@zarel-ai/sdk 0.6.0

package/dist/_internal/sse-client.js

@@ -0,0 +1,250 @@
+"use strict";
+// G3 — SSE stream client internals: a pure SSE frame parser + a transport-agnostic
+// reconnect loop. The actual `fetch` + auth live in a thin `FetchClient.openEventStream`
+// method (so they reuse the client's own fetchFn/baseUrl/auth — no private-field leak);
+// that method injects a `connect` closure here. Built on native WHATWG streams +
+// `TextDecoder` — ZERO runtime dependencies.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSseFrames = parseSseFrames;
+exports.runEventStream = runEventStream;
+const events_stream_1 = require("../types/events-stream");
+// Default reconnect backoff window (ms). Mirrors the dashboard's prior hand-rolled
+// SSE client so behavior is unchanged after the migration.
+const SSE_BASE_DELAY_MS = 1_000;
+const SSE_MAX_DELAY_MS = 30_000;
+function parseBlock(block) {
+    let event;
+    let id;
+    let retry;
+    const dataLines = [];
+    let hasField = false;
+    for (let line of block.split('\n')) {
+        if (line.endsWith('\r'))
+            line = line.slice(0, -1);
+        // A comment line (leading ':' — e.g. ':heartbeat', ':ok') carries no field.
+        if (line === '' || line.startsWith(':'))
+            continue;
+        const colon = line.indexOf(':');
+        const field = colon === -1 ? line : line.slice(0, colon);
+        let value = colon === -1 ? '' : line.slice(colon + 1);
+        if (value.startsWith(' '))
+            value = value.slice(1);
+        switch (field) {
+            case 'event':
+                event = value;
+                hasField = true;
+                break;
+            case 'data':
+                dataLines.push(value);
+                hasField = true;
+                break;
+            case 'id':
+                // Per the SSE spec, an id containing a NUL is ignored.
+                if (!value.includes(String.fromCharCode(0))) {
+                    id = value;
+                    hasField = true;
+                }
+                break;
+            case 'retry':
+                if (/^\d+$/.test(value)) {
+                    retry = Number(value);
+                    hasField = true;
+                }
+                break;
+            default:
+                break;
+        }
+    }
+    if (!hasField)
+        return null;
+    const frame = { data: dataLines.join('\n') };
+    if (event !== undefined)
+        frame.event = event;
+    if (id !== undefined)
+        frame.id = id;
+    if (retry !== undefined)
+        frame.retry = retry;
+    return frame;
+}
+/**
+ * Incrementally parse SSE text. Pure over `(chunk, carry)`: returns the complete
+ * frames found and the leftover `carry` (an unterminated trailing block) to feed
+ * into the next call. Frames are delimited by a blank line (`\n\n`).
+ */
+function parseSseFrames(chunk, carry) {
+    // Normalize CRLF → LF so the `\n\n` boundary scan is line-ending-agnostic. A
+    // lone trailing `\r` (a CRLF split across chunks) stays in `carry` until its
+    // `\n` arrives next call, so the pair still normalizes correctly.
+    const buffer = (carry + chunk).replace(/\r\n/g, '\n');
+    const frames = [];
+    let start = 0;
+    let sep;
+    while ((sep = buffer.indexOf('\n\n', start)) !== -1) {
+        const frame = parseBlock(buffer.slice(start, sep));
+        if (frame)
+            frames.push(frame);
+        start = sep + 2;
+    }
+    return { frames, carry: buffer.slice(start) };
+}
+function defaultSleep(ms, signal) {
+    return new Promise((resolve) => {
+        if (signal.aborted) {
+            resolve();
+            return;
+        }
+        const timer = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            resolve();
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+/**
+ * Drive a self-reconnecting SSE consumption loop. Returns an `EventStreamHandle`
+ * synchronously; the first connect happens asynchronously. Reconnect attempts are
+ * UNBOUNDED (until `close()`/abort/terminal); only the per-attempt delay is capped.
+ */
+function runEventStream(deps) {
+    const { connect, handlers, options } = deps;
+    const baseDelayMs = deps.baseDelayMs ?? SSE_BASE_DELAY_MS;
+    const maxDelayMs = deps.maxDelayMs ?? SSE_MAX_DELAY_MS;
+    const sleep = deps.sleep ?? defaultSleep;
+    const reconnectEnabled = options.reconnect !== false;
+    const controller = new AbortController();
+    let closed = false;
+    let lastEventId = options.lastEventId;
+    const close = () => {
+        if (closed)
+            return;
