@zarel-ai/sdk 0.6.0

package/dist/runtime/index.js

@@ -0,0 +1,210 @@
+"use strict";
+// spec-050 / ADR-0098 — runtime plane namespace.
+//
+// Resources here target `{tenant}.zarel.ai/v1` with `runtimeToken`
+// (JWT class 'tenant'). Composed via wrappers over the existing
+// Resource classes under ../resources/* — the wire contracts are
+// unchanged (FR-011); only the access shape changes (FR-001, FR-013).
+//
+// Plane token guard: the FetchClient bound to this namespace has
+// `requireTokenCode: 'runtime_token_missing'`, so every call throws
+// ZarelAuthError before network I/O when runtimeToken is absent.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RuntimeNamespace = void 0;
+const conversation_1 = require("../resources/conversation");
+const conversation_sessions_1 = require("../resources/conversation-sessions");
+const channels_1 = require("../resources/channels");
+const tools_1 = require("../resources/tools");
+const records_1 = require("../resources/records");
+const state_machine_1 = require("../resources/state-machine");
+const role_assignments_1 = require("../resources/role-assignments");
+const runtime_entities_1 = require("../resources/runtime-entities");
+const events_1 = require("../resources/events");
+const imports_1 = require("../resources/imports");
+const flows_1 = require("../resources/flows");
+const llm_services_1 = require("../resources/llm-services");
+const llm_credentials_1 = require("../resources/llm-credentials");
+const embedding_credentials_1 = require("../resources/embedding-credentials");
+const actions_1 = require("../resources/actions");
+const traces_1 = require("../resources/traces");
+const audit_1 = require("../resources/audit");
+const receipts_1 = require("../resources/receipts");
+const system_1 = require("../resources/system");
+const authorizations_1 = require("../resources/authorizations");
+const mcp_1 = require("../resources/mcp");
+// ── Composite sub-namespaces (FR-013 idiomatic taxonomy) ───────────────
+class RuntimeConversationSessions {
+    _conversation;
+    _sessions;
+    actions;
+    constructor(_conversation, _sessions) {
+        this._conversation = _conversation;
+        this._sessions = _sessions;
+        this.actions = {
+            list: _conversation.actions.bind(_conversation),
+        };
+    }
+    list = (...args) => this._conversation.sessions(...args);
+    get = (sessionKey, opts) => this._conversation.session(sessionKey, opts);
+    create = (input) => this._sessions.create(input);
+    delete = (sessionKey) => this._conversation.deleteSession(sessionKey);
+}
+class RuntimeConversation {
+    sessions;
+    _conversation;
+    constructor(client) {
+        this._conversation = new conversation_1.ConversationResource(client);
+        const sessions = new conversation_sessions_1.ConversationSessionsResource(client);
+        this.sessions = new RuntimeConversationSessions(this._conversation, sessions);
+    }
+    send = (...args) => this._conversation.send(...args);
+}
+class RuntimeFlows {
+    instances;
+    // The appended lifecycle log. `/runtime/flows/events` is declared in the
+    // OpenAPI and mounted by runtime-api, and this namespace was the missing
+    // half — so the platform's only per-step history had no SDK binding, and
+    // the sibling `state_machine.events` shape it mirrors did.
+    events;
+    callbacks;
+    constructor(client) {
+        const f = new flows_1.FlowsResource(client);
+        this.instances = {
+            list: f.listInstances.bind(f),
+            get: f.getInstance.bind(f),
+        };
+        this.events = {
+            list: f.listEvents.bind(f),
+            get: f.getEvent.bind(f),
+        };
+        this.callbacks = {
+            resolve: f.resolveCallback.bind(f),
+        };
+    }
+}
+class RuntimeStateMachine {
+    instances;
+    events;
+    transitions;
+    replay;
+    constructor(client) {
+        const sm = new state_machine_1.StateMachineResource(client);
+        this.instances = {
+            list: sm.listInstances.bind(sm),
+            get: sm.getInstance.bind(sm),
+        };
+        this.events = {
+            list: sm.listEvents.bind(sm),
+            get: sm.getEvent.bind(sm),
+        };
+        this.transitions = {
+            list: sm.listTransitionRequests.bind(sm),
