@tai42/api-client 15.0.0 → 16.0.1

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAoCzC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,YAAY,EACV,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EACV,yBAAyB,EACzB,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACtE,YAAY,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7D,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpG,YAAY,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACjE,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAhE5B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA+BH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA8Ei5D,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAAsyF,CAAC;aAAgB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAH7tJ;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,79 @@
+import { makeTransport } from './transport';
+import { agentsClient } from './agents-client';
+import { authClient } from './auth-client';
+import { backendClient } from './backend-client';
+import { backupClient } from './backup-client';
+import { capabilitiesGetCaps, capabilitiesGetMe } from './capabilities-client';
+import { channelsClient } from './channels-client';
+import { configClient } from './config-client';
+import { connectorsClient } from './connectors-client';
+import { conversationsClient } from './conversations-client';
+import { hooksClient } from './hooks-client';
+import { interactionsClient, interactionsStreamClient } from './interactions-client';
+import { loginClient, logoutClient } from './login-client';
+import { manifestClient, manifestSecretEnvClient } from './manifest-client';
+import { marketplaceClient } from './marketplace-client';
+import { mcpConfigSchemaClient } from './mcp-config-schema-client';
+import { notificationsClient } from './notifications-client';
+import { observabilityClient } from './observability-client';
+import { pluginsClient } from './plugins-client';
+import { policyClient } from './policy-client';
+import { presetsClient } from './presets-client';
+import { profilesClient } from './profiles-client';
+import { schedulesClient } from './schedules-client';
+import { settingsSchemaClient } from './settings-schema-client';
+import { statesClient } from './states-client';
+import { storageClient } from './storage-client';
+import { subMcpClient } from './sub-mcp-client';
+import { systemClient } from './system-client';
+import { templatesClient } from './templates-client';
+import { toolExtensionsClient } from './tool-extensions-client';
+import { toolMetaClient } from './tool-meta-client';
+import { toolsClient } from './tools-client';
+import { triggerLinksClient } from './trigger-links-client';
+import { webEntryGateClient } from './web-entry-gate-client';
+export { isSafeApiPath } from './login-client';
+export function createApiClient(config) {
+    const t = makeTransport(config);
+    return {
+        baseUrl: config.baseUrl ?? '',
+        ...toolsClient(t),
+        ...presetsClient(t),
+        ...statesClient(t),
+        ...toolMetaClient(t),
+        ...storageClient(t),
+        ...backendClient(t),
+        ...toolExtensionsClient(t),
+        ...templatesClient(t),
+        ...manifestClient(t),
+        ...subMcpClient(t),
+        ...configClient(t),
+        ...profilesClient(t),
+        ...manifestSecretEnvClient(t),
+        ...connectorsClient(t),
+        ...pluginsClient(t),
+        ...interactionsClient(t),
+        ...channelsClient(t),
+        ...conversationsClient(t),
+        ...webEntryGateClient(t),
+        ...notificationsClient(t),
+        ...agentsClient(t),
+        ...hooksClient(t),
+        ...triggerLinksClient(t),
+        ...mcpConfigSchemaClient(t),
+        ...settingsSchemaClient(t),
+        ...authClient(t),
+        ...capabilitiesGetMe(t),
+        ...loginClient(t),
+        ...capabilitiesGetCaps(t),
+        ...logoutClient(t),
+        ...policyClient(t),
+        ...backupClient(t),
+        ...schedulesClient(t),
+        ...observabilityClient(t),
+        ...marketplaceClient(t),
+        ...systemClient(t),
+        ...interactionsStreamClient(t),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAwC/C,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;QAC7B,GAAG,WAAW,CAAC,CAAC,CAAC;QACjB,GAAG,aAAa,CAAC,CAAC,CAAC;QACnB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,cAAc,CAAC,CAAC,CAAC;QACpB,GAAG,aAAa,CAAC,CAAC,CAAC;QACnB,GAAG,aAAa,CAAC,CAAC,CAAC;QACnB,GAAG,oBAAoB,CAAC,CAAC,CAAC;QAC1B,GAAG,eAAe,CAAC,CAAC,CAAC;QACrB,GAAG,cAAc,CAAC,CAAC,CAAC;QACpB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,cAAc,CAAC,CAAC,CAAC;QACpB,GAAG,uBAAuB,CAAC,CAAC,CAAC;QAC7B,GAAG,gBAAgB,CAAC,CAAC,CAAC;QACtB,GAAG,aAAa,CAAC,CAAC,CAAC;QACnB,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,GAAG,cAAc,CAAC,CAAC,CAAC;QACpB,GAAG,mBAAmB,CAAC,CAAC,CAAC;QACzB,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,GAAG,mBAAmB,CAAC,CAAC,CAAC;QACzB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,WAAW,CAAC,CAAC,CAAC;QACjB,GAAG,kBAAkB,CAAC,CAAC,CAAC;QACxB,GAAG,qBAAqB,CAAC,CAAC,CAAC;QAC3B,GAAG,oBAAoB,CAAC,CAAC,CAAC;QAC1B,GAAG,UAAU,CAAC,CAAC,CAAC;QAChB,GAAG,iBAAiB,CAAC,CAAC,CAAC;QACvB,GAAG,WAAW,CAAC,CAAC,CAAC;QACjB,GAAG,mBAAmB,CAAC,CAAC,CAAC;QACzB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,eAAe,CAAC,CAAC,CAAC;QACrB,GAAG,mBAAmB,CAAC,CAAC,CAAC;QACzB,GAAG,iBAAiB,CAAC,CAAC,CAAC;QACvB,GAAG,YAAY,CAAC,CAAC,CAAC;QAClB,GAAG,wBAAwB,CAAC,CAAC,CAAC;KACtB,CAAC;AACb,CAAC"}

