@tai42/api-client 16.0.0 → 16.0.1

package/dist/schemas/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/schemas/templates.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC"}

package/dist/schemas/tool-meta.d.ts

@@ -0,0 +1,64 @@
+/** Tool-organization overlay (folders and per-tool meta) schemas. */
+import { z } from 'zod';
+/**
+ * One folder in the tool-organization tree (`tool_folders`). `parent_id` is `null`
+ * for a root folder and otherwise the containing folder's `id`; nesting is endless
+ * via the parent chain. Ids are UUID strings. A drift throws `ApiSchemaError`.
+ */
+export declare const folderRecord: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    parent_id: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type FolderRecord = z.infer<typeof folderRecord>;
+/**
+ * The organizational overlay for one tool, keyed by `tool_name`. `display_name`
+ * overrides the rendered label (`display_name ?? name`); `folder_id` places the tool
+ * in a folder (`null` = unfiled); `tags` is the user's editable categorization,
+ * merged with the tool's read-only native tags by the UI; `badges` is the operator's
+ * editable capability-label overlay, merged with the tool's read-only plugin-declared
+ * badges by the UI (INFORMATIONAL, never an enforced gate); `hidden` is TRI-STATE —
+ * `null` = defer to the plugin declaration, `true` = force hidden, `false` = force
+ * visible. A drift throws `ApiSchemaError`.
+ */
+export declare const toolMetaRecord: z.ZodObject<{
+    tool_name: z.ZodString;
+    display_name: z.ZodNullable<z.ZodString>;
+    folder_id: z.ZodNullable<z.ZodString>;
+    tags: z.ZodArray<z.ZodString>;
+    badges: z.ZodArray<z.ZodString>;
+    hidden: z.ZodNullable<z.ZodBoolean>;
+}, z.core.$strip>;
+export type ToolMetaRecord = z.infer<typeof toolMetaRecord>;
+/**
+ * `GET /api/tool-meta` — the whole overlay in one read: the flat folder tree plus
+ * every per-tool row. The UI builds the tree and merges the rows against the live
+ * tool list client-side. A drift throws `ApiSchemaError`.
+ */
+export declare const toolMetaOverlay: z.ZodObject<{
+    folders: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        parent_id: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    meta: z.ZodArray<z.ZodObject<{
+        tool_name: z.ZodString;
+        display_name: z.ZodNullable<z.ZodString>;
+        folder_id: z.ZodNullable<z.ZodString>;
+        tags: z.ZodArray<z.ZodString>;
+        badges: z.ZodArray<z.ZodString>;
+        hidden: z.ZodNullable<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ToolMetaOverlay = z.infer<typeof toolMetaOverlay>;
+/** `DELETE /api/tool-meta/tools/{tool_name}` — the dropped overlay row (idempotent). */
+export declare const toolMetaDeleted: z.ZodObject<{
+    tool_name: z.ZodString;
+    deleted: z.ZodLiteral<true>;
+}, z.core.$strip>;
+/** `DELETE /api/tool-meta/folders/{folder_id}` — the removed empty folder. */
+export declare const folderDeleted: z.ZodObject<{
+    folder_id: z.ZodString;
+    deleted: z.ZodLiteral<true>;
+}, z.core.$strip>;
+//# sourceMappingURL=tool-meta.d.ts.map

package/dist/schemas/tool-meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-meta.d.ts","sourceRoot":"","sources":["../../src/schemas/tool-meta.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;iBAIvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc;;;;;;;iBAOzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;iBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,wFAAwF;AACxF,eAAO,MAAM,eAAe;;;iBAAgE,CAAC;AAE7F,8EAA8E;AAC9E,eAAO,MAAM,aAAa;;;iBAAgE,CAAC"}

