@sema-agent/sdk 0.0.75 → 0.0.77

package/dist/resources/assistant.js

@@ -1,3 +1,4 @@
+/** 折 null → OMIT(条件 spread,绝不写显式 undefined;exactOptionalPropertyTypes)。 */
 function normalizeGate(g) {
     return {
         kind: g.kind,
@@ -14,6 +15,9 @@ export class AssistantResource {
     constructor(t) {
         this.t = t;
     }
+    /** §2 GET /v1/assistant/inbox —— 单一 severity-sorted inbox（每用户视图）。operator 可用 `?owner=` 看某 owner,
+     *  否则看自己。返回行已由 core listPending 按 severity 排序 —— 消费方**不要再排**（且须容 undefined severity）。
+     *  解包 envelope `{inbox:[...]}`。owner query 在此手拼（transport.request 的 path 是裸串直拼, 无 query helper）。 */
     async inbox(opts) {
         const q = opts?.owner ? `?owner=${encodeURIComponent(opts.owner)}` : "";
         const r = await this.t.request({
@@ -21,11 +25,19 @@ export class AssistantResource {
             path: `/v1/assistant/inbox${q}`,
             signal: opts?.signal,
         });
+        // 🔴 severity 归一:部署的 worker 把 severity 放 riskDescriptor.severity(非顶层标量,违文档;
+        //   server.ts:1414 inbox handler 直接 spread listPending() 未走 summarizeCheckpoint)。优先顶层标量(文档/未来态),
+        //   缺则回退 riskDescriptor.severity(当前 live 态)。service 修 handler 后顶层自动接管,前向兼容。
         return r.inbox.map((row) => row.severity == null && row.riskDescriptor?.severity != null
             ? { ...row, severity: row.riskDescriptor.severity }
             : row);
     }
+    /** §3 GET /v1/assistant/tasks —— N-task 调度总览（每用户跨任务视图）。Triage 序由 core 给定（needsAttention 优先,
+     *  再 severity DESC, 再 spend DESC）—— **不要再排**。需 TiDB run store, 否则 worker 回 `{tasks:[]}`（原样透传）。 */
     async tasks(opts) {
+        // wire gate 的 severity/spentMicroUsd/deadline 形如 `4 | null`(§3),但 AssistantGate 把它们规约为 `?:number`
+        //   (缺/null 都容忍, OMIT 优先)。这里把 null 折成 OMIT —— 否则 raw 透传会把 wire 的 null 漏进 `?:number` 字段,
+        //   违反 exactOptionalPropertyTypes 的契约(消费方按 `number | undefined` 用,绝不该见 null)。
         const r = await this.t.request({
             method: "GET",
             path: "/v1/assistant/tasks",
@@ -33,6 +45,9 @@ export class AssistantResource {
         });
         return r.tasks.map((t) => normalizeTask(t));
     }
+    /** §4b POST /v1/assistant/tasks/:id/resume（:id = taskId）—— resource_limit CONTINUE。**无 body**。
+     *  非 submit → 不重试（一次决策不重放）。🔴 GATE-KIND GUARD: human/policy_ask 门 → 409 gate_not_resumable
+     *  （"continue" 绝不绕过人审, 那条路是 /decide）。owner 非属 → 404。 */
     async resume(taskId, opts) {
         return this.t.request({
             method: "POST",
@@ -40,6 +55,10 @@ export class AssistantResource {
             signal: opts?.signal,
         });
     }
+    /** §4c POST /v1/assistant/tasks/:id/plan_review（:id = taskId）—— PRE-ACTION plan_review 门的 3-state 决策。
+     *  body = {decision, editedPlan?, reason?}。approve/edit/reject 全跑模型 → 计费。非 submit → 不重试。
+     *  🔴 GATE-KIND GUARD: 非 plan_review 门 → 409 gate_not_plan_review。400: 坏/缺 decision; edit 缺非空 editedPlan;
+     *  approve/reject 带 editedPlan; reason 非串。owner 非属 → 404。 */
     async planReview(taskId, req, opts) {
         return this.t.request({
             method: "POST",
@@ -48,6 +67,9 @@ export class AssistantResource {
             signal: opts?.signal,
         });
     }
+    /** §4d POST /v1/assistant/tasks/:id/preempt（:id = taskId）—— 优雅 YIELD（跨副本让位, 与 runs.cancel 的 kill 相反）。
+     *  **无 body**。202 {status}（terminal → 202 no-op）。非 submit → 不重试。NOT billable。
+     *  suspended → 409; RESOURCE_SUSPEND off → 501; owner 非属 → 404。 */
     async preempt(taskId, opts) {
         return this.t.request({
             method: "POST",