package/dist/client/interactions-client.d.ts

@@ -0,0 +1,52 @@
+import type { Transport } from './transport';
+export declare function interactionsClient(t: Transport): {
+    listInteractions: (page: number, pageSize: number, signal?: AbortSignal) => Promise<{
+        total: number;
+        page: number;
+        page_size: number;
+        next_page: number | null;
+        truncated: boolean;
+        items: {
+            interaction_id: string;
+            group_id: string;
+            question: string;
+            answer_format: "text" | "external" | "confirm" | "select" | "form";
+            format_payload: Record<string, unknown>;
+            created_at: string;
+            timeout_at: string;
+            sensitive: boolean;
+            server_verified?: boolean | undefined;
+            channel?: string | undefined;
+            recipient?: string | undefined;
+            origin?: string | undefined;
+            audience?: string | undefined;
+            media?: unknown[] | undefined;
+        }[];
+    }>;
+    answerInteraction: (interactionId: string, answer: unknown) => Promise<{
+        interaction_id: string;
+        status: string;
+    }>;
+    cancelInteraction: (interactionId: string) => Promise<{
+        interaction_id: string;
+        status: string;
+    }>;
+};
+export declare function interactionsStreamClient(t: Transport): {
+    /**
+     * Open the authed interactions SSE stream. The stream is TAIL-ONLY: its cursor
+     * is the stream tail at connect, so it carries no backlog and no
+     * `interaction.backlog_done` frame — the pending base comes from
+     * `listInteractions`. The caller drives reconnect and refetches that base on
+     * each (re)connect. Returns the raw frame iterator; the interactions feature
+     * maps frames to typed events.
+     *
+     * `lastEventId` (the id of the last frame the caller saw) is sent as the
+     * `Last-Event-ID` header so the server resumes AFTER it and replays any frame —
+     * including a card's `answered` — that landed during a disconnect gap. It is
+     * also sent as a `?last_event_id=` query param so a proxy that strips the header
+     * still resumes; the server reads either. Omitted on a first connect.
+     */
+    streamInteractions: (signal?: AbortSignal, lastEventId?: string) => Promise<AsyncGenerator<import("..").SseFrame, any, any>>;
+};
+//# sourceMappingURL=interactions-client.d.ts.map

