@stackfactor/client-api 1.1.252 → 1.1.253

package/dist/esm/lib/knowledgeBase.js

@@ -0,0 +1,855 @@
+import { client } from "./axiosClient.js";
+// ── Knowledge Base CRUD ───────────────────────────────────────────────────────
+/**
+ * List the knowledge bases the caller can see.
+ * GET /api/v1/knowledge-base
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listKnowledgeBases = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Create a knowledge base (the creator becomes owner automatically). Requires the
+ * global CREATE_KNOWLEDGE_BASE capability.
+ * POST /api/v1/knowledge-base
+ * @param {KnowledgeBaseInput} data KB metadata (at minimum `name`)
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const createKnowledgeBase = (data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base`, data, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Get a single knowledge base (plus stats).
+ * GET /api/v1/knowledge-base/:id
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const getKnowledgeBase = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Update a knowledge base's metadata. Owner or editor only. Does not touch
+ * `access[]`, `sources`, or `createdBy` — those have their own gated flows.
+ * PUT /api/v1/knowledge-base/:id
+ * @param {String} id The knowledge base id
+ * @param {KnowledgeBaseInput} data The fields to update
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const updateKnowledgeBase = (id, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.put(`/api/v1/knowledge-base/${id}`, data, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Delete a knowledge base (cascades to its chunks). Owner only.
+ * DELETE /api/v1/knowledge-base/:id
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const deleteKnowledgeBase = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.delete(`/api/v1/knowledge-base/${id}`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Source Management ─────────────────────────────────────────────────────────
+/**
+ * List the available KB_SOURCE_CONNECTOR integrations (enabled integrations +
+ * capability manifests for the source-creation form).
+ * GET /api/v1/knowledge-base/source-connectors
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listSourceConnectors = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/source-connectors`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Add a source to a knowledge base (`integrationId` + credentials +
+ * `syncFrequencyDays`, default 7). Publishes a kb-source-event (changeType="add").
+ * POST /api/v1/knowledge-base/:id/sources
+ * @param {String} id The knowledge base id
+ * @param {object} source The source configuration
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const addSource = (id, source, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/sources`, source, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Update a knowledge base source. Publishes a kb-source-event per changed source.
+ * PUT /api/v1/knowledge-base/:id/sources/:sourceId
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {object} source The updated source configuration
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const updateSource = (id, sourceId, source, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.put(`/api/v1/knowledge-base/${id}/sources/${sourceId}`, source, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Remove a source from a knowledge base. Publishes a kb-source-event
+ * (changeType="delete").
+ * DELETE /api/v1/knowledge-base/:id/sources/:sourceId
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const deleteSource = (id, sourceId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.delete(`/api/v1/knowledge-base/${id}/sources/${sourceId}`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Trigger a manual re-sync of a source. Publishes a kb-source-event
+ * (changeType="update", trigger="manual_sync").
+ * POST /api/v1/knowledge-base/:id/sources/:sourceId/sync
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const syncSource = (id, sourceId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/sources/${sourceId}/sync`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Test a source's connector credentials (dispatches TEST_CONNECTION).
+ * POST /api/v1/knowledge-base/:id/sources/:sourceId/test
+ * @param {String} id The knowledge base id
+ * @param {String} sourceId The source id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const testSource = (id, sourceId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/sources/${sourceId}/test`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Document Management ───────────────────────────────────────────────────────
+/**
+ * List a knowledge base's documents (paginated, with status + lastSync). There is
+ * no upload endpoint — documents are only ingested via configured sources.
+ * GET /api/v1/knowledge-base/:id/documents
+ * @param {String} id The knowledge base id
+ * @param {DocumentListParams} params Optional pagination / status filters
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listDocuments = (id, params, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/documents`, {
+            headers: { authorization: authToken },
+            params: params,
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Delete a single document (cascades to chunks + S3 images + dependent entity
+ * flags).
+ * DELETE /api/v1/knowledge-base/:id/documents/:docId
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const deleteDocument = (id, docId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.delete(`/api/v1/knowledge-base/${id}/documents/${docId}`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── KB Access Management (owner only) ─────────────────────────────────────────
+/**
+ * List a knowledge base's access entries.
+ * GET /api/v1/knowledge-base/:id/access
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listAccess = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/access`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Grant (upsert) an access entry. Owner only. Access is keyed by
+ * `(subjectType, subjectId)`, so re-granting a subject that already has an entry
+ * updates its role — there is no separate "update role" endpoint.
