melaya 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f0422c0d8f2f64f64d6641922f92d3364a6eabfb8c91863fdd9a4d59d7b552a0
-  data.tar.gz: 8a1aab35e1c76376d3357790636b32a6e3975219d57cc5d6eff7008bb54f9c5c
+  metadata.gz: 47fefbce18553e5a38d414eb96ad35da805b1bb4d685e9fd809206b00d2dbe68
+  data.tar.gz: 822418410f53fc0cb03caf2fd06a8a122db8082e58ded4c68f6032dea5898965
 SHA512:
-  metadata.gz: cbbf35e9a198eda11dba80ef9483d0bb40690f42bfb845bfcdb7ac0139a91b9c95b358e070b1f81768bb345305397319877b6837eb85e0fe9d17326ae572c06a
-  data.tar.gz: 07bf7a75bf51ef0bfa1c8199471ccdada0125e69ba938d0ac7adeb62c36adb0bdcdeccb2b7a43a18f6090c467f1d564a13b2d0c7db52678806f944fc59c212df
+  metadata.gz: 7680af7ede9b7cfa4e4fa2c6860c3e40260c488f2a3b6906930382b9a44ab36862ff8117ac6ce533bcac5fe5d7b8f12c4961257a61c149ebf6c07953da84e1e7
+  data.tar.gz: 6e929c21c54d44b99c0cfffa1d717ca85ca95bf0c95ecbc1d2e260e9343e8cc4383d47e38d7b9ffe965aa15798e7ee202ae2230f2fc4de75a21b15bdd2aa500e

data/README.md

@@ -4,6 +4,8 @@
 
 Official SDK for the **[Melaya](https://melaya.org)** Agent Builder and flagship Mobile Device Control APIs. Trading namespaces are included only as a preview of a later product.
 
+**Melaya products:** [Melaya Agents](https://melaya.org/en/product/agentic-framework) · [Melaya Assistant](https://melaya.org/en/product/assistant) · [Device Control](https://melaya.org/en/product/agentic-device-control) · [Browser Control](https://melaya.org/en/product/agentic-browser-control) · [MCP Server](https://melaya.org/en/product/mcp) · [Melaya Marketing](https://melaya.org/en/product/marketing)
+
 - Zero runtime gem dependencies (stdlib `net/http`, `openssl`, `json` only).
 - Full Agent Builder lifecycle: projects, pipelines, templates, Connectors, HITL, evals, events, billing, team, and runner management.
 - Catalogs of **1,500+ scoped tools**, **100+ specialized subagents**, and **20+ model providers** (runtime catalog endpoints are the source of truth).
@@ -48,26 +50,30 @@ A Melaya platform key is required. "No app API required" means Device Control op
 
 Configure provider credentials through Melaya Connectors first. Never include a provider key in pipeline configuration or per-run overrides.
 
+A pipeline's run is generated **only** from `config["steps"]` — a top-level `agents` list alone produces an **empty** pipeline. Every agent a step runs must be embedded inline on that step's `"agent"` key. There is no `prompt` field: the two prompt fields are `instruction` (the task) and, optionally, `system_prompt_override`.
+
 ```ruby
 melaya.agents.pipelines.create(
   name:    "mobile-review",
   project: "Operations",
-  model_provider: "anthropic",
-  model_name:     "claude-sonnet-4-6",
-  agents: [{
-    "name"        => "mobile-operator",
-    "role"        => "Careful mobile operator",
-    "instruction" => "Read before acting. Never send, publish, or delete.",
-    "agent_tools" => [
-      "phone_get_screen_tree",
-      "phone_current_app",
-      "phone_open_app",
-      "phone_click_text",
-      "phone_back",
-      "phone_wait"
-    ]
+  steps: [{
+    "kind"  => "agent",
+    "agent" => {
+      "name"        => "mobile-operator",
+      "role"        => "Careful mobile operator",
+      "instruction" => "Read before acting. Never send, publish, or delete.",
+      "model"       => { "provider" => "anthropic", "name" => "claude-sonnet-4-6" },
+      "agent_tools" => [
+        "phone_get_screen_tree",
+        "phone_current_app",
+        "phone_open_app",
+        "phone_click_text",
+        "phone_back",
+        "phone_wait"
+      ],
+      "human_approval_tools" => []
+    }
   }],
-  steps: [{ "kind" => "agent", "agent" => { "name" => "mobile-operator" } }],
   maxCostUsd: 1.00
 )
 
@@ -82,6 +88,64 @@ status = melaya.agents.pipelines.run_status("mobile-review", run_id)
 melaya.events.on_run_update(run_id) { |e| puts e["event_type"] }
 ```
 
+Other config fields worth knowing: `"hitl_mode"` (`"safe"` default | `"autonomous"` | `"payments_only"` — only `"safe"` honours each agent's `human_approval_tools`), `"connector_source"` (`"personal"` | `"project"`), `"force_local_runner"`, and `"inputs"` (declared run-input fields, see `run_inputs:` below).