package/dist/resources/assistant.js.map

@@ -1 +1 @@
-{"version":3,"file":"assistant.js","sourceRoot":"","sources":["../../src/resources/assistant.ts"],"names":[],"mappings":"AAqBA,SAAS,aAAa,CAAC,CAAmB;IACxC,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAmB;IACxC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAK7C,KAAK,CAAC,KAAK,CAAC,IAA+C;QACzD,MAAM,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAwB;YACpD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB,CAAC,EAAE;YAC/B,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;QAIH,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACzB,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,cAAc,EAAE,QAAQ,IAAI,IAAI;YAC1D,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE;YACnD,CAAC,CAAC,GAAG,CACR,CAAC;IACJ,CAAC;IAID,KAAK,CAAC,KAAK,CAAC,IAA+B;QAIzC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAgC;YAC5D,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,IAA+B;QAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAsB;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,SAAS;YAChE,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAMD,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,GAAsB,EAAE,IAA+B;QACtF,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAsB;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,cAAc;YACrE,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,IAA+B;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAsB;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,UAAU;YACjE,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"assistant.js","sourceRoot":"","sources":["../../src/resources/assistant.ts"],"names":[],"mappings":"AAoBA,2EAA2E;AAC3E,SAAS,aAAa,CAAC,CAAmB;IACxC,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAmB;IACxC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;;wGAEoG;IACpG,KAAK,CAAC,KAAK,CAAC,IAA+C;QACzD,MAAM,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAwB;YACpD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB,CAAC,EAAE;YAC/B,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,4EAA4E;QAC5E,iGAAiG;QACjG,4EAA4E;QAC5E,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACzB,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,GAAG,CAAC,cAAc,EAAE,QAAQ,IAAI,IAAI;YAC1D,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ,EAAE;YACnD,CAAC,CAAC,GAAG,CACR,CAAC;IACJ,CAAC;IAED;sGACkG;IAClG,KAAK,CAAC,KAAK,CAAC,IAA+B;QACzC,kGAAkG;QAClG,wFAAwF;QACxF,8EAA8E;QAC9E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAgC;YAC5D,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;4DAEwD;IACxD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,IAA+B;QAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAsB;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,SAAS;YAChE,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;;iEAG6D;IAC7D,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,GAAsB,EAAE,IAA+B;QACtF,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAsB;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,cAAc;YACrE,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;uEAEmE;IACnE,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,IAA+B;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAsB;YACzC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,UAAU;YACjE,MAAM,EAAE,IAAI,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/resources/control/auth-providers.d.ts

@@ -1,14 +1,31 @@
+/** control.authProviders — login auth-provider config (Gitea / OAuth2 quick-login). Backend: sema-registry
+ *  GET/POST/DELETE /api/config/auth/providers. admin-only.
+ *
+ *  🔴 SECRET BOUNDARY (iron law, registry-enforced AND mirrored here): the client_secret VALUE is never stored,
+ *     returned, or logged — only its env-NAME (`clientSecretEnv`). upsert() takes a `clientSecretEnv` NAME (the
+ *     registry rejects a value-shaped string with the env-NAME regex); the result echoes the NON-secret record
+ *     plus the registry-derived `secretPresent` boolean (is the env in place?) — never the value.
+ *
+ *  Local accounts remain a permanent fallback independent of these rows, so a misconfigured provider can't lock
+ *  the admin out. `type: "oidc"` is rejected by the registry today (discovery not yet implemented) → 400
+ *  ControlValidationError; this SDK's upsert type admits only the supported "gitea"|"oauth2". */
 import type { Transport } from "../../transport.js";
 import type { AuthProvidersResult, AuthProviderUpsert, AuthProviderUpsertResult } from "../../control-types.js";
 export declare class ControlAuthProvidersResource {
     private readonly t;
     constructor(t: Transport);
+    /** GET /api/config/auth/providers → all providers (each NON-secret config + the derived `secretPresent`).
+     *  admin. */
     list(opts?: {
         signal?: AbortSignal;
     }): Promise<AuthProvidersResult>;
+    /** POST /api/config/auth/providers → upsert one provider. 🔴 `clientSecretEnv` is an ENV-NAME (never a value);
+     *  the registry validates it lives in the provider-secret namespace and rejects a platform secret (anti-exfil)
+     *  → 400 ControlValidationError. A bad field → 400. admin. NOT submit-class (an upsert is idempotent on `id`). */
     upsert(provider: AuthProviderUpsert, opts?: {
         signal?: AbortSignal;
     }): Promise<AuthProviderUpsertResult>;
+    /** DELETE /api/config/auth/providers?id=<id> → remove a provider. admin. */
     delete(id: string, opts?: {
         signal?: AbortSignal;
     }): Promise<{

package/dist/resources/control/auth-providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-providers.d.ts","sourceRoot":"","sources":["../../../src/resources/control/auth-providers.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEhH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAInC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAOnE,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAKxG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC;CAGjF"}
+{"version":3,"file":"auth-providers.d.ts","sourceRoot":"","sources":["../../../src/resources/control/auth-providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;iGAUiG;AACjG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAEhH,qBAAa,4BAA4B;IAC3B,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;iBACa;IACP,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIzE;;sHAEkH;IAC5G,MAAM,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAI9G,4EAA4E;IACtE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC;CAGjF"}