package/dist/schemas/tool-meta.js

@@ -0,0 +1,44 @@
+/** Tool-organization overlay (folders and per-tool meta) schemas. */
+import { z } from 'zod';
+/**
+ * One folder in the tool-organization tree (`tool_folders`). `parent_id` is `null`
+ * for a root folder and otherwise the containing folder's `id`; nesting is endless
+ * via the parent chain. Ids are UUID strings. A drift throws `ApiSchemaError`.
+ */
+export const folderRecord = z.object({
+    id: z.string(),
+    name: z.string(),
+    parent_id: z.string().nullable(),
+});
+/**
+ * The organizational overlay for one tool, keyed by `tool_name`. `display_name`
+ * overrides the rendered label (`display_name ?? name`); `folder_id` places the tool
+ * in a folder (`null` = unfiled); `tags` is the user's editable categorization,
+ * merged with the tool's read-only native tags by the UI; `badges` is the operator's
+ * editable capability-label overlay, merged with the tool's read-only plugin-declared
+ * badges by the UI (INFORMATIONAL, never an enforced gate); `hidden` is TRI-STATE —
+ * `null` = defer to the plugin declaration, `true` = force hidden, `false` = force
+ * visible. A drift throws `ApiSchemaError`.
+ */
+export const toolMetaRecord = z.object({
+    tool_name: z.string(),
+    display_name: z.string().nullable(),
+    folder_id: z.string().nullable(),
+    tags: z.array(z.string()),
+    badges: z.array(z.string()),
+    hidden: z.boolean().nullable(),
+});
+/**
+ * `GET /api/tool-meta` — the whole overlay in one read: the flat folder tree plus
+ * every per-tool row. The UI builds the tree and merges the rows against the live
+ * tool list client-side. A drift throws `ApiSchemaError`.
+ */
+export const toolMetaOverlay = z.object({
+    folders: z.array(folderRecord),
+    meta: z.array(toolMetaRecord),
+});
+/** `DELETE /api/tool-meta/tools/{tool_name}` — the dropped overlay row (idempotent). */
+export const toolMetaDeleted = z.object({ tool_name: z.string(), deleted: z.literal(true) });
+/** `DELETE /api/tool-meta/folders/{folder_id}` — the removed empty folder. */
+export const folderDeleted = z.object({ folder_id: z.string(), deleted: z.literal(true) });
+//# sourceMappingURL=tool-meta.js.map

package/dist/schemas/tool-meta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-meta.js","sourceRoot":"","sources":["../../src/schemas/tool-meta.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAGH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CAC9B,CAAC,CAAC;AAGH,wFAAwF;AACxF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE7F,8EAA8E;AAC9E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC"}