package/dist/client/interactions-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactions-client.d.ts","sourceRoot":"","sources":["../../src/client/interactions-client.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,SAAS;6BAOlB,MAAM,YAAY,MAAM,WAAW,WAAW;;;;;;;;;;;;;;;;;;;;;;;uCAEpC,MAAM,UAAU,OAAO;;;;uCAWvB,MAAM;;;;EAK5C;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,SAAS;IAGjD;;;;;;;;;;;;;OAaG;kCACiC,WAAW,gBAAgB,MAAM;EAqCxE"}

package/dist/client/interactions-client.js

@@ -0,0 +1,84 @@
+/** Interaction listing/answer and the SSE stream sub-clients. */
+import * as s from '../schemas';
+import { ApiError, ApiUnauthorizedError } from '../errors';
+import { encodeSegment, extractError } from '../http';
+import { readSseFrames, sseOpenToken } from '../sse';
+export function interactionsClient(t) {
+    const { req } = t;
+    return {
+        // One page of the pending interactions (the tail-only stream's paged base). The
+        // door filters by audience before paging — the SAME filter the stream applies —
+        // so `total` is the caller's own count, and every terminal frame it later receives
+        // refers to a question within that `total`.
+        listInteractions: (page, pageSize, signal) => req('/api/interactions', s.interactionsPage, { signal, query: { page, pageSize } }),
+        answerInteraction: (interactionId, answer) => req(`/api/interactions/${encodeSegment(interactionId)}/answer`, s.interactionAnswered, {
+            method: 'POST',
+            body: { answer },
+        }),
+        // Withdraw a pending ask WITHOUT answering it (a bodyless POST): the question is
+        // resolved as cancelled and the flow that asked never resumes. Terminal like an
+        // answer, so the loud failure mappings mirror it — a 409 (already answered, so no
+        // longer cancellable) surfaces as `ApiConflictError`, a 404 (unknown/already gone)
+        // and a 403 (not this caller's audience) as `ApiError` — all via the shared
+        // `apiRequest` status handling.
+        cancelInteraction: (interactionId) => req(`/api/interactions/${encodeSegment(interactionId)}/cancel`, s.interactionCancelled, {
+            method: 'POST',
+        }),
+    };
+}
+export function interactionsStreamClient(t) {
+    const { config } = t;
+    return {
+        /**
+         * Open the authed interactions SSE stream. The stream is TAIL-ONLY: its cursor
+         * is the stream tail at connect, so it carries no backlog and no
+         * `interaction.backlog_done` frame — the pending base comes from
+         * `listInteractions`. The caller drives reconnect and refetches that base on
+         * each (re)connect. Returns the raw frame iterator; the interactions feature
+         * maps frames to typed events.
+         *
+         * `lastEventId` (the id of the last frame the caller saw) is sent as the
+         * `Last-Event-ID` header so the server resumes AFTER it and replays any frame —
+         * including a card's `answered` — that landed during a disconnect gap. It is
+         * also sent as a `?last_event_id=` query param so a proxy that strips the header
+         * still resumes; the server reads either. Omitted on a first connect.
+         */
+        streamInteractions: async (signal, lastEventId) => {
+            const doFetch = config.fetch ?? globalThis.fetch;
+            const token = config.getToken();
+            const headers = { accept: 'text/event-stream' };
+            if (token)
+                headers['x-api-key'] = token;
+            if (lastEventId)
+                headers['last-event-id'] = lastEventId;
+            // Distinct-URL per open — see the canonical constraint on `sseOpenToken`.
+            const resume = lastEventId ? `&last_event_id=${encodeURIComponent(lastEventId)}` : '';
+            const url = `${config.baseUrl ?? ''}/api/interactions/stream?_=${sseOpenToken()}${resume}`;
+            const response = await doFetch(url, {
+                headers,
+                signal,
+            });
+            if (response.status === 401)
+                throw new ApiUnauthorizedError();
+            // A non-ok stream open (5xx/4xx) still carries a body, which would parse to
+            // zero frames and look like a silently-empty stream — surface it loudly so
+            // the caller shows an error instead of hanging on a reconnect loop. Read the
+            // `{ "error" }` envelope so a load-bearing server message (e.g. the OFF
+            // store's 501 remediation line) surfaces verbatim instead of collapsing to
+            // the bare status text.
+            if (!response.ok) {
+                let payload;
+                try {
+                    payload = await response.json();
+                }
+                catch {
+                    throw new ApiError(response.statusText || 'stream failed', response.status);
+                }
+                const { message, code } = extractError(payload);
+                throw new ApiError(message ?? (response.statusText || 'stream failed'), response.status, code);
+            }
+            return readSseFrames(response, signal);
+        },
+    };
+}
+//# sourceMappingURL=interactions-client.js.map

