@zarel-ai/sdk 0.6.0 → 0.7.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACxF,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAGnD,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EACR,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EACR,qBAAqB,EACrB,UAAU,EACV,uBAAuB,EACvB,iBAAiB,EACjB,2BAA2B,GAC9B,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACR,oBAAoB,EACpB,6BAA6B,GAChC,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACR,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,GAC3B,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACR,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,YAAY,EACR,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACR,oBAAoB,EACpB,gCAAgC,EAChC,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,8BAA8B,GACjC,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACR,YAAY,EACZ,wBAAwB,EACxB,oBAAoB,EACpB,SAAS,EACT,qBAAqB,EACrB,iBAAiB,GACpB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACR,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,OAAO,EACP,QAAQ,GACX,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACR,WAAW,EACX,oBAAoB,EACpB,mBAAmB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACR,oBAAoB,EACpB,iBAAiB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC/G,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAChH,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGtF,YAAY,EACR,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,EAC9B,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAGvE,YAAY,EACR,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,GAClB,MAAM,aAAa,CAAC;AAErB,YAAY,EACR,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,EACnC,oBAAoB,EACpB,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACR,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,GACvB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACR,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACR,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,iCAAiC,EACjC,kCAAkC,GACrC,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EACR,KAAK,EACL,UAAU,EACV,eAAe,EACf,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,iBAAiB,GACpB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACR,eAAe,EACf,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,+BAA+B,EAC/B,2BAA2B,EAC3B,iBAAiB,GACpB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACR,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,QAAQ,EACR,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,iCAAiC,EACjC,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GAChB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAG/E,YAAY,EACR,YAAY,EACZ,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,GAC1B,MAAM,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACjC,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACxF,YAAY,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAGnD,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAG/D,YAAY,EACR,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,GACxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EACR,qBAAqB,EACrB,UAAU,EACV,uBAAuB,EACvB,iBAAiB,EACjB,2BAA2B,GAC9B,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACR,oBAAoB,EACpB,6BAA6B,GAChC,MAAM,iBAAiB,CAAC;AAGzB,YAAY,EACR,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,GAC3B,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACR,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,YAAY,EACR,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,GACzB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACR,oBAAoB,EACpB,gCAAgC,EAChC,4BAA4B,EAC5B,2BAA2B,EAC3B,iBAAiB,EACjB,6BAA6B,EAC7B,yBAAyB,EACzB,uBAAuB,EACvB,2BAA2B,EAC3B,qBAAqB,EACrB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,6BAA6B,EAC7B,8BAA8B,GACjC,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACR,YAAY,EACZ,wBAAwB,EACxB,oBAAoB,EACpB,SAAS,EACT,aAAa,EACb,qBAAqB,EACrB,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,GACvB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACR,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,OAAO,EACP,QAAQ,GACX,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACR,cAAc,EACd,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,GACtB,MAAM,kBAAkB,CAAC;AAI1B,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,YAAY,EACR,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,8BAA8B,EAC9B,8BAA8B,EAC9B,6BAA6B,EAC7B,kBAAkB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAClK,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAChH,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGtF,YAAY,EACR,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,8BAA8B,EAC9B,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,8BAA8B,EAAE,MAAM,uBAAuB,CAAC;AAGvE,YAAY,EACR,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,GAClB,MAAM,aAAa,CAAC;AAErB,YAAY,EACR,iBAAiB,EACjB,WAAW,EACX,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,EACnC,SAAS,GACZ,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACR,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,oBAAoB,GACvB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACR,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACR,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,+BAA+B,EAC/B,iCAAiC,EACjC,kCAAkC,GACrC,MAAM,+BAA+B,CAAC;AAEvC,YAAY,EACR,KAAK,EACL,UAAU,EACV,eAAe,EACf,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,iBAAiB,GACpB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACR,eAAe,EACf,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,+BAA+B,EAC/B,2BAA2B,EAC3B,iBAAiB,GACpB,MAAM,eAAe,CAAC;AAMvB,YAAY,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE1E,YAAY,EACR,OAAO,EACP,aAAa,EACb,YAAY,EACZ,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACR,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACb,QAAQ,EACR,aAAa,EACb,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,EACtB,iCAAiC,EACjC,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,GAChB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAG/E,YAAY,EACR,YAAY,EACZ,yBAAyB,EACzB,0BAA0B,EAC1B,uBAAuB,GAC1B,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isConversationTurnCreatedEvent = exports.CONTRACT_SECTION_NAMES = exports.ChannelsResource = exports.ZarelTimeoutError = exports.ZarelAuthError = exports.ZarelAPIError = exports.ZarelError = exports.ContractAgentRoots = exports.ContractNamespace = exports.RuntimeNamespace = exports.Zarel = void 0;
+exports.isConversationTurnCreatedEvent = exports.grantQualifiers = exports.CONTRACT_SECTION_NAMES = exports.ChannelsResource = exports.ZarelTimeoutError = exports.ZarelAuthError = exports.ZarelAPIError = exports.ZarelError = exports.ContractAgentRoots = exports.ContractNamespace = exports.RuntimeNamespace = exports.Zarel = void 0;
+// SPDX-License-Identifier: MIT
+// Copyright 2026 Nicolas Moreno
 // ── Main client ─────────────────────────────────────────────────────────
 var client_1 = require("./client");
 Object.defineProperty(exports, "Zarel", { enumerable: true, get: function () { return client_1.Zarel; } });
-// ── Spec-050 plane namespaces (for advanced consumer typing) ────────────
+// ── Plane namespaces (for advanced consumer typing) ─────────────────────
 var runtime_1 = require("./runtime");
 Object.defineProperty(exports, "RuntimeNamespace", { enumerable: true, get: function () { return runtime_1.RuntimeNamespace; } });
 var contract_1 = require("./contract");
@@ -17,11 +19,13 @@ Object.defineProperty(exports, "ZarelError", { enumerable: true, get: function (
 Object.defineProperty(exports, "ZarelAPIError", { enumerable: true, get: function () { return errors_1.ZarelAPIError; } });
 Object.defineProperty(exports, "ZarelAuthError", { enumerable: true, get: function () { return errors_1.ZarelAuthError; } });
 Object.defineProperty(exports, "ZarelTimeoutError", { enumerable: true, get: function () { return errors_1.ZarelTimeoutError; } });
-// ADR-0133 §B.4 — channel-ops DTOs + resource.
+// Channel-ops DTOs + resource.
 var channels_1 = require("./resources/channels");
 Object.defineProperty(exports, "ChannelsResource", { enumerable: true, get: function () { return channels_1.ChannelsResource; } });
 var tools_1 = require("./types/tools");
 Object.defineProperty(exports, "CONTRACT_SECTION_NAMES", { enumerable: true, get: function () { return tools_1.CONTRACT_SECTION_NAMES; } });
+var authorization_1 = require("./resources/authorization");
+Object.defineProperty(exports, "grantQualifiers", { enumerable: true, get: function () { return authorization_1.grantQualifiers; } });
 var events_stream_1 = require("./types/events-stream");
 Object.defineProperty(exports, "isConversationTurnCreatedEvent", { enumerable: true, get: function () { return events_stream_1.isConversationTurnCreatedEvent; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,2EAA2E;AAC3E,mCAAiC;AAAxB,+FAAA,KAAK,OAAA;AAGd,2EAA2E;AAC3E,qCAA6C;AAApC,2GAAA,gBAAgB,OAAA;AACzB,uCAA+C;AAAtC,6GAAA,iBAAiB,OAAA;AAC1B,0CAAsD;AAA7C,2GAAA,kBAAkB,OAAA;AAE3B,2EAA2E;AAC3E,mCAAwF;AAA/E,oGAAA,UAAU,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,wGAAA,cAAc,OAAA;AAAE,2GAAA,iBAAiB,OAAA;AAcrE,+CAA+C;AAC/C,iDAAwD;AAA/C,4GAAA,gBAAgB,OAAA;AAwCzB,uCAAuD;AAA9C,+GAAA,sBAAsB,OAAA;AAgF/B,uDAAuE;AAA9D,+HAAA,8BAA8B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,+BAA+B;AAC/B,gCAAgC;AAChC,2EAA2E;AAC3E,mCAAiC;AAAxB,+FAAA,KAAK,OAAA;AAGd,2EAA2E;AAC3E,qCAA6C;AAApC,2GAAA,gBAAgB,OAAA;AACzB,uCAA+C;AAAtC,6GAAA,iBAAiB,OAAA;AAC1B,0CAAsD;AAA7C,2GAAA,kBAAkB,OAAA;AAE3B,2EAA2E;AAC3E,mCAAwF;AAA/E,oGAAA,UAAU,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,wGAAA,cAAc,OAAA;AAAE,2GAAA,iBAAiB,OAAA;AAcrE,+BAA+B;AAC/B,iDAAwD;AAA/C,4GAAA,gBAAgB,OAAA;AAwCzB,uCAAuD;AAA9C,+GAAA,sBAAsB,OAAA;AAiG/B,2DAA4D;AAAnD,gHAAA,eAAe,OAAA;AAgBxB,uDAAuE;AAA9D,+HAAA,8BAA8B,OAAA"}

