lh-api-client 0.0.1 → 0.0.3

package/dist/audit/index.d.ts

@@ -1,13 +1,20 @@
 import { Client } from '../client';
 /**
- * One audit entry from `GET /platform/audit`. Mirrors the `AuditLog`
- * Prisma model (backend/prisma/schema.prisma) verbatim — verified by
- * canary smoke 2026-05-20 against live data.
+ * One audit entry from `GET /platform/audit`. Mirrors the backend
+ * `AuditLogRow` (backend/src/modules/audit/audit.service.ts) verbatim —
+ * resynced 2026-09-02 (#896) after #886 added label enrichment on the
+ * read path.
  *
  * `occurredAt` is the timestamp; `before` + `after` are diffable JSON
  * snapshots (used for state-change audits); `payload` is free-form
  * context (request params, response codes, etc.). All three Json fields
  * are nullable — many actions only set one or two.
+ *
+ * Label fields (#886): `platformTokenId` is the raw anchor the backend
+ * enriches from; `actorEmail`/`actorName`/`orgName`/`tokenLabel`/
+ * `tokenPrefix` are ABSENT when the referenced id doesn't resolve
+ * (actor 'system', purged org/token) — the raw id remains the display
+ * fallback. Never assume they are present.
  */
 export interface AuditEntry {
     id: string;
@@ -18,7 +25,23 @@ export interface AuditEntry {
     before: unknown;
     after: unknown;
     payload: unknown;
+    platformTokenId: string | null;
+    actorEmail?: string;
+    actorName?: string;
+    orgName?: string;
+    tokenLabel?: string | null;
+    tokenPrefix?: string;
 }
+/**
+ * Every `action` literal the backend currently writes via
+ * `auditService.record()` (grep-audited 2026-09-02, #896 — includes the
+ * #881 `plan.archive.force` and ADR-015 `api_key.auto_inactivate`/`park`
+ * family). `AuditEntry.action` stays `string` on purpose: new backend
+ * actions must not break typed consumers. Keep this list in sync when a
+ * new `record()` call site lands; `activity/enterprise-visible-actions`
+ * on the backend is the enforcement point for the tenant-visible subset.
+ */
+export declare const AUDIT_ACTIONS: readonly ["api_key.acknowledge", "api_key.auto_inactivate", "api_key.create", "api_key.park", "api_key.reactivate", "api_key.revoke", "api_key.revoke_token_orphaned", "api_key.switch_subscription", "auth.password.change", "auth.password.reset", "drift.settle_failed", "member.create", "member.deactivate", "member.delete", "member.enable_login", "member.freeze", "member.import", "member.reactivate", "member.reset_login_password", "member.set_budget_cap", "member.unfreeze", "member.update", "notification.broadcast", "org.activate", "org.create", "org.rename", "org.set_currency", "org.suspend", "plan.archive", "plan.archive.force", "plan.create", "plan.publish", "plan.update", "platform_token.create", "platform_token.revoke", "pricebook.activate", "pricebook.create", "provision.base_sub_anchor_fallback", "subscription.cancel", "subscription.contract.extend", "subscription.create", "subscription.rebook", "subscription.status_change", "topup.execute", "user.create"];
 export interface QueryAuditArgs {
     /** ISO-8601 inclusive start, e.g. 2026-04-19T00:00:00Z */
     from: string;

