@vibesdotdev/hq 0.0.0-stage → 1.0.0-rc.1

package/dist/client/friction/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Runtime client for reading signals and reporting to HQ's canonical intake.
+ * Caller or explicitly service-authenticated; HQ owns durable deduplication.
+ */
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { PromoteWorkItemInput } from '../../friction/promote-input.ts';
+import type { ListFrictionSignalsFilter } from '../../friction/store.ts';
+import type { FrictionSignal } from '../../friction/schemas/signal.ts';
+import { FrictionIntakeInputSchema, FrictionIntakeResponseSchema, FrictionPromoteInputSchema, FrictionPromoteResponseSchema, FrictionReportInputSchema, FrictionReportResponseSchema, type FrictionReportInput, type FrictionReportResponse, type FrictionPromoteInput, type FrictionPromoteResponse, type FrictionIntakeInput, type FrictionIntakeResponse } from '../../friction/schemas/intake.ts';
+export interface FrictionServiceRequestOptions {
+    origin?: string;
+    fetch?: typeof globalThis.fetch;
+    userId?: string;
+    timeoutMs?: number;
+}
+export declare class FrictionClient extends BaseRuntimeClient {
+    private serviceRequest;
+    private authentication;
+    private readonly persistenceTails;
+    /** Serialize fallback read/modify/write operations for this runtime, including legacy adapters. */
+    withPersistenceLock<T>(path: string, operation: () => Promise<T>): Promise<T>;
+    protected onDispose(): Promise<void>;
+    /** Request-local transport/attribution; never mutates the shared runtime client. */
+    forServiceRequest(options?: FrictionServiceRequestOptions): FrictionClient;
+    /** Request-local caller transport; authentication still resolves through Auth on each emit. */
+    forCallerRequest(options?: Omit<FrictionServiceRequestOptions, 'userId'>): FrictionClient;
+    /** Emit through HQ. Resolve current credentials on every call, not at construction. */
+    emit(input: FrictionIntakeInput): Promise<FrictionIntakeResponse>;
+    /**
+     * File a "Report a problem" report with HQ's package intake. Caller
+     * authentication only: in a browser the session cookie carries it
+     * (`credentials: 'include'`); HQ derives the app and target org from the
+     * page's `Origin`, never from the body.
+     */
+    report(input: FrictionReportInput): Promise<FrictionReportResponse>;
+    /** HQ journals admission and recovers the canonical operation before recording disposition. */
+    promote(input: FrictionPromoteInput): Promise<FrictionPromoteResponse>;
+    private post;
+    /** List reported-problem signals, newest first. */
+    list(filter?: ListFrictionSignalsFilter): Promise<FrictionSignal[]>;
+    /** Get a single reported-problem signal by id. */
+    get(id: string): Promise<FrictionSignal | undefined>;
+    /**
+     * Build the work-item create input for promoting a signal. The convention
+     * lives in `friction/promote-input.ts` and is shared with the CLI's
+     * `hq friction promote`, so both paths create the identical work item.
+     * Pure — the caller owns the actual `createWorkItem` write.
+     */
+    promoteInput(signal: FrictionSignal): PromoteWorkItemInput;
+}
+export default FrictionClient;
+export declare function getVibesFrictionClient(runtime: VibesRuntime): Promise<FrictionClient>;
+export { FrictionIntakeInputSchema, FrictionIntakeResponseSchema, FrictionPromoteInputSchema, FrictionPromoteResponseSchema, FrictionReportInputSchema, FrictionReportResponseSchema };
+export type { FrictionIntakeInput, FrictionIntakeResponse, FrictionPromoteInput, FrictionPromoteResponse, FrictionReportInput, FrictionReportResponse };
+export { FrictionReportCaptureSchema, FrictionReportContextSchema, FrictionReportErrorSchema, FrictionReportAttachmentSchema, type FrictionReportCapture, type FrictionReportContext, type FrictionReportError, type FrictionReportAttachment } from '../../friction/schemas/report.ts';
+export type { ListFrictionSignalsFilter, FrictionSignal, PromoteWorkItemInput };
+//# sourceMappingURL=index.d.ts.map

