@weave-kit/client 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 WeaveKit
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,64 @@
+# @weave-kit/client
+
+Framework-agnostic TypeScript SDK for the WeaveKit engine. No DOM or UI-framework dependencies — usable in browsers, Node, or anywhere a `fetch` implementation exists.
+
+## Usage
+
+```ts
+import { createClient } from '@weave-kit/client';
+import type { Lead } from './generated/types';
+
+const client = createClient({ baseUrl: 'http://localhost:3000', apiKey: 'sk-admin' });
+const leads = client.objects<Lead>('lead');
+
+const result = await leads.find({
+  filter: { status: 'open' },
+  sort: [{ field: 'created_at', direction: 'desc' }],
+  limit: 20,
+});
+const one = await leads.findOne('L1'); // null on 404 (does not leak existence)
+const created = await leads.create({ title: 'New lead' });
+const updated = await leads.update('L1', { title: 'Renamed' });
+await leads.delete('L1');
+```
+
+## Object-level types
+
+`weave types` in your project compiles `schema.json` into `generated/types.ts`:
+
+```sh
+weave types   # → generated/types.ts
+```
+
+```ts
+import type { Lead } from './generated/types';
+const leads = createClient({ baseUrl, apiKey }).objects<Lead>('lead');
+```
+
+Every field type, enum union, and relation's primary-key type is derived from the schema. `objects<T>` defaults to `Record<string, unknown>` when you omit the type.
+
+## Methods
+
+`objects<T>(name)` returns:
+
+- `find(params?)` — `Promise<RestResult<T>>` (`{ rows, total, limit, offset }`)
+- `findOne(id, params?)` — `Promise<T | null>` (404 → null)
+- `create(data: Partial<T>)` — `Promise<T>`
+- `update(id, changes: Partial<T>)` — `Promise<T>`
+- `delete(id)` — `Promise<void>`
+
+## Errors
+
+Non-2xx responses throw `ClientError`:
+
+```ts
+try {
+  await leads.find();
+} catch (error) {
+  if (error instanceof ClientError) {
+    error.status; // 401/403/404/400/500
+    error.code;   // e.g. 'rbac.denied.read', 'auth.missingKey'
+    error.message;
+  }
+}
+```

package/dist/approvals.d.ts

@@ -0,0 +1,37 @@
+import type { ApprovalStatus, PendingApproval } from '@weave-kit/engine';
+import type { HttpOptions } from './http.js';
+/** approval list filter (D1) — mirrors the engine `ApprovalListFilter` wire params */
+export interface ApprovalListFilter {
+    status?: ApprovalStatus;
+    action?: string;
+    actorKey?: string;
+    from?: Date;
+    to?: Date;
+    limit?: number;
+    offset?: number;
+    sort?: {
+        field: string;
+        order: 'ASC' | 'DESC';
+    };
+}
+/** `GET /api/approvals` — paged approval queue (admin read) */
+export interface ApprovalListResult {
+    rows: PendingApproval[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+/** resolution result (admin write) */
+export interface ApprovalDecisionResult {
+    approvalKey: string;
+    status: ApprovalStatus;
+    approver: string;
+}
+/** approval queue accessor (D1): list / approve / reject over the engine REST surface */
+export interface ApprovalsClient {
+    list(params?: ApprovalListFilter): Promise<ApprovalListResult>;
+    approve(approvalKey: string): Promise<ApprovalDecisionResult>;
+    reject(approvalKey: string): Promise<ApprovalDecisionResult>;
+}
+export declare function createApprovalsClient(http: HttpOptions): ApprovalsClient;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/D,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC9D;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,CA0BxE"}