package/dist/resources/actions.d.ts

@@ -3,12 +3,11 @@ import type { ActionDispatchParams, ActionDispatchSuccessResponse } from '../typ
 import type { ConfirmationRetryOptions } from '../types/confirmation';
 export type { ActionDispatchParams, ActionDispatchSuccessResponse };
 /**
- * Dispatch surface for YAML-declared `action.<name>` intents (ADR-0085).
+ * Dispatch surface for YAML-declared `action.<name>` intents.
  *
- * Backs the `POST /runtime/actions/:name` route. The handler delegates to the
- * cognitive-engine action-intent-handler, which synthesizes the underlying
- * `EntityIntent` and runs authorization + validation + state-machine + side
- * effects through the existing entity-intent path.
+ * Backs the `POST /runtime/actions/:name` route. The server runs the action as
+ * the entity operation it declares, with the same authorization, validation,
+ * state-machine checks and side effects as a direct entity write.
  *
  * Errors surface as `ZarelAPIError` with `code` set to one of:
  *   `unknown_action`         (404) — action name not in tenant contract
@@ -16,7 +15,7 @@ export type { ActionDispatchParams, ActionDispatchSuccessResponse };
  *   `precondition_failed`    (422) — YAML preconditions evaluated false
  *   `validation_error`       (400) — payload schema mismatch
  *   `confirmation_required`  (409) — a `confirm` guard paused the write; the
- *                                    error carries `confirmation` (ADR-0127 US3)
+ *                                    error carries `confirmation`
  */
 export declare class ActionsResource {
     private readonly client;

package/dist/resources/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/resources/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,YAAY,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,eAAe;IACZ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD;;;;;;OAMG;IACG,QAAQ,CACV,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,wBAAwB,GACnC,OAAO,CAAC,6BAA6B,CAAC;CAkB5C"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/resources/actions.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,YAAY,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,eAAe;IACZ,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD;;;;;;OAMG;IACG,QAAQ,CACV,UAAU,EAAE,MAAM,EAClB,MAAM,CAAC,EAAE,oBAAoB,EAC7B,OAAO,CAAC,EAAE,wBAAwB,GACnC,OAAO,CAAC,6BAA6B,CAAC;CAkB5C"}

