@sema-agent/sdk 0.0.75 → 0.0.76

package/dist/client.d.ts

@@ -18,15 +18,27 @@ import { PolicyResource } from "./resources/policy.js";
 import { WorkflowsResource } from "./resources/workflows.js";
 import { FleetResource } from "./resources/fleet.js";
 import type { Principal, Capabilities, ScenarioDetail } from "./types.js";
+/** Auth posture for the worker door.
+ *  - `string` — the worker `SERVICE_AUTH_TOKEN` (the normal, fail-closed path).
+ *  - `{ mode: "loopback-unauthed" }` — EXPLICIT unauthenticated posture for a loopback dev engine
+ *    (a server started with `ALLOW_UNAUTHED_WRITES`). Honest alternative to passing a fake token:
+ *    no `Authorization` header is ever sent, and construction REFUSES any non-loopback `baseUrl`
+ *    (127.0.0.1/localhost/::1 only) so it can't be pointed at a remote worker by mistake. */
 export type AgentAuthToken = string | {
     mode: "loopback-unauthed";
 };
 export interface AgentClientConfig {
+    /** Worker base URL (e.g. `http://oa.a2.svc` or via Traefik `http://<node>/<routePrefix>`). */
     baseUrl: string;
+    /** Worker `SERVICE_AUTH_TOKEN`. SERVER-SIDE ONLY (the browser guard enforces this).
+     *  For a loopback dev engine, `{ mode: "loopback-unauthed" }` is the explicit no-token posture. */
     authToken: AgentAuthToken;
+    /** Authenticated end-user identity — REQUIRED (principal-first). Anonymous must be explicit: `anon:<id>`. */
     principal: Principal;
+    /** openai-node-style defaults. */
     timeoutMs?: number;
     maxRetries?: number;
+    /** Escape hatch for tests / a deliberate browser BFF that injects the token itself. Default false. */
     allowBrowser?: boolean;
     fetch?: typeof fetch;
 }
@@ -35,32 +47,68 @@ export declare class AgentClient {
     readonly runs: RunsResource;
     readonly sessions: SessionsResource;
     readonly approvals: ApprovalsResource;
+    /** §E23 inbound-MCP-elicitation HITL（service `MCP_ELICITATION_ENABLED`）— answer a mid-tool-call form prompt
+     *  an opted-in MCP server pushed on the live stream (`POST /v1/elicitations/:id/respond`)。LIVE-ONLY + same-replica。 */
     readonly elicitations: ElicitationsResource;
+    /** §4④ live-stream AskUserQuestion HITL (core `RunnerDeps.onQuestion` → service QuestionCoordinator — LIVE-only,
+     *  same-replica). The agent's OWN structured multiple-choice ask to the end user; SIBLING of `elicitations`.
+     *  Consume the `question`/`question_complete` frames off `tasks.streamRaw` (event: name), answer via
+     *  `POST /v1/questions/:id/respond`. */
     readonly questions: QuestionsResource;
+    /** [830]① live-stream TOOL-APPROVAL HITL (server `TOOL_APPROVAL_ENABLED`) — the engine's permission gate
+     *  ("may I run this tool?") surfaced to a live human. THIRD sibling of `elicitations`/`questions`; the
+     *  `steer()`-class LIVE decide面, NOT the durable checkpoint class (`approvals`). Consume the
+     *  `tool_approval`/`tool_approval_complete` frames off `tasks.streamRaw`, decide via
+     *  `POST /v1/tool-approvals/:id/respond`. Gate on `capabilities.toolApproval`. */
     readonly toolApprovals: ToolApprovalsResource;
+    /** [1469] `POST /v1/side-query`(server 1.242/core 1.361)— 一次性 brain 路由问答,无 session 副作用/
+     *  无工具执行/无流式(v1)。壳侧 utility 传输层。探测 `capabilities.sideQuery`。 */
     readonly sideQuery: SideQueryResource;
+    /** assistant-scheduler + HITL 决策面（inbox/tasks/resume/planReview/preempt; ASSISTANT-WIRE-CONTRACT, LIVE on worker）。 */
     readonly assistant: AssistantResource;
     readonly trace: TraceResource;
     readonly leader: LeaderResource;
     readonly memory: MemoryResource;
+    /** §sandbox-image catalog（IMAGE-API §7）— 门B「选沙箱模板」只读数据源（list/select 预览）。 */
     readonly images: ImagesResource;
+    /** §model catalog（core 1.116 `@model` 线;service GET /v1/models）— `@model` 切换的只读模型名目录（picker/autocomplete）。 */
     readonly models: ModelsResource;
+    /** §cost/usage（service GET /v1/usage）— per-principal 成本配额 + 单任务上限（CLI `/cost` 面板真数据）。 */
     readonly usage: UsageResource;
+    /** §permissions（service GET /v1/policy）— 生效自治档/命令策略/上限快照（CLI `/permissions` 面板真数据）。 */
     readonly policy: PolicyResource;
+    /** §workflow 可观测（core 1.116 design/97;service GET /v1/workflows*）— owner-scoped run 列表/详情（S8-off 时 501）。 */
     readonly workflows: WorkflowsResource;
+    /** §MF-Fleet（shell-host data contract;service GET /v1/fleet/stream）— LIVE 多行舰队视图 SSE：snapshot + 逐行
+     *  task/workflow upsert/remove 帧（FULL row,update-in-place）。owner-scoped、scope 已 wire 剥、不 resumable。
+     *  🔴 与 control-plane 的 `ControlClient.fleet`（config-center 控制面）是不同类、不同 backend,勿混。 */
