@tai42/api-client 15.0.0 → 16.0.1

package/dist/client/policy-client.js

@@ -0,0 +1,26 @@
+/** Access-policy validation, versioning and rollback sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function policyClient(t) {
+    const { req } = t;
+    return {
+        // The fail-closed jq guard: compiles (and, with `sample_context`, evaluates) a
+        // condition without persisting anything, so a broken condition is caught at
+        // author time instead of locking a key out at enforcement. A broken condition
+        // is a 400 the transport throws — never a false-positive `ok`.
+        validateCondition: (body) => req('/api/auth/validate-condition', s.validateConditionResult, { method: 'POST', body }),
+        // The user's append-only policy version history (each row's `is_current`
+        // derived from the active pointer). SECRET-ADJACENT — the body carries the raw
+        // condition, so its fixtures are hand-authored.
+        listPolicyVersions: (userId, signal) => req(`/api/auth/api-keys/${encodeSegment(userId)}/policy/versions`, s.policyVersionList, {
+            signal,
+        }),
+        // Re-point the enforced policy to a prior version; returns the re-pointed
+        // active version. Enforcement follows on cache invalidation.
+        rollbackPolicy: (userId, version) => req(`/api/auth/api-keys/${encodeSegment(userId)}/policy/rollback`, s.policyRollback, {
+            method: 'POST',
+            body: { version },
+        }),
+    };
+}
+//# sourceMappingURL=policy-client.js.map

package/dist/client/policy-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-client.js","sourceRoot":"","sources":["../../src/client/policy-client.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAcxC,MAAM,UAAU,YAAY,CAAC,CAAY;IACvC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,+EAA+E;QAC/E,4EAA4E;QAC5E,8EAA8E;QAC9E,+DAA+D;QAC/D,iBAAiB,EAAE,CAAC,IAA2B,EAAE,EAAE,CACjD,GAAG,CAAC,8BAA8B,EAAE,CAAC,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1F,yEAAyE;QACzE,+EAA+E;QAC/E,gDAAgD;QAChD,kBAAkB,EAAE,CAAC,MAAc,EAAE,MAAoB,EAAE,EAAE,CAC3D,GAAG,CAAC,sBAAsB,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,iBAAiB,EAAE;YACtF,MAAM;SACP,CAAC;QACJ,0EAA0E;QAC1E,6DAA6D;QAC7D,cAAc,EAAE,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE,CAClD,GAAG,CAAC,sBAAsB,aAAa,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,cAAc,EAAE;YACnF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/client/presets-client.d.ts

