melaya 0.1.4 → 0.2.0

data/lib/melaya/pipelines.rb

@@ -0,0 +1,342 @@
+# frozen_string_literal: true
+
+module Melaya
+  # Pipelines API — overview dashboard, pipeline run listing, traces, and
+  # cron-based scheduling.
+  #
+  # Maps to:
+  #   /api/v1/private/overview/*         — dashboard + run listing
+  #   /api/v1/private/runs/:id/traces/*  — distributed traces
+  #   /api/v1/private/pipeline-schedule  — cron scheduling
+  #   /api/v1/version                    — server version (public)
+  #
+  # @example
+  #   runs = melaya.pipelines.list(project: "my-project", limit: 20)
+  #   melaya.pipelines.upsert_schedule("my-project", "nightly-report",
+  #     cron: "0 2 * * *")
+  class PipelinesAPI
+    def initialize(http)
+      @http = http
+    end
+
+    # ── Overview ───────────────────────────────────────────────────────────────
+
+    # GET /api/v1/private/overview
+    # Dashboard overview: usage stats, active strategies, recent runs.
+    def overview
+      @http.get("/api/v1/private/overview")
+    end
+
+    # GET /api/v1/private/overview/model-prices
+    # Get pricing data for available AI models.
+    def model_prices
+      @http.get("/api/v1/private/overview/model-prices")
+    end
+
+    # GET /api/v1/private/overview/chart
+    # Get chart data for overview dashboard (cost/usage over time).
+    def chart_data(params = {})
+      @http.get("/api/v1/private/overview/chart", params)
+    end
+
+    # GET /api/v1/private/overview/cost-breakdown
+    # Get cost breakdown by model/provider.
+    def cost_breakdown(params = {})
+      @http.get("/api/v1/private/overview/cost-breakdown", params)
+    end
+
+    # GET /api/v1/private/overview/pipeline-count
+    # Count of pipeline runs grouped by status.
+    def count
+      @http.get("/api/v1/private/overview/pipeline-count")
+    end
+
+    # GET /api/v1/private/overview/pipelines
+    # Paginated list of pipeline runs.
+    # @param project [String, nil]
+    # @param pipeline_name [String, nil]
+    # @param status [String, nil]
+    # @param limit [Integer, nil]
+    # @param offset [Integer, nil]
+    def list(project: nil, pipeline_name: nil, status: nil, limit: nil, offset: nil)
+      @http.get("/api/v1/private/overview/pipelines",
+        compact("project" => project, "pipelineName" => pipeline_name,
+                "status"  => status,  "limit"        => limit,
+                "offset"  => offset))
+    end
+
+    # GET /api/v1/private/overview/pipelines/recent
+    # Most recent pipeline runs for a dashboard widget.
+    def recent
+      @http.get("/api/v1/private/overview/pipelines/recent")
+    end
+
+    # ── Traces ─────────────────────────────────────────────────────────────────
+
+    # GET /api/v1/private/runs/:runId/traces
+    # List traces for a run (paginated).
+    #
+    # Returns a paginated envelope, NOT a flat array:
+    #   {
+    #     "data" => {
+    #       "list"     => Array<Hash>,   # trace summaries
+    #       "total"    => Integer,        # total matching traces
+    #       "page"     => Integer,
+    #       "pageSize" => Integer
+    #     }
+    #   }
+    #
+    # @param run_id [String]
+    # @param params [Hash] optional pagination / filter params (page:, pageSize:, ...)
+    # @return [Hash] paginated envelope as described above
+    def traces(run_id, params = {})
+      @http.get("/api/v1/private/runs/#{enc(run_id)}/traces", params)
+    end
+
+    # GET /api/v1/private/runs/:runId/traces/:traceId
+    # Get a single trace by ID.
+    def trace(run_id, trace_id)
+      @http.get("/api/v1/private/runs/#{enc(run_id)}/traces/#{enc(trace_id)}")
+    end
+
+    # GET /api/v1/private/runs/:runId/traces/:traceId/stats
+    # Get statistics for a specific trace.
+    def trace_stats(run_id, trace_id)
+      @http.get("/api/v1/private/runs/#{enc(run_id)}/traces/#{enc(trace_id)}/stats")
+    end
+
+    # DELETE /api/v1/private/runs/:runId/traces
+    # Delete all traces (and their spans) for a run by runId.
+    # No request body required — the runId in the path identifies the target.
+    #
+    # @param run_id [String]
+    # @return [Hash] { "deletedSpans" => Integer, "requestedTraces" => Integer (optional) }
+    def delete_traces(run_id)
+      @http.delete("/api/v1/private/runs/#{enc(run_id)}/traces")
+    end
+
+    # ── Schedule ───────────────────────────────────────────────────────────────
+
+    # GET /api/v1/private/pipeline-schedule
+    # List all pipeline schedules accessible to the caller.