+            listPending: sm.listPendingTransitions.bind(sm),
+            get: sm.getTransitionRequest.bind(sm),
+            create: sm.createTransitionRequest.bind(sm),
+            resolve: sm.resolveTransitionRequest.bind(sm),
+        };
+        this.replay = sm.replay.bind(sm);
+    }
+}
+class RuntimeEvents {
+    subscriptions;
+    deliveries;
+    // G3 — typed SSE stream over GET /runtime/events/stream.
+    stream;
+    // Async-iterable (pull) view over the same stream.
+    iterate;
+    constructor(client) {
+        const e = new events_1.EventsResource(client);
+        this.subscriptions = {
+            list: e.listSubscriptions.bind(e),
+            create: e.subscribe.bind(e),
+            delete: e.deleteSubscription.bind(e),
+        };
+        this.deliveries = {
+            list: e.listDeliveries.bind(e),
+        };
+        this.stream = e.stream.bind(e);
+        this.iterate = e.iterate.bind(e);
+    }
+}
+class RuntimeRoles {
+    assignments;
+    constructor(client) {
+        this.assignments = new role_assignments_1.RoleAssignmentsResource(client);
+    }
+}
+class RuntimeLlm {
+    services;
+    credentials;
+    constructor(client) {
+        this.services = new llm_services_1.LlmServicesResource(client);
+        this.credentials = new llm_credentials_1.LlmCredentialsResource(client);
+    }
+}
+class RuntimeEmbeddings {
+    credentials;
+    constructor(client) {
+        this.credentials = new embedding_credentials_1.EmbeddingCredentialsResource(client);
+    }
+}
+class RuntimeImports {
+    _imp;
+    constructor(client) {
+        this._imp = new imports_1.ImportsResource(client);
+    }
+    snapshot = (...args) => this._imp.snapshot(...args);
+}
+// ── Top-level RuntimeNamespace ─────────────────────────────────────────
+class RuntimeNamespace {
+    records;
+    conversation;
+    tools;
+    flows;
+    stateMachine;
+    events;
+    roles;
+    // ADR-0098 D9 — recompute rewrites runtime.records, so its verb is here; entity
+    // AUTHORING stays on `contract.entities`.
+    entities;
+    llm;
+    embeddings;
+    traces;
+    // ADR-0108 — audit tamper-evidence bundle download (binary .tar.gz).
+    audit;
+    // Desk Spec 3 — the caller's own governance receipts (self-scoped, no view_traces).
+    receipts;
+    actions;
+    imports;
+    system;
+    // ADR-0102 §6 (S3b) — effective-authorizations introspection.
+    authorizations;
+    // Sub-spec A (A4) — typed path for the raw MCP stream POST.
+    mcp;
+    // ADR-0133 §B.4 — the four channel ops (channel-class credential only). The
+    // closed SDK duplex surface `@zarel-ai/channels` imports (QI-002).
+    channels;
+    constructor(client) {
+        this.records = new records_1.RecordsResource(client);
+        this.conversation = new RuntimeConversation(client);
+        this.tools = new tools_1.ToolsResource(client);
+        this.flows = new RuntimeFlows(client);
+        this.stateMachine = new RuntimeStateMachine(client);
+        this.events = new RuntimeEvents(client);
+        this.roles = new RuntimeRoles(client);
+        this.entities = new runtime_entities_1.RuntimeEntitiesResource(client);
+        this.llm = new RuntimeLlm(client);
+        this.embeddings = new RuntimeEmbeddings(client);
+        this.traces = new traces_1.TracesResource(client);
+        this.audit = new audit_1.AuditResource(client);
+        this.receipts = new receipts_1.ReceiptsResource(client);
+        this.actions = new actions_1.ActionsResource(client);
+        this.imports = new RuntimeImports(client);
+        this.system = new system_1.SystemResource(client);
+        this.authorizations = new authorizations_1.AuthorizationsResource(client);
+        this.mcp = new mcp_1.McpResource(client);
+        this.channels = new channels_1.ChannelsResource(client);
+    }
+}
+exports.RuntimeNamespace = RuntimeNamespace;