package/dist/approvals.js

@@ -0,0 +1,36 @@
+import { request } from './http.js';
+export function createApprovalsClient(http) {
+    return {
+        list(params) {
+            const query = {};
+            if (params?.status !== undefined)
+                query.status = params.status;
+            if (params?.action !== undefined)
+                query.action = params.action;
+            if (params?.actorKey !== undefined)
+                query.actorKey = params.actorKey;
+            if (params?.from !== undefined)
+                query.from = params.from.toISOString();
+            if (params?.to !== undefined)
+                query.to = params.to.toISOString();
+            if (params?.limit !== undefined)
+                query.limit = String(params.limit);
+            if (params?.offset !== undefined)
+                query.offset = String(params.offset);
+            if (params?.sort !== undefined) {
+                query.sort = params.sort.field;
+                query.order = params.sort.order;
+            }
+            return request(http, 'GET', '/approvals', {
+                query: Object.keys(query).length === 0 ? undefined : query,
+            });
+        },
+        approve(approvalKey) {
+            return request(http, 'POST', `/approvals/${encodeURIComponent(approvalKey)}/approve`);
+        },
+        reject(approvalKey) {
+            return request(http, 'POST', `/approvals/${encodeURIComponent(approvalKey)}/reject`);
+        },
+    };
+}
+//# sourceMappingURL=approvals.js.map

package/dist/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoCpC,MAAM,UAAU,qBAAqB,CAAC,IAAiB;IACrD,OAAO;QACL,IAAI,CAAC,MAA2B;YAC9B,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrE,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvE,IAAI,MAAM,EAAE,EAAE,KAAK,SAAS;gBAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACjE,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvE,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC/B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAClC,CAAC;YACD,OAAO,OAAO,CAAqB,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE;gBAC5D,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,WAAmB;YACzB,OAAO,OAAO,CAAyB,IAAI,EAAE,MAAM,EAAE,cAAc,kBAAkB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,CAAC,WAAmB;YACxB,OAAO,OAAO,CAAyB,IAAI,EAAE,MAAM,EAAE,cAAc,kBAAkB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC/G,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/audit.d.ts

@@ -0,0 +1,15 @@
+import type { AuditEvent, AuditQuery } from '@weave-kit/engine';
+import type { HttpOptions } from './http.js';
+/** `GET /api/audit` — paginated trail (own actor by default; adminRoles for the full view) */
+export interface AuditResult {
+    rows: AuditEvent[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+/** audit accessor (M11): paginated query with actor/action/object/date filters */
+export interface AuditClient {
+    query(params?: AuditQuery): Promise<AuditResult>;
+}
+export declare function createAuditClient(http: HttpOptions): AuditClient;
+//# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAClD;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,CAehE"}

