@tai42/api-client 15.0.0 → 16.0.1

package/dist/client/agents-client.d.ts

@@ -0,0 +1,26 @@
+import type { Transport } from './transport';
+export declare function agentsClient(t: Transport): {
+    listAgents: (signal?: AbortSignal) => Promise<{
+        items: {
+            name: string;
+            description: string;
+            tool_name: string;
+            input_schema: Record<string, unknown>;
+            spec_runnable: boolean;
+        }[];
+        total: number;
+    }>;
+    listSpecRunnableAgents: (signal?: AbortSignal) => Promise<{
+        items: {
+            name: string;
+            description: string;
+            tool_name: string;
+            input_schema: Record<string, unknown>;
+            spec_runnable: boolean;
+        }[];
+        total: number;
+    }>;
+    streamAgentRun: (name: string, input: unknown, signal?: AbortSignal) => Promise<AsyncGenerator<import("..").ParsedAgentEvent, any, any>>;
+    streamAuthoredAgentRun: (name: string, input: unknown, signal?: AbortSignal) => Promise<AsyncGenerator<import("..").ParsedAgentEvent, any, any>>;
+};
+//# sourceMappingURL=agents-client.d.ts.map

package/dist/client/agents-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-client.d.ts","sourceRoot":"","sources":["../../src/client/agents-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS;0BAGf,WAAW;;;;;;;;;;sCAGC,WAAW;;;;;;;;;;2BAItB,MAAM,SAAS,OAAO,WAAW,WAAW;mCAKpC,MAAM,SAAS,OAAO,WAAW,WAAW;EAG9E"}

package/dist/client/agents-client.js

@@ -0,0 +1,19 @@
+/** Agent listing and streaming-run sub-client. */
+import { agentList, streamAgentRun, streamAuthoredAgentRun } from '../agents';
+export function agentsClient(t) {
+    const { config, req } = t;
+    return {
+        listAgents: (signal) => req('/api/agents', agentList, { signal }),
+        // The authorable subset (agents whose `spec_runnable` is true) — the compose
+        // UI's base-agent picker. An empty `items` list ⇒ no authoring is possible.
+        listSpecRunnableAgents: (signal) => req('/api/agents/spec-runnable', agentList, { signal }),
+        // The streaming run: opens POST /api/agents/{name}/runs and yields parsed
+        // agent events. The auto-form's built value is the POST body.
+        streamAgentRun: (name, input, signal) => streamAgentRun(config, name, input, signal),
+        // The streaming run of an AUTHORED agent (POST /api/agents/authored/{name}/runs).
+        // The body carries only the non-baked ToolInput fields; the baked spec is
+        // resolved server-side. Reuses the same SSE parser (never EventSource).
+        streamAuthoredAgentRun: (name, input, signal) => streamAuthoredAgentRun(config, name, input, signal),
+    };
+}
+//# sourceMappingURL=agents-client.js.map

package/dist/client/agents-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents-client.js","sourceRoot":"","sources":["../../src/client/agents-client.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAG9E,MAAM,UAAU,YAAY,CAAC,CAAY;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO;QACL,UAAU,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC;QAC/E,6EAA6E;QAC7E,4EAA4E;QAC5E,sBAAsB,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC/C,GAAG,CAAC,2BAA2B,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC;QACzD,0EAA0E;QAC1E,8DAA8D;QAC9D,cAAc,EAAE,CAAC,IAAY,EAAE,KAAc,EAAE,MAAoB,EAAE,EAAE,CACrE,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC;QAC7C,kFAAkF;QAClF,0EAA0E;QAC1E,wEAAwE;QACxE,sBAAsB,EAAE,CAAC,IAAY,EAAE,KAAc,EAAE,MAAoB,EAAE,EAAE,CAC7E,sBAAsB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC;KACtD,CAAC;AACJ,CAAC"}