+
+`get` returns an **envelope**, not a bare config — `{ "name", "client", "config", "code", "docs" }`. To edit and save, mutate `envelope["config"]` and pass that to `update`:
+
+```ruby
+envelope = melaya.pipelines.get("mobile-review", project: "Operations")
+config   = envelope["config"]
+config["steps"][0]["agent"]["model"] = { "provider" => "anthropic", "name" => "claude-opus-4-8" }
+melaya.pipelines.update("mobile-review", config: config, project: "Operations")
+```
+
+### Quick start: run inputs and file attachments
+
+```ruby
+# Upload a file ahead of a run, then reference it by file_id
+upload = melaya.pipelines.upload_run_file("mobile-review", "screenshot", File.open("shot.png", "rb"))
+
+run = melaya.pipelines.run("mobile-review",
+  project: "Operations",
+  run_inputs: {
+    "brief"  => "Review the attached screenshot for policy violations.",
+    "values" => { "screenshot" => { "file_id" => upload["file_id"] } }
+  }
+)
+
+# Download a run's own input file back (raw bytes — do not JSON-parse)
+bytes = melaya.pipelines.run_input_file("mobile-review", run["run_id"], 0)
+```
+
+### Quick start: call a connector tool directly
+
+Call any of your already-connected service tools (Gmail, Slack, Stripe, ...) —
+the same surface the MCP server and the Melaya Assistant use. This is
+different from `melaya.connectors`, which only stores project credentials.
+
+Reads run immediately. Writes default to `approval: "required"`, which stages
+the same approval card the Assistant raises in the Melaya app and returns
+HTTP 202 (a success, not an error) with a `requestId` to poll; pass
+`approval: "none"` to run a write immediately instead (still audit-logged).
+Money-moving/trading tools are always refused, under both approval modes. No
+method here ever accepts or returns a credential value.
+
+```ruby
+melaya.agents.connector_tools.services                      # { "services" => [...], "toolCounts" => {...} }
+melaya.agents.connector_tools.search("unread email")        # discover tools by keyword
+melaya.agents.connector_tools.describe("gmail_list_messages")
+
+# Read — runs immediately
+result = melaya.agents.connector_tools.call("gmail_list_messages", args: { max_results: 5 })
+puts result["result"]
+
+# Write — staged for approval by default; block until decided (or it times out)
+outcome = melaya.agents.connector_tools.call_and_wait("gmail_send", args: { to: "a@b.com" })
+
+# Also reachable via the flat alias:
+melaya.connector_tools.services
+```
+
 ## Trading quick start (preview)
 
 ```ruby
@@ -201,25 +265,28 @@ Public market-data and account/strategy reads work with the `mk_` key alone. **L
 | Auth | `auth.login`, `verify_mfa`, `register`, `verify_signup`, `resend_verification`, `me`, `check`, `change_password`, `forgot_password`, `reset_password`, `mobile_handoff`, `permissions`, `refresh` |
 | MFA | `auth.mfa_status`, `mfa_setup`, `mfa_confirm` (also via `melaya.platform.mfa`) |
 | Projects | `projects.list`, `create`, `rename`, `runner_projects` |
-| Connectors | `connectors.connected_services`, `set`, `delete`, `env_handle`, `google_oauth_start` |
-| Credentials | `credentials.list`, `connected_services`, `get`, `set`, `delete`, `test`, `list_models`, plus operator-profile, OAuth, and RAG helpers |
-| Pipelines | `pipelines.create`, `get`, `update`, `delete_pipeline`, `list_pipelines`, `run`, `run_ids`, `run_status`, `cancel_run`, `outputs`, `output`, `preview_code`, `tools`, `subagents`, `instantiate_template`, `build_with_ai` |
+| Connectors | `connectors.connected_services`, `set`, `delete`, `env_handle`, `google_oauth_start`, `apply_personal`, `shared_by`, `google_status`, `google_set_default`, `google_disconnect`, `db_test_start`, `db_test_status` |
+| Connector Tools | `connector_tools.services`, `search`, `describe`, `test`, `connect`, `call`, `call_status`, `call_and_wait` |
