aegis-platform-sdk 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+## 0.1.0 — 2026-07-08
+
+First cut of the TypeScript SDK, mirroring `aegis-platform-sdk` (Python) v0.10.0.
+
+- `AegisClient` — fetch-based transport, zero runtime dependencies, ESM + CJS.
+- Auth: `login` (JWT attach), `me`, `enableDevMode`; env fallbacks `AEGIS_API_URL` / `AEGIS_TOKEN`.
+- Error hierarchy: `AegisAPIError`, `AuthError` (401), `PermissionDeniedError` (403), `NotFoundError` (404).
+- Resources: `iam` (users/roles/groups/permissions/nav), `osdk` (token lifecycle), `operator.tasks`, `ontology` (objects, graph, explorer, object-types, link-types, OSDK manifest/codegen), `aip` (flows, agents, models, budget), `functions` + `codeRepositories` (Code Functions v26), `datasets` (branches, transactions, classification, markings).
+- Generic `client.request(method, path, opts)` escape hatch for unwrapped endpoints.

package/LICENSE

@@ -0,0 +1,14 @@
+Proprietary — Safe-Core Technologies
+
+Copyright (c) 2026 Safe-Core Technologies. All rights reserved.
+
+This software is proprietary to Safe-Core Technologies. Use of this
+package is permitted only for building applications that integrate with
+a licensed AEGIS platform deployment. Redistribution, sublicensing,
+resale, or use of this software to build competing products is
+prohibited without prior written authorization from Safe-Core
+Technologies.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.

package/README.md

@@ -0,0 +1,105 @@
+# AEGIS SDK — TypeScript (`aegis-platform-sdk`)
+
+Typed TypeScript client for the AEGIS HTTPS API (Safe-Core Technologies).
+Mirrors the Python SDK ([`aegis-platform-sdk` on PyPI](https://pypi.org/project/aegis-platform-sdk/))
+— same resource layout, same error hierarchy, same auth model.
+
+- **Zero runtime dependencies** — platform `fetch` (Node ≥ 18, browsers, edge runtimes).
+- **ESM + CJS** with full `.d.ts` types.
+- **Same surface as Python**: `client.iam.users.list()` ⇄ `client.iam.users.list()`.
+
+## Install
+
+```bash
+npm install aegis-platform-sdk
+```
+
+## Programmatic auth (OSDK Application)
+
+Issue a token in the AEGIS UI: **Governance → OSDK Applications**. The
+plaintext appears once; stash it like any other secret.
+
+```ts
+import { AegisClient } from "aegis-platform-sdk";
+
+const client = new AegisClient({
+  baseUrl: "https://aegis.example.com",
+  token: "osdk_xK9pQzR2L8mYvN4w...",
+});
+
+const me = await client.auth.me();
+console.log(me.username, me.permissions);
+```
+
+Env fallbacks (`AEGIS_API_URL`, `AEGIS_TOKEN`) let you construct
+`new AegisClient()` with no arguments in server-side code.
+
+## Human auth (login)
+
+```ts
+const client = new AegisClient({ baseUrl: "https://aegis.example.com" });
+await client.auth.login("operador", "senha", { totpCode: "123456" }); // JWT attaches automatically
+const tree = await client.iam.nav.tree();
+```
+
+## Error handling
+
+```ts
+import { AegisAPIError, PermissionDeniedError } from "aegis-platform-sdk";
+
+try {
+  await client.iam.users.list();
+} catch (err) {
+  if (err instanceof PermissionDeniedError) console.error("missing perm:", err.detail);
+  else if (err instanceof AegisAPIError) console.error(err.statusCode, err.detail, err.payload);
+}
+```
+
+401 → `AuthError` · 403 → `PermissionDeniedError` · 404 → `NotFoundError` · everything else → `AegisAPIError`.
+
+## Resources
+
+| Resource | Surface |
+|----------|---------|
+| `client.auth` | `login`, `me`, `enableDevMode` |
+| `client.iam` | `users`, `roles`, `groups` (CRUD + members), `permissions`, `nav.tree` |
+| `client.osdk` | OSDK token lifecycle: `list/get/create/rotate/revoke` |
+| `client.operator.tasks` | NL task queue: `list/get/create/cancel/retry/reprioritize` |
+| `client.ontology` | `objects` (CRUD, bulk, links, history, timeseries), `graph.expand`, `explorer` (histogram/timeline), `objectTypes`, `linkTypes`, `osdkManifest/osdkFunctions/osdkGenerate` |
+| `client.aip` | `flows`, `agents`, `models` (catalog/defaults), `budget` |
+| `client.functions` | Code Functions: CRUD, `invoke`, tests, publish, versions, pull requests + CI |
+| `client.codeRepositories` | repos, branches, CI, merge |
+| `client.datasets` | datasets, branches, transactions (begin/commit/abort), merges, classification, markings |
+
+Anything not wrapped yet is reachable via the escape hatch:
+
+```ts
+const rows = await client.request("GET", "/entities/aggregate", {
+  params: { property: "kind" },
+});
+```
+
+## Claude Code skill
+
+The npm package ships a Claude Code skill under `skills/aegis-sdk/`. In an
+external project that consumes this SDK, copy it into the project's
+`.claude/skills/` so Claude Code knows the SDK surface and conventions:
+
+```bash
+mkdir -p .claude/skills
+cp -r node_modules/aegis-platform-sdk/skills/aegis-sdk .claude/skills/aegis-sdk
+```
+
+## Development
+
+```bash
+npm install
+npm run typecheck && npm test && npm run build
+```
+
+Releases: see [`PUBLISHING.md`](./PUBLISHING.md). Roadmap and extension
+plan: [`docs/PLAN.md`](./docs/PLAN.md).
+
+## License
+
+Proprietary — Safe-Core Technologies. See [LICENSE](./LICENSE).