package/dist/client/auth-client.d.ts

@@ -0,0 +1,205 @@
+/** Auth scopes, routes, roles and API-key sub-client. */
+import * as s from '../schemas';
+import type { Transport } from './transport';
+/** Body for creating or editing an API key (POST/PUT `/api/auth/api-keys`). */
+export interface ApiKeyBody {
+    readonly user_id: string;
+    readonly description: string;
+    readonly scopes: string[];
+    readonly policy_data?: Record<string, unknown> | null;
+    readonly condition?: s.TemplatedText | null;
+}
+/**
+ * Body for one-time claim-link creation (POST `/api/auth/claim-links`). The
+ * `api_key` is a raw key the caller holds (the just-minted key, client-side
+ * exactly once); `ttl_seconds` optionally overrides the default lifetime (the
+ * server caps it at its ceiling).
+ */
+export interface ClaimLinkBody {
+    readonly api_key: string;
+    readonly ttl_seconds?: number | null;
+}
+/** Body for adding a URL to a scope (POST `/api/auth/scopes`). */
+export interface AddUrlToScopeBody {
+    readonly scope_id: string;
+    readonly url: string;
+    readonly pattern?: string;
+}
+/**
+ * Body for creating a role (POST `/api/auth/roles`). `base_tier` is the security
+ * tier the role inherits (`editor`/`viewer` — `admin` is reserved); its jq is
+ * resolved server-side, never authored here. `grants` is the editable per-tag
+ * access-level map (feature-group tag → `none`/`read`/`write`); it defaults to
+ * empty (every group `none`, fail-closed) when omitted.
+ */
+export interface RoleCreateBody {
+    readonly name: string;
+    readonly description?: string;
+    readonly base_tier: string;
+    readonly grants?: Record<string, s.GrantLevel>;
+}
+/**
+ * Body for editing a role (PUT `/api/auth/roles/{name}`). Both fields are
+ * omit-means-KEEP: an absent `grants` preserves the stored map (never a silent
+ * wipe), an absent `description` preserves the stored description. The base-tier jq
+ * is seed-fixed and not editable here.
+ */
+export interface RoleUpdateBody {
+    readonly grants?: Record<string, s.GrantLevel>;
+    readonly description?: string;
+}
+/**
+ * Body for pinning a route public (POST `/api/auth/public-routes`). `pattern` is an
+ * optional regex the AC verifier full-matches request paths against, mapping every
+ * match to the `url` key (so a mount's whole subtree can be pinned in one call).
+ */
+export interface PinRoutePublicBody {
+    readonly url: string;
+    readonly pattern?: string;
+}
+export declare function authClient(t: Transport): {
+    listScopes: (signal?: AbortSignal) => Promise<Record<string, string>>;
+    addUrlToScope: (body: AddUrlToScopeBody) => Promise<{
+        scope_id: string;
+        url: string;
+    }>;
+    removeUrlFromScope: (body: {
+        url: string;
+    }) => Promise<{
+        url: string;
+    }>;
+    removeScope: (scopeId: string) => Promise<{
+        scope_id: string;
+        deleted_keys: number;
+    }>;
+    listAuthRoutes: (signal?: AbortSignal) => Promise<{
+        path: string;
+        methods: string[];
+        mapped: string | null;
+        tags: string[];
+        summary: string;
+        action: "read" | "write" | "secret" | "fenced" | null;
+    }[]>;
+    listPublicRoutes: (signal?: AbortSignal) => Promise<string[]>;
+    pinRoutePublic: (body: PinRoutePublicBody) => Promise<{
+        url: string;
+    }>;
+    unpinPublicRoute: (url: string) => Promise<{
+        url: string;
+    }>;
+    listRoles: (signal?: AbortSignal) => Promise<{
+        allow_all: boolean;
+        base_tier: string | null;
+        condition: {
+            content?: string | undefined;
+            id?: string | undefined;