package/dist/client/interactions-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactions-client.js","sourceRoot":"","sources":["../../src/client/interactions-client.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAGrD,MAAM,UAAU,kBAAkB,CAAC,CAAY;IAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,gFAAgF;QAChF,gFAAgF;QAChF,mFAAmF;QACnF,4CAA4C;QAC5C,gBAAgB,EAAE,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAoB,EAAE,EAAE,CACzE,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;QACrF,iBAAiB,EAAE,CAAC,aAAqB,EAAE,MAAe,EAAE,EAAE,CAC5D,GAAG,CAAC,qBAAqB,aAAa,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,mBAAmB,EAAE;YACrF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC;QACJ,iFAAiF;QACjF,gFAAgF;QAChF,kFAAkF;QAClF,mFAAmF;QACnF,4EAA4E;QAC5E,gCAAgC;QAChC,iBAAiB,EAAE,CAAC,aAAqB,EAAE,EAAE,CAC3C,GAAG,CAAC,qBAAqB,aAAa,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,oBAAoB,EAAE;YACtF,MAAM,EAAE,MAAM;SACf,CAAC;KACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,CAAY;IACnD,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IACrB,OAAO;QACL;;;;;;;;;;;;;WAaG;QACH,kBAAkB,EAAE,KAAK,EAAE,MAAoB,EAAE,WAAoB,EAAE,EAAE;YACvE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACxE,IAAI,KAAK;gBAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;YACxC,IAAI,WAAW;gBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;YACxD,0EAA0E;YAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,8BAA8B,YAAY,EAAE,GAAG,MAAM,EAAE,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAClC,OAAO;gBACP,MAAM;aACP,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC9D,4EAA4E;YAC5E,2EAA2E;YAC3E,6EAA6E;YAC7E,wEAAwE;YACxE,2EAA2E;YAC3E,wBAAwB;YACxB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,IAAI,OAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBAChD,MAAM,IAAI,QAAQ,CAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,eAAe,CAAC,EACnD,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/login-client.d.ts