+ * POST /api/v1/knowledge-base/:id/access
+ * @param {String} id The knowledge base id
+ * @param {AccessEntryInput} entry The `{ subjectType, subjectId, role }` grant
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const grantAccess = (id, entry, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/access`, entry, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Revoke a subject's access. Owner only. Keyed by `(subjectType, subjectId)` — the
+ * same composite key `grantAccess` upserts on. The backend refuses to remove the
+ * last owner.
+ * DELETE /api/v1/knowledge-base/:id/access
+ * @param {String} id The knowledge base id
+ * @param {String} subjectType One of `KNOWLEDGE_BASE.SUBJECT_TYPE`
+ * @param {String} subjectId The subject whose access is revoked
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const revokeAccess = (id, subjectType, subjectId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.delete(`/api/v1/knowledge-base/${id}/access`, {
+            headers: { authorization: authToken },
+            data: { subjectType: subjectType, subjectId: subjectId },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Compliance + Redaction Configuration ──────────────────────────────────────
+/**
+ * Read a knowledge base's redaction policy.
+ * GET /api/v1/knowledge-base/:id/redaction-policy
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const getRedactionPolicy = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/redaction-policy`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Set a knowledge base's per-KB redaction behavior + DLP provider.
+ * PUT /api/v1/knowledge-base/:id/redaction-policy
+ * @param {String} id The knowledge base id
+ * @param {object} policy The redaction policy
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const updateRedactionPolicy = (id, policy, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.put(`/api/v1/knowledge-base/${id}/redaction-policy`, policy, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Read the tenant's compliance profile (admin only). Governs which RAG processors
+ * a KB may route to (e.g. HIPAA tenants → BAA-eligible processors only).
+ * GET /api/v1/tenant/compliance-profile
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const getComplianceProfile = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/tenant/compliance-profile`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Update the tenant's compliance profile (admin only; not exposed via the KB UI).
+ * PUT /api/v1/tenant/compliance-profile
+ * @param {object} profile The compliance profile
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const updateComplianceProfile = (profile, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.put(`/api/v1/tenant/compliance-profile`, profile, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Trigger a GDPR subject-purge ("right to be forgotten"; admin only).
+ * POST /api/v1/compliance/right-to-be-forgotten
+ * @param {object} data The subject-purge request
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const rightToBeForgotten = (data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/compliance/right-to-be-forgotten`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Review Center — overview ──────────────────────────────────────────────────
+/**
+ * Overview of all Review Center streams + counts for a knowledge base.
+ * GET /api/v1/knowledge-base/:id/review
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const getReviewOverview = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/review`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Review Center — Stream 1: Quarantine release ──────────────────────────────
+/**
+ * List QUARANTINED documents (Review Center stream 1).
+ * GET /api/v1/knowledge-base/:id/review/quarantine
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listQuarantine = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/review/quarantine`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Release a quarantined document. Requires RELEASE_QUARANTINE + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/quarantine/:docId/release
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const releaseQuarantine = (id, docId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/quarantine/${docId}/release`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Re-ingest a quarantined document (optionally with an updated redaction policy).
+ * Publishes a kb-source-event (trigger="quarantine_re_ingest"). Requires
+ * RELEASE_QUARANTINE + owner.
+ * POST /api/v1/knowledge-base/:id/review/quarantine/:docId/re-ingest
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {object} data Optional body, e.g. `{ updatedRedactionPolicy }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const reingestQuarantine = (id, docId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/quarantine/${docId}/re-ingest`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Delete a quarantined document. Requires RELEASE_QUARANTINE + owner.
+ * POST /api/v1/knowledge-base/:id/review/quarantine/:docId/delete
+ * @param {String} id The knowledge base id
+ * @param {String} docId The document id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const deleteQuarantine = (id, docId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/quarantine/${docId}/delete`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Review Center — Stream 2: Generated content review ────────────────────────
+/**
+ * List generated artifacts awaiting review (needsReview=true).
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * GET /api/v1/knowledge-base/:id/review/generated
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listGeneratedReview = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/review/generated`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Approve a generated artifact. Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/approve
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, notes? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const approveGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/approve`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Approve a generated artifact with edits.
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/edit-approve
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, edits, notes? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const editApproveGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/edit-approve`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Reject a generated artifact. Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/reject
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, reason }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const rejectGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/reject`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Regenerate a generated artifact using current chunks.
