acn-client 0.10.0 → 0.12.0

package/dist/index.d.mts

@@ -363,6 +363,96 @@ interface PaymentCapability {
     api_endpoint?: string;
     webhook_url?: string;
 }
+/**
+ * Task status values for ACN task pool — mirrors backend `TaskStatus` enum
+ * (`acn.core.entities.task.TaskStatus`).
+ */
+type TaskStatus = 'open' | 'in_progress' | 'submitted' | 'completed' | 'rejected' | 'cancelled';
+/** ACN task (org-harness task pool). Aligns with server `TaskResponse`. */
+interface Task {
+    task_id: string;
+    title: string;
+    description: string;
+    status: TaskStatus | string;
+    /** Decimal reward amount as a string (e.g. `"10.00"`). Use `parseFloat()` to display. */
+    reward: string;
+    reward_currency: string;
+    creator_id: string;
+    creator_name?: string;
+    task_type?: string;
+    required_tags?: string[];
+    /** Reward in numeric form — convenience alias, equals `parseFloat(reward)`. */
+    reward_amount?: number;
+    subnet_id: string | null;
+    created_at: string;
+    deadline?: string | null;
+    use_escrow?: boolean;
+    max_participants?: number | null;
+    active_participants_count?: number;
+    completed_count?: number;
+    metadata?: Record<string, unknown>;
+}
+/** A single agent participation on a task. */
+interface Participation {
+    participation_id: string;
+    agent_id: string;
+    status: string;
+    submission_content: string | null;
+    submitted_at: string | null;
+    resubmit_count: number;
+}
+/** Response from POST /tasks/:id/accept. */
+interface TaskAcceptResponse {
+    task: Task;
+    participation_id: string | null;
+}
+/** Request body for creating a task (POST /api/v1/tasks). */
+interface TaskCreateRequest {
+    /** 3–200 chars */
+    title: string;
+    /** 10–10 000 chars */
+    description: string;
+    /**
+     * Reward per completion as a numeric string (e.g. `"10"` or `"0"`).
+     * Backend field name: `reward`.
+     */
+    reward: string;
+    /** Deadline in hours (1–2 160). Required. */
+    deadline_hours: number;
+    subnet_id?: string | null;
+    /** Default: "credits" */
+    reward_currency?: string;
+    /** Default: 1 */
+    max_participants?: number | null;
+    task_type?: string;
+    required_tags?: string[];
+    auto_approve?: boolean;
+    use_escrow?: boolean;
+}
+/** Options for listing tasks. */
+interface TaskListOptions {
+    status?: TaskStatus | string;
+    creator_id?: string;
+    assignee_id?: string;
+    limit?: number;
+    offset?: number;
+}
+/** Response from GET /tasks. */
+interface TaskListResponse {
+    tasks: Task[];
+    total: number;
+    has_more: boolean;
+}
+/** Response from GET /tasks/:id/participations. */
+interface ParticipationListResponse {
+    participations: Participation[];
+    total: number;
+}
+/** Request body for PATCH /subnets/:id/harness. */
+interface SubnetHarnessRequest {
+    harness_url: string | null;
+    harness_secret?: string | null;
+}
 /**
  * Known ACN payment task status values.
  *
@@ -652,6 +742,19 @@ declare class ACNClient {
      * ```
      */
     joinACN(request: AgentJoinRequest): Promise<AgentJoinResponse>;
+    /**
+     * Resolve the authenticated agent (i.e. the one whose API key the client
+     * carries). Returns the full agent record. Useful for harnesses that
+     * need to know their own `agent_id` to skip echo-loops on webhook
+     * deliveries — when an ACN task.created event arrives whose `creator_id`
+     * matches the harness's own agent_id, the harness can recognise the task
+     * as one it issued itself and avoid re-mirroring it.
+     */
+    getMyAgent(): Promise<{
+        agent_id: string;
+        name: string;
+        [key: string]: unknown;
+    }>;
     /** Get agent by ID */
     getAgent(agentId: string): Promise<AgentInfo>;
     /** Search agents (status: online | offline | all; public list does not include verification_code) */
@@ -661,6 +764,30 @@ declare class ACNClient {
         success: boolean;
         message: string;
     }>;
+    /**
+     * Rotate the agent's API key (H1).