package/dist/resources/actions.js

@@ -3,12 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ActionsResource = void 0;
 const confirmation_1 = require("../_internal/confirmation");
 /**
- * Dispatch surface for YAML-declared `action.<name>` intents (ADR-0085).
+ * Dispatch surface for YAML-declared `action.<name>` intents.
  *
- * Backs the `POST /runtime/actions/:name` route. The handler delegates to the
- * cognitive-engine action-intent-handler, which synthesizes the underlying
- * `EntityIntent` and runs authorization + validation + state-machine + side
- * effects through the existing entity-intent path.
+ * Backs the `POST /runtime/actions/:name` route. The server runs the action as
+ * the entity operation it declares, with the same authorization, validation,
+ * state-machine checks and side effects as a direct entity write.
  *
  * Errors surface as `ZarelAPIError` with `code` set to one of:
  *   `unknown_action`         (404) — action name not in tenant contract
@@ -16,7 +15,7 @@ const confirmation_1 = require("../_internal/confirmation");
  *   `precondition_failed`    (422) — YAML preconditions evaluated false
  *   `validation_error`       (400) — payload schema mismatch
  *   `confirmation_required`  (409) — a `confirm` guard paused the write; the
- *                                    error carries `confirmation` (ADR-0127 US3)
+ *                                    error carries `confirmation`
  */
 class ActionsResource {
     client;
@@ -34,8 +33,8 @@ class ActionsResource {
         const body = {};
         if (params?.record_id !== undefined)
             body.record_id = params.record_id;
-        // ADR-0127: `notes` is dropped from the OpenAPI + ignored by the runtime;
-        // still forwarded for the react confirm dialog pending its US3 migration.
+        // `notes` is not in the published schema and is ignored by the runtime;
+        // still forwarded for the react confirm dialog.
         if (params?.notes !== undefined)
             body.notes = params.notes;
         if (params?.payload !== undefined)
@@ -43,9 +42,9 @@ class ActionsResource {
         if (params?.idempotency_key !== undefined)
             body.idempotency_key = params.idempotency_key;
         // The dispatch response carries `resolved_via_action` ALONGSIDE the
-        // {success,data} envelope, so opt out of the transport unwrap (G1) and
+        // {success,data} envelope, so opt out of the transport unwrap and
         // return the full envelope body as ActionDispatchSuccessResponse.
-        return this.client.post(`/runtime/actions/${encodeURIComponent(actionName)}`, body, { operationId: 'dispatchAction', headers: (0, confirmation_1.confirmationHeaders)(options?.confirmationToken) });
+        return await this.client.post(`/runtime/actions/${encodeURIComponent(actionName)}`, body, { operationId: 'dispatchAction', headers: (0, confirmation_1.confirmationHeaders)(options?.confirmationToken) });
     }
 }
 exports.ActionsResource = ActionsResource;

package/dist/resources/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/resources/actions.ts"],"names":[],"mappings":";;;AACA,4DAAgE;AAMhE;;;;;;;;;;;;;;;GAeG;AACH,MAAa,eAAe;IACK;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CACV,UAAkB,EAClB,MAA6B,EAC7B,OAAkC;QAElC,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACjE,IAAI,MAAM,EAAE,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAEzF,oEAAoE;QACpE,uEAAuE;QACvE,kEAAkE;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CACnB,oBAAoB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EACpD,IAAI,EACJ,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAA,kCAAmB,EAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAC9F,CAAC;IACN,CAAC;CACJ;AAhCD,0CAgCC"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/resources/actions.ts"],"names":[],"mappings":";;;AAGA,4DAAgE;AAMhE;;;;;;;;;;;;;;GAcG;AACH,MAAa,eAAe;IACK;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CACV,UAAkB,EAClB,MAA6B,EAC7B,OAAkC;QAElC,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,MAAM,EAAE,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACvE,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACjE,IAAI,MAAM,EAAE,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAEzF,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACzB,oBAAoB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EACpD,IAAI,EACJ,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAA,kCAAmB,EAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAC9F,CAAC;IACN,CAAC;CACJ;AAhCD,0CAgCC"}

package/dist/resources/audit.d.ts

@@ -1,11 +1,11 @@
 import type { FetchClient } from '../_internal/fetch-client';
 import { PagePromise } from '../_internal/pagination';
 import type { BindingViolationAuditRow, TopicRefusalAuditRow, BindingViolationAuditListParams, TopicRefusalAuditListParams, AuditListResponse } from '../types/audit';
-/** The event logs that carry an audit hash-chain (ADR-0108). */
+/** The event logs that carry an audit hash-chain. */
 export type AuditLogName = 'state_machine' | 'flows';
 /**
- * Optional inclusive `seq` range to bound the exported chain (ADR-0108
- * follow-up). Use it to narrow a large log — a request whose selected range
+ * Optional inclusive `seq` range to bound the exported chain. Use it to
+ * narrow a large log — a request whose selected range
  * exceeds the server's per-bundle event cap is refused with HTTP 413.
  */
 export interface AuditEvidenceRange {
@@ -13,13 +13,13 @@ export interface AuditEvidenceRange {
     readonly to?: number;
 }
 /**
- * Audit tamper-evidence resource (ADR-0108).
+ * Audit tamper-evidence resource.
  *
  *   client.audit.evidence(log)          → GET /runtime/audit/{log}/evidence
  *   client.audit.evidence(log, {from,to}) → …?from=&to= (bounded slice)
  *
  * Downloads a signed evidence bundle (the event hash-chain + covering signed
- * checkpoints + any external RFC 3161 TSA anchors over them, ADR-0115, + a signed
+ * checkpoints + any external RFC 3161 TSA anchors over them + a signed
  * manifest) for offline verification with `zarel verify`. Mirrors
  * `traces.bundle()` — the body is a binary `application/gzip` stream, so it
  * returns a generic `ArrayBuffer` the caller writes to disk. The anchors ride
@@ -29,7 +29,7 @@ export declare class AuditResource {
     private readonly client;
     constructor(client: FetchClient);
     /**
-     * List rows of a privacy-preserving audit row-table (GTM Phase 0 M1):
+     * List rows of a privacy-preserving audit row-table:
      *
      *   client.runtime.audit.list('binding_violations', { entity })  → GET /runtime/audit/binding_violations?…
      *   client.runtime.audit.list('topic_refusals', { category })    → GET /runtime/audit/topic_refusals?…

package/dist/resources/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAgC,MAAM,yBAAyB,CAAC;AACpF,OAAO,KAAK,EAER,wBAAwB,EACxB,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,iBAAiB,EACpB,MAAM,gBAAgB,CAAC;AAExB,gEAAgE;AAChE,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,OAAO,CAAC;AAKrD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEvD;;;;;;;;;;;;OAYG;IACI,IAAI,CACP,GAAG,EAAE,oBAAoB,EACzB,MAAM,CAAC,EAAE,+BAA+B,EACxC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACnC,WAAW,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC9E,IAAI,CACP,GAAG,EAAE,gBAAgB,EACrB,MAAM,CAAC,EAAE,2BAA2B,EACpC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACnC,WAAW,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAuChE,QAAQ,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;CAwB7F"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAgC,MAAM,yBAAyB,CAAC;AACpF,OAAO,KAAK,EAER,wBAAwB,EACxB,oBAAoB,EACpB,+BAA+B,EAC/B,2BAA2B,EAC3B,iBAAiB,EACpB,MAAM,gBAAgB,CAAC;AAExB,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,OAAO,CAAC;AAKrD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEvD;;;;;;;;;;;;OAYG;IACI,IAAI,CACP,GAAG,EAAE,oBAAoB,EACzB,MAAM,CAAC,EAAE,+BAA+B,EACxC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACnC,WAAW,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC9E,IAAI,CACP,GAAG,EAAE,gBAAgB,EACrB,MAAM,CAAC,EAAE,2BAA2B,EACpC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACnC,WAAW,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAuChE,QAAQ,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;CAO7F"}