+            kwargs?: Record<string, unknown> | undefined;
+        } | null;
+        description: string;
+        grants: Record<string, "none" | "read" | "write">;
+        name: string;
+        scopes: string[];
+    }[]>;
+    createRole: (body: RoleCreateBody) => Promise<{
+        allow_all: boolean;
+        base_tier: string | null;
+        condition: {
+            content?: string | undefined;
+            id?: string | undefined;
+            kwargs?: Record<string, unknown> | undefined;
+        } | null;
+        description: string;
+        grants: Record<string, "none" | "read" | "write">;
+        name: string;
+        scopes: string[];
+    }>;
+    updateRole: (name: string, body: RoleUpdateBody) => Promise<{
+        allow_all: boolean;
+        base_tier: string | null;
+        condition: {
+            content?: string | undefined;
+            id?: string | undefined;
+            kwargs?: Record<string, unknown> | undefined;
+        } | null;
+        description: string;
+        grants: Record<string, "none" | "read" | "write">;
+        name: string;
+        scopes: string[];
+    }>;
+    deleteRole: (name: string) => Promise<{
+        name: string;
+        deleted: boolean;
+    }>;
+    listRoleVersions: (name: string, signal?: AbortSignal) => Promise<{
+        versions: {
+            version: number;
+            body: {
+                allow_all: boolean;
+                base_tier: string | null;
+                condition: {
+                    content?: string | undefined;
+                    id?: string | undefined;
+                    kwargs?: Record<string, unknown> | undefined;
+                } | null;
+                description: string;
+                grants: Record<string, "none" | "read" | "write">;
+                name: string;
+                scopes: string[];
+            };
+            tags: string[];
+            created_at: string;
+            is_current: boolean;
+        }[];
+        audit: {
+            version: number;
+            body: {
+                action: string;
+                actor: string | null;
+                before: unknown;
+                after: unknown;
+            };
+            tags: string[];
+            created_at: string;
+            is_current: boolean;
+        }[];
+    }>;
+    rollbackRole: (name: string, version: number) => Promise<{
+        allow_all: boolean;
+        base_tier: string | null;
+        condition: {
+            content?: string | undefined;
+            id?: string | undefined;
+            kwargs?: Record<string, unknown> | undefined;
+        } | null;
+        description: string;
+        grants: Record<string, "none" | "read" | "write">;
+        name: string;
+        scopes: string[];
+    }>;
+    listTokensPayload: (signal?: AbortSignal) => Promise<{
+        user_id: string;
+        description: string;
+        scopes: string[];
+        policy_data: unknown;
+        condition?: {
+            content?: string | undefined;
+            id?: string | undefined;
+            kwargs?: Record<string, unknown> | undefined;
+        } | null | undefined;
+    }[]>;
+    createApiKey: (body: ApiKeyBody) => Promise<string>;
+    editApiKey: (userId: string, body: Omit<ApiKeyBody, "user_id">) => Promise<{
+        user_id: string;
+        updated: boolean;
+    }>;
+    revokeApiKey: (userId: string) => Promise<{
+        user_id: string;
+        revoked: boolean;
+    }>;
+    createClaimLink: (body: ClaimLinkBody) => Promise<{
+        claim_path: string;
+        token: string;
+        expires_at: string;
+    }>;
+};
+//# sourceMappingURL=auth-client.d.ts.map