@@ -0,0 +1,56 @@
+import type { Transport } from './transport';
+/**
+ * Whether a login-method target is a safe same-origin relative API path. The
+ * login screen is the one page where a misconfigured/compromised manifest could
+ * redirect CREDENTIALS off-origin, so a `submit_path`/`href` MUST start `/api/`
+ * — anything else (absolute URL, protocol-relative `//host`, missing prefix) is
+ * rejected. The `/api/` prefix already excludes `//`-prefixed values; the
+ * explicit double-slash clause is kept for readability.
+ */
+export declare function isSafeApiPath(path: string): boolean;
+export declare function loginClient(t: Transport): {
+    getLoginMethods: (options?: {
+        signal?: AbortSignal;
+    }) => Promise<{
+        methods: ({
+            shape: "form";
+            id: string;
+            title: string;
+            purpose: "login" | "bootstrap" | "invite";
+            fields: {
+                name: string;
+                label: string;
+                secret: boolean;
+                autocomplete?: string | undefined;
+            }[];
+            submit_path: string;
+        } | {
+            shape: "button";
+            id: string;
+            label: string;
+            href: string;
+            icon?: string | undefined;
+        })[];
+        bootstrap: boolean;
+    }>;
+    submitLoginForm: (path: string, values: Record<string, string>) => Promise<{
+        token: string;
+        user_id: string;
+    }>;
+    exchangeSsoCode: (code: string) => Promise<{
+        token: string;
+        user_id: string;
+    }>;
+    claimLogin: (body: {
+        token: string;
+    }) => Promise<{
+        token: string;
+        user_id: string;
+    }>;
+};
+export declare function logoutClient(t: Transport): {
+    logout: () => Promise<{
+        revoked: boolean;
+    }>;
+};
+//# sourceMappingURL=login-client.d.ts.map

package/dist/client/login-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-client.d.ts","sourceRoot":"","sources":["../../src/client/login-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AA+BD,wBAAgB,WAAW,CAAC,CAAC,EAAE,SAAS;gCAMR;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE;;;;;;;;;;;;;;;;;;;;;;4BAOtB,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;;4BActC,MAAM;;;;uBAeX;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE;;;;EAQ7C;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS;;;;EAUxC"}

package/dist/client/login-client.js

@@ -0,0 +1,103 @@
+/** Public sign-in aggregator and session-logout sub-clients. */
+import * as s from '../schemas';
+import { ApiError, ApiLoginFailedError, ApiUnauthorizedError } from '../errors';
+/**
+ * Whether a login-method target is a safe same-origin relative API path. The
+ * login screen is the one page where a misconfigured/compromised manifest could
+ * redirect CREDENTIALS off-origin, so a `submit_path`/`href` MUST start `/api/`
+ * — anything else (absolute URL, protocol-relative `//host`, missing prefix) is
+ * rejected. The `/api/` prefix already excludes `//`-prefixed values; the
+ * explicit double-slash clause is kept for readability.
+ */
+export function isSafeApiPath(path) {
+    return path.startsWith('/api/') && !path.startsWith('//');
+}
+/**
+ * Map a transport error from a login submission onto an `ApiLoginFailedError`
+ * (rendered inline on the login page) or rethrow it unchanged (5xx, schema
+ * drift, network — the page's generic failure branch surfaces it loudly).
+ *
+ * A transport 401 arrives as `ApiUnauthorizedError` before any body is read, so
+ * its message is generic by construction; the domain 4xx statuses carry the
+ * server's informative envelope text (rate-limit, bootstrap-already-initialized,
+ * password-policy, or the claim exchange's uniform "unknown or already used"
+ * 404) straight through to the inline surface.
+ */
+function asLoginError(error) {
+    if (error instanceof ApiUnauthorizedError) {
+        throw new ApiLoginFailedError('Sign-in failed — check your credentials.', 401);
+    }
+    if (error instanceof ApiError &&
+        (error.status === 400 ||
+            error.status === 403 ||
+            error.status === 404 ||
+            error.status === 409 ||
+            error.status === 422 ||
+            error.status === 429)) {
+        throw new ApiLoginFailedError(error.message, error.status);
+    }
+    throw error;
+}
+export function loginClient(t) {
+    const { req } = t;
+    return {
+        // PUBLIC by design: `apiRequest` attaches `x-api-key` only when a token
+        // exists, so the unauthenticated call carries no auth header — no transport
+        // change needed.
+        getLoginMethods: (options) => req('/api/login/methods', s.loginMethods, { signal: options?.signal }),
+        // Submit a `form` method's field VALUES as a flat top-level JSON body (the
+        // server's request models take the declared field names top-level). `path`
+        // is re-checked with the same relative-`/api/` guard the renderer uses — an
+        // off-origin path is a PROGRAMMING error (loud `Error`), not a login failure.
+        // A refused credential becomes an inline `ApiLoginFailedError`.
+        submitLoginForm: async (path, values) => {
+            if (!isSafeApiPath(path)) {
+                throw new Error(`login submit_path must be a relative /api/ path; received ${JSON.stringify(path)}`);
+            }
+            try {
+                return await req(path, s.loginResult, { method: 'POST', body: values });
+            }
+            catch (error) {
+                return asLoginError(error);
+            }
+        },
+        // Exchange a one-time SSO hand-back code for a session (never a token in the
+        // URL). An expired/reused code is a login failure, surfaced inline.
+        exchangeSsoCode: async (code) => {
+            try {
+                return await req('/api/login/sso/exchange', s.loginResult, {
+                    method: 'POST',
+                    body: { code },
+                });
+            }
+            catch (error) {
+                return asLoginError(error);
+            }
+        },
+        // Exchange a one-time claim token (read from the login URL fragment, never a
+        // query param) for a session. PUBLIC. The token is single-use and burns
+        // server-side; a used/unknown/expired token answers the uniform 404, which —
+        // like the SSO leg — maps to an inline `ApiLoginFailedError`, not a global
+        // unauthorized redirect. The caller latches the exchange so it fires once.
+        claimLogin: async (body) => {
+            try {
+                return await req('/api/login/claim', s.loginResult, { method: 'POST', body });
+            }
+            catch (error) {
+                return asLoginError(error);
+            }
+        },
+    };
+}
+export function logoutClient(t) {
+    const { req } = t;
+    return {
+        // The single authed logout dispatcher — revokes the caller's accounts
+        // session server-side before the shell clears local state. A plain `sk-` key
+        // has nothing to revoke and answers 404 (surfaced as an `ApiError`, quiet at
+        // the call site); a 5xx/network failure is a real revoke failure the shell
+        // surfaces loudly.
+        logout: () => req('/api/auth/logout', s.logoutResult, { method: 'POST' }),
+    };
+}
+//# sourceMappingURL=login-client.js.map