package/dist/audit/index.js

@@ -1,6 +1,63 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_ACTIONS = void 0;
 exports.queryAudit = queryAudit;
+/**
+ * Every `action` literal the backend currently writes via
+ * `auditService.record()` (grep-audited 2026-09-02, #896 — includes the
+ * #881 `plan.archive.force` and ADR-015 `api_key.auto_inactivate`/`park`
+ * family). `AuditEntry.action` stays `string` on purpose: new backend
+ * actions must not break typed consumers. Keep this list in sync when a
+ * new `record()` call site lands; `activity/enterprise-visible-actions`
+ * on the backend is the enforcement point for the tenant-visible subset.
+ */
+exports.AUDIT_ACTIONS = [
+    'api_key.acknowledge',
+    'api_key.auto_inactivate',
+    'api_key.create',
+    'api_key.park',
+    'api_key.reactivate',
+    'api_key.revoke',
+    'api_key.revoke_token_orphaned',
+    'api_key.switch_subscription',
+    'auth.password.change',
+    'auth.password.reset',
+    'drift.settle_failed',
+    'member.create',
+    'member.deactivate',
+    'member.delete',
+    'member.enable_login',
+    'member.freeze',
+    'member.import',
+    'member.reactivate',
+    'member.reset_login_password',
+    'member.set_budget_cap',
+    'member.unfreeze',
+    'member.update',
+    'notification.broadcast',
+    'org.activate',
+    'org.create',
+    'org.rename',
+    'org.set_currency',
+    'org.suspend',
+    'plan.archive',
+    'plan.archive.force',
+    'plan.create',
+    'plan.publish',
+    'plan.update',
+    'platform_token.create',
+    'platform_token.revoke',
+    'pricebook.activate',
+    'pricebook.create',
+    'provision.base_sub_anchor_fallback',
+    'subscription.cancel',
+    'subscription.contract.extend',
+    'subscription.create',
+    'subscription.rebook',
+    'subscription.status_change',
+    'topup.execute',
+    'user.create',
+];
 /**
  * v0.2.0 agent read tool. Mirrors `GET /platform/audit` (lh-ops CLI has
  * the same endpoint via `audit query`). All filters are AND-composed

package/dist/audit/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":";;AAiDA,gCAgBC;AAzBD;;;;;;;;GAQG;AACI,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,IAAoB;IAEpB,OAAO,MAAM,CAAC,OAAO,CAAe,iBAAiB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":";;;AAwHA,gCAgBC;AApGD;;;;;;;;GAQG;AACU,QAAA,aAAa,GAAG;IAC3B,qBAAqB;IACrB,yBAAyB;IACzB,gBAAgB;IAChB,cAAc;IACd,oBAAoB;IACpB,gBAAgB;IAChB,+BAA+B;IAC/B,6BAA6B;IAC7B,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,qBAAqB;IACrB,eAAe;IACf,eAAe;IACf,mBAAmB;IACnB,6BAA6B;IAC7B,uBAAuB;IACvB,iBAAiB;IACjB,eAAe;IACf,wBAAwB;IACxB,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,oBAAoB;IACpB,aAAa;IACb,cAAc;IACd,aAAa;IACb,uBAAuB;IACvB,uBAAuB;IACvB,oBAAoB;IACpB,kBAAkB;IAClB,oCAAoC;IACpC,qBAAqB;IACrB,8BAA8B;IAC9B,qBAAqB;IACrB,qBAAqB;IACrB,4BAA4B;IAC5B,eAAe;IACf,aAAa;CACL,CAAC;AAoBX;;;;;;;;GAQG;AACI,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,IAAoB;IAEpB,OAAO,MAAM,CAAC,OAAO,CAAe,iBAAiB,EAAE;QACrD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/client.d.ts

@@ -22,4 +22,5 @@ export declare class Client {
     private readonly opts;
     constructor(opts: ClientOptions);
     request<T>(path: string, options?: RequestOptions): Promise<T>;
+    private handleResponse;
 }