+| Credentials | `credentials.list`, `connected_services`, `get`, `set`, `delete`, `test`, `list_models`, `google_status`, `google_set_default`, `google_disconnect`, `db_test_start`, `db_test_status`, `telegram_qr_start`, `telegram_qr_poll`, `whatsapp_signup_config`, `whatsapp_signup_exchange`, `tiktok_creator_info`, `substack_email_link_send`, `substack_email_link_redeem`, plus operator-profile, OAuth, and RAG helpers |
+| Pipelines | `pipelines.create`, `get`, `update`, `delete_pipeline`, `list_pipelines`, `run`, `upload_run_file`, `run_inputs`, `run_input_file`, `run_active`, `run_ids`, `run_status`, `cancel_run`, `outputs`, `output`, `preview_code`, `tools`, `subagents`, `instantiate_template`, `build_with_ai` |
+| Pipeline docs & RAG | `pipelines.list_docs`, `upload_doc`, `delete_doc`, `upload_retrieval_doc`, `ingest_retrieval`, `delete_retrieval_doc` |
 | Runs & traces | `pipelines.list`, `recent`, `count`, `traces`, `trace`, `trace_stats`, `delete_traces` |
+| Tool-call audit | `pipelines.project_tool_calls`, `project_tool_call_facets`, `tool_call_detail` |
 | Schedules | `pipelines.list_schedules`, `get_schedule`, `upsert_schedule`, `pause_schedule`, `resume_schedule` |
 | Overview | `pipelines.overview`, `model_prices`, `chart_data`, `cost_breakdown`, `server_version` |
 | Templates | `templates.list`, `list_global`, `list_validated`, `save`, `update`, `duplicate`, `delete`, `share`, `share_targets`, `list_assignments`, `assign(id, user_id:` \| `project_id:)`, `unassign(id, user_id:` \| `project_id:)` |
-| Phone | `phone.pair`, `list_devices`, `revoke_device`, `screen_tree`, `list_apps`, `set_allowed_apps`, `register_active_run` |
+| Phone | `phone.pair`, `list_devices`, `revoke_device`, `screen_tree`, `list_apps`, `set_allowed_apps`, `register_active_run`, `grant_app`, `request_cast` |
 | HITL | `hitl.pending`, `history`, `approve`, `reject`, `bulk_decide`, `run_tool_stats`, `run_tool_stats_by_agent`, `run_messages`, `run_tool_calls` |
-| Evals | `evals.list_runs`, `summary`, `run_detail`, `compare`, `memory_graph`, `run_memory`, `crew_memory`, `benchmarks` |
+| Evals | `evals.list_runs`, `summary`, `run_detail`, `compare`, `memory_graph`, `run_memory`, `crew_memory`, `edit_crew_memory_entry`, `delete_crew_memory_entry`, `benchmarks` |
 | Events | `events.on_run_update`, `on_init_phase`, `on_project_event`, `on_hitl_approval`, `on_pipeline_created`, `on_pipeline_updated`, `on_pipeline_deleted`, `leave_run`, `leave_project`, `close` |
-| Billing | `billing.subscription`, `create_checkout`, `create_portal`, `plans`, `credits`, `ai_credits`, `portfolio_ideas_credits`, `risk_monitoring_credits` |
-| Accounts | `accounts.export_data`, `remove_key`, `update_profile` |
+| Billing | `billing.subscription`, `create_checkout`, `create_portal`, `plans`, `credits`, `ai_credits`, `portfolio_ideas_credits`, `risk_monitoring_credits`, `ambassador_perk`, `redeem_code`, `reserved_promo` |
+| Accounts | `accounts.export_data`, `remove_key`, `update_profile`, `resend_email_verification`, `verify_email` |
 | Runner | `runner.create_token`, `list_tokens`, `revoke_token` |
-| Team | `team.list_members`, `invite`, `create_invite_link`, `accept_invite`, `update_member_role`, `remove_member`, `get_pipeline_visibility`, `set_pipeline_visibility` |
+| Team | `team.list_members`, `invite`, `create_invite_link`, `accept_invite`, `update_member_role`, `remove_member`, `transfer_ownership`, `get_pipeline_visibility`, `set_pipeline_visibility` |
 | Assistant | `assistant.get_profile`, `set_profile` |
 | Bugs | `bugs.create`, `list_mine`, `get`, `add_comment`, `list_notifications`, `mark_notifications_read` |
 
-Every area is also reachable through the domain namespaces: `melaya.agents.*` (pipelines/runs, hitl, assistant, phone, evals, models) and `melaya.platform.*` (projects, credentials, connectors, billing, team, templates, overview, runner, auth, mfa, accounts, bugs, events).