package/dist/client/friction/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/friction/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,iBAAiB,EAAkB,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGzE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EACN,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,MAAM,kCAAkC,CAAC;AAE1C,MAAM,WAAW,6BAA6B;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAiBD,qBAAa,cAAe,SAAQ,iBAAiB;IACpD,OAAO,CAAC,cAAc,CAAqC;IAC3D,OAAO,CAAC,cAAc,CAAkC;IACxD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoC;IAErE,mGAAmG;IAC7F,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;cAenE,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAK1C,oFAAoF;IACpF,iBAAiB,CAAC,OAAO,GAAE,6BAAkC,GAAG,cAAc;IAO9E,+FAA+F;IAC/F,gBAAgB,CAAC,OAAO,GAAE,IAAI,CAAC,6BAA6B,EAAE,QAAQ,CAAM,GAAG,cAAc;IAM7F,uFAAuF;IACjF,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAKvE;;;;;OAKG;IACG,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQzE,+FAA+F;IACzF,OAAO,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;YAK9D,IAAI;IA4ClB,mDAAmD;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAKzE,kDAAkD;IAC5C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAK1D;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,oBAAoB;CAG1D;AAED,eAAe,cAAc,CAAC;AAE9B,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAErF;AAED,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,CAAC;AACvL,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,CAAC;AACxJ,OAAO,EACN,2BAA2B,EAC3B,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,MAAM,kCAAkC,CAAC;AAE1C,YAAY,EAAE,yBAAyB,EAAE,cAAc,EAAE,oBAAoB,EAAE,CAAC"}

