@cosmoops/connect-sdk 0.6.0 → 0.7.0

package/dist/cjs/server/client.js

@@ -14,7 +14,7 @@ const analytics_js_1 = require("./resources/analytics.js");
 const otp_js_1 = require("./resources/otp.js");
 const sessions_js_1 = require("./resources/sessions.js");
 exports.DEFAULT_BASE_URL = "https://connect.cosmoops.com";
-const SERVICE_API_PREFIX = "/api/v1/service";
+const APPLICATION_API_PREFIX = "/api/v1/application";
 /**
  * Refuses to build a client in a browser.
  *
@@ -43,9 +43,9 @@ function assertNotBrowser() {
         "in browser code instead; it talks to your own origin and holds no credential.");
 }
 /**
- * The CosmoOps Connect service-partner API.
+ * The CosmoOps Connect application-partner API.
  *
- * Covers `/api/v1/service/*` and nothing else - the surface a service platform
+ * Covers `/api/v1/application/*` and nothing else - the surface an application platform
  * integrates against. Connect's internal API is not part of this package and
  * never will be.
  *
@@ -56,7 +56,7 @@ function assertNotBrowser() {
  * });
  *
  * const session = await connect.identity.exchangeCode({ code, redirectUri });
- * const { ready } = await connect.entitlements.getReadiness(session.user.organizationId);
+ * const { ready } = await connect.entitlements.getReadiness(session.user.workspaceId);
  * ```
  *
  * Every failure throws a `ConnectError` carrying a stable `code`. Nothing here
@@ -65,27 +65,27 @@ function assertNotBrowser() {
 class ConnectClient {
     /** "Login with Connect" - the OAuth2 handshake and the session after it. */
     identity;
-    /** What a signed-in member may do on your service. */
+    /** What a signed-in member may do on your application. */
     access;
-    /** The services an organization can open - for a launcher grid. */
+    /** The applications a workspace can open - for a launcher grid. */
     apps;
-    /** Whether a workspace may use your service, and on what plan. */
+    /** Whether a workspace may use your application, and on what plan. */
     entitlements;
     /** Your plan catalog, and metering usage against add-on balances. */
     billing;
-    /** Files in an organization's Drive. */
+    /** Files in a workspace's Drive. */
     drive;
     /** RAG chat and structured extraction. */
     ai;
     /** WhatsApp/SMS phone verification. */
     otp;
-    /** Feature events into the Console's audit log, filterable to your service. */
+    /** Feature events into the Console's audit log, filterable to your application. */
     logs;
-    /** Emit product events and read back this service's aggregated numbers. */
+    /** Emit product events and read back this application's aggregated numbers. */
     analytics;
-    /** This Connect account's own login sessions - account-wide, not scoped to this service. Requires the `sessions:manage` scope. */
+    /** This Connect account's own login sessions - account-wide, not scoped to this application. Requires the `sessions:manage` scope. */
     sessions;
-    /** Composio-hosted third-party connections (Google Calendar, Slack, ...) an organization has connected. */
+    /** Composio-hosted third-party connections (Google Calendar, Slack, ...) a workspace has connected. */
     integrations;
     constructor(options) {
         assertNotBrowser();
@@ -94,7 +94,7 @@ class ConnectClient {
         }
         const appBaseUrl = (options.baseUrl ?? exports.DEFAULT_BASE_URL).replace(/\/+$/, "");
         const transport = {
-            baseUrl: `${appBaseUrl}${SERVICE_API_PREFIX}`,
+            baseUrl: `${appBaseUrl}${APPLICATION_API_PREFIX}`,
             apiKey: options.apiKey,
             timeoutMs: options.timeoutMs ?? 20_000,
             maxRetries: options.maxRetries ?? 2,
@@ -102,7 +102,7 @@ class ConnectClient {
             userAgent: `cosmoops-connect-sdk/${exports.SDK_VERSION}`,
         };
         // `authorizeUrl` points at the app, not the API prefix - it is a browser
-        // redirect, not a service call, so identity takes both.
+        // redirect, not an application call, so identity takes both.
         this.identity = new identity_js_1.IdentityResource(transport, options.clientId ?? null, appBaseUrl);
         this.access = new access_js_1.AccessResource(transport);
         this.apps = new apps_js_1.AppsResource(transport);
@@ -119,4 +119,4 @@ class ConnectClient {
 }
 exports.ConnectClient = ConnectClient;
 /** Kept in step with `package.json` by `sdk.test.ts`. */
-exports.SDK_VERSION = "0.6.0";
+exports.SDK_VERSION = "0.7.0";

package/dist/cjs/server/handler.js

@@ -94,9 +94,9 @@ function redirect(location, cookies = []) {