+    def list_schedules
+      @http.get("/api/v1/private/pipeline-schedule")
+    end
+
+    # GET /api/v1/private/pipeline-schedule/:project/:pipelineName
+    # Get schedule status for a pipeline.
+    # @param project [String]
+    # @param pipeline_name [String]
+    def get_schedule(project, pipeline_name)
+      @http.get("/api/v1/private/pipeline-schedule/#{enc(project)}/#{enc(pipeline_name)}")
+    end
+
+    # PUT /api/v1/private/pipeline-schedule/:project/:pipelineName
+    # Create or update a pipeline schedule (cron expression + optional config).
+    # @param project [String]
+    # @param pipeline_name [String]
+    # @param cron [String] cron expression e.g. "0 2 * * *"
+    # @param config [Hash, nil] optional pipeline config overrides
+    def upsert_schedule(project, pipeline_name, cron:, config: nil)
+      body = compact("cron" => cron, "config" => config)
+      @http.put("/api/v1/private/pipeline-schedule/#{enc(project)}/#{enc(pipeline_name)}", body)
+    end
+
+    # POST /api/v1/private/pipeline-schedule/:project/:pipelineName/pause
+    # Pause a pipeline schedule.
+    def pause_schedule(project, pipeline_name)
+      @http.post("/api/v1/private/pipeline-schedule/#{enc(project)}/#{enc(pipeline_name)}/pause")
+    end
+
+    # POST /api/v1/private/pipeline-schedule/:project/:pipelineName/resume
+    # Resume a paused pipeline schedule.
+    def resume_schedule(project, pipeline_name)
+      @http.post("/api/v1/private/pipeline-schedule/#{enc(project)}/#{enc(pipeline_name)}/resume")
+    end
+
+    # ── Pipeline lifecycle (CRUD + run + outputs + AI build) ──────────────────
+
+    # GET /api/v1/private/pipelines
+    # List all pipeline configs accessible to the caller.
+    # Returns { "pipelines" => [...] }.
+    def list_pipelines
+      @http.get("/api/v1/private/pipelines")
+    end
+
+    # POST /api/v1/private/pipelines
+    # Create a new pipeline config.
+    # @param name [String] pipeline name
+    # @param project [String] owning project
+    # @param description [String, nil]
+    # @param config [Hash] additional config keys merged into the request body
+    # @return [Hash] created pipeline config
+    def create(name:, project:, description: nil, **config)
+      body = compact(
+        "name"        => name,
+        "project"     => project,
+        "description" => description
+      ).merge(stringify_keys(config))
+      @http.post("/api/v1/private/pipelines", body)
+    end
+
+    # GET /api/v1/private/pipelines/:name
+    # Fetch a single pipeline config by name.
+    # @param name [String] pipeline name
+    # @param project [String, nil] owning project (disambiguates when multiple projects share a name)
+    # @return [Hash] pipeline config
+    def get(name, project: nil)
+      params = compact("project" => project)
+      @http.get("/api/v1/private/pipelines/#{enc(name)}", params)
+    end
+
+    # PUT /api/v1/private/pipelines/:name
+    # Replace a pipeline's config.
+    # @param name [String] pipeline name
+    # @param config [Hash] full pipeline config payload
+    # @param project [String, nil] owning project
+    # @return [Hash] updated pipeline config
+    def update(name, config:, project: nil)
+      body = compact("config" => config, "project" => project)
+      @http.put("/api/v1/private/pipelines/#{enc(name)}", body)
+    end
+
+    # DELETE /api/v1/private/pipelines/:name
+    # Delete a pipeline config.
+    # @param name [String] pipeline name
+    # @param project [String, nil] owning project
+    # @return [Hash] empty hash on success
+    def delete_pipeline(name, project: nil)
+      params = compact("project" => project)
+      @http.delete("/api/v1/private/pipelines/#{enc(name)}", params)
+    end
+
+    # POST /api/v1/private/pipelines/:name/run
+    # Enqueue a pipeline run.
+    # @param name [String] pipeline name
+    # @param project [String, nil]
+    # @param execution_target [String, nil] runner target identifier
+    # @param studio_url [String, nil] override studio URL
+    # @param env_overrides [Hash, nil] environment variable overrides
+    # @return [Hash] { "run_id" => String, "queued" => Boolean }
+    def run(name, project: nil, execution_target: nil, studio_url: nil, env_overrides: nil)
+      body = compact(
+        "project"         => project,
+        "executionTarget" => execution_target,
+        "studio_url"      => studio_url,
+        "env_overrides"   => env_overrides
+      )