     readonly fleet: FleetResource;
+    /** 运维观测面(SDK 全覆盖批 2026-07-17):/metrics 三读面。 */
     readonly metrics: MetricsResource;
+    /** GET /v1/outcomes — 任务结局台账(design/73 §7 只读底座)。 */
     readonly outcomes: OutcomesResource;
+    /** GET /v1/sendfile-links — SendUserFile 分发链接台账。 */
     readonly sendfileLinks: SendfileLinksResource;
+    /** sandbox 镜像烧制控制面(client.images 的 bake 半场;operator/runner 两主体)。 */
     readonly bakes: BakesResource;
     private readonly config;
     private readonly transport;
+    /** GET /v1/capabilities — one call replaces probe-by-501 (LIVE, service 7aa0f3d).
+     *  Open set; booleans share deps with the route gates. Render UI by capability, not by trial. */
     capabilities(opts?: {
         signal?: AbortSignal;
     }): Promise<Capabilities>;
+    /** GET /v1/capabilities/scenarios/:name — one scenario's detail card (server 1.214 server.js:567-576;
+     *  `capabilities().scenarios` lists the names, THIS resolves one to its {@link ScenarioDetail}: toolset/tools/
+     *  prompt digest/enabled). Same family as {@link capabilities} — a worker-config read, not a resource.
+     *  Unknown name → 404 with the OBJECT-shaped body `{error:{code:"scenario_not_found"}}` (surfaced as a typed
+     *  APIError with `code === "scenario_not_found"`). */
     scenarioCapabilities(name: string, opts?: {
         signal?: AbortSignal;
     }): Promise<ScenarioDetail>;
+    /** Per-request principal (pinned wire contract): the wire principal is a per-request header, so multi-tenant
+     *  callers (façade/BFF) scope a cheap view per end-user instead of caching principal as ambient state.
+     *  Principal stays REQUIRED and explicit — no default, no fallback (fail-closed structure unchanged). */
     withPrincipal(principal: Principal): AgentClient;
     constructor(config: AgentClientConfig);
 }

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAQ1E,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAcpE,MAAM,WAAW,iBAAiB;IAEhC,OAAO,EAAE,MAAM,CAAC;IAGhB,SAAS,EAAE,cAAc,CAAC;IAE1B,SAAS,EAAE,SAAS,CAAC;IAErB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,WAAW;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAGtC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAK5C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAMtC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAG9C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAEtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAItC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAElC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAEpC,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAE9C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAItC,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IASpE,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAW5F,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW;gBAKpC,MAAM,EAAE,iBAAiB;CAkEtC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;6FAK6F;AAC7F,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG;IAAE,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAcpE,MAAM,WAAW,iBAAiB;IAChC,8FAA8F;IAC9F,OAAO,EAAE,MAAM,CAAC;IAChB;uGACmG;IACnG,SAAS,EAAE,cAAc,CAAC;IAC1B,6GAA6G;IAC7G,SAAS,EAAE,SAAS,CAAC;IACrB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sGAAsG;IACtG,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,WAAW;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC;2HACuH;IACvH,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;IAC5C;;;4CAGwC;IACxC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC;;;;sFAIkF;IAClF,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C;oEACgE;IAChE,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,sHAAsH;IACtH,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,8GAA8G;IAC9G,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,uFAAuF;IACvF,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,4GAA4G;IAC5G,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC;;2FAEuF;IACvF,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC9C,oEAAoE;IACpE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAEtC;qGACiG;IACjG,YAAY,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAIpE;;;;0DAIsD;IACtD,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAQ5F;;6GAEyG;IACzG,aAAa,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW;gBAKpC,MAAM,EAAE,iBAAiB;CAkEtC"}

package/dist/client.js

@@ -1,3 +1,11 @@
+/**
+ * AgentClient — config + resource roots. This file is where the体系铁律 become STRUCTURAL constraints (so the
+ * design can't drift into the SDK):
+ *   - principal-first (DESIGN §2.4): `principal` is REQUIRED at the type level — no anonymous-by-default.