+        closed = true;
+        controller.abort();
+    };
+    // Aborting the caller signal is equivalent to close().
+    if (options.signal) {
+        if (options.signal.aborted) {
+            closed = true;
+        }
+        else {
+            options.signal.addEventListener('abort', close, { once: true });
+        }
+    }
+    const emitFrame = (frame) => {
+        if (frame.id !== undefined)
+            lastEventId = frame.id;
+        // A frame with no event name and no data (e.g. an id-only or retry-only
+        // frame) carries no event to surface.
+        if (frame.event === undefined && frame.data === '')
+            return;
+        let parsed;
+        try {
+            parsed = frame.data === '' ? undefined : JSON.parse(frame.data);
+        }
+        catch {
+            // Malformed JSON — drop the frame (loss-tolerant), never throw.
+            return;
+        }
+        const mapped = (0, events_stream_1.toRuntimeStreamEvent)(frame.event ?? 'message', parsed, frame.id);
+        // `undefined` ⇒ a known-event validation failure ⇒ drop.
+        if (mapped !== undefined)
+            handlers.onEvent?.(mapped);
+    };
+    const computeDelay = (attempt, serverRetry) => {
+        // A server-supplied `retry:` is clamped to [baseDelayMs, maxDelayMs]: the
+        // upper cap stops a hostile server pinning a huge delay; the lower floor
+        // stops a `retry: 0` (or tiny) value from spinning a tight reconnect loop.
+        if (serverRetry !== undefined) {
+            return Math.min(Math.max(serverRetry, baseDelayMs), maxDelayMs);
+        }
+        const backoff = Math.min(baseDelayMs * Math.pow(2, attempt), maxDelayMs);
+        const jitter = Math.random() * backoff * 0.1;
+        return Math.min(backoff + jitter, maxDelayMs);
+    };
+    const run = async () => {
+        let attempt = 0;
+        while (!closed) {
+            let outcome;
+            try {
+                outcome = await connect(lastEventId, controller.signal);
+            }
+            catch (error) {
+                // A thrown connect (e.g. a missing-token ZarelAuthError) is terminal.
+                if (!closed)
+                    handlers.onError?.(error);
+                return;
+            }
+            if (closed)
+                return;
+            if (outcome.kind === 'terminal') {
+                handlers.onError?.(outcome.error);
+                return;
+            }
+            let serverRetry;
+            if (outcome.kind === 'open') {
+                handlers.onOpen?.();
+                serverRetry = await readSseBody(outcome.body, controller.signal, (frame) => {
+                    // Reset backoff once this connection yields a frame.
+                    attempt = 0;
+                    emitFrame(frame);
+                });
+                if (closed)
+                    return;
+                // Body ended (server EOF / read error) → transient.
+            }
+            // transient (or open-then-EOF): reconnect unless disabled.
+            if (!reconnectEnabled)
+                return;
+            const delay = computeDelay(attempt, serverRetry);
+            attempt += 1;
+            await sleep(delay, controller.signal);
+            if (closed)
+                return;
+        }
+    };
+    void run();
+    return { close };
+}
+/**
+ * Read an open SSE body to completion, invoking `onFrame` per parsed frame.
+ * Returns the last server-suggested `retry` value seen (for backoff seeding).
+ * A read error / abort ends the read (the loop treats it as transient).
+ */
+async function readSseBody(body, signal, onFrame) {
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let carry = '';
+    let serverRetry;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done || signal.aborted)
+                break;
+            const text = decoder.decode(value, { stream: true });
+            const { frames, carry: nextCarry } = parseSseFrames(text, carry);
+            carry = nextCarry;
+            for (const frame of frames) {
+                if (frame.retry !== undefined)
+                    serverRetry = frame.retry;
+                onFrame(frame);
+            }
+        }
+    }
+    catch {
+        // Read error / abort → end the read; the loop treats it as transient
+        // (or, if closed, exits without reconnect). No rethrow.
+    }
+    finally {
+        try {
+            await reader.cancel();
+        }
+        catch {
+            // best-effort
+        }
+    }
+    return serverRetry;
+}
+//# sourceMappingURL=sse-client.js.map