+      @http.post("/api/v1/private/pipelines/#{enc(name)}/run", body.empty? ? nil : body)
+    end
+
+    # GET /api/v1/private/pipelines/:name/runs
+    # List all run IDs for a pipeline.
+    # @param name [String] pipeline name
+    # @return [Hash] { "run_ids" => Array<String> }
+    def run_ids(name)
+      @http.get("/api/v1/private/pipelines/#{enc(name)}/runs")
+    end
+
+    # GET /api/v1/private/pipelines/:name/runs/:run_id
+    # Get the status of a specific pipeline run.
+    # @param name [String] pipeline name
+    # @param run_id [String] run identifier
+    # @return [Hash] { "runId", "status", "createdAt", "executionTarget", "cost" }
+    def run_status(name, run_id)
+      @http.get("/api/v1/private/pipelines/#{enc(name)}/runs/#{enc(run_id)}")
+    end
+
+    # DELETE /api/v1/private/pipelines/:name/runs/:run_id
+    # Cancel an in-progress pipeline run.
+    # @param name [String] pipeline name
+    # @param run_id [String] run identifier
+    # @return [Hash] empty hash on success
+    def cancel_run(name, run_id)
+      @http.delete("/api/v1/private/pipelines/#{enc(name)}/runs/#{enc(run_id)}")
+    end
+
+    # GET /api/v1/private/pipelines/:name/outputs
+    # List all output artifacts produced by a pipeline.
+    # @param name [String] pipeline name
+    # @return artifacts listing
+    def outputs(name)
+      @http.get("/api/v1/private/pipelines/#{enc(name)}/outputs")
+    end
+
+    # GET /api/v1/private/pipelines/:name/outputs/:path
+    # Fetch a specific output artifact. Each segment of +path+ is individually
+    # URL-encoded so slashes in segment values are preserved as separators.
+    # @param name [String] pipeline name
+    # @param path [String] artifact path, e.g. "reports/2024-01/summary.json"
+    # @param download [Boolean] if true, adds +?download=1+ to trigger a download response
+    # @return artifact content or download redirect
+    def output(name, path, download: false)
+      encoded_path = path.to_s.split("/").map { |seg| enc(seg) }.join("/")
+      params = download ? { "download" => 1 } : {}
+      @http.get("/api/v1/private/pipelines/#{enc(name)}/outputs/#{encoded_path}", params)
+    end
+
+    # POST /api/v1/private/pipelines/preview-code
+    # Generate a code preview for a pipeline config without saving it.
+    # @param config [Hash] pipeline config to preview
+    # @return preview payload
+    def preview_code(config)
+      @http.post("/api/v1/private/pipelines/preview-code", config)
+    end
+
+    # GET /api/v1/private/pipelines/tools
+    # Fetch the registry of tools available to pipeline steps.
+    # @return [Hash] tool registry
+    def tools
+      @http.get("/api/v1/private/pipelines/tools")
+    end
+
+    # GET /api/v1/private/pipelines/subagents
+    # Fetch the registry of sub-agent definitions available to pipelines.
+    # @return [Hash] sub-agent registry
+    def subagents
+      @http.get("/api/v1/private/pipelines/subagents")
+    end
+
+    # POST /api/v1/private/templates/:template_id/instantiate
+    # Instantiate a platform template into a new pipeline config.
+    # @param template_id [String] the template to instantiate
+    # @param name [String] name for the resulting pipeline
+    # @param project [String] target project
+    # @param overrides [Hash, nil] optional config overrides applied on top of the template defaults
+    # @return [Hash] { "pipeline" => config }
+    def instantiate_template(template_id, name:, project:, overrides: nil)
+      body = compact("name" => name, "project" => project, "overrides" => overrides)
+      @http.post("/api/v1/private/templates/#{enc(template_id)}/instantiate", body)
+    end
+
+    # POST /api/v1/private/ai/build-pipeline/sync
+    # Generate a pipeline config from a natural-language brief using AI.
+    # @param brief [Hash] free-form brief payload sent to the AI builder
+    # @return [Hash] generated pipeline config
+    def build_with_ai(brief)
+      @http.post("/api/v1/private/ai/build-pipeline/sync", brief)
+    end
+
+    # ── Misc ───────────────────────────────────────────────────────────────────
+
+    # GET /api/v1/version (public)
+    # Get current server version string.
+    def server_version
+      @http.get("/api/v1/version")
+    end
+
+    private
+
+    def enc(s)
+      URI.encode_www_form_component(s.to_s)
+    end
+
+    def compact(hash)
+      hash.reject { |_, v| v.nil? }
+    end
+
+    def stringify_keys(hash)
+      hash.transform_keys(&:to_s)
+    end
+  end
+end

