;QAClI,OAAO,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC,CAAC;QAG9I,MAAM,gBAAgB,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;QAC3F,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAK,MAAM,CAAC,SAAgC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,iHAAiH,CAAC,CAAC;YACrI,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,+JAA+J,CAAC,CAAC;YACnL,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAQ,UAAmC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,wKAAwK,CAAC,CAAC;QAC5L,CAAC;QAKD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,IAAI,GAAqB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAChC,YAAY,EAAE,CAAC,cAAc,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAA2B,EAAE,CAAC;gBACrC,IAAI,SAAS,KAAK,SAAS;oBAAE,CAAC,CAAC,aAAa,GAAG,UAAU,SAAS,EAAE,CAAC;gBACrE,CAAC,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;gBACnC,CAAC,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBACvC,IAAI,cAAc;oBAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;gBAC1D,OAAO,CAAC,CAAC;YACX,CAAC;SACF,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/control-client.d.ts

@@ -0,0 +1,36 @@
+import { ControlConfigResource } from "./resources/control/config.js";
+import { ControlVersioningResource } from "./resources/control/versioning.js";
+import { ControlPublishResource } from "./resources/control/publish.js";
+import { ControlFleetResource } from "./resources/control/fleet.js";
+import { ControlWorkersResource } from "./resources/control/workers.js";
+import { ControlLifecycleResource } from "./resources/control/lifecycle.js";
+import { ControlImagesResource } from "./resources/control/images.js";
+import { ControlSecretsResource } from "./resources/control/secrets.js";
+import { ControlAuthProvidersResource } from "./resources/control/auth-providers.js";
+import { ControlUsersResource } from "./resources/control/users.js";
+export interface ControlClientConfig {
+    baseUrl: string;
+    token: string;
+    principal?: string;
+    timeoutMs?: number;
+    maxRetries?: number;
+    allowBrowser?: boolean;
+    fetch?: typeof fetch;
+}
+export declare class ControlClient {
+    readonly config: ControlConfigResource;
+    readonly versioning: ControlVersioningResource;
+    readonly publish: ControlPublishResource;
+    readonly fleet: ControlFleetResource;
+    readonly workers: ControlWorkersResource;
+    readonly lifecycle: ControlLifecycleResource;
+    readonly images: ControlImagesResource;
+    readonly secrets: ControlSecretsResource;
+    readonly authProviders: ControlAuthProvidersResource;
+    readonly users: ControlUsersResource;
+    private readonly config_;
+    private readonly transport;
+    withPrincipal(principal: string): ControlClient;
+    constructor(config: ControlClientConfig);
+}
+//# sourceMappingURL=control-client.d.ts.map

package/dist/control-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-client.d.ts","sourceRoot":"","sources":["../src/control-client.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAGlC,OAAO,EAAE,MAAM,CAAC;IAIhB,KAAK,EAAE,MAAM,CAAC;IAId,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,aAAa;IAExB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAEvC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAE/C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAErC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAE7C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAEvC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,aAAa,EAAE,4BAA4B,CAAC;IAErD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAErC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAItC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa;gBAInC,MAAM,EAAE,mBAAmB;CA0CxC"}

package/dist/control-client.js

@@ -0,0 +1,72 @@
+import { Transport } from "./transport.js";
+import { toControlError } from "./errors.js";
+import { ControlConfigResource } from "./resources/control/config.js";
+import { ControlVersioningResource } from "./resources/control/versioning.js";
+import { ControlPublishResource } from "./resources/control/publish.js";
+import { ControlFleetResource } from "./resources/control/fleet.js";
+import { ControlWorkersResource } from "./resources/control/workers.js";
+import { ControlLifecycleResource } from "./resources/control/lifecycle.js";
+import { ControlImagesResource } from "./resources/control/images.js";
+import { ControlSecretsResource } from "./resources/control/secrets.js";
+import { ControlAuthProvidersResource } from "./resources/control/auth-providers.js";
+import { ControlUsersResource } from "./resources/control/users.js";
+export class ControlClient {
+    config;
+    versioning;
+    publish;
+    fleet;
+    workers;
+    lifecycle;
+    images;
+    secrets;
+    authProviders;
+    users;
+    config_;
+    transport;
+    withPrincipal(principal) {
+        return new ControlClient({ ...this.config_, principal });
+    }
+    constructor(config) {
+        this.config_ = { ...config };
+        if (!config.baseUrl)
+            throw new Error("ControlClient: `baseUrl` is required (the sema-registry base URL).");
+        if (!config.token)
+            throw new Error("ControlClient: `token` is required (the registry is fail-closed). Read it from the env-NAME SEMA_REGISTRY_TOKEN (legacy CONFIG_CENTER_TOKEN) and pass the value in.");
+        if (!config.allowBrowser && typeof globalThis.window !== "undefined") {
+            throw new Error("ControlClient: refusing to construct a token-bearing control-plane client in a browser (secret discipline). The browser must call its own BFF; only the server holds SEMA_REGISTRY_TOKEN.");
+        }
+        const token = config.token;
+        const principal = config.principal;
+        const opts = {
+            baseUrl: config.baseUrl,
+            timeoutMs: config.timeoutMs ?? 60_000,
+            maxRetries: config.maxRetries ?? 2,
+            fetchImpl: config.fetch ?? fetch,
+            buildHeaders: (idempotencyKey) => {
+                const h = {
+                    authorization: `Bearer ${token}`,
+                    "content-type": "application/json",
+                };
+                if (principal)
+                    h["x-agent-principal"] = principal;
+                if (idempotencyKey)
+                    h["idempotency-key"] = idempotencyKey;
+                return h;
+            },
+            mapError: toControlError,
+        };
+        const t = new Transport(opts);
+        this.transport = t;
+        this.config = new ControlConfigResource(t);
+        this.versioning = new ControlVersioningResource(t);
+        this.publish = new ControlPublishResource(t);
+        this.fleet = new ControlFleetResource(t);
+        this.workers = new ControlWorkersResource(t);
+        this.lifecycle = new ControlLifecycleResource(t);
+        this.images = new ControlImagesResource(t);
+        this.secrets = new ControlSecretsResource(t);
+        this.authProviders = new ControlAuthProvidersResource(t);
+        this.users = new ControlUsersResource(t);
+    }
+}
+//# sourceMappingURL=control-client.js.map

package/dist/control-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-client.js","sourceRoot":"","sources":["../src/control-client.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAqBpE,MAAM,OAAO,aAAa;IAEf,MAAM,CAAwB;IAE9B,UAAU,CAA4B;IAEtC,OAAO,CAAyB;IAEhC,KAAK,CAAuB;IAE5B,OAAO,CAAyB;IAEhC,SAAS,CAA2B;IAEpC,MAAM,CAAwB;IAE9B,OAAO,CAAyB;IAEhC,aAAa,CAA+B;IAE5C,KAAK,CAAuB;IAEpB,OAAO,CAAsB;IAC7B,SAAS,CAAY;IAItC,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qKAAqK,CAAC,CAAC;QAE1M,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAQ,UAAmC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,2LAA2L,CAAC,CAAC;QAC/M,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,IAAI,GAAqB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAEhC,YAAY,EAAE,CAAC,cAAc,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAA2B;oBAChC,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,cAAc,EAAE,kBAAkB;iBACnC,CAAC;gBACF,IAAI,SAAS;oBAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;gBAClD,IAAI,cAAc;oBAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;gBAC1D,OAAO,CAAC,CAAC;YACX,CAAC;YAED,QAAQ,EAAE,cAAc;SACzB,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,4BAA4B,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF"}