@@ -0,0 +1,335 @@
+/** Preset CRUD, versioning and validation sub-client. */
+import * as s from '../schemas';
+import type { Transport } from './transport';
+/**
+ * Body for creating a preset (POST `/api/presets`). `description` is the bound
+ * tool's LLM-facing docstring — REQUIRED non-empty on every create path (the door
+ * rejects an empty one with a 422); it is never the tool_meta `display_name`.
+ * `extensions` is the combos list — the create flow OMITS it when there are no
+ * combos (the route rejects an explicit `extensions: []`). `output_schema` is the
+ * optional author-set output JSON Schema; `input_schema` is the optional author-set
+ * input JSON Schema, read by the router as a top-level version field. Each combo
+ * element is a bare extension name or a `{ name, config }` mapping. Categorization
+ * tags live in the tool_meta overlay, written after a successful create — never in
+ * this body.
+ */
+export interface CreatePresetBody {
+    readonly name: string;
+    readonly base_tool: string;
+    readonly description: string;
+    readonly fixed_kwargs?: Record<string, unknown>;
+    readonly extensions?: readonly s.PresetExtensionElement[][];
+    readonly output_schema?: Record<string, unknown> | null;
+    readonly input_schema?: Record<string, unknown> | null;
+    readonly state_binding?: s.StateBinding | null;
+}
+/**
+ * Body for saving a new preset version (POST `/api/presets/{name}/versions`). At
+ * least one field must be provided (an empty body is a loud 400). Each field's
+ * sentinel is uniform: omitted carries the active version's value forward; an
+ * explicit `[]` clears `extensions`, and an explicit `null` clears `output_schema`
+ * or `input_schema`. `input_schema` is the optional author-set input JSON Schema and
+ * follows the same carry-forward sentinel as `output_schema`. `state_binding` is the
+ * optional door-layer binding and follows the same sentinel: omitted carries the active
+ * one forward, an explicit `null` clears it. `description` carries forward when omitted;
+ * an explicit non-empty string sets it (the API rejects an explicit empty one).
+ * Categorization tags are not a version field — they live in the tool_meta overlay.
+ */
+export interface SavePresetVersionBody {
+    readonly fixed_kwargs?: Record<string, unknown>;
+    readonly description?: string;
+    readonly extensions?: readonly s.PresetExtensionElement[][];
+    readonly output_schema?: Record<string, unknown> | null;
+    readonly input_schema?: Record<string, unknown> | null;
+    readonly state_binding?: s.StateBinding | null;
+}
+/**
+ * Body for the dry-run validate door (POST `/api/presets/validate`). `name` is
+ * required and selects the verdict mode server-side: CREATE when no preset named
+ * `name` exists (then `base_tool` is required), VERSION when one does (the version
+ * fields are read under save-version semantics). The draft is sent exactly as the
+ * matching write would send it.
+ */
+export interface ValidatePresetBody {
+    readonly name: string;
+    readonly base_tool?: string;
+    readonly description?: string;
+    readonly fixed_kwargs?: Record<string, unknown>;
+    readonly extensions?: readonly s.PresetExtensionElement[][];
+    readonly output_schema?: Record<string, unknown> | null;
+    readonly input_schema?: Record<string, unknown> | null;
+    readonly state_binding?: s.StateBinding | null;
+}
+export declare function presetsClient(t: Transport): {
+    listPresets: (signal?: AbortSignal) => Promise<{
+        name: string;
+        base_tool: string;
+        description: string;
+        active_version: number;
+        extensions: (string | {
+            name: string;
+            config: Record<string, unknown>;
+        })[][];
+        output_schema: Record<string, unknown> | null;
+        input_schema: Record<string, unknown> | null;
+        conflicted: boolean;
+        conflicted_reason: string | null;
+        uses: string[];
+        used_by: string[];
+    }[]>;
+    createPreset: (body: CreatePresetBody) => Promise<{
+        name: string;
+        base_tool: string;
+        description: string;
+        active_version: number;
+        extensions: (string | {
+            name: string;
+            config: Record<string, unknown>;
+        })[][];
+        output_schema: Record<string, unknown> | null;
+        input_schema: Record<string, unknown> | null;
+        conflicted: boolean;
+        conflicted_reason: string | null;
+        uses: string[];
+        used_by: string[];
+    }>;
+    getPreset: (name: string, signal?: AbortSignal) => Promise<{
+        name: string;
+        base_tool: string;
+        description: string;
+        active_version: number;
+        extensions: (string | {
+            name: string;
+            config: Record<string, unknown>;
+        })[][];
+        output_schema: Record<string, unknown> | null;
+        input_schema: Record<string, unknown> | null;
+        conflicted: boolean;
+        conflicted_reason: string | null;
+        uses: string[];
+        used_by: string[];
+        fixed_kwargs: Record<string, unknown>;
+    }>;
+    listPresetVersions: (name: string, signal?: AbortSignal) => Promise<{
+        version: number;
+        body: {
+            base_tool: string;
+            description: string;
+            extensions: (string | Record<string, unknown>)[][];
+            fixed_kwargs: Record<string, unknown>;
+            input_schema: Record<string, unknown> | {
+                content?: string | undefined;
+                id?: string | undefined;
+                kwargs?: Record<string, unknown> | undefined;
+            } | null;
+            output_schema: Record<string, unknown> | {
+                content?: string | undefined;
+                id?: string | undefined;
+                kwargs?: Record<string, unknown> | undefined;
+            } | null;
+            state_binding: {
+                states: {
+                    input_injections: {
+                        into: string;
+                        jq: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        template_jq: string | null;
+                    }[];
+                    scope_expr: {