package/dist/audit.js

@@ -0,0 +1,26 @@
+import { request } from './http.js';
+export function createAuditClient(http) {
+    return {
+        query(params) {
+            const query = {};
+            if (params?.actorId !== undefined)
+                query.actorId = params.actorId;
+            if (params?.action !== undefined)
+                query.action = params.action;
+            if (params?.object !== undefined)
+                query.object = params.object;
+            if (params?.from !== undefined)
+                query.from = params.from.toISOString();
+            if (params?.to !== undefined)
+                query.to = params.to.toISOString();
+            if (params?.filter !== undefined)
+                query.filter = JSON.stringify(params.filter);
+            if (params?.limit !== undefined)
+                query.limit = String(params.limit);
+            if (params?.offset !== undefined)
+                query.offset = String(params.offset);
+            return request(http, 'GET', '/audit', { query: Object.keys(query).length === 0 ? undefined : query });
+        },
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,MAAM,UAAU,iBAAiB,CAAC,IAAiB;IACjD,OAAO;QACL,KAAK,CAAC,MAAmB;YACvB,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAClE,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACvE,IAAI,MAAM,EAAE,EAAE,KAAK,SAAS;gBAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YACjE,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/E,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO,OAAO,CAAc,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,88 @@
+import type { ObjectsClient } from './objects.js';
+import type { SubscribeOptions, Subscription } from './subscribe.js';
+import type { MetadataClient, PermissionsResult } from './metadata.js';
+import type { AuditClient } from './audit.js';
+import type { ApprovalsClient } from './approvals.js';
+import type { ScriptsClient } from './scripts.js';
+import type { LayoutsClient } from './layouts.js';
+import type { SchemaClient } from './schema.js';
+import type { GuardrailsClient } from './guardrails.js';
+import type { IdentitiesClient } from './identities.js';
+export declare const version = "0.0.0";
+export interface ClientOptions {
+    /** engine base URL, e.g. `http://localhost:3000` */
+    baseUrl: string;
+    /** REST route prefix; defaults to `/api` */
+    prefix?: string;
+    /** API key sent as `Authorization: Bearer <apiKey>` */
+    apiKey?: string;
+    /** fetch implementation; defaults to the global fetch (inject for testing / custom transport) */
+    fetch?: typeof fetch;
+}
+export interface Client {
+    /**
+     * typed CRUD handle for an object collection. Pass the object's generated
+     * type (from `generated/types.ts`) for object-level type safety:
+     * `objects<Lead>('lead')`.
+     */
+    objects<T = Record<string, unknown>>(name: string): ObjectsClient<T>;
+    /** rotate the API key (login/logout); subsequent requests and subscriptions use it */
+    setApiKey(apiKey?: string): void;
+    /**
+     * Derive a client that shares this client's baseUrl + fetch but uses a
+     * different REST prefix and/or key. Used to reach the engine's generic proxy —
+     * one governance client can produce per-instance `/api/proxy/:id` sub-clients
+     * without ever holding a customer-engine key in the browser.
+     */
+    derive(options?: {
+        prefix?: string;
+        apiKey?: string;
+    }): Client;
+    /** schema + permissions metadata (M11): what this identity can read / do */
+    metadata: MetadataClient;
+    /** effective permissions per object (shorthand for `metadata.permissions()`) */
+    permissions(): Promise<PermissionsResult>;
+    /** audit trail query (M11): own actor by default */
+    audit: AuditClient;
+    /** approval queue (D1): list/approve/reject — admin-gated by the engine */
+    approvals: ApprovalsClient;
+    /** client-side script source (`*.client.js`) per object — engine serves, frontend executes */
+    scripts: ScriptsClient;
+    /** page-layout source (path-mirrored addressing) — engine serves, frontend interprets */
+    layouts: LayoutsClient;
+    /** raw object schema source (admin read/write) — engine serves, ObjectDesigner edits */
+    schema: SchemaClient;
+    /** guardrail policy source (admin read/write) — engine project `policies/` dir */
+    guardrails: GuardrailsClient;
+    /** MCP on-behalf-of identity directory (admin read) */
+    identities: IdentitiesClient;
+    /**
+     * Live event subscription (M12): SSE stream of record/audit/schema changes,
+     * filtered server-side by the identity's RBAC. Auto-reconnects with backoff
+     * and replays missed events via `Last-Event-ID`. Returns a handle to close.
+     */
+    subscribe(options: SubscribeOptions): Subscription;
+}
+/**
+ * Create a WeaveKit client. Framework-agnostic, no DOM dependency — usable in
+ * browsers, Node, or anywhere a `fetch` implementation exists.
+ */
+export declare function createClient(options: ClientOptions): Client;
+export type { ObjectsClient } from './objects.js';
+export type { FindParams, FindOneParams, FindSort } from './types.js';
+export type { LiveEvent, SubscribeOptions, Subscription } from './subscribe.js';
+export type { MetadataClient, PermissionsResult } from './metadata.js';
+export type { AuditClient, AuditResult } from './audit.js';
+export type { ApprovalsClient, ApprovalListFilter, ApprovalListResult, ApprovalDecisionResult } from './approvals.js';
+export type { ScriptSaveOptions, ScriptSaveResult, ScriptSourceDocument, ScriptSourceOptions, ScriptsClient, } from './scripts.js';
+export type { LayoutsClient } from './layouts.js';
+export type { SourceDocument, PageSummary, CreatePageOptions, CreatePageResult, RenamePageOptions, RenamePageResult, DeletePageOptions, DeletePageResult, DesignSaveOptions, DesignSavePart, DesignSaveResult, LayoutSaveOptions, LayoutSaveResult, LayoutSourceOptions, } from './layouts.js';
+export type { SchemaClient, SchemaSourceDocument, SchemaSourceOptions, SchemaSaveOptions, SchemaSaveResult } from './schema.js';
+export type { GuardrailsClient, GuardrailPolicySummary, GuardrailPolicySource, GuardrailPolicyCommit, GuardrailPolicyHistory, GuardrailSourceOptions, GuardrailSaveOptions, GuardrailListResult, GuardrailSaveResult, } from './guardrails.js';
+export type { IdentitiesClient, IdentitySummary, IdentitiesListResult } from './identities.js';
+export { layoutPagePath } from './layouts.js';
+export type { AuditEvent, AuditQuery } from '@weave-kit/engine';
+export type { PendingApproval, ApprovalStatus } from '@weave-kit/engine';
+export type { LayoutAddress, ObjectLayoutView, PageRef } from '@weave-kit/engine/layout';
+export { ClientError } from './http.js';
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAErE,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACrE,sFAAsF;IACtF,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;OAKG;IACH,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC;IAC/D,4EAA4E;IAC5E,QAAQ,EAAE,cAAc,CAAC;IACzB,gFAAgF;IAChF,WAAW,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1C,oDAAoD;IACpD,KAAK,EAAE,WAAW,CAAC;IACnB,2EAA2E;IAC3E,SAAS,EAAE,eAAe,CAAC;IAC3B,8FAA8F;IAC9F,OAAO,EAAE,aAAa,CAAC;IACvB,yFAAyF;IACzF,OAAO,EAAE,aAAa,CAAC;IACvB,wFAAwF;IACxF,MAAM,EAAE,YAAY,CAAC;IACrB,kFAAkF;IAClF,UAAU,EAAE,gBAAgB,CAAC;IAC7B,uDAAuD;IACvD,UAAU,EAAE,gBAAgB,CAAC;IAC7B;;;;OAIG;IACH,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,YAAY,CAAC;CACpD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,CAsC3D;AAED,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAChF,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC3D,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtH,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,YAAY,EACV,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAChI,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/client.js