package/dist/resources/control/auth-providers.js

@@ -3,12 +3,18 @@ export class ControlAuthProvidersResource {
     constructor(t) {
         this.t = t;
     }
+    /** GET /api/config/auth/providers → all providers (each NON-secret config + the derived `secretPresent`).
+     *  admin. */
     async list(opts) {
         return this.t.request({ method: "GET", path: "/api/config/auth/providers", signal: opts?.signal });
     }
+    /** POST /api/config/auth/providers → upsert one provider. 🔴 `clientSecretEnv` is an ENV-NAME (never a value);
+     *  the registry validates it lives in the provider-secret namespace and rejects a platform secret (anti-exfil)
+     *  → 400 ControlValidationError. A bad field → 400. admin. NOT submit-class (an upsert is idempotent on `id`). */
     async upsert(provider, opts) {
         return this.t.request({ method: "POST", path: "/api/config/auth/providers", body: provider, signal: opts?.signal });
     }
+    /** DELETE /api/config/auth/providers?id=<id> → remove a provider. admin. */
     async delete(id, opts) {
         return this.t.request({ method: "DELETE", path: `/api/config/auth/providers?id=${encodeURIComponent(id)}`, signal: opts?.signal });
     }

package/dist/resources/control/auth-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-providers.js","sourceRoot":"","sources":["../../../src/resources/control/auth-providers.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,4BAA4B;IACV;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAI7C,KAAK,CAAC,IAAI,CAAC,IAA+B;QACxC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,QAA4B,EAAE,IAA+B;QACxE,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtH,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,IAA+B;QACtD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrI,CAAC;CACF"}
+{"version":3,"file":"auth-providers.js","sourceRoot":"","sources":["../../../src/resources/control/auth-providers.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,4BAA4B;IACV;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;iBACa;IACb,KAAK,CAAC,IAAI,CAAC,IAA+B;QACxC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IAED;;sHAEkH;IAClH,KAAK,CAAC,MAAM,CAAC,QAA4B,EAAE,IAA+B;QACxE,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtH,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,IAA+B;QACtD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACrI,CAAC;CACF"}

package/dist/resources/control/config.d.ts

@@ -1,28 +1,50 @@
+/** control.config — config DOMAIN CRUD + atomic batch + schema introspection + portable export.
+ *  Backend: sema-registry GET/PUT /api/config/[domain], POST /api/config/batch, GET /api/config/schema,
+ *  GET /api/config/export. This is where the CLI's裸-HTTP fleet.ts (export/batch/PUT) lands inside the SDK.
+ *
+ *  🔴 The SDK does NOT interpret per-domain values, NOR re-derive the per-domain write-role table
+ *     (domainWriteRole drifts with the registry). It sends the write; a too-low role lands as a typed 403
+ *     (ControlForbiddenError). Validation 400 / CAS 409 are surfaced typed (ControlValidationError /
+ *     ControlConflictError), never auto-retried. */
 import type { Transport } from "../../transport.js";
 import type { ConfigDomain, DomainRead, PutResult, BatchChange, BatchResult, SchemaAll, SchemaOne, ExportResult } from "../../control-types.js";
 export declare class ControlConfigResource {
     private readonly t;
     constructor(t: Transport);
+    /** GET /api/config/[domain] → the domain value + global version (echo `version` as a put() `baseVersion`
+     *  for true optimistic locking). viewer+. */
     get(domain: ConfigDomain, opts?: {
         signal?: AbortSignal;
     }): Promise<DomainRead>;
+    /** PUT /api/config/[domain] — write one domain. `baseVersion` (from a prior get()) makes the write a CAS:
+     *  a write racing ANY config change since that read is rejected 409 (ControlConflictError). editor+ (some
+     *  domains publisher+ → 403 ControlForbiddenError). NOT submit-class: a non-idempotent PUT is never retried.
+     *  Returns droppedKeys/autoPlaced so a "success" that dropped fields isn't a silent false-success. */
     put(domain: ConfigDomain, body: {
         value: unknown;
         summary?: string;
         baseVersion?: number;
         signal?: AbortSignal;
     }): Promise<PutResult>;
+    /** POST /api/config/batch — atomic multi-domain write (validated whole, applied all-or-nothing, version
+     *  bumps once). editor+ (publisher-only domains in the batch → 403). NOT submit-class (no idempotency key:
+     *  a batch is a CAS write, re-running could clobber). A bad/forbidden domain → 400 ControlValidationError. */
     batch(body: {
         changes: BatchChange[];
         summary?: string;
         signal?: AbortSignal;
     }): Promise<BatchResult>;
+    /** GET /api/config/schema → every domain's JSON Schema (Draft-07). viewer+. */
     schema(opts?: {
         signal?: AbortSignal;
     }): Promise<SchemaAll>;
+    /** GET /api/config/schema?domain=<d> → one domain's JSON Schema. */
     schema(domain: ConfigDomain, opts?: {
         signal?: AbortSignal;
     }): Promise<SchemaOne>;
+    /** GET /api/config/export → portable config bundle (env-NAME refs only, never secret VALUES). `?published`
+     *  exports the last published snapshot (409 ControlConflictError if nothing was ever published) instead of
+     *  the live draft. editor+. */
     export(opts?: {
         published?: boolean;
         signal?: AbortSignal;

package/dist/resources/control/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/resources/control/config.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EACV,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAClG,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAInC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ/E,GAAG,CACP,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACrF,OAAO,CAAC,SAAS,CAAC;IAQf,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAMrG,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAE3D,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAcjF,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;CAI1F"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/resources/control/config.ts"],"names":[],"mappings":"AAAA;;;;;;;oDAOoD;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EACV,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAClG,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;iDAC6C;IACvC,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IAIrF;;;0GAGsG;IAChG,GAAG,CACP,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACrF,OAAO,CAAC,SAAS,CAAC;IAKrB;;kHAE8G;IACxG,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IAK3G,+EAA+E;IACzE,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IACjE,oEAAoE;IAC9D,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAWvF;;mCAE+B;IACzB,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;CAI1F"}