+                        content?: string | undefined;
+                        id?: string | undefined;
+                        kwargs?: Record<string, unknown> | undefined;
+                    } | null;
+                    state: string;
+                    subject_expr: {
+                        content?: string | undefined;
+                        id?: string | undefined;
+                        kwargs?: Record<string, unknown> | undefined;
+                    };
+                    templates: string[];
+                    updates: {
+                        adapter: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        jq: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        op_id: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        template_jq: string | null;
+                    }[];
+                }[];
+            } | null;
+        };
+        tags: string[];
+        created_at: string;
+        is_current: boolean;
+    }[]>;
+    getPresetVersion: (name: string, version: number, signal?: AbortSignal) => Promise<{
+        version: number;
+        body: {
+            base_tool: string;
+            description: string;
+            extensions: (string | Record<string, unknown>)[][];
+            fixed_kwargs: Record<string, unknown>;
+            input_schema: Record<string, unknown> | {
+                content?: string | undefined;
+                id?: string | undefined;
+                kwargs?: Record<string, unknown> | undefined;
+            } | null;
+            output_schema: Record<string, unknown> | {
+                content?: string | undefined;
+                id?: string | undefined;
+                kwargs?: Record<string, unknown> | undefined;
+            } | null;
+            state_binding: {
+                states: {
+                    input_injections: {
+                        into: string;
+                        jq: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        template_jq: string | null;
+                    }[];
+                    scope_expr: {
+                        content?: string | undefined;
+                        id?: string | undefined;
+                        kwargs?: Record<string, unknown> | undefined;
+                    } | null;
+                    state: string;
+                    subject_expr: {
+                        content?: string | undefined;
+                        id?: string | undefined;
+                        kwargs?: Record<string, unknown> | undefined;
+                    };
+                    templates: string[];
+                    updates: {
+                        adapter: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        jq: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        op_id: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        template_jq: string | null;
+                    }[];
+                }[];
+            } | null;
+        };
+        tags: string[];
+        created_at: string;
+        is_current: boolean;
+    }>;
+    savePresetVersion: (name: string, body: SavePresetVersionBody) => Promise<{
+        version: number;
+        body: {
+            base_tool: string;
+            description: string;
+            extensions: (string | Record<string, unknown>)[][];
+            fixed_kwargs: Record<string, unknown>;
+            input_schema: Record<string, unknown> | {
+                content?: string | undefined;
+                id?: string | undefined;
+                kwargs?: Record<string, unknown> | undefined;
+            } | null;
+            output_schema: Record<string, unknown> | {
+                content?: string | undefined;
+                id?: string | undefined;
+                kwargs?: Record<string, unknown> | undefined;
+            } | null;
+            state_binding: {
+                states: {
+                    input_injections: {
+                        into: string;
+                        jq: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        template_jq: string | null;
+                    }[];
+                    scope_expr: {
+                        content?: string | undefined;
+                        id?: string | undefined;
+                        kwargs?: Record<string, unknown> | undefined;
+                    } | null;
+                    state: string;
+                    subject_expr: {
+                        content?: string | undefined;
+                        id?: string | undefined;
+                        kwargs?: Record<string, unknown> | undefined;
+                    };
+                    templates: string[];
+                    updates: {
+                        adapter: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        jq: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        op_id: {
+                            content?: string | undefined;
+                            id?: string | undefined;
+                            kwargs?: Record<string, unknown> | undefined;
+                        } | null;
+                        template_jq: string | null;
+                    }[];
+                }[];
+            } | null;
+        };
+        tags: string[];
+        created_at: string;
+        is_current: boolean;
+    }>;
+    rollbackPreset: (name: string, version: number) => Promise<{
+        name: string;
+        active_version: number;
+    }>;
+    deletePreset: (name: string) => Promise<{
+        name: string;
+        deleted: true;
+    }>;
+    renamePreset: (name: string, newName: string) => Promise<{
+        name: string;
+        renamed_from: string;
+        active_version: number;
+    }>;
+    getPresetReferees: (name: string, signal?: AbortSignal) => Promise<{
+        name: string;
+        referees: string[];
+    }>;
+    validatePreset: (body: ValidatePresetBody) => Promise<{
+        valid: boolean;
+        error: string | null;
+    }>;
+    setPresetVersionTags: (name: string, version: number, tags: readonly string[]) => Promise<{
+        name: string;
+        version: number;
+        tags: string[];
+    }>;
+};
+//# sourceMappingURL=presets-client.d.ts.map