+     *
+     * Returns a fresh `acn_*` plaintext key exactly once. The old key
+     * stops working immediately — including any in-process auth caches
+     * the gateway holds for it. Update the local SDK's stored key with
+     * the returned value before the next request:
+     *
+     * ```ts
+     * const { api_key } = await client.rotateApiKey(agentId);
+     * client.config.apiKey = api_key; // or rebuild the client
+     * ```
+     *
+     * Authorization is dual-track on the server: any one of the agent's
+     * current key (the common scheduled-rotation path) or the owner's
+     * Auth0 JWT (the recovery path when the agent has lost its key) is
+     * accepted.
+     */
+    rotateApiKey(agentId: string): Promise<{
+        success: boolean;
+        agent_id: string;
+        api_key: string;
+        message: string;
+    }>;
     /** Send agent heartbeat */
     heartbeat(agentId: string): Promise<{
         success: boolean;
@@ -1110,6 +1237,41 @@ declare class ACNClient {
         limit?: number;
         offset?: number;
     }): Promise<AllowlistListResponse>;
+    /** Create a new task in the org-harness task pool. */
+    createTask(request: TaskCreateRequest): Promise<Task>;
+    /** Get task details by ID. */
+    getTask(taskId: string): Promise<Task>;
+    /** List tasks with optional filters. */
+    listTasks(options?: TaskListOptions): Promise<TaskListResponse>;
+    /** Accept a task (join as participant). Returns the task and a participation_id. */
+    acceptTask(taskId: string, message?: string): Promise<TaskAcceptResponse>;
+    /**
+     * Submit work for a task.
+     *
+     * @param submissionContent - The deliverable text (5–50 000 chars)
+     * @param artifacts         - Optional artifact references
+     * @param participationId   - Required when max_participants > 1
+     */
+    submitTask(taskId: string, submissionContent: string, options?: {
+        artifacts?: Record<string, unknown>[];
+        participationId?: string;
+    }): Promise<Task>;
+    /**
+     * Review a task submission (approve or reject).
+     * Only callable by the task creator or subnet owner.
+     */
+    reviewTask(taskId: string, approved: boolean, 
+    /** Review notes sent as the `notes` field — max 5 000 chars. */
+    notes?: string): Promise<Task>;
+    /** Cancel a task. */
+    cancelTask(taskId: string): Promise<Task>;
+    /** List all participations for a task. */
+    getTaskParticipations(taskId: string): Promise<Participation[]>;
+    /**
+     * Register (or clear) an org-harness webhook URL for a subnet.
+     * Pass `harnessUrl: null` to deregister.
+     */
+    registerSubnetHarness(subnetId: string, harnessUrl: string | null, harnessSecret?: string | null): Promise<void>;
 }
 /**
  * ACN API Error
@@ -1225,4 +1387,4 @@ declare class ACNRealtime {
  */
 declare function subscribeToACN<T = unknown>(baseUrl: string, channel: string, handler: WSEventHandler<T>): () => void;
 
-export { ACNClient, type ACNClientOptions, ACNError, ACNRealtime, type ActivityEntry, type AgentActivity, type AgentAnalytics, type AgentInfo, type AgentJoinRequest, type AgentJoinResponse, type AgentRegisterRequest, type AgentRegisterResponse, type AgentSearchOptions, type AgentSearchResponse, type AgentStatus, type AllowlistActionResponse, type AllowlistEntry, type AllowlistListResponse, type ApiResponse, type AttentionFee, type AuditEvent, type AuditQueryOptions, type BroadcastBySkillRequest, type BroadcastByTagRequest, type BroadcastRequest, type BroadcastStrategy, type CommunicationPolicyMode, type CommunicationPolicyResponse, type ComponentHealth, type DashboardData, type FollowActionResponse, type FollowCheckResponse, KNOWN_PAYMENT_TASK_STATUSES, type ManifestContentResponse, type ManifestEntry, type ManifestListResponse, type Message, type MessageType, type MetricsData, type PaymentCapability, type PaymentDiscoveryOptions, type PaymentMethod, type PaymentNetwork, type PaymentRoleStats, type PaymentStats, type PaymentTask, type PaymentTaskStatus, type SendMessageRequest, type SendMessageResponse, type SubnetCreateRequest, type SubnetCreateResponse, type SubnetInfo, type SystemHealth, type WSConnectionOptions, type WSEventHandler, type WSEventType, type WSMessage, type WSState, subscribeToACN };
