@ekanos/cli 0.11.0 → 0.13.0

package/dist/knowledge-api.d.ts

@@ -0,0 +1,129 @@
+import { z } from 'zod';
+declare const ArticleSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    title: z.ZodString;
+    tags: z.ZodArray<z.ZodString>;
+    version: z.ZodNumber;
+    updatedAt: z.ZodString;
+    body: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type KnowledgeArticle = z.infer<typeof ArticleSchema>;
+export declare const KnowledgeListSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    team: z.ZodNullable<z.ZodObject<{
+        slug: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    articles: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        title: z.ZodString;
+        tags: z.ZodArray<z.ZodString>;
+        version: z.ZodNumber;
+        updatedAt: z.ZodString;
+        body: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type KnowledgeList = z.infer<typeof KnowledgeListSchema>;
+declare const PushResultSchema: z.ZodObject<{
+    slug: z.ZodString;
+    id: z.ZodOptional<z.ZodString>;
+    status: z.ZodEnum<{
+        created: "created";
+        refused: "refused";
+        unchanged: "unchanged";
+        updated: "updated";
+    }>;
+    version: z.ZodOptional<z.ZodNumber>;
+    message: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type KnowledgePushResult = z.infer<typeof PushResultSchema>;
+export declare const KnowledgePushSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    team: z.ZodNullable<z.ZodObject<{
+        slug: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    results: z.ZodArray<z.ZodObject<{
+        slug: z.ZodString;
+        id: z.ZodOptional<z.ZodString>;
+        status: z.ZodEnum<{
+            created: "created";
+            refused: "refused";
+            unchanged: "unchanged";
+            updated: "updated";
+        }>;
+        version: z.ZodOptional<z.ZodNumber>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type KnowledgePush = z.infer<typeof KnowledgePushSchema>;
+declare const HitSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    title: z.ZodString;
+    tags: z.ZodArray<z.ZodString>;
+    collection: z.ZodEnum<{
+        general: "general";
+        team: "team";
+    }>;
+    snippet: z.ZodString;
+    rank: z.ZodNumber;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type KnowledgeHit = z.infer<typeof HitSchema>;
+export declare const KnowledgeSearchSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    team: z.ZodNullable<z.ZodObject<{
+        slug: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    query: z.ZodString;
+    results: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        title: z.ZodString;
+        tags: z.ZodArray<z.ZodString>;
+        collection: z.ZodEnum<{
+            general: "general";
+            team: "team";
+        }>;
+        snippet: z.ZodString;
+        rank: z.ZodNumber;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export interface KnowledgePushArticle {
+    slug: string;
+    title: string;
+    body: string;
+    tags?: string[];
+}
+/** Articles per POST; the host refuses more. */
+export declare const KNOWLEDGE_PUSH_BATCH = 50;
+export type KnowledgeApiResult<T> = {
+    status: 'ok';
+    data: T;
+} | {
+    status: 'unauthorized';
+};
+export declare function knowledgeCall<T>(host: string, accessToken: string, schema: z.ZodType<T>, init: {
+    method: 'GET' | 'POST';
+    path?: string;
+    query: Record<string, string | undefined>;
+    body?: unknown;
+}): Promise<KnowledgeApiResult<T>>;
+export {};

package/dist/knowledge-api.js

@@ -0,0 +1,138 @@
+import { z } from 'zod';
+import { request } from './auth/ekanos-api.js';
+import { authRequiredError, forbiddenError, networkError, notFoundError, usageError, } from './errors.js';
+/**
+ * The CLI's client for a Source's Knowledge (plan 244): the General
+ * collection every team reads, and each team's own.
+ *
+ *   GET  /api/partner/knowledge?source=<slug>[&team=<slug>][&body=1]
+ *   POST /api/partner/knowledge   { source, team?, articles: [...] }
+ *   GET  /api/partner/knowledge/search?source=<slug>&team=<slug>&q=<query>[&limit=<n>]
+ *
+ *   → 401 / 3xx  refresh once and retry
+ *   → 403 { code: "SOURCE_ADMIN_REQUIRED" | "MFA_REQUIRED" | "FORBIDDEN" }
+ *   → 404 { code: "TEAM_NOT_FOUND" | "SOURCE_NOT_FOUND" }
+ *   → 400 { code: "INVALID_KNOWLEDGE" | "TEAM_REQUIRED" | "QUERY_REQUIRED" }
+ *
+ * The contract's shapes live here rather than in `@ekanos/integration-schema`,
+ * so the knowledge commands ship with the CLI alone.