data/lib/melaya/projects.rb

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+module Melaya
+  # Projects API — create and list agent projects.
+  #
+  # Projects are the top-level namespace for pipelines, connectors, and team
+  # membership in the Melaya platform.
+  #
+  # Maps to /api/v1/private/projects/*.
+  #
+  # @example
+  #   projects = melaya.projects.list
+  #   project  = melaya.projects.create(name: "my-project", description: "...")
+  #   melaya.projects.rename(old_name: "my-project", new_name: "renamed-project")
+  class ProjectsAPI
+    def initialize(http)
+      @http = http
+    end
+
+    # GET /api/v1/private/projects
+    # List all projects the authenticated user can access
+    # (owned projects + projects they are a member of).
+    def list
+      @http.get("/api/v1/private/projects")
+    end
+
+    # POST /api/v1/private/projects
+    # Create a new agent project.
+    # @param name [String]
+    # @param description [String, nil]
+    def create(name:, description: nil)
+      body = compact("name" => name, "description" => description)
+      @http.post("/api/v1/private/projects", body)
+    end
+
+    # PATCH /api/v1/private/projects/rename
+    # Rename a project (body: oldName, newName).
+    # @param old_name [String]
+    # @param new_name [String]
+    def rename(old_name:, new_name:)
+      @http.patch("/api/v1/private/projects/rename",
+        "oldName" => old_name,
+        "newName" => new_name)
+    end
+
+    # GET /api/v1/private/projects/runner
+    # Get projects list (runner-facing, authed).
+    def runner_projects
+      @http.get("/api/v1/private/projects/runner")
+    end
+
+    private
+
+    def compact(hash)
+      hash.reject { |_, v| v.nil? }
+    end
+  end
+end