@@ -0,0 +1,57 @@
+import { createObjectsClient } from './objects.js';
+import { createSubscriber } from './subscribe.js';
+import { createMetadataClient } from './metadata.js';
+import { createAuditClient } from './audit.js';
+import { createApprovalsClient } from './approvals.js';
+import { createScriptsClient } from './scripts.js';
+import { createLayoutsClient } from './layouts.js';
+import { createSchemaClient } from './schema.js';
+import { createGuardrailsClient } from './guardrails.js';
+import { createIdentitiesClient } from './identities.js';
+export const version = '0.0.0';
+/**
+ * Create a WeaveKit client. Framework-agnostic, no DOM dependency — usable in
+ * browsers, Node, or anywhere a `fetch` implementation exists.
+ */
+export function createClient(options) {
+    const http = {
+        baseUrl: options.baseUrl.replace(/\/+$/, ''),
+        prefix: options.prefix ?? '/api',
+        apiKey: options.apiKey,
+        fetchImpl: options.fetch ?? fetch,
+    };
+    const metadata = createMetadataClient(http);
+    return {
+        objects(name) {
+            return createObjectsClient(http, name);
+        },
+        setApiKey(apiKey) {
+            http.apiKey = apiKey;
+        },
+        derive(overrides) {
+            return createClient({
+                baseUrl: http.baseUrl,
+                prefix: overrides?.prefix ?? http.prefix,
+                apiKey: overrides?.apiKey ?? http.apiKey,
+                fetch: http.fetchImpl,
+            });
+        },
+        metadata,
+        permissions() {
+            return metadata.permissions();
+        },
+        audit: createAuditClient(http),
+        approvals: createApprovalsClient(http),
+        scripts: createScriptsClient(http),
+        layouts: createLayoutsClient(http),
+        schema: createSchemaClient(http),
+        guardrails: createGuardrailsClient(http),
+        identities: createIdentitiesClient(http),
+        subscribe(options) {
+            return createSubscriber(http)(options);
+        },
+    };
+}
+export { layoutPagePath } from './layouts.js';
+export { ClientError } from './http.js';
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAuD/B;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,KAAK,IAAI,KAAK;KAClC,CAAC;IACF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,CAA8B,IAAY;YAC/C,OAAO,mBAAmB,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,SAAS,CAAC,MAAe;YACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,SAAgD;YACrD,OAAO,YAAY,CAAC;gBAClB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACxC,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM;gBACxC,KAAK,EAAE,IAAI,CAAC,SAAS;aACtB,CAAC,CAAC;QACL,CAAC;QACD,QAAQ;QACR,WAAW;YACT,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;QAChC,CAAC;QACD,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC;QAC9B,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC;QACtC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,kBAAkB,CAAC,IAAI,CAAC;QAChC,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,sBAAsB,CAAC,IAAI,CAAC;QACxC,SAAS,CAAC,OAAyB;YACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC;AA6CD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAI9C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/guardrails.d.ts