package/dist/client/friction/index.js

@@ -0,0 +1,146 @@
+/**
+ * Runtime client for reading signals and reporting to HQ's canonical intake.
+ * Caller or explicitly service-authenticated; HQ owns durable deduplication.
+ */
+import * as z from 'zod/v4';
+import { ApiResponseError, requestValidated } from '@vibesdotdev/client/validated-request';
+import { BaseRuntimeClient, getVibesClient } from '@vibesdotdev/kernel/client';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { resolveVibesAppOrigin } from '@vibesdotdev/config/environment/resolve-app-origin';
+import { buildPromoteWorkItemInput } from "../../friction/promote-input.js";
+import { FrictionIntakeInputSchema, FrictionIntakeResponseSchema, FrictionPromoteInputSchema, FrictionPromoteResponseSchema, FrictionReportInputSchema, FrictionReportResponseSchema } from "../../friction/schemas/intake.js";
+const HqServiceBindingMethodsSchema = z.object({ fetch: z.function() });
+/** HQ_SERVICE's owning schema: it admits the binding itself, never a copy, so `fetch` keeps its receiver. */
+const HqServiceBindingSchema = z.custom((value) => HqServiceBindingMethodsSchema.safeParse(value).success);
+export class FrictionClient extends BaseRuntimeClient {
+    serviceRequest = {};
+    authentication = 'caller';
+    persistenceTails = new Map();
+    /** Serialize fallback read/modify/write operations for this runtime, including legacy adapters. */
+    async withPersistenceLock(path, operation) {
+        this.runtime.lifecycle.signal.throwIfAborted();
+        const previous = this.persistenceTails.get(path) ?? Promise.resolve();
+        const completion = Promise.withResolvers();
+        this.persistenceTails.set(path, completion.promise);
+        await previous;
+        try {
+            this.runtime.lifecycle.signal.throwIfAborted();
+            return await operation();
+        }
+        finally {
+            completion.resolve();
+            if (this.persistenceTails.get(path) === completion.promise)
+                this.persistenceTails.delete(path);
+        }
+    }
+    async onDispose() {
+        await Promise.all(this.persistenceTails.values());
+    }
+    /** Request-local transport/attribution; never mutates the shared runtime client. */
+    forServiceRequest(options = {}) {
+        const fork = new FrictionClient(this.descriptor, undefined, this.runtime);
+        fork.serviceRequest = { ...options };
+        fork.authentication = 'service';
+        return fork;
+    }
+    /** Request-local caller transport; authentication still resolves through Auth on each emit. */
+    forCallerRequest(options = {}) {
+        const fork = new FrictionClient(this.descriptor, undefined, this.runtime);
+        fork.serviceRequest = { ...options };
+        return fork;
+    }
+    /** Emit through HQ. Resolve current credentials on every call, not at construction. */
+    async emit(input) {
+        const body = FrictionIntakeInputSchema.parse(input);
+        return this.post('/api/internal/friction', body, FrictionIntakeResponseSchema);
+    }
+    /**
+     * File a "Report a problem" report with HQ's package intake. Caller
+     * authentication only: in a browser the session cookie carries it
+     * (`credentials: 'include'`); HQ derives the app and target org from the
+     * page's `Origin`, never from the body.
+     */
+    async report(input) {
+        if (this.authentication === 'service') {
+            throw new CapabilityError('Service callers emit through the internal friction intake.', 'PERMISSION_DENIED', { reason: 'friction-report-service-caller', retryable: false });
+        }
+        const body = FrictionReportInputSchema.parse(input);
+        return this.post('/api/hq/reports', body, FrictionReportResponseSchema);
+    }
+    /** HQ journals admission and recovers the canonical operation before recording disposition. */
+    async promote(input) {
+        const { signalId, ...body } = FrictionPromoteInputSchema.parse(input);
+        return this.post(`/api/hq/friction-signals/${encodeURIComponent(signalId)}/promote`, body, FrictionPromoteResponseSchema);
+    }
+    async post(path, body, schema) {
+        let token;
+        if (this.authentication === 'service') {
+            const credential = await this.runtime.resolveCredential({ source: 'secret', key: 'VIBES_INTERNAL_SERVICE_TOKEN' });
+            if (!credential.ok)
+                throw credential.error;
+            token = credential.value.trim();
+            if (!token)
+                throw new CapabilityError('HQ friction intake requires an internal service credential', 'NOT_FOUND', { reason: 'credential-not-set' });
+        }
+        else if (this.runtime.scope.surface === 'browser' && !this.runtime.hasContext('auth/caller-bearer')) {
+            // A browser that composes no Auth bearer: the credentialed request's session cookie is the caller.
+            token = null;
+        }
+        else {
+            const caller = await this.runtime.context('auth/caller-bearer');
+            token = await caller.resolve();
+            if (!token && this.runtime.scope.surface !== 'browser')
+                throw new CapabilityError('HQ friction intake requires caller authentication.', 'AUTH_REQUIRED', { reason: 'friction-caller-bearer-unavailable', retryable: false });
+        }
+        const origin = this.serviceRequest.origin ?? (await resolveVibesAppOrigin('hq', this.runtime));
+        if (!origin)
+            throw new CapabilityError('HQ friction intake origin is not configured', 'NOT_FOUND', { reason: 'friction-intake-origin-unconfigured' });
+        // Transport precedence: an explicit request override, then the bound HQ
+        // service, then the runtime environment's HTTP port. Ambient fetch is
+        // never consulted, so an environment without HTTP refuses typed.
+        const binding = this.runtime.getBinding('HQ_SERVICE', HqServiceBindingSchema);
+        const transport = this.serviceRequest.fetch ?? (binding ? binding.fetch.bind(binding) : undefined);
+        const headers = new Headers({ 'content-type': 'application/json' });
+        if (token)
+            headers.set('authorization', `Bearer ${token}`);
+        if (this.authentication === 'service' && this.serviceRequest.userId)
+            headers.set('x-vibes-user-id', this.serviceRequest.userId);
+        return this.runtime.lifecycle.wait((signal) => requestValidated(new URL(path, origin), {
+            method: 'POST',
+            credentials: this.authentication === 'service' ? 'omit' : 'include',
+            signal,
+            headers,
+            body: JSON.stringify(body)
+        }, schema, {
+            fetch: transport,
+            runtime: this.runtime,
+            mapHttpError: (response) => new ApiResponseError(`HQ friction intake failed (${response.status})`, response.status)
+        }), { timeoutMs: this.serviceRequest.timeoutMs ?? 10_000, reason: 'hq-friction-intake' });
+    }
+    /** List reported-problem signals, newest first. */
+    async list(filter) {
+        const { listFrictionSignals } = await import("../../friction/store.js");
+        return listFrictionSignals(this.runtime, filter);
+    }
+    /** Get a single reported-problem signal by id. */
+    async get(id) {
+        const { getFrictionSignal } = await import("../../friction/store.js");
+        return getFrictionSignal(this.runtime, id);
+    }
+    /**
+     * Build the work-item create input for promoting a signal. The convention
+     * lives in `friction/promote-input.ts` and is shared with the CLI's
+     * `hq friction promote`, so both paths create the identical work item.
+     * Pure — the caller owns the actual `createWorkItem` write.
+     */
+    promoteInput(signal) {
+        return buildPromoteWorkItemInput(signal);
+    }
+}
+export default FrictionClient;
+export function getVibesFrictionClient(runtime) {
+    return getVibesClient('friction', runtime);
+}
+export { FrictionIntakeInputSchema, FrictionIntakeResponseSchema, FrictionPromoteInputSchema, FrictionPromoteResponseSchema, FrictionReportInputSchema, FrictionReportResponseSchema };
+export { FrictionReportCaptureSchema, FrictionReportContextSchema, FrictionReportErrorSchema, FrictionReportAttachmentSchema } from "../../friction/schemas/report.js";
+//# sourceMappingURL=index.js.map

