@stackfactor/client-api 1.1.252 → 1.1.253

package/dist/cjs/lib/knowledgeBase.js

@@ -0,0 +1,898 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSourceMappings = exports.updateSourceMapping = exports.listSourceMappings = exports.dismissAllArtifacts = exports.dismissArtifact = exports.retireArtifact = exports.regenerateArtifact = exports.decideContradiction = exports.listContradictions = exports.regenerateGenerated = exports.rejectGenerated = exports.editApproveGenerated = exports.approveGenerated = exports.listGeneratedReview = exports.deleteQuarantine = exports.reingestQuarantine = exports.releaseQuarantine = exports.listQuarantine = exports.getReviewOverview = exports.rightToBeForgotten = exports.updateComplianceProfile = exports.getComplianceProfile = exports.updateRedactionPolicy = exports.getRedactionPolicy = exports.revokeAccess = exports.grantAccess = exports.listAccess = exports.deleteDocument = exports.listDocuments = exports.testSource = exports.syncSource = exports.deleteSource = exports.updateSource = exports.addSource = exports.listSourceConnectors = exports.deleteKnowledgeBase = exports.updateKnowledgeBase = exports.getKnowledgeBase = exports.createKnowledgeBase = exports.listKnowledgeBases = void 0;
+const axiosClient_js_1 = require("./axiosClient.js");
+// ── Knowledge Base CRUD ───────────────────────────────────────────────────────
+/**
+ * List the knowledge bases the caller can see.
+ * GET /api/v1/knowledge-base
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listKnowledgeBases = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listKnowledgeBases = listKnowledgeBases;
+/**
+ * Create a knowledge base (the creator becomes owner automatically). Requires the
+ * global CREATE_KNOWLEDGE_BASE capability.
+ * POST /api/v1/knowledge-base
+ * @param {KnowledgeBaseInput} data KB metadata (at minimum `name`)
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const createKnowledgeBase = (data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base`, data, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.createKnowledgeBase = createKnowledgeBase;
+/**
+ * Get a single knowledge base (plus stats).
+ * GET /api/v1/knowledge-base/:id
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const getKnowledgeBase = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.getKnowledgeBase = getKnowledgeBase;
+/**
+ * Update a knowledge base's metadata. Owner or editor only. Does not touch
+ * `access[]`, `sources`, or `createdBy` — those have their own gated flows.
+ * PUT /api/v1/knowledge-base/:id
+ * @param {String} id The knowledge base id
+ * @param {KnowledgeBaseInput} data The fields to update
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const updateKnowledgeBase = (id, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.put(`/api/v1/knowledge-base/${id}`, data, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.updateKnowledgeBase = updateKnowledgeBase;
+/**
+ * Delete a knowledge base (cascades to its chunks). Owner only.
+ * DELETE /api/v1/knowledge-base/:id
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const deleteKnowledgeBase = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.delete(`/api/v1/knowledge-base/${id}`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.deleteKnowledgeBase = deleteKnowledgeBase;
+// ── Source Management ─────────────────────────────────────────────────────────
+/**
+ * List the available KB_SOURCE_CONNECTOR integrations (enabled integrations +
+ * capability manifests for the source-creation form).
+ * GET /api/v1/knowledge-base/source-connectors
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listSourceConnectors = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/source-connectors`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listSourceConnectors = listSourceConnectors;
+/**
+ * Add a source to a knowledge base (`integrationId` + credentials +
+ * `syncFrequencyDays`, default 7). Publishes a kb-source-event (changeType="add").
+ * POST /api/v1/knowledge-base/:id/sources
+ * @param {String} id The knowledge base id
+ * @param {object} source The source configuration
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const addSource = (id, source, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/sources`, source, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.addSource = addSource;
+/**
+ * Update a knowledge base source. Publishes a kb-source-event per changed source.