+ *   - secret discipline (DESIGN §2.5): `authToken` is a server-side construct param. The browser guard refuses
+ *     to construct a token-bearing client when `window` exists — the SDK gives NO sugar for browser→worker
+ *     direct calls (a web frontend's browser talks to its own BFF, which holds the token).
+ */
 import { Transport } from "./transport.js";
 import { TasksResource } from "./resources/tasks.js";
 import { RunsResource } from "./resources/runs.js";
@@ -18,13 +26,14 @@ import { UsageResource } from "./resources/usage.js";
 import { PolicyResource } from "./resources/policy.js";
 import { WorkflowsResource } from "./resources/workflows.js";
 import { FleetResource } from "./resources/fleet.js";
+/** true iff the URL's host is a loopback address (localhost / 127.0.0.0/8 / ::1). */
 function isLoopbackBaseUrl(baseUrl) {
     let hostname;
     try {
         hostname = new URL(baseUrl).hostname;
     }
     catch {
-        return false;
+        return false; // unparseable baseUrl can't be proven loopback — fail closed
     }
     const h = hostname.toLowerCase();
     return h === "localhost" || h === "[::1]" || h === "::1" || /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h);
@@ -34,29 +43,62 @@ export class AgentClient {
     runs;
     sessions;
     approvals;
+    /** §E23 inbound-MCP-elicitation HITL（service `MCP_ELICITATION_ENABLED`）— answer a mid-tool-call form prompt
+     *  an opted-in MCP server pushed on the live stream (`POST /v1/elicitations/:id/respond`)。LIVE-ONLY + same-replica。 */
     elicitations;
+    /** §4④ live-stream AskUserQuestion HITL (core `RunnerDeps.onQuestion` → service QuestionCoordinator — LIVE-only,
+     *  same-replica). The agent's OWN structured multiple-choice ask to the end user; SIBLING of `elicitations`.
+     *  Consume the `question`/`question_complete` frames off `tasks.streamRaw` (event: name), answer via
+     *  `POST /v1/questions/:id/respond`. */
     questions;
+    /** [830]① live-stream TOOL-APPROVAL HITL (server `TOOL_APPROVAL_ENABLED`) — the engine's permission gate
+     *  ("may I run this tool?") surfaced to a live human. THIRD sibling of `elicitations`/`questions`; the
+     *  `steer()`-class LIVE decide面, NOT the durable checkpoint class (`approvals`). Consume the
+     *  `tool_approval`/`tool_approval_complete` frames off `tasks.streamRaw`, decide via
+     *  `POST /v1/tool-approvals/:id/respond`. Gate on `capabilities.toolApproval`. */
     toolApprovals;
+    /** [1469] `POST /v1/side-query`(server 1.242/core 1.361)— 一次性 brain 路由问答,无 session 副作用/
+     *  无工具执行/无流式(v1)。壳侧 utility 传输层。探测 `capabilities.sideQuery`。 */
     sideQuery;
+    /** assistant-scheduler + HITL 决策面（inbox/tasks/resume/planReview/preempt; ASSISTANT-WIRE-CONTRACT, LIVE on worker）。 */
     assistant;
     trace;
     leader;
     memory;
+    /** §sandbox-image catalog（IMAGE-API §7）— 门B「选沙箱模板」只读数据源（list/select 预览）。 */
     images;
+    /** §model catalog（core 1.116 `@model` 线;service GET /v1/models）— `@model` 切换的只读模型名目录（picker/autocomplete）。 */
     models;
+    /** §cost/usage（service GET /v1/usage）— per-principal 成本配额 + 单任务上限（CLI `/cost` 面板真数据）。 */
     usage;
+    /** §permissions（service GET /v1/policy）— 生效自治档/命令策略/上限快照（CLI `/permissions` 面板真数据）。 */
     policy;
+    /** §workflow 可观测（core 1.116 design/97;service GET /v1/workflows*）— owner-scoped run 列表/详情（S8-off 时 501）。 */
     workflows;
+    /** §MF-Fleet（shell-host data contract;service GET /v1/fleet/stream）— LIVE 多行舰队视图 SSE：snapshot + 逐行
+     *  task/workflow upsert/remove 帧（FULL row,update-in-place）。owner-scoped、scope 已 wire 剥、不 resumable。
+     *  🔴 与 control-plane 的 `ControlClient.fleet`（config-center 控制面）是不同类、不同 backend,勿混。 */
     fleet;
+    /** 运维观测面(SDK 全覆盖批 2026-07-17):/metrics 三读面。 */
     metrics;
+    /** GET /v1/outcomes — 任务结局台账(design/73 §7 只读底座)。 */
     outcomes;
+    /** GET /v1/sendfile-links — SendUserFile 分发链接台账。 */
     sendfileLinks;
+    /** sandbox 镜像烧制控制面(client.images 的 bake 半场;operator/runner 两主体)。 */
     bakes;
     config;
     transport;
+    /** GET /v1/capabilities — one call replaces probe-by-501 (LIVE, service 7aa0f3d).