package/dist/client/friction/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/friction/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAA4C,MAAM,uCAAuC,CAAC;AACrI,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAC3F,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAI5E,OAAO,EACN,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,yBAAyB,EACzB,4BAA4B,EAO5B,MAAM,kCAAkC,CAAC;AAmB1C,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAExE,6GAA6G;AAC7G,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAmB,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAE7H,MAAM,OAAO,cAAe,SAAQ,iBAAiB;IAC5C,cAAc,GAAkC,EAAE,CAAC;IACnD,cAAc,GAAyB,QAAQ,CAAC;IACvC,gBAAgB,GAAG,IAAI,GAAG,EAAyB,CAAC;IAErE,mGAAmG;IACnG,KAAK,CAAC,mBAAmB,CAAI,IAAY,EAAE,SAA2B;QACrE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAQ,CAAC;QACjD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,QAAQ,CAAC;QACf,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/C,OAAO,MAAM,SAAS,EAAE,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACV,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,OAAO;gBAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChG,CAAC;IACF,CAAC;IAES,KAAK,CAAC,SAAS;QACxB,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAGD,oFAAoF;IACpF,iBAAiB,CAAC,UAAyC,EAAE;QAC5D,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAChC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,+FAA+F;IAC/F,gBAAgB,CAAC,UAAyD,EAAE;QAC3E,MAAM,IAAI,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC;IACb,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,IAAI,CAAC,KAA0B;QACpC,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,KAA0B;QACtC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,eAAe,CAAC,4DAA4D,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9K,CAAC;QACD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACzE,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,OAAO,CAAC,KAA2B;QACxC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC,4BAA4B,kBAAkB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,6BAA6B,CAAC,CAAC;IAC3H,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,IAAsB,EAAE,MAAyB;QACpF,IAAI,KAAoB,CAAC;QACzB,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACnH,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,MAAM,UAAU,CAAC,KAAK,CAAC;YAC3C,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,eAAe,CAAC,4DAA4D,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACpJ,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACvG,mGAAmG;YACnG,KAAK,GAAG,IAAI,CAAC;QACd,CAAC;aAAM,CAAC;YACP,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAwC,oBAAoB,CAAC,CAAC;YACvG,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,eAAe,CAAC,oDAAoD,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,oCAAoC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9N,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,6CAA6C,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACtJ,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;QAC9E,MAAM,SAAS,GACd,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,IAAI,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChI,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAC9D,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EACrB;YACC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACnE,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1B,EACD,MAAM,EACN;YACC,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,CAAC,QAAkB,EAAE,EAAE,CAAC,IAAI,gBAAgB,CAAC,8BAA8B,QAAQ,CAAC,MAAM,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC;SAC7H,CACD,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,IAAI,CAAC,MAAkC;QAC5C,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACxE,OAAO,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,GAAG,CAAC,EAAU;QACnB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACtE,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,MAAsB;QAClC,OAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;CACD;AAED,eAAe,cAAc,CAAC;AAE9B,MAAM,UAAU,sBAAsB,CAAC,OAAqB;IAC3D,OAAO,cAAc,CAAiB,UAAU,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,CAAC;AAEvL,OAAO,EACN,2BAA2B,EAC3B,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAK9B,MAAM,kCAAkC,CAAC"}

package/dist/client/friction.client.descriptor.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Friction Client Descriptor
+ *
+ * Registers the `friction` runtime/client for reading signals and emitting
+ * service-authenticated reports through the canonical HQ intake.
+ */
+declare const _default: {
+    kind: "runtime/client";
+    id: string;
+    name: string;
+    description: string;
+};
+export default _default;
+//# sourceMappingURL=friction.client.descriptor.d.ts.map

package/dist/client/friction.client.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"friction.client.descriptor.d.ts","sourceRoot":"","sources":["../../src/client/friction.client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;AAIH,wBAKG"}

package/dist/client/friction.client.descriptor.js

@@ -0,0 +1,14 @@
+/**
+ * Friction Client Descriptor
+ *
+ * Registers the `friction` runtime/client for reading signals and emitting
+ * service-authenticated reports through the canonical HQ intake.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/client',
+    id: 'friction',
+    name: 'Friction Client',
+    description: 'Runtime client for friction signals, promotion inputs, and authenticated HQ intake'
+});
+//# sourceMappingURL=friction.client.descriptor.js.map