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,EAAE;AACF,mEAAmE;AACnE,gEAAgE;AAChE,iEAAiE;AACjE,sEAAsE;AACtE,EAAE;AACF,iEAAiE;AACjE,oEAAoE;AACpE,iEAAiE;;;AAGjE,4DAAiE;AACjE,8EAAkF;AAClF,oDAAyD;AACzD,8CAAmD;AACnD,kDAAuD;AACvD,8DAAkE;AAClE,oEAAwE;AACxE,oEAAwE;AACxE,gDAAqD;AACrD,kDAAuD;AACvD,8CAAmD;AACnD,4DAAgE;AAChE,kEAAsE;AACtE,8EAAkF;AAClF,kDAAuD;AACvD,gDAAqD;AACrD,8CAAmD;AACnD,oDAAyD;AACzD,gDAAqD;AACrD,gEAAqE;AACrE,0CAA+C;AAE/C,0EAA0E;AAE1E,MAAM,2BAA2B;IAEA;IAAsD;IAD1E,OAAO,CAA4C;IAC5D,YAA6B,aAAmC,EAAmB,SAAuC;QAA7F,kBAAa,GAAb,aAAa,CAAsB;QAAmB,cAAS,GAAT,SAAS,CAA8B;QACtH,IAAI,CAAC,OAAO,GAAG;YACX,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;SAClD,CAAC;IACN,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,IAAkD,EAAgD,EAAE,CAC3G,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,GAAG,CAAC,UAAkB,EAAE,IAAqD,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClI,MAAM,GAAG,CAAC,KAA4D,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxG,MAAM,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;CACjF;AAED,MAAM,mBAAmB;IACZ,QAAQ,CAA8B;IAC9B,aAAa,CAAuB;IACrD,YAAY,MAAmB;QAC3B,IAAI,CAAC,aAAa,GAAG,IAAI,mCAAoB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,oDAA4B,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAA2B,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,IAA8C,EAA4C,EAAE,CACnG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;CACxC;AAED,MAAM,YAAY;IACL,SAAS,CAGhB;IACF,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,2DAA2D;IAClD,MAAM,CAGb;IACO,SAAS,CAEhB;IACF,YAAY,MAAmB;QAC3B,MAAM,CAAC,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG;YACb,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;SAC7B,CAAC;QACF,IAAI,CAAC,MAAM,GAAG;YACV,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1B,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;SAC1B,CAAC;QACF,IAAI,CAAC,SAAS,GAAG;YACb,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;SACrC,CAAC;IACN,CAAC;CACJ;AAED,MAAM,mBAAmB;IACZ,SAAS,CAGhB;IACO,MAAM,CAGb;IACO,WAAW,CAMlB;IACO,MAAM,CAAiC;IAChD,YAAY,MAAmB;QAC3B,MAAM,EAAE,GAAG,IAAI,oCAAoB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG;YACb,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;SAC/B,CAAC;QACF,IAAI,CAAC,MAAM,GAAG;YACV,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,CAAC;QACF,IAAI,CAAC,WAAW,GAAG;YACf,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,WAAW,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;SAChD,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;CACJ;AAED,MAAM,aAAa;IACN,aAAa,CAIpB;IACO,UAAU,CAEjB;IACF,yDAAyD;IAChD,MAAM,CAA2B;IAC1C,mDAAmD;IAC1C,OAAO,CAA4B;IAC5C,YAAY,MAAmB;QAC3B,MAAM,CAAC,GAAG,IAAI,uBAAc,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,aAAa,GAAG;YACjB,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3B,MAAM,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;SACvC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG;YACd,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;SACjC,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;CACJ;AAED,MAAM,YAAY;IACL,WAAW,CAA0B;IAC9C,YAAY,MAAmB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,0CAAuB,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;CACJ;AAED,MAAM,UAAU;IACH,QAAQ,CAAsB;IAC9B,WAAW,CAAyB;IAC7C,YAAY,MAAmB;QAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,kCAAmB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,IAAI,wCAAsB,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;CACJ;AAED,MAAM,iBAAiB;IACV,WAAW,CAA+B;IACnD,YAAY,MAAmB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,oDAA4B,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;CACJ;AAED,MAAM,cAAc;IACC,IAAI,CAAkB;IACvC,YAAY,MAAmB;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,yBAAe,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IACD,QAAQ,GAAG,CAAC,GAAG,IAA6C,EAA2C,EAAE,CACrG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;CACnC;AAED,0EAA0E;AAE1E,MAAa,gBAAgB;IAChB,OAAO,CAAkB;IACzB,YAAY,CAAsB;IAClC,KAAK,CAAgB;IACrB,KAAK,CAAe;IACpB,YAAY,CAAsB;IAClC,MAAM,CAAgB;IACtB,KAAK,CAAe;IAC7B,gFAAgF;IAChF,0CAA0C;IACjC,QAAQ,CAA0B;IAClC,GAAG,CAAa;IAChB,UAAU,CAAoB;IAC9B,MAAM,CAAiB;IAChC,qEAAqE;IAC5D,KAAK,CAAgB;IAC9B,oFAAoF;IAC3E,QAAQ,CAAmB;IAC3B,OAAO,CAAkB;IACzB,OAAO,CAAiB;IACxB,MAAM,CAAiB;IAChC,8DAA8D;IACrD,cAAc,CAAyB;IAChD,4DAA4D;IACnD,GAAG,CAAc;IAC1B,4EAA4E;IAC5E,mEAAmE;IAC1D,QAAQ,CAAmB;IAEpC,YAAY,MAAmB;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,0CAAuB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAc,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,yBAAe,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAc,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG,IAAI,uCAAsB,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,IAAI,iBAAW,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,2BAAgB,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;CACJ;AAlDD,4CAkDC"}