package/dist/resources/control/config.js

@@ -3,13 +3,22 @@ export class ControlConfigResource {
     constructor(t) {
         this.t = t;
     }
+    /** GET /api/config/[domain] → the domain value + global version (echo `version` as a put() `baseVersion`
+     *  for true optimistic locking). viewer+. */
     async get(domain, opts) {
         return this.t.request({ method: "GET", path: `/api/config/${encodeURIComponent(domain)}`, signal: opts?.signal });
     }
+    /** PUT /api/config/[domain] — write one domain. `baseVersion` (from a prior get()) makes the write a CAS:
+     *  a write racing ANY config change since that read is rejected 409 (ControlConflictError). editor+ (some
+     *  domains publisher+ → 403 ControlForbiddenError). NOT submit-class: a non-idempotent PUT is never retried.
+     *  Returns droppedKeys/autoPlaced so a "success" that dropped fields isn't a silent false-success. */
     async put(domain, body) {
         const { signal, ...rest } = body;
         return this.t.request({ method: "PUT", path: `/api/config/${encodeURIComponent(domain)}`, body: rest, signal });
     }
+    /** POST /api/config/batch — atomic multi-domain write (validated whole, applied all-or-nothing, version
+     *  bumps once). editor+ (publisher-only domains in the batch → 403). NOT submit-class (no idempotency key:
+     *  a batch is a CAS write, re-running could clobber). A bad/forbidden domain → 400 ControlValidationError. */
     async batch(body) {
         const { signal, ...rest } = body;
         return this.t.request({ method: "POST", path: "/api/config/batch", body: rest, signal });
@@ -20,6 +29,9 @@ export class ControlConfigResource {
         const qs = domain ? `?domain=${encodeURIComponent(domain)}` : "";
         return this.t.request({ method: "GET", path: `/api/config/schema${qs}`, signal });
     }
+    /** GET /api/config/export → portable config bundle (env-NAME refs only, never secret VALUES). `?published`
+     *  exports the last published snapshot (409 ControlConflictError if nothing was ever published) instead of
+     *  the live draft. editor+. */
     async export(opts) {
         const qs = opts?.published ? "?published" : "";
         return this.t.request({ method: "GET", path: `/api/config/export${qs}`, signal: opts?.signal });

package/dist/resources/control/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/resources/control/config.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAI7C,KAAK,CAAC,GAAG,CAAC,MAAoB,EAAE,IAA+B;QAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,CAAC;IAMD,KAAK,CAAC,GAAG,CACP,MAAoB,EACpB,IAAsF;QAEtF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClH,CAAC;IAKD,KAAK,CAAC,KAAK,CAAC,IAAwE;QAClF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAMD,KAAK,CAAC,MAAM,CACV,CAA2C,EAC3C,CAA4B;QAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,IAAoD;QAC/D,MAAM,EAAE,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;CACF"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/resources/control/config.ts"],"names":[],"mappings":"AAaA,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;iDAC6C;IAC7C,KAAK,CAAC,GAAG,CAAC,MAAoB,EAAE,IAA+B;QAC7D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpH,CAAC;IAED;;;0GAGsG;IACtG,KAAK,CAAC,GAAG,CACP,MAAoB,EACpB,IAAsF;QAEtF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClH,CAAC;IAED;;kHAE8G;IAC9G,KAAK,CAAC,KAAK,CAAC,IAAwE;QAClF,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IAMD,KAAK,CAAC,MAAM,CACV,CAA2C,EAC3C,CAA4B;QAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACvD,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IAED;;mCAE+B;IAC/B,KAAK,CAAC,MAAM,CAAC,IAAoD;QAC/D,MAAM,EAAE,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;CACF"}