+export { ACNClient, type ACNClientOptions, ACNError, ACNRealtime, type ActivityEntry, type AgentActivity, type AgentAnalytics, type AgentInfo, type AgentJoinRequest, type AgentJoinResponse, type AgentRegisterRequest, type AgentRegisterResponse, type AgentSearchOptions, type AgentSearchResponse, type AgentStatus, type AllowlistActionResponse, type AllowlistEntry, type AllowlistListResponse, type ApiResponse, type AttentionFee, type AuditEvent, type AuditQueryOptions, type BroadcastBySkillRequest, type BroadcastByTagRequest, type BroadcastRequest, type BroadcastStrategy, type CommunicationPolicyMode, type CommunicationPolicyResponse, type ComponentHealth, type DashboardData, type FollowActionResponse, type FollowCheckResponse, KNOWN_PAYMENT_TASK_STATUSES, type ManifestContentResponse, type ManifestEntry, type ManifestListResponse, type Message, type MessageType, type MetricsData, type Participation, type ParticipationListResponse, type PaymentCapability, type PaymentDiscoveryOptions, type PaymentMethod, type PaymentNetwork, type PaymentRoleStats, type PaymentStats, type PaymentTask, type PaymentTaskStatus, type SendMessageRequest, type SendMessageResponse, type SubnetCreateRequest, type SubnetCreateResponse, type SubnetHarnessRequest, type SubnetInfo, type SystemHealth, type Task, type TaskAcceptResponse, type TaskCreateRequest, type TaskListOptions, type TaskListResponse, type TaskStatus, type WSConnectionOptions, type WSEventHandler, type WSEventType, type WSMessage, type WSState, subscribeToACN };

package/dist/index.d.ts

@@ -363,6 +363,96 @@ interface PaymentCapability {
     api_endpoint?: string;
     webhook_url?: string;
 }
+/**
+ * Task status values for ACN task pool — mirrors backend `TaskStatus` enum
+ * (`acn.core.entities.task.TaskStatus`).
+ */
+type TaskStatus = 'open' | 'in_progress' | 'submitted' | 'completed' | 'rejected' | 'cancelled';
+/** ACN task (org-harness task pool). Aligns with server `TaskResponse`. */
+interface Task {
+    task_id: string;
+    title: string;
+    description: string;
+    status: TaskStatus | string;
+    /** Decimal reward amount as a string (e.g. `"10.00"`). Use `parseFloat()` to display. */
+    reward: string;
+    reward_currency: string;
+    creator_id: string;
+    creator_name?: string;
+    task_type?: string;
+    required_tags?: string[];
+    /** Reward in numeric form — convenience alias, equals `parseFloat(reward)`. */
+    reward_amount?: number;
+    subnet_id: string | null;
+    created_at: string;
+    deadline?: string | null;
+    use_escrow?: boolean;
+    max_participants?: number | null;
+    active_participants_count?: number;
+    completed_count?: number;
+    metadata?: Record<string, unknown>;
+}
+/** A single agent participation on a task. */
+interface Participation {
+    participation_id: string;
+    agent_id: string;
+    status: string;
+    submission_content: string | null;
+    submitted_at: string | null;
+    resubmit_count: number;
+}
+/** Response from POST /tasks/:id/accept. */
+interface TaskAcceptResponse {
+    task: Task;
+    participation_id: string | null;
+}
+/** Request body for creating a task (POST /api/v1/tasks). */
+interface TaskCreateRequest {
+    /** 3–200 chars */
+    title: string;
+    /** 10–10 000 chars */
+    description: string;
+    /**
+     * Reward per completion as a numeric string (e.g. `"10"` or `"0"`).
+     * Backend field name: `reward`.