package/dist/client/presets-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets-client.d.ts","sourceRoot":"","sources":["../../src/client/presets-client.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAEhC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAEvD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;CAChD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;CAChD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC,sBAAsB,EAAE,EAAE,CAAC;IAC5D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAIvD,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;CAChD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,SAAS;2BAKf,WAAW;;;;;;;;;;;;;;;;yBACb,gBAAgB;;;;;;;;;;;;;;;;sBAEnB,MAAM,WAAW,WAAW;;;;;;;;;;;;;;;;;+BAEnB,MAAM,WAAW,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAE9B,MAAM,WAAW,MAAM,WAAW,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAM5C,MAAM,QAAQ,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAKtC,MAAM,WAAW,MAAM;;;;yBAKzB,MAAM;;;;yBAEN,MAAM,WAAW,MAAM;;;;;8BAOlB,MAAM,WAAW,WAAW;;;;2BAI/B,kBAAkB;;;;iCAIZ,MAAM,WAAW,MAAM,QAAQ,SAAS,MAAM,EAAE;;;;;EAOhF"}

package/dist/client/presets-client.js

@@ -0,0 +1,38 @@
+/** Preset CRUD, versioning and validation sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function presetsClient(t) {
+    const { req } = t;
+    return {
+        // Every preset is store-backed and versioned; the list is the single
+        // management population (the presets plus the conflicted quarantined rows).
+        listPresets: (signal) => req('/api/presets', s.presetList, { signal }),
+        createPreset: (body) => req('/api/presets', s.presetRecord, { method: 'POST', body }),
+        getPreset: (name, signal) => req(`/api/presets/${encodeSegment(name)}`, s.presetDetail, { signal }),
+        listPresetVersions: (name, signal) => req(`/api/presets/${encodeSegment(name)}/versions`, s.presetVersionList, { signal }),
+        getPresetVersion: (name, version, signal) => req(`/api/presets/${encodeSegment(name)}/versions/${encodeSegment(version)}`, s.presetVersion, { signal }),
+        savePresetVersion: (name, body) => req(`/api/presets/${encodeSegment(name)}/versions`, s.presetVersion, {
+            method: 'POST',
+            body,
+        }),
+        rollbackPreset: (name, version) => req(`/api/presets/${encodeSegment(name)}/rollback`, s.presetRollback, {
+            method: 'POST',
+            body: { version },
+        }),
+        deletePreset: (name) => req(`/api/presets/${encodeSegment(name)}`, s.presetDeleted, { method: 'DELETE' }),
+        renamePreset: (name, newName) => req(`/api/presets/${encodeSegment(name)}/rename`, s.presetRenamed, {
+            method: 'POST',
+            body: { new_name: newName },
+        }),
+        // The presets whose active composition names this one as a tool — the referees
+        // a rename would strand. A rename preflight reads this to warn before the 409.
+        getPresetReferees: (name, signal) => req(`/api/presets/${encodeSegment(name)}/referees`, s.presetReferees, { signal }),
+        // The dry-run verdict for a draft (create OR version, mode-resolved server-side):
+        // `valid` plus the server's verbatim `error` message. Both verdicts are HTTP 200.
+        validatePreset: (body) => req('/api/presets/validate', s.presetValidation, { method: 'POST', body }),
+        // Replace one version's `tags` annotation — labels on an immutable body, so no
+        // rebind. Returns the re-annotated identity + new tag list.
+        setPresetVersionTags: (name, version, tags) => req(`/api/presets/${encodeSegment(name)}/versions/${encodeSegment(version)}/tags`, s.presetVersionTags, { method: 'PUT', body: { tags } }),
+    };
+}
+//# sourceMappingURL=presets-client.js.map