  * export { handler as GET, handler as POST };
  * ```
  *
- * Every route resolves the organization from the caller's *own* session, never
+ * Every route resolves the workspace from the caller's *own* session, never
  * from a query parameter. A browser must not be able to ask about an
- * organization it is not signed into, and a client-supplied `organizationId`
+ * workspace it is not signed into, and a client-supplied `workspaceId`
  * is exactly that hole.
  */
 function createConnectHandler(options) {
@@ -163,7 +163,7 @@ function createConnectHandler(options) {
         }
         return token;
     }
-    /** Signed-in identity plus the organization it belongs to - the first read every other route needs. */
+    /** Signed-in identity plus the workspace it belongs to - the first read every other route needs. */
     async function whoami(request) {
         return client.identity.getUser(await requireToken(request));
     }
@@ -173,32 +173,32 @@ function createConnectHandler(options) {
             // Signed out is a normal state for a page rendering a Login button, not
             // an error - `user: null` rather than a 401 the client must catch.
             if (!token)
-                return json({ user: null, subscription: null, serviceRole: null });
+                return json({ user: null, subscription: null, applicationRole: null });
             return json(await client.identity.getUser(token));
         },
         "GET /entitlements": async (request) => {
             const { user } = await whoami(request);
             const [readiness, subscription] = await Promise.all([
-                client.entitlements.getReadiness(user.organizationId),
-                client.entitlements.getSubscription(user.organizationId),
+                client.entitlements.getReadiness(user.workspaceId),
+                client.entitlements.getSubscription(user.workspaceId),
             ]);
             return json({ readiness, subscription });
         },
         "GET /plans": async () => json(await client.billing.listPlans()),
-        // Organization comes from the caller's own session, same as every other
+        // Workspace comes from the caller's own session, same as every other
         // route here - a browser must not be able to ask what another workspace
         // has left.
         "GET /addons": async (request) => {
             const { user } = await whoami(request);
-            return json(await client.billing.getAddonUsage(user.organizationId));
+            return json(await client.billing.getAddonUsage(user.workspaceId));
         },
         "GET /apps": async (request) => {
             const { user } = await whoami(request);
-            return json({ apps: await client.apps.list(user.organizationId) });
+            return json({ apps: await client.apps.list(user.workspaceId) });
         },
         "GET /integrations": async (request) => {
             const { user } = await whoami(request);
-            return json({ toolkits: await client.integrations.list(user.organizationId) });
+            return json({ toolkits: await client.integrations.list(user.workspaceId) });
         },
         "POST /integrations/connect": async (request) => {
             const { user } = await whoami(request);
@@ -211,7 +211,7 @@ function createConnectHandler(options) {
                     endpoint: "POST /integrations/connect",
                 });
             }
-            return json(await client.integrations.initiateConnect(user.organizationId, body.toolkitSlug, body.returnUrl));
+            return json(await client.integrations.initiateConnect(user.workspaceId, body.toolkitSlug, body.returnUrl));
         },
         "POST /integrations/disconnect": async (request) => {
             const { user } = await whoami(request);
@@ -224,10 +224,10 @@ function createConnectHandler(options) {
                     endpoint: "POST /integrations/disconnect",
                 });
             }
-            await client.integrations.disconnect(user.organizationId, body.toolkitSlug);
+            await client.integrations.disconnect(user.workspaceId, body.toolkitSlug);
             return json({ ok: true });
         },
-        // Account-wide, not scoped to this service - see `SessionsResource`'s
+        // Account-wide, not scoped to this application - see `SessionsResource`'s
         // doc comment. `requireToken` alone identifies the caller; the target
         // `sessionId` on the revoke routes travels in the JSON body, not the
         // URL, so the exact-match routes table above never needs a dynamic