+     */
+    reward: string;
+    /** Deadline in hours (1–2 160). Required. */
+    deadline_hours: number;
+    subnet_id?: string | null;
+    /** Default: "credits" */
+    reward_currency?: string;
+    /** Default: 1 */
+    max_participants?: number | null;
+    task_type?: string;
+    required_tags?: string[];
+    auto_approve?: boolean;
+    use_escrow?: boolean;
+}
+/** Options for listing tasks. */
+interface TaskListOptions {
+    status?: TaskStatus | string;
+    creator_id?: string;
+    assignee_id?: string;
+    limit?: number;
+    offset?: number;
+}
+/** Response from GET /tasks. */
+interface TaskListResponse {
+    tasks: Task[];
+    total: number;
+    has_more: boolean;
+}
+/** Response from GET /tasks/:id/participations. */
+interface ParticipationListResponse {
+    participations: Participation[];
+    total: number;
+}
+/** Request body for PATCH /subnets/:id/harness. */
+interface SubnetHarnessRequest {
+    harness_url: string | null;
+    harness_secret?: string | null;
+}
 /**
  * Known ACN payment task status values.
  *
@@ -652,6 +742,19 @@ declare class ACNClient {
      * ```
      */
     joinACN(request: AgentJoinRequest): Promise<AgentJoinResponse>;
+    /**
+     * Resolve the authenticated agent (i.e. the one whose API key the client
+     * carries). Returns the full agent record. Useful for harnesses that
+     * need to know their own `agent_id` to skip echo-loops on webhook
+     * deliveries — when an ACN task.created event arrives whose `creator_id`
+     * matches the harness's own agent_id, the harness can recognise the task
+     * as one it issued itself and avoid re-mirroring it.
+     */
+    getMyAgent(): Promise<{
+        agent_id: string;
+        name: string;
+        [key: string]: unknown;
+    }>;
     /** Get agent by ID */
     getAgent(agentId: string): Promise<AgentInfo>;
     /** Search agents (status: online | offline | all; public list does not include verification_code) */
@@ -661,6 +764,30 @@ declare class ACNClient {
         success: boolean;
         message: string;
     }>;
+    /**
+     * Rotate the agent's API key (H1).
+     *
+     * Returns a fresh `acn_*` plaintext key exactly once. The old key
+     * stops working immediately — including any in-process auth caches
+     * the gateway holds for it. Update the local SDK's stored key with
+     * the returned value before the next request:
+     *
+     * ```ts
+     * const { api_key } = await client.rotateApiKey(agentId);
+     * client.config.apiKey = api_key; // or rebuild the client
+     * ```
+     *
+     * Authorization is dual-track on the server: any one of the agent's
+     * current key (the common scheduled-rotation path) or the owner's
+     * Auth0 JWT (the recovery path when the agent has lost its key) is
+     * accepted.
+     */
+    rotateApiKey(agentId: string): Promise<{
+        success: boolean;
+        agent_id: string;
+        api_key: string;
+        message: string;
+    }>;
     /** Send agent heartbeat */
     heartbeat(agentId: string): Promise<{
         success: boolean;
@@ -1110,6 +1237,41 @@ declare class ACNClient {
         limit?: number;
         offset?: number;
     }): Promise<AllowlistListResponse>;
+    /** Create a new task in the org-harness task pool. */
+    createTask(request: TaskCreateRequest): Promise<Task>;
+    /** Get task details by ID. */
+    getTask(taskId: string): Promise<Task>;
+    /** List tasks with optional filters. */
+    listTasks(options?: TaskListOptions): Promise<TaskListResponse>;
+    /** Accept a task (join as participant). Returns the task and a participation_id. */
+    acceptTask(taskId: string, message?: string): Promise<TaskAcceptResponse>;
+    /**
+     * Submit work for a task.
+     *
+     * @param submissionContent - The deliverable text (5–50 000 chars)
+     * @param artifacts         - Optional artifact references
+     * @param participationId   - Required when max_participants > 1
+     */
+    submitTask(taskId: string, submissionContent: string, options?: {
+        artifacts?: Record<string, unknown>[];
+        participationId?: string;
+    }): Promise<Task>;
+    /**
+     * Review a task submission (approve or reject).
+     * Only callable by the task creator or subnet owner.
+     */
+    reviewTask(taskId: string, approved: boolean, 
+    /** Review notes sent as the `notes` field — max 5 000 chars. */
+    notes?: string): Promise<Task>;
+    /** Cancel a task. */
+    cancelTask(taskId: string): Promise<Task>;
+    /** List all participations for a task. */
+    getTaskParticipations(taskId: string): Promise<Participation[]>;
+    /**
+     * Register (or clear) an org-harness webhook URL for a subnet.