@@ -0,0 +1,56 @@
+import type { HttpOptions } from './http.js';
+export interface GuardrailPolicySummary {
+    name: string;
+    version: string;
+}
+export interface GuardrailPolicySource {
+    source: string;
+    version: string;
+}
+export interface GuardrailPolicyCommit {
+    sha: string;
+    author: string;
+    email: string;
+    date: string;
+    message: string;
+    /** source blob at this commit; null when unavailable */
+    source: string | null;
+    version: string | null;
+}
+export interface GuardrailPolicyHistory {
+    name: string;
+    commits: GuardrailPolicyCommit[];
+}
+export interface GuardrailSourceOptions {
+    signal?: AbortSignal;
+}
+export interface GuardrailSaveOptions extends GuardrailSourceOptions {
+    /** reserved for optimistic locking; the engine accepts but does not enforce it */
+    expectVersion?: string;
+}
+export interface GuardrailListResult {
+    policies: GuardrailPolicySummary[];
+}
+export interface GuardrailSaveResult {
+    ok: true;
+    committed: boolean;
+    version: string;
+}
+/**
+ * Guardrail policy source accessor (M10c): the engine project's `policies/`
+ * directory (admin) — list policy files, read one policy's source, and write it
+ * back (git committed). Inline-array guardrails have no file surface so `list`
+ * returns `{ policies: [] }` when the project configures none.
+ */
+export interface GuardrailsClient {
+    /** list guardrail policy files (name + source version) */
+    list(options?: GuardrailSourceOptions): Promise<GuardrailListResult>;
+    /** read one policy source (404 → null) */
+    getSource(name: string, options?: GuardrailSourceOptions): Promise<GuardrailPolicySource | null>;
+    /** git history of one policy file (commits that touched it + source blob each) */
+    history(name: string, options?: GuardrailSourceOptions): Promise<GuardrailPolicyHistory>;
+    /** write/replace a policy source and commit it to the engine project's Git repo */
+    save(name: string, source: string, options?: GuardrailSaveOptions): Promise<GuardrailSaveResult>;
+}
+export declare function createGuardrailsClient(http: HttpOptions): GuardrailsClient;
+//# sourceMappingURL=guardrails.d.ts.map

package/dist/guardrails.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.d.ts","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,qBAAqB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,IAAI,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrE,0CAA0C;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IACjG,kFAAkF;IAClF,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACzF,mFAAmF;IACnF,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAClG;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAsC1E"}

package/dist/guardrails.js

@@ -0,0 +1,28 @@
+import { ClientError, request } from './http.js';
+export function createGuardrailsClient(http) {
+    return {
+        list(options = {}) {
+            return request(http, 'GET', '/guardrails/policies', { signal: options.signal });
+        },
+        async getSource(name, options = {}) {
+            try {
+                return await request(http, 'GET', `/guardrails/policies/${encodeURIComponent(name)}`, { signal: options.signal });
+            }
+            catch (error) {
+                if (error instanceof ClientError && error.status === 404)
+                    return null;
+                throw error;
+            }
+        },
+        history(name, options = {}) {
+            return request(http, 'GET', `/guardrails/policies/${encodeURIComponent(name)}/history`, { signal: options.signal });
+        },
+        save(name, source, options = {}) {
+            return request(http, 'PUT', `/guardrails/policies/${encodeURIComponent(name)}`, {
+                body: options.expectVersion === undefined ? { source } : { source, expectVersion: options.expectVersion },
+                signal: options.signal,
+            });
+        },
+    };
+}
+//# sourceMappingURL=guardrails.js.map