package/dist/types/actions.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Wire-level types for the actions dispatch surface (Spec 016 / ADR-0085).
+ *
+ * Lives under `types/` so consumers can reach them via the
+ * `@zarel-ai/sdk/types` subpath after the spec-050 plane split.
+ */
+export interface ActionDispatchParams {
+    /** Optional record id for record-scoped actions. null/undefined for entity-level. */
+    record_id?: string | number | null;
+    /**
+     * Optional operator note. The runtime dispatch handler IGNORES it (ADR-0127
+     * dropped it from the OpenAPI request body), but the zarel-ai/react confirm
+     * dialog still collects it; full removal is deferred to the frontend
+     * confirmation migration to the US3 token round-trip.
+     */
+    notes?: string;
+    /** Optional payload forwarded to the underlying entity intent. */
+    payload?: Record<string, unknown>;
+    /**
+     * Optional idempotency key. V1 wire-format-only pass-through; server-side
+     * deduplication is not yet implemented (research §R4).
+     */
+    idempotency_key?: string;
+}
+export interface ActionDispatchSuccessResponse {
+    success: true;
+    /** The dispatched record (for create/update verbs). null for delete. */
+    data: Record<string, unknown> | null;
+    /** ADR-0085 telemetry tag. */
+    resolved_via_action: string;
+}
+//# sourceMappingURL=actions.d.ts.map