+Every area is also reachable through the domain namespaces: `melaya.agents.*` (pipelines/runs, hitl, assistant, phone, evals, models, connector_tools) and `melaya.platform.*` (projects, credentials, connectors, billing, team, templates, overview, runner, auth, mfa, accounts, bugs, events).
 
 ### Trading (preview — not generally available)
 
@@ -237,7 +304,7 @@ Every area is also reachable through the domain namespaces: `melaya.agents.*` (p
 | Public streaming | `stream.ticker`, `orderbook`, `ohlcv`, `trades`, `liquidations` |
 | Private streaming | `stream.strategies`, `stream.private` |
 
-Full docs: **[melaya.org/docs](https://melaya.org/docs)**.
+Full docs: **[melaya.org/documentation](https://melaya.org/documentation)**.
 
 ## License
 

data/lib/melaya/accounts.rb

@@ -19,6 +19,19 @@ module Melaya
       @http.post("/api/v1/private/accounts/export")
     end
 
+    # POST /api/v1/private/accounts/resend-email-verification
+    # Send a verification email to the signed-in account's saved address.
+    def resend_email_verification
+      @http.post("/api/v1/private/accounts/resend-email-verification")
+    end
+
+    # POST /api/v1/private/accounts/verify-email
+    # Confirm saved-email ownership without creating a login session.
+    # @param token [String] 64 hex-char verification token
+    def verify_email(token)
+      @http.post("/api/v1/private/accounts/verify-email", "token" => token)
+    end
+
     # DELETE /api/v1/private/keys/:keyId
     # Remove a stored CEX API key.
     # @param key_id [String]

data/lib/melaya/billing.rb

@@ -40,6 +40,29 @@ module Melaya
       @http.get("/api/v1/billing/plans")
     end
 
+    # ── Promos ────────────────────────────────────────────────────────────────
+
+    # GET /api/v1/private/billing/ambassador-perk
+    # The ambassador discount the caller is entitled to, or nil.
+    def ambassador_perk
+      @http.get("/api/v1/private/billing/ambassador-perk")
+    end
+
+    # POST /api/v1/private/billing/redeem-code
+    # Redeem a single-use promo code to the caller's account; the discount
+    # applies on the next checkout.
+    # @param code [String]
+    def redeem_code(code)
+      @http.post("/api/v1/private/billing/redeem-code", "code" => code)
+    end
+
+    # GET /api/v1/private/billing/reserved-promo
+    # The caller's active reserved promo (for the subscription modal to
+    # reflect), or nil.
+    def reserved_promo
+      @http.get("/api/v1/private/billing/reserved-promo")
+    end
+
     # ── Credits ───────────────────────────────────────────────────────────────
 
     # GET /api/v1/private/accounts/credits

data/lib/melaya/connector_tools.rb

@@ -0,0 +1,177 @@
+# frozen_string_literal: true
+
+module Melaya
+  # Connector Tools API — call any of the user's connected-service tools
+  # (Gmail, Slack, Stripe, ...) directly. Same surface the MCP server and the
+  # Melaya Assistant use: list connected services, discover tools by keyword,
+  # describe one, test a stored connector, start connecting a service, and
+  # call a tool.