package/dist/client/auth-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.d.ts","sourceRoot":"","sources":["../../src/client/auth-client.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAEhC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAG1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAGtD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC;CAC7C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;CAChD;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,SAAS;0BAGb,WAAW;0BACX,iBAAiB;;;;+BAEZ;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE;;;2BAEnB,MAAM;;;;8BAMH,WAAW;;;;;;;;gCAGT,WAAW;2BAEhB,kBAAkB;;;4BAGjB,MAAM;;;yBAMT,WAAW;;;;;;;;;;;;;uBAGb,cAAc;;;;;;;;;;;;;uBAId,MAAM,QAAQ,cAAc;;;;;;;;;;;;;uBAI5B,MAAM;;;;6BAIA,MAAM,WAAW,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAIhC,MAAM,WAAW,MAAM;;;;;;;;;;;;;iCAMf,WAAW;;;;;;;;;;;yBAEnB,UAAU;yBAEV,MAAM,QAAQ,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;;;;2BAKvC,MAAM;;;;4BAOL,aAAa;;;;;EAGxC"}

package/dist/client/auth-client.js

@@ -0,0 +1,59 @@
+/** Auth scopes, routes, roles and API-key sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function authClient(t) {
+    const { req } = t;
+    return {
+        listScopes: (signal) => req('/api/auth/scopes', s.authScopes, { signal }),
+        addUrlToScope: (body) => req('/api/auth/scopes', s.addUrlToScopeResult, { method: 'POST', body }),
+        removeUrlFromScope: (body) => req('/api/auth/scopes/urls', s.removeUrlFromScopeResult, { method: 'DELETE', body }),
+        removeScope: (scopeId) => req(`/api/auth/scopes/${encodeSegment(scopeId)}`, s.removeScopeResult, {
+            method: 'DELETE',
+        }),
+        // The app's HTTP route catalog with each route's current mapping — the only
+        // source of the mapper's unassigned-routes bucket (`mapped: null` entries).
+        listAuthRoutes: (signal) => req('/api/auth/routes', s.authRoutes, { signal }),
+        // The urls pinned to the public marker; pinning/unpinning is the dedicated
+        // public-routes writer, never the scope machinery.
+        listPublicRoutes: (signal) => req('/api/auth/public-routes', s.publicRoutes, { signal }),
+        pinRoutePublic: (body) => req('/api/auth/public-routes', s.pinPublicResult, { method: 'POST', body }),
+        // Unpin a public url. A url that is absent or scope-mapped is a loud 404.
+        unpinPublicRoute: (url) => req('/api/auth/public-routes', s.unpinPublicResult, { method: 'DELETE', body: { url } }),
+        // The seeded + operator-authored roles as full bodies (base-tier ceiling +
+        // editable per-tag grant map). ADMIN-ONLY — the route is `secret` (a listing
+        // exposes each role's raw base-tier jq); a non-admin projection never reaches it.
+        listRoles: (signal) => req('/api/auth/roles', s.roleList, { signal }),
+        // Create an operator-authored role. The server validates the grant map + base
+        // tier and 409s on a name collision; the reserved `admin` role cannot be created.
+        createRole: (body) => req('/api/auth/roles', s.roleBody, { method: 'POST', body }),
+        // Edit a role's per-tag grant map + description (omit-means-keep). The reserved
+        // `admin` role and any `allow_all` role are block-downgrade guarded server-side.
+        updateRole: (name, body) => req(`/api/auth/roles/${encodeSegment(name)}`, s.roleBody, { method: 'PUT', body }),
+        // Delete a role. The reserved `admin` role is undeletable; a role still assigned
+        // to any principal is a loud 409.
+        deleteRole: (name) => req(`/api/auth/roles/${encodeSegment(name)}`, s.roleDeleted, { method: 'DELETE' }),
+        // A role's append-only version history + who/action/before→after audit trail.
+        // ADMIN-ONLY (`secret`).
+        listRoleVersions: (name, signal) => req(`/api/auth/roles/${encodeSegment(name)}/versions`, s.roleVersions, { signal }),
+        // Re-point a role's active version to a prior one (LIVE — holders follow on
+        // their next request); returns the re-pointed role body.
+        rollbackRole: (name, version) => req(`/api/auth/roles/${encodeSegment(name)}/rollback`, s.roleBody, {
+            method: 'POST',
+            body: { version },
+        }),
+        listTokensPayload: (signal) => req('/api/auth/tokens-payload', s.tokensPayload, { signal }),
+        createApiKey: (body) => req('/api/auth/api-keys', s.createdApiKey, { method: 'POST', body }),
+        editApiKey: (userId, body) => req(`/api/auth/api-keys/${encodeSegment(userId)}`, s.editApiKeyResult, {
+            method: 'PUT',
+            body,
+        }),
+        revokeApiKey: (userId) => req(`/api/auth/api-keys/${encodeSegment(userId)}`, s.revokeApiKeyResult, {
+            method: 'DELETE',
+        }),
+        // Mint a one-time claim link carrying a raw key to another device (the QR
+        // onboarding leg). The token rides the URL fragment; the server returns a
+        // relative `claim_path` and the raw token ONCE.
+        createClaimLink: (body) => req('/api/auth/claim-links', s.claimLinkCreated, { method: 'POST', body }),
+    };
+}
+//# sourceMappingURL=auth-client.js.map