package/dist/resources/audit.js

@@ -3,13 +3,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuditResource = void 0;
 const pagination_1 = require("../_internal/pagination");
 /**
- * Audit tamper-evidence resource (ADR-0108).
+ * Audit tamper-evidence resource.
  *
  *   client.audit.evidence(log)          → GET /runtime/audit/{log}/evidence
  *   client.audit.evidence(log, {from,to}) → …?from=&to= (bounded slice)
  *
  * Downloads a signed evidence bundle (the event hash-chain + covering signed
- * checkpoints + any external RFC 3161 TSA anchors over them, ADR-0115, + a signed
+ * checkpoints + any external RFC 3161 TSA anchors over them + a signed
  * manifest) for offline verification with `zarel verify`. Mirrors
  * `traces.bundle()` — the body is a binary `application/gzip` stream, so it
  * returns a generic `ArrayBuffer` the caller writes to disk. The anchors ride
@@ -57,29 +57,7 @@ class AuditResource {
         });
     }
     async evidence(log, range) {
-        const qs = [];
-        if (range?.from !== undefined)
-            qs.push(`from=${encodeURIComponent(String(range.from))}`);
-        if (range?.to !== undefined)
-            qs.push(`to=${encodeURIComponent(String(range.to))}`);
-        const query = qs.length > 0 ? `?${qs.join('&')}` : '';
-        const path = `/runtime/audit/${encodeURIComponent(log)}/evidence${query}`;
-        const client = this.client;
-        if (client !== null
-            && typeof client === 'object'
-            && 'fetchRaw' in client
-            && typeof client.fetchRaw === 'function') {
-            const fetchRaw = client.fetchRaw;
-            const res = await fetchRaw(path);
-            if (!res.ok) {
-                throw new Error(`Audit evidence download failed (status ${res.status})`);
-            }
-            return res.arrayBuffer();
-        }
-        const got = await this.client.get(path, undefined, { operationId: 'getAuditEvidenceBundle' });
-        if (got instanceof ArrayBuffer)
-            return got;
-        throw new Error('FetchClient does not support binary downloads — wire `fetchRaw(path)` on your custom client.');
+        return await this.client.getBinary(`/runtime/audit/${encodeURIComponent(log)}/evidence`, { from: range?.from, to: range?.to }, { operationId: 'getAuditEvidenceBundle' });
     }
 }
 exports.AuditResource = AuditResource;

package/dist/resources/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":";;;AACA,wDAAoF;AA0BpF;;;;;;;;;;;;GAYG;AACH,MAAa,aAAa;IACc;IAApC,YAAoC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAyBpD,IAAI,CACP,GAAoB,EACpB,MAA2B,EAC3B,OAAkC;QAElC,MAAM,IAAI,GAAG,kBAAkB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,CAAC,MAAe,EAAE,KAAc,EAAyD,EAAE;YAC1G,MAAM,KAAK,GAA0D,EAAE,CAAC;YACxE,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzD,IAAI,MAAM,EAAE,EAAE,KAAK,SAAS;gBAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC5D,IAAI,MAAM,EAAE,WAAW,KAAK,SAAS;gBAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;YAC/E,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrE,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC7C,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YAChD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,CAAa,EAA2C,EAAE,CACzE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAiC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;YACjF,WAAW,EAAE,cAAc;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QAEP,OAAO,IAAI,wBAAW,CAClB,SAAS,EACT,IAAA,wBAAW,EAA8C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAC1G;YACI,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CACJ,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,GAAiB,EAAE,KAA0B;QAC/D,MAAM,EAAE,GAAa,EAAE,CAAC;QACxB,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,KAAK,EAAE,EAAE,KAAK,SAAS;YAAE,EAAE,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,kBAAkB,kBAAkB,CAAC,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAY,IAAI,CAAC,MAAM,CAAC;QACpC,IACI,MAAM,KAAK,IAAI;eACZ,OAAO,MAAM,KAAK,QAAQ;eAC1B,UAAU,IAAI,MAAM;eACpB,OAAQ,MAAgC,CAAC,QAAQ,KAAK,UAAU,EACrE,CAAC;YACC,MAAM,QAAQ,GAAI,MAAyD,CAAC,QAAQ,CAAC;YACrF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACV,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAU,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACvG,IAAI,GAAG,YAAY,WAAW;YAAE,OAAO,GAAG,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IACpH,CAAC;CACJ;AAxFD,sCAwFC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":";;;AAGA,wDAAoF;AA0BpF;;;;;;;;;;;;GAYG;AACH,MAAa,aAAa;IACc;IAApC,YAAoC,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAyBpD,IAAI,CACP,GAAoB,EACpB,MAA2B,EAC3B,OAAkC;QAElC,MAAM,IAAI,GAAG,kBAAkB,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,CAAC,MAAe,EAAE,KAAc,EAAyD,EAAE;YAC1G,MAAM,KAAK,GAA0D,EAAE,CAAC;YACxE,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzD,IAAI,MAAM,EAAE,EAAE,KAAK,SAAS;gBAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC5D,IAAI,MAAM,EAAE,WAAW,KAAK,SAAS;gBAAE,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;YAC/E,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS;gBAAE,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrE,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/D,IAAI,MAAM,EAAE,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC7C,IAAI,MAAM,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YAChD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,CAAa,EAA2C,EAAE,CACzE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAiC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;YACjF,WAAW,EAAE,cAAc;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QAEP,OAAO,IAAI,wBAAW,CAClB,SAAS,EACT,IAAA,wBAAW,EAA8C,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAC1G;YACI,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CACJ,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,QAAQ,CAAC,GAAiB,EAAE,KAA0B;QAC/D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAC9B,kBAAkB,kBAAkB,CAAC,GAAG,CAAC,WAAW,EACpD,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EACpC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAC5C,CAAC;IACN,CAAC;CACJ;AAvED,sCAuEC"}