package/dist/_internal/sse-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-client.js","sourceRoot":"","sources":["../../src/_internal/sse-client.ts"],"names":[],"mappings":";AAAA,mFAAmF;AACnF,yFAAyF;AACzF,wFAAwF;AACxF,iFAAiF;AACjF,6CAA6C;;AA8E7C,wCAcC;AA4CD,wCA+FC;AAhOD,0DAA8D;AAE9D,mFAAmF;AACnF,2DAA2D;AAC3D,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAWhC,SAAS,UAAU,CAAC,KAAa;IAC7B,IAAI,KAAyB,CAAC;IAC9B,IAAI,EAAsB,CAAC;IAC3B,IAAI,KAAyB,CAAC;IAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,4EAA4E;QAC5E,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClD,QAAQ,KAAK,EAAE,CAAC;YAChB,KAAK,OAAO;gBACR,KAAK,GAAG,KAAK,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACV,KAAK,MAAM;gBACP,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM;YACV,KAAK,IAAI;gBACL,uDAAuD;gBACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1C,EAAE,GAAG,KAAK,CAAC;oBACX,QAAQ,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,MAAM;YACV,KAAK,OAAO;gBACR,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACtB,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;oBACtB,QAAQ,GAAG,IAAI,CAAC;gBACpB,CAAC;gBACD,MAAM;YACV;gBACI,MAAM;QACV,CAAC;IACL,CAAC;IAED,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC7C,IAAI,EAAE,KAAK,SAAS;QAAE,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC7C,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,KAAa,EAAE,KAAa;IACvD,6EAA6E;IAC7E,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,MAAM,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAW,CAAC;IAChB,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAqBD,SAAS,YAAY,CAAC,EAAU,EAAE,MAAmB;IACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;YACV,OAAO;QACX,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,EAAE,CAAC;QACd,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACd,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,IAAoB;IAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC;IAErD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAEtC,MAAM,KAAK,GAAG,GAAS,EAAE;QACrB,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,UAAU,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,uDAAuD;IACvD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAQ,EAAE;QAC3C,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;YAAE,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC;QACnD,wEAAwE;QACxE,sCAAsC;QACtC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE;YAAE,OAAO;QAC3D,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACD,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACL,gEAAgE;YAChE,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,oCAAoB,EAAC,KAAK,CAAC,KAAK,IAAI,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAChF,yDAAyD;QACzD,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,WAA+B,EAAU,EAAE;QAC9E,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,GAAG,GAAG,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;QAClC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,MAAM,EAAE,CAAC;YACb,IAAI,OAAuB,CAAC;YAC5B,IAAI,CAAC;gBACD,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,sEAAsE;gBACtE,IAAI,CAAC,MAAM;oBAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;gBACvC,OAAO;YACX,CAAC;YACD,IAAI,MAAM;gBAAE,OAAO;YAEnB,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAClC,OAAO;YACX,CAAC;YAED,IAAI,WAA+B,CAAC;YACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpB,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACvE,qDAAqD;oBACrD,OAAO,GAAG,CAAC,CAAC;oBACZ,SAAS,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBACH,IAAI,MAAM;oBAAE,OAAO;gBACnB,oDAAoD;YACxD,CAAC;YACD,2DAA2D;YAC3D,IAAI,CAAC,gBAAgB;gBAAE,OAAO;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,MAAM;gBAAE,OAAO;QACvB,CAAC;IACL,CAAC,CAAC;IAEF,KAAK,GAAG,EAAE,CAAC;IACX,OAAO,EAAE,KAAK,EAAE,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACtB,IAAgC,EAChC,MAAmB,EACnB,OAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,WAA+B,CAAC;IACpC,IAAI,CAAC;QACD,SAAS,CAAC;YACN,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjE,KAAK,GAAG,SAAS,CAAC;YAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;oBAAE,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC;gBACzD,OAAO,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACL,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,qEAAqE;QACrE,wDAAwD;IAC5D,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YACD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACL,cAAc;QAClB,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACvB,CAAC"}