data/lib/melaya/runner.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+module Melaya
+  # Runner API — mint, list, and revoke runner tokens.
+  #
+  # Runner tokens (mel_run_ prefix) authenticate the Melaya runner CLI process
+  # that executes agent pipelines on your infrastructure.
+  # The plaintext token is returned only once on creation — store it securely.
+  #
+  # Maps to /api/v1/private/runner/tokens/*.
+  #
+  # @example
+  #   result = melaya.runner.create_token(label: "prod-server-1")
+  #   token = result["token"]   # store securely — shown only once
+  #
+  #   tokens = melaya.runner.list_tokens
+  #   melaya.runner.revoke_token(tokens.first["id"])
+  class RunnerAPI
+    def initialize(http)
+      @http = http
+    end
+
+    # POST /api/v1/private/runner/tokens
+    # Mint a new mel_run_ runner token.
+    # @param label [String, nil] human-readable label for the token
+    def create_token(label: nil)
+      body = label ? { "label" => label } : nil
+      @http.post("/api/v1/private/runner/tokens", body)
+    end
+
+    # GET /api/v1/private/runner/tokens
+    # List all runner tokens for the caller (masked, with last_seen).
+    def list_tokens
+      @http.get("/api/v1/private/runner/tokens")
+    end
+
+    # DELETE /api/v1/private/runner/tokens/:tokenId
+    # Revoke a runner token by ID.
+    # @param token_id [String]
+    def revoke_token(token_id)
+      @http.delete("/api/v1/private/runner/tokens/#{URI.encode_www_form_component(token_id.to_s)}")
+    end
+  end
+end

data/lib/melaya/strategies.rb

@@ -151,5 +151,20 @@ module Melaya
     def ai_opt_runs(strategy_id)
       @http.get("/api/v1/strategies/#{strategy_id}/ai-opt/runs")
     end
+
+    # ── restRoutes.ts strategies endpoints ────────────────────────────────────
+
+    # GET /api/v1/private/strategies/team
+    # List strategies visible to the caller's team project.
+    def list_team
+      @http.get("/api/v1/private/strategies/team")
+    end
+
+    # POST /api/v1/private/strategies/summaries/bulk
+    # Bulk-fetch lightweight summaries for a list of strategy IDs.
+    # @param strategy_ids [Array<String>]
+    def summaries_bulk(strategy_ids)
+      @http.post("/api/v1/private/strategies/summaries/bulk", "strategyIds" => strategy_ids)
+    end
   end
 end

data/lib/melaya/stream.rb

@@ -42,8 +42,9 @@ module Melaya
     end
 
     def initialize(url, verify_ssl: true)
+      raise ArgumentError, "Melaya: TLS certificate verification cannot be disabled." unless verify_ssl
       @uri        = URI.parse(url)
-      @verify_ssl = verify_ssl
+      @verify_ssl = true
       @socket     = nil
       @closed     = false
       @buf        = String.new("", encoding: "BINARY")
@@ -54,7 +55,7 @@ module Melaya
 
       @socket = if @uri.scheme == "wss"
         ctx = OpenSSL::SSL::SSLContext.new
-        ctx.verify_mode = @verify_ssl ? OpenSSL::SSL::VERIFY_PEER : OpenSSL::SSL::VERIFY_NONE
+        ctx.verify_mode = OpenSSL::SSL::VERIFY_PEER
         ssl = OpenSSL::SSL::SSLSocket.new(tcp, ctx)
         ssl.hostname = @uri.host
         ssl.connect
@@ -259,10 +260,11 @@ module Melaya
     DEFAULT_WS_URL = "wss://wss.melaya.org"
 
     def initialize(api_key, ws_url, http, verify_ssl: true)
+      raise ArgumentError, "Melaya: TLS certificate verification cannot be disabled." unless verify_ssl
       @api_key    = api_key
       @ws_url     = ws_url.to_s.chomp("/")
       @http       = http
-      @verify_ssl = verify_ssl
+      @verify_ssl = true
     end
 