package/dist/schemas/tools.d.ts

@@ -0,0 +1,62 @@
+/** Tool catalog, run-result and per-tool tag response schemas. */
+import { z } from 'zod';
+export declare const toolNames: z.ZodArray<z.ZodString>;
+export declare const toolSchema: z.ZodObject<{
+    input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    output: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    description: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type ToolSchema = z.infer<typeof toolSchema>;
+export declare const allToolSchemas: z.ZodRecord<z.ZodString, z.ZodObject<{
+    input: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    output: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    description: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>>;
+export declare const runToolResult: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+/**
+ * The MEDIA content shape a direct tool run may return — fastmcp's serialized
+ * `Image`/`Audio` MediaBlock (`{ type, data: <base64>, mimeType }`). One recognised
+ * shape of the otherwise-arbitrary `runToolResult`, kept as its own schema so the
+ * viewer detects media by parse, not by ad-hoc shape check.
+ *
+ * SECURITY: the refinement pins `mimeType` to its kind — `image` MUST be `image/*`,
+ * `audio` MUST be `audio/*` — so a drifting/arbitrary mime fails the parse and is
+ * never turned into a `data:` URI (a `File` MediaBlock's distinct `EmbeddedResource`
+ * shape also fails here, by design).
+ */
+export declare const toolMediaResult: z.ZodObject<{
+    type: z.ZodEnum<{
+        image: "image";
+        audio: "audio";
+    }>;
+    data: z.ZodString;
+    mimeType: z.ZodString;
+}, z.core.$strip>;
+export type ToolMediaResult = z.infer<typeof toolMediaResult>;
+/**
+ * The ADDITIVE per-tool native surface (`GET /api/tools/tags`). Distinct from the
+ * flat `toolNames` contract (`GET /api/tools`, unchanged): each entry carries the
+ * tool's read-only FastMCP `tags` — so the shared `ToolPicker` can group/filter its
+ * options — plus `hidden`, the tool's OWN plugin-declared visibility (read from the
+ * FastMCP `meta` under `tai42/hidden`; a tool that never declared it is not hidden).
+ * The tool_meta overlay's tri-state override is merged on top client-side; this read
+ * exposes only the declaration.
+ *
+ * `badges` are the tool's plugin-DECLARED capability labels — purely INFORMATIONAL
+ * (e.g. `network`, `filesystem`), never a gate the server enforces. The overlay's
+ * own badges are merged on top client-side; this read exposes only the declaration.
+ */
+export declare const toolTagEntry: z.ZodObject<{
+    name: z.ZodString;
+    tags: z.ZodArray<z.ZodString>;
+    badges: z.ZodArray<z.ZodString>;
+    hidden: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const toolTags: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    tags: z.ZodArray<z.ZodString>;
+    badges: z.ZodArray<z.ZodString>;
+    hidden: z.ZodBoolean;
+}, z.core.$strip>>;
+export type ToolTagEntry = z.infer<typeof toolTagEntry>;
+//# sourceMappingURL=tools.d.ts.map

package/dist/schemas/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/schemas/tools.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,SAAS,yBAAsB,CAAC;AAE7C,eAAO,MAAM,UAAU;;;;iBAIrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,eAAO,MAAM,cAAc;;;;kBAAmC,CAAC;AAE/D,eAAO,MAAM,aAAa,yEAAY,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,eAAe;;;;;;;iBASxB,CAAC;AACL,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AACH,eAAO,MAAM,QAAQ;;;;;kBAAwB,CAAC;AAC9C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/schemas/tools.js

@@ -0,0 +1,53 @@
+/** Tool catalog, run-result and per-tool tag response schemas. */
+import { z } from 'zod';
+import { jsonSchema, jsonValue } from './shared';
+export const toolNames = z.array(z.string());
+export const toolSchema = z.object({
+    input: jsonSchema,
+    output: jsonSchema.nullable(),
+    description: z.string().nullable(),
+});
+export const allToolSchemas = z.record(z.string(), toolSchema);
+export const runToolResult = jsonValue;
+/**
+ * The MEDIA content shape a direct tool run may return — fastmcp's serialized
+ * `Image`/`Audio` MediaBlock (`{ type, data: <base64>, mimeType }`). One recognised
+ * shape of the otherwise-arbitrary `runToolResult`, kept as its own schema so the
+ * viewer detects media by parse, not by ad-hoc shape check.
+ *
+ * SECURITY: the refinement pins `mimeType` to its kind — `image` MUST be `image/*`,
+ * `audio` MUST be `audio/*` — so a drifting/arbitrary mime fails the parse and is
+ * never turned into a `data:` URI (a `File` MediaBlock's distinct `EmbeddedResource`
+ * shape also fails here, by design).
+ */
+export const toolMediaResult = z
+    .object({
+    type: z.enum(['image', 'audio']),
+    data: z.string(),
+    mimeType: z.string(),
+})
+    .refine((media) => media.mimeType.startsWith(`${media.type}/`), {
+    message: 'media mimeType must match its media kind (image/* for image, audio/* for audio)',
+    path: ['mimeType'],
+});
+/**
+ * The ADDITIVE per-tool native surface (`GET /api/tools/tags`). Distinct from the
+ * flat `toolNames` contract (`GET /api/tools`, unchanged): each entry carries the
+ * tool's read-only FastMCP `tags` — so the shared `ToolPicker` can group/filter its
+ * options — plus `hidden`, the tool's OWN plugin-declared visibility (read from the
+ * FastMCP `meta` under `tai42/hidden`; a tool that never declared it is not hidden).
+ * The tool_meta overlay's tri-state override is merged on top client-side; this read
+ * exposes only the declaration.
+ *
+ * `badges` are the tool's plugin-DECLARED capability labels — purely INFORMATIONAL
+ * (e.g. `network`, `filesystem`), never a gate the server enforces. The overlay's
+ * own badges are merged on top client-side; this read exposes only the declaration.
+ */
+export const toolTagEntry = z.object({
+    name: z.string(),
+    tags: z.array(z.string()),
+    badges: z.array(z.string()),
+    hidden: z.boolean(),
+});
+export const toolTags = z.array(toolTagEntry);
+//# sourceMappingURL=tools.js.map