package/dist/client/auth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-client.js","sourceRoot":"","sources":["../../src/client/auth-client.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAqExC,MAAM,UAAU,UAAU,CAAC,CAAY;IACrC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,UAAU,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC;QACvF,aAAa,EAAE,CAAC,IAAuB,EAAE,EAAE,CACzC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1E,kBAAkB,EAAE,CAAC,IAAqB,EAAE,EAAE,CAC5C,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtF,WAAW,EAAE,CAAC,OAAe,EAAE,EAAE,CAC/B,GAAG,CAAC,oBAAoB,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,EAAE;YACrE,MAAM,EAAE,QAAQ;SACjB,CAAC;QACJ,4EAA4E;QAC5E,4EAA4E;QAC5E,cAAc,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC;QAC3F,2EAA2E;QAC3E,mDAAmD;QACnD,gBAAgB,EAAE,CAAC,MAAoB,EAAE,EAAE,CACzC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QAC5D,cAAc,EAAE,CAAC,IAAwB,EAAE,EAAE,CAC3C,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC7E,0EAA0E;QAC1E,gBAAgB,EAAE,CAAC,GAAW,EAAE,EAAE,CAChC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;QAE1F,2EAA2E;QAC3E,6EAA6E;QAC7E,kFAAkF;QAClF,SAAS,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC;QACnF,8EAA8E;QAC9E,kFAAkF;QAClF,UAAU,EAAE,CAAC,IAAoB,EAAE,EAAE,CACnC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC9D,gFAAgF;QAChF,iFAAiF;QACjF,UAAU,EAAE,CAAC,IAAY,EAAE,IAAoB,EAAE,EAAE,CACjD,GAAG,CAAC,mBAAmB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACpF,iFAAiF;QACjF,kCAAkC;QAClC,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAC3B,GAAG,CAAC,mBAAmB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACpF,8EAA8E;QAC9E,yBAAyB;QACzB,gBAAgB,EAAE,CAAC,IAAY,EAAE,MAAoB,EAAE,EAAE,CACvD,GAAG,CAAC,mBAAmB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QACpF,4EAA4E;QAC5E,yDAAyD;QACzD,YAAY,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAC9C,GAAG,CAAC,mBAAmB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC;QAEJ,iBAAiB,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC1C,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC;QAC9D,YAAY,EAAE,CAAC,IAAgB,EAAE,EAAE,CACjC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtE,UAAU,EAAE,CAAC,MAAc,EAAE,IAAiC,EAAE,EAAE,CAChE,GAAG,CAAC,sBAAsB,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,EAAE;YACrE,MAAM,EAAE,KAAK;YACb,IAAI;SACL,CAAC;QACJ,YAAY,EAAE,CAAC,MAAc,EAAE,EAAE,CAC/B,GAAG,CAAC,sBAAsB,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,EAAE;YACvE,MAAM,EAAE,QAAQ;SACjB,CAAC;QACJ,0EAA0E;QAC1E,0EAA0E;QAC1E,gDAAgD;QAChD,eAAe,EAAE,CAAC,IAAmB,EAAE,EAAE,CACvC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC"}

package/dist/client/backend-client.d.ts

@@ -0,0 +1,39 @@
+import type { Transport } from './transport';
+export declare function backendClient(t: Transport): {
+    getBackendInfo: (signal?: AbortSignal) => Promise<{
+        present: boolean;
+        backend: string | null;
+        module: string | null;
+    }>;
+    listFleetWorkers: (signal?: AbortSignal) => Promise<{
+        workers: {
+            name: string;
+            kind: "backend" | "serve";
+            pid: number;
+            generation: number;
+            joined_at: string;
+            beat_at: string;
+            state: "ready" | "resyncing" | "recycling";
+            stale: boolean;
+            last_op: {
+                op: string;
+                outcome: string;
+                at: string;
+            } | null;
+        }[];
+    }>;
+    reloadFleetConfig: (targets: string[] | null) => Promise<{
+        op: string;
+        reachable: boolean;
+        local_only: boolean;
+        results: {
+            name: string;
+            outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+            payload: unknown;
+            error: string | null;
+            detail: string | null;
+        }[];
+        error: string | null;
+    }>;
+};
+//# sourceMappingURL=backend-client.d.ts.map