package/dist/client.js

@@ -35,11 +35,43 @@ class Client {
             headers.authorization = `Bearer ${this.opts.token}`;
         if (options.headers)
             Object.assign(headers, options.headers);
-        const res = await fetch(url, {
-            method: options.method ?? 'GET',
-            headers,
-            body: options.body !== undefined ? JSON.stringify(options.body) : undefined,
-        });
+        const method = options.method ?? 'GET';
+        const isIdempotentGet = method === 'GET';
+        // #616 — undici (Node fetch) 偶发 DNS/keep-alive 断 against launchhill.com
+        // (curl 同网络稳定 → client 侧缺 timeout/retry)。GET 幂等 → 网络层错误重试
+        // 2 次(指数退避 200ms/600ms)。POST/PUT/PATCH/DELETE 不自动重试:
+        // pricebook publish version-unique 重试会 409;非幂等写不能自动重放。HTTP
+        // 4xx/5xx 不重试(那是服务端逻辑,重试无意义,由 caller 处理 ApiError)。
+        const MAX_RETRIES = isIdempotentGet ? 2 : 0;
+        let attempt = 0;
+        // eslint-disable-next-line no-constant-condition
+        while (true) {
+            try {
+                const res = await fetch(url, {
+                    method,
+                    headers,
+                    body: options.body !== undefined ? JSON.stringify(options.body) : undefined,
+                });
+                return await this.handleResponse(res, method, url);
+            }
+            catch (err) {
+                if (attempt < MAX_RETRIES && isTransientNetworkError(err)) {
+                    const backoff = 200 * (attempt === 0 ? 1 : 3);
+                    await sleep(backoff);
+                    attempt++;
+                    continue;
+                }
+                // #542 — HTTP errors (ApiError) carry their own context; network-layer
+                // errors get enriched with method/URL + a write-side hint so operators
+                // can decide whether a non-idempotent write (issue/topup/provision) may
+                // have landed before retrying — instead of a bare "fetch failed".
+                if (err instanceof ApiError)
+                    throw err;
+                throw enrichNetworkError(method, url, err);
+            }
+        }
+    }
+    async handleResponse(res, method, url) {
         const text = await res.text();
         let parsed = text;
         if (text.length > 0) {
@@ -51,7 +83,7 @@ class Client {
             }
         }
         if (!res.ok) {
-            throw new ApiError(res.status, parsed, `HTTP ${res.status} ${res.statusText} from ${options.method ?? 'GET'} ${url.pathname}`);
+            throw new ApiError(res.status, parsed, `HTTP ${res.status} ${res.statusText} from ${method} ${url.pathname}`);
         }
         // LH backend wraps successful responses in a TransformInterceptor envelope:
         // `{ data: <actual payload>, timestamp, ... }`. Unwrap for caller convenience.
@@ -65,4 +97,42 @@ class Client {
     }
 }
 exports.Client = Client;
+// #616 — transient = network-layer (fetch rejected before a response), NOT
+// HTTP errors. undici throws these as Error with .code like ECONNRESET,
+// ENOTFOUND, EAI_AGAIN, UND_ERR_SOCKET, or a bare "fetch failed" wrapping
+// a cause. Non-transient (a real HTTP 5xx) reaches handleResponse → ApiError.
+function isTransientNetworkError(err) {
+    if (!(err instanceof Error))
+        return false;
+    const code = err.code;
+    if (code === 'ECONNRESET' ||
+        code === 'ENOTFOUND' ||
+        code === 'EAI_AGAIN' ||
+        code === 'ETIMEDOUT' ||
+        code === 'UND_ERR_SOCKET' ||
+        code === 'ECONNREFUSED') {
+        return true;
+    }
+    // undici often throws a generic "fetch failed" wrapping a cause; treat a
+    // fetch-rejected error (no HTTP response) with a network-y cause as transient.
+    const cause = err.cause;
+    if (cause instanceof Error)
+        return isTransientNetworkError(cause);
+    return false;
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+// #542 — wrap a network-layer error with method/URL + a write-side hint. GET
+// (idempotent) gets no hint; non-idempotent writes get "可能已生效" so operators
+// verify with a read command before retrying (avoids duplicate issue/topup).
+function enrichNetworkError(method, url, err) {