+     *  Open set; booleans share deps with the route gates. Render UI by capability, not by trial. */
     capabilities(opts) {
         return this.transport.request({ method: "GET", path: "/v1/capabilities", signal: opts?.signal });
     }
+    /** GET /v1/capabilities/scenarios/:name — one scenario's detail card (server 1.214 server.js:567-576;
+     *  `capabilities().scenarios` lists the names, THIS resolves one to its {@link ScenarioDetail}: toolset/tools/
+     *  prompt digest/enabled). Same family as {@link capabilities} — a worker-config read, not a resource.
+     *  Unknown name → 404 with the OBJECT-shaped body `{error:{code:"scenario_not_found"}}` (surfaced as a typed
+     *  APIError with `code === "scenario_not_found"`). */
     scenarioCapabilities(name, opts) {
         return this.transport.request({
             method: "GET",
@@ -64,15 +106,20 @@ export class AgentClient {
             signal: opts?.signal,
         });
     }
+    /** Per-request principal (pinned wire contract): the wire principal is a per-request header, so multi-tenant
+     *  callers (façade/BFF) scope a cheap view per end-user instead of caching principal as ambient state.
+     *  Principal stays REQUIRED and explicit — no default, no fallback (fail-closed structure unchanged). */
     withPrincipal(principal) {
         if (!principal)
             throw new Error("AgentClient.withPrincipal: principal is required (use 'anon:<id>' to be explicitly anonymous).");
         return new AgentClient({ ...this.config, principal });
     }
     constructor(config) {
-        this.config = { ...config };
+        this.config = { ...config }; // own copy — later caller mutation must not leak into scoped views
         if (!config.principal)
             throw new Error("AgentClient: `principal` is required (principal-first). Use 'anon:<id>' to be explicitly anonymous.");
+        // loopback-unauthed (by design): the only way to construct without a token is to SAY SO, and it is
+        // structurally pinned to a loopback baseUrl — a remote worker always requires a real token.
         const loopbackUnauthed = typeof config.authToken === "object" && config.authToken !== null;
         if (loopbackUnauthed) {
             if (config.authToken.mode !== "loopback-unauthed") {
@@ -85,9 +132,15 @@ export class AgentClient {
         else if (!config.authToken) {
             throw new Error("AgentClient: `authToken` is required (worker is fail-closed).");
         }
+        // 🔴 secret discipline: a token must never live in a browser. If `window` exists and the caller didn't
+        // explicitly opt in (allowBrowser, for a BFF that injects per-request), refuse to construct.
         if (!config.allowBrowser && typeof globalThis.window !== "undefined") {
             throw new Error("AgentClient: refusing to construct a token-bearing client in a browser (secret discipline). A browser must call its own BFF; only the server holds SERVICE_AUTH_TOKEN.");
         }
+        // 🔴 secret discipline: the worker token + principal are captured in this closure ONLY — never stored as
+        // a Transport field. The header shape (Bearer authToken + x-agent-principal) is byte-identical to before;
+        // it has just moved from Transport.headers() to here so worker + registry share one request/retry engine.
+        // loopback-unauthed sends NO Authorization header at all (no fake token on the wire).