package/dist/_internal/version.d.ts

@@ -0,0 +1,5 @@
+export declare const SDK_VERSION = "0.6.0";
+/** Sent as the `User-Agent` header on every request (Node-effective; browsers
+ *  drop it — `User-Agent` is a forbidden header name in `fetch`). */
+export declare const USER_AGENT = "@zarel-ai/sdk/0.6.0";
+//# sourceMappingURL=version.d.ts.map

package/dist/_internal/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/_internal/version.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC;qEACqE;AACrE,eAAO,MAAM,UAAU,wBAAiC,CAAC"}

package/dist/_internal/version.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_AGENT = exports.SDK_VERSION = void 0;
+// The SDK's self-identifying version. Hand-maintained and kept in sync with
+// `package.json` by the QI-006 drift-guard test (tests/version-drift.test.ts) —
+// a runtime `import` of package.json is avoided so nothing third-party / JSON
+// enters the runtime graph (zero-runtime-deps invariant).
+exports.SDK_VERSION = '0.6.0';
+/** Sent as the `User-Agent` header on every request (Node-effective; browsers
+ *  drop it — `User-Agent` is a forbidden header name in `fetch`). */
+exports.USER_AGENT = `@zarel-ai/sdk/${exports.SDK_VERSION}`;
+//# sourceMappingURL=version.js.map

package/dist/_internal/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/_internal/version.ts"],"names":[],"mappings":";;;AAAA,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,0DAA0D;AAC7C,QAAA,WAAW,GAAG,OAAO,CAAC;AAEnC;qEACqE;AACxD,QAAA,UAAU,GAAG,iBAAiB,mBAAW,EAAE,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,74 @@
+import type { TokenInput } from './_internal/fetch-client';
+import type { Interceptors } from './_internal/interceptors';
+import { RuntimeNamespace } from './runtime';
+import { ContractNamespace } from './contract';
+export interface ZarelOptions {
+    /**
+     * Tenant slug. When set and `runtimeBaseUrl` / `contractBaseUrl` are
+     * not provided, hosts are derived as
+     * `https://{tenant}.zarel.ia/v1` (runtime) and
+     * `https://{tenant}.admin.zarel.ia/v1` (contract).
+     */
+    tenant?: string;
+    /**
+     * Credential for the runtime plane (`token_class: tenant`). Accepts a
+     * static string OR a provider `() => string | Promise<string>` resolved
+     * before each request. Required for any `client.runtime.*` call unless
+     * `transportManaged` is set; when absent and not transport-managed, runtime
+     * methods throw `ZarelAuthError({ code: 'runtime_token_missing' })` before
+     * any network I/O.
+     */
+    runtimeToken?: TokenInput;
+    /**
+     * Credential for the contract plane (`token_class: contract`). String or
+     * provider, same semantics as `runtimeToken`. When absent and not
+     * transport-managed, contract methods throw
+     * `ZarelAuthError({ code: 'contract_token_missing' })` before any network I/O.
+     */
+    contractToken?: TokenInput;
+    /**
+     * Transport-managed (no-token) mode for BOTH planes: a credential-injecting
+     * transport (e.g. the website BFF proxy) sets `Authorization` server-side,
+     * so the SDK omits the header and skips the token-presence guard. Opt-in —
+     * direct consumers keep the token-required guard (QI-004).
+     */
+    transportManaged?: boolean;
+    /**
+     * Override the derived runtime baseUrl
+     * (default: `https://{tenant}.zarel.ia/v1`).
+     */
+    runtimeBaseUrl?: string;
+    /**
+     * Override the derived contract baseUrl
+     * (default: `https://{tenant}.admin.zarel.ia/v1`).
+     */
+    contractBaseUrl?: string;
+    /** Request timeout in milliseconds (default: 30000). Applied to both planes. */
+    timeout?: number;
+    /** Maximum number of retries on 5xx / network errors (default: 3). Applied to both planes. */
+    maxRetries?: number;
+    /** Base retry delay in milliseconds (default: 500). Applied to both planes. */
+    retryDelay?: number;
+    /** Custom fetch implementation. Applied to both planes. */
+    fetch?: typeof globalThis.fetch;
+    /**
+     * Opt-in API version (G5). When set, every request carries
+     * `X-Zarel-Api-Version: <value>`. Applied to both planes. Forward-looking —
+     * no backend reads it today; unset ⇒ header omitted.
+     */
+    apiVersion?: string;
+    /**
+     * Opt-in per-attempt request/response/error interceptors (G4). Applied to
+     * both planes. `onRequest` may mutate outgoing headers (throw aborts);
+     * `onResponse`/`onError` are read-only observers (throw swallowed).
+     */
+    interceptors?: Interceptors;
+}
+export declare class Zarel {
+    readonly runtime: RuntimeNamespace;
+    readonly contract: ContractNamespace;
+    private readonly _runtimeClient;
+    private readonly _contractClient;
+    constructor(options: ZarelOptions);
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAsB,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA+B/C,MAAM,WAAW,YAAY;IACzB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,UAAU,CAAC;IAE3B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B;AAID,qBAAa,KAAK;IACd,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IAErC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAc;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAc;gBAElC,OAAO,EAAE,YAAY;CA+CpC"}