+ * PUT /api/v1/knowledge-base/:id/sources/:sourceId
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {object} source The updated source configuration
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const updateSource = (id, sourceId, source, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.put(`/api/v1/knowledge-base/${id}/sources/${sourceId}`, source, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.updateSource = updateSource;
+/**
+ * Remove a source from a knowledge base. Publishes a kb-source-event
+ * (changeType="delete").
+ * DELETE /api/v1/knowledge-base/:id/sources/:sourceId
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const deleteSource = (id, sourceId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.delete(`/api/v1/knowledge-base/${id}/sources/${sourceId}`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.deleteSource = deleteSource;
+/**
+ * Trigger a manual re-sync of a source. Publishes a kb-source-event
+ * (changeType="update", trigger="manual_sync").
+ * POST /api/v1/knowledge-base/:id/sources/:sourceId/sync
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const syncSource = (id, sourceId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/sources/${sourceId}/sync`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.syncSource = syncSource;
+/**
+ * Test a source's connector credentials (dispatches TEST_CONNECTION).
+ * POST /api/v1/knowledge-base/:id/sources/:sourceId/test
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const testSource = (id, sourceId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/sources/${sourceId}/test`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.testSource = testSource;
+// ── Document Management ───────────────────────────────────────────────────────
+/**
+ * List a knowledge base's documents (paginated, with status + lastSync). There is
+ * no upload endpoint — documents are only ingested via configured sources.
+ * GET /api/v1/knowledge-base/:id/documents
+ * @param {String} id The knowledge base id
+ * @param {DocumentListParams} params Optional pagination / status filters
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listDocuments = (id, params, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/documents`, {
+            headers: { authorization: authToken },
+            params: params,
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listDocuments = listDocuments;
+/**
+ * Delete a single document (cascades to chunks + S3 images + dependent entity
+ * flags).
+ * DELETE /api/v1/knowledge-base/:id/documents/:docId
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const deleteDocument = (id, docId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.delete(`/api/v1/knowledge-base/${id}/documents/${docId}`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.deleteDocument = deleteDocument;
+// ── KB Access Management (owner only) ─────────────────────────────────────────
+/**
+ * List a knowledge base's access entries.
+ * GET /api/v1/knowledge-base/:id/access
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listAccess = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/access`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listAccess = listAccess;
+/**
+ * Grant (upsert) an access entry. Owner only. Access is keyed by
+ * `(subjectType, subjectId)`, so re-granting a subject that already has an entry
+ * updates its role — there is no separate "update role" endpoint.
+ * POST /api/v1/knowledge-base/:id/access
+ * @param {String} id The knowledge base id
+ * @param {AccessEntryInput} entry The `{ subjectType, subjectId, role }` grant
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const grantAccess = (id, entry, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/access`, entry, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.grantAccess = grantAccess;
+/**
+ * Revoke a subject's access. Owner only. Keyed by `(subjectType, subjectId)` — the
+ * same composite key `grantAccess` upserts on. The backend refuses to remove the
+ * last owner.
+ * DELETE /api/v1/knowledge-base/:id/access
+ * @param {String} id The knowledge base id
+ * @param {String} subjectType One of `KNOWLEDGE_BASE.SUBJECT_TYPE`
+ * @param {String} subjectId The subject whose access is revoked
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const revokeAccess = (id, subjectType, subjectId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.delete(`/api/v1/knowledge-base/${id}/access`, {
+            headers: { authorization: authToken },
+            data: { subjectType: subjectType, subjectId: subjectId },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.revokeAccess = revokeAccess;
+// ── Compliance + Redaction Configuration ──────────────────────────────────────
+/**
+ * Read a knowledge base's redaction policy.
+ * GET /api/v1/knowledge-base/:id/redaction-policy
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const getRedactionPolicy = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/redaction-policy`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.getRedactionPolicy = getRedactionPolicy;
+/**
+ * Set a knowledge base's per-KB redaction behavior + DLP provider.