package/dist/guardrails.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrails.js","sourceRoot":"","sources":["../src/guardrails.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgEjD,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO;QACL,IAAI,CAAC,OAAO,GAAG,EAAE;YACf,OAAO,OAAO,CAAsB,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAO,GAAG,EAAE;YACxC,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAClB,IAAI,EACJ,KAAK,EACL,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAClD,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3B,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;gBACtE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAY,EAAE,OAAO,GAAG,EAAE;YAChC,OAAO,OAAO,CACZ,IAAI,EACJ,KAAK,EACL,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,UAAU,EAC1D,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAY,EAAE,MAAc,EAAE,OAAO,GAAG,EAAE;YAC7C,OAAO,OAAO,CACZ,IAAI,EACJ,KAAK,EACL,wBAAwB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAClD;gBACE,IAAI,EAAE,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;gBACzG,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,23 @@
+/** uniform error surfaced from the engine REST layer (see ApiErrorBody) */
+export declare class ClientError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly params?: Record<string, unknown>;
+    constructor(status: number, code: string, message: string, params?: Record<string, unknown>);
+}
+/** resolved transport settings for a client */
+export interface HttpOptions {
+    baseUrl: string;
+    prefix: string;
+    apiKey?: string;
+    fetchImpl: typeof fetch;
+}
+export interface RequestOptions {
+    query?: Record<string, string>;
+    body?: unknown;
+    /** optional AbortSignal for request cancellation (react-admin supportAbortSignal) */
+    signal?: AbortSignal;
+}
+/** one REST request: URL + query serialization, auth header, JSON body, error mapping */
+export declare function request<T>(http: HttpOptions, method: string, path: string, options?: RequestOptions): Promise<T>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE9B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAO5F;AAED,+CAA+C;AAC/C,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,KAAK,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAeD,yFAAyF;AACzF,wBAAsB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC,CAyC1H"}

package/dist/http.js

@@ -0,0 +1,71 @@
+/** uniform error surfaced from the engine REST layer (see ApiErrorBody) */
+export class ClientError extends Error {
+    status;
+    code;
+    params;
+    constructor(status, code, message, params) {
+        super(message);
+        this.name = 'ClientError';
+        this.status = status;
+        this.code = code;
+        this.params = params;
+    }
+}
+async function parseErrorBody(res) {
+    try {
+        const body = await res.json();
+        if (typeof body === 'object' && body !== null && 'error' in body) {
+            const error = body.error;
+            return { code: error.code, message: error.message, params: error.params };
+        }
+    }
+    catch {
+        // not JSON — fall through to a generic error
+    }
+    return undefined;
+}
+/** one REST request: URL + query serialization, auth header, JSON body, error mapping */
+export async function request(http, method, path, options = {}) {
+    const url = new URL(`${http.baseUrl}${http.prefix}${path}`);
+    if (options.query !== undefined) {
+        for (const [key, value] of Object.entries(options.query)) {
+            url.searchParams.set(key, value);
+        }
+    }
+    const headers = {};
+    if (http.apiKey !== undefined)
+        headers.authorization = `Bearer ${http.apiKey}`;
+    if (options.body !== undefined)
+        headers['content-type'] = 'application/json';
+    // invoke fetch as a bare call — `http.fetchImpl(...)` would set `this` to the
+    // http object and native `window.fetch` throws "Illegal invocation"
+    const fetchImpl = http.fetchImpl;
+    let res;
+    try {
+        res = await fetchImpl(url.toString(), {
+            method,
+            headers,
+            body: options.body === undefined ? undefined : JSON.stringify(options.body),
+            signal: options.signal,
+        });
+    }
+    catch (error) {
+        // an aborted request (user cancelled / query superseded) is not an engine
+        // failure — let it propagate so callers (react-admin) ignore it
+        if (error instanceof Error && error.name === 'AbortError')
+            throw error;
+        // network-level failure (engine down / mid hot-reload / offline): surface a
+        // typed, actionable error instead of a raw fetch `TypeError: Failed to fetch`
+        throw new ClientError(0, 'http.unreachable', `Cannot reach the WeaveKit engine at ${http.baseUrl} — it may be down or restarting; check the server terminal`, {
+            cause: error instanceof Error ? error.message : String(error),
+        });
+    }
+    if (!res.ok) {
+        const error = await parseErrorBody(res);
+        throw new ClientError(res.status, error?.code ?? 'http.internal', error?.message ?? res.statusText, error?.params);
+    }
+    if (res.status === 204)
+        return undefined;
+    return (await res.json());
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAEA,2EAA2E;AAC3E,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,MAAM,CAAS;IACf,IAAI,CAAS;IACb,MAAM,CAA2B;IAE1C,YAAY,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,MAAgC;QACzF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAiBD,KAAK,UAAU,cAAc,CAAC,GAAa;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAY,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACjE,MAAM,KAAK,GAAI,IAAqB,CAAC,KAAK,CAAC;YAC3C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,IAAiB,EAAE,MAAc,EAAE,IAAY,EAAE,UAA0B,EAAE;IAC5G,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/E,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAE7E,8EAA8E;IAC9E,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACpC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,gEAAgE;QAChE,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,KAAK,CAAC;QACvE,4EAA4E;QAC5E,8EAA8E;QAC9E,MAAM,IAAI,WAAW,CAAC,CAAC,EAAE,kBAAkB,EAAE,uCAAuC,IAAI,CAAC,OAAO,4DAA4D,EAAE;YAC5J,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAc,CAAC;IAC9C,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC"}