package/dist/client.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Zarel = void 0;
+const fetch_client_1 = require("./_internal/fetch-client");
+const unwrap_map_1 = require("./generated/unwrap-map");
+const runtime_1 = require("./runtime");
+const contract_1 = require("./contract");
+// ── Public configuration ────────────────────────────────────────────────
+// The runtime-api / contract-api binary serves bare canonical paths (`/runtime/...`,
+// `/contracts/...`, etc.) per ADR-0077 D14′. The `/v1/` segment is a
+// deployment-layer URL contract: nginx mounts runtime-api / contract-api under
+// `https://{tenant}.zarel.ia/v1/` (or `https://api.zarel.ia/v1/` when
+// targeting an alias host) and strips the prefix before forwarding to
+// the binary. The bare root of `{tenant}.zarel.ia` is reserved for a
+// future tenant-customizable website.
+const DEFAULT_BASE_URL = 'https://api.zarel.ia/v1';
+/**
+ * Insert `.admin.` after the first dot in the runtime host to derive the
+ * contract host. Returns `undefined` when the URL has no dotted host
+ * (e.g., `http://localhost:3001/v1`).
+ */
+function deriveContractFromRuntime(runtimeBaseUrl) {
+    try {
+        const u = new URL(runtimeBaseUrl);
+        const host = u.host;
+        const firstDot = host.indexOf('.');
+        if (firstDot < 0)
+            return undefined;
+        const adminHost = `${host.slice(0, firstDot)}.admin${host.slice(firstDot)}`;
+        return `${u.protocol}//${adminHost}${u.pathname}${u.search}`;
+    }
+    catch {
+        return undefined;
+    }
+}
+// ── Zarel SDK Client ────────────────────────────────────────────────────
+class Zarel {
+    runtime;
+    contract;
+    _runtimeClient;
+    _contractClient;
+    constructor(options) {
+        // ── Resolve runtime base URL ──────────────────────────────────
+        const runtimeBaseUrl = options.runtimeBaseUrl
+            ?? (options.tenant
+                ? `https://${options.tenant}.zarel.ia/v1`
+                : DEFAULT_BASE_URL);
+        const contractBaseUrl = options.contractBaseUrl
+            ?? (options.tenant
+                ? `https://${options.tenant}.admin.zarel.ia/v1`
+                : undefined)
+            ?? deriveContractFromRuntime(runtimeBaseUrl)
+            ?? runtimeBaseUrl;
+        const sharedOpts = {
+            ...(options.timeout !== undefined ? { timeout: options.timeout } : {}),
+            ...(options.maxRetries !== undefined ? { maxRetries: options.maxRetries } : {}),
+            ...(options.retryDelay !== undefined ? { retryDelay: options.retryDelay } : {}),
+            ...(options.fetch !== undefined ? { fetch: options.fetch } : {}),
+            ...(options.apiVersion !== undefined ? { apiVersion: options.apiVersion } : {}),
+            ...(options.interceptors !== undefined ? { interceptors: options.interceptors } : {}),
+        };