package/dist/client/login-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-client.js","sourceRoot":"","sources":["../../src/client/login-client.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAGhF;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;QAC1C,MAAM,IAAI,mBAAmB,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,IACE,KAAK,YAAY,QAAQ;QACzB,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG;YACnB,KAAK,CAAC,MAAM,KAAK,GAAG;YACpB,KAAK,CAAC,MAAM,KAAK,GAAG;YACpB,KAAK,CAAC,MAAM,KAAK,GAAG;YACpB,KAAK,CAAC,MAAM,KAAK,GAAG;YACpB,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,EACvB,CAAC;QACD,MAAM,IAAI,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAY;IACtC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,wEAAwE;QACxE,4EAA4E;QAC5E,iBAAiB;QACjB,eAAe,EAAE,CAAC,OAAkC,EAAE,EAAE,CACtD,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACxE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,8EAA8E;QAC9E,gEAAgE;QAChE,eAAe,EAAE,KAAK,EAAE,IAAY,EAAE,MAA8B,EAAE,EAAE;YACtE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,6DAA6D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,oEAAoE;QACpE,eAAe,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,WAAW,EAAE;oBACzD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,EAAE,IAAI,EAAE;iBACf,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,6EAA6E;QAC7E,wEAAwE;QACxE,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,UAAU,EAAE,KAAK,EAAE,IAAuB,EAAE,EAAE;YAC5C,IAAI,CAAC;gBACH,OAAO,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAY;IACvC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,sEAAsE;QACtE,6EAA6E;QAC7E,6EAA6E;QAC7E,2EAA2E;QAC3E,mBAAmB;QACnB,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC"}