+    const cause = err instanceof Error ? err.message : String(err);
+    const hint = method === 'GET'
+        ? ''
+        : ' — 该操作可能已生效,重试前先用读命令核对(如 lh-ops token list / get_statement),避免重复签发/充值/开通';
+    const e = new Error(`${method} ${url.pathname} 网络失败: ${cause}${hint}`);
+    e.cause = err;
+    return e;
+}
 //# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;;;AAmB9E,MAAa,QAAS,SAAQ,KAAK;IAEf;IACA;IAFlB,YACkB,MAAc,EACd,IAAa,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAI7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AATD,4BASC;AAED,MAAa,MAAM;IACY;IAA7B,YAA6B,IAAmB;QAAnB,SAAI,GAAJ,IAAI,CAAe;IAAG,CAAC;IAEpD,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,UAA0B,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5E,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,MAAM,EACN,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,SAAS,OAAO,CAAC,MAAM,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,CACvF,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,+EAA+E;QAC/E,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,IAAK,MAAkC,EAC7C,CAAC;YACD,OAAQ,MAAsB,CAAC,IAAI,CAAC;QACtC,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;CACF;AArDD,wBAqDC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":";AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;;;AAmB9E,MAAa,QAAS,SAAQ,KAAK;IAEf;IACA;IAFlB,YACkB,MAAc,EACd,IAAa,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAI7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AATD,4BASC;AAED,MAAa,MAAM;IACY;IAA7B,YAA6B,IAAmB;QAAnB,SAAI,GAAJ,IAAI,CAAe;IAAG,CAAC;IAEpD,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,UAA0B,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACzE,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QACvC,MAAM,eAAe,GAAG,MAAM,KAAK,KAAK,CAAC;QACzC,wEAAwE;QACxE,0DAA0D;QAC1D,qDAAqD;QACrD,2DAA2D;QAC3D,mDAAmD;QACnD,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,iDAAiD;QACjD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC3B,MAAM;oBACN,OAAO;oBACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC5E,CAAC,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAI,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,OAAO,GAAG,WAAW,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;oBACrB,OAAO,EAAE,CAAC;oBACV,SAAS;gBACX,CAAC;gBACD,uEAAuE;gBACvE,uEAAuE;gBACvE,wEAAwE;gBACxE,kEAAkE;gBAClE,IAAI,GAAG,YAAY,QAAQ;oBAAE,MAAM,GAAG,CAAC;gBACvC,MAAM,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,GAAa,EACb,MAAc,EACd,GAAQ;QAER,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAY,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,MAAM,EACN,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,SAAS,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CACtE,CAAC;QACJ,CAAC;QAED,4EAA4E;QAC5E,+EAA+E;QAC/E,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,IAAK,MAAkC,EAC7C,CAAC;YACD,OAAQ,MAAsB,CAAC,IAAI,CAAC;QACtC,CAAC;QACD,OAAO,MAAW,CAAC;IACrB,CAAC;CACF;AAvFD,wBAuFC;AAED,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,8EAA8E;AAC9E,SAAS,uBAAuB,CAAC,GAAY;IAC3C,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;IACjD,IACE,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,gBAAgB;QACzB,IAAI,KAAK,cAAc,EACvB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,KAAK,GAAI,GAA2B,CAAC,KAAK,CAAC;IACjD,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,MAAc,EAAE,GAAQ,EAAE,GAAY;IAChE,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,IAAI,GACR,MAAM,KAAK,KAAK;QACd,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,0EAA0E,CAAC;IACjF,MAAM,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,UAAU,KAAK,GAAG,IAAI,EAAE,CAAC,CAAC;IACtE,CAAiC,CAAC,KAAK,GAAG,GAAG,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -15,6 +15,7 @@ export type { ApiKeyExportRow, ListApiKeysArgs } from './api-keys';
 export { listMembers, unfreezeMember, setMemberBudgetCap, } from './member';
 export type { MemberRow, ListMembersArgs } from './member';
 export { queryAudit } from './audit';
+export { AUDIT_ACTIONS } from './audit';
 export type { AuditEntry, QueryAuditArgs } from './audit';
 export { listPlans, getPlan, updatePlan, archivePlan } from './plan';
 export type { Plan, PlanQuota, PlanStatus, ListPlansArgs, UpdatePlanInput, } from './plan';