+  #
+  # Do not confuse this with +melaya.connectors+ (project-scoped credential
+  # storage) — this module only calls already-connected tools.
+  #
+  # Maps to /api/v1/private/connector-tools/*.
+  #
+  # Read tools run immediately. A write tool defaults to +approval: "required"+
+  # and is staged as the same approval card the Assistant raises in the
+  # Melaya app: +call+ returns HTTP 202 (a success, not an error) with a
+  # +requestId+; poll +call_status+ — or use +call_and_wait+ — until the user
+  # has decided, and the write runs exactly once, on the first poll after
+  # approval. Pass +approval: "none"+ to run a write immediately instead; it
+  # is still audit-logged. Tools that move money or trade are always
+  # refused, under BOTH approval modes. No method here ever accepts or
+  # returns a credential value.
+  #
+  # @example
+  #   services = melaya.agents.connector_tools.services
+  #   found    = melaya.agents.connector_tools.search("unread email")
+  #   info     = melaya.agents.connector_tools.describe("gmail_list_messages")
+  #
+  #   # Read — runs immediately
+  #   read = melaya.agents.connector_tools.call("gmail_list_messages", args: { max_results: 5 })
+  #   puts read["result"]
+  #
+  #   # Write — staged for approval by default
+  #   staged = melaya.agents.connector_tools.call("gmail_send", args: { to: "a@b.com" })
+  #   outcome = melaya.agents.connector_tools.call_status(staged["requestId"])
+  #
+  #   # Or block until the approval is decided (or times out)
+  #   outcome = melaya.agents.connector_tools.call_and_wait("gmail_send", args: { to: "a@b.com" })
+  #
+  #   # Also reachable via the flat alias:
+  #   melaya.connector_tools.services
+  class ConnectorToolsAPI
+    BASE = "/api/v1/private/connector-tools"
+
+    # Statuses that end a +call_and_wait+ poll loop.
+    TERMINAL_STATUSES = %w[done rejected expired].freeze
+
+    # Defaults mirrored from the spec: poll every 3s, give up after 10 minutes.
+    DEFAULT_POLL_INTERVAL_S = 3
+    DEFAULT_WAIT_TIMEOUT_S  = 600
+
+    def initialize(http)
+      @http = http
+    end
+
+    # GET /connector-tools/services
+    # Connected services and built-in tool counts. Names only.
+    # @return [Hash] { "services" => [String], "builtIn" => "melaya_core",
+    #   "toolCounts" => { service => { "readTools" => Integer, "writeTools" => Integer } } }
+    def services
+      @http.get("#{BASE}/services")
+    end
+
+    # GET /connector-tools/search?q=&limit=
+    # Discover tools by plain business keywords (e.g. "unread email").
+    # @param q [String] required — plain business keywords
+    # @param limit [Integer, nil] 1-50, default 15
+    # @return [Hash] { "query" => String, "services" => [String], "tools" => [Hash] }
+    def search(q, limit: nil)
+      @http.get("#{BASE}/search", compact("q" => q, "limit" => limit))
+    end
+
+    # GET /connector-tools/tools/:tool
+    # Full description and parameters for one tool.
+    # @param tool [String]
+    # @return [Hash] ToolInfo — raises MelayaError (404) when unknown, or not
+    #   unlocked by any of your connected services.
+    def describe(tool)
+      @http.get("#{BASE}/tools/#{enc(tool)}")
+    end
+
+    # POST /connector-tools/test { service }
+    # Test the STORED credential for a connected service.
+    # Raises MelayaError (504, code "timeout") if the service does not
+    # answer within 30 seconds server-side.
+    # @param service [String]
+    # @return [Hash] { "service" => String, "success" => Boolean, "message" => String }
+    def test(service)
+      @http.post("#{BASE}/test", "service" => service)
+    end
+
+    # POST /connector-tools/connect { service }
+    # Start connecting a service. Never accepts a secret — OAuth services
+    # return an authorization URL to open; other kinds return where to store
+    # the credential in the Melaya app.