+ */
+const SourceRefSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    name: z.string().nullable(),
+});
+const TeamRefSchema = z
+    .object({ slug: z.string(), name: z.string() })
+    .nullable();
+const ArticleSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    title: z.string(),
+    tags: z.array(z.string()),
+    version: z.number(),
+    updatedAt: z.string(),
+    body: z.string().optional(),
+});
+export const KnowledgeListSchema = z.object({
+    source: SourceRefSchema,
+    team: TeamRefSchema,
+    articles: z.array(ArticleSchema),
+});
+const PushResultSchema = z.object({
+    slug: z.string(),
+    id: z.string().optional(),
+    status: z.enum(['created', 'updated', 'unchanged', 'refused']),
+    version: z.number().optional(),
+    message: z.string().optional(),
+});
+export const KnowledgePushSchema = z.object({
+    source: SourceRefSchema,
+    team: TeamRefSchema,
+    results: z.array(PushResultSchema),
+});
+const HitSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    title: z.string(),
+    tags: z.array(z.string()),
+    collection: z.enum(['team', 'general']),
+    snippet: z.string(),
+    rank: z.number(),
+    updatedAt: z.string(),
+});
+export const KnowledgeSearchSchema = z.object({
+    source: SourceRefSchema,
+    team: TeamRefSchema,
+    query: z.string(),
+    results: z.array(HitSchema),
+});
+/** Articles per POST; the host refuses more. */
+export const KNOWLEDGE_PUSH_BATCH = 50;
+const BASE = '/api/partner/knowledge';
+export async function knowledgeCall(host, accessToken, schema, init) {
+    var _a;
+    const query = Object.fromEntries(Object.entries(init.query).filter((entry) => entry[1] !== undefined));
+    const url = `${host}${BASE}${(_a = init.path) !== null && _a !== void 0 ? _a : ''}?${new URLSearchParams(query)}`;
+    const response = await request(url, {
+        method: init.method,
+        headers: Object.assign({ accept: 'application/json', authorization: `Bearer ${accessToken}` }, (init.body === undefined
+            ? {}
+            : { 'content-type': 'application/json' })),
+        body: init.body === undefined ? undefined : JSON.stringify(init.body),
+    });
+    if (response.status === 401 ||
+        (response.status >= 300 && response.status < 400)) {
+        return { status: 'unauthorized' };
+    }
+    const body = await readOptionalJson(response);
+    const code = typeof body.code === 'string' ? body.code : null;
+    const message = typeof body.error === 'string' && body.error ? body.error : null;
+    if (response.status === 403 && code === 'MFA_REQUIRED') {
+        throw authRequiredError(message !== null && message !== void 0 ? message : `${host} requires multi-factor authentication.`, 'Complete MFA in the browser, then run "ekanos login" again.');
+    }
+    if (response.status === 403) {
+        throw forbiddenError(message !== null && message !== void 0 ? message : 'Not permitted on this Source.', code === 'SOURCE_ADMIN_REQUIRED'
+            ? 'Only a Source admin manages Knowledge from the CLI. Ask one to run it.'
+            : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 404) {
+        throw notFoundError(message !== null && message !== void 0 ? message : 'Not found.', code === 'TEAM_NOT_FOUND'
+            ? 'Run "ekanos teams list" to see the teams on this Source.'
+            : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 400) {
+        const issues = Array.isArray(body.issues)
+            ? body.issues
+                .map((issue) => `${String(issue.path)}: ${String(issue.message)}`)
+                .join('; ')
+            : null;
+        throw usageError([message !== null && message !== void 0 ? message : 'The host refused the request.', issues]
+            .filter(Boolean)
+            .join(' — '), code === 'TEAM_REQUIRED'
+            ? 'Pass --team <slug>: search runs as that team sees it.'
+            : 'See "ekanos knowledge --help".');
+    }
+    if (!response.ok) {
+        throw networkError(`${host}${BASE} responded ${response.status}.`, response.status >= 500
+            ? 'The Ekanos deployment returned a server error. Retry shortly.'