package/dist/client/presets-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presets-client.js","sourceRoot":"","sources":["../../src/client/presets-client.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAqExC,MAAM,UAAU,aAAa,CAAC,CAAY;IACxC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,qEAAqE;QACrE,4EAA4E;QAC5E,WAAW,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC;QACpF,YAAY,EAAE,CAAC,IAAsB,EAAE,EAAE,CACvC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/D,SAAS,EAAE,CAAC,IAAY,EAAE,MAAoB,EAAE,EAAE,CAChD,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QACxE,kBAAkB,EAAE,CAAC,IAAY,EAAE,MAAoB,EAAE,EAAE,CACzD,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC;QACtF,gBAAgB,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,MAAoB,EAAE,EAAE,CACxE,GAAG,CACD,gBAAgB,aAAa,CAAC,IAAI,CAAC,aAAa,aAAa,CAAC,OAAO,CAAC,EAAE,EACxE,CAAC,CAAC,aAAa,EACf,EAAE,MAAM,EAAE,CACX;QACH,iBAAiB,EAAE,CAAC,IAAY,EAAE,IAA2B,EAAE,EAAE,CAC/D,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,IAAI;SACL,CAAC;QACJ,cAAc,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAChD,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC;QACJ,YAAY,EAAE,CAAC,IAAY,EAAE,EAAE,CAC7B,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACnF,YAAY,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAC9C,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;SAC5B,CAAC;QACJ,+EAA+E;QAC/E,+EAA+E;QAC/E,iBAAiB,EAAE,CAAC,IAAY,EAAE,MAAoB,EAAE,EAAE,CACxD,GAAG,CAAC,gBAAgB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC;QACnF,kFAAkF;QAClF,kFAAkF;QAClF,cAAc,EAAE,CAAC,IAAwB,EAAE,EAAE,CAC3C,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5E,+EAA+E;QAC/E,4DAA4D;QAC5D,oBAAoB,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,IAAuB,EAAE,EAAE,CAC/E,GAAG,CACD,gBAAgB,aAAa,CAAC,IAAI,CAAC,aAAa,aAAa,CAAC,OAAO,CAAC,OAAO,EAC7E,CAAC,CAAC,iBAAiB,EACnB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAClC;KACJ,CAAC;AACJ,CAAC"}

