@stigmer/sdk 0.0.89 → 0.0.91

package/__tests__/platform-client-auth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=platform-client-auth.test.d.ts.map

package/__tests__/platform-client-auth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-client-auth.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/platform-client-auth.test.ts"],"names":[],"mappings":""}

package/__tests__/platform-client-auth.test.js

@@ -0,0 +1,59 @@
+import { describe, it, expect } from "vitest";
+import { createPlatformClientAuth, PlatformClientAuth, } from "../platform-client-auth";
+describe("createPlatformClientAuth", () => {
+    it("throws when baseUrl is missing", () => {
+        expect(() => createPlatformClientAuth({
+            baseUrl: "",
+            clientId: "stgm_cid_abc",
+            clientSecret: "stgm_cs_xyz",
+        })).toThrow("baseUrl is required");
+    });
+    it("throws when clientId is missing", () => {
+        expect(() => createPlatformClientAuth({
+            baseUrl: "https://api.stigmer.ai",
+            clientId: "",
+            clientSecret: "stgm_cs_xyz",
+        })).toThrow("clientId is required");
+    });
+    it("throws when clientSecret is missing", () => {
+        expect(() => createPlatformClientAuth({
+            baseUrl: "https://api.stigmer.ai",
+            clientId: "stgm_cid_abc",
+            clientSecret: "",
+        })).toThrow("clientSecret is required");
+    });
+    it("returns a PlatformClientAuth instance with valid config", () => {
+        const auth = createPlatformClientAuth({
+            baseUrl: "https://api.stigmer.ai",
+            clientId: "stgm_cid_abc",
+            clientSecret: "stgm_cs_xyz",
+        });
+        expect(auth).toBeInstanceOf(PlatformClientAuth);
+    });
+});
+describe("PlatformClientAuth.mintUserToken", () => {
+    it("throws StigmerError when userId is empty", async () => {
+        const auth = createPlatformClientAuth({
+            baseUrl: "https://api.stigmer.ai",
+            clientId: "stgm_cid_abc",
+            clientSecret: "stgm_cs_xyz",
+        });
+        await expect(auth.mintUserToken({ userId: "" })).rejects.toThrow("userId is required");
+    });
+    it("throws StigmerError with invalid-argument code when userId is empty", async () => {
+        const auth = createPlatformClientAuth({
+            baseUrl: "https://api.stigmer.ai",
+            clientId: "stgm_cid_abc",
+            clientSecret: "stgm_cs_xyz",
+        });
+        try {
+            await auth.mintUserToken({ userId: "" });
+            expect.fail("should have thrown");
+        }
+        catch (e) {
+            expect(e).toHaveProperty("code", "invalid-argument");
+            expect(e).toHaveProperty("name", "StigmerError");
+        }
+    });
+});
+//# sourceMappingURL=platform-client-auth.test.js.map

package/__tests__/platform-client-auth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-client-auth.test.js","sourceRoot":"","sources":["../../src/__tests__/platform-client-auth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AAEjC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC;YACvB,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,aAAa;SAC5B,CAAC,CACH,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC;YACvB,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,aAAa;SAC5B,CAAC,CACH,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC;YACvB,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,EAAE;SACjB,CAAC,CACH,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,wBAAwB,CAAC;YACpC,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,wBAAwB,CAAC;YACpC,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CACnC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,IAAI,GAAG,wBAAwB,CAAC;YACpC,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,cAAc;YACxB,YAAY,EAAE,aAAa;SAC5B,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACrD,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/gen/authorization-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-config.d.ts","sourceRoot":"","sources":["../../src/gen/authorization-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,EAAE,CAc3E,CAAC"}
+{"version":3,"file":"authorization-config.d.ts","sourceRoot":"","sources":["../../src/gen/authorization-config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,eAAe,EAAE,SAAS,OAAO,EAAE,CAe3E,CAAC"}

package/gen/authorization-config.js

@@ -14,6 +14,7 @@ import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
 export const GRANTABLE_ROLES = new Map([
     [ApiResourceKind.identity_provider, [IamRole.owner, IamRole.viewer]],
     [ApiResourceKind.oauth_app, [IamRole.owner, IamRole.viewer]],
+    [ApiResourceKind.platform_client, [IamRole.owner, IamRole.viewer]],
     [ApiResourceKind.organization, [IamRole.owner, IamRole.admin, IamRole.member, IamRole.viewer]],
     [ApiResourceKind.agent, [IamRole.owner, IamRole.viewer]],
     [ApiResourceKind.session, [IamRole.owner, IamRole.viewer]],

package/gen/authorization-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-config.js","sourceRoot":"","sources":["../../src/gen/authorization-config.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqD,IAAI,GAAG,CAAC;IACvF,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3D,CAAC,CAAC"}
+{"version":3,"file":"authorization-config.js","sourceRoot":"","sources":["../../src/gen/authorization-config.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAqD,IAAI,GAAG,CAAC;IACvF,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC,eAAe,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3D,CAAC,CAAC"}

package/gen/client.d.ts

@@ -12,6 +12,7 @@ import { InvitationClient } from "./invitation";
 import { McpServerClient } from "./mcpserver";
 import { OAuthAppClient } from "./oauthapp";
 import { OrganizationClient } from "./organization";
+import { PlatformClientClient } from "./platformclient";
 import { ProjectClient } from "./project";
 import { SessionClient } from "./session";
 import { SkillClient } from "./skill";
@@ -33,6 +34,7 @@ export declare class GeneratedClient {
     readonly mcpServer: McpServerClient;
     readonly oauthapp: OAuthAppClient;
     readonly organization: OrganizationClient;
+    readonly platformclient: PlatformClientClient;
     readonly project: ProjectClient;
     readonly session: SessionClient;
     readonly skill: SkillClient;
@@ -67,6 +69,8 @@ export { OAuthAppClient } from "./oauthapp";
 export { type OAuthAppInput } from "./oauthapp";
 export { OrganizationClient } from "./organization";
 export { type OrganizationInput } from "./organization";
+export { PlatformClientClient } from "./platformclient";
+export { type PlatformClientInput } from "./platformclient";
 export { ProjectClient } from "./project";
 export { type ProjectInput } from "./project";
 export { SessionClient } from "./session";

package/gen/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/gen/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,+DAA+D;AAC/D,qBAAa,eAAe;IAC1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;gBAEtC,SAAS,EAAE,SAAS;CAqBjC;AAGD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAAE,KAAK,yBAAyB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAC1K,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,KAAK,4BAA4B,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAChJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,KAAK,uBAAuB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClK,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACvJ,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7I,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,SAAS,CAAC;AACvJ,OAAO,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/gen/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,+DAA+D;AAC/D,qBAAa,eAAe;IAC1B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;gBAEtC,SAAS,EAAE,SAAS;CAsBjC;AAGD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAAE,KAAK,yBAAyB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAC1K,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,KAAK,4BAA4B,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAChJ,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,KAAK,uBAAuB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAClK,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACvJ,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAE,KAAK,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7I,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,KAAK,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,SAAS,CAAC;AACvJ,OAAO,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC"}