+            : 'Confirm the host runs a build that includes the knowledge route.');
+    }
+    const parsed = schema.safeParse(body.data);
+    if (!parsed.success) {
+        throw networkError(`${host}${BASE} answered in a shape this CLI does not read.`, 'Run "ekanos upgrade" — the CLI and the host disagree on the knowledge contract.');
+    }
+    return { status: 'ok', data: parsed.data };
+}
+async function readOptionalJson(response) {
+    try {
+        const parsed = await response.json();
+        return typeof parsed === 'object' && parsed !== null
+            ? parsed
+            : {};
+    }
+    catch (_a) {
+        return {};
+    }
+}
+//# sourceMappingURL=knowledge-api.js.map

package/dist/knowledge-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"knowledge-api.js","sourceRoot":"","sources":["../src/knowledge-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,UAAU,CAAC;AAElB;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAC9C,QAAQ,EAAE,CAAC;AAEd,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;CACjC,CAAC,CAAC;AAGH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACnC,CAAC,CAAC;AAGH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CAC5B,CAAC,CAAC;AASH,gDAAgD;AAChD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAMvC,MAAM,IAAI,GAAG,wBAAwB,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAC/B,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CAAC,CAAC;IAEH,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,wEAAwE;YAC1E,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,EACvB,IAAI,KAAK,gBAAgB;YACvB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC,CAAE,IAAI,CAAC,MAAkD;iBACrD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;iBACjE,IAAI,CAAC,IAAI,CAAC;YACf,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,UAAU,CACd,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAAE,MAAM,CAAC;aACjD,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,KAAK,CAAC,EACd,IAAI,KAAK,eAAe;YACtB,CAAC,CAAC,uDAAuD;YACzD,CAAC,CAAC,gCAAgC,CACrC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EAC9C,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,kEAAkE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,8CAA8C,EAC5D,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  networkError,\n  notFoundError,\n  usageError,\n} from './errors';\n\n/**\n * The CLI's client for a Source's Knowledge (plan 244): the General\n * collection every team reads, and each team's own.\n *\n *   GET  /api/partner/knowledge?source=<slug>[&team=<slug>][&body=1]\n *   POST /api/partner/knowledge   { source, team?, articles: [...] }\n *   GET  /api/partner/knowledge/search?source=<slug>&team=<slug>&q=<query>[&limit=<n>]\n *\n *   → 401 / 3xx  refresh once and retry\n *   → 403 { code: \"SOURCE_ADMIN_REQUIRED\" | \"MFA_REQUIRED\" | \"FORBIDDEN\" }\n *   → 404 { code: \"TEAM_NOT_FOUND\" | \"SOURCE_NOT_FOUND\" }\n *   → 400 { code: \"INVALID_KNOWLEDGE\" | \"TEAM_REQUIRED\" | \"QUERY_REQUIRED\" }\n *\n * The contract's shapes live here rather than in `@ekanos/integration-schema`,\n * so the knowledge commands ship with the CLI alone.\n */\n\nconst SourceRefSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  name: z.string().nullable(),\n});\n\nconst TeamRefSchema = z\n  .object({ slug: z.string(), name: z.string() })\n  .nullable();\n\nconst ArticleSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  title: z.string(),\n  tags: z.array(z.string()),\n  version: z.number(),\n  updatedAt: z.string(),\n  body: z.string().optional(),\n});\nexport type KnowledgeArticle = z.infer<typeof ArticleSchema>;\n\nexport const KnowledgeListSchema = z.object({\n  source: SourceRefSchema,\n  team: TeamRefSchema,\n  articles: z.array(ArticleSchema),\n});\nexport type KnowledgeList = z.infer<typeof KnowledgeListSchema>;\n\nconst PushResultSchema = z.object({\n  slug: z.string(),\n  id: z.string().optional(),\n  status: z.enum(['created', 'updated', 'unchanged', 'refused']),\n  version: z.number().optional(),\n  message: z.string().optional(),\n});\nexport type KnowledgePushResult = z.infer<typeof PushResultSchema>;\n\nexport const KnowledgePushSchema = z.object({\n  source: SourceRefSchema,\n  team: TeamRefSchema,\n  results: z.array(PushResultSchema),\n});\nexport type KnowledgePush = z.infer<typeof KnowledgePushSchema>;\n\nconst HitSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  title: z.string(),\n  tags: z.array(z.string()),\n  collection: z.enum(['team', 'general']),\n  snippet: z.string(),\n  rank: