aegis-platform-sdk 1.0.0 → 1.3.0

package/dist/cli.js

@@ -755,6 +755,44 @@ var GeoResource = class {
   deleteZone(zoneId) {
     return this.t.request("DELETE", `/api/v1/geo/zones/${zoneId}`);
   }
+  // ── Reference Layer Builder (the AEGIS "My Maps") ──────────────────────
+  //
+  // Each layer is one editable dataset + one DAG board + one dedicated
+  // node_type. Publishing runs the board; the materialized nodes show up on
+  // their own under the map's "Reference layers" tab.
+  // Read: `security.geo.view`; write: `security.geo.camada.manage`.
+  /** Builder layers of the tenant, grouped by "map" (the project). */
+  layers() {
+    return this.t.request("GET", "/api/v1/geo/layers");
+  }
+  /** Creates a layer (empty inline dataset + published board). The
+   *  `node_type` derives from the name and is IMMUTABLE. */
+  createLayer(input) {
+    return this.t.request("POST", "/api/v1/geo/layers", { json: input });
+  }
+  layerFeatures(boardId) {
+    return this.t.request("GET", `/api/v1/geo/layers/${boardId}/features`);
+  }
+  /** Saves the drawing as a versioned SNAPSHOT. `geometry` is GeoJSON
+   *  `[lng,lat]`; `geo_style` travels PER FEATURE (colour/alpha/extrusion). */
+  saveLayerFeatures(boardId, rows) {
+    return this.t.request("PUT", `/api/v1/geo/layers/${boardId}/features`, {
+      json: { rows }
+    });
+  }
+  /** Runs the board and RECONCILES — a feature deleted in the builder leaves
+   *  the map (the engine is upsert-only). */
+  publishLayer(boardId) {
+    return this.t.request("POST", `/api/v1/geo/layers/${boardId}/publish`);
+  }
+  /** Renames / regroups. Never changes the `node_type`; `mapa: ""` ungroups. */
+  patchLayer(boardId, changes) {
+    return this.t.request("PATCH", `/api/v1/geo/layers/${boardId}`, { json: changes });
+  }
+  /** Deletes the whole layer: materialized nodes + dataset + board. */
+  deleteLayer(boardId) {
+    return this.t.request("DELETE", `/api/v1/geo/layers/${boardId}`);
+  }
 };
 var MapTemplatesResource = class {
   constructor(t) {
@@ -892,6 +930,82 @@ var TimeSeriesResource = class {
   }
 };
 