package/dist/client/friction.client.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"friction.client.descriptor.js","sourceRoot":"","sources":["../../src/client/friction.client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,iBAAiB;IACvB,WAAW,EAAE,oFAAoF;CACjG,CAAC,CAAC"}

package/dist/client/hq.client.descriptor.d.ts

@@ -0,0 +1,14 @@
+/**
+ * HQ Client Descriptor
+ *
+ * Registers the `hq` runtime/client kind (the id the plugin loader binds) for
+ * cross-module access to channels, surface, services, workspaces, and apps.
+ */
+declare const _default: {
+    kind: "runtime/client";
+    id: string;
+    name: string;
+    description: string;
+};
+export default _default;
+//# sourceMappingURL=hq.client.descriptor.d.ts.map

package/dist/client/hq.client.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hq.client.descriptor.d.ts","sourceRoot":"","sources":["../../src/client/hq.client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;;;;;AAIH,wBAKG"}

package/dist/client/hq.client.descriptor.js

@@ -0,0 +1,14 @@
+/**
+ * HQ Client Descriptor
+ *
+ * Registers the `hq` runtime/client kind (the id the plugin loader binds) for
+ * cross-module access to channels, surface, services, workspaces, and apps.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+export default createRuntimeAsset({
+    kind: 'runtime/client',
+    id: 'hq',
+    name: 'HQ Client',
+    description: 'Runtime client for HQ channels, surface notifications, services, workspaces, and app auth'
+});
+//# sourceMappingURL=hq.client.descriptor.js.map

package/dist/client/hq.client.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hq.client.descriptor.js","sourceRoot":"","sources":["../../src/client/hq.client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,eAAe,kBAAkB,CAAC;IACjC,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,2FAA2F;CACxG,CAAC,CAAC"}