z.number(),\n  updatedAt: z.string(),\n});\nexport type KnowledgeHit = z.infer<typeof HitSchema>;\n\nexport const KnowledgeSearchSchema = z.object({\n  source: SourceRefSchema,\n  team: TeamRefSchema,\n  query: z.string(),\n  results: z.array(HitSchema),\n});\n\nexport interface KnowledgePushArticle {\n  slug: string;\n  title: string;\n  body: string;\n  tags?: string[];\n}\n\n/** Articles per POST; the host refuses more. */\nexport const KNOWLEDGE_PUSH_BATCH = 50;\n\nexport type KnowledgeApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\nconst BASE = '/api/partner/knowledge';\n\nexport async function knowledgeCall<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'POST';\n    path?: string;\n    query: Record<string, string | undefined>;\n    body?: unknown;\n  },\n): Promise<KnowledgeApiResult<T>> {\n  const query = Object.fromEntries(\n    Object.entries(init.query).filter(\n      (entry): entry is [string, string] => entry[1] !== undefined,\n    ),\n  );\n  const url = `${host}${BASE}${init.path ?? ''}?${new URLSearchParams(query)}`;\n  const response = await request(url, {\n    method: init.method,\n    headers: {\n      accept: 'application/json',\n      authorization: `Bearer ${accessToken}`,\n      ...(init.body === undefined\n        ? {}\n        : { 'content-type': 'application/json' }),\n    },\n    body: init.body === undefined ? undefined : JSON.stringify(init.body),\n  });\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? 'Only a Source admin manages Knowledge from the CLI. Ask one to run it.'\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      code === 'TEAM_NOT_FOUND'\n        ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 400) {\n    const issues = Array.isArray(body.issues)\n      ? (body.issues as { path?: unknown; message?: unknown }[])\n          .map((issue) => `${String(issue.path)}: ${String(issue.message)}`)\n          .join('; ')\n      : null;\n    throw usageError(\n      [message ?? 'The host refused the request.', issues]\n        .filter(Boolean)\n        .join(' — '),\n      code === 'TEAM_REQUIRED'\n        ? 'Pass --team <slug>: search runs as that team sees it.'\n        : 'See \"ekanos knowledge --help\".',\n    );\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${BASE} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the knowledge route.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${BASE} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the knowledge contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}

package/dist/routes-api.d.ts

@@ -0,0 +1,105 @@
+import { z } from 'zod';
+declare const RouteSchema: z.ZodObject<{
+    product: z.ZodString;
+    key: z.ZodString;
+    value: z.ZodString;
+    label: z.ZodNullable<z.ZodString>;
+    team: z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodNullable<z.ZodString>;
+        name: z.ZodString;
+    }, z.core.$strip>;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type SourceEventRoute = z.infer<typeof RouteSchema>;
+export declare const RouteListSchema: z.ZodObject<{
+    source: z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+        name: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    routes: z.ZodArray<z.ZodObject<{
+        product: z.ZodString;
+        key: z.ZodString;
+        value: z.ZodString;
+        label: z.ZodNullable<z.ZodString>;
+        team: z.ZodObject<{
+            id: z.ZodString;
+            slug: z.ZodNullable<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strip>;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const RouteSetSchema: z.ZodObject<{
+    route: z.ZodObject<{
+        product: z.ZodString;
+        key: z.ZodString;
+        value: z.ZodString;
+        label: z.ZodNullable<z.ZodString>;
+        team: z.ZodObject<{
+            id: z.ZodString;
+            slug: z.ZodNullable<z.ZodString>;
+            name: z.ZodString;
+        }, z.core.$strip>;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+    replaced: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const RouteRemoveSchema: z.ZodObject<{
+    removed: z.ZodNumber;
+}, z.core.$strip>;
+export declare const RouteOptionsSchema: z.ZodObject<{
+    key: z.ZodString;
+    options: z.ZodNullable<z.ZodArray<z.ZodObject<{
+        value: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const RouteWebhookSchema: z.ZodObject<{
+    webhookId: z.ZodString;
+    url: z.ZodString;
+    signature: z.ZodNullable<z.ZodObject<{
+        header: z.ZodString;