         const authToken = typeof config.authToken === "string" ? config.authToken : undefined;
         const principal = config.principal;
         const opts = {

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAYrD,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC;AAkBD,MAAM,OAAO,WAAW;IACb,KAAK,CAAgB;IACrB,IAAI,CAAe;IACnB,QAAQ,CAAmB;IAC3B,SAAS,CAAoB;IAG7B,YAAY,CAAuB;IAKnC,SAAS,CAAoB;IAM7B,aAAa,CAAwB;IAGrC,SAAS,CAAoB;IAE7B,SAAS,CAAoB;IAC7B,KAAK,CAAgB;IACrB,MAAM,CAAiB;IACvB,MAAM,CAAiB;IAEvB,MAAM,CAAiB;IAEvB,MAAM,CAAiB;IAEvB,KAAK,CAAgB;IAErB,MAAM,CAAiB;IAEvB,SAAS,CAAoB;IAI7B,KAAK,CAAgB;IAErB,OAAO,CAAkB;IAEzB,QAAQ,CAAmB;IAE3B,aAAa,CAAwB;IAErC,KAAK,CAAgB;IAEb,MAAM,CAAoB;IAC1B,SAAS,CAAY;IAItC,YAAY,CAAC,IAA+B;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAe,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjH,CAAC;IAOD,oBAAoB,CAAC,IAAY,EAAE,IAA+B;QAChE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAiB;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,EAAE;YAC9D,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAKD,aAAa,CAAC,SAAoB;QAChC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;QAClI,OAAO,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC,CAAC;QAG9I,MAAM,gBAAgB,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;QAC3F,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAK,MAAM,CAAC,SAAgC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,iHAAiH,CAAC,CAAC;YACrI,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,+JAA+J,CAAC,CAAC;YACnL,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAQ,UAAmC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,wKAAwK,CAAC,CAAC;QAC5L,CAAC;QAKD,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,IAAI,GAAqB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAChC,YAAY,EAAE,CAAC,cAAc,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAA2B,EAAE,CAAC;gBACrC,IAAI,SAAS,KAAK,SAAS;oBAAE,CAAC,CAAC,aAAa,GAAG,UAAU,SAAS,EAAE,CAAC;gBACrE,CAAC,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;gBACnC,CAAC,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBACvC,IAAI,cAAc;oBAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;gBAC1D,OAAO,CAAC,CAAC;YACX,CAAC;SACF,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAWrD,qFAAqF;AACrF,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,6DAA6D;IAC7E,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC;AAkBD,MAAM,OAAO,WAAW;IACb,KAAK,CAAgB;IACrB,IAAI,CAAe;IACnB,QAAQ,CAAmB;IAC3B,SAAS,CAAoB;IACtC;2HACuH;IAC9G,YAAY,CAAuB;IAC5C;;;4CAGwC;IAC/B,SAAS,CAAoB;IACtC;;;;sFAIkF;IACzE,aAAa,CAAwB;IAC9C;oEACgE;IACvD,SAAS,CAAoB;IACtC,sHAAsH;IAC7G,SAAS,CAAoB;IAC7B,KAAK,CAAgB;IACrB,MAAM,CAAiB;IACvB,MAAM,CAAiB;IAChC,4EAA4E;IACnE,MAAM,CAAiB;IAChC,8GAA8G;IACrG,MAAM,CAAiB;IAChC,yFAAyF;IAChF,KAAK,CAAgB;IAC9B,uFAAuF;IAC9E,MAAM,CAAiB;IAChC,4GAA4G;IACnG,SAAS,CAAoB;IACtC;;2FAEuF;IAC9E,KAAK,CAAgB;IAC9B,+CAA+C;IACtC,OAAO,CAAkB;IAClC,oDAAoD;IAC3C,QAAQ,CAAmB;IACpC,oDAAoD;IAC3C,aAAa,CAAwB;IAC9C,oEAAoE;IAC3D,KAAK,CAAgB;IAEb,MAAM,CAAoB;IAC1B,SAAS,CAAY;IAEtC;qGACiG;IACjG,YAAY,CAAC,IAA+B;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAe,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjH,CAAC;IAED;;;;0DAIsD;IACtD,oBAAoB,CAAC,IAAY,EAAE,IAA+B;QAChE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAiB;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,EAAE;YAC9D,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;6GAEyG;IACzG,aAAa,CAAC,SAAoB;QAChC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;QAClI,OAAO,IAAI,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,mEAAmE;QAChG,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC,CAAC;QAC9I,mGAAmG;QACnG,4FAA4F;QAC5F,MAAM,gBAAgB,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC;QAC3F,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAK,MAAM,CAAC,SAAgC,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC1E,MAAM,IAAI,KAAK,CAAC,iHAAiH,CAAC,CAAC;YACrI,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,+JAA+J,CAAC,CAAC;YACnL,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,uGAAuG;QACvG,6FAA6F;QAC7F,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAQ,UAAmC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,wKAAwK,CAAC,CAAC;QAC5L,CAAC;QACD,yGAAyG;QACzG,0GAA0G;QAC1G,0GAA0G;QAC1G,sFAAsF;QACtF,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,IAAI,GAAqB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAChC,YAAY,EAAE,CAAC,cAAc,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAA2B,EAAE,CAAC;gBACrC,IAAI,SAAS,KAAK,SAAS;oBAAE,CAAC,CAAC,aAAa,GAAG,UAAU,SAAS,EAAE,CAAC;gBACrE,CAAC,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;gBACnC,CAAC,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBACvC,IAAI,cAAc;oBAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;gBAC1D,OAAO,CAAC,CAAC;YACX,CAAC;SACF,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/control-client.d.ts

@@ -9,27 +9,48 @@ import { ControlSecretsResource } from "./resources/control/secrets.js";
 import { ControlAuthProvidersResource } from "./resources/control/auth-providers.js";
 import { ControlUsersResource } from "./resources/control/users.js";
 export interface ControlClientConfig {