package/dist/schemas/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/schemas/tools.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAEjD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAE7C,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;AAE/D,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AAEvC;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE;IAC9D,OAAO,EAAE,iFAAiF;IAC1F,IAAI,EAAE,CAAC,UAAU,CAAC;CACnB,CAAC,CAAC;AAGL;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC"}

package/dist/schemas/trigger-links.d.ts

@@ -0,0 +1,71 @@
+/** Trigger-link record and lifecycle response schemas. */
+import { z } from 'zod';
+/**
+ * `POST /api/hooks/trigger-links` — a freshly minted trigger link. `trigger_path`
+ * is a relative path (`/trigger/<token>`, never an absolute URL — Studio composes
+ * the API origin); `token` is the raw token returned exactly ONCE, in this response
+ * (nothing else stores or lists it — a listed link's QR is unrecoverable by
+ * design). `expires_at` is an ISO-8601 instant, or `null` for a permanent link.
+ */
+export declare const triggerLinkCreated: z.ZodObject<{
+    name: z.ZodString;
+    trigger_path: z.ZodString;
+    token: z.ZodString;
+    topic: z.ZodString;
+    expires_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TriggerLinkCreated = z.infer<typeof triggerLinkCreated>;
+/**
+ * One listed trigger-link record (`GET /api/hooks/trigger-links` item). `tool_kwargs`
+ * is the per-link params merged last into every fire (`null` or `{}` = none);
+ * `created_by` is the ambient creator identity (`null` on an identity-less,
+ * gate-off deployment); `token_hash_prefix` is a short hash prefix for log
+ * correlation — never a raw token (none is stored).
+ */
+export declare const triggerLinkRecord: z.ZodObject<{
+    name: z.ZodString;
+    topic: z.ZodString;
+    execution_key: z.ZodString;
+    trigger_auth: z.ZodEnum<{
+        public: "public";
+        verifier: "verifier";
+        token: "token";
+        "token+api_key": "token+api_key";
+        "out-of-service": "out-of-service";
+    }>;
+    tool_kwargs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    created_by: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    expires_at: z.ZodNullable<z.ZodString>;
+    token_hash_prefix: z.ZodString;
+}, z.core.$strip>;
+export type TriggerLinkRecord = z.infer<typeof triggerLinkRecord>;
+/** `GET /api/hooks/trigger-links` — every live trigger-link record. */
+export declare const triggerLinkList: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        topic: z.ZodString;
+        execution_key: z.ZodString;
+        trigger_auth: z.ZodEnum<{
+            public: "public";
+            verifier: "verifier";
+            token: "token";
+            "token+api_key": "token+api_key";
+            "out-of-service": "out-of-service";
+        }>;
+        tool_kwargs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        created_by: z.ZodNullable<z.ZodString>;
+        created_at: z.ZodString;
+        expires_at: z.ZodNullable<z.ZodString>;
+        token_hash_prefix: z.ZodString;
+    }, z.core.$strip>>;
+    total: z.ZodNumber;
+}, z.core.$strip>;
+export type TriggerLinkList = z.infer<typeof triggerLinkList>;
+/** `DELETE /api/hooks/trigger-links/{name}` — the revoked link. */
+export declare const triggerLinkDeleted: z.ZodObject<{
+    removed: z.ZodBoolean;
+    name: z.ZodString;
+}, z.core.$strip>;
+export type TriggerLinkDeleted = z.infer<typeof triggerLinkDeleted>;
+//# sourceMappingURL=trigger-links.d.ts.map