+        const transportManaged = options.transportManaged ?? false;
+        const runtimeClientOptions = {
+            baseUrl: runtimeBaseUrl,
+            token: options.runtimeToken ?? '',
+            requireTokenCode: 'runtime_token_missing',
+            transportManaged,
+            operations: unwrap_map_1.RUNTIME_OPERATIONS,
+            ...sharedOpts,
+        };
+        const contractClientOptions = {
+            baseUrl: contractBaseUrl,
+            token: options.contractToken ?? '',
+            requireTokenCode: 'contract_token_missing',
+            transportManaged,
+            operations: unwrap_map_1.CONTRACT_OPERATIONS,
+            ...sharedOpts,
+        };
+        this._runtimeClient = new fetch_client_1.FetchClient(runtimeClientOptions);
+        this._contractClient = new fetch_client_1.FetchClient(contractClientOptions);
+        this.runtime = new runtime_1.RuntimeNamespace(this._runtimeClient);
+        this.contract = new contract_1.ContractNamespace(this._contractClient);
+    }
+}
+exports.Zarel = Zarel;
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";;;AAAA,2DAAuD;AAGvD,uDAAiF;AACjF,uCAA6C;AAC7C,yCAA+C;AAE/C,2EAA2E;AAE3E,qFAAqF;AACrF,qEAAqE;AACrE,+EAA+E;AAC/E,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,sCAAsC;AACtC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAEnD;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,cAAsB;IACrD,IAAI,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,SAAS,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAuED,2EAA2E;AAE3E,MAAa,KAAK;IACL,OAAO,CAAmB;IAC1B,QAAQ,CAAoB;IAEpB,cAAc,CAAc;IAC5B,eAAe,CAAc;IAE9C,YAAY,OAAqB;QAC7B,iEAAiE;QACjE,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc;eACtC,CAAC,OAAO,CAAC,MAAM;gBACd,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,cAAc;gBACzC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAE5B,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe;eACxC,CAAC,OAAO,CAAC,MAAM;gBACd,CAAC,CAAC,WAAW,OAAO,CAAC,MAAM,oBAAoB;gBAC/C,CAAC,CAAC,SAAS,CAAC;eACb,yBAAyB,CAAC,cAAc,CAAC;eACzC,cAAc,CAAC;QAEtB,MAAM,UAAU,GAAG;YACf,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC;QAEF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAC3D,MAAM,oBAAoB,GAAuB;YAC7C,OAAO,EAAE,cAAc;YACvB,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;YACjC,gBAAgB,EAAE,uBAAuB;YACzC,gBAAgB;YAChB,UAAU,EAAE,+BAAkB;YAC9B,GAAG,UAAU;SAChB,CAAC;QACF,MAAM,qBAAqB,GAAuB;YAC9C,OAAO,EAAE,eAAe;YACxB,KAAK,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;YAClC,gBAAgB,EAAE,wBAAwB;YAC1C,gBAAgB;YAChB,UAAU,EAAE,gCAAmB;YAC/B,GAAG,UAAU;SAChB,CAAC;QAEF,IAAI,CAAC,cAAc,GAAG,IAAI,0BAAW,CAAC,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe,GAAG,IAAI,0BAAW,CAAC,qBAAqB,CAAC,CAAC;QAE9D,IAAI,CAAC,OAAO,GAAG,IAAI,0BAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,IAAI,4BAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAChE,CAAC;CACJ;AAtDD,sBAsDC"}