package/dist/client/backend-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-client.d.ts","sourceRoot":"","sources":["../../src/client/backend-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS;8BASZ,WAAW;;;;;gCACT,WAAW;;;;;;;;;;;;;;;;;iCAOV,MAAM,EAAE,GAAG,IAAI;;;;;;;;;;;;;EAG/C"}

package/dist/client/backend-client.js

@@ -0,0 +1,22 @@
+/** Backend identity and worker-bus fleet sub-client. */
+import * as s from '../schemas';
+export function backendClient(t) {
+    const { req } = t;
+    return {
+        // Backend IDENTITY (`getBackendInfo`, kept on `/api/backend`) is distinct from
+        // the FLEET doors, which ride the app's worker bus and need no backend at all.
+        // `getBackendInfo` reports `present: false` (a 200 empty state) when no backend
+        // plugin is registered. `listFleetWorkers` reads the live bus presence census
+        // (every subscribed worker, ASGI + backend-runtime) and never fabricates an empty
+        // fleet — a census read that fails surfaces as a loud 500.
+        getBackendInfo: (signal) => req('/api/backend', s.backendInfo, { signal }),
+        listFleetWorkers: (signal) => req('/api/fleet/workers', s.fleetWorkers, { signal }),
+        // Soft-restart the fleet: `targets` names the workers to reload, or `null` for
+        // the whole fleet. The serving worker applies locally then broadcasts; a 200
+        // response carries the per-worker fleet report, so workers that did not converge
+        // are named, not hidden. A failed local apply instead re-raises as a loud error
+        // (the transport throws with the failure message), not a returned report.
+        reloadFleetConfig: (targets) => req('/api/fleet/reload-config', s.fleetReloadResult, { method: 'POST', body: { targets } }),
+    };
+}
+//# sourceMappingURL=backend-client.js.map

package/dist/client/backend-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-client.js","sourceRoot":"","sources":["../../src/client/backend-client.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAGhC,MAAM,UAAU,aAAa,CAAC,CAAY;IACxC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,+EAA+E;QAC/E,+EAA+E;QAC/E,gFAAgF;QAChF,8EAA8E;QAC9E,kFAAkF;QAClF,2DAA2D;QAC3D,cAAc,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC;QACxF,gBAAgB,EAAE,CAAC,MAAoB,EAAE,EAAE,CACzC,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QACvD,+EAA+E;QAC/E,6EAA6E;QAC7E,iFAAiF;QACjF,gFAAgF;QAChF,0EAA0E;QAC1E,iBAAiB,EAAE,CAAC,OAAwB,EAAE,EAAE,CAC9C,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;KAC9F,CAAC;AACJ,CAAC"}

package/dist/client/backup-client.d.ts

@@ -0,0 +1,56 @@
+import type { Transport } from './transport';
+export declare function backupClient(t: Transport): {
+    listBackupSections: (signal?: AbortSignal) => Promise<{
+        name: string;
+        secret: boolean;
+    }[]>;
+    exportBackup: (sections: string[], signal?: AbortSignal) => Promise<Blob>;
+    importBackup: (body: {
+        document: unknown;
+        sections: string[];
+    }) => Promise<{
+        ok: boolean;
+        sections: Record<string, {
+            created: number;
+            updated: number;
+            skipped: number;
+            errors: string[];
+            new_api_keys?: {
+                user_id: string;
+                description: string;
+                api_key: string;
+            }[] | undefined;
+            fanout?: {
+                mode: "local-only";
+                note: string;
+            } | {
+                op: string;
+                reachable: boolean;
+                local_only: boolean;
+                results: {
+                    name: string;
+                    outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+                    payload: unknown;
+                    error: string | null;
+                    detail: string | null;
+                }[];
+                error: string | null;
+                mode: "fleet";
+            } | {
+                op: string;
+                reachable: boolean;
+                local_only: boolean;
+                results: {
+                    name: string;
+                    outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+                    payload: unknown;
+                    error: string | null;
+                    detail: string | null;
+                }[];
+                error: string | null;
+                mode: "unreachable";
+            } | undefined;
+        }>;
+    }>;
+};
+//# sourceMappingURL=backup-client.d.ts.map