package/dist/types/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/types/actions.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,oBAAoB;IACjC,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC1C,OAAO,EAAE,IAAI,CAAC;IACd,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACrC,8BAA8B;IAC9B,mBAAmB,EAAE,MAAM,CAAC;CAC/B"}

package/dist/types/actions.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Wire-level types for the actions dispatch surface (Spec 016 / ADR-0085).
+ *
+ * Lives under `types/` so consumers can reach them via the
+ * `@zarel-ai/sdk/types` subpath after the spec-050 plane split.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=actions.js.map

package/dist/types/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/types/actions.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/types/audit.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Audit log read-surface types (GTM Phase 0 M1).
+ *
+ * Wire shapes mirror the runtime contract module's audit DTOs (see
+ * authoring/packages/contract/src/domain/types/audit.ts). Kept as plain
+ * interfaces so SDK consumers need not depend on the runtime contract package
+ * (same convention as `types/traces.ts`).
+ *
+ * Distinct from `AuditLogName` (`state_machine | flows`) in `resources/audit.ts`,
+ * which names the ADR-0108 evidence hash-chains, not these row-tables.
+ */
+/** The two privacy-preserving audit ROW-tables that can be listed. */
+export type AuditRowLogName = 'binding_violations' | 'topic_refusals';
+export interface BindingViolationAuditRow {
+    readonly id: string;
+    readonly entity: string;
+    readonly field: string;
+    readonly binding_mode: 'bind' | 'assert' | 'immutable';
+    readonly reason: string;
+    readonly input_sha256: string;
+    readonly input_masked: string;
+    readonly path_context: string | null;
+    readonly trace_id: string;
+    readonly created_by: string;
+    readonly created_at: string;
+}
+export interface TopicRefusalAuditRow {
+    readonly id: string;
+    readonly channel_name: string | null;
+    readonly verdict: string;
+    readonly category: string;
+    readonly reason: 'matched' | 'no_verdict' | 'unscored';
+    readonly confidence: number | null;
+    readonly strategy: string | null;
+    readonly fallback_used: boolean;
+    readonly contract_version: number;
+    readonly input_sha256: string;
+    readonly input_masked: string;
+    readonly latency_ms: number | null;
+    readonly trace_id: string;
+    readonly created_by: string;
+    readonly created_at: string;
+}
+/** Shared filters (both logs). `from`/`to` are inclusive ISO date-time bounds. */
+export interface AuditListParamsBase {
+    readonly from?: string;
+    readonly to?: string;
+    readonly limit?: number;
+    readonly cursor?: string;
+}
+export interface BindingViolationAuditListParams extends AuditListParamsBase {
+    readonly entity?: string;
+    readonly field?: string;
+    readonly bindingMode?: 'bind' | 'assert' | 'immutable';
+}
+export interface TopicRefusalAuditListParams extends AuditListParamsBase {
+    readonly category?: string;
+    readonly reason?: 'matched' | 'no_verdict' | 'unscored';
+    readonly verdict?: string;
+}
+export interface AuditListResponse<Row> {
+    readonly items: ReadonlyArray<Row>;
+    readonly next_cursor: string | null;
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/types/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,sEAAsE;AACtE,MAAM,MAAM,eAAe,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEtE,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,kFAAkF;AAClF,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,+BAAgC,SAAQ,mBAAmB;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;CAC1D;AAED,MAAM,WAAW,2BAA4B,SAAQ,mBAAmB;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB,CAAC,GAAG;IAClC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC"}

package/dist/types/audit.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Audit log read-surface types (GTM Phase 0 M1).
+ *
+ * Wire shapes mirror the runtime contract module's audit DTOs (see
+ * authoring/packages/contract/src/domain/types/audit.ts). Kept as plain
+ * interfaces so SDK consumers need not depend on the runtime contract package
+ * (same convention as `types/traces.ts`).
+ *
+ * Distinct from `AuditLogName` (`state_machine | flows`) in `resources/audit.ts`,
+ * which names the ADR-0108 evidence hash-chains, not these row-tables.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=audit.js.map

package/dist/types/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG"}

package/dist/types/channels.d.ts

@@ -0,0 +1,37 @@
+export interface MintPartyTokenRequest {
+    /** The recipient's keyed party pseudonym (64-hex). Channel is implied by the credential. */
+    readonly party_ref: string;
+}
+export interface PartyToken {
+    readonly token: string;
+    readonly expires_at: string;
+}
+/** The fetch(=claim) response: the directive metadata PLUS the resolved body. */
+export interface ChannelDirectiveContent {
+    readonly id: string;
+    readonly channel_name: string;
+    readonly recipient_ref: string;
+    readonly content_ref: string;
+    readonly delivery_mode: 'freeform' | 'template' | 'deferred';
+    readonly template?: {
+        readonly id: string;
+        readonly version: number;
+    };
+    readonly correlation: {
+        readonly session_key: string;
+        readonly turn_seq: number;
+    };
+    readonly deadline_at?: string;
+    /** The reply body to deliver (metadata-only stays on the audit rows; this is the fetch). */
+    readonly content: string;
+}
+export interface ChannelSendResult {
+    readonly status: 'accepted' | 'failed' | 'deferred';
+    readonly provider_message_id?: string;
+    readonly attested_by: 'runtime' | 'channel_provider';
+}
+/** A `channel.directive_created` event off the subscribe stream. */
+export interface ChannelDirectiveStreamEvent {
+    readonly directive_id: string;
+}
+//# sourceMappingURL=channels.d.ts.map

package/dist/types/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../src/types/channels.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,qBAAqB;IAClC,4FAA4F;IAC5F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,CAAC;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,QAAQ,CAAC,WAAW,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAClF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,4FAA4F;IAC5F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,SAAS,GAAG,kBAAkB,CAAC;CACxD;AAED,oEAAoE;AACpE,MAAM,WAAW,2BAA2B;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CACjC"}