+    /** sema-registry base URL — your registry deployment host (NOT the worker endpoint). The caller
+     *  resolves this from the env-NAME SEMA_REGISTRY_URL (legacy CONFIG_CENTER_URL) or a flag. */
     baseUrl: string;
+    /** editor/admin Bearer. 🔴 SERVER-SIDE ONLY (the browser guard enforces it). The caller reads it from the
+     *  env-NAME SEMA_REGISTRY_TOKEN (legacy CONFIG_CENTER_TOKEN) and passes the VALUE in — the SDK never reads
+     *  env (env-agnostic, same as AgentClient.authToken). */
     token: string;
+    /** Audit principal (OPTIONAL). Maps to the registry's x-agent-principal → audited as `ai:<principal>`.
+     *  Omitted ⇒ the header is not sent ⇒ the registry records `unknown`. (Registry does NOT require principal-
+     *  first, unlike the worker — so this is optional here.) */
     principal?: string;
     timeoutMs?: number;
     maxRetries?: number;
+    /** Escape hatch for tests / a deliberate BFF that injects the token itself. Default false. */
     allowBrowser?: boolean;
     fetch?: typeof fetch;
 }
 export declare class ControlClient {
+    /** config domain CRUD + atomic batch + schema introspection + portable export (the CLI fleet.ts归宿). */
     readonly config: ControlConfigResource;
+    /** audit trail: list changes / diff one change / rollback to a past snapshot. */
     readonly versioning: ControlVersioningResource;
+    /** the draft→production publish gate + N-approver approval workflow. */
     readonly publish: ControlPublishResource;
+    /** operations dashboard read + 多主机调度 (placement / rebalance / reschedule preview+apply). */
     readonly fleet: ControlFleetResource;
+    /** per-worker ops: status read / image roll (full-auto CD) / rotate (force recreate). */
     readonly workers: ControlWorkersResource;
+    /** fleet lifecycle: cascade-delete an owner's workers / run one sweep pass. */
     readonly lifecycle: ControlLifecycleResource;
+    /** shared sandbox-image pool (BFF relay over the worker /v1/images): list / get / by-digest / resolve-preview. */
     readonly images: ControlImagesResource;
+    /** worker app-secret write-through + inventory + batch-rotate + reclaim. 🔴 values go UP once, never read back. */
     readonly secrets: ControlSecretsResource;
+    /** login auth-provider config (Gitea/OAuth2). 🔴 client_secret is an env-NAME, never a value. */
     readonly authProviders: ControlAuthProvidersResource;
+    /** console user (RBAC) management + per-user scoped API tokens (minted plaintext shown once). */
     readonly users: ControlUsersResource;
     private readonly config_;
     private readonly transport;
+    /** Per-request audit principal — a scoped view that stamps `x-agent-principal` for THIS caller's actions
+     *  (a multi-tenant BFF scopes audit identity per operator without re-reading the token from env). */
     withPrincipal(principal: string): ControlClient;
     constructor(config: ControlClientConfig);
 }

package/dist/control-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-client.d.ts","sourceRoot":"","sources":["../src/control-client.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAGlC,OAAO,EAAE,MAAM,CAAC;IAIhB,KAAK,EAAE,MAAM,CAAC;IAId,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,aAAa;IAExB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAEvC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAE/C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAErC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAE7C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAEvC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,aAAa,EAAE,4BAA4B,CAAC;IAErD,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAErC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAItC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa;gBAInC,MAAM,EAAE,mBAAmB;CA0CxC"}
+{"version":3,"file":"control-client.d.ts","sourceRoot":"","sources":["../src/control-client.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC;kGAC8F;IAC9F,OAAO,EAAE,MAAM,CAAC;IAChB;;6DAEyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd;;gEAE4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8FAA8F;IAC9F,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,aAAa;IACxB,uGAAuG;IACvG,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,kHAAkH;IAClH,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,mHAAmH;IACnH,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,iGAAiG;IACjG,QAAQ,CAAC,aAAa,EAAE,4BAA4B,CAAC;IACrD,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAErC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IAEtC;yGACqG;IACrG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa;gBAInC,MAAM,EAAE,mBAAmB;CA0CxC"}

package/dist/control-client.js

@@ -1,3 +1,28 @@
+/**
+ * ControlClient — the TOB CONTROL PLANE client: sema-registry (config-center) `/api/config/*`. This is a
+ * peer to AgentClient, NOT a part of it: it talks to a DIFFERENT backend (SEMA_REGISTRY_URL — your
+ * registry deployment, NOT the worker endpoint) with a DIFFERENT secret (editor/admin Bearer
+ * SEMA_REGISTRY_TOKEN — NOT a worker session token).