package/gen/client.js

@@ -12,6 +12,7 @@ import { InvitationClient } from "./invitation";
 import { McpServerClient } from "./mcpserver";
 import { OAuthAppClient } from "./oauthapp";
 import { OrganizationClient } from "./organization";
+import { PlatformClientClient } from "./platformclient";
 import { ProjectClient } from "./project";
 import { SessionClient } from "./session";
 import { SkillClient } from "./skill";
@@ -33,6 +34,7 @@ export class GeneratedClient {
     mcpServer;
     oauthapp;
     organization;
+    platformclient;
     project;
     session;
     skill;
@@ -53,6 +55,7 @@ export class GeneratedClient {
         this.mcpServer = new McpServerClient(transport);
         this.oauthapp = new OAuthAppClient(transport);
         this.organization = new OrganizationClient(transport);
+        this.platformclient = new PlatformClientClient(transport);
         this.project = new ProjectClient(transport);
         this.session = new SessionClient(transport);
         this.skill = new SkillClient(transport);
@@ -75,6 +78,7 @@ export { InvitationClient } from "./invitation";
 export { McpServerClient } from "./mcpserver";
 export { OAuthAppClient } from "./oauthapp";
 export { OrganizationClient } from "./organization";
+export { PlatformClientClient } from "./platformclient";
 export { ProjectClient } from "./project";
 export { SessionClient } from "./session";
 export { SkillClient } from "./skill";

package/gen/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/gen/client.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,OAAO,eAAe;IACjB,KAAK,CAAc;IACnB,cAAc,CAAuB;IACrC,aAAa,CAAsB;IACnC,MAAM,CAAe;IACrB,WAAW,CAAoB;IAC/B,gBAAgB,CAAyB;IACzC,SAAS,CAAkB;IAC3B,eAAe,CAAwB;IACvC,gBAAgB,CAAyB;IACzC,UAAU,CAAmB;IAC7B,SAAS,CAAkB;IAC3B,QAAQ,CAAiB;IACzB,YAAY,CAAqB;IACjC,OAAO,CAAgB;IACvB,OAAO,CAAgB;IACvB,KAAK,CAAc;IACnB,QAAQ,CAAiB;IACzB,iBAAiB,CAA0B;IAC3C,gBAAgB,CAAyB;IAElD,YAAY,SAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,eAAe,GAAG,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED,uDAAuD;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAkB,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/gen/client.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,OAAO,eAAe;IACjB,KAAK,CAAc;IACnB,cAAc,CAAuB;IACrC,aAAa,CAAsB;IACnC,MAAM,CAAe;IACrB,WAAW,CAAoB;IAC/B,gBAAgB,CAAyB;IACzC,SAAS,CAAkB;IAC3B,eAAe,CAAwB;IACvC,gBAAgB,CAAyB;IACzC,UAAU,CAAmB;IAC7B,SAAS,CAAkB;IAC3B,QAAQ,CAAiB;IACzB,YAAY,CAAqB;IACjC,cAAc,CAAuB;IACrC,OAAO,CAAgB;IACvB,OAAO,CAAgB;IACvB,KAAK,CAAc;IACnB,QAAQ,CAAiB;IACzB,iBAAiB,CAA0B;IAC3C,gBAAgB,CAAyB;IAElD,YAAY,SAAoB;QAC9B,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,eAAe,GAAG,IAAI,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,cAAc,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,iBAAiB,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;CACF;AAED,uDAAuD;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAG5D,OAAO,EAAE,YAAY,EAAkB,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC"}

package/gen/platformclient.d.ts

@@ -0,0 +1,38 @@
+import { type DeleteResourceInput, type ResourceRef } from "./types";
+import { type Transport } from "@connectrpc/connect";
+import { type PlatformClient } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
+import { type PlatformClientCreateResponse, type ListPlatformClientsByOrgInput, type PlatformClients } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/io_pb";
+import { type MintUserTokenRequest, type MintUserTokenResponse } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+/** Provides operations on platformclient resources. */
+export declare class PlatformClientClient {
+    private readonly command;
+    private readonly query;
+    private readonly token;
+    constructor(transport: Transport);
+    create(input: PlatformClientInput): Promise<PlatformClientCreateResponse>;
+    update(input: PlatformClientInput): Promise<PlatformClient>;
+    delete(input: DeleteResourceInput): Promise<PlatformClient>;
+    rotateSecret(id: string): Promise<PlatformClientCreateResponse>;
+    get(id: string): Promise<PlatformClient>;
+    getByReference(ref: ResourceRef): Promise<PlatformClient>;
+    listByOrg(input: ListPlatformClientsByOrgInput): Promise<PlatformClients>;
+    mintUserToken(input: MintUserTokenRequest): Promise<MintUserTokenResponse>;
+}
+/** Input for creating/updating a PlatformClient. */
+export interface PlatformClientInput {
+    name: string;
+    slug?: string;
+    org: string;
+    labels?: Record<string, string>;
+    clientId?: string;
+    clientSecretHash?: string;
+    secretFingerprint?: string;
+    expiresAt?: Date | string;
+    neverExpires?: boolean;
+    autoProvisionAccounts?: boolean;
+    autoGrantOnOrg?: boolean;
+    autoGrantRole?: IamRole;
+    allowedOrigins?: string[];
+}
+//# sourceMappingURL=platformclient.d.ts.map

package/gen/platformclient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platformclient.d.ts","sourceRoot":"","sources":["../../src/gen/platformclient.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAIhF,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,yDAAyD,CAAC;AAEpH,OAAO,EAA0H,KAAK,4BAA4B,EAAE,KAAK,6BAA6B,EAAE,KAAK,eAAe,EAAE,MAAM,wDAAwD,CAAC;AAG7R,OAAO,EAA0F,KAAK,oBAAoB,EAAE,KAAK,qBAAqB,EAAE,MAAM,2DAA2D,CAAC;AAC1N,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE,uDAAuD;AACvD,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiD;IACzE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;gBAEzD,SAAS,EAAE,SAAS;IAM1B,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAMzE,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAM3D,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC;IAU3D,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAM/D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMxC,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAMzD,SAAS,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,eAAe,CAAC;IAMzE,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAKjF;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B"}