+    # @param service [String]
+    # @return [Hash] { "service", "kind" => "oauth"|"oauth_unavailable"|"interactive_login"|"api_key",
+    #   "authorizationUrl" => String (oauth only), "connectUrl" => String, "message" => String }
+    def connect(service)
+      @http.post("#{BASE}/connect", "service" => service)
+    end
+
+    # POST /connector-tools/call { tool, args, approval }
+    #
+    # A read tool (or a write with approval: "none") runs immediately and
+    # returns 200 with the result. A write with approval: "required"
+    # (default) is staged and returns 202 — a success, not an error — with a
+    # +requestId+ to poll via +call_status+ (or +call_and_wait+).
+    #
+    # Money-moving/trading tools are refused under both approval modes, and
+    # any other error response (400/403/404/502/503) is raised as a
+    # MelayaError by the underlying HTTP client, same as every other call in
+    # this SDK.
+    #
+    # @param tool [String]
+    # @param args [Hash] tool arguments
+    # @param approval [String] "required" (default, stage for approval) or "none" (run immediately)
+    # @return [Hash] { "status" => "done", "tool", "readOnly", "result" => String } or
+    #   { "status" => "pending_approval", "tool", "requestId", "message" }
+    def call(tool, args: {}, approval: "required")
+      @http.post("#{BASE}/call", "tool" => tool, "args" => args || {}, "approval" => approval)
+    end
+
+    # GET /connector-tools/calls/:requestId
+    # Outcome of a staged write. Raises MelayaError (404) when the request is
+    # unknown or has expired.
+    # @param request_id [String]
+    # @return [Hash] one of:
+    #   { "requestId", "tool", "status" => "pending" | "running" | "expired" }
+    #   { "requestId", "tool", "status" => "done", "ok" => Boolean, "result"/"error" => String }
+    #   { "requestId", "tool", "status" => "rejected", "reason" => String }
+    def call_status(request_id)
+      @http.get("#{BASE}/calls/#{enc(request_id)}")
+    end
+
+    # Helper: call a tool and, if it is staged for approval, block polling
+    # +call_status+ until the user has decided (done/rejected) or the
+    # request expires, then return that outcome. If the tool ran immediately
+    # (a read, or approval: "none"), returns that response as-is with no
+    # polling. Synchronous/blocking, like the rest of this SDK.
+    #
+    # @param tool [String]
+    # @param args [Hash]
+    # @param approval [String] "required" (default) or "none"
+    # @param poll_interval_s [Numeric] seconds between polls, default 3
+    # @param timeout_s [Numeric] give up polling after this many seconds and
+    #   return the last-seen (non-terminal) status, default 600 (10 minutes)
+    # @return [Hash] the immediate +call+ response, or the final +call_status+ outcome
+    def call_and_wait(tool, args: {}, approval: "required",
+                       poll_interval_s: DEFAULT_POLL_INTERVAL_S,
+                       timeout_s: DEFAULT_WAIT_TIMEOUT_S)
+      resp = call(tool, args: args, approval: approval)
+      return resp unless resp.is_a?(Hash) && resp["status"] == "pending_approval"
+
+      request_id = resp["requestId"]
+      deadline   = Time.now + timeout_s
+      loop do
+        outcome = call_status(request_id)
+        return outcome if outcome.is_a?(Hash) && TERMINAL_STATUSES.include?(outcome["status"])
+        return outcome if Time.now >= deadline
+
+        sleep(poll_interval_s)
+      end
+    end
+
+    private
+
+    def enc(s)
+      URI.encode_www_form_component(s.to_s)
+    end
+
+    def compact(hash)
+      hash.reject { |_, v| v.nil? }
+    end
+  end
+end

data/lib/melaya/connectors.rb

@@ -58,6 +58,79 @@ module Melaya
       @http.post("/api/v1/private/projects/#{enc(project)}/connectors/google/oauth", body)
     end
 
+    # POST /api/v1/private/projects/:project/connectors/:service/apply-personal
+    # Share the caller's OWN personal connector credential into the project
+    # pool (editor or owner only). Values stay server-side.
+    # @param project [String]
+    # @param service [String]
+    # @param google_capabilities [Array<String>, nil] restrict a Google
+    #   connector to these capabilities only, e.g. "gmail", "calendar",
+    #   "drive", "sheets", "docs", "search_console", "youtube", "google_ads",
+    #   "analytics", "meet", "slides"
+    def apply_personal(project, service, google_capabilities: nil)
+      body = compact("googleCapabilities" => google_capabilities)
+      @http.post("/api/v1/private/projects/#{enc(project)}/connectors/#{enc(service)}/apply-personal", body)
+    end
+
+    # GET /api/v1/private/projects/:project/connectors/shared-by
+    # Which member shared each connected project connector (usernames only —
+    # values are never returned).