package/dist/client/profiles-client.d.ts

@@ -0,0 +1,102 @@
+/** Settings-profile CRUD, versioning and apply sub-client. */
+import * as s from '../schemas';
+import type { Transport } from './transport';
+export declare function profilesClient(t: Transport): {
+    listSettingsProfiles: (signal?: AbortSignal) => Promise<{
+        name: string;
+        description: string;
+    }[]>;
+    getSettingsProfile: (name: string, signal?: AbortSignal) => Promise<{
+        description: string;
+        env: Record<string, string>;
+        secret_keys: string[];
+    }>;
+    putSettingsProfile: (name: string, body: s.SettingsProfileBody) => Promise<{
+        ok: true;
+        version?: number | undefined;
+    }>;
+    deleteSettingsProfile: (name: string) => Promise<{
+        ok: true;
+    }>;
+    diffSettingsProfile: (name: string) => Promise<{
+        added: string[];
+        removed: string[];
+        changed: {
+            key: string;
+            old: string;
+            new: string;
+        }[];
+        recycle_keys: string[];
+        refused_keys: string[];
+    }>;
+    applySettingsProfile: (name: string) => Promise<{
+        hot: string[];
+        recycle: {
+            name: string;
+            kind: string;
+            status: string;
+            generation_before: number;
+        }[];
+        fresh: {
+            name: string;
+            kind: string;
+            generation: number;
+        }[];
+        refused: {
+            key: string;
+            reason: string;
+        }[];
+        fanout: {
+            mode: "local-only";
+            note: string;
+        } | {
+            op: string;
+            reachable: boolean;
+            local_only: boolean;
+            results: {
+                name: string;
+                outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+                payload: unknown;
+                error: string | null;
+                detail: string | null;
+            }[];
+            error: string | null;
+            mode: "fleet";
+        } | {
+            op: string;
+            reachable: boolean;
+            local_only: boolean;
+            results: {
+                name: string;
+                outcome: "failed" | "resyncing" | "recycling" | "stale" | "applied" | "missing" | "departed" | "timed_out";
+                payload: unknown;
+                error: string | null;
+                detail: string | null;
+            }[];
+            error: string | null;
+            mode: "unreachable";
+        };
+    }>;
+    listSettingsProfileVersions: (name: string, signal?: AbortSignal) => Promise<{
+        version: number;
+        tags: string[];
+        created_at: string;
+        is_current: boolean;
+    }[]>;
+    getSettingsProfileVersion: (name: string, version: number, signal?: AbortSignal) => Promise<{
+        version: number;
+        tags: string[];
+        created_at: string;
+        is_current: boolean;
+        body: {
+            description: string;
+            env: Record<string, string>;
+            secret_keys: string[];
+        };
+    }>;
+    rollbackSettingsProfile: (name: string, version: number) => Promise<{
+        ok: true;
+        version: number;
+    }>;
+};
+//# sourceMappingURL=profiles-client.d.ts.map

package/dist/client/profiles-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles-client.d.ts","sourceRoot":"","sources":["../../src/client/profiles-client.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAEhC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,cAAc,CAAC,CAAC,EAAE,SAAS;oCAKP,WAAW;;;;+BAEhB,MAAM,WAAW,WAAW;;;;;+BAE5B,MAAM,QAAQ,CAAC,CAAC,mBAAmB;;;;kCAKhC,MAAM;;;gCAKR,MAAM;;;;;;;;;;;iCAML,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wCAIC,MAAM,WAAW,WAAW;;;;;;sCAI9B,MAAM,WAAW,MAAM,WAAW,WAAW;;;;;;;;;;;oCAM/C,MAAM,WAAW,MAAM;;;;EAM1D"}