package/gen/platformclient.js

@@ -0,0 +1,117 @@
+// Code generated by stigmer-codegen. DO NOT EDIT.
+import { wrapError } from "./errors";
+import { stripUndefined } from "./proto-utils";
+import { create } from "@bufbuild/protobuf";
+import { createClient } from "@connectrpc/connect";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceIdSchema, ApiResourceReferenceSchema, ApiResourceDeleteInputSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { PlatformClientSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
+import { PlatformClientCommandController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/command_pb";
+import { PlatformClientIdSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/io_pb";
+import { PlatformClientQueryController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/query_pb";
+import { PlatformClientSpecSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/spec_pb";
+import { PlatformClientTokenController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+/** Provides operations on platformclient resources. */
+export class PlatformClientClient {
+    command;
+    query;
+    token;
+    constructor(transport) {
+        this.command = createClient(PlatformClientCommandController, transport);
+        this.query = createClient(PlatformClientQueryController, transport);
+        this.token = createClient(PlatformClientTokenController, transport);
+    }
+    async create(input) {
+        try {
+            return await this.command.create(buildPlatformClientProto(input));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async update(input) {
+        try {
+            return await this.command.update(buildPlatformClientProto(input));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async delete(input) {
+        try {
+            return await this.command.delete(create(ApiResourceDeleteInputSchema, {
+                resourceId: input.resourceId,
+                versionMessage: input.versionMessage,
+                force: input.force,
+            }));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async rotateSecret(id) {
+        try {
+            return await this.command.rotateSecret(create(PlatformClientIdSchema, { value: id }));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async get(id) {
+        try {
+            return await this.query.get(create(ApiResourceIdSchema, { value: id }));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async getByReference(ref) {
+        try {
+            return await this.query.getByReference(create(ApiResourceReferenceSchema, { ...ref, kind: ApiResourceKind.platform_client }));
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async listByOrg(input) {
+        try {
+            return await this.query.listByOrg(input);
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+    async mintUserToken(input) {
+        try {
+            return await this.token.mintUserToken(input);
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+}
+function buildPlatformClientProto(input) {
+    return Object.assign(create(PlatformClientSchema), {
+        apiVersion: "iam.stigmer.ai/v1",
+        kind: "PlatformClient",
+        metadata: Object.assign(create(ApiResourceMetadataSchema), {
+            name: input.name,
+            org: input.org,
+            ...(input.slug && { slug: input.slug }),
+            ...(input.labels && { labels: input.labels }),
+        }),
+        spec: Object.assign(create(PlatformClientSpecSchema), stripUndefined({
+            clientId: input.clientId,
+            clientSecretHash: input.clientSecretHash,
+            secretFingerprint: input.secretFingerprint,
+            expiresAt: input.expiresAt,
+            neverExpires: input.neverExpires,
+            autoProvisionAccounts: input.autoProvisionAccounts,
+            autoGrantOnOrg: input.autoGrantOnOrg,
+            autoGrantRole: input.autoGrantRole,
+            allowedOrigins: input.allowedOrigins,
+        })),
+    });
+}
+//# sourceMappingURL=platformclient.js.map

package/gen/platformclient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platformclient.js","sourceRoot":"","sources":["../../src/gen/platformclient.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAA+B,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AACrJ,OAAO,EAAE,yBAAyB,EAAE,MAAM,4DAA4D,CAAC;AACvG,OAAO,EAAE,oBAAoB,EAAuB,MAAM,yDAAyD,CAAC;AACpH,OAAO,EAAE,+BAA+B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,EAAsC,sBAAsB,EAA2J,MAAM,wDAAwD,CAAC;AAC7R,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AACpG,OAAO,EAAE,6BAA6B,EAAkH,MAAM,2DAA2D,CAAC;AAG1N,uDAAuD;AACvD,MAAM,OAAO,oBAAoB;IACd,OAAO,CAAiD;IACxD,KAAK,CAA+C;IACpD,KAAK,CAA+C;IAErE,YAAY,SAAoB;QAC9B,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,+BAA+B,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,4BAA4B,EAAE;gBACpE,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAgB;QACnC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,0BAA0B,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAChI,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAoC;QAClD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA2B;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;CACF;AAmBD,SAAS,wBAAwB,CAAC,KAA0B;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE;QACjD,UAAU,EAAE,mBAAmB;QAC/B,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE;YACzD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAC9C,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAAE,cAAc,CAAC;YACnE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;YAClD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;KACJ,CAAmB,CAAC;AACvB,CAAC"}

package/gen/resource-availability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-availability.d.ts","sourceRoot":"","sources":["../../src/gen/resource-availability.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,eAAe,CASxD,CAAC"}
+{"version":3,"file":"resource-availability.d.ts","sourceRoot":"","sources":["../../src/gen/resource-availability.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,eAAe,CAUxD,CAAC"}

package/gen/resource-availability.js

@@ -14,6 +14,7 @@ export const CLOUD_ONLY_KINDS = new Set([
     ApiResourceKind.invitation,
     ApiResourceKind.identity_provider,
     ApiResourceKind.oauth_app,
+    ApiResourceKind.platform_client,
     ApiResourceKind.platform,
 ]);
 //# sourceMappingURL=resource-availability.js.map

package/gen/resource-availability.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-availability.js","sourceRoot":"","sources":["../../src/gen/resource-availability.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiC,IAAI,GAAG,CAAC;IACpE,eAAe,CAAC,oBAAoB;IACpC,eAAe,CAAC,UAAU;IAC1B,eAAe,CAAC,gBAAgB;IAChC,eAAe,CAAC,OAAO;IACvB,eAAe,CAAC,UAAU;IAC1B,eAAe,CAAC,iBAAiB;IACjC,eAAe,CAAC,SAAS;IACzB,eAAe,CAAC,QAAQ;CACzB,CAAC,CAAC"}
+{"version":3,"file":"resource-availability.js","sourceRoot":"","sources":["../../src/gen/resource-availability.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AAEtH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiC,IAAI,GAAG,CAAC;IACpE,eAAe,CAAC,oBAAoB;IACpC,eAAe,CAAC,UAAU;IAC1B,eAAe,CAAC,gBAAgB;IAChC,eAAe,CAAC,OAAO;IACvB,eAAe,CAAC,UAAU;IAC1B,eAAe,CAAC,iBAAiB;IACjC,eAAe,CAAC,SAAS;IACzB,eAAe,CAAC,eAAe;IAC/B,eAAe,CAAC,QAAQ;CACzB,CAAC,CAAC"}

package/index.d.ts

@@ -21,6 +21,7 @@ export { IdentityProviderClient, type IdentityProviderInput, } from "./gen/ident
 export { OAuthAppClient, type OAuthAppInput, } from "./gen/oauthapp";
 export { McpServerClient, type McpServerInput, type StdioServerConfigInput, type HttpServerConfigInput, type ToolApprovalPolicyInput, } from "./gen/mcpserver";
 export { OrganizationClient, type OrganizationInput, } from "./gen/organization";
+export { PlatformClientClient, type PlatformClientInput, } from "./gen/platformclient";
 export { ProjectClient, type ProjectInput } from "./gen/project";
 export { SessionClient, type SessionInput, type WorkspaceEntryInput, type WorkspaceSourceInput, type GitRepoSourceInput, type LocalPathSourceInput, } from "./gen/session";
 export { PENDING_SUBJECT, resolvedSubject } from "./session";