package/dist/resources/control/fleet.d.ts

@@ -1,29 +1,44 @@
+/** control.fleet — the operations dashboard's read + scheduling actions (多主机调度).
+ *  Backend: sema-registry GET /api/config/fleet, GET /api/config/fleet/metrics, GET/POST
+ *  /api/config/placement, GET/POST /api/config/rebalance, GET/POST /api/config/reschedule.
+ *
+ *  GET previews (snapshot/metrics/*Plan) are viewer+ and cheap-to-poll. The *apply POSTs are editor+ and are
+ *  CAS writes over the workers domain: a concurrent workers edit → 409 ControlConflictError (the move set is
+ *  never clobbered). The SDK previews/applies the registry's plans; it does NOT compute scheduling itself. */
 import type { Transport } from "../../transport.js";
 import type { FleetSnapshot, FleetMetrics, SchedulePlan, ScheduleApplyResult } from "../../control-types.js";
 export declare class ControlFleetResource {
     private readonly t;
     constructor(t: Transport);
+    /** GET /api/config/fleet → live FleetSnapshot (desired ⊕ status ⊕ lifecycle + derived signals). viewer+. */
     snapshot(opts?: {
         signal?: AbortSignal;
     }): Promise<FleetSnapshot>;
+    /** GET /api/config/fleet/metrics → { worker → MetricsSummary } + per-worker scrape errors. viewer+. */
     metrics(opts?: {
         signal?: AbortSignal;
     }): Promise<FleetMetrics>;
+    /** GET /api/config/placement → placement plan preview (auto workers ↔ hosts). viewer+. */
     placementPlan(opts?: {
         signal?: AbortSignal;
     }): Promise<SchedulePlan>;
+    /** POST /api/config/placement → apply the placement plan (rewrite auto workers' host, one CAS write). editor+. */
     applyPlacement(opts?: {
         signal?: AbortSignal;
     }): Promise<ScheduleApplyResult>;
+    /** GET /api/config/rebalance → rebalance plan preview (even out load off over-loaded hosts). viewer+. */
     rebalancePlan(opts?: {
         signal?: AbortSignal;
     }): Promise<SchedulePlan>;
+    /** POST /api/config/rebalance → apply the rebalance moves (CAS-safe). editor+. */
     applyRebalance(opts?: {
         signal?: AbortSignal;
     }): Promise<ScheduleApplyResult>;
+    /** GET /api/config/reschedule → failover plan preview (evacuate auto workers off silent/dead hosts). viewer+. */
     reschedulePlan(opts?: {
         signal?: AbortSignal;
     }): Promise<SchedulePlan>;
+    /** POST /api/config/reschedule → apply the evacuations (operator one-click; CAS-safe). editor+. */
     applyReschedule(opts?: {
         signal?: AbortSignal;
     }): Promise<ScheduleApplyResult>;

package/dist/resources/control/fleet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../../src/resources/control/fleet.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7G,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAGnC,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAKjE,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAK/D,aAAa,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAKrE,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAK7E,aAAa,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAKrE,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAK7E,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAKtE,eAAe,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAGrF"}
+{"version":3,"file":"fleet.d.ts","sourceRoot":"","sources":["../../../src/resources/control/fleet.ts"],"names":[],"mappings":"AAAA;;;;;;8GAM8G;AAC9G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7G,qBAAa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC,4GAA4G;IACtG,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAIvE,uGAAuG;IACjG,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAIrE,0FAA0F;IACpF,aAAa,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAI3E,kHAAkH;IAC5G,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAInF,yGAAyG;IACnG,aAAa,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAI3E,kFAAkF;IAC5E,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAInF,iHAAiH;IAC3G,cAAc,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAI5E,mGAAmG;IAC7F,eAAe,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAGrF"}

package/dist/resources/control/fleet.js

@@ -3,27 +3,35 @@ export class ControlFleetResource {
     constructor(t) {
         this.t = t;
     }
+    /** GET /api/config/fleet → live FleetSnapshot (desired ⊕ status ⊕ lifecycle + derived signals). viewer+. */
     async snapshot(opts) {
         return this.t.request({ method: "GET", path: "/api/config/fleet", signal: opts?.signal });
     }
+    /** GET /api/config/fleet/metrics → { worker → MetricsSummary } + per-worker scrape errors. viewer+. */
     async metrics(opts) {
         return this.t.request({ method: "GET", path: "/api/config/fleet/metrics", signal: opts?.signal });
     }
+    /** GET /api/config/placement → placement plan preview (auto workers ↔ hosts). viewer+. */
     async placementPlan(opts) {
         return this.t.request({ method: "GET", path: "/api/config/placement", signal: opts?.signal });
     }
+    /** POST /api/config/placement → apply the placement plan (rewrite auto workers' host, one CAS write). editor+. */
     async applyPlacement(opts) {
         return this.t.request({ method: "POST", path: "/api/config/placement", body: {}, signal: opts?.signal });
     }
+    /** GET /api/config/rebalance → rebalance plan preview (even out load off over-loaded hosts). viewer+. */
     async rebalancePlan(opts) {
         return this.t.request({ method: "GET", path: "/api/config/rebalance", signal: opts?.signal });
     }
+    /** POST /api/config/rebalance → apply the rebalance moves (CAS-safe). editor+. */
     async applyRebalance(opts) {
         return this.t.request({ method: "POST", path: "/api/config/rebalance", body: {}, signal: opts?.signal });
     }
+    /** GET /api/config/reschedule → failover plan preview (evacuate auto workers off silent/dead hosts). viewer+. */
     async reschedulePlan(opts) {
         return this.t.request({ method: "GET", path: "/api/config/reschedule", signal: opts?.signal });
     }
+    /** POST /api/config/reschedule → apply the evacuations (operator one-click; CAS-safe). editor+. */
     async applyReschedule(opts) {
         return this.t.request({ method: "POST", path: "/api/config/reschedule", body: {}, signal: opts?.signal });
     }