package/dist/client/index.d.ts

@@ -0,0 +1,95 @@
+/**
+ * HQ Client — Runtime client for @vibesdotdev/hq
+ *
+ * Provides channels, surface, services, and apps sub-clients
+ * for cross-module access without deep-imports.
+ */
+import { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+import type { VibesRuntime } from '@vibesdotdev/kernel';
+import type { ChannelExecution, CreateChannelInput, ListChannelsFilter } from '@vibesdotdev/os/channels/api';
+import type { ChannelDescriptor } from '@vibesdotdev/os/channels/schemas/channel';
+import type { SurfaceNotification } from '@vibesdotdev/os/surface/schemas/artifact';
+import type { SurfaceOwner } from '@vibesdotdev/os/surface/store';
+import type { ServiceDescriptor, ServiceStatus } from '../services/schemas/service.ts';
+import type { ServiceRegistrationReceipt } from '../services/registry.ts';
+import type { OsAppTokenRecord, OsAppPairingRecord } from '../app/auth/types.ts';
+export { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+/**
+ * HQ Client — Single entry point for HQ primitives
+ *
+ * This client exposes:
+ * - channels: CRUD for scheduled channels
+ * - surface: notification dispatch and resolution
+ * - services: service registration and control
+ * - apps: app token and pairing management
+ *
+ * Consumed by presence, pm, and sibling modules
+ * to avoid deep-imports into @vibesdotdev/hq/channels, etc.
+ *
+ * Runtime port `VibesRuntime` (Runtime SPEC `./client`): service control
+ * selects the OS service manager through `assets` and `declaredScope`, which
+ * `RuntimeRef` does not carry.
+ */
+export declare class HqClient extends BaseRuntimeClient<VibesRuntime> {
+    /**
+     * Channel operations — scheduled invocation slots
+     *
+     * All methods resolve the OS semantic client and act on this
+     * client's runtime (its channel state and channel record).
+     */
+    channels: {
+        create: (input: CreateChannelInput) => Promise<ChannelDescriptor>;
+        list: (filter?: ListChannelsFilter) => Promise<ChannelDescriptor[]>;
+        get: (id: string) => Promise<ChannelDescriptor | undefined>;
+        enable: (id: string) => Promise<ChannelDescriptor>;
+        disable: (id: string) => Promise<ChannelDescriptor>;
+        fire: (id: string) => Promise<ChannelExecution>;
+        history: (id: string, limit?: number) => Promise<ChannelExecution[]>;
+        delete: (id: string) => Promise<void>;
+    };
+    /** Resolve OS on the runtime handed to this client. */
+    private os;
+    /**
+     * Surface operations — agent notifications
+     *
+     * All methods resolve the OS semantic client and take an explicit, server-
+     * derived `owner` as the first argument (the single tenancy gate). The consumer
+     * (PM daemon / CLI) acts as the local vibes-internal Marshal operator — it has
+     * no request `locals`, so it passes `SYSTEM_OWNER`, exactly the workboard
+     * "non-request bridge → SYSTEM_OWNER" pattern.
+     */
+    surface: {
+        create: (owner: SurfaceOwner, notification: Omit<SurfaceNotification, "id" | "createdAt" | "status" | "ownerType" | "ownerId" | "agentId">) => Promise<SurfaceNotification>;
+        list: (owner: SurfaceOwner, status?: SurfaceNotification["status"]) => Promise<SurfaceNotification[]>;
+        get: (owner: SurfaceOwner, id: string) => Promise<SurfaceNotification | undefined>;
+        resolve: (owner: SurfaceOwner, id: string, resolution: "approved" | "discarded") => Promise<void>;
+        delete: (owner: SurfaceOwner, id: string) => Promise<void>;
+    };
+    /**
+     * Service operations through the runtime's OS service manager
+     */
+    services: {
+        register: (descriptor: ServiceDescriptor) => Promise<ServiceRegistrationReceipt>;
+        start: (id: string) => Promise<boolean>;
+        stop: (id: string) => Promise<boolean>;
+        status: (id: string) => Promise<ServiceStatus | null>;
+        logs: (id: string, lines?: number) => Promise<string[]>;
+    };
+    /**
+     * App operations — token and pairing management
+     */
+    apps: {
+        createToken: (input: CreateAppTokenInput) => Promise<CreateAppTokenResult>;
+        listTokens: (includeRevoked?: boolean) => Promise<OsAppTokenRecord[]>;
+        revokeToken: (tokenId: string) => Promise<OsAppTokenRecord | null>;
+        createOrUpdatePairing: (input: CreatePairingInput) => Promise<OsAppPairingRecord>;
+        listPairings: (appId?: string) => Promise<OsAppPairingRecord[]>;
+    };
+}
+export default HqClient;
+import type { CreateAppTokenInput as InternalCreateAppTokenInput, CreateAppTokenResult as InternalCreateAppTokenResult, CreatePairingInput as InternalCreatePairingInput } from '../app/auth/service.consumer.ts';
+type CreateAppTokenInput = InternalCreateAppTokenInput;
+type CreateAppTokenResult = InternalCreateAppTokenResult;
+type CreatePairingInput = InternalCreatePairingInput;
+export type { CreateChannelInput, ListChannelsFilter, ChannelExecution, CreateAppTokenInput, CreateAppTokenResult, CreatePairingInput };