+// src/resources/publicGuest.ts
+var PublicGuestResource = class {
+  constructor(t) {
+    this.t = t;
+  }
+  t;
+  base(token) {
+    return `/public/v1/guest/${encodeURIComponent(token)}`;
+  }
+  /** Menu/resumo do token: label, subject, status, geo, ações permitidas. */
+  menu(token) {
+    return this.t.request("GET", this.base(token));
+  }
+  /** Reporta uma posição GPS; o backend avalia cerca/rota/destino. */
+  fix(token, body) {
+    return this.t.request("POST", `${this.base(token)}/fix`, { json: body });
+  }
+  /** Invoca uma ação permitida do token (ex.: abrir portão). */
+  invoke(token, actionId, input = {}) {
+    return this.t.request(
+      "POST",
+      `${this.base(token)}/actions/${encodeURIComponent(actionId)}`,
+      { json: { input } }
+    );
+  }
+  /**
+   * Onda 2 — última posição do VISITANTE amarrado a um token de MORADOR
+   * (`geo.live_ref`). Sem push: a SPA do morador faz polling desta rota. O
+   * morador só vê ESSA visita (least-privilege). Retorna `{available, lat,
+   * lng, ts, inside_fence, arrived, deviated, distance_to_target_m,
+   * visit_status}`; `available:false` enquanto o visitante não mandou fix.
+   */
+  position(token) {
+    return this.t.request("GET", `${this.base(token)}/position`);
+  }
+  /** Documento vinculado ao token (se `geo.document_id`). */
+  document(token) {
+    return this.t.request("GET", `${this.base(token)}/document`);
+  }
+  /** Consulta um object-set embutido no documento do token. */
+  queryObjectSet(token, body) {
+    return this.t.request(
+      "POST",
+      `${this.base(token)}/document/object-sets/query`,
+      { json: body }
+    );
+  }
+  /** Um nó da ontologia referenciado pelo documento (mascarado por ABAC). */
+  documentNode(token, nodeId) {
+    return this.t.request("GET", `${this.base(token)}/document/node`, {
+      params: { node_id: nodeId }
+    });
+  }
+  /** Descritor da Page vinculada ao token (`geo.page_slug`). */
+  page(token, slug) {
+    return this.t.request("GET", `${this.base(token)}/pages/${encodeURIComponent(slug)}`);
+  }
+  /** Avalia as variáveis da Page (com overrides só de variáveis estáticas). */
+  evaluatePage(token, slug, overrides = {}) {
+    return this.t.request(
+      "POST",
+      `${this.base(token)}/pages/${encodeURIComponent(slug)}/evaluate`,
+      { json: { overrides } }
+    );
+  }
+  /**
+   * URL absoluta de um objeto de mídia do documento (bytes servidos com
+   * `Cache-Control: private`). Retorna string p/ `<img src>`/`<a href>` —
+   * NÃO faz request (o transporte é JSON-cêntrico). A `key` deve começar
+   * com `notepad/{doc_id}/` (validado no backend).
+   */
+  mediaUrl(token, key) {
+    return buildUrl(this.t.baseUrl, `${this.base(token)}/media`, { key });
+  }
+};
+
 // src/resources/operational.ts
 var AlertFeedsResource = class {
   constructor(t) {
@@ -1053,6 +1167,31 @@ var AlertsResource = class {
   channels() {
     return this.t.request("GET", "/alerts/channels");
   }
+  /**
+   * `PUT /alerts/channels/{ref}` — point a delivery channel at its
+   * destination.
+   *
+   * Exists so this is a GESTURE: before it, sending alerts to the team's
+   * Discord (or any webhook) meant editing the tenant's JSONB in the
+   * database. Audited as `alert_channel.configured`.
+   *
+   * `ref` is the channel name (`"discord"`) or a named ref
+   * (`"discord-plantao"`, then pass `channel: "discord"`). Fields are open
+   * because the vocabulary belongs to the CHANNEL, not the core.
+   *
+   * The response returns the config MASKED — a webhook URL is the
+   * credential, and reads never hand it back whole.
+   * Perm: `alerts.routes.manage`.
+   */
+  setChannel(ref, config) {
+    return this.t.request("PUT", `/alerts/channels/${encodeURIComponent(ref)}`, {
+      json: config
+    });
+  }
+  /** `DELETE /alerts/channels/{ref}` — audited as `alert_channel.removed`. */
+  deleteChannel(ref) {
+    return this.t.request("DELETE", `/alerts/channels/${encodeURIComponent(ref)}`);
+  }
 };
 var AlarmsResource = class {
   constructor(t) {
@@ -1159,10 +1298,43 @@ var ConnectorsResource = class {
       json: { skill_key: "connector.http" }
     });
   }
+  /**
+   * Start/renew QR pairing for a skill with the `pairing` capability (WhatsApp
+   * station). Pass `{ refresh: true }` to force a fresh code.
+   */
+  pairingStart(agentId, skillKey, opts = {}) {
+    const { target, ...json } = opts;
+    return this.t.request("POST", `/governance/agents/${agentId}/skills/${skillKey}/pairing`, {
+      json,
+      params: target ? { target } : void 0
+    });
+  }
+  /** Read-only poll of the pairing state (no side effects). `target` aims a pool number. */
+  pairingPoll(agentId, skillKey, opts = {}) {
+    return this.t.request("GET", `/governance/agents/${agentId}/skills/${skillKey}/pairing`, {
+      params: opts.target ? { target: opts.target } : void 0
+    });
+  }
+  /**
+   * Add / correct / remove a sub-unit administered by a connector that
+   * declares the `inventory` capability — e.g. one number of a WhatsApp
+   * number-station.
+   *
+   * Reading is NOT here: the inventory already reaches callers through the
+   * snapshot the tick publishes on the device mirror (`GET /api/v1/edge/nodes`
+   * → `nodes[].pool`). A second read path would drift between ticks.
+   */
+  applyInventory(agentId, skillKey, op, item) {
+    return this.t.request(
+      "POST",
+      `/governance/agents/${agentId}/skills/${skillKey}/inventory`,
+      { json: { op, item } }
+    );
+  }
   schedulerTick() {
     return this.t.request("POST", "/governance/agents/scheduler/tick");
   }
-  /** source ∈ native|clawhub */
+  /** source ∈ native|clawhub. Rows carry an additive `capabilities` field. */
   skillCatalog(source) {
     return this.t.request("GET", "/governance/agents/skills", { params: { source } });
   }
@@ -2006,9 +2178,24 @@ var EdgeResource = class {
     this.t = t;
   }
   t;
+  /**
+   * Issue a single-use pairing code (short TTL). The plaintext `code` appears
+   * ONLY in this response (hash at rest).
+   *
+   * `grants` GRANTS gestures to whichever device redeems the code (allowlist;
+   * today `["retry"]`, so a desk app can ask the station to reconnect a
+   * number). Empty — the default — is **read only**: least privilege, and
+   * granting has to be a choice. The grant travels from the code to the node
+   * and dies with it on `revoke`.
+   *
+   * Even when granted, the device never receives the gesture's ADDRESS
+   * (`agent_id`/`skill_key`): it sends the verb and the server routes it.
+   * Perm: `connectors.manage`.
+   */
   createPairingCode(opts = {}) {
     return this.t.request("POST", "/api/v1/edge/pairing-codes", { json: opts });
   }
+  /** Nodes carry an additive `kind` field — see {@link EdgeNode}. */
   listNodes() {
     return this.t.request("GET", "/api/v1/edge/nodes");
   }
@@ -3290,6 +3477,8 @@ var AegisClient = class {
   pages;
   dossier;
   timeseries;
+  /** Public guest-token consumer surface (`/public/v1/guest/{token}/*`). */
+  publicGuest;
   // Operational
   alerts;
   alarms;
@@ -3375,6 +3564,7 @@ var AegisClient = class {
     this.pages = new PagesResource(this);
     this.dossier = new DossierResource(this);
     this.timeseries = new TimeSeriesResource(this);
+    this.publicGuest = new PublicGuestResource(this);
     this.alerts = new AlertsResource(this);
     this.alarms = new AlarmsResource(this);
     this.events = new EventsResource(this);