package/dist/resources/authorization-ceiling.d.ts

@@ -5,7 +5,7 @@ export interface EnvelopeGrant {
     /** Section name for kind='section'; null for kind='system'. */
     readonly target: string | null;
     readonly action: string;
-    /** Bounds only (S5b-a, system grants) — not part of grant identity. */
+    /** Bounds only (system grants) — not part of grant identity. */
     readonly conditions?: unknown;
 }
 export interface OwnerCeilingEnvelope {
@@ -18,7 +18,7 @@ export declare class AuthorizationCeilingResource {
     /**
      * GET /contract/authorizations/ceiling — the tenant's owner/ceiling envelope.
      * This endpoint returns the BARE `{ownerRoleNames, grants}` body (no
-     * {success,data} wrapper), so it opts out of the transport unwrap (G1).
+     * {success,data} wrapper), so it opts out of the transport unwrap.
      */
     get(): Promise<OwnerCeilingEnvelope>;
 }

package/dist/resources/authorization-ceiling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-ceiling.d.ts","sourceRoot":"","sources":["../../src/resources/authorization-ceiling.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACjD;AAED,qBAAa,4BAA4B;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD;;;;OAIG;IACG,GAAG,IAAI,OAAO,CAAC,oBAAoB,CAAC;CAO7C"}
+{"version":3,"file":"authorization-ceiling.d.ts","sourceRoot":"","sources":["../../src/resources/authorization-ceiling.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACjD;AAED,qBAAa,4BAA4B;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD;;;;OAIG;IACG,GAAG,IAAI,OAAO,CAAC,oBAAoB,CAAC;CAO7C"}

package/dist/resources/authorization-ceiling.js

@@ -1,11 +1,12 @@
 "use strict";
-// Sub-spec C — owner/ceiling envelope introspection (ADR-0102 §6).
+// SPDX-License-Identifier: MIT
+// Copyright 2026 Nicolas Moreno
+// Owner/ceiling envelope introspection.
 //
 // Read-only mirror of `GET /contract/authorizations/ceiling`. The envelope is
-// the platform-seeded owner role names + the contract-section/system grants they
-// hold — the ceiling against which the dashboard derives owner-row locks and
-// cat-① "beyond-ceiling" cells. Derived server-side by `DbOwnerEnvelopeReader`;
-// the SDK only reads it.
+// the tenant's owner role names + the contract-section/system grants they
+// hold — the ceiling a UI can compare other roles' grants against. The server
+// computes it; the SDK only reads it.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationCeilingResource = void 0;
 class AuthorizationCeilingResource {
@@ -16,10 +17,10 @@ class AuthorizationCeilingResource {
     /**
      * GET /contract/authorizations/ceiling — the tenant's owner/ceiling envelope.
      * This endpoint returns the BARE `{ownerRoleNames, grants}` body (no
-     * {success,data} wrapper), so it opts out of the transport unwrap (G1).
+     * {success,data} wrapper), so it opts out of the transport unwrap.
      */
     async get() {
-        return this.client.get('/contract/authorizations/ceiling', undefined, { operationId: 'getAuthorizationCeiling' });
+        return await this.client.get('/contract/authorizations/ceiling', undefined, { operationId: 'getAuthorizationCeiling' });
     }
 }
 exports.AuthorizationCeilingResource = AuthorizationCeilingResource;

package/dist/resources/authorization-ceiling.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-ceiling.js","sourceRoot":"","sources":["../../src/resources/authorization-ceiling.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,yBAAyB;;;AAoBzB,MAAa,4BAA4B;IACR;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD;;;;OAIG;IACH,KAAK,CAAC,GAAG;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAClB,kCAAkC,EAClC,SAAS,EACT,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAC7C,CAAC;IACN,CAAC;CACJ;AAfD,oEAeC"}
+{"version":3,"file":"authorization-ceiling.js","sourceRoot":"","sources":["../../src/resources/authorization-ceiling.ts"],"names":[],"mappings":";AAAA,+BAA+B;AAC/B,gCAAgC;AAChC,wCAAwC;AACxC,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,sCAAsC;;;AAoBtC,MAAa,4BAA4B;IACR;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD;;;;OAIG;IACH,KAAK,CAAC,GAAG;QACL,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACxB,kCAAkC,EAClC,SAAS,EACT,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAC7C,CAAC;IACN,CAAC;CACJ;AAfD,oEAeC"}

package/dist/resources/authorization-operation-ids.d.ts

@@ -1,7 +1,7 @@
 /**
  * The operationId suffix for an on-path — mirrors the OpenAPI generator exactly.
  *
- * ADR-0109 A1 makes the operationId the SINGLE unwrap authority, so every call
+ * The operationId is the SINGLE unwrap authority, so every call
  * must name its operation. The SDK carries zero runtime dependencies, so it
  * cannot import the canonical derivation from `@zarel-ai/contract`; it mirrors
  * it here instead, and `authorization-operation-ids.test.ts` asserts every

package/dist/resources/authorization-operation-ids.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-operation-ids.d.ts","sourceRoot":"","sources":["../../src/resources/authorization-operation-ids.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUnE"}
+{"version":3,"file":"authorization-operation-ids.d.ts","sourceRoot":"","sources":["../../src/resources/authorization-operation-ids.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUnE"}

package/dist/resources/authorization-operation-ids.js

@@ -1,10 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.authorizationOperationSuffix = authorizationOperationSuffix;
+// SPDX-License-Identifier: MIT
+// Copyright 2026 Nicolas Moreno
 /**
  * The operationId suffix for an on-path — mirrors the OpenAPI generator exactly.
  *
- * ADR-0109 A1 makes the operationId the SINGLE unwrap authority, so every call
+ * The operationId is the SINGLE unwrap authority, so every call
  * must name its operation. The SDK carries zero runtime dependencies, so it
  * cannot import the canonical derivation from `@zarel-ai/contract`; it mirrors
  * it here instead, and `authorization-operation-ids.test.ts` asserts every
@@ -24,7 +26,7 @@ function authorizationOperationSuffix(onPath) {
     const pascal = onPath
         .split(/[^a-zA-Z0-9]+/)
         .filter(Boolean)
-        .map((w) => w[0].toUpperCase() + w.slice(1))
+        .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
         .join('');
     return `On${pascal}`;
 }