package/dist/contract/_singleton.d.ts

@@ -0,0 +1,18 @@
+import type { FetchClient } from '../_internal/fetch-client';
+type JsonObject = Record<string, unknown>;
+export interface SingletonOperationIds {
+    readonly get: string;
+    readonly put: string;
+    readonly patch: string;
+}
+export declare class SingletonAccessor {
+    private readonly client;
+    private readonly path;
+    private readonly operationIds;
+    constructor(client: FetchClient, path: string, operationIds: SingletonOperationIds);
+    get(): Promise<JsonObject>;
+    put(input: JsonObject): Promise<JsonObject>;
+    patch(patch: JsonObject): Promise<JsonObject>;
+}
+export {};
+//# sourceMappingURL=_singleton.d.ts.map

package/dist/contract/_singleton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_singleton.d.ts","sourceRoot":"","sources":["../../src/contract/_singleton.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1C,MAAM,WAAW,qBAAqB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAEtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAFZ,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,qBAAqB;IAGlD,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;IAI1B,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3C,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;CAGtD"}

package/dist/contract/_singleton.js

@@ -0,0 +1,27 @@
+"use strict";
+// Shared JSONB-singleton accessor for contract-plane document resources
+// (the process-model doc, the ADR-0138 roots that carry one, events/delivery).
+// Each is a single JSONB document with get/put/patch.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SingletonAccessor = void 0;
+class SingletonAccessor {
+    client;
+    path;
+    operationIds;
+    constructor(client, path, operationIds) {
+        this.client = client;
+        this.path = path;
+        this.operationIds = operationIds;
+    }
+    async get() {
+        return this.client.get(this.path, undefined, { operationId: this.operationIds.get });
+    }
+    async put(input) {
+        return this.client.put(this.path, input, { operationId: this.operationIds.put });
+    }
+    async patch(patch) {
+        return this.client.patch(this.path, patch, { operationId: this.operationIds.patch });
+    }
+}
+exports.SingletonAccessor = SingletonAccessor;
+//# sourceMappingURL=_singleton.js.map

package/dist/contract/_singleton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_singleton.js","sourceRoot":"","sources":["../../src/contract/_singleton.ts"],"names":[],"mappings":";AAAA,wEAAwE;AACxE,+EAA+E;AAC/E,sDAAsD;;;AAYtD,MAAa,iBAAiB;IAEL;IACA;IACA;IAHrB,YACqB,MAAmB,EACnB,IAAY,EACZ,YAAmC;QAFnC,WAAM,GAAN,MAAM,CAAa;QACnB,SAAI,GAAJ,IAAI,CAAQ;QACZ,iBAAY,GAAZ,YAAY,CAAuB;IACrD,CAAC;IAEJ,KAAK,CAAC,GAAG;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;CACJ;AAlBD,8CAkBC"}

package/dist/contract/actions.d.ts

@@ -0,0 +1,18 @@
+import type { FetchClient } from '../_internal/fetch-client';
+export interface ContractActionDefinition {
+    readonly name: string;
+    readonly entity: string;
+    readonly type: string;
+    readonly [key: string]: unknown;
+}
+export declare class ContractActionsResource {
+    private readonly client;
+    constructor(client: FetchClient);
+    list(): Promise<ContractActionDefinition[]>;
+    get(name: string): Promise<ContractActionDefinition>;
+    create(input: Record<string, unknown>): Promise<ContractActionDefinition>;
+    put(name: string, input: Record<string, unknown>): Promise<ContractActionDefinition>;
+    patch(name: string, patch: Record<string, unknown>): Promise<ContractActionDefinition>;
+    delete(name: string): Promise<void>;
+}
+//# sourceMappingURL=actions.d.ts.map

package/dist/contract/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/contract/actions.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACnC;AAED,qBAAa,uBAAuB;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,WAAW;IAE1C,IAAI,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAI3C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIzE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAIpF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAItF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG5C"}