package/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAGlE,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,KAAK,aAAa,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,cAAc,GACf,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,cAAc,EACnB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAGpE,OAAO,EACL,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,eAAe,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,YAAY,EACZ,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,WAAW,EACX,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,EACd,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAGlE,OAAO,EACL,YAAY,EACZ,KAAK,SAAS,EACd,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,KAAK,aAAa,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,cAAc,GACf,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,cAAc,EACnB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAGpE,OAAO,EACL,YAAY,EACZ,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,eAAe,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,YAAY,EACZ,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,GACxB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,WAAW,EAChB,KAAK,IAAI,EACT,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,WAAW,EACX,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,iBAAiB,EACjB,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,KAAK,oBAAoB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,EACd,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,GAC7B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,GAC1B,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,EACvB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC"}

package/index.js

@@ -27,6 +27,7 @@ export { IdentityProviderClient, } from "./gen/identityprovider";
 export { OAuthAppClient, } from "./gen/oauthapp";
 export { McpServerClient, } from "./gen/mcpserver";
 export { OrganizationClient, } from "./gen/organization";
+export { PlatformClientClient, } from "./gen/platformclient";
 export { ProjectClient } from "./gen/project";
 export { SessionClient, } from "./gen/session";
 // Session utilities (hand-written)

package/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,mBAAmB;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,iBAAiB;AACjB,OAAO,EACL,YAAY,EAEZ,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EAEX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EAEd,gBAAgB,EAChB,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,wBAAwB;AACxB,OAAO,EAEL,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,8CAA8C;AAC9C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE,gBAAgB;AAChB,OAAO,EACL,YAAY,EAGZ,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,sBAAsB;AACtB,OAAO,EACL,YAAY,GAKb,MAAM,UAAU,CAAC;AAalB,wDAAwD;AACxD,OAAO,EACL,WAAW,GAMZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,GAKrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAoB,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,GAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,GAEjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,GAEf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,GAKhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,aAAa,GAMd,MAAM,eAAe,CAAC;AAEvB,mCAAmC;AACnC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAC3D,OAAO,EACL,cAAc,GAMf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,GAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8BAA8B;AAE9B,mBAAmB;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,iBAAiB;AACjB,OAAO,EACL,YAAY,EAEZ,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EAEX,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EAEd,gBAAgB,EAChB,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,wBAAwB;AACxB,OAAO,EAEL,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,8CAA8C;AAC9C,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,MAAM,2CAA2C,CAAC;AAEpE,gBAAgB;AAChB,OAAO,EACL,YAAY,EAGZ,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,sBAAsB;AACtB,OAAO,EACL,YAAY,GAKb,MAAM,UAAU,CAAC;AAalB,wDAAwD;AACxD,OAAO,EACL,WAAW,GAMZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,GAKrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAoB,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,iBAAiB,GAElB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,eAAe,GAGhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,GAEtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,GAEjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,cAAc,GAEf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,GAKhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AACjE,OAAO,EACL,aAAa,GAMd,MAAM,eAAe,CAAC;AAEvB,mCAAmC;AACnC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAmB,MAAM,aAAa,CAAC;AAC3D,OAAO,EACL,cAAc,GAMf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,GAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,sBAAsB,GAEvB,MAAM,wBAAwB,CAAC"}

package/node.d.ts

@@ -1,5 +1,6 @@
 import type { Transport } from "@connectrpc/connect";
 import { Stigmer, type TokenProvider } from "./index";
+export { createPlatformClientAuth, PlatformClientAuth, type PlatformClientAuthConfig, type MintUserTokenInput, type MintUserTokenResult, } from "./platform-client-auth";
 /**
  * Configuration for creating a Node.js-compatible Stigmer client.
  *

package/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAOtD;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,iDAAiD;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAgBvE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CASlE"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,SAAS,CAAC;AAOtD,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,iDAAiD;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;CACzC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAgBvE;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CASlE"}

package/node.js

@@ -1,6 +1,7 @@
 import { createGrpcWebTransport } from "@connectrpc/connect-node";
 import { Stigmer } from "./index";
 import { createAuthInterceptor, rpcMetadataInterceptor, errorStripInterceptor, } from "./internal/interceptors";
+export { createPlatformClientAuth, PlatformClientAuth, } from "./platform-client-auth";
 /**
  * Create a gRPC-web transport for Node.js using native HTTP/2.
  *

package/node.js.map

@@ -1 +1 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,OAAO,EAAsB,MAAM,SAAS,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAoBjC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,aAAa,GAAkB,MAAM,CAAC,MAAM;QAChD,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAO;QACtB,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAE1C,MAAM,YAAY,GAAkB;QAClC,qBAAqB,CAAC,aAAa,CAAC;QACpC,sBAAsB;QACtB,qBAAqB;KACtB,CAAC;IAEF,OAAO,sBAAsB,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,GAAG;QAChB,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE9C,OAAO,IAAI,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,eAAe,EAAE,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,OAAO,EAAsB,MAAM,SAAS,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,GAInB,MAAM,wBAAwB,CAAC;AAoBhC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,aAAa,GAAkB,MAAM,CAAC,MAAM;QAChD,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAO;QACtB,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAE1C,MAAM,YAAY,GAAkB;QAClC,qBAAqB,CAAC,aAAa,CAAC;QACpC,sBAAsB;QACtB,qBAAqB;KACtB,CAAC;IAEF,OAAO,sBAAsB,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,WAAW,EAAE,GAAG;QAChB,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE9C,OAAO,IAAI,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,eAAe,EAAE,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/sdk",
-  "version": "0.0.89",
+  "version": "0.0.91",
   "description": "Stigmer TypeScript SDK — typed API client for all Stigmer platform resources",
   "license": "Apache-2.0",
   "type": "module",
@@ -40,6 +40,6 @@
   "peerDependencies": {
     "@bufbuild/protobuf": "^2.0.0",
     "@connectrpc/connect-node": "^2.0.0",
-    "@stigmer/protos": "0.0.89"
+    "@stigmer/protos": "0.0.91"
   }
 }