package/dist/types/channels.js

@@ -0,0 +1,6 @@
+"use strict";
+// ADR-0133 §B.4 — the four channel-ops DTOs (SDK-local, zero-dep mirror of the
+// @zarel-ai/channel-port wire schemas). The runtime plane validates against the zod
+// schemas; these are the typed client view.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=channels.js.map

package/dist/types/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/types/channels.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,oFAAoF;AACpF,4CAA4C"}

package/dist/types/confirmation.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The client half of the confirmation round-trip (ADR-0127 US3).
+ *
+ * A `confirm` guard pauses a write and answers `409 confirmation_required`
+ * carrying, under `error.confirmation`, every guard that fired plus ONE consent
+ * token bound to the whole set. The caller shows the human every prompt and
+ * re-submits the IDENTICAL request with the token in `X-Zarel-Confirmation-Token`.
+ *
+ * Hand-authored rather than imported from `@zarel-ai/contract/core` — the SDK
+ * ships no runtime dependency on the platform packages, and its wire types are
+ * the OpenAPI projection. `tests/confirmation-types-assignability.test.ts` pins
+ * these against `generated/runtime.ts` at compile time, so a spec change that
+ * renames or adds a field fails the suite instead of drifting silently.
+ */
+/** One guard that paused a write, with the prompt the human is shown for it. */
+export interface ConfirmationGuard {
+    /**
+     * The guard's own name: an entity check's `name`, or `<field>__<from>__<to>`
+     * for a state-machine edge. Never a governed action name.
+     */
+    readonly name: string;
+    /** Human-readable prompt for THIS guard, resolved server-side. */
+    readonly prompt: string;
+}
+/**
+ * The challenge attached to a `409 confirmation_required`.
+ *
+ * ONE challenge per WRITE, not per guard: a single write can fire several
+ * `confirm` guards at once and the token is bound to the whole set. A caller
+ * MUST render every entry of {@link guards} before retrying — consenting on one
+ * prompt while another stayed hidden signs for a condition the operator never
+ * saw.
+ */
+export interface ConfirmationChallenge {
+    /** Every guard that fired on this write. Never empty. */
+    readonly guards: readonly ConfirmationGuard[];
+    /** The opaque `zct1.…` consent token to echo on the confirming retry. */
+    readonly token: string;
+    /** ISO-8601 expiry — the caller cannot derive it from the opaque token. */
+    readonly expires_at: string;
+}
+/**
+ * Per-call option accepted by every write that a `confirm` guard can pause.
+ *
+ * The retry must re-send the request BYTE-IDENTICAL: the token binds the payload
+ * as it was requested, so an edited retry is a different write and is challenged
+ * again by design.
+ */
+export interface ConfirmationRetryOptions {
+    /** `challenge.token` from the prior `409 confirmation_required`. */
+    confirmationToken?: string;
+}
+//# sourceMappingURL=confirmation.d.ts.map

package/dist/types/confirmation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.d.ts","sourceRoot":"","sources":["../../src/types/confirmation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAC9B;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IAClC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACrC,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC9B"}

package/dist/types/confirmation.js

@@ -0,0 +1,17 @@
+"use strict";
+/**
+ * The client half of the confirmation round-trip (ADR-0127 US3).
+ *
+ * A `confirm` guard pauses a write and answers `409 confirmation_required`
+ * carrying, under `error.confirmation`, every guard that fired plus ONE consent
+ * token bound to the whole set. The caller shows the human every prompt and
+ * re-submits the IDENTICAL request with the token in `X-Zarel-Confirmation-Token`.
+ *
+ * Hand-authored rather than imported from `@zarel-ai/contract/core` — the SDK
+ * ships no runtime dependency on the platform packages, and its wire types are
+ * the OpenAPI projection. `tests/confirmation-types-assignability.test.ts` pins
+ * these against `generated/runtime.ts` at compile time, so a spec change that
+ * renames or adds a field fails the suite instead of drifting silently.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=confirmation.js.map

package/dist/types/confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmation.js","sourceRoot":"","sources":["../../src/types/confirmation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG"}