package/dist/resources/authorization-operation-ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization-operation-ids.js","sourceRoot":"","sources":["../../src/resources/authorization-operation-ids.ts"],"names":[],"mappings":";;AAaA,oEAUC;AAvBD;;;;;;;;;;;;GAYG;AACH,SAAgB,4BAA4B,CAAC,MAAc;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACrD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,cAAc,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM;SAChB,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC5C,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,OAAO,KAAK,MAAM,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"authorization-operation-ids.js","sourceRoot":"","sources":["../../src/resources/authorization-operation-ids.ts"],"names":[],"mappings":";;AAeA,oEAUC;AAzBD,+BAA+B;AAC/B,gCAAgC;AAChC;;;;;;;;;;;;GAYG;AACH,SAAgB,4BAA4B,CAAC,MAAc;IACvD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACrD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,cAAc,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM;SAChB,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,OAAO,KAAK,MAAM,EAAE,CAAC;AACzB,CAAC"}

package/dist/resources/authorization.d.ts

@@ -1,25 +1,59 @@
 import { type FetchClient } from '../_internal/fetch-client';
 import type { LocaleOptions } from '../types/locale';
+import type { GrantCreatePayload, GrantQualifiersConfigPayload, GrantQualifiersFlowsPayload, GrantQualifiersLlmServicesPayload, GrantQualifiersRecordsPayload, GrantStatementConfigPayload, GrantStatementFlowsPayload, GrantStatementLlmServicesPayload, GrantStatementRecordsPayload } from '../generated';
 /**
- * The authorization surface — spec `20260722-185941-authz-structural-keys`, T034.
- *
- * Replaces `contract-policies`, `entity-policies`, `flow-policies` and
- * `authorization-llm-services`. Those four existed only because the HTTP surface
- * was partitioned by plane and by family; the surface is now one path-addressed
- * resource, so the SDK is one resource too.
- *
- * `encodeURIComponent` on the on-path is GONE. There is nothing to encode: the
- * on-path travels as real path segments (ADR-0077 P2). Encoding it was the bug —
- * nginx decodes `%2F` before the router sees it, so `channels` was
- * unreachable end-to-end. `{role}` is still encoded: it is a single segment and
- * a user-supplied value.
+ * The authorization surface.
+ *
+ * The HTTP surface is one path-addressed resource, so the SDK is one resource too.
+ *
+ * The on-path is NOT passed through `encodeURIComponent`: it travels as real path
+ * segments, and an encoded `%2F` is decoded by the server before routing.
+ * `{role}` is encoded: it is a single segment and a user-supplied value.
+ */
+/**
+ * A grant statement: a bare action, or one attenuated by `fields` / `scope` / `when`.
+ *
+ * DERIVED from the published grant schemas, so the action vocabulary is closed: a misspelled
+ * action does not type-check.
+ *
+ * A UNION OF THE FOUR FAMILIES rather than a per-family type, because `put`/`patch` take the
+ * on-path as a `string` that the caller computes, and a type cannot narrow on a value it has
+ * not seen. So this closes the ACTION vocabulary; which of the four families an on-path admits
+ * is decided by the server.
+ */
+export type AuthorizationStatement = GrantStatementConfigPayload | GrantStatementRecordsPayload | GrantStatementFlowsPayload | GrantStatementLlmServicesPayload;
+/**
+ * The `POST` body — one published branch per family, so the DOCUMENT states which actions pair
+ * with which on-path and refuses a body that mixes them.
+ *
+ * TYPESCRIPT DOES NOT FOLLOW THE PAIRING: `{on: 'entities', actions: ['create']}` compiles.
+ * Only the config branch pins `on` (to the `ContractSectionName` enum); the three operational
+ * branches publish it as a `pattern`, which openapi-typescript renders as a bare `string` — so a
+ * mismatched body fails the config branch and is then admitted by the records one. The rule is
+ * enforced by the server, not by the caller's compiler; `authorization-statement-typing.test.ts`
+ * pins this behaviour.
+ *
+ * What the type DOES close is the statement vocabulary — see {@link AuthorizationStatement}.
+ */
+export type AuthorizationGrantCreate = GrantCreatePayload;
+/**
+ * Every qualifier any family admits, as an INTERSECTION of the four published bags.
+ *
+ * All four declare their properties optional, so `{when?} & {fields?, when?} & {scope?}` is
+ * inhabited by each of them and by nothing wider — it is the read type a caller holding a
+ * statement of unknown family actually has. Derived, not restated.
+ */
+export type AuthorizationQualifiers = GrantQualifiersConfigPayload & GrantQualifiersRecordsPayload & GrantQualifiersFlowsPayload & GrantQualifiersLlmServicesPayload;
+/**
+ * The qualifiers attenuating a statement, or `undefined` for a bare action.
+ *
+ * `Object.values(statement)[0]` does not keep its type: the object arm of each closed
+ * per-family type is `{use?: Q}`, which does not match `Object.values`' index-signature
+ * overload, so it falls through to the `{}` one and returns `any[]`. This helper reads the
+ * qualifier bag with its type intact, so no call site needs a cast (a cast would silence the
+ * `any` instead of removing it).
  */
-/** A grant statement: a bare action, or one attenuated by `fields` / `scope` / `when`. */
-export type AuthorizationStatement = string | Readonly<Record<string, {
-    readonly fields?: ReadonlyArray<string>;
-    readonly scope?: ReadonlyArray<'contract' | 'runtime'>;
-    readonly when?: Readonly<Record<string, unknown>>;
-}>>;
+export declare function grantQualifiers(statement: AuthorizationStatement): AuthorizationQualifiers | undefined;
 /** The permissions a role holds on one on-path — the addressable unit. */
 export interface AuthorizationGrant {
     /** e.g. `entities`, `channels`, `records/orders`, `llm/services/primary`. */
@@ -47,7 +81,7 @@ export declare class AuthorizationResource {
     /** Read one grant. */
     get(role: string, onPath: string, options?: LocaleOptions): Promise<AuthorizationGrant>;
     /** Create a grant. Rejects with 409 when one already exists on that on-path — use {@link put} to replace. */
-    create(role: string, grant: AuthorizationGrant): Promise<AuthorizationGrant>;
+    create(role: string, grant: AuthorizationGrantCreate): Promise<AuthorizationGrant>;
     /** Create or replace a grant. Idempotent. */
     put(role: string, onPath: string, actions: ReadonlyArray<AuthorizationStatement>): Promise<AuthorizationGrant>;
     /** Merge actions into an existing grant — adds or re-attenuates, never drops. */