package/dist/schemas/trigger-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-links.d.ts","sourceRoot":"","sources":["../../src/schemas/trigger-links.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;iBAU5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,uEAAuE;AACvE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;iBAG1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,mEAAmE;AACnE,eAAO,MAAM,kBAAkB;;;iBAAuD,CAAC;AACvF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas/trigger-links.js

@@ -0,0 +1,46 @@
+/** Trigger-link record and lifecycle response schemas. */
+import { z } from 'zod';
+import { triggerAuth } from './hooks';
+// A trigger link is a minted, token-bearing PUBLIC URL (`GET|POST /trigger/{token}`)
+// that resolves to a hook TOPIC and fires it. Studio mints, lists, and revokes them
+// on the hooks page; the QR encodes the composed absolute URL.
+/**
+ * `POST /api/hooks/trigger-links` — a freshly minted trigger link. `trigger_path`
+ * is a relative path (`/trigger/<token>`, never an absolute URL — Studio composes
+ * the API origin); `token` is the raw token returned exactly ONCE, in this response
+ * (nothing else stores or lists it — a listed link's QR is unrecoverable by
+ * design). `expires_at` is an ISO-8601 instant, or `null` for a permanent link.
+ */
+export const triggerLinkCreated = z.object({
+    name: z.string(),
+    trigger_path: z.string(),
+    token: z.string(),
+    topic: z.string(),
+    expires_at: z.string().nullable(),
+});
+/**
+ * One listed trigger-link record (`GET /api/hooks/trigger-links` item). `tool_kwargs`
+ * is the per-link params merged last into every fire (`null` or `{}` = none);
+ * `created_by` is the ambient creator identity (`null` on an identity-less,
+ * gate-off deployment); `token_hash_prefix` is a short hash prefix for log
+ * correlation — never a raw token (none is stored).
+ */
+export const triggerLinkRecord = z.object({
+    name: z.string(),
+    topic: z.string(),
+    execution_key: z.string().min(1),
+    trigger_auth: triggerAuth,
+    tool_kwargs: z.record(z.string(), z.unknown()).nullable(),
+    created_by: z.string().nullable(),
+    created_at: z.string(),
+    expires_at: z.string().nullable(),
+    token_hash_prefix: z.string(),
+});
+/** `GET /api/hooks/trigger-links` — every live trigger-link record. */
+export const triggerLinkList = z.object({
+    items: z.array(triggerLinkRecord),
+    total: z.number(),
+});
+/** `DELETE /api/hooks/trigger-links/{name}` — the revoked link. */
+export const triggerLinkDeleted = z.object({ removed: z.boolean(), name: z.string() });
+//# sourceMappingURL=trigger-links.js.map

package/dist/schemas/trigger-links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-links.js","sourceRoot":"","sources":["../../src/schemas/trigger-links.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,qFAAqF;AACrF,oFAAoF;AACpF,+DAA+D;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,YAAY,EAAE,WAAW;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9B,CAAC,CAAC;AAGH,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC"}