+ * PUT /api/v1/knowledge-base/:id/redaction-policy
+ * @param {String} id The knowledge base id
+ * @param {object} policy The redaction policy
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const updateRedactionPolicy = (id, policy, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.put(`/api/v1/knowledge-base/${id}/redaction-policy`, policy, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.updateRedactionPolicy = updateRedactionPolicy;
+/**
+ * Read the tenant's compliance profile (admin only). Governs which RAG processors
+ * a KB may route to (e.g. HIPAA tenants → BAA-eligible processors only).
+ * GET /api/v1/tenant/compliance-profile
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const getComplianceProfile = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/tenant/compliance-profile`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.getComplianceProfile = getComplianceProfile;
+/**
+ * Update the tenant's compliance profile (admin only; not exposed via the KB UI).
+ * PUT /api/v1/tenant/compliance-profile
+ * @param {object} profile The compliance profile
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const updateComplianceProfile = (profile, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.put(`/api/v1/tenant/compliance-profile`, profile, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.updateComplianceProfile = updateComplianceProfile;
+/**
+ * Trigger a GDPR subject-purge ("right to be forgotten"; admin only).
+ * POST /api/v1/compliance/right-to-be-forgotten
+ * @param {object} data The subject-purge request
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const rightToBeForgotten = (data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/compliance/right-to-be-forgotten`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.rightToBeForgotten = rightToBeForgotten;
+// ── Review Center — overview ──────────────────────────────────────────────────
+/**
+ * Overview of all Review Center streams + counts for a knowledge base.
+ * GET /api/v1/knowledge-base/:id/review
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const getReviewOverview = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/review`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.getReviewOverview = getReviewOverview;
+// ── Review Center — Stream 1: Quarantine release ──────────────────────────────
+/**
+ * List QUARANTINED documents (Review Center stream 1).
+ * GET /api/v1/knowledge-base/:id/review/quarantine
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listQuarantine = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/review/quarantine`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listQuarantine = listQuarantine;
+/**
+ * Release a quarantined document. Requires RELEASE_QUARANTINE + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/quarantine/:docId/release
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const releaseQuarantine = (id, docId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/quarantine/${docId}/release`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.releaseQuarantine = releaseQuarantine;
+/**
+ * Re-ingest a quarantined document (optionally with an updated redaction policy).
+ * Publishes a kb-source-event (trigger="quarantine_re_ingest"). Requires
+ * RELEASE_QUARANTINE + owner.
+ * POST /api/v1/knowledge-base/:id/review/quarantine/:docId/re-ingest
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {object} data Optional body, e.g. `{ updatedRedactionPolicy }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const reingestQuarantine = (id, docId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/quarantine/${docId}/re-ingest`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.reingestQuarantine = reingestQuarantine;
+/**
+ * Delete a quarantined document. Requires RELEASE_QUARANTINE + owner.
+ * POST /api/v1/knowledge-base/:id/review/quarantine/:docId/delete
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const deleteQuarantine = (id, docId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/quarantine/${docId}/delete`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.deleteQuarantine = deleteQuarantine;
+// ── Review Center — Stream 2: Generated content review ────────────────────────
+/**
+ * List generated artifacts awaiting review (needsReview=true).
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * GET /api/v1/knowledge-base/:id/review/generated
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listGeneratedReview = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/review/generated`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listGeneratedReview = listGeneratedReview;
+/**
+ * Approve a generated artifact. Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/approve
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, notes? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const approveGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/approve`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.approveGenerated = approveGenerated;
+/**
+ * Approve a generated artifact with edits.
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/edit-approve
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, edits, notes? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const editApproveGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/edit-approve`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.editApproveGenerated = editApproveGenerated;
+/**
+ * Reject a generated artifact. Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/reject
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, reason }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const rejectGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/reject`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.rejectGenerated = rejectGenerated;
+/**
+ * Regenerate a generated artifact using current chunks.
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/regenerate
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, regenerationHints? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const regenerateGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/regenerate`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.regenerateGenerated = regenerateGenerated;
+// ── Review Center — Stream 3: Contradiction flags ─────────────────────────────
+/**
+ * List chunks with non-empty contradictionFlags[].