package/dist/cjs/server/http.js

@@ -44,7 +44,7 @@ function parseRetryAfterMs(response) {
     return Number.isFinite(seconds) ? Math.max(0, seconds) * 1000 : null;
 }
 /**
- * Both error dialects, one shape. `/api/v1/service/*` answers
+ * Both error dialects, one shape. `/api/v1/application/*` answers
  * `{ error: { code, message } }`; the `/sso/*` endpoints answer OAuth2's
  * `{ error, error_description }`.
  */

package/dist/cjs/server/resources/access.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AccessResource = void 0;
 const http_js_1 = require("../http.js");
-/** What a signed-in member may do on your service, and the role catalog behind it. */
+/** What a signed-in member may do on your application, and the role catalog behind it. */
 class AccessResource {
     transport;
     constructor(transport) {
@@ -17,10 +17,10 @@ class AccessResource {
         return (0, http_js_1.request)(this.transport, {
             method: "GET",
             path: `/rbac/users/${(0, http_js_1.pathSegment)(userId, "userId")}/roles`,
-            query: { organizationId: input.organizationId },
+            query: { workspaceId: input.workspaceId },
         });
     }
-    /** Your service's own permission catalog and role definitions - the definitions `getUserRoles` resolves against. */
+    /** Your application's own permission catalog and role definitions - the definitions `getUserRoles` resolves against. */
     listRoles() {
         return (0, http_js_1.request)(this.transport, { method: "GET", path: "/roles" });
     }

package/dist/cjs/server/resources/ai.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AiResource = void 0;
 const http_js_1 = require("../http.js");
-/** RAG chat and structured extraction against an organization's data. */
+/** RAG chat and structured extraction against a workspace's data. */
 class AiResource {
     transport;
     constructor(transport) {

package/dist/cjs/server/resources/analytics.js

@@ -3,10 +3,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.AnalyticsResource = void 0;
 const http_js_1 = require("../http.js");
 /**
- * Your service's own analytics: emit product events, and read back the daily
+ * Your application's own analytics: emit product events, and read back the daily
  * numbers Connect aggregates from them.
  *
- * There is no way to name a service in either call. The scope is always the one
+ * There is no way to name an application in either call. The scope is always the one
  * your API key belongs to - that is the endpoint's security model, not an
  * omission.
  */

package/dist/cjs/server/resources/apps.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AppsResource = void 0;
 const http_js_1 = require("../http.js");
-/** The services an organization can open - the data behind a launcher grid. */
+/** The applications a workspace can open - the data behind a launcher grid. */
 class AppsResource {
     transport;
     constructor(transport) {
@@ -10,13 +10,13 @@ class AppsResource {
     }
     /**
      * Launchable apps only, so a grid tile is never a dead end. The calling
-     * service is included and flagged `isCurrent` rather than filtered out.
+     * application is included and flagged `isCurrent` rather than filtered out.
      */
-    async list(organizationId) {
+    async list(workspaceId) {
         const result = await (0, http_js_1.request)(this.transport, {
             method: "GET",
             path: "/apps",
-            query: { organizationId },
+            query: { workspaceId },
         });
         // `?? []` for the same reason `billing.listPlans` has it: this is a
         // collection every caller immediately maps or measures, and a body without

package/dist/cjs/server/resources/billing.js

@@ -10,7 +10,7 @@ class BillingResource {
         this.transport = transport;
     }
     /**
-     * Your service's active plans - render live pricing instead of hardcoding it.
+     * Your application's active plans - render live pricing instead of hardcoding it.
      *
      * `features` is normalised on the way out: Connect used to send bare keys
      * and now sends `{ key, name, description }`, and this SDK is versioned
@@ -28,7 +28,7 @@ class BillingResource {
         };
     }
     /**
-     * What is left of every consumable add-on on an organization's
+     * What is left of every consumable add-on on a workspace's
      * subscription - the read half of `consumeAddon`.
      *
      * Needs a key scoped to `addons:read`, which is separate from
@@ -38,10 +38,10 @@ class BillingResource {
      * Returns an empty `addons` array rather than throwing when there is
      * nothing to meter, so a caller can render it unconditionally.
      */
-    async getAddonUsage(organizationId) {
+    async getAddonUsage(workspaceId) {
         const response = await (0, http_js_1.request)(this.transport, {
             method: "GET",
-            path: `/addons/organizations/${(0, http_js_1.pathSegment)(organizationId, "organizationId")}`,
+            path: `/addons/workspaces/${(0, http_js_1.pathSegment)(workspaceId, "workspaceId")}`,
         });
         // Normalised, not passed through: the promise above resolves for any 2xx,
         // and `ConnectUsageMeter` reads `addons` straight off it. A body without
@@ -52,7 +52,7 @@ class BillingResource {
     }
     /**
      * Debit a consumable add-on's per-cycle balance on behalf of an
-     * organization's users. Call it at whatever cadence your usage happens.
+     * workspace's users. Call it at whatever cadence your usage happens.
      *
      * An `Idempotency-Key` is always sent, generated per call when you do not
      * supply one: a balance cannot be un-spent, so a retried consume without a