package/dist/contract/actions.js

@@ -0,0 +1,36 @@
+"use strict";
+// spec-050 T091 — contract.actions CRUD.
+//
+// Maps to contract-api `/actions` admin routes (T-6-19). Per research D8,
+// DELETE may surface server-side 501 (ENDPOINT_PLANNED) until the bespoke
+// repo is aligned (ADR-0080). Per ADR-0085, runtime invocation of an
+// action is `runtime.actions.dispatch()` on the runtime namespace —
+// distinct from this surface, which manages the action definitions.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContractActionsResource = void 0;
+class ContractActionsResource {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async list() {
+        return this.client.get('/contract/actions', undefined, { operationId: 'listActions' });
+    }
+    async get(name) {
+        return this.client.get(`/contract/actions/${encodeURIComponent(name)}`, undefined, { operationId: 'getAction' });
+    }
+    async create(input) {
+        return this.client.post('/contract/actions', input, { operationId: 'createAction' });
+    }
+    async put(name, input) {
+        return this.client.put(`/contract/actions/${encodeURIComponent(name)}`, input, { operationId: 'replaceAction' });
+    }
+    async patch(name, patch) {
+        return this.client.patch(`/contract/actions/${encodeURIComponent(name)}`, patch, { operationId: 'patchAction' });
+    }
+    async delete(name) {
+        return this.client.del(`/contract/actions/${encodeURIComponent(name)}`, { operationId: 'deleteAction' });
+    }
+}
+exports.ContractActionsResource = ContractActionsResource;
+//# sourceMappingURL=actions.js.map

package/dist/contract/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/contract/actions.ts"],"names":[],"mappings":";AAAA,yCAAyC;AACzC,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;;;AAWpE,MAAa,uBAAuB;IACH;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,KAAK,CAAC,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,KAA8B;QAClD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,KAA8B;QACpD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;IACrH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAO,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IACnH,CAAC;CACJ;AA1BD,0DA0BC"}

package/dist/contract/assistant.d.ts

@@ -0,0 +1,65 @@
+import type { FetchClient } from '../_internal/fetch-client';
+export interface CreateSessionInput {
+    readonly llm_service?: string;
+    readonly locale?: string;
+}
+export interface ConversationSendInput {
+    readonly session_key: string;
+    readonly message: string;
+    readonly llm_service?: string;
+    readonly locale?: string;
+}
+export interface ApplyGating {
+    readonly reject_breaking_changes?: boolean;
+    readonly max_changes?: number;
+}
+export interface ApplyChangesetInput {
+    readonly base_hash: string;
+    readonly gating?: ApplyGating;
+    readonly force?: boolean;
+}
+export interface CreateSessionResult {
+    readonly session_key: string;
+}
+export interface ConversationSendResult {
+    readonly reply: string;
+    readonly changeset_id?: string;
+}
+export type ChangesetStatus = 'pending' | 'applied' | 'discarded' | 'stale';
+export interface ChangesetPreview {
+    readonly id: string;
+    readonly status: ChangesetStatus;
+    readonly base_hash: string;
+    readonly draft_yaml: string;
+    /** Live-recomputed structural delta (`{changes[], impact_summary}`) or null when the draft can't be parsed. */
+    readonly diff: unknown;
+}
+export interface ApplyResult {
+    readonly applied: boolean;
+    readonly applied_version: number;
+    readonly diff: unknown;
+    readonly stripped_grants: string[];
+}
+export interface DiscardResult {
+    readonly discarded: boolean;
+}
+export declare class AssistantResource {
+    private readonly client;
+    constructor(client: FetchClient);
+    /** POST /contract/assistant/conversation/sessions — opens a contract-scope conversation. */
+    createSession(input?: CreateSessionInput): Promise<CreateSessionResult>;
+    /** POST /contract/assistant/conversation/send — one turn. Stages but NEVER applies (QI-A). */
+    conversationSend(input: ConversationSendInput): Promise<ConversationSendResult>;
+    /** GET /contract/assistant/changesets/:id — live preview of the staged delta. */
+    getChangeset(id: string): Promise<ChangesetPreview>;
+    /**
+     * POST /contract/assistant/changesets/:id/apply — the SOLE contract-mutation
+     * entry point. `base_hash` is deliberate consent over a known base (QI-C).
+     * On staleness throws a `ZarelAPIError` whose `details` carries
+     * `reseeded_changeset_id`/`base_hash` (FR-024).
+     */
+    applyChangeset(id: string, input: ApplyChangesetInput): Promise<ApplyResult>;
+    /** POST /contract/assistant/changesets/:id/discard — shelve a pending/stale changeset. */
+    discardChangeset(id: string): Promise<DiscardResult>;
+}
+//# sourceMappingURL=assistant.d.ts.map