package/dist/client/backup-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-client.d.ts","sourceRoot":"","sources":["../../src/client/backup-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS;kCAGP,WAAW;;;;6BAEhB,MAAM,EAAE,WAAW,WAAW,KAAG,OAAO,CAAC,IAAI,CAAC;yBAElD;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGjE"}

package/dist/client/backup-client.js

@@ -0,0 +1,12 @@
+/** Backup section listing, export and import sub-client. */
+import * as s from '../schemas';
+import { apiDownload } from '../http';
+export function backupClient(t) {
+    const { config, req } = t;
+    return {
+        listBackupSections: (signal) => req('/api/backup/sections', s.backupSections, { signal }),
+        exportBackup: (sections, signal) => apiDownload(config, '/api/backup/export', { method: 'POST', body: { sections }, signal }),
+        importBackup: (body) => req('/api/backup/import', s.backupImportReport, { method: 'POST', body }),
+    };
+}
+//# sourceMappingURL=backup-client.js.map

package/dist/client/backup-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-client.js","sourceRoot":"","sources":["../../src/client/backup-client.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAGtC,MAAM,UAAU,YAAY,CAAC,CAAY;IACvC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO;QACL,kBAAkB,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC3C,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC;QAC3D,YAAY,EAAE,CAAC,QAAkB,EAAE,MAAoB,EAAiB,EAAE,CACxE,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC;QAC3F,YAAY,EAAE,CAAC,IAA+C,EAAE,EAAE,CAChE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/client/capabilities-client.d.ts

@@ -0,0 +1,35 @@
+import type { Transport } from './transport';
+export declare function capabilitiesGetMe(t: Transport): {
+    getMe: (signal?: AbortSignal) => Promise<{
+        user_id: string;
+        owner_user_id: string | null;
+        admin: boolean;
+        scopes: string[];
+        routes: {
+            path: string;
+            methods: string[];
+        }[];
+        route_patterns: {
+            pattern: string;
+            scope_id: string;
+        }[];
+        sub_mcp: {
+            tools: string[];
+            transport: string;
+            slug: string;
+        }[];
+        tools: string[];
+        agents: string[];
+        mintable: boolean;
+    }>;
+};
+export declare function capabilitiesGetCaps(t: Transport): {
+    getAuthCapabilities: (signal?: AbortSignal) => Promise<{
+        mintable: boolean;
+        providers: {
+            name: string;
+            mintable: boolean;
+        }[];
+    }>;
+};
+//# sourceMappingURL=capabilities-client.d.ts.map

package/dist/client/capabilities-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities-client.d.ts","sourceRoot":"","sources":["../../src/client/capabilities-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,SAAS;qBAKzB,WAAW;;;;;;;;;;;;;;;;;;;;;;EAE/B;AAED,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,SAAS;mCAKb,WAAW;;;;;;;EAG7C"}

package/dist/client/capabilities-client.js

@@ -0,0 +1,19 @@
+/** Caller capability projection and auth-capabilities sub-clients. */
+import * as s from '../schemas';
+export function capabilitiesGetMe(t) {
+    const { req } = t;
+    return {
+        // The derived (path, method) surface + tools/agents the caller can reach
+        // right now — the projection the Studio filters its nav and pages on.
+        getMe: (signal) => req('/api/auth/me', s.meProjection, { signal }),
+    };
+}
+export function capabilitiesGetCaps(t) {
+    const { req } = t;
+    return {
+        // Whether this deployment can mint API keys locally (the settings key-create
+        // UI gates on `mintable`). AUTHED.
+        getAuthCapabilities: (signal) => req('/api/auth/capabilities', s.authCapabilities, { signal }),
+    };
+}
+//# sourceMappingURL=capabilities-client.js.map