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/generated/:entityId/regenerate
+ * @param {String} id The knowledge base id
+ * @param {String} entityId The artifact/entity id
+ * @param {object} data Body `{ entityType, regenerationHints? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const regenerateGenerated = (id, entityId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/generated/${entityId}/regenerate`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Review Center — Stream 3: Contradiction flags ─────────────────────────────
+/**
+ * List chunks with non-empty contradictionFlags[].
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * GET /api/v1/knowledge-base/:id/review/contradictions
+ * @param {String} id The knowledge base id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listContradictions = (id, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/knowledge-base/${id}/review/contradictions`, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Decide a contradiction between two chunks.
+ * Requires GENERATE_FROM_KB + owner|editor.
+ * POST /api/v1/knowledge-base/:id/review/contradictions/:chunkId/decide
+ * @param {String} id The knowledge base id
+ * @param {String} chunkId The chunk id carrying the contradiction flag
+ * @param {object} data Body `{ decision, otherChunkId, notes }` — `decision` is one
+ *   of `KNOWLEDGE_BASE.CONTRADICTION_DECISION`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const decideContradiction = (id, chunkId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/knowledge-base/${id}/review/contradictions/${chunkId}/decide`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Out-of-Sync Notification Actions ──────────────────────────────────────────
+// (design §14 / §14A — surfaced as notifications, acted on per-artifact.
+//  Requires GENERATE_FROM_KB + owner|editor on the KB.)
+/**
+ * Regenerate a stale artifact from a notification using current chunks.
+ * POST /api/v1/notifications/:notificationId/artifacts/:artifactId/regenerate
+ * @param {String} notificationId The notification id
+ * @param {String} artifactId The artifact id
+ * @param {object} data Body `{ entityType }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const regenerateArtifact = (notificationId, artifactId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/notifications/${notificationId}/artifacts/${artifactId}/regenerate`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Retire (soft-delete) a stale artifact from a notification.
+ * POST /api/v1/notifications/:notificationId/artifacts/:artifactId/retire
+ * @param {String} notificationId The notification id
+ * @param {String} artifactId The artifact id
+ * @param {object} data Body `{ entityType }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const retireArtifact = (notificationId, artifactId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/notifications/${notificationId}/artifacts/${artifactId}/retire`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Dismiss a stale-artifact flag (mark the staleness acceptable).
+ * POST /api/v1/notifications/:notificationId/artifacts/:artifactId/dismiss
+ * @param {String} notificationId The notification id
+ * @param {String} artifactId The artifact id
+ * @param {object} data Body `{ entityType, reason? }`
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const dismissArtifact = (notificationId, artifactId, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/notifications/${notificationId}/artifacts/${artifactId}/dismiss`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Dismiss an entire out-of-sync notification (all artifacts).
+ * POST /api/v1/notifications/:notificationId/dismiss-all
+ * @param {String} notificationId The notification id
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const dismissAllArtifacts = (notificationId, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/notifications/${notificationId}/dismiss-all`, {}, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+// ── Identity Mapping ──────────────────────────────────────────────────────────
+// (design §14 — maps source-side principals to tenant users for KB source ACLs.)
+/**
+ * List the current user's source-side identities.
+ * GET /api/v1/identity/source-mappings
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const listSourceMappings = (authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.get(`/api/v1/identity/source-mappings`, {
+            headers: { authorization: authToken },
+        });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Tenant-admin override for a user's source identity mapping.
+ * PUT /api/v1/identity/source-mappings/:sourceType
+ * @param {String} sourceType The source type key
+ * @param {object} data The mapping override
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const updateSourceMapping = (sourceType, data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.put(`/api/v1/identity/source-mappings/${sourceType}`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+/**
+ * Bulk-resolve source principal IDs → tenant users (internal / service-to-service).
+ * POST /api/v1/identity/source-mappings/resolve
+ * @param {object} data Body carrying the principal IDs to resolve
+ * @param {String} authToken Authentication token
+ * @returns {Promise<object>}
+ */
+export const resolveSourceMappings = (data, authToken) => {
+    return new Promise((resolve, reject) => {
+        const request = client.post(`/api/v1/identity/source-mappings/resolve`, data, { headers: { authorization: authToken } });
+        request
+            .then((response) => {
+            resolve(response.data);
+        })
+            .catch((error) => {
+            reject(error);
+        });
+    });
+};
+//# sourceMappingURL=knowledgeBase.js.map