package/platform-client-auth.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Configuration for a PlatformClient token-minting helper.
+ *
+ * This is NOT a general-purpose Stigmer client — it mints user-scoped
+ * JWTs from a backend service. The returned tokens are passed to the
+ * React SDK's `StigmerProvider` via `getAccessToken`.
+ *
+ * @example
+ * ```typescript
+ * import { createPlatformClientAuth } from "@stigmer/sdk/node";
+ *
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ * ```
+ */
+export interface PlatformClientAuthConfig {
+    /** Stigmer API server URL (e.g., "https://api.stigmer.ai"). */
+    readonly baseUrl: string;
+    /** PlatformClient client_id (stgm_cid_ prefix). */
+    readonly clientId: string;
+    /** PlatformClient client_secret (stgm_cs_ prefix). Server-only — never expose in browser code. */
+    readonly clientSecret: string;
+}
+/**
+ * Input for minting a user-scoped Stigmer JWT.
+ *
+ * The platform builder's backend calls this with the authenticated
+ * user's identity. Stigmer validates the PlatformClient credentials,
+ * optionally JIT-provisions the user's identity account, and returns
+ * a signed JWT.
+ */
+export interface MintUserTokenInput {
+    /** Platform's stable user identifier. Becomes the JWT sub claim. */
+    readonly userId: string;
+    /** User's email address. Used for profile enrichment during JIT provisioning. */
+    readonly userEmail?: string;
+    /** User's display name. Used for profile enrichment during JIT provisioning. */
+    readonly userName?: string;
+    /**
+     * Organization to scope the token to. When empty, defaults to the
+     * PlatformClient's owning organization.
+     */
+    readonly orgId?: string;
+}
+/**
+ * Result of a successful `mintUserToken` call.
+ *
+ * Pass `accessToken` to the React SDK's `StigmerProvider` via the
+ * `getAccessToken` callback to authenticate browser-based API calls.
+ */
+export interface MintUserTokenResult {
+    /** Stigmer-signed JWT for browser-based API authentication. */
+    readonly accessToken: string;
+    /** Token type. Always "Bearer". */
+    readonly tokenType: string;
+    /** Token lifetime in seconds from issuance. */
+    readonly expiresIn: number;
+    /** Absolute expiration time, computed from `expiresIn` at call time. */
+    readonly expiresAt: Date;
+}
+/**
+ * PlatformClient token-minting helper.
+ *
+ * A minimal, purpose-built client for minting Stigmer user JWTs from
+ * a backend service. It does NOT replace the main Stigmer client — use
+ * `createNodeClient` for resource management with an API key.
+ *
+ * @example
+ * ```typescript
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ *
+ * // In your /api/stigmer-token endpoint handler:
+ * const { accessToken, expiresAt } = await auth.mintUserToken({
+ *   userId: req.user.id,
+ *   userEmail: req.user.email,
+ *   userName: req.user.name,
+ * });
+ * res.json({ accessToken, expiresAt: expiresAt.toISOString() });
+ * ```
+ */
+export declare class PlatformClientAuth {
+    private readonly tokenClient;
+    private readonly clientId;
+    private readonly clientSecret;
+    /** @internal Use {@link createPlatformClientAuth} instead. */
+    constructor(config: PlatformClientAuthConfig);
+    /**
+     * Mint a user-scoped JWT for browser-based access to Stigmer resources.
+     *
+     * @throws {StigmerError} with code `"unauthenticated"` if credentials are invalid
+     * @throws {StigmerError} with code `"not-found"` if the user doesn't exist and JIT provisioning is disabled
+     * @throws {StigmerError} with code `"failed-precondition"` if the client secret has expired
+     * @throws {StigmerError} with code `"permission-denied"` if the request origin is not in allowed_origins
+     */
+    mintUserToken(input: MintUserTokenInput): Promise<MintUserTokenResult>;
+}
+/**
+ * Create a PlatformClient token-minting helper for Node.js backends.
+ *
+ * This is the recommended way to mint Stigmer user JWTs from a platform
+ * builder's backend. The returned tokens are passed to the React SDK's
+ * `StigmerProvider` via `getAccessToken`.
+ *
+ * @example
+ * ```typescript
+ * import { createPlatformClientAuth } from "@stigmer/sdk/node";
+ *
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ *
+ * const { accessToken, expiresAt } = await auth.mintUserToken({
+ *   userId: "user-123",
+ *   userEmail: "jane@acme.com",
+ *   userName: "Jane Doe",
+ * });
+ * ```
+ *
+ * @throws {Error} if `baseUrl`, `clientId`, or `clientSecret` is missing or empty
+ */
+export declare function createPlatformClientAuth(config: PlatformClientAuthConfig): PlatformClientAuth;
+//# sourceMappingURL=platform-client-auth.d.ts.map

package/platform-client-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-client-auth.d.ts","sourceRoot":"","sources":["../src/platform-client-auth.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,wBAAwB;IACvC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,iFAAiF;IACjF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,mCAAmC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+C;IAC3E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IAEtC,8DAA8D;gBAClD,MAAM,EAAE,wBAAwB;IAa5C;;;;;;;OAOG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA+B7E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,kBAAkB,CAmBpB"}

package/platform-client-auth.js

@@ -0,0 +1,119 @@
+import { createGrpcWebTransport } from "@connectrpc/connect-node";
+import { createClient } from "@connectrpc/connect";
+import { create } from "@bufbuild/protobuf";
+import { PlatformClientTokenController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { MintUserTokenRequestSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { StigmerError, wrapError } from "./gen/errors";
+import { rpcMetadataInterceptor, errorStripInterceptor, } from "./internal/interceptors";
+/**
+ * PlatformClient token-minting helper.
+ *
+ * A minimal, purpose-built client for minting Stigmer user JWTs from
+ * a backend service. It does NOT replace the main Stigmer client — use
+ * `createNodeClient` for resource management with an API key.
+ *
+ * @example
+ * ```typescript
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ *
+ * // In your /api/stigmer-token endpoint handler:
+ * const { accessToken, expiresAt } = await auth.mintUserToken({
+ *   userId: req.user.id,
+ *   userEmail: req.user.email,
+ *   userName: req.user.name,
+ * });
+ * res.json({ accessToken, expiresAt: expiresAt.toISOString() });
+ * ```
+ */
+export class PlatformClientAuth {
+    tokenClient;
+    clientId;
+    clientSecret;
+    /** @internal Use {@link createPlatformClientAuth} instead. */
+    constructor(config) {
+        this.clientId = config.clientId;
+        this.clientSecret = config.clientSecret;
+        const transport = createGrpcWebTransport({
+            baseUrl: config.baseUrl,
+            httpVersion: "2",
+            interceptors: [rpcMetadataInterceptor, errorStripInterceptor],
+        });
+        this.tokenClient = createClient(PlatformClientTokenController, transport);
+    }
+    /**
+     * Mint a user-scoped JWT for browser-based access to Stigmer resources.
+     *
+     * @throws {StigmerError} with code `"unauthenticated"` if credentials are invalid
+     * @throws {StigmerError} with code `"not-found"` if the user doesn't exist and JIT provisioning is disabled
+     * @throws {StigmerError} with code `"failed-precondition"` if the client secret has expired
+     * @throws {StigmerError} with code `"permission-denied"` if the request origin is not in allowed_origins
+     */
+    async mintUserToken(input) {
+        if (!input.userId) {
+            throw new StigmerError("invalid-argument", "mintUserToken: userId is required — this is the platform's stable identifier for the user", 3);
+        }
+        try {
+            const response = await this.tokenClient.mintUserToken(create(MintUserTokenRequestSchema, {
+                clientId: this.clientId,
+                clientSecret: this.clientSecret,
+                userId: input.userId,
+                userEmail: input.userEmail ?? "",
+                userName: input.userName ?? "",
+                orgId: input.orgId ?? "",
+            }));
+            return {
+                accessToken: response.accessToken,
+                tokenType: response.tokenType,
+                expiresIn: response.expiresIn,
+                expiresAt: new Date(Date.now() + response.expiresIn * 1000),
+            };
+        }
+        catch (e) {
+            throw wrapError(e);
+        }
+    }
+}
+/**
+ * Create a PlatformClient token-minting helper for Node.js backends.
+ *
+ * This is the recommended way to mint Stigmer user JWTs from a platform
+ * builder's backend. The returned tokens are passed to the React SDK's
+ * `StigmerProvider` via `getAccessToken`.
+ *
+ * @example
+ * ```typescript
+ * import { createPlatformClientAuth } from "@stigmer/sdk/node";
+ *
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ *
+ * const { accessToken, expiresAt } = await auth.mintUserToken({
+ *   userId: "user-123",
+ *   userEmail: "jane@acme.com",
+ *   userName: "Jane Doe",
+ * });
+ * ```
+ *
+ * @throws {Error} if `baseUrl`, `clientId`, or `clientSecret` is missing or empty
+ */
+export function createPlatformClientAuth(config) {
+    if (!config.baseUrl) {
+        throw new Error("createPlatformClientAuth: baseUrl is required (e.g., \"https://api.stigmer.ai\")");
+    }
+    if (!config.clientId) {
+        throw new Error("createPlatformClientAuth: clientId is required — find it in the Stigmer Console under IAM > Platform Clients");
+    }
+    if (!config.clientSecret) {
+        throw new Error("createPlatformClientAuth: clientSecret is required — the secret is shown once at creation time. " +
+            "If lost, rotate the secret via the Console or CLI");
+    }
+    return new PlatformClientAuth(config);
+}
+//# sourceMappingURL=platform-client-auth.js.map