package/dist/resources/control/fleet.js.map

@@ -1 +1 @@
-{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../../src/resources/control/fleet.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAG7C,KAAK,CAAC,QAAQ,CAAC,IAA+B;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IAGD,KAAK,CAAC,OAAO,CAAC,IAA+B;QAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpG,CAAC;IAGD,KAAK,CAAC,aAAa,CAAC,IAA+B;QACjD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,IAA+B;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,CAAC,aAAa,CAAC,IAA+B;QACjD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,IAA+B;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3G,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,IAA+B;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,IAA+B;QACnD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5G,CAAC;CACF"}
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../../src/resources/control/fleet.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C,4GAA4G;IAC5G,KAAK,CAAC,QAAQ,CAAC,IAA+B;QAC5C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,uGAAuG;IACvG,KAAK,CAAC,OAAO,CAAC,IAA+B;QAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,aAAa,CAAC,IAA+B;QACjD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,kHAAkH;IAClH,KAAK,CAAC,cAAc,CAAC,IAA+B;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,aAAa,CAAC,IAA+B;QACjD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,cAAc,CAAC,IAA+B;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,cAAc,CAAC,IAA+B;QAClD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;IAED,mGAAmG;IACnG,KAAK,CAAC,eAAe,CAAC,IAA+B;QACnD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5G,CAAC;CACF"}

package/dist/resources/control/images.d.ts

@@ -1,17 +1,37 @@
+/** control.images — the shared sandbox-image pool, read + resolve. Backend: sema-registry GET
+ *  /api/config/images, GET /api/config/images/:profile, GET /api/config/images/digests/:digest,
+ *  POST /api/config/images/select. The registry is a BFF RELAY in front of the worker's /v1/images: it reaches
+ *  the worker with its OWN server-side IMAGE_API_TOKEN (never echoed) and zod-validates every relayed row.
+ *
+ *  🔴 All four are gated by the EDITOR Bearer (the SAME registry token) — NOT the service pull token. list/get/
+ *     byDigest are read-only (viewer-shaped, editor+ here). select() is a PURE resolution PREVIEW: it resolves a
+ *     profile/bands → a concrete `ref` (repo@digest) to bind onto a worker; it builds nothing. The registry
+ *     503s when the upstream image API is unconfigured (surfaced as a ControlError) and 409s when no image
+ *     satisfies the selection (ControlConflictError). */
 import type { Transport } from "../../transport.js";
 import type { ControlImageList, ControlImageEntry, ImageListQuery, ImageSelectQuery, ImageSelectResolution } from "../../control-types.js";
 export declare class ControlImagesResource {
     private readonly t;
     constructor(t: Transport);
+    /** GET /api/config/images[?status=&profile=&capability=&visibility=&latest=&limit=&cursor=] → a page of image
+     *  rows. Only the documented list params are forwarded; `nextCursor` (when present) feeds the next call. editor+. */
     list(query?: ImageListQuery, opts?: {
         signal?: AbortSignal;
     }): Promise<ControlImageList>;
+    /** GET /api/config/images/:profile → the latest published entry for a profile (404 → ControlNotFoundError).
+     *  The registry unwraps the upstream `{ image }` envelope; this returns the bare entry. editor+. */
     get(profile: string, opts?: {
         signal?: AbortSignal;
     }): Promise<ControlImageEntry>;
+    /** GET /api/config/images/digests/:digest → one entry by its immutable digest (`sha256:<64 hex>`; the drift
+     *  lookup). 404 → ControlNotFoundError; a malformed digest → 400 ControlValidationError. editor+. */
     byDigest(digest: string, opts?: {
         signal?: AbortSignal;
     }): Promise<ControlImageEntry>;
+    /** POST /api/config/images/select → resolve a profile/bands to a concrete pull `ref` (repo@digest) for binding
+     *  onto a worker. PURE resolution + visibility/capability admission — builds NOTHING. One of `profile`/`bands`
+     *  is required. No image satisfies the selection → 409 ControlConflictError. NOT submit-class (idempotent,
+     *  read-shaped resolution — re-running just re-resolves; no client idempotency key). editor+. */
     select(body: ImageSelectQuery & {
         signal?: AbortSignal;
     }): Promise<ImageSelectResolution>;

package/dist/resources/control/images.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"images.d.ts","sourceRoot":"","sources":["../../../src/resources/control/images.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EACV,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAC7F,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAInC,IAAI,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAaxF,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAMjF,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQrF,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAIhG"}
+{"version":3,"file":"images.d.ts","sourceRoot":"","sources":["../../../src/resources/control/images.ts"],"names":[],"mappings":"AAAA;;;;;;;;;yDASyD;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EACV,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,qBAAqB,EAC7F,MAAM,wBAAwB,CAAC;AAEhC,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;yHACqH;IAC/G,IAAI,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAW9F;wGACoG;IAC9F,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIvF;yGACqG;IAC/F,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI3F;;;qGAGiG;IAC3F,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAIhG"}