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAkB,MAAM,4BAA4B,CAAC;AAE/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EACX,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAClF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAGjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,QAAS,SAAQ,iBAAiB,CAAC,YAAY,CAAC;IAC5D;;;;;OAKG;IACH,QAAQ;wBACe,kBAAkB,KAAG,OAAO,CAAC,iBAAiB,CAAC;wBAI/C,kBAAkB,KAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;kBAIvD,MAAM,KAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;qBAI5C,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;sBAIlC,MAAM,KAAG,OAAO,CAAC,iBAAiB,CAAC;mBAItC,MAAM,KAAG,OAAO,CAAC,gBAAgB,CAAC;sBAI/B,MAAM,UAAU,MAAM,KAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;qBAIrD,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;MAGxC;IAEF,uDAAuD;IACvD,OAAO,CAAC,EAAE;IAIV;;;;;;;;OAQG;IACH,OAAO;wBAEE,YAAY,gBACL,IAAI,CACjB,mBAAmB,EACnB,IAAI,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CACnE,KACC,OAAO,CAAC,mBAAmB,CAAC;sBAKvB,YAAY,WACV,mBAAmB,CAAC,QAAQ,CAAC,KACpC,OAAO,CAAC,mBAAmB,EAAE,CAAC;qBAId,YAAY,MAAM,MAAM,KAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;yBAK9E,YAAY,MACf,MAAM,cACE,UAAU,GAAG,WAAW,KAClC,OAAO,CAAC,IAAI,CAAC;wBAIM,YAAY,MAAM,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;MAG7D;IAEF;;OAEG;IACH,QAAQ;+BACsB,iBAAiB,KAAG,OAAO,CAAC,0BAA0B,CAAC;oBAKlE,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;mBAM1B,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;qBAMvB,MAAM,KAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;mBAKxC,MAAM,qBAAgB,OAAO,CAAC,MAAM,EAAE,CAAC;MAKvD;IAEF;;OAEG;IACH,IAAI;6BACwB,mBAAmB,KAAG,OAAO,CAAC,oBAAoB,CAAC;kDAKlC,OAAO,CAAC,gBAAgB,EAAE,CAAC;+BAK1C,MAAM,KAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;uCAKjC,kBAAkB,KAAG,OAAO,CAAC,kBAAkB,CAAC;+BAKxD,MAAM,KAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;MAIlE;CACF;AAED,eAAe,QAAQ,CAAC;AAGxB,OAAO,KAAK,EACX,mBAAmB,IAAI,2BAA2B,EAClD,oBAAoB,IAAI,4BAA4B,EACpD,kBAAkB,IAAI,0BAA0B,EAChD,MAAM,iCAAiC,CAAC;AAEzC,KAAK,mBAAmB,GAAG,2BAA2B,CAAC;AACvD,KAAK,oBAAoB,GAAG,4BAA4B,CAAC;AACzD,KAAK,kBAAkB,GAAG,0BAA0B,CAAC;AAErD,YAAY,EACX,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,144 @@
+/**
+ * HQ Client — Runtime client for @vibesdotdev/hq
+ *
+ * Provides channels, surface, services, and apps sub-clients
+ * for cross-module access without deep-imports.
+ */
+import { BaseRuntimeClient, getVibesClient } from '@vibesdotdev/kernel/client';
+// Re-export base for consumers
+export { BaseRuntimeClient } from '@vibesdotdev/kernel/client';
+/**
+ * HQ Client — Single entry point for HQ primitives
+ *
+ * This client exposes:
+ * - channels: CRUD for scheduled channels
+ * - surface: notification dispatch and resolution
+ * - services: service registration and control
+ * - apps: app token and pairing management
+ *
+ * Consumed by presence, pm, and sibling modules
+ * to avoid deep-imports into @vibesdotdev/hq/channels, etc.
+ *
+ * Runtime port `VibesRuntime` (Runtime SPEC `./client`): service control
+ * selects the OS service manager through `assets` and `declaredScope`, which
+ * `RuntimeRef` does not carry.
+ */
+export class HqClient extends BaseRuntimeClient {
+    /**
+     * Channel operations — scheduled invocation slots
+     *
+     * All methods resolve the OS semantic client and act on this
+     * client's runtime (its channel state and channel record).
+     */
+    channels = {
+        create: async (input) => {
+            return (await this.os()).channels.create(input);
+        },
+        list: async (filter) => {
+            return (await this.os()).channels.list(filter);
+        },
+        get: async (id) => {
+            return (await this.os()).channels.get(id);
+        },
+        enable: async (id) => {
+            return (await this.os()).channels.enable(id);
+        },
+        disable: async (id) => {
+            return (await this.os()).channels.disable(id);
+        },
+        fire: async (id) => {
+            return (await this.os()).channels.fire(id);
+        },
+        history: async (id, limit) => {
+            return (await this.os()).channels.history(id, limit);
+        },
+        delete: async (id) => {
+            return (await this.os()).channels.delete(id);
+        }
+    };
+    /** Resolve OS on the runtime handed to this client. */
+    os() {
+        return getVibesClient('os', this.runtime);
+    }
+    /**
+     * Surface operations — agent notifications
+     *
+     * All methods resolve the OS semantic client and take an explicit, server-
+     * derived `owner` as the first argument (the single tenancy gate). The consumer
+     * (PM daemon / CLI) acts as the local vibes-internal Marshal operator — it has
+     * no request `locals`, so it passes `SYSTEM_OWNER`, exactly the workboard
+     * "non-request bridge → SYSTEM_OWNER" pattern.
+     */
+    surface = {
+        create: async (owner, notification) => {
+            return (await this.os()).surface.create(owner, notification);
+        },
+        list: async (owner, status) => {
+            return (await this.os()).surface.list(owner, status);
+        },
+        get: async (owner, id) => {
+            return (await this.os()).surface.get(owner, id);
+        },
+        resolve: async (owner, id, resolution) => {
+            return (await this.os()).surface.resolve(owner, id, resolution);
+        },
+        delete: async (owner, id) => {
+            return (await this.os()).surface.delete(owner, id);
+        }
+    };
+    /**
+     * Service operations through the runtime's OS service manager