package/platform-client-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-client-auth.js","sourceRoot":"","sources":["../src/platform-client-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,2DAA2D,CAAC;AAC1G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2DAA2D,CAAC;AACvG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AA4EjC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,kBAAkB;IACZ,WAAW,CAA+C;IAC1D,QAAQ,CAAS;IACjB,YAAY,CAAS;IAEtC,8DAA8D;IAC9D,YAAY,MAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QAExC,MAAM,SAAS,GAAG,sBAAsB,CAAC;YACvC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,GAAG;YAChB,YAAY,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC;SAC9D,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,6BAA6B,EAAE,SAAS,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,YAAY,CACpB,kBAAkB,EAClB,2FAA2F,EAC3F,CAAC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CACnD,MAAM,CAAC,0BAA0B,EAAE;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;gBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;aACzB,CAAC,CACH,CAAC;YAEF,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;aAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,SAAS,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAgC;IAEhC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,kGAAkG;YAChG,mDAAmD,CACtD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC"}

package/src/__tests__/platform-client-auth.test.ts

@@ -0,0 +1,76 @@
+import { describe, it, expect } from "vitest";
+import {
+  createPlatformClientAuth,
+  PlatformClientAuth,
+} from "../platform-client-auth";
+
+describe("createPlatformClientAuth", () => {
+  it("throws when baseUrl is missing", () => {
+    expect(() =>
+      createPlatformClientAuth({
+        baseUrl: "",
+        clientId: "stgm_cid_abc",
+        clientSecret: "stgm_cs_xyz",
+      }),
+    ).toThrow("baseUrl is required");
+  });
+
+  it("throws when clientId is missing", () => {
+    expect(() =>
+      createPlatformClientAuth({
+        baseUrl: "https://api.stigmer.ai",
+        clientId: "",
+        clientSecret: "stgm_cs_xyz",
+      }),
+    ).toThrow("clientId is required");
+  });
+
+  it("throws when clientSecret is missing", () => {
+    expect(() =>
+      createPlatformClientAuth({
+        baseUrl: "https://api.stigmer.ai",
+        clientId: "stgm_cid_abc",
+        clientSecret: "",
+      }),
+    ).toThrow("clientSecret is required");
+  });
+
+  it("returns a PlatformClientAuth instance with valid config", () => {
+    const auth = createPlatformClientAuth({
+      baseUrl: "https://api.stigmer.ai",
+      clientId: "stgm_cid_abc",
+      clientSecret: "stgm_cs_xyz",
+    });
+    expect(auth).toBeInstanceOf(PlatformClientAuth);
+  });
+});
+
+describe("PlatformClientAuth.mintUserToken", () => {
+  it("throws StigmerError when userId is empty", async () => {
+    const auth = createPlatformClientAuth({
+      baseUrl: "https://api.stigmer.ai",
+      clientId: "stgm_cid_abc",
+      clientSecret: "stgm_cs_xyz",
+    });
+
+    await expect(
+      auth.mintUserToken({ userId: "" }),
+    ).rejects.toThrow("userId is required");
+  });
+
+  it("throws StigmerError with invalid-argument code when userId is empty", async () => {
+    const auth = createPlatformClientAuth({
+      baseUrl: "https://api.stigmer.ai",
+      clientId: "stgm_cid_abc",
+      clientSecret: "stgm_cs_xyz",
+    });
+
+    try {
+      await auth.mintUserToken({ userId: "" });
+      expect.fail("should have thrown");
+    } catch (e: unknown) {
+      expect(e).toHaveProperty("code", "invalid-argument");
+      expect(e).toHaveProperty("name", "StigmerError");
+    }
+  });
+});

package/src/gen/authorization-config.ts

@@ -16,6 +16,7 @@ import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
 export const GRANTABLE_ROLES: ReadonlyMap<ApiResourceKind, readonly IamRole[]> = new Map([
   [ApiResourceKind.identity_provider, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.oauth_app, [IamRole.owner, IamRole.viewer]],
+  [ApiResourceKind.platform_client, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.organization, [IamRole.owner, IamRole.admin, IamRole.member, IamRole.viewer]],
   [ApiResourceKind.agent, [IamRole.owner, IamRole.viewer]],
   [ApiResourceKind.session, [IamRole.owner, IamRole.viewer]],

package/src/gen/client.ts

@@ -14,6 +14,7 @@ import { InvitationClient } from "./invitation";
 import { McpServerClient } from "./mcpserver";
 import { OAuthAppClient } from "./oauthapp";
 import { OrganizationClient } from "./organization";
+import { PlatformClientClient } from "./platformclient";
 import { ProjectClient } from "./project";
 import { SessionClient } from "./session";
 import { SkillClient } from "./skill";
@@ -36,6 +37,7 @@ export class GeneratedClient {
   readonly mcpServer: McpServerClient;
   readonly oauthapp: OAuthAppClient;
   readonly organization: OrganizationClient;
+  readonly platformclient: PlatformClientClient;
   readonly project: ProjectClient;
   readonly session: SessionClient;
   readonly skill: SkillClient;
@@ -57,6 +59,7 @@ export class GeneratedClient {
     this.mcpServer = new McpServerClient(transport);
     this.oauthapp = new OAuthAppClient(transport);
     this.organization = new OrganizationClient(transport);
+    this.platformclient = new PlatformClientClient(transport);
     this.project = new ProjectClient(transport);
     this.session = new SessionClient(transport);
     this.skill = new SkillClient(transport);
@@ -93,6 +96,8 @@ export { OAuthAppClient } from "./oauthapp";
 export { type OAuthAppInput } from "./oauthapp";
 export { OrganizationClient } from "./organization";
 export { type OrganizationInput } from "./organization";
+export { PlatformClientClient } from "./platformclient";
+export { type PlatformClientInput } from "./platformclient";
 export { ProjectClient } from "./project";
 export { type ProjectInput } from "./project";
 export { SessionClient } from "./session";