package/dist/cjs/server/resources/drive.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DriveResource = void 0;
 const http_js_1 = require("../http.js");
-/** Files in an organization's Drive - upload, and signed URLs to read back. */
+/** Files in a workspace's Drive - upload, and signed URLs to read back. */
 class DriveResource {
     transport;
     constructor(transport) {
@@ -12,7 +12,7 @@ class DriveResource {
         const form = new FormData();
         const fileName = input.fileName ?? input.file.name ?? "upload";
         form.set("file", input.file, fileName);
-        form.set("organizationId", input.organizationId);
+        form.set("workspaceId", input.workspaceId);
         if (input.parentId)
             form.set("parentId", input.parentId);
         return (0, http_js_1.request)(this.transport, { method: "POST", path: "/drive/files", multipart: form });
@@ -22,7 +22,7 @@ class DriveResource {
         const result = await (0, http_js_1.request)(this.transport, {
             method: "GET",
             path: `/drive/files/${(0, http_js_1.pathSegment)(fileId, "fileId")}/url`,
-            query: { organizationId: input.organizationId },
+            query: { workspaceId: input.workspaceId },
         });
         return result.url;
     }
@@ -31,7 +31,7 @@ class DriveResource {
         const result = await (0, http_js_1.request)(this.transport, {
             method: "GET",
             path: `/drive/files/${(0, http_js_1.pathSegment)(fileId, "fileId")}/preview-url`,
-            query: { organizationId: input.organizationId, size: input.size },
+            query: { workspaceId: input.workspaceId, size: input.size },
         });
         return result.url;
     }

package/dist/cjs/server/resources/entitlements.js

@@ -12,7 +12,7 @@ class EntitlementsResource {
         this.transport = transport;
     }
     /**
-     * Every gate Connect owns between an organization and your service -
+     * Every gate Connect owns between a workspace and your application -
      * subscription, KYC/KYB, a chargeable payment method, seat headroom -
      * resolved in one call.
      *
@@ -20,17 +20,17 @@ class EntitlementsResource {
      * Connect screen that fixes it, so you can route them somewhere useful
      * instead of refusing them with nowhere to go.
      */
-    getReadiness(organizationId) {
+    getReadiness(workspaceId) {
         return (0, http_js_1.request)(this.transport, {
             method: "GET",
-            path: `/onboarding/organizations/${(0, http_js_1.pathSegment)(organizationId, "organizationId")}`,
+            path: `/onboarding/workspaces/${(0, http_js_1.pathSegment)(workspaceId, "workspaceId")}`,
         });
     }
     /** The live plan and subscription, including `plan.features`. */
-    getSubscription(organizationId) {
+    getSubscription(workspaceId) {
         return (0, http_js_1.request)(this.transport, {
             method: "GET",
-            path: `/subscriptions/organizations/${(0, http_js_1.pathSegment)(organizationId, "organizationId")}`,
+            path: `/subscriptions/workspaces/${(0, http_js_1.pathSegment)(workspaceId, "workspaceId")}`,
         });
     }
     /**
@@ -41,8 +41,8 @@ class EntitlementsResource {
      * all: "not entitled" is the same answer either way, and a feature gate
      * should not need a try/catch around it.
      */
-    async hasFeature(organizationId, feature) {
-        const result = await this.getSubscription(organizationId);
+    async hasFeature(workspaceId, feature) {
+        const result = await this.getSubscription(workspaceId);
         return result.hasActiveSubscription && (result.plan?.features.includes(feature) ?? false);
     }
 }