package/dist/client/capabilities-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities-client.js","sourceRoot":"","sources":["../../src/client/capabilities-client.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAGhC,MAAM,UAAU,iBAAiB,CAAC,CAAY;IAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,yEAAyE;QACzE,sEAAsE;QACtE,KAAK,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAY;IAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,6EAA6E;QAC7E,mCAAmC;QACnC,mBAAmB,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC5C,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC"}

package/dist/client/channels-client.d.ts

@@ -0,0 +1,7 @@
+import type { Transport } from './transport';
+export declare function channelsClient(t: Transport): {
+    listChannels: (signal?: AbortSignal) => Promise<{
+        channels: string[];
+    }>;
+};
+//# sourceMappingURL=channels-client.d.ts.map

package/dist/client/channels-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels-client.d.ts","sourceRoot":"","sources":["../../src/client/channels-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,cAAc,CAAC,CAAC,EAAE,SAAS;4BAIf,WAAW;;;EAEtC"}

package/dist/client/channels-client.js

@@ -0,0 +1,10 @@
+/** Installed channel-plugin catalog sub-client. */
+import * as s from '../schemas';
+export function channelsClient(t) {
+    const { req } = t;
+    return {
+        // The installed channel-plugin names (delivery media for ask_user questions).
+        listChannels: (signal) => req('/api/channels', s.channels, { signal }),
+    };
+}
+//# sourceMappingURL=channels-client.js.map

package/dist/client/channels-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels-client.js","sourceRoot":"","sources":["../../src/client/channels-client.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAGhC,MAAM,UAAU,cAAc,CAAC,CAAY;IACzC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,8EAA8E;QAC9E,YAAY,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC;KACrF,CAAC;AACJ,CAAC"}

package/dist/client/config-client.d.ts

@@ -0,0 +1,59 @@
+import type { Transport } from './transport';
+export declare function configClient(t: Transport): {
+    getEnvConfig: (signal?: AbortSignal) => Promise<{
+        env: Record<string, string>;
+        secret_keys: string[];
+    }>;
+    setEnvConfig: (env: Record<string, string>) => Promise<{
+        status: string;
+        env_keys: number;
+        fanout: {
+            mode: "local-only";
+            note: string;
+        } | {
+            op: string;
+            reachable: boolean;
+            local_only: boolean;
+            results: {
+                name: string;
+                outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+                payload: unknown;
+                error: string | null;
+                detail: string | null;
+            }[];
+            error: string | null;
+            mode: "fleet";
+        } | {
+            op: string;
+            reachable: boolean;
+            local_only: boolean;
+            results: {
+                name: string;
+                outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+                payload: unknown;
+                error: string | null;
+                detail: string | null;
+            }[];
+            error: string | null;
+            mode: "unreachable";
+        };
+    }>;
+    getConfigMode: (signal?: AbortSignal) => Promise<{
+        config_mode: string;
+        read_only: boolean;
+    }>;
+    reloadConfig: (targets?: string[] | null) => Promise<{
+        op: string;
+        reachable: boolean;
+        local_only: boolean;
+        results: {
+            name: string;
+            outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+            payload: unknown;
+            error: string | null;
+            detail: string | null;
+        }[];
+        error: string | null;
+    }>;
+};
+//# sourceMappingURL=config-client.d.ts.map

package/dist/client/config-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-client.d.ts","sourceRoot":"","sources":["../../src/client/config-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS;4BAGb,WAAW;;;;wBACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAEjB,WAAW;;;;6BAOZ,MAAM,EAAE,GAAG,IAAI;;;;;;;;;;;;;EAG1C"}