+ *
+ * 🔴 WHY A SEPARATE CLIENT (structural, not stylistic):
+ *   - Two同级 secrets must never share one object: a single client would force a "pick the token by path
+ *     prefix" branch in header assembly — exactly the fail-open shape to avoid. Two clients = two header
+ *     closures = two independently-captured secrets; it is structurally impossible to send the registry token
+ *     to the worker (or vice-versa).
+ *   - principal semantics differ: the worker REQUIRES principal-first; the registry's x-agent-principal is
+ *     OPTIONAL (audit slug `ai:<principal>`, absent → `unknown`). Forcing it into AgentClient's REQUIRED
+ *     principal would be a semantic mismatch.
+ *
+ * It REUSES Transport's request/retry/timeout/Retry-After/parseJson engine (token-agnostic) via two injection
+ * points: `buildHeaders` (registry Bearer + optional principal) and `mapError` (toControlError — the registry's
+ * `{error}` envelope, NOT the worker's errorCode envelope).
+ *
+ * 🔴 secret discipline (sema-cli/fleet.ts parity): the registry token is a server-side construct param. The
+ *    SDK is env-AGNOSTIC — it does NOT read SEMA_REGISTRY_TOKEN/_URL itself; the CLI/BFF reads the env-NAME and
+ *    passes the value in (so the SDK has no opinion about which env-NAME holds it). The browser guard refuses
+ *    to hold the token when `window` exists. The token never appears in any return type, any error message
+ *    (scrub), any log, and is never echoed back as an Authorization header.
+ */
 import { Transport } from "./transport.js";
 import { toControlError } from "./errors.js";
 import { ControlConfigResource } from "./resources/control/config.js";
@@ -11,30 +36,44 @@ import { ControlSecretsResource } from "./resources/control/secrets.js";
 import { ControlAuthProvidersResource } from "./resources/control/auth-providers.js";
 import { ControlUsersResource } from "./resources/control/users.js";
 export class ControlClient {
+    /** config domain CRUD + atomic batch + schema introspection + portable export (the CLI fleet.ts归宿). */
     config;
+    /** audit trail: list changes / diff one change / rollback to a past snapshot. */
     versioning;
+    /** the draft→production publish gate + N-approver approval workflow. */
     publish;
+    /** operations dashboard read + 多主机调度 (placement / rebalance / reschedule preview+apply). */
     fleet;
+    /** per-worker ops: status read / image roll (full-auto CD) / rotate (force recreate). */
     workers;
+    /** fleet lifecycle: cascade-delete an owner's workers / run one sweep pass. */
     lifecycle;
+    /** shared sandbox-image pool (BFF relay over the worker /v1/images): list / get / by-digest / resolve-preview. */
     images;
+    /** worker app-secret write-through + inventory + batch-rotate + reclaim. 🔴 values go UP once, never read back. */
     secrets;
+    /** login auth-provider config (Gitea/OAuth2). 🔴 client_secret is an env-NAME, never a value. */
     authProviders;
+    /** console user (RBAC) management + per-user scoped API tokens (minted plaintext shown once). */
     users;
     config_;
     transport;
+    /** Per-request audit principal — a scoped view that stamps `x-agent-principal` for THIS caller's actions
+     *  (a multi-tenant BFF scopes audit identity per operator without re-reading the token from env). */
     withPrincipal(principal) {
         return new ControlClient({ ...this.config_, principal });
     }
     constructor(config) {
-        this.config_ = { ...config };
+        this.config_ = { ...config }; // own copy — later caller mutation must not leak into scoped views
         if (!config.baseUrl)
             throw new Error("ControlClient: `baseUrl` is required (the sema-registry base URL).");
         if (!config.token)
             throw new Error("ControlClient: `token` is required (the registry is fail-closed). Read it from the env-NAME SEMA_REGISTRY_TOKEN (legacy CONFIG_CENTER_TOKEN) and pass the value in.");
+        // 🔴 secret discipline: an editor/admin Bearer must never live in a browser. Same guard as AgentClient.