package/dist/schemas/web-entry.d.ts

@@ -0,0 +1,45 @@
+/** Web-channel entry-gate code response schemas. */
+import { z } from 'zod';
+/** One minted entry code as the gate read door lists it — its hash id, its
+ * optional label, and when it was created / dies. Never a raw code. */
+export declare const webEntryCode: z.ZodObject<{
+    code_id: z.ZodString;
+    label: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    expires_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type WebEntryCode = z.infer<typeof webEntryCode>;
+/** `GET /api/channels/web/gates/{identity}` — the gate flag and its live codes. */
+export declare const webEntryGate: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    codes: z.ZodArray<z.ZodObject<{
+        code_id: z.ZodString;
+        label: z.ZodNullable<z.ZodString>;
+        created_at: z.ZodString;
+        expires_at: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type WebEntryGate = z.infer<typeof webEntryGate>;
+/** `PUT /api/channels/web/gates/{identity}` — the gate flag after the write. */
+export declare const webEntryGateState: z.ZodObject<{
+    enabled: z.ZodBoolean;
+}, z.core.$strip>;
+export type WebEntryGateState = z.infer<typeof webEntryGateState>;
+/**
+ * `POST /api/channels/web/gates/{identity}/codes` — a freshly minted code. The
+ * raw `code` rides this reply ONCE (nothing else stores or lists it — a listed
+ * code's raw value is unrecoverable by design); `code_id` is its hash id and
+ * `expires_at` an ISO-8601 instant, or `null` for a code that never expires.
+ */
+export declare const webEntryCodeMinted: z.ZodObject<{
+    code: z.ZodString;
+    code_id: z.ZodString;
+    expires_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type WebEntryCodeMinted = z.infer<typeof webEntryCodeMinted>;
+/** `DELETE /api/channels/web/gates/{identity}/codes/{code_id}` — the revoked code. */
+export declare const webEntryCodeRevoked: z.ZodObject<{
+    status: z.ZodLiteral<"revoked">;
+}, z.core.$strip>;
+export type WebEntryCodeRevoked = z.infer<typeof webEntryCodeRevoked>;
+//# sourceMappingURL=web-entry.d.ts.map

package/dist/schemas/web-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-entry.d.ts","sourceRoot":"","sources":["../../src/schemas/web-entry.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB;uEACuE;AACvE,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,mFAAmF;AACnF,eAAO,MAAM,YAAY;;;;;;;;iBAGvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,gFAAgF;AAChF,eAAO,MAAM,iBAAiB;;iBAAqC,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,sFAAsF;AACtF,eAAO,MAAM,mBAAmB;;iBAA6C,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/schemas/web-entry.js

@@ -0,0 +1,36 @@
+/** Web-channel entry-gate code response schemas. */
+import { z } from 'zod';
+// The web channel's entry gate: a web route can be gated so its chat page is
+// served only to a navigation carrying a live entry code. These four doors are
+// keyed by the route's `our_identity`. A raw code exists only in flight (the
+// mint reply); a listed code carries its hash id, never a raw value (none is
+// stored).
+/** One minted entry code as the gate read door lists it — its hash id, its
+ * optional label, and when it was created / dies. Never a raw code. */
+export const webEntryCode = z.object({
+    code_id: z.string(),
+    label: z.string().nullable(),
+    created_at: z.string(),
+    expires_at: z.string().nullable(),
+});
+/** `GET /api/channels/web/gates/{identity}` — the gate flag and its live codes. */
+export const webEntryGate = z.object({
+    enabled: z.boolean(),
+    codes: z.array(webEntryCode),
+});
+/** `PUT /api/channels/web/gates/{identity}` — the gate flag after the write. */
+export const webEntryGateState = z.object({ enabled: z.boolean() });
+/**
+ * `POST /api/channels/web/gates/{identity}/codes` — a freshly minted code. The
+ * raw `code` rides this reply ONCE (nothing else stores or lists it — a listed
+ * code's raw value is unrecoverable by design); `code_id` is its hash id and
+ * `expires_at` an ISO-8601 instant, or `null` for a code that never expires.
+ */
+export const webEntryCodeMinted = z.object({
+    code: z.string(),
+    code_id: z.string(),
+    expires_at: z.string().nullable(),
+});
+/** `DELETE /api/channels/web/gates/{identity}/codes/{code_id}` — the revoked code. */
+export const webEntryCodeRevoked = z.object({ status: z.literal('revoked') });
+//# sourceMappingURL=web-entry.js.map