+        secretName: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+declare const UnroutedEventSchema: z.ZodObject<{
+    id: z.ZodString;
+    product: z.ZodString;
+    eventId: z.ZodString;
+    routeKey: z.ZodNullable<z.ZodString>;
+    routeValue: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strip>;
+export type UnroutedEvent = z.infer<typeof UnroutedEventSchema>;
+export declare const UnroutedListSchema: z.ZodObject<{
+    events: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        product: z.ZodString;
+        eventId: z.ZodString;
+        routeKey: z.ZodNullable<z.ZodString>;
+        routeValue: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const ReplaySchema: z.ZodObject<{
+    status: z.ZodEnum<{
+        "already-routed": "already-routed";
+        routed: "routed";
+        unrouted: "unrouted";
+    }>;
+}, z.core.$strip>;
+export type RoutesApiResult<T> = {
+    status: 'ok';
+    data: T;
+} | {
+    status: 'unauthorized';
+};
+export declare function routesCall<T>(host: string, accessToken: string, schema: z.ZodType<T>, init: {
+    method: 'GET' | 'PUT' | 'POST' | 'DELETE';
+    path?: string;
+    query: Record<string, string | undefined>;
+    body?: unknown;
+}): Promise<RoutesApiResult<T>>;
+export {};

package/dist/routes-api.js

@@ -0,0 +1,147 @@
+import { z } from 'zod';
+import { request } from './auth/ekanos-api.js';
+import { authRequiredError, forbiddenError, networkError, notFoundError, usageError, } from './errors.js';
+/**
+ * The CLI's client for a Source's event routing (plan 241.4): which team each
+ * value of an integration's route key (Zendesk's organization) belongs to,
+ * the Source's webhook endpoint, and the events no team is mapped to yet.
+ *
+ *   GET    /api/partner/routes?source=<slug>[&product=<slug>]
+ *   PUT    /api/partner/routes/<product>?source=<slug>   { value, team, label? }
+ *   DELETE /api/partner/routes/<product>?source=<slug>&value=<value>
+ *   GET    /api/partner/routes/<product>/options?source=<slug>
+ *   POST   /api/partner/routes/<product>/webhook?source=<slug>[&webhook=<id>]
+ *   GET    /api/partner/routes/unrouted?source=<slug>[&product=<slug>]
+ *   POST   /api/partner/routes/unrouted/<id>/replay?source=<slug>
+ *
+ *   → 401 / 3xx  refresh once and retry
+ *   → 403 { code: "SOURCE_ADMIN_REQUIRED" | "MFA_REQUIRED" | "FORBIDDEN" }
+ *   → 404 { code: "PRODUCT_NOT_ENTITLED" | "TEAM_NOT_FOUND" | "ROUTE_NOT_FOUND"
+ *               | "EVENT_NOT_FOUND" | "SOURCE_NOT_FOUND" }
+ *   → 409 { code: "NO_ROUTING" | "NO_WEBHOOK" }
+ *
+ * The contract's shapes live here rather than in `@ekanos/integration-schema`,
+ * so the routing commands ship with the CLI alone.
+ */
+const SourceRefSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    name: z.string().nullable(),
+});
+const RouteSchema = z.object({
+    product: z.string(),
+    key: z.string(),
+    value: z.string(),
+    label: z.string().nullable(),
+    team: z.object({
+        id: z.string(),
+        slug: z.string().nullable(),
+        name: z.string(),
+    }),
+    updatedAt: z.string(),
+});
+export const RouteListSchema = z.object({
+    source: SourceRefSchema,
+    routes: z.array(RouteSchema),
+});
+export const RouteSetSchema = z.object({
+    route: RouteSchema,
+    replaced: z.boolean(),
+});
+export const RouteRemoveSchema = z.object({ removed: z.number() });
+export const RouteOptionsSchema = z.object({
+    key: z.string(),
+    options: z
+        .array(z.object({ value: z.string(), label: z.string() }))
+        .nullable(),
+});
+export const RouteWebhookSchema = z.object({
+    webhookId: z.string(),
+    url: z.string(),
+    signature: z
+        .object({ header: z.string(), secretName: z.string() })
+        .nullable(),
+});
+const UnroutedEventSchema = z.object({
+    id: z.string(),
+    product: z.string(),
+    eventId: z.string(),
+    routeKey: z.string().nullable(),
+    routeValue: z.string().nullable(),
+    createdAt: z.string(),
+});
+export const UnroutedListSchema = z.object({
+    events: z.array(UnroutedEventSchema),
+});
+export const ReplaySchema = z.object({
+    status: z.enum(['routed', 'already-routed', 'unrouted']),
+});
+const BASE = '/api/partner/routes';
+export async function routesCall(host, accessToken, schema, init) {
+    var _a;
+    const query = Object.fromEntries(Object.entries(init.query).filter((entry) => entry[1] !== undefined));
+    const url = `${host}${BASE}${(_a = init.path) !== null && _a !== void 0 ? _a : ''}?${new URLSearchParams(query)}`;