         if (!config.allowBrowser && typeof globalThis.window !== "undefined") {
             throw new Error("ControlClient: refusing to construct a token-bearing control-plane client in a browser (secret discipline). The browser must call its own BFF; only the server holds SEMA_REGISTRY_TOKEN.");
         }
+        // 🔴 token captured in the buildHeaders closure ONLY — never stored as a Transport field, never serializable.
         const token = config.token;
         const principal = config.principal;
         const opts = {
@@ -42,6 +81,7 @@ export class ControlClient {
             timeoutMs: config.timeoutMs ?? 60_000,
             maxRetries: config.maxRetries ?? 2,
             fetchImpl: config.fetch ?? fetch,
+            // registry header装配: editor/admin Bearer + content-type, and x-agent-principal ONLY when set.
             buildHeaders: (idempotencyKey) => {
                 const h = {
                     authorization: `Bearer ${token}`,
@@ -53,6 +93,7 @@ export class ControlClient {
                     h["idempotency-key"] = idempotencyKey;
                 return h;
             },
+            // registry error envelope is `{error, issues?, currentVersion?}` — NOT the worker errorCode envelope.
             mapError: toControlError,
         };
         const t = new Transport(opts);

package/dist/control-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"control-client.js","sourceRoot":"","sources":["../src/control-client.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAqBpE,MAAM,OAAO,aAAa;IAEf,MAAM,CAAwB;IAE9B,UAAU,CAA4B;IAEtC,OAAO,CAAyB;IAEhC,KAAK,CAAuB;IAE5B,OAAO,CAAyB;IAEhC,SAAS,CAA2B;IAEpC,MAAM,CAAwB;IAE9B,OAAO,CAAyB;IAEhC,aAAa,CAA+B;IAE5C,KAAK,CAAuB;IAEpB,OAAO,CAAsB;IAC7B,SAAS,CAAY;IAItC,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qKAAqK,CAAC,CAAC;QAE1M,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAQ,UAAmC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,2LAA2L,CAAC,CAAC;QAC/M,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,IAAI,GAAqB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAEhC,YAAY,EAAE,CAAC,cAAc,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAA2B;oBAChC,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,cAAc,EAAE,kBAAkB;iBACnC,CAAC;gBACF,IAAI,SAAS;oBAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;gBAClD,IAAI,cAAc;oBAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;gBAC1D,OAAO,CAAC,CAAC;YACX,CAAC;YAED,QAAQ,EAAE,cAAc;SACzB,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,4BAA4B,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF"}
+{"version":3,"file":"control-client.js","sourceRoot":"","sources":["../src/control-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAqBpE,MAAM,OAAO,aAAa;IACxB,uGAAuG;IAC9F,MAAM,CAAwB;IACvC,iFAAiF;IACxE,UAAU,CAA4B;IAC/C,wEAAwE;IAC/D,OAAO,CAAyB;IACzC,4FAA4F;IACnF,KAAK,CAAuB;IACrC,yFAAyF;IAChF,OAAO,CAAyB;IACzC,+EAA+E;IACtE,SAAS,CAA2B;IAC7C,kHAAkH;IACzG,MAAM,CAAwB;IACvC,mHAAmH;IAC1G,OAAO,CAAyB;IACzC,iGAAiG;IACxF,aAAa,CAA+B;IACrD,iGAAiG;IACxF,KAAK,CAAuB;IAEpB,OAAO,CAAsB;IAC7B,SAAS,CAAY;IAEtC;yGACqG;IACrG,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,YAAY,MAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,mEAAmE;QACjG,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC3G,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qKAAqK,CAAC,CAAC;QAC1M,wGAAwG;QACxG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAQ,UAAmC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/F,MAAM,IAAI,KAAK,CAAC,2LAA2L,CAAC,CAAC;QAC/M,CAAC;QACD,8GAA8G;QAC9G,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,MAAM,IAAI,GAAqB;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK;YAChC,8FAA8F;YAC9F,YAAY,EAAE,CAAC,cAAc,EAAE,EAAE;gBAC/B,MAAM,CAAC,GAA2B;oBAChC,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,cAAc,EAAE,kBAAkB;iBACnC,CAAC;gBACF,IAAI,SAAS;oBAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC;gBAClD,IAAI,cAAc;oBAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,cAAc,CAAC;gBAC1D,OAAO,CAAC,CAAC;YACX,CAAC;YACD,sGAAsG;YACtG,QAAQ,EAAE,cAAc;SACzB,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,4BAA4B,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF"}