package/dist/resources/authorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/resources/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAA0B,MAAM,2BAA2B,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGrD;;;;;;;;;;;;;GAaG;AAEH,0FAA0F;AAC1F,MAAM,MAAM,sBAAsB,GAC5B,MAAM,GACN,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD,CAAC,CAAC,CAAC;AAER,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;CAC3D;AAED,mCAAmC;AACnC,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,qBAAa,qBAAqB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD,OAAO,CAAC,IAAI;IAIZ,8EAA8E;IAC9E,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,EAAE;IAIV,oDAAoD;IAC9C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQ7E,sBAAsB;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ7F,6GAA6G;IACvG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIlF,6CAA6C;IACvC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMpH,iFAAiF;IAC3E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMtH,+BAA+B;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKjF"}
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/resources/authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,WAAW,EAA0B,MAAM,2BAA2B,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EACR,kBAAkB,EAClB,4BAA4B,EAC5B,2BAA2B,EAC3B,iCAAiC,EACjC,6BAA6B,EAC7B,2BAA2B,EAC3B,0BAA0B,EAC1B,gCAAgC,EAChC,4BAA4B,EAC/B,MAAM,cAAc,CAAC;AAGtB;;;;;;;;GAQG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAC5B,2BAA2B,GAC3B,4BAA4B,GAC5B,0BAA0B,GAC1B,gCAAgC,CAAC;AAEvC;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAE1D;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAC7B,4BAA4B,GAC5B,6BAA6B,GAC7B,2BAA2B,GAC3B,iCAAiC,CAAC;AAExC;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC3B,SAAS,EAAE,sBAAsB,GAClC,uBAAuB,GAAG,SAAS,CAIrC;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,CAAC;CAC3D;AAED,mCAAmC;AACnC,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,qBAAa,qBAAqB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD,OAAO,CAAC,IAAI;IAIZ,8EAA8E;IAC9E,OAAO,CAAC,IAAI;IAIZ,OAAO,CAAC,EAAE;IAIV,oDAAoD;IAC9C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQ7E,sBAAsB;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQ7F,6GAA6G;IACvG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxF,6CAA6C;IACvC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMpH,iFAAiF;IAC3E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMtH,+BAA+B;IACzB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAKjF"}

package/dist/resources/authorization.js

@@ -1,8 +1,26 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationResource = void 0;
+exports.grantQualifiers = grantQualifiers;
+// SPDX-License-Identifier: MIT
+// Copyright 2026 Nicolas Moreno
 const fetch_client_1 = require("../_internal/fetch-client");
 const authorization_operation_ids_1 = require("./authorization-operation-ids");
+/**
+ * The qualifiers attenuating a statement, or `undefined` for a bare action.
+ *
+ * `Object.values(statement)[0]` does not keep its type: the object arm of each closed
+ * per-family type is `{use?: Q}`, which does not match `Object.values`' index-signature
+ * overload, so it falls through to the `{}` one and returns `any[]`. This helper reads the
+ * qualifier bag with its type intact, so no call site needs a cast (a cast would silence the
+ * `any` instead of removing it).
+ */
+function grantQualifiers(statement) {
+    if (typeof statement === 'string')
+        return undefined;
+    const values = Object.values(statement);
+    return values[0];
+}
 /**
  * Authorization grants, addressed the way the contract declares them:
  * `/contract/authorization/{role}/<on-path>`.
@@ -24,27 +42,27 @@ class AuthorizationResource {
     }
     /** Every grant a role holds, in canonical order. */
     async list(role, options) {
-        return this.client.get(this.base(role), (0, fetch_client_1.localeQueryOrUndefined)(options), { operationId: 'listRoleGrants' });
+        return await this.client.get(this.base(role), (0, fetch_client_1.localeQueryOrUndefined)(options), { operationId: 'listRoleGrants' });
     }
     /** Read one grant. */
     async get(role, onPath, options) {
-        return this.client.get(this.item(role, onPath), (0, fetch_client_1.localeQueryOrUndefined)(options), { operationId: this.op('get', onPath) });
+        return await this.client.get(this.item(role, onPath), (0, fetch_client_1.localeQueryOrUndefined)(options), { operationId: this.op('get', onPath) });
     }
     /** Create a grant. Rejects with 409 when one already exists on that on-path — use {@link put} to replace. */
     async create(role, grant) {
-        return this.client.post(this.base(role), grant, { operationId: 'createRoleGrant' });
+        return await this.client.post(this.base(role), grant, { operationId: 'createRoleGrant' });
     }
     /** Create or replace a grant. Idempotent. */
     async put(role, onPath, actions) {
-        return this.client.put(this.item(role, onPath), { actions }, { operationId: this.op('put', onPath) });
+        return await this.client.put(this.item(role, onPath), { actions }, { operationId: this.op('put', onPath) });
     }
     /** Merge actions into an existing grant — adds or re-attenuates, never drops. */
     async patch(role, onPath, actions) {
-        return this.client.patch(this.item(role, onPath), { actions }, { operationId: this.op('patch', onPath) });
+        return await this.client.patch(this.item(role, onPath), { actions }, { operationId: this.op('patch', onPath) });
     }
     /** Remove a grant entirely. */
     async del(role, onPath) {
-        return this.client.del(this.item(role, onPath), { operationId: this.op('delete', onPath) });
+        return await this.client.del(this.item(role, onPath), { operationId: this.op('delete', onPath) });
     }
 }
 exports.AuthorizationResource = AuthorizationResource;