+    # @param project [String]
+    def shared_by(project)
+      @http.get("/api/v1/private/projects/#{enc(project)}/connectors/shared-by")
+    end
+
+    # ── Google OAuth (status / defaults / disconnect) ─────────────────────────
+
+    # GET /api/v1/private/projects/:project/connectors/google/status
+    # List the Google OAuth capabilities actually granted to a project.
+    # @param project [String]
+    def google_status(project)
+      @http.get("/api/v1/private/projects/#{enc(project)}/connectors/google/status")
+    end
+
+    # PUT /api/v1/private/projects/:project/connectors/google/default
+    # Select the project's connected Google account used by one capability.
+    # @param project [String]
+    # @param capability [String] e.g. "gmail", "calendar", "drive", "sheets", ...
+    # @param account_id [String] 24-hex-char connected-account id
+    def google_set_default(project, capability, account_id)
+      @http.put("/api/v1/private/projects/#{enc(project)}/connectors/google/default",
+        "capability" => capability, "accountId" => account_id)
+    end
+
+    # DELETE /api/v1/private/projects/:project/connectors/google/access
+    # Disconnect one Google product, or an entire Google account, from a project.
+    # @param project [String]
+    # @param account_id [String] 24-hex-char connected-account id
+    # @param capability [String, nil] omit to disconnect the whole account
+    def google_disconnect(project, account_id, capability: nil)
+      body = compact("accountId" => account_id, "capability" => capability)
+      @http.delete("/api/v1/private/projects/#{enc(project)}/connectors/google/access", {}, body)
+    end
+
+    # ── Database connector test (runner-probed) ───────────────────────────────
+
+    # POST /api/v1/private/projects/:project/connectors/db-test
+    # Test a project database connector from the user's own runner (reaches
+    # IP-allow-listed / VPC hosts a cloud probe never could).
+    # @param project [String]
+    # @param service [String] one of "postgres", "mysql", "snowflake", "databricks", "sqlite"
+    # @param credentials [Hash, nil] freshly-typed credentials to test instead of the stored ones
+    # @return [Hash] { "sessionId" => String, ... }
+    def db_test_start(project, service, credentials: nil)
+      body = compact("service" => service, "credentials" => credentials)
+      @http.post("/api/v1/private/projects/#{enc(project)}/connectors/db-test", body)
+    end
+
+    # GET /api/v1/private/projects/:project/connectors/db-test/:sessionId
+    # Poll a project DB connector runner-test result.
+    # @param project [String]
+    # @param session_id [String]
+    def db_test_status(project, session_id)
+      @http.get("/api/v1/private/projects/#{enc(project)}/connectors/db-test/#{enc(session_id)}")
+    end
+
     private
 
     def enc(s)

data/lib/melaya/credentials.rb

@@ -242,6 +242,124 @@ module Melaya
       @http.post("/api/v1/private/credentials/telegram/auth/2fa", body)
     end
 
+    # ── Telegram user QR login (alternative to the phone-number flow above) ────
+
+    # POST /api/v1/private/credentials/telegram/auth/qr/start
+    # Start Telegram user QR login.
+    # @param api_id [Integer]
+    # @param api_hash [String]
+    # @return [Hash] { "handle" => String, ... } — handle starts with "tgauth_"
+    def telegram_qr_start(api_id, api_hash)
+      @http.post("/api/v1/private/credentials/telegram/auth/qr/start",
+        "api_id" => api_id, "api_hash" => api_hash)
+    end
+
+    # POST /api/v1/private/credentials/telegram/auth/qr/poll
+    # Poll Telegram user QR login.
+    # @param handle [String] starts with "tgauth_"
+    def telegram_qr_poll(handle)
+      @http.post("/api/v1/private/credentials/telegram/auth/qr/poll", "handle" => handle)
+    end
+
+    # ── Google OAuth (status / defaults / disconnect) ──────────────────────────
+
+    # GET /api/v1/private/credentials/google/status
+    # List the Google OAuth capabilities actually granted to the caller.