package/src/gen/platformclient.ts

@@ -0,0 +1,123 @@
+// Code generated by stigmer-codegen. DO NOT EDIT.
+
+import { wrapError } from "./errors";
+import { stripUndefined } from "./proto-utils";
+import { type DeleteResourceInput, type ResourceRef } from "./types";
+import { create } from "@bufbuild/protobuf";
+import { createClient, type Client, type Transport } from "@connectrpc/connect";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { ApiResourceIdSchema, ApiResourceReferenceSchema, ApiResourceDeleteInputSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/io_pb";
+import { ApiResourceMetadataSchema } from "@stigmer/protos/ai/stigmer/commons/apiresource/metadata_pb";
+import { PlatformClientSchema, type PlatformClient } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/api_pb";
+import { PlatformClientCommandController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/command_pb";
+import { PlatformClientCreateResponseSchema, PlatformClientIdSchema, ListPlatformClientsByOrgInputSchema, PlatformClientsSchema, type PlatformClientCreateResponse, type ListPlatformClientsByOrgInput, type PlatformClients } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/io_pb";
+import { PlatformClientQueryController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/query_pb";
+import { PlatformClientSpecSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/spec_pb";
+import { PlatformClientTokenController, MintUserTokenRequestSchema, MintUserTokenResponseSchema, type MintUserTokenRequest, type MintUserTokenResponse } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { IamRole } from "@stigmer/protos/ai/stigmer/iam/v1/enum_pb";
+
+/** Provides operations on platformclient resources. */
+export class PlatformClientClient {
+  private readonly command: Client<typeof PlatformClientCommandController>;
+  private readonly query: Client<typeof PlatformClientQueryController>;
+  private readonly token: Client<typeof PlatformClientTokenController>;
+
+  constructor(transport: Transport) {
+    this.command = createClient(PlatformClientCommandController, transport);
+    this.query = createClient(PlatformClientQueryController, transport);
+    this.token = createClient(PlatformClientTokenController, transport);
+  }
+
+  async create(input: PlatformClientInput): Promise<PlatformClientCreateResponse> {
+    try {
+      return await this.command.create(buildPlatformClientProto(input));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async update(input: PlatformClientInput): Promise<PlatformClient> {
+    try {
+      return await this.command.update(buildPlatformClientProto(input));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async delete(input: DeleteResourceInput): Promise<PlatformClient> {
+    try {
+      return await this.command.delete(create(ApiResourceDeleteInputSchema, {
+        resourceId: input.resourceId,
+        versionMessage: input.versionMessage,
+        force: input.force,
+      }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async rotateSecret(id: string): Promise<PlatformClientCreateResponse> {
+    try {
+      return await this.command.rotateSecret(create(PlatformClientIdSchema, { value: id }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async get(id: string): Promise<PlatformClient> {
+    try {
+      return await this.query.get(create(ApiResourceIdSchema, { value: id }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async getByReference(ref: ResourceRef): Promise<PlatformClient> {
+    try {
+      return await this.query.getByReference(create(ApiResourceReferenceSchema, { ...ref, kind: ApiResourceKind.platform_client }));
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async listByOrg(input: ListPlatformClientsByOrgInput): Promise<PlatformClients> {
+    try {
+      return await this.query.listByOrg(input);
+    } catch (e) { throw wrapError(e); }
+  }
+
+  async mintUserToken(input: MintUserTokenRequest): Promise<MintUserTokenResponse> {
+    try {
+      return await this.token.mintUserToken(input);
+    } catch (e) { throw wrapError(e); }
+  }
+}
+
+/** Input for creating/updating a PlatformClient. */
+export interface PlatformClientInput {
+  name: string;
+  slug?: string;
+  org: string;
+  labels?: Record<string, string>;
+  clientId?: string;
+  clientSecretHash?: string;
+  secretFingerprint?: string;
+  expiresAt?: Date | string;
+  neverExpires?: boolean;
+  autoProvisionAccounts?: boolean;
+  autoGrantOnOrg?: boolean;
+  autoGrantRole?: IamRole;
+  allowedOrigins?: string[];
+}
+
+function buildPlatformClientProto(input: PlatformClientInput): PlatformClient {
+  return Object.assign(create(PlatformClientSchema), {
+    apiVersion: "iam.stigmer.ai/v1",
+    kind: "PlatformClient",
+    metadata: Object.assign(create(ApiResourceMetadataSchema), {
+      name: input.name,
+      org: input.org,
+      ...(input.slug && { slug: input.slug }),
+      ...(input.labels && { labels: input.labels }),
+    }),
+    spec: Object.assign(create(PlatformClientSpecSchema), stripUndefined({
+      clientId: input.clientId,
+      clientSecretHash: input.clientSecretHash,
+      secretFingerprint: input.secretFingerprint,
+      expiresAt: input.expiresAt,
+      neverExpires: input.neverExpires,
+      autoProvisionAccounts: input.autoProvisionAccounts,
+      autoGrantOnOrg: input.autoGrantOnOrg,
+      autoGrantRole: input.autoGrantRole,
+      allowedOrigins: input.allowedOrigins,
+    })),
+  }) as PlatformClient;
+}

package/src/gen/resource-availability.ts

@@ -16,5 +16,6 @@ export const CLOUD_ONLY_KINDS: ReadonlySet<ApiResourceKind> = new Set([
   ApiResourceKind.invitation,
   ApiResourceKind.identity_provider,
   ApiResourceKind.oauth_app,
+  ApiResourceKind.platform_client,
   ApiResourceKind.platform,
 ]);

package/src/index.ts

@@ -133,6 +133,10 @@ export {
   OrganizationClient,
   type OrganizationInput,
 } from "./gen/organization";
+export {
+  PlatformClientClient,
+  type PlatformClientInput,
+} from "./gen/platformclient";
 export { ProjectClient, type ProjectInput } from "./gen/project";
 export {
   SessionClient,

package/src/node.ts

@@ -7,6 +7,14 @@ import {
   errorStripInterceptor,
 } from "./internal/interceptors";
 