+     * Pass `harnessUrl: null` to deregister.
+     */
+    registerSubnetHarness(subnetId: string, harnessUrl: string | null, harnessSecret?: string | null): Promise<void>;
 }
 /**
  * ACN API Error
@@ -1225,4 +1387,4 @@ declare class ACNRealtime {
  */
 declare function subscribeToACN<T = unknown>(baseUrl: string, channel: string, handler: WSEventHandler<T>): () => void;
 
-export { ACNClient, type ACNClientOptions, ACNError, ACNRealtime, type ActivityEntry, type AgentActivity, type AgentAnalytics, type AgentInfo, type AgentJoinRequest, type AgentJoinResponse, type AgentRegisterRequest, type AgentRegisterResponse, type AgentSearchOptions, type AgentSearchResponse, type AgentStatus, type AllowlistActionResponse, type AllowlistEntry, type AllowlistListResponse, type ApiResponse, type AttentionFee, type AuditEvent, type AuditQueryOptions, type BroadcastBySkillRequest, type BroadcastByTagRequest, type BroadcastRequest, type BroadcastStrategy, type CommunicationPolicyMode, type CommunicationPolicyResponse, type ComponentHealth, type DashboardData, type FollowActionResponse, type FollowCheckResponse, KNOWN_PAYMENT_TASK_STATUSES, type ManifestContentResponse, type ManifestEntry, type ManifestListResponse, type Message, type MessageType, type MetricsData, type PaymentCapability, type PaymentDiscoveryOptions, type PaymentMethod, type PaymentNetwork, type PaymentRoleStats, type PaymentStats, type PaymentTask, type PaymentTaskStatus, type SendMessageRequest, type SendMessageResponse, type SubnetCreateRequest, type SubnetCreateResponse, type SubnetInfo, type SystemHealth, type WSConnectionOptions, type WSEventHandler, type WSEventType, type WSMessage, type WSState, subscribeToACN };
+export { ACNClient, type ACNClientOptions, ACNError, ACNRealtime, type ActivityEntry, type AgentActivity, type AgentAnalytics, type AgentInfo, type AgentJoinRequest, type AgentJoinResponse, type AgentRegisterRequest, type AgentRegisterResponse, type AgentSearchOptions, type AgentSearchResponse, type AgentStatus, type AllowlistActionResponse, type AllowlistEntry, type AllowlistListResponse, type ApiResponse, type AttentionFee, type AuditEvent, type AuditQueryOptions, type BroadcastBySkillRequest, type BroadcastByTagRequest, type BroadcastRequest, type BroadcastStrategy, type CommunicationPolicyMode, type CommunicationPolicyResponse, type ComponentHealth, type DashboardData, type FollowActionResponse, type FollowCheckResponse, KNOWN_PAYMENT_TASK_STATUSES, type ManifestContentResponse, type ManifestEntry, type ManifestListResponse, type Message, type MessageType, type MetricsData, type Participation, type ParticipationListResponse, type PaymentCapability, type PaymentDiscoveryOptions, type PaymentMethod, type PaymentNetwork, type PaymentRoleStats, type PaymentStats, type PaymentTask, type PaymentTaskStatus, type SendMessageRequest, type SendMessageResponse, type SubnetCreateRequest, type SubnetCreateResponse, type SubnetHarnessRequest, type SubnetInfo, type SystemHealth, type Task, type TaskAcceptResponse, type TaskCreateRequest, type TaskListOptions, type TaskListResponse, type TaskStatus, type WSConnectionOptions, type WSEventHandler, type WSEventType, type WSMessage, type WSState, subscribeToACN };

package/dist/index.js

@@ -53,7 +53,7 @@ var ACNClient = class {
       this.timeout = options.timeout ?? 3e4;
       this.headers = options.headers ?? {};
       if (options.apiKey) {
-        this.headers["X-API-Key"] = options.apiKey;
+        this.headers["Authorization"] = `Bearer ${options.apiKey}`;
       }
     }
   }
@@ -168,6 +168,17 @@ var ACNClient = class {
   async joinACN(request) {
     return this.post("/api/v1/agents/join", request);
   }
+  /**
+   * Resolve the authenticated agent (i.e. the one whose API key the client
+   * carries). Returns the full agent record. Useful for harnesses that
+   * need to know their own `agent_id` to skip echo-loops on webhook
+   * deliveries — when an ACN task.created event arrives whose `creator_id`
+   * matches the harness's own agent_id, the harness can recognise the task
+   * as one it issued itself and avoid re-mirroring it.