+    def google_status
+      @http.get("/api/v1/private/credentials/google/status")
+    end
+
+    # PUT /api/v1/private/credentials/google/default
+    # Select the connected Google account used by one capability.
+    # @param capability [String] e.g. "gmail", "calendar", "drive", "sheets",
+    #   "docs", "search_console", "youtube", "google_ads", "analytics", "meet", "slides"
+    # @param account_id [String] 24-hex-char connected-account id
+    def google_set_default(capability, account_id)
+      @http.put("/api/v1/private/credentials/google/default",
+        "capability" => capability, "accountId" => account_id)
+    end
+
+    # DELETE /api/v1/private/credentials/google/access
+    # Disconnect one Google product, or an entire Google account.
+    # @param account_id [String] 24-hex-char connected-account id
+    # @param capability [String, nil] omit to disconnect the whole account
+    def google_disconnect(account_id, capability: nil)
+      body = compact("accountId" => account_id, "capability" => capability)
+      @http.delete("/api/v1/private/credentials/google/access", {}, body)
+    end
+
+    # ── Database connector test (runner-probed) ────────────────────────────────
+
+    # POST /api/v1/private/credentials/db-test
+    # Test a database connector from the user's own runner (reaches
+    # IP-allow-listed / VPC hosts a cloud probe never could).
+    # @param service [String] one of "postgres", "mysql", "snowflake", "databricks", "sqlite"
+    # @param credentials [Hash, nil] freshly-typed credentials to test instead of the stored ones
+    # @return [Hash] { "sessionId" => String, ... }
+    def db_test_start(service, credentials: nil)
+      body = compact("service" => service, "credentials" => credentials)
+      @http.post("/api/v1/private/credentials/db-test", body)
+    end
+
+    # GET /api/v1/private/credentials/db-test/:sessionId
+    # Poll a DB connector runner-test result.
+    # @param session_id [String]
+    def db_test_status(session_id)
+      @http.get("/api/v1/private/credentials/db-test/#{enc(session_id)}")
+    end
+
+    # ── WhatsApp Embedded Signup ────────────────────────────────────────────────
+
+    # GET /api/v1/private/credentials/whatsapp/embedded-signup/config
+    # WhatsApp Embedded Signup config (appId/configId) for the client SDK.
+    def whatsapp_signup_config
+      @http.get("/api/v1/private/credentials/whatsapp/embedded-signup/config")
+    end
+
+    # POST /api/v1/private/credentials/whatsapp/embedded-signup/exchange
+    # Exchange a WhatsApp Embedded Signup code for a connected number.
+    # @param code [String]
+    # @param phone_number_id [String]
+    # @param waba_id [String]
+    # @param project [String, nil]
+    def whatsapp_signup_exchange(code:, phone_number_id:, waba_id:, project: nil)
+      body = compact(
+        "code"          => code,
+        "phoneNumberId" => phone_number_id,
+        "wabaId"        => waba_id,
+        "project"       => project
+      )
+      @http.post("/api/v1/private/credentials/whatsapp/embedded-signup/exchange", body)
+    end
+
+    # ── TikTok ──────────────────────────────────────────────────────────────────
+
+    # GET /api/v1/private/credentials/tiktok/creator-info
+    # The connected TikTok account's creator info (nickname, allowed privacy
+    # levels, interaction availability) for the compliant Post-to-TikTok
+    # approval UI.
+    def tiktok_creator_info
+      @http.get("/api/v1/private/credentials/tiktok/creator-info")
+    end
+
+    # ── Substack email-link sign-in ─────────────────────────────────────────────
+
+    # POST /api/v1/private/credentials/substack/email-link
+    # Ask Substack to email a sign-in link.
+    # @param email [String]
+    def substack_email_link_send(email)
+      @http.post("/api/v1/private/credentials/substack/email-link", "email" => email)
+    end
+
+    # POST /api/v1/private/credentials/substack/email-link/redeem
+    # Finish Substack sign-in with the emailed link.
+    # @param link [String]
+    # @param email [String, nil]
+    def substack_email_link_redeem(link, email: nil)
+      body = compact("link" => link, "email" => email)
+      @http.post("/api/v1/private/credentials/substack/email-link/redeem", body)
+    end
+
     private
 
     def enc(s)