package/dist/resources/authorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/resources/authorization.ts"],"names":[],"mappings":";;;AAAA,4DAAqF;AAErF,+EAA6E;AAuC7E;;;GAGG;AACH,MAAa,qBAAqB;IACD;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE5C,IAAI,CAAC,IAAY;QACrB,OAAO,2BAA2B,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,8EAA8E;IACtE,IAAI,CAAC,IAAY,EAAE,MAAc;QACrC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;IAC1C,CAAC;IAEO,EAAE,CAAC,IAAwC,EAAE,MAAc;QAC/D,OAAO,GAAG,IAAI,QAAQ,IAAA,0DAA4B,EAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAuB;QAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAClB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EACf,IAAA,qCAAsB,EAAC,OAAO,CAAC,EAC/B,EAAE,WAAW,EAAE,gBAAgB,EAAE,CACpC,CAAC;IACN,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,OAAuB;QAC3D,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACvB,IAAA,qCAAsB,EAAC,OAAO,CAAC,EAC/B,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAC1C,CAAC;IACN,CAAC;IAED,6GAA6G;IAC7G,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAAyB;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,OAA8C;QAClF,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAChF,CAAC;IACN,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,MAAc,EAAE,OAA8C;QACpF,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CACpB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAClF,CAAC;IACN,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAc;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAClB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CACtE,CAAC;IACN,CAAC;CACJ;AA3DD,sDA2DC"}
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/resources/authorization.ts"],"names":[],"mappings":";;;AAiFA,0CAMC;AAvFD,+BAA+B;AAC/B,gCAAgC;AAChC,4DAAqF;AAarF,+EAA6E;AAyD7E;;;;;;;;GAQG;AACH,SAAgB,eAAe,CAC3B,SAAiC;IAEjC,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAgE,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAeD;;;GAGG;AACH,MAAa,qBAAqB;IACD;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE5C,IAAI,CAAC,IAAY;QACrB,OAAO,2BAA2B,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,8EAA8E;IACtE,IAAI,CAAC,IAAY,EAAE,MAAc;QACrC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;IAC1C,CAAC;IAEO,EAAE,CAAC,IAAwC,EAAE,MAAc;QAC/D,OAAO,GAAG,IAAI,QAAQ,IAAA,0DAA4B,EAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAuB;QAC5C,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACxB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EACf,IAAA,qCAAsB,EAAC,OAAO,CAAC,EAC/B,EAAE,WAAW,EAAE,gBAAgB,EAAE,CACpC,CAAC;IACN,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,OAAuB;QAC3D,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACvB,IAAA,qCAAsB,EAAC,OAAO,CAAC,EAC/B,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAC1C,CAAC;IACN,CAAC;IAED,6GAA6G;IAC7G,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,KAA+B;QACtD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAqB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,OAA8C;QAClF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAChF,CAAC;IACN,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,MAAc,EAAE,OAA8C;QACpF,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAClF,CAAC;IACN,CAAC;IAED,+BAA+B;IAC/B,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAc;QAClC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CACtE,CAAC;IACN,CAAC;CACJ;AA3DD,sDA2DC"}

package/dist/resources/authorizations.d.ts

@@ -3,13 +3,11 @@ export interface EntityPermissionEntry {
     readonly entity: string;
     readonly actions: ReadonlyArray<string>;
     /**
-     * The scope the write floor will enforce, per reported action. `full` reaches every row;
+     * The scope the server enforces, per reported action. `full` reaches every row;
      * `owner` reaches only rows the caller owns.
      *
-     * An owner-scoped action used to be ABSENT from `actions` entirely — the endpoint derived
-     * its answer from a policy read filtered by role name, and `owner` is a pseudo-role no role
-     * list contains. Callers gating an affordance on `actions.includes(...)` were therefore
-     * under-told, and should now gate the ROW-level affordance on this too.
+     * An owner-scoped action is listed in `actions` like any other, so gate a ROW-level
+     * affordance on this map, not on `actions.includes(...)` alone.
      */
     readonly scope_by_action: Readonly<Record<string, 'full' | 'owner'>>;
     /**

package/dist/resources/authorizations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorizations.d.ts","sourceRoot":"","sources":["../../src/resources/authorizations.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,WAAW,qBAAqB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACrE;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,+BAA+B;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CACrE;AAED,qBAAa,sBAAsB;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,+BAA+B,CAAC;CAG9D"}
+{"version":3,"file":"authorizations.d.ts","sourceRoot":"","sources":["../../src/resources/authorizations.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,WAAW,qBAAqB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACrE;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;CACrF;AAED,MAAM,WAAW,+BAA+B;IAC5C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CACrE;AAED,qBAAa,sBAAsB;IACnB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAEhD;;;OAGG;IACG,SAAS,IAAI,OAAO,CAAC,+BAA+B,CAAC;CAG9D"}

package/dist/resources/authorizations.js

@@ -1,5 +1,7 @@
 "use strict";
-// ADR-0102 §6 (S3b) — self-scoped effective-authorizations introspection.
+// SPDX-License-Identifier: MIT
+// Copyright 2026 Nicolas Moreno
+// Self-scoped effective-authorizations introspection.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AuthorizationsResource = void 0;
 class AuthorizationsResource {
@@ -12,7 +14,7 @@ class AuthorizationsResource {
      * decides for the CALLING actor (self-scope; no actor parameter exists).
      */
     async effective() {
-        return this.client.get('/runtime/authorizations/effective', undefined, { operationId: 'runtimeEffectiveAuthorizations' });
+        return await this.client.get('/runtime/authorizations/effective', undefined, { operationId: 'runtimeEffectiveAuthorizations' });
     }
 }
 exports.AuthorizationsResource = AuthorizationsResource;

package/dist/resources/authorizations.js.map

@@ -1 +1 @@
-{"version":3,"file":"authorizations.js","sourceRoot":"","sources":["../../src/resources/authorizations.ts"],"names":[],"mappings":";AAAA,0EAA0E;;;AAiC1E,MAAa,sBAAsB;IACF;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD;;;OAGG;IACH,KAAK,CAAC,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAkC,mCAAmC,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAC/J,CAAC;CACJ;AAVD,wDAUC"}
+{"version":3,"file":"authorizations.js","sourceRoot":"","sources":["../../src/resources/authorizations.ts"],"names":[],"mappings":";AAAA,+BAA+B;AAC/B,gCAAgC;AAChC,sDAAsD;;;AA+BtD,MAAa,sBAAsB;IACF;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD;;;OAGG;IACH,KAAK,CAAC,SAAS;QACX,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAkC,mCAAmC,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,gCAAgC,EAAE,CAAC,CAAC;IACrK,CAAC;CACJ;AAVD,wDAUC"}