package/dist/identities.d.ts

@@ -0,0 +1,16 @@
+import type { HttpOptions } from './http.js';
+export interface IdentitySummary {
+    ref: string;
+    id: string;
+    roles: string[];
+    teamId?: string;
+}
+export interface IdentitiesListResult {
+    identities: IdentitySummary[];
+}
+export interface IdentitiesClient {
+    /** list the engine's MCP on-behalf-of identity directory (admin read) */
+    list(): Promise<IdentitiesListResult>;
+}
+export declare function createIdentitiesClient(http: HttpOptions): IdentitiesClient;
+//# sourceMappingURL=identities.d.ts.map

package/dist/identities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identities.d.ts","sourceRoot":"","sources":["../src/identities.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,IAAI,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvC;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAM1E"}

package/dist/identities.js

@@ -0,0 +1,9 @@
+import { request } from './http.js';
+export function createIdentitiesClient(http) {
+    return {
+        list() {
+            return request(http, 'GET', '/identities');
+        },
+    };
+}
+//# sourceMappingURL=identities.js.map

package/dist/identities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identities.js","sourceRoot":"","sources":["../src/identities.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAuB,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { createClient, ClientError, version, layoutPagePath } from './client.js';
+export type { Client, ClientOptions, ObjectsClient, FindParams, FindOneParams, FindSort, LiveEvent, SubscribeOptions, Subscription, MetadataClient, PermissionsResult, AuditClient, AuditResult, ApprovalsClient, ApprovalListFilter, ApprovalListResult, ApprovalDecisionResult, AuditEvent, AuditQuery, ScriptsClient, ScriptSaveOptions, ScriptSaveResult, ScriptSourceDocument, ScriptSourceOptions, LayoutsClient, SourceDocument, PageSummary, CreatePageOptions, CreatePageResult, RenamePageOptions, RenamePageResult, DeletePageOptions, DeletePageResult, DesignSaveOptions, DesignSavePart, DesignSaveResult, LayoutSaveOptions, LayoutSaveResult, LayoutSourceOptions, SchemaClient, SchemaSourceDocument, SchemaSourceOptions, SchemaSaveOptions, SchemaSaveResult, GuardrailsClient, GuardrailPolicySummary, GuardrailPolicySource, GuardrailPolicyCommit, GuardrailPolicyHistory, GuardrailSourceOptions, GuardrailSaveOptions, GuardrailListResult, GuardrailSaveResult, IdentitiesClient, IdentitySummary, IdentitiesListResult, } from './client.js';
+export type { ScriptSourceKind, PendingApproval, ApprovalStatus } from '@weave-kit/engine';
+export type { LayoutAddress, ObjectLayoutView, PageRef } from '@weave-kit/engine/layout';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,YAAY,EACV,MAAM,EACN,aAAa,EACb,aAAa,EACb,UAAU,EACV,aAAa,EACb,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,WAAW,EACX,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,UAAU,EACV,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3F,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC"}