package/dist/cjs/server/resources/identity.js

@@ -70,7 +70,7 @@ class IdentityResource {
             sessionTokenExpiresIn: wire.session_token_expires_in,
             user: wire.user,
             subscription: wire.subscription,
-            serviceRole: wire.serviceRole,
+            applicationRole: wire.applicationRole,
         };
     }
     /**
@@ -140,7 +140,7 @@ class IdentityResource {
         return {
             user: wire.user,
             subscription: wire.subscription,
-            serviceRole: wire.serviceRole,
+            applicationRole: wire.applicationRole,
             sessionExpiresAt: wire.session_expires_at,
         };
     }
@@ -149,7 +149,7 @@ class IdentityResource {
      * rest of its ~15-day life. Discard your own copy of `sessionToken` too;
      * this does not do that for you.
      *
-     * `scope` defaults to `"device"`: this sign-in, every other service signed
+     * `scope` defaults to `"device"`: this sign-in, every other application signed
      * into from the same browser, and Connect's own session on that one device.
      * `"all"` ends every session on every device - an explicit "sign out
      * everywhere" action only.
@@ -181,7 +181,7 @@ class IdentityResource {
             throw new errors_js_1.ConnectError({
                 status: 0,
                 code: "missing_client_id",
-                message: "identity.* needs `clientId`. Pass it to `new ConnectClient({ clientId, apiKey })` - it is shown in this service's Integration tab, under Connect client.",
+                message: "identity.* needs `clientId`. Pass it to `new ConnectClient({ clientId, apiKey })` - it is shown in this application's Integration tab, under Connect client.",
                 endpoint: "identity",
             });
         }

package/dist/cjs/server/resources/integrations.js

@@ -4,8 +4,8 @@ exports.IntegrationsResource = void 0;
 const http_js_1 = require("../http.js");
 /**
  * Composio-hosted third-party connections (Google Calendar, Slack,
- * Twitter/X, ...) an organization has connected. Connect proxies every call
- * here - your service never sees or holds the underlying OAuth token, which
+ * Twitter/X, ...) a workspace has connected. Connect proxies every call
+ * here - your application never sees or holds the underlying OAuth token, which
  * stays with Composio.
  */
 class IntegrationsResource {
@@ -13,12 +13,12 @@ class IntegrationsResource {
     constructor(transport) {
         this.transport = transport;
     }
-    /** Enabled toolkits and this organization's connection status for each. */
-    async list(organizationId) {
+    /** Enabled toolkits and this workspace's connection status for each. */
+    async list(workspaceId) {
         const result = await (0, http_js_1.request)(this.transport, {
             method: "GET",
             path: "/integrations",
-            query: { organizationId },
+            query: { workspaceId },
         });
         // `?? []` for the same reason `AppsResource.list` has it - a collection
         // every caller immediately maps or measures.
@@ -35,31 +35,31 @@ class IntegrationsResource {
      * itself. Reconnecting a disconnected/failed toolkit calls this same
      * method - there is no separate reconnect.
      *
-     * Meant to be called on behalf of a signed-in org admin (this is what the
+     * Meant to be called on behalf of a signed-in workspace admin (this is what the
      * bridge's fixed `POST /integrations/connect` route does), not as a bare
      * background action with no admin present to complete the OAuth screen.
      */
-    async initiateConnect(organizationId, toolkitSlug, returnUrl) {
+    async initiateConnect(workspaceId, toolkitSlug, returnUrl) {
         return (0, http_js_1.request)(this.transport, {
             method: "POST",
             path: "/integrations/connect",
-            json: { organizationId, toolkitSlug, returnUrl },
+            json: { workspaceId, toolkitSlug, returnUrl },
         });
     }
     /** Idempotent - disconnecting a toolkit that was never connected, or is already disconnected, is a success. */
-    async disconnect(organizationId, toolkitSlug) {
+    async disconnect(workspaceId, toolkitSlug) {
         return (0, http_js_1.request)(this.transport, {
             method: "POST",
             path: "/integrations/disconnect",
-            json: { organizationId, toolkitSlug },
+            json: { workspaceId, toolkitSlug },
         });
     }
-    /** Calls a Composio action against this organization's connected account for the named toolkit. */
-    async execute(organizationId, input) {
+    /** Calls a Composio action against this workspace's connected account for the named toolkit. */
+    async execute(workspaceId, input) {
         return (0, http_js_1.request)(this.transport, {
             method: "POST",
             path: "/integrations/actions/execute",
-            json: { organizationId, ...input },
+            json: { workspaceId, ...input },
         });
     }
 }