+   */
+  async getMyAgent() {
+    return this.get("/api/v1/agents/me");
+  }
   /** Get agent by ID */
   async getAgent(agentId) {
     return this.get(`/api/v1/agents/${agentId}`);
@@ -183,6 +194,27 @@ var ACNClient = class {
   async unregisterAgent(agentId) {
     return this.delete(`/api/v1/agents/${agentId}`);
   }
+  /**
+   * Rotate the agent's API key (H1).
+   *
+   * Returns a fresh `acn_*` plaintext key exactly once. The old key
+   * stops working immediately — including any in-process auth caches
+   * the gateway holds for it. Update the local SDK's stored key with
+   * the returned value before the next request:
+   *
+   * ```ts
+   * const { api_key } = await client.rotateApiKey(agentId);
+   * client.config.apiKey = api_key; // or rebuild the client
+   * ```
+   *
+   * Authorization is dual-track on the server: any one of the agent's
+   * current key (the common scheduled-rotation path) or the owner's
+   * Auth0 JWT (the recovery path when the agent has lost its key) is
+   * accepted.
+   */
+  async rotateApiKey(agentId) {
+    return this.post(`/api/v1/agents/${agentId}/rotate-key`);
+  }
   /** Send agent heartbeat */
   async heartbeat(agentId) {
     return this.post(`/api/v1/agents/${agentId}/heartbeat`);
@@ -218,6 +250,18 @@ var ACNClient = class {
   async getSubnetAgents(subnetId) {
     return this.get(`/api/v1/subnets/${subnetId}/agents`);
   }
+  // ──────────────────────────────────────────────────────────────────────
+  //  Subnet membership (agent-side)
+  //
+  //  Canonical paths under `/api/v1/agents/{agent_id}/…`, matching every
+  //  other agent-side operation (heartbeat / claim / transfer / wallets / …).
+  //
+  //  Before 0.11.2 the SDK called `/api/v1/subnets/{agent_id}/subnets/{id}`
+  //  because that was the only shape the backend served. Backend release
+  //  carrying the canonical-routes patch (ACN PR #42) now serves both
+  //  shapes — the legacy one is marked `deprecated=True` in OpenAPI and
+  //  scheduled for removal. Requires ACN backend ≥ post-PR-#42.
+  // ──────────────────────────────────────────────────────────────────────
   /** Join agent to subnet */
   async joinSubnet(agentId, subnetId) {
     return this.post(`/api/v1/agents/${agentId}/subnets/${subnetId}`);
@@ -792,6 +836,81 @@ var ACNClient = class {
   async listAllowlist(agentId, options) {
     return this.get(`/api/v1/agents/${agentId}/allowlist`, options);
   }
+  // ============================================
+  // Task Pool Methods (Saga / Org-Harness)
+  // ============================================
+  /** Create a new task in the org-harness task pool. */
+  async createTask(request) {
+    return this.post("/api/v1/tasks", request);
+  }
+  /** Get task details by ID. */
+  async getTask(taskId) {
+    return this.get(`/api/v1/tasks/${taskId}`);
+  }
+  /** List tasks with optional filters. */
+  async listTasks(options) {
+    const params = {};
+    if (options?.status !== void 0) params.status = options.status;
+    if (options?.creator_id !== void 0) params.creator_id = options.creator_id;
+    if (options?.assignee_id !== void 0) params.assignee_id = options.assignee_id;
+    if (options?.limit !== void 0) params.limit = options.limit;
+    if (options?.offset !== void 0) params.offset = options.offset;
+    return this.get("/api/v1/tasks", params);
+  }
+  /** Accept a task (join as participant). Returns the task and a participation_id. */
+  async acceptTask(taskId, message) {
+    return this.post(`/api/v1/tasks/${taskId}/accept`, { message: message ?? "" });
+  }
+  /**
+   * Submit work for a task.