package/dist/resources/control/images.js

@@ -3,6 +3,8 @@ export class ControlImagesResource {
     constructor(t) {
         this.t = t;
     }
+    /** GET /api/config/images[?status=&profile=&capability=&visibility=&latest=&limit=&cursor=] → a page of image
+     *  rows. Only the documented list params are forwarded; `nextCursor` (when present) feeds the next call. editor+. */
     async list(query, opts) {
         const q = new URLSearchParams();
         if (query) {
@@ -14,12 +16,20 @@ export class ControlImagesResource {
         const qs = q.toString();
         return this.t.request({ method: "GET", path: `/api/config/images${qs ? `?${qs}` : ""}`, signal: opts?.signal });
     }
+    /** GET /api/config/images/:profile → the latest published entry for a profile (404 → ControlNotFoundError).
+     *  The registry unwraps the upstream `{ image }` envelope; this returns the bare entry. editor+. */
     async get(profile, opts) {
         return this.t.request({ method: "GET", path: `/api/config/images/${encodeURIComponent(profile)}`, signal: opts?.signal });
     }
+    /** GET /api/config/images/digests/:digest → one entry by its immutable digest (`sha256:<64 hex>`; the drift
+     *  lookup). 404 → ControlNotFoundError; a malformed digest → 400 ControlValidationError. editor+. */
     async byDigest(digest, opts) {
         return this.t.request({ method: "GET", path: `/api/config/images/digests/${encodeURIComponent(digest)}`, signal: opts?.signal });
     }
+    /** POST /api/config/images/select → resolve a profile/bands to a concrete pull `ref` (repo@digest) for binding
+     *  onto a worker. PURE resolution + visibility/capability admission — builds NOTHING. One of `profile`/`bands`
+     *  is required. No image satisfies the selection → 409 ControlConflictError. NOT submit-class (idempotent,
+     *  read-shaped resolution — re-running just re-resolves; no client idempotency key). editor+. */
     async select(body) {
         const { signal, ...rest } = body;
         return this.t.request({ method: "POST", path: "/api/config/images/select", body: rest, signal });

package/dist/resources/control/images.js.map

@@ -1 +1 @@
-{"version":3,"file":"images.js","sourceRoot":"","sources":["../../../src/resources/control/images.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAI7C,KAAK,CAAC,IAAI,CAAC,KAAsB,EAAE,IAA+B;QAChE,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClH,CAAC;IAID,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,IAA+B;QACxD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5H,CAAC;IAID,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAA+B;QAC5D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnI,CAAC;IAMD,KAAK,CAAC,MAAM,CAAC,IAAiD;QAC5D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnG,CAAC;CACF"}
+{"version":3,"file":"images.js","sourceRoot":"","sources":["../../../src/resources/control/images.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;yHACqH;IACrH,KAAK,CAAC,IAAI,CAAC,KAAsB,EAAE,IAA+B;QAChE,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAClH,CAAC;IAED;wGACoG;IACpG,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,IAA+B;QACxD,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED;yGACqG;IACrG,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,IAA+B;QAC5D,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnI,CAAC;IAED;;;qGAGiG;IACjG,KAAK,CAAC,MAAM,CAAC,IAAiD;QAC5D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnG,CAAC;CACF"}

package/dist/resources/control/lifecycle.d.ts

@@ -1,12 +1,20 @@
+/** control.lifecycle — fleet lifecycle ops: cascade-delete an owner's workers, run one sweep pass.
+ *  Backend: sema-registry POST /api/config/lifecycle/cascade-owner, POST /api/config/lifecycle/sweep.
+ *
+ *  Both are editor+. cascadeOwner removes ALL workers owned by a decommissioned owner (atomic). sweep runs one
+ *  lifecycle pass (TTL expiry / idle detection / failover / status GC); `?dryRun` previews (writes/logs nothing). */
 import type { Transport } from "../../transport.js";
 import type { CascadeOwnerResult, SweepResult } from "../../control-types.js";
 export declare class ControlLifecycleResource {
     private readonly t;
     constructor(t: Transport);
+    /** POST /api/config/lifecycle/cascade-owner {owner} → remove all workers that owner owns. editor+. NOT
+     *  submit-class (a CAS-guarded atomic removal; re-running just removes nothing more). */
     cascadeOwner(body: {
         owner: string;
         signal?: AbortSignal;
     }): Promise<CascadeOwnerResult>;
+    /** POST /api/config/lifecycle/sweep[?dryRun=1] → one sweep pass (or a preview). editor+. */
     sweep(opts?: {
         dryRun?: boolean;
         signal?: AbortSignal;

package/dist/resources/control/lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/resources/control/lifecycle.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE9E,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAInC,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMxF,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;CAIrF"}
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/resources/control/lifecycle.ts"],"names":[],"mappings":"AAAA;;;;qHAIqH;AACrH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE9E,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC;6FACyF;IACnF,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAK9F,4FAA4F;IACtF,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;CAIrF"}

package/dist/resources/control/lifecycle.js

@@ -3,10 +3,13 @@ export class ControlLifecycleResource {
     constructor(t) {
         this.t = t;
     }
+    /** POST /api/config/lifecycle/cascade-owner {owner} → remove all workers that owner owns. editor+. NOT
+     *  submit-class (a CAS-guarded atomic removal; re-running just removes nothing more). */
     async cascadeOwner(body) {
         const { signal, ...rest } = body;
         return this.t.request({ method: "POST", path: "/api/config/lifecycle/cascade-owner", body: rest, signal });
     }
+    /** POST /api/config/lifecycle/sweep[?dryRun=1] → one sweep pass (or a preview). editor+. */
     async sweep(opts) {
         const qs = opts?.dryRun ? "?dryRun=1" : "";
         return this.t.request({ method: "POST", path: `/api/config/lifecycle/sweep${qs}`, body: {}, signal: opts?.signal });