package/dist/cjs/server/resources/logs.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.LogsResource = void 0;
 const http_js_1 = require("../http.js");
-/** Push feature events into the Console's audit log, filterable to your service. */
+/** Push feature events into the Console's audit log, filterable to your application. */
 class LogsResource {
     transport;
     constructor(transport) {
@@ -14,9 +14,9 @@ class LogsResource {
      * reported through the return value.
      *
      * Pass `sessionToken` to attribute the event to the end user it belongs to.
-     * Both scopes on the stored entry come from something verified - the service
+     * Both scopes on the stored entry come from something verified - the application
      * from your API key, the user from that token, which Connect checks was
-     * minted for your service before attributing anything. `attributed` in the
+     * minted for your application before attributing anything. `attributed` in the
      * result says whether it resolved; a `false` there still means the line was
      * stored, just without a user on it.
      */

package/dist/cjs/server/resources/sessions.js

@@ -8,11 +8,11 @@ const http_js_1 = require("../http.js");
  * timestamps - the same list Connect's own account settings page shows the
  * user themselves.
  *
- * **Account-wide, not scoped to this service.** A Connect session is one
- * browser's login to Connect, and it fans out to every partner service's own
- * `sessionToken` - Connect has no per-service session concept to filter by.
+ * **Account-wide, not scoped to this application.** A Connect session is one
+ * browser's login to Connect, and it fans out to every partner application's own
+ * `sessionToken` - Connect has no per-application session concept to filter by.
  * `list()` returns every session on the account, including ones that
- * originated from a completely different, unrelated service. Requires the
+ * originated from a completely different, unrelated application. Requires the
  * `sessions:manage` scope on your API key - unlike `identity`'s base `sso`
  * capability, this is never granted to a zero-scope legacy key by default.
  *
@@ -38,7 +38,7 @@ class SessionsResource {
     }
     /**
      * Ends one specific session by id - not necessarily the one `sessionToken`
-     * itself was minted from. Cascades to every partner-service sign-in that
+     * itself was minted from. Cascades to every partner-application sign-in that
      * originated from that same browser, same as Connect's own "sign out this
      * device".
      */
@@ -72,7 +72,7 @@ class SessionsResource {
             throw new errors_js_1.ConnectError({
                 status: 0,
                 code: "missing_client_id",
-                message: "sessions.* needs `clientId`. Pass it to `new ConnectClient({ clientId, apiKey })` - it is shown in this service's Integration tab, under Connect client.",
+                message: "sessions.* needs `clientId`. Pass it to `new ConnectClient({ clientId, apiKey })` - it is shown in this application's Integration tab, under Connect client.",
                 endpoint: "sessions",
             });
         }