package/dist/client/profiles-client.js

@@ -0,0 +1,37 @@
+/** Settings-profile CRUD, versioning and apply sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function profilesClient(t) {
+    const { req } = t;
+    return {
+        // The admin-only `/api/config/profiles/*` surface. Bodies/diff/versions carry
+        // REAL secret values (secret/fenced routes); masking is CLIENT-SIDE.
+        listSettingsProfiles: (signal) => req('/api/config/profiles', s.settingsProfileList, { signal }),
+        getSettingsProfile: (name, signal) => req(`/api/config/profiles/${encodeSegment(name)}`, s.settingsProfileBody, { signal }),
+        putSettingsProfile: (name, body) => req(`/api/config/profiles/${encodeSegment(name)}`, s.settingsProfileSaved, {
+            method: 'PUT',
+            body,
+        }),
+        deleteSettingsProfile: (name) => req(`/api/config/profiles/${encodeSegment(name)}`, s.settingsProfileDeleted, {
+            method: 'DELETE',
+        }),
+        // Diff of the SAVED profile vs the stored env — server-computed, no request body.
+        diffSettingsProfile: (name) => req(`/api/config/profiles/${encodeSegment(name)}/diff`, s.settingsProfileDiff, {
+            method: 'POST',
+        }),
+        // Apply the SAVED profile (full-replace of the profile-managed band). Fenced,
+        // destructive → the dedicated `profile_apply_response` report.
+        applySettingsProfile: (name) => req(`/api/config/profiles/${encodeSegment(name)}/apply`, s.profileApplyResponse, {
+            method: 'POST',
+        }),
+        listSettingsProfileVersions: (name, signal) => req(`/api/config/profiles/${encodeSegment(name)}/versions`, s.settingsProfileVersionList, {
+            signal,
+        }),
+        getSettingsProfileVersion: (name, version, signal) => req(`/api/config/profiles/${encodeSegment(name)}/versions/${encodeSegment(version)}`, s.settingsProfileVersion, { signal }),
+        rollbackSettingsProfile: (name, version) => req(`/api/config/profiles/${encodeSegment(name)}/rollback`, s.settingsProfileRollback, {
+            method: 'POST',
+            body: { version },
+        }),
+    };
+}
+//# sourceMappingURL=profiles-client.js.map

package/dist/client/profiles-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles-client.js","sourceRoot":"","sources":["../../src/client/profiles-client.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAGxC,MAAM,UAAU,cAAc,CAAC,CAAY;IACzC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,8EAA8E;QAC9E,qEAAqE;QACrE,oBAAoB,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC7C,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC;QAChE,kBAAkB,EAAE,CAAC,IAAY,EAAE,MAAoB,EAAE,EAAE,CACzD,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC;QACvF,kBAAkB,EAAE,CAAC,IAAY,EAAE,IAA2B,EAAE,EAAE,CAChE,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,EAAE;YACzE,MAAM,EAAE,KAAK;YACb,IAAI;SACL,CAAC;QACJ,qBAAqB,EAAE,CAAC,IAAY,EAAE,EAAE,CACtC,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,sBAAsB,EAAE;YAC3E,MAAM,EAAE,QAAQ;SACjB,CAAC;QACJ,kFAAkF;QAClF,mBAAmB,EAAE,CAAC,IAAY,EAAE,EAAE,CACpC,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,mBAAmB,EAAE;YAC7E,MAAM,EAAE,MAAM;SACf,CAAC;QACJ,8EAA8E;QAC9E,+DAA+D;QAC/D,oBAAoB,EAAE,CAAC,IAAY,EAAE,EAAE,CACrC,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,oBAAoB,EAAE;YAC/E,MAAM,EAAE,MAAM;SACf,CAAC;QACJ,2BAA2B,EAAE,CAAC,IAAY,EAAE,MAAoB,EAAE,EAAE,CAClE,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,0BAA0B,EAAE;YACxF,MAAM;SACP,CAAC;QACJ,yBAAyB,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,MAAoB,EAAE,EAAE,CACjF,GAAG,CACD,wBAAwB,aAAa,CAAC,IAAI,CAAC,aAAa,aAAa,CAAC,OAAO,CAAC,EAAE,EAChF,CAAC,CAAC,sBAAsB,EACxB,EAAE,MAAM,EAAE,CACX;QACH,uBAAuB,EAAE,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CACzD,GAAG,CAAC,wBAAwB,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,uBAAuB,EAAE;YACrF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/client/schedules-client.d.ts