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * GET /api/v1/knowledge-base/:id/review/contradictions
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listContradictions = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/knowledge-base/${id}/review/contradictions`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listContradictions = listContradictions;
+/**
+ * Decide a contradiction between two chunks.
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/contradictions/:chunkId/decide
+ * @param {String} id The knowledge base id
+ * @param {String} chunkId The chunk id carrying the contradiction flag
+ * @param {object} data Body `{ decision, otherChunkId, notes }` — `decision` is one
+ *   of `KNOWLEDGE_BASE.CONTRADICTION_DECISION`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const decideContradiction = (id, chunkId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/knowledge-base/${id}/review/contradictions/${chunkId}/decide`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.decideContradiction = decideContradiction;
+// ── Out-of-Sync Notification Actions ──────────────────────────────────────────
+// (design §14 / §14A — surfaced as notifications, acted on per-artifact.
+//  Requires GENERATE_FROM_KB + owner|editor on the KB.)
+/**
+ * Regenerate a stale artifact from a notification using current chunks.
+ * POST /api/v1/notifications/:notificationId/artifacts/:artifactId/regenerate
+ * @param {String} notificationId The notification id
+ * @param {String} artifactId The artifact id
+ * @param {object} data Body `{ entityType }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const regenerateArtifact = (notificationId, artifactId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/notifications/${notificationId}/artifacts/${artifactId}/regenerate`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.regenerateArtifact = regenerateArtifact;
+/**
+ * Retire (soft-delete) a stale artifact from a notification.
+ * POST /api/v1/notifications/:notificationId/artifacts/:artifactId/retire
+ * @param {String} notificationId The notification id
+ * @param {String} artifactId The artifact id
+ * @param {object} data Body `{ entityType }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const retireArtifact = (notificationId, artifactId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/notifications/${notificationId}/artifacts/${artifactId}/retire`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.retireArtifact = retireArtifact;
+/**
+ * Dismiss a stale-artifact flag (mark the staleness acceptable).
+ * POST /api/v1/notifications/:notificationId/artifacts/:artifactId/dismiss
+ * @param {String} notificationId The notification id
+ * @param {String} artifactId The artifact id
+ * @param {object} data Body `{ entityType, reason? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const dismissArtifact = (notificationId, artifactId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/notifications/${notificationId}/artifacts/${artifactId}/dismiss`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.dismissArtifact = dismissArtifact;
+/**
+ * Dismiss an entire out-of-sync notification (all artifacts).
+ * POST /api/v1/notifications/:notificationId/dismiss-all
+ * @param {String} notificationId The notification id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const dismissAllArtifacts = (notificationId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/notifications/${notificationId}/dismiss-all`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.dismissAllArtifacts = dismissAllArtifacts;
+// ── Identity Mapping ──────────────────────────────────────────────────────────
+// (design §14 — maps source-side principals to tenant users for KB source ACLs.)
+/**
+ * List the current user's source-side identities.
+ * GET /api/v1/identity/source-mappings
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const listSourceMappings = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.get(`/api/v1/identity/source-mappings`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.listSourceMappings = listSourceMappings;
+/**
+ * Tenant-admin override for a user's source identity mapping.
+ * PUT /api/v1/identity/source-mappings/:sourceType
+ * @param {String} sourceType The source type key
+ * @param {object} data The mapping override
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const updateSourceMapping = (sourceType, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.put(`/api/v1/identity/source-mappings/${sourceType}`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.updateSourceMapping = updateSourceMapping;
+/**
+ * Bulk-resolve source principal IDs → tenant users (internal / service-to-service).
+ * POST /api/v1/identity/source-mappings/resolve
+ * @param {object} data Body carrying the principal IDs to resolve
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+const resolveSourceMappings = (data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = axiosClient_js_1.client.post(`/api/v1/identity/source-mappings/resolve`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+exports.resolveSourceMappings = resolveSourceMappings;
+//# sourceMappingURL=knowledgeBase.js.map