package/dist/cjs/server/webhooks.js

@@ -58,10 +58,10 @@ function verifyConnectWebhook(rawBody, signatureHeader, secret, now = new Date()
  * export const POST = createConnectWebhookHandler({
  *   secret: process.env.CONNECT_WEBHOOK_SECRET!,
  *   on: {
- *     "organization.deletion_scheduled": ({ organizationId, purgeAfter }) =>
- *       freeze(organizationId, purgeAfter),
- *     "organization.deletion_cancelled": ({ organizationId }) => unfreeze(organizationId),
- *     "organization.deleted": ({ organizationId }) => purge(organizationId),
+ *     "workspace.deletion_scheduled": ({ workspaceId, purgeAfter }) =>
+ *       freeze(workspaceId, purgeAfter),
+ *     "workspace.deletion_cancelled": ({ workspaceId }) => unfreeze(workspaceId),
+ *     "workspace.deleted": ({ workspaceId }) => purge(workspaceId),
  *   },
  * })
  * ```

package/dist/cjs/types.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Wire types for the `/api/v1/service/*` surface - the service-partner API,
+ * Wire types for the `/api/v1/application/*` surface - the application-partner API,
  * and the only thing this SDK covers.
  *
  * Hand-written rather than generated so the published package carries no

package/dist/esm/cli/doctor.js

@@ -159,8 +159,8 @@ function checkEnv(root) {
             status: "fail",
             title: `${name} set`,
             detail: declaredEmpty
-                ? `Declared but empty in .env.local. The value is in your service's Integration tab in Connect.`
-                : `Not found in .env.local or the environment. Both values are in your service's Integration tab in Connect.`,
+                ? `Declared but empty in .env.local. The value is in your application's Integration tab in Connect.`
+                : `Not found in .env.local or the environment. Both values are in your application's Integration tab in Connect.`,
         };
     });
 }
@@ -173,7 +173,7 @@ function checkRedirectUri() {
     return {
         status: "warn",
         title: "Redirect URI registered in Connect",
-        detail: "Not checkable from here. Confirm {your origin}/api/connect/callback is listed as a redirect URI in your service's Integration tab - including the deployed origin, not just http://localhost:3000.",
+        detail: "Not checkable from here. Confirm {your origin}/api/connect/callback is listed as a redirect URI in your application's Integration tab - including the deployed origin, not just http://localhost:3000.",
     };
 }
 const MARKER = { pass: "  ok  ", warn: " note ", fail: " FAIL " };

package/dist/esm/cli/init.js

@@ -39,7 +39,7 @@ const PLANS_PAGE = `"use client";
 // with the other exports) whenever you want your own copy or layout.
 export { ConnectPlansPage as default } from "@cosmoops/connect-sdk/client";
 `;
-const ENV_TEMPLATE = `# CosmoOps Connect - values come from your service's Integration tab.
+const ENV_TEMPLATE = `# CosmoOps Connect - values come from your application's Integration tab.
 CONNECT_API_KEY=
 CONNECT_CLIENT_ID=
 `;
@@ -106,7 +106,7 @@ export function runInit(argv = []) {
         console.log(`  ${marker}  ${relative(root, target)}  - ${scaffold.description}`);
     }
     const env = ensureEnv(root);
-    console.log(`  ${env === "skipped" ? "exists " : env === "appended" ? "updated" : "created"}  .env.local  - fill in the two values from your service's Integration tab`);
+    console.log(`  ${env === "skipped" ? "exists " : env === "appended" ? "updated" : "created"}  .env.local  - fill in the two values from your application's Integration tab`);
     // The two steps a scaffolder must not do for you: editing an existing layout
     // means parsing and rewriting JSX someone else wrote, and the redirect URI
     // lives in Connect, not in this repo.
@@ -132,7 +132,7 @@ Three things left, all one-time:
      Tailwind roots its content scan inside node_modules and skips your app.
 
   3. Register {your origin}/api/connect/callback as a redirect URI in your
-     service's Integration tab in Connect.
+     application's Integration tab in Connect.
 
 No next.config.ts changes needed - not even transpilePackages: dist/ is
 already ES2022 with "use client" hoisted, so Turbopack and webpack consume it

package/dist/esm/client/components/access-gate.js

@@ -43,7 +43,7 @@ export function useConnectAccessGate() {
     }
     const readiness = data.readiness;
     const blocking = blockingBlockers(readiness);
-    const suspended = blocking.find((b) => b.code === "organization_suspended");
+    const suspended = blocking.find((b) => b.code === "workspace_suspended");
     if (suspended)
         return { state: "suspended", blocker: suspended, paymentRetry: null };
     const noSubscription = blocking.find((b) => b.code === "subscription_missing");
@@ -106,13 +106,13 @@ export function ConnectAccessGate({ children, fallback, loading, className }) {
 }
 function AccessGateFallback({ state, blocker, className, }) {
     if (state === "no_subscription") {
-        return (_jsx(GateCard, { icon: CreditCard, iconClassName: "text-accent", title: "Choose a plan to continue", message: blocker?.message ?? "This workspace isn't subscribed to this service yet.", actionLabel: "See plans", resolveUrl: blocker?.resolveUrl ?? null, className: className }));
+        return (_jsx(GateCard, { icon: CreditCard, iconClassName: "text-accent", title: "Choose a plan to continue", message: blocker?.message ?? "This workspace isn't subscribed to this application yet.", actionLabel: "See plans", resolveUrl: blocker?.resolveUrl ?? null, className: className }));
     }
     if (state === "suspended") {
         return (_jsx(GateCard, { icon: Ban, iconClassName: "text-danger", title: "Workspace suspended", message: blocker?.message ?? "This workspace has been suspended.", resolveUrl: null, className: className }));
     }
     if (state === "onboarding_pending") {
-        return (_jsx(GateCard, { icon: Clock, iconClassName: "text-muted", title: "Waiting on approval", message: blocker?.message ?? "This workspace is waiting on approval before it can use this service.", resolveUrl: null, className: className }));
+        return (_jsx(GateCard, { icon: Clock, iconClassName: "text-muted", title: "Waiting on approval", message: blocker?.message ?? "This workspace is waiting on approval before it can use this application.", resolveUrl: null, className: className }));
     }
     // "blocked" - any other blocking code (verification, audience, seats, ...).
     // Full fidelity for a code this component doesn't special-case: the same