aegis-platform-sdk 0.1.0 → 1.0.0

package/CHANGELOG.md

@@ -1,5 +1,72 @@
 # Changelog
 
+## 1.0.0 — 2026-07-08
+
+F5 — Hardening. No breaking API changes; new default behaviors noted below.
+
+- **Retry/backoff** (new default behavior): transient failures (network
+  errors, timeouts, 429/502/503/504) are retried with exponential backoff +
+  full jitter — GET/HEAD only, 2 retries. Configure via `retry` option
+  (`{retries, baseDelayMs, maxDelayMs, retryPost}`); `{retries: 0}` disables.
+- **Automatic JWT refresh**: `auth.login` now captures the refresh token; on
+  a 401 the client rotates it via `POST /auth/refresh` (single-flight) and
+  retries the request once. A rejected refresh clears the token (no loops).
+  Seed manually via `refreshToken` option / `setRefreshToken()`; explicit
+  `auth.refresh(token)` added.
+- **Per-method generics**: 510 resource methods now accept a type parameter —
+  `client.geo.nodes<GeoNodesOut>()` instead of `as unknown as` casts
+  (`T = Json` default keeps all existing code compiling).
+- All resource classes and their option types are exported from the package
+  root (typed params in consumer code + full typedoc coverage).
+- `npm run docs` (typedoc) + `examples/` (OSDK-token server usage, browser
+  proxy mode with SSE).
+- 12 new tests (177 total).
+
+## 0.4.0 — 2026-07-08
+
+F3 (OSDK codegen CLI) + F4 groundwork (proxy-mode, dogfooded in security-app).
+
+- **`aegis-osdk` CLI** (`npx aegis-osdk generate|manifest`): fetches
+  `GET /ontology/osdk/generate?lang=typescript|python` from a live deployment
+  and writes the typed module; prints the contract version. Proven live against
+  a real AEGIS backend (generated module passes strict `tsc`).
+- **`asOsdkClient(client)`** adapter — bridges `AegisClient` to the `OSDKClient`
+  `{get, post}` contract expected by generated modules.
+- **Proxy mode** (cookie-auth frontends like security-app): relative `baseUrl`
+  (e.g. `/api`, resolved against the browser origin) + `fetchInit` option
+  (`{credentials: "include", cache: "no-store"}` merged into every request,
+  including `stream()`).
+- `geo.referenceLayers()` / `geo.referenceLayer(id, {uf, municipio})` — gap
+  found while dogfooding (endpoints existed in the backend but in neither SDK).
+- 12 new tests (165 total).
+
+## 0.3.0 — 2026-07-08
+
+F1.5 (full parity closure) + F2 (SSE streaming). **Every Python SDK module now has a TS mirror.**
+
+- **Domain**: `atlas` (layers + KML import + evaluator), `briefing`, `cctv` (streams/detections/recordings/exports/bookmarks/GCPs/LPR hotlist, raw m3u8 playlist), `edge` (pairing/fleet version), `video` (streams/detections/tags/soak/exports), `comunicados`, `campaign.briefing`.
+- **Collaboration/apps**: `forms`, `appShell` (banner/footer/user-menu/sidenav/homepage), `groups` (alias of `iam.groups`), `projects` (move + constraints), `organizations`, `spaces`, `solutions` (design/materialize/diagrams/teardown/marketplace), `workspaces` (+versions/navigation/promotions/kiosk), `workspaceUpdates`, `marketplace` (v23 storefront + install wizard).
+- **Versioned surfaces**: `platformV22` (action-log, notepad templates, quiver, variable transforms, usage), `platformV23` (aip-logic, action-types, assist, pipeline, quiver, connectors, automate, health, contour, vertex, repos, object-sets, carbon, styles incl. multipart logo upload), `platformV24` (flat: rules, checkpoints, expectations, change requests, scenarios, object-set search-around/aggregate, …), `platformV25` (machinery, branch protection, kiosk, analyst threads, dataset rollback/snapshot/limits, freshness, code scan, evals), `platformV26` (promotions, object/core views, capacity, listeners, scanner, monitoring, health checks, media versions, insight, peers, run history).
+- **Static catalogs**: full IAM permission catalog (`NAV_PERMISSIONS`/`CAPABILITY_PERMISSIONS`/`PermissionKey` union, `isSystemPermission`) and the OSDK `APPLICATIONS` catalog (7 apps) with `validateApplication`.
+- **F2 — SSE**: `client.stream(path)` async iterator + spec-compliant `parseSseStream` (chunk-boundary safe, CRLF, comments, sticky id/retry); errors map through the exception hierarchy.
+- Transport: multipart `form` option; array query params (repeated keys).
+- 60 new tests (153 total).
+
+## 0.2.0 — 2026-07-08
+
+F1 — resource parity, 27 new client surfaces (mirror of Python SDK v0.10.0):
+
+- **Reading**: `geo`, `mapTemplates` (incl. `exportSvg` raw-SVG), `media`, `docs`, `pages`, `dossier` (async start → poll), `timeseries`.
+- **Operational**: `alerts` (feeds/watches/geofences/shares/routes/inbox + escalate/channels), `alarms`, `events` (pipeline + DLQ, ids-XOR-all guard), `connectors` (incl. two-step `register`), `pipelines`, `chat`, `notepad`.
+- **Governance**: `lineage`, `accessAudit`, `markings` (+categories/eligibility), `resourceMarkings`, `propertyMarkings`, `rowPolicies`, `erasure` (preview/forget), `retention`, `guestTokens`.
+- **Platform**: `workshop` (briefings/dossiers/covs/widgetCatalog), `compute` (providers/releases/vision + per-provider `control()` plane), `inference` (complete/chat/chatWithRag/models/collections/auditTrail), `codegen`, `correlation`, `situational`, `merge`.
+- Client-side classification helpers: `maxLevel`, `validateInvariant`, `ClassificationInvariantViolation` (mirror of `aegis.classification`).
+- 64 new tests (93 total).
+
+Deliberate deviations from Python (documented in `docs/PLAN.md`): the stdout-based
+`aegis.maps` builder is sandbox-IDE-only and was not ported (only `MapTemplates` HTTP
+surface); `inference` is a client resource here instead of a functional namespace.
+
 ## 0.1.0 — 2026-07-08
 