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.revokePlatformToken = exports.listPlatformTokens = exports.issuePlatformToken = exports.listUpstreamModels = exports.executeTopup = exports.addSubscription = exports.extendContract = exports.listPriceBooks = exports.archivePlan = exports.updatePlan = exports.getPlan = exports.listPlans = exports.queryAudit = exports.setMemberBudgetCap = exports.unfreezeMember = exports.listMembers = exports.listApiKeys = exports.PHASE2_BANNER = exports.DEFAULT_STATE_PATH = exports.phase2Status = exports.savePhase2Flags = exports.loadPhase2Flags = exports.evaluatePhase2State = exports.getCacheCoverage = exports.getOrgUsage = exports.getStatement = exports.setOrgCurrency = exports.provisionOrg = exports.renameOrg = exports.getOrgTokens = exports.listOrgs = exports.ApiError = exports.Client = void 0;
+exports.revokePlatformToken = exports.listPlatformTokens = exports.issuePlatformToken = exports.listUpstreamModels = exports.executeTopup = exports.addSubscription = exports.extendContract = exports.listPriceBooks = exports.archivePlan = exports.updatePlan = exports.getPlan = exports.listPlans = exports.AUDIT_ACTIONS = exports.queryAudit = exports.setMemberBudgetCap = exports.unfreezeMember = exports.listMembers = exports.listApiKeys = exports.PHASE2_BANNER = exports.DEFAULT_STATE_PATH = exports.phase2Status = exports.savePhase2Flags = exports.loadPhase2Flags = exports.evaluatePhase2State = exports.getCacheCoverage = exports.getOrgUsage = exports.getStatement = exports.setOrgCurrency = exports.provisionOrg = exports.renameOrg = exports.getOrgTokens = exports.listOrgs = exports.ApiError = exports.Client = void 0;
 // Public surface — both lh-ops and lh-ops-skill import from here.
 var client_1 = require("./client");
 Object.defineProperty(exports, "Client", { enumerable: true, get: function () { return client_1.Client; } });
@@ -32,6 +32,8 @@ Object.defineProperty(exports, "unfreezeMember", { enumerable: true, get: functi
 Object.defineProperty(exports, "setMemberBudgetCap", { enumerable: true, get: function () { return member_1.setMemberBudgetCap; } });
 var audit_1 = require("./audit");
 Object.defineProperty(exports, "queryAudit", { enumerable: true, get: function () { return audit_1.queryAudit; } });
+var audit_2 = require("./audit");
+Object.defineProperty(exports, "AUDIT_ACTIONS", { enumerable: true, get: function () { return audit_2.AUDIT_ACTIONS; } });
 var plan_1 = require("./plan");
 Object.defineProperty(exports, "listPlans", { enumerable: true, get: function () { return plan_1.listPlans; } });
 Object.defineProperty(exports, "getPlan", { enumerable: true, get: function () { return plan_1.getPlan; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,mCAA4C;AAAnC,gGAAA,MAAM,OAAA;AAAE,kGAAA,QAAQ,OAAA;AAGzB,+BAMgB;AALd,gGAAA,QAAQ,OAAA;AACR,oGAAA,YAAY,OAAA;AACZ,iGAAA,SAAS,OAAA;AACT,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AAahB,yCAA2C;AAAlC,yGAAA,YAAY,OAAA;AAGrB,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AAEpB,mDAAoD;AAA3C,kHAAA,gBAAgB,OAAA;AAGzB,mCAOkB;AANhB,6GAAA,mBAAmB,OAAA;AACnB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,sGAAA,YAAY,OAAA;AACZ,4GAAA,kBAAkB,OAAA;AAClB,uGAAA,aAAa,OAAA;AASf,uCAAyC;AAAhC,uGAAA,WAAW,OAAA;AAGpB,mCAIkB;AAHhB,qGAAA,WAAW,OAAA;AACX,wGAAA,cAAc,OAAA;AACd,4GAAA,kBAAkB,OAAA;AAIpB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAGnB,+BAAqE;AAA5D,iGAAA,SAAS,OAAA;AAAE,+FAAA,OAAO,OAAA;AAAE,kGAAA,UAAU,OAAA;AAAE,mGAAA,WAAW,OAAA;AASpD,2CAA8C;AAArC,4GAAA,cAAc,OAAA;AAGvB,+CAAiE;AAAxD,8GAAA,cAAc,OAAA;AAAE,+GAAA,eAAe,OAAA;AAOxC,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AAGrB,mCAA8C;AAArC,4GAAA,kBAAkB,OAAA;AAE3B,mDAI0B;AAHxB,oHAAA,kBAAkB,OAAA;AAClB,oHAAA,kBAAkB,OAAA;AAClB,qHAAA,mBAAmB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,kEAAkE;AAClE,mCAA4C;AAAnC,gGAAA,MAAM,OAAA;AAAE,kGAAA,QAAQ,OAAA;AAGzB,+BAMgB;AALd,gGAAA,QAAQ,OAAA;AACR,oGAAA,YAAY,OAAA;AACZ,iGAAA,SAAS,OAAA;AACT,oGAAA,YAAY,OAAA;AACZ,sGAAA,cAAc,OAAA;AAahB,yCAA2C;AAAlC,yGAAA,YAAY,OAAA;AAGrB,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AAEpB,mDAAoD;AAA3C,kHAAA,gBAAgB,OAAA;AAGzB,mCAOkB;AANhB,6GAAA,mBAAmB,OAAA;AACnB,yGAAA,eAAe,OAAA;AACf,yGAAA,eAAe,OAAA;AACf,sGAAA,YAAY,OAAA;AACZ,4GAAA,kBAAkB,OAAA;AAClB,uGAAA,aAAa,OAAA;AASf,uCAAyC;AAAhC,uGAAA,WAAW,OAAA;AAGpB,mCAIkB;AAHhB,qGAAA,WAAW,OAAA;AACX,wGAAA,cAAc,OAAA;AACd,4GAAA,kBAAkB,OAAA;AAIpB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AACnB,iCAAwC;AAA/B,sGAAA,aAAa,OAAA;AAGtB,+BAAqE;AAA5D,iGAAA,SAAS,OAAA;AAAE,+FAAA,OAAO,OAAA;AAAE,kGAAA,UAAU,OAAA;AAAE,mGAAA,WAAW,OAAA;AASpD,2CAA8C;AAArC,4GAAA,cAAc,OAAA;AAGvB,+CAAiE;AAAxD,8GAAA,cAAc,OAAA;AAAE,+GAAA,eAAe,OAAA;AAOxC,iCAAuC;AAA9B,qGAAA,YAAY,OAAA;AAGrB,mCAA8C;AAArC,4GAAA,kBAAkB,OAAA;AAE3B,mDAI0B;AAHxB,oHAAA,kBAAkB,OAAA;AAClB,oHAAA,kBAAkB,OAAA;AAClB,qHAAA,mBAAmB,OAAA"}