+export {
+  createPlatformClientAuth,
+  PlatformClientAuth,
+  type PlatformClientAuthConfig,
+  type MintUserTokenInput,
+  type MintUserTokenResult,
+} from "./platform-client-auth";
+
 /**
  * Configuration for creating a Node.js-compatible Stigmer client.
  *

package/src/platform-client-auth.ts

@@ -0,0 +1,217 @@
+import { createGrpcWebTransport } from "@connectrpc/connect-node";
+import { createClient, type Client } from "@connectrpc/connect";
+import { create } from "@bufbuild/protobuf";
+import { PlatformClientTokenController } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { MintUserTokenRequestSchema } from "@stigmer/protos/ai/stigmer/iam/platformclient/v1/token_pb";
+import { StigmerError, wrapError } from "./gen/errors";
+import {
+  rpcMetadataInterceptor,
+  errorStripInterceptor,
+} from "./internal/interceptors";
+
+/**
+ * Configuration for a PlatformClient token-minting helper.
+ *
+ * This is NOT a general-purpose Stigmer client — it mints user-scoped
+ * JWTs from a backend service. The returned tokens are passed to the
+ * React SDK's `StigmerProvider` via `getAccessToken`.
+ *
+ * @example
+ * ```typescript
+ * import { createPlatformClientAuth } from "@stigmer/sdk/node";
+ *
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ * ```
+ */
+export interface PlatformClientAuthConfig {
+  /** Stigmer API server URL (e.g., "https://api.stigmer.ai"). */
+  readonly baseUrl: string;
+
+  /** PlatformClient client_id (stgm_cid_ prefix). */
+  readonly clientId: string;
+
+  /** PlatformClient client_secret (stgm_cs_ prefix). Server-only — never expose in browser code. */
+  readonly clientSecret: string;
+}
+
+/**
+ * Input for minting a user-scoped Stigmer JWT.
+ *
+ * The platform builder's backend calls this with the authenticated
+ * user's identity. Stigmer validates the PlatformClient credentials,
+ * optionally JIT-provisions the user's identity account, and returns
+ * a signed JWT.
+ */
+export interface MintUserTokenInput {
+  /** Platform's stable user identifier. Becomes the JWT sub claim. */
+  readonly userId: string;
+
+  /** User's email address. Used for profile enrichment during JIT provisioning. */
+  readonly userEmail?: string;
+
+  /** User's display name. Used for profile enrichment during JIT provisioning. */
+  readonly userName?: string;
+
+  /**
+   * Organization to scope the token to. When empty, defaults to the
+   * PlatformClient's owning organization.
+   */
+  readonly orgId?: string;
+}
+
+/**
+ * Result of a successful `mintUserToken` call.
+ *
+ * Pass `accessToken` to the React SDK's `StigmerProvider` via the
+ * `getAccessToken` callback to authenticate browser-based API calls.
+ */
+export interface MintUserTokenResult {
+  /** Stigmer-signed JWT for browser-based API authentication. */
+  readonly accessToken: string;
+
+  /** Token type. Always "Bearer". */
+  readonly tokenType: string;
+
+  /** Token lifetime in seconds from issuance. */
+  readonly expiresIn: number;
+
+  /** Absolute expiration time, computed from `expiresIn` at call time. */
+  readonly expiresAt: Date;
+}
+
+/**
+ * PlatformClient token-minting helper.
+ *
+ * A minimal, purpose-built client for minting Stigmer user JWTs from
+ * a backend service. It does NOT replace the main Stigmer client — use
+ * `createNodeClient` for resource management with an API key.
+ *
+ * @example
+ * ```typescript
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ *
+ * // In your /api/stigmer-token endpoint handler:
+ * const { accessToken, expiresAt } = await auth.mintUserToken({
+ *   userId: req.user.id,
+ *   userEmail: req.user.email,
+ *   userName: req.user.name,
+ * });
+ * res.json({ accessToken, expiresAt: expiresAt.toISOString() });
+ * ```
+ */
+export class PlatformClientAuth {
+  private readonly tokenClient: Client<typeof PlatformClientTokenController>;
+  private readonly clientId: string;
+  private readonly clientSecret: string;
+
+  /** @internal Use {@link createPlatformClientAuth} instead. */
+  constructor(config: PlatformClientAuthConfig) {
+    this.clientId = config.clientId;
+    this.clientSecret = config.clientSecret;
+
+    const transport = createGrpcWebTransport({
+      baseUrl: config.baseUrl,
+      httpVersion: "2",
+      interceptors: [rpcMetadataInterceptor, errorStripInterceptor],
+    });
+
+    this.tokenClient = createClient(PlatformClientTokenController, transport);
+  }
+
+  /**
+   * Mint a user-scoped JWT for browser-based access to Stigmer resources.
+   *
+   * @throws {StigmerError} with code `"unauthenticated"` if credentials are invalid
+   * @throws {StigmerError} with code `"not-found"` if the user doesn't exist and JIT provisioning is disabled
+   * @throws {StigmerError} with code `"failed-precondition"` if the client secret has expired
+   * @throws {StigmerError} with code `"permission-denied"` if the request origin is not in allowed_origins
+   */
+  async mintUserToken(input: MintUserTokenInput): Promise<MintUserTokenResult> {
+    if (!input.userId) {
+      throw new StigmerError(
+        "invalid-argument",
+        "mintUserToken: userId is required — this is the platform's stable identifier for the user",
+        3,
+      );
+    }
+
+    try {
+      const response = await this.tokenClient.mintUserToken(
+        create(MintUserTokenRequestSchema, {
+          clientId: this.clientId,
+          clientSecret: this.clientSecret,
+          userId: input.userId,
+          userEmail: input.userEmail ?? "",
+          userName: input.userName ?? "",
+          orgId: input.orgId ?? "",
+        }),
+      );
+
+      return {
+        accessToken: response.accessToken,
+        tokenType: response.tokenType,
+        expiresIn: response.expiresIn,
+        expiresAt: new Date(Date.now() + response.expiresIn * 1000),
+      };
+    } catch (e) {
+      throw wrapError(e);
+    }
+  }
+}
+
+/**
+ * Create a PlatformClient token-minting helper for Node.js backends.
+ *
+ * This is the recommended way to mint Stigmer user JWTs from a platform
+ * builder's backend. The returned tokens are passed to the React SDK's
+ * `StigmerProvider` via `getAccessToken`.
+ *
+ * @example
+ * ```typescript
+ * import { createPlatformClientAuth } from "@stigmer/sdk/node";
+ *
+ * const auth = createPlatformClientAuth({
+ *   baseUrl: "https://api.stigmer.ai",
+ *   clientId: process.env.STIGMER_CLIENT_ID!,
+ *   clientSecret: process.env.STIGMER_CLIENT_SECRET!,
+ * });
+ *
+ * const { accessToken, expiresAt } = await auth.mintUserToken({
+ *   userId: "user-123",
+ *   userEmail: "jane@acme.com",
+ *   userName: "Jane Doe",
+ * });
+ * ```
+ *
+ * @throws {Error} if `baseUrl`, `clientId`, or `clientSecret` is missing or empty
+ */
+export function createPlatformClientAuth(
+  config: PlatformClientAuthConfig,
+): PlatformClientAuth {
+  if (!config.baseUrl) {
+    throw new Error(
+      "createPlatformClientAuth: baseUrl is required (e.g., \"https://api.stigmer.ai\")",
+    );
+  }
+  if (!config.clientId) {
+    throw new Error(
+      "createPlatformClientAuth: clientId is required — find it in the Stigmer Console under IAM > Platform Clients",
+    );
+  }
+  if (!config.clientSecret) {
+    throw new Error(
+      "createPlatformClientAuth: clientSecret is required — the secret is shown once at creation time. " +
+        "If lost, rotate the secret via the Console or CLI",
+    );
+  }
+
+  return new PlatformClientAuth(config);
+}