     # Live ticker frames.

data/lib/melaya/team.rb

@@ -0,0 +1,102 @@
+# frozen_string_literal: true
+
+module Melaya
+  # Team API — manage project team membership, roles, and invitations.
+  #
+  # Maps to:
+  #   /api/v1/private/projects/:project/members/*
+  #   /api/v1/private/team/*
+  #   /api/v1/private/projects/:project/pipelines/:pipeline/visibility
+  #
+  # @example
+  #   members = melaya.team.list_members("my-project")
+  #   melaya.team.invite("my-project", username: "alice")
+  #   link = melaya.team.create_invite_link("my-project")
+  class TeamAPI
+    def initialize(http)
+      @http = http
+    end
+
+    # GET /api/v1/private/projects/:project/members
+    # List members of a project team.
+    # @param project [String] project name
+    def list_members(project)
+      @http.get("/api/v1/private/projects/#{enc(project)}/members")
+    end
+
+    # POST /api/v1/private/projects/:project/members/invite
+    # Invite a user to a project team by username.
+    # @param project [String]
+    # @param username [String]
+    def invite(project, username:)
+      @http.post("/api/v1/private/projects/#{enc(project)}/members/invite",
+        "username" => username)
+    end
+
+    # POST /api/v1/private/projects/:project/invite-link
+    # Create a shareable invite link for a project.
+    # Returns the URL to send to new team members.
+    # @param project [String]
+    def create_invite_link(project)
+      @http.post("/api/v1/private/projects/#{enc(project)}/invite-link")
+    end
+
+    # POST /api/v1/private/team/invite/accept
+    # Accept a project invite using the token from an invite link.
+    # @param token [String]
+    def accept_invite(token)
+      @http.post("/api/v1/private/team/invite/accept", "token" => token)
+    end
+
+    # PATCH /api/v1/private/projects/:project/members/:userId
+    # Update a team member's role in a project.
+    # @param project [String]
+    # @param user_id [String]
+    # @param role [String] one of "owner", "editor", "viewer"
+    def update_member_role(project, user_id, role:)
+      @http.patch(
+        "/api/v1/private/projects/#{enc(project)}/members/#{enc(user_id)}",
+        "role" => role
+      )
+    end
+
+    # DELETE /api/v1/private/projects/:project/members/:userId
+    # Remove a member from a project team.
+    # @param project [String]
+    # @param user_id [String]
+    def remove_member(project, user_id)
+      @http.delete("/api/v1/private/projects/#{enc(project)}/members/#{enc(user_id)}")
+    end
+
+    # ── Pipeline visibility ────────────────────────────────────────────────────
+
+    # GET /api/v1/private/projects/:project/pipelines/:pipeline/visibility
+    # Get visibility settings for a pipeline within a project.
+    # @param project [String]
+    # @param pipeline [String]
+    def get_pipeline_visibility(project, pipeline)
+      @http.get(
+        "/api/v1/private/projects/#{enc(project)}/pipelines/#{enc(pipeline)}/visibility"
+      )
+    end
+
+    # PUT /api/v1/private/projects/:project/pipelines/:pipeline/visibility
+    # Set pipeline visibility within a project.
+    # @param project [String]
+    # @param pipeline [String]
+    # @param body [Hash]
+    def set_pipeline_visibility(project, pipeline, body = {})
+      @http.put(
+        "/api/v1/private/projects/#{enc(project)}/pipelines/#{enc(pipeline)}/visibility",
+        body
+      )
+    end
+
+    private
+
+    def enc(s)
+      URI.encode_www_form_component(s.to_s)
+    end
+  end
+end
+