package/dist/schemas/web-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-entry.js","sourceRoot":"","sources":["../../src/schemas/web-entry.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,WAAW;AAEX;uEACuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,mFAAmF;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;CAC7B,CAAC,CAAC;AAGH,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAGpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,sFAAsF;AACtF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC"}

package/dist/tool-runs.d.ts

@@ -17,9 +17,9 @@ import type { ApiConfig } from './http';
 /** A run's lifecycle state. `lost` = the server restarted mid-run; the result is
  * unrecoverable. `running` is the only non-terminal state. */
 export declare const toolRunStatus: z.ZodEnum<{
+    failed: "failed";
     running: "running";
     succeeded: "succeeded";
-    failed: "failed";
     lost: "lost";
 }>;
 /** `POST /api/tool-runs` → the handle for the detached run. */
@@ -32,9 +32,9 @@ export declare const toolRunRecord: z.ZodObject<{
     run_id: z.ZodString;
     tool_name: z.ZodString;
     status: z.ZodEnum<{
+        failed: "failed";
         running: "running";
         succeeded: "succeeded";
-        failed: "failed";
         lost: "lost";
     }>;
     started_at: z.ZodString;
@@ -48,9 +48,9 @@ export declare const toolRunListItem: z.ZodObject<{
     run_id: z.ZodString;
     tool_name: z.ZodString;
     status: z.ZodEnum<{
+        failed: "failed";
         running: "running";
         succeeded: "succeeded";
-        failed: "failed";
         lost: "lost";
     }>;
     started_at: z.ZodString;
@@ -60,9 +60,9 @@ export declare const toolRunList: z.ZodArray<z.ZodObject<{
     run_id: z.ZodString;
     tool_name: z.ZodString;
     status: z.ZodEnum<{
+        failed: "failed";
         running: "running";
         succeeded: "succeeded";
-        failed: "failed";
         lost: "lost";
     }>;
     started_at: z.ZodString;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tai42/api-client",
-  "version": "16.0.0",
+  "version": "16.0.1",
   "description": "Typed client for the tai42-skeleton HTTP API.",
   "license": "Apache-2.0",
   "author": "tai42 <oss@tai42.ai>",

package/src/client/agents-client.ts

@@ -0,0 +1,23 @@
+/** Agent listing and streaming-run sub-client. */
+import { agentList, streamAgentRun, streamAuthoredAgentRun } from '../agents';
+import type { Transport } from './transport';
+
+export function agentsClient(t: Transport) {
+  const { config, req } = t;
+  return {
+    listAgents: (signal?: AbortSignal) => req('/api/agents', agentList, { signal }),
+    // The authorable subset (agents whose `spec_runnable` is true) — the compose
+    // UI's base-agent picker. An empty `items` list ⇒ no authoring is possible.
+    listSpecRunnableAgents: (signal?: AbortSignal) =>
+      req('/api/agents/spec-runnable', agentList, { signal }),
+    // The streaming run: opens POST /api/agents/{name}/runs and yields parsed
+    // agent events. The auto-form's built value is the POST body.
+    streamAgentRun: (name: string, input: unknown, signal?: AbortSignal) =>
+      streamAgentRun(config, name, input, signal),
+    // The streaming run of an AUTHORED agent (POST /api/agents/authored/{name}/runs).
+    // The body carries only the non-baked ToolInput fields; the baked spec is
+    // resolved server-side. Reuses the same SSE parser (never EventSource).
+    streamAuthoredAgentRun: (name: string, input: unknown, signal?: AbortSignal) =>
+      streamAuthoredAgentRun(config, name, input, signal),
+  };
+}