@@ -0,0 +1,28 @@
+/** Schedule listing and mutation sub-client. */
+import * as s from '../schemas';
+import type { Transport } from './transport';
+export declare function schedulesClient(t: Transport): {
+    listSchedules: (signal?: AbortSignal) => Promise<{
+        [x: string]: unknown;
+        name: string;
+        enabled?: boolean | undefined;
+        schedule?: unknown;
+        target?: unknown;
+        args?: unknown[] | undefined;
+        kwargs?: Record<string, unknown> | undefined;
+    }[]>;
+    getServerDateTime: (signal?: AbortSignal) => Promise<{
+        [x: string]: unknown;
+        utc: unknown;
+        local?: unknown;
+        system?: unknown;
+    }>;
+    addSchedule: (body: {
+        tool_name: string;
+        tool_kwargs: Record<string, unknown>;
+        schedule_kwargs: Record<string, unknown>;
+        state_binding?: s.StateBinding | null;
+    }) => Promise<unknown>;
+    deleteSchedule: (name: string) => Promise<unknown>;
+};
+//# sourceMappingURL=schedules-client.d.ts.map

package/dist/client/schedules-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules-client.d.ts","sourceRoot":"","sources":["../../src/client/schedules-client.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAEhC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,eAAe,CAAC,CAAC,EAAE,SAAS;6BAGf,WAAW;;;;;;;;;iCACP,WAAW;;;;;;wBAEpB;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEzC,aAAa,CAAC,EAAE,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC;KACvC;2BACsB,MAAM;EAGhC"}

package/dist/client/schedules-client.js

@@ -0,0 +1,13 @@
+/** Schedule listing and mutation sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function schedulesClient(t) {
+    const { req } = t;
+    return {
+        listSchedules: (signal) => req('/api/schedules', s.scheduleList, { signal }),
+        getServerDateTime: (signal) => req('/api/schedules/server-datetime', s.serverDateTime, { signal }),
+        addSchedule: (body) => req('/api/schedules', s.jsonValue, { method: 'POST', body }),
+        deleteSchedule: (name) => req(`/api/schedules/${encodeSegment(name)}`, s.jsonValue, { method: 'DELETE' }),
+    };
+}
+//# sourceMappingURL=schedules-client.js.map

package/dist/client/schedules-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules-client.js","sourceRoot":"","sources":["../../src/client/schedules-client.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAGxC,MAAM,UAAU,eAAe,CAAC,CAAY;IAC1C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,aAAa,EAAE,CAAC,MAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QAC1F,iBAAiB,EAAE,CAAC,MAAoB,EAAE,EAAE,CAC1C,GAAG,CAAC,gCAAgC,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC;QACrE,WAAW,EAAE,CAAC,IAMb,EAAE,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAClE,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAC/B,GAAG,CAAC,kBAAkB,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;KAClF,CAAC;AACJ,CAAC"}

package/dist/client/settings-schema-client.d.ts

@@ -0,0 +1,23 @@
+import type { Transport } from './transport';
+export declare function settingsSchemaClient(t: Transport): {
+    getSettingsSchema: (signal?: AbortSignal) => Promise<{
+        groups: {
+            name: string;
+            module: string;
+            qualname: string;
+            fields: {
+                name: string;
+                env_var: string;
+                type: string;
+                default: unknown;
+                required: boolean;
+                secret: boolean;
+                description: string | null;
+                nested_group: string | null;
+                default_namespace_var: string | null;
+                value: unknown;
+            }[];
+        }[];
+    }>;
+};
+//# sourceMappingURL=settings-schema-client.d.ts.map

package/dist/client/settings-schema-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-schema-client.d.ts","sourceRoot":"","sources":["../../src/client/settings-schema-client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS;iCAGhB,WAAW;;;;;;;;;;;;;;;;;;;EAG3C"}

package/dist/client/settings-schema-client.js

@@ -0,0 +1,9 @@
+/** Settings-form schema read sub-client. */
+import * as s from '../schemas';
+export function settingsSchemaClient(t) {
+    const { req } = t;
+    return {
+        getSettingsSchema: (signal) => req('/api/config/settings-schema', s.settingsSchema, { signal }),
+    };
+}
+//# sourceMappingURL=settings-schema-client.js.map