+     */
+    services = {
+        register: async (descriptor) => {
+            const { registerService } = await import('../services/registry.js');
+            return registerService(this.runtime, descriptor);
+        },
+        start: async (id) => {
+            const { startService } = await import('../services/registry.js');
+            await startService(this.runtime, id);
+            return true;
+        },
+        stop: async (id) => {
+            const { stopService } = await import('../services/registry.js');
+            await stopService(this.runtime, id);
+            return true;
+        },
+        status: async (id) => {
+            const { getServiceStatus } = await import('../services/registry.js');
+            return getServiceStatus(this.runtime, id);
+        },
+        logs: async (id, lines = 100) => {
+            const { getServiceLogs } = await import('../services/registry.js');
+            const logOutput = await getServiceLogs(this.runtime, id, lines);
+            return logOutput.split('\n');
+        }
+    };
+    /**
+     * App operations — token and pairing management
+     */
+    apps = {
+        createToken: async (input) => {
+            const { createAppToken } = await import('../app/auth/service.consumer.js');
+            return createAppToken(this.runtime, input);
+        },
+        listTokens: async (includeRevoked = false) => {
+            const { listAppTokens } = await import('../app/auth/service.consumer.js');
+            return listAppTokens(this.runtime, includeRevoked);
+        },
+        revokeToken: async (tokenId) => {
+            const { revokeAppToken } = await import('../app/auth/service.consumer.js');
+            return revokeAppToken(this.runtime, tokenId);
+        },
+        createOrUpdatePairing: async (input) => {
+            const { createOrUpdatePairing } = await import('../app/auth/service.consumer.js');
+            return createOrUpdatePairing(this.runtime, input);
+        },
+        listPairings: async (appId) => {
+            const { listAppPairings } = await import('../app/auth/service.consumer.js');
+            return listAppPairings(this.runtime, appId);
+        }
+    };
+}
+export default HqClient;
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAe/E,+BAA+B;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,QAAS,SAAQ,iBAA+B;IAC5D;;;;;OAKG;IACH,QAAQ,GAAG;QACV,MAAM,EAAE,KAAK,EAAE,KAAyB,EAA8B,EAAE;YACvE,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,MAA2B,EAAgC,EAAE;YACzE,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,EAAU,EAA0C,EAAE;YACjE,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAA8B,EAAE;YACxD,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,EAAU,EAA8B,EAAE;YACzD,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAU,EAA6B,EAAE;YACrD,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,KAAc,EAA+B,EAAE;YAC1E,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAAiB,EAAE;YAC3C,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;KACD,CAAC;IAEF,uDAAuD;IAC/C,EAAE;QACT,OAAO,cAAc,CAAW,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;OAQG;IACH,OAAO,GAAG;QACT,MAAM,EAAE,KAAK,EACZ,KAAmB,EACnB,YAGC,EAC8B,EAAE;YACjC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,EAAE,KAAK,EACV,KAAmB,EACnB,MAAsC,EACL,EAAE;YACnC,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,KAAmB,EAAE,EAAU,EAA4C,EAAE;YACxF,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,EAAE,KAAK,EACb,KAAmB,EACnB,EAAU,EACV,UAAoC,EACpB,EAAE;YAClB,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,KAAmB,EAAE,EAAU,EAAiB,EAAE;YAChE,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC;KACD,CAAC;IAEF;;OAEG;IACH,QAAQ,GAAG;QACV,QAAQ,EAAE,KAAK,EAAE,UAA6B,EAAuC,EAAE;YACtF,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACpE,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,EAAE,KAAK,EAAE,EAAU,EAAoB,EAAE;YAC7C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACjE,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAU,EAAoB,EAAE;YAC5C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YAChE,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,EAAU,EAAiC,EAAE;YAC3D,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACrE,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,EAAU,EAAE,KAAK,GAAG,GAAG,EAAqB,EAAE;YAC1D,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;YAChE,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;KACD,CAAC;IAEF;;OAEG;IACH,IAAI,GAAG;QACN,WAAW,EAAE,KAAK,EAAE,KAA0B,EAAiC,EAAE;YAChF,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAC3E,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,UAAU,EAAE,KAAK,EAAE,cAAc,GAAG,KAAK,EAA+B,EAAE;YACzE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAC1E,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACpD,CAAC;QAED,WAAW,EAAE,KAAK,EAAE,OAAe,EAAoC,EAAE;YACxE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAC3E,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,KAAyB,EAA+B,EAAE;YACvF,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAClF,OAAO,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;QAED,YAAY,EAAE,KAAK,EAAE,KAAc,EAAiC,EAAE;YACrE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAC5E,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;KACD,CAAC;CACF;AAED,eAAe,QAAQ,CAAC"}