+   *
+   * @param submissionContent - The deliverable text (5–50 000 chars)
+   * @param artifacts         - Optional artifact references
+   * @param participationId   - Required when max_participants > 1
+   */
+  async submitTask(taskId, submissionContent, options) {
+    return this.post(`/api/v1/tasks/${taskId}/submit`, {
+      submission: submissionContent,
+      artifacts: options?.artifacts ?? [],
+      participation_id: options?.participationId
+    });
+  }
+  /**
+   * Review a task submission (approve or reject).
+   * Only callable by the task creator or subnet owner.
+   */
+  async reviewTask(taskId, approved, notes) {
+    return this.post(`/api/v1/tasks/${taskId}/review`, {
+      approved,
+      notes: notes ?? ""
+    });
+  }
+  /** Cancel a task. */
+  async cancelTask(taskId) {
+    return this.post(`/api/v1/tasks/${taskId}/cancel`, {});
+  }
+  /** List all participations for a task. */
+  async getTaskParticipations(taskId) {
+    const res = await this.get(
+      `/api/v1/tasks/${taskId}/participations`
+    );
+    return res.participations ?? [];
+  }
+  // ============================================
+  // Subnet Harness
+  // ============================================
+  /**
+   * Register (or clear) an org-harness webhook URL for a subnet.
+   * Pass `harnessUrl: null` to deregister.
+   */
+  async registerSubnetHarness(subnetId, harnessUrl, harnessSecret) {
+    await this.request("PATCH", `/api/v1/subnets/${subnetId}/harness`, {
+      body: {
+        harness_url: harnessUrl,
+        harness_secret: harnessSecret ?? null
+      }
+    });
+  }
 };
 var ACNError = class extends Error {
   constructor(status, message, options) {

package/dist/index.mjs

@@ -13,7 +13,7 @@ var ACNClient = class {
       this.timeout = options.timeout ?? 3e4;
       this.headers = options.headers ?? {};
       if (options.apiKey) {
-        this.headers["X-API-Key"] = options.apiKey;
+        this.headers["Authorization"] = `Bearer ${options.apiKey}`;
       }
     }
   }
@@ -128,6 +128,17 @@ var ACNClient = class {
   async joinACN(request) {
     return this.post("/api/v1/agents/join", request);
   }
+  /**
+   * Resolve the authenticated agent (i.e. the one whose API key the client
+   * carries). Returns the full agent record. Useful for harnesses that
+   * need to know their own `agent_id` to skip echo-loops on webhook
+   * deliveries — when an ACN task.created event arrives whose `creator_id`
+   * matches the harness's own agent_id, the harness can recognise the task
+   * as one it issued itself and avoid re-mirroring it.
+   */
+  async getMyAgent() {
+    return this.get("/api/v1/agents/me");
+  }
   /** Get agent by ID */
   async getAgent(agentId) {
     return this.get(`/api/v1/agents/${agentId}`);
@@ -143,6 +154,27 @@ var ACNClient = class {
   async unregisterAgent(agentId) {
     return this.delete(`/api/v1/agents/${agentId}`);
   }
+  /**
+   * Rotate the agent's API key (H1).
+   *
+   * Returns a fresh `acn_*` plaintext key exactly once. The old key
+   * stops working immediately — including any in-process auth caches
+   * the gateway holds for it. Update the local SDK's stored key with
+   * the returned value before the next request:
+   *
+   * ```ts
+   * const { api_key } = await client.rotateApiKey(agentId);
+   * client.config.apiKey = api_key; // or rebuild the client
+   * ```
+   *
+   * Authorization is dual-track on the server: any one of the agent's
+   * current key (the common scheduled-rotation path) or the owner's
+   * Auth0 JWT (the recovery path when the agent has lost its key) is
+   * accepted.
+   */
+  async rotateApiKey(agentId) {
+    return this.post(`/api/v1/agents/${agentId}/rotate-key`);
+  }
   /** Send agent heartbeat */
   async heartbeat(agentId) {
     return this.post(`/api/v1/agents/${agentId}/heartbeat`);
@@ -178,6 +210,18 @@ var ACNClient = class {
   async getSubnetAgents(subnetId) {
     return this.get(`/api/v1/subnets/${subnetId}/agents`);
   }
+  // ──────────────────────────────────────────────────────────────────────
+  //  Subnet membership (agent-side)
+  //
+  //  Canonical paths under `/api/v1/agents/{agent_id}/…`, matching every
+  //  other agent-side operation (heartbeat / claim / transfer / wallets / …).