 First cut of the TypeScript SDK, mirroring `aegis-platform-sdk` (Python) v0.10.0.

package/README.md

@@ -70,6 +70,15 @@ try {
 | `client.functions` | Code Functions: CRUD, `invoke`, tests, publish, versions, pull requests + CI |
 | `client.codeRepositories` | repos, branches, CI, merge |
 | `client.datasets` | datasets, branches, transactions (begin/commit/abort), merges, classification, markings |
+| `client.geo` / `mapTemplates` / `media` / `docs` / `pages` / `dossier` / `timeseries` | reading & consumption surfaces |
+| `client.alerts` / `alarms` / `events` / `connectors` / `pipelines` / `chat` / `notepad` | operational surfaces |
+| `client.lineage` / `accessAudit` / `markings` / `resourceMarkings` / `propertyMarkings` / `rowPolicies` / `erasure` / `retention` / `guestTokens` | governance surfaces |
+| `client.workshop` / `compute` / `inference` / `codegen` / `correlation` / `situational` / `merge` | platform surfaces |
+| `client.atlas` / `briefing` / `cctv` / `edge` / `video` / `comunicados` / `campaign` | domain surfaces |
+| `client.forms` / `appShell` / `groups` / `projects` / `organizations` / `spaces` / `solutions` / `workspaces` / `workspaceUpdates` / `marketplace` | collaboration & apps |
+| `client.platformV22` … `client.platformV26` | versioned platform surfaces |
+| `client.stream(path)` | SSE async iterator (task progress, AIP streaming) |
+| `NAV_PERMISSIONS` / `CAPABILITY_PERMISSIONS` / `APPLICATIONS` | static permission + OSDK app catalogs |
 
 Anything not wrapped yet is reachable via the escape hatch:
 
@@ -79,6 +88,35 @@ const rows = await client.request("GET", "/entities/aggregate", {
 });
 ```
 
+## Hardening (1.0)
+
+- **Typed results**: `client.geo.nodes<GeoNodesOut>()` — every direct method
+  takes a type parameter (default `Json`).
+- **Retry/backoff**: transient failures (network, timeout, 429/5xx-gateway)
+  retried on GET/HEAD with jittered exponential backoff — tune via
+  `retry: { retries, baseDelayMs, maxDelayMs, retryPost }`.
+- **Auto JWT refresh**: after `auth.login`, a 401 rotates the refresh token
+  and retries once, transparently.
+
+## OSDK codegen CLI
+
+```bash
+npx aegis-osdk generate --lang typescript   # typed module from the LIVE ontology
+npx aegis-osdk manifest                     # raw manifest JSON
+```
+
+Auth via `AEGIS_API_URL`/`AEGIS_TOKEN` or `--base-url`/`--token`. Wire the
+generated module with `asOsdkClient(client)`.
+
+## Proxy mode (cookie-auth frontends)
+
+```ts
+const aegis = new AegisClient({
+  baseUrl: "/api", // relative — resolved against the browser origin
+  fetchInit: { credentials: "include", cache: "no-store" },
+});
+```
+
 ## Claude Code skill
 
 The npm package ships a Claude Code skill under `skills/aegis-sdk/`. In an