package/dist/topup/index.d.ts

@@ -1,13 +1,15 @@
 import { Client } from '../client';
 /**
  * Body for `POST /platform/topups/execute` (ExecuteTopupDto, #28 Smoke-A
- * subset). Single-shot deposit: credits an org's balance and writes the audit +
- * DEPOSIT log atomically. `amountUsd` must be positive (negative adjustments
- * belong to a separate path). Requires the `write:billing` scope on the token.
+ * subset). Single-shot balance movement: credits (positive) or deducts
+ * (negative) an org's balance and writes the audit + DEPOSIT log atomically.
+ * #734 (Option A): negative amounts are allowed (operator deduction /
+ * correction). Zero is rejected at the service layer. Requires the
+ * `write:billing` scope on the token.
  */
 export interface ExecuteTopupArgs {
     orgId: string;
-    /** Positive USD amount (≥ 0.01). */
+    /** USD-canonical amount. Positive = credit, negative = deduction (#734). */
     amountUsd: number;
     memo?: string;
 }

package/dist/topup/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/topup/index.ts"],"names":[],"mappings":";;AAuCA,oCAYC;AAjBD;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,IAAsB;IAEtB,OAAO,MAAM,CAAC,OAAO,CAAc,0BAA0B,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/topup/index.ts"],"names":[],"mappings":";;AAyCA,oCAYC;AAjBD;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,IAAsB;IAEtB,OAAO,MAAM,CAAC,OAAO,CAAc,0BAA0B,EAAE;QAC7D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB;KACF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lh-api-client",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "private": false,
   "description": "Shared HTTP client + types + pure-logic helpers for talking to LH Enterprise backend. Consumed by lh-ops (CLI) and lh-ops-skill (MCP).",
   "main": "./dist/index.js",