+  //
+  //  Before 0.11.2 the SDK called `/api/v1/subnets/{agent_id}/subnets/{id}`
+  //  because that was the only shape the backend served. Backend release
+  //  carrying the canonical-routes patch (ACN PR #42) now serves both
+  //  shapes — the legacy one is marked `deprecated=True` in OpenAPI and
+  //  scheduled for removal. Requires ACN backend ≥ post-PR-#42.
+  // ──────────────────────────────────────────────────────────────────────
   /** Join agent to subnet */
   async joinSubnet(agentId, subnetId) {
     return this.post(`/api/v1/agents/${agentId}/subnets/${subnetId}`);
@@ -752,6 +796,81 @@ var ACNClient = class {
   async listAllowlist(agentId, options) {
     return this.get(`/api/v1/agents/${agentId}/allowlist`, options);
   }
+  // ============================================
+  // Task Pool Methods (Saga / Org-Harness)
+  // ============================================
+  /** Create a new task in the org-harness task pool. */
+  async createTask(request) {
+    return this.post("/api/v1/tasks", request);
+  }
+  /** Get task details by ID. */
+  async getTask(taskId) {
+    return this.get(`/api/v1/tasks/${taskId}`);
+  }
+  /** List tasks with optional filters. */
+  async listTasks(options) {
+    const params = {};
+    if (options?.status !== void 0) params.status = options.status;
+    if (options?.creator_id !== void 0) params.creator_id = options.creator_id;
+    if (options?.assignee_id !== void 0) params.assignee_id = options.assignee_id;
+    if (options?.limit !== void 0) params.limit = options.limit;
+    if (options?.offset !== void 0) params.offset = options.offset;
+    return this.get("/api/v1/tasks", params);
+  }
+  /** Accept a task (join as participant). Returns the task and a participation_id. */
+  async acceptTask(taskId, message) {
+    return this.post(`/api/v1/tasks/${taskId}/accept`, { message: message ?? "" });
+  }
+  /**
+   * Submit work for a task.
+   *
+   * @param submissionContent - The deliverable text (5–50 000 chars)
+   * @param artifacts         - Optional artifact references
+   * @param participationId   - Required when max_participants > 1
+   */
+  async submitTask(taskId, submissionContent, options) {
+    return this.post(`/api/v1/tasks/${taskId}/submit`, {
+      submission: submissionContent,
+      artifacts: options?.artifacts ?? [],
+      participation_id: options?.participationId
+    });
+  }
+  /**
+   * Review a task submission (approve or reject).
+   * Only callable by the task creator or subnet owner.
+   */
+  async reviewTask(taskId, approved, notes) {
+    return this.post(`/api/v1/tasks/${taskId}/review`, {
+      approved,
+      notes: notes ?? ""
+    });
+  }
+  /** Cancel a task. */
+  async cancelTask(taskId) {
+    return this.post(`/api/v1/tasks/${taskId}/cancel`, {});
+  }
+  /** List all participations for a task. */
+  async getTaskParticipations(taskId) {
+    const res = await this.get(
+      `/api/v1/tasks/${taskId}/participations`
+    );
+    return res.participations ?? [];
+  }
+  // ============================================
+  // Subnet Harness
+  // ============================================
+  /**
+   * Register (or clear) an org-harness webhook URL for a subnet.
+   * Pass `harnessUrl: null` to deregister.
+   */
+  async registerSubnetHarness(subnetId, harnessUrl, harnessSecret) {
+    await this.request("PATCH", `/api/v1/subnets/${subnetId}/harness`, {
+      body: {
+        harness_url: harnessUrl,
+        harness_secret: harnessSecret ?? null
+      }
+    });
+  }
 };
 var ACNError = class extends Error {
   constructor(status, message, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acn-client",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Official TypeScript/JavaScript client for ACN (Agent Collaboration Network)",
   "main": "dist/index.js",
   "module": "dist/index.mjs",