package/dist/resources/control/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/resources/control/lifecycle.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAI7C,KAAK,CAAC,YAAY,CAAC,IAA6C;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7G,CAAC;IAGD,KAAK,CAAC,KAAK,CAAC,IAAiD;QAC3D,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtH,CAAC;CACF"}
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/resources/control/lifecycle.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C;6FACyF;IACzF,KAAK,CAAC,YAAY,CAAC,IAA6C;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,KAAK,CAAC,IAAiD;QAC3D,MAAM,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACtH,CAAC;CACF"}

package/dist/resources/control/publish.d.ts

@@ -1,18 +1,30 @@
+/** control.publish — the draft→production publish gate + optional N-approver approval workflow.
+ *  Backend: sema-registry POST/GET/DELETE /api/config/publish, POST /api/config/publish/approve.
+ *
+ *  request()/approve()/cancel() are publisher+ (admin token ⊇ publisher); state() is viewer+. Separation of
+ *  duties is enforced SERVER-SIDE: the requester may not approve their own request (403 ControlForbiddenError),
+ *  and a draft that moved since the request invalidates pending approvals (409 ControlConflictError). */
 import type { Transport } from "../../transport.js";
 import type { PublishState, PublishResult, ApprovePublishResult, CancelPublishResult } from "../../control-types.js";
 export declare class ControlPublishResource {
     private readonly t;
     constructor(t: Transport);
+    /** GET /api/config/publish → gate state { published, pending, approvalsRequired }. viewer+. */
     state(opts?: {
         signal?: AbortSignal;
     }): Promise<PublishState>;
+    /** POST /api/config/publish {summary?} → publish immediately (approvals=0) OR open a pending request (N>0).
+     *  publisher+. NOT submit-class (re-POSTing would open a duplicate request → the route 409s anyway). */
     request(body?: {
         summary?: string;
         signal?: AbortSignal;
     }): Promise<PublishResult>;
+    /** POST /api/config/publish/approve → record one approval; the Nth publishes. publisher+, NOT the requester
+     *  (403 ControlForbiddenError). Atomic server-side. Draft moved since the request → 409 ControlConflictError. */
     approve(opts?: {
         signal?: AbortSignal;
     }): Promise<ApprovePublishResult>;
+    /** DELETE /api/config/publish → cancel the pending request (requester or admin only). publisher+. */
     cancel(opts?: {
         signal?: AbortSignal;
     }): Promise<CancelPublishResult>;

package/dist/resources/control/publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../src/resources/control/publish.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAErH,qBAAa,sBAAsB;IACrB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAGnC,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAM7D,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAOlF,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAKvE,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAG5E"}
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../src/resources/control/publish.ts"],"names":[],"mappings":"AAAA;;;;;yGAKyG;AACzG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAErH,qBAAa,sBAAsB;IACrB,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,SAAS;IAEzC,+FAA+F;IACzF,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAInE;4GACwG;IAClG,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC;IAKxF;qHACiH;IAC3G,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7E,qGAAqG;IAC/F,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAG5E"}

package/dist/resources/control/publish.js

@@ -3,16 +3,22 @@ export class ControlPublishResource {
     constructor(t) {
         this.t = t;
     }
+    /** GET /api/config/publish → gate state { published, pending, approvalsRequired }. viewer+. */
     async state(opts) {
         return this.t.request({ method: "GET", path: "/api/config/publish", signal: opts?.signal });
     }
+    /** POST /api/config/publish {summary?} → publish immediately (approvals=0) OR open a pending request (N>0).
+     *  publisher+. NOT submit-class (re-POSTing would open a duplicate request → the route 409s anyway). */
     async request(body) {
         const { signal, ...rest } = body ?? {};
         return this.t.request({ method: "POST", path: "/api/config/publish", body: rest, signal });
     }
+    /** POST /api/config/publish/approve → record one approval; the Nth publishes. publisher+, NOT the requester
+     *  (403 ControlForbiddenError). Atomic server-side. Draft moved since the request → 409 ControlConflictError. */
     async approve(opts) {
         return this.t.request({ method: "POST", path: "/api/config/publish/approve", body: {}, signal: opts?.signal });
     }
+    /** DELETE /api/config/publish → cancel the pending request (requester or admin only). publisher+. */
     async cancel(opts) {
         return this.t.request({ method: "DELETE", path: "/api/config/publish", signal: opts?.signal });
     }

package/dist/resources/control/publish.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../src/resources/control/publish.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAG7C,KAAK,CAAC,KAAK,CAAC,IAA+B;QACzC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9F,CAAC;IAID,KAAK,CAAC,OAAO,CAAC,IAAiD;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAID,KAAK,CAAC,OAAO,CAAC,IAA+B;QAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjH,CAAC;IAGD,KAAK,CAAC,MAAM,CAAC,IAA+B;QAC1C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;CACF"}
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../src/resources/control/publish.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,CAAY;QAAZ,MAAC,GAAD,CAAC,CAAW;IAAG,CAAC;IAE7C,+FAA+F;IAC/F,KAAK,CAAC,KAAK,CAAC,IAA+B;QACzC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;4GACwG;IACxG,KAAK,CAAC,OAAO,CAAC,IAAiD;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED;qHACiH;IACjH,KAAK,CAAC,OAAO,CAAC,IAA+B;QAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjH,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,MAAM,CAAC,IAA+B;QAC1C,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;CACF"}