+    const response = await request(url, {
+        method: init.method,
+        headers: Object.assign({ accept: 'application/json', authorization: `Bearer ${accessToken}` }, (init.body === undefined
+            ? {}
+            : { 'content-type': 'application/json' })),
+        body: init.body === undefined ? undefined : JSON.stringify(init.body),
+    });
+    if (response.status === 401 ||
+        (response.status >= 300 && response.status < 400)) {
+        return { status: 'unauthorized' };
+    }
+    const body = await readOptionalJson(response);
+    const code = typeof body.code === 'string' ? body.code : null;
+    const message = typeof body.error === 'string' && body.error ? body.error : null;
+    if (response.status === 403 && code === 'MFA_REQUIRED') {
+        throw authRequiredError(message !== null && message !== void 0 ? message : `${host} requires multi-factor authentication.`, 'Complete MFA in the browser, then run "ekanos login" again.');
+    }
+    if (response.status === 403) {
+        throw forbiddenError(message !== null && message !== void 0 ? message : 'Not permitted on this Source.', code === 'SOURCE_ADMIN_REQUIRED'
+            ? "Only a Source admin manages the Source's routing. Ask one to run it."
+            : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 404) {
+        throw notFoundError(message !== null && message !== void 0 ? message : 'Not found.', code === 'TEAM_NOT_FOUND'
+            ? 'Run "ekanos teams list" to see the teams on this Source.'
+            : code === 'ROUTE_NOT_FOUND'
+                ? '"ekanos routes list" shows the mapped values.'
+                : code === 'EVENT_NOT_FOUND'
+                    ? '"ekanos routes unrouted" lists the events waiting for a mapping.'
+                    : code === 'PRODUCT_NOT_ENTITLED'
+                        ? 'Run "ekanos catalog" to see what the Source has.'
+                        : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 409) {
+        throw usageError(message !== null && message !== void 0 ? message : 'The integration does not route events.', code === 'NO_WEBHOOK'
+            ? 'Name the webhook: "ekanos routes webhook <product> --webhook <id>".'
+            : 'Only an integration that declares a Source connection and a route key routes events.');
+    }
+    if (response.status === 400) {
+        throw usageError(message !== null && message !== void 0 ? message : 'The host refused the request.', 'See "ekanos routes --help".');
+    }
+    if (!response.ok) {
+        throw networkError(`${host}${BASE} responded ${response.status}.`, response.status >= 500
+            ? 'The Ekanos deployment returned a server error. Retry shortly.'
+            : 'Confirm the host runs a build that includes the routes route.');
+    }
+    const parsed = schema.safeParse(body.data);
+    if (!parsed.success) {
+        throw networkError(`${host}${BASE} answered in a shape this CLI does not read.`, 'Run "ekanos upgrade" — the CLI and the host disagree on the routes contract.');
+    }
+    return { status: 'ok', data: parsed.data };
+}
+async function readOptionalJson(response) {
+    try {
+        const parsed = await response.json();
+        return typeof parsed === 'object' && parsed !== null
+            ? parsed
+            : {};
+    }
+    catch (_a) {
+        return {};
+    }
+}
+//# sourceMappingURL=routes-api.js.map

package/dist/routes-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-api.js","sourceRoot":"","sources":["../src/routes-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,UAAU,CAAC;AAElB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACzD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,CAAC;SACT,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;SACtD,QAAQ,EAAE;CACd,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;CACzD,CAAC,CAAC;AAMH,MAAM,IAAI,GAAG,qBAAqB,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAC/B,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,MAAA,IAAI,CAAC,IAAI,mCAAI,EAAE,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CAAC,CAAC;IAEH,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,sEAAsE;YACxE,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,EACvB,IAAI,KAAK,gBAAgB;YACvB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,IAAI,KAAK,iBAAiB;gBAC1B,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,IAAI,KAAK,iBAAiB;oBAC1B,CAAC,CAAC,kEAAkE;oBACpE,CAAC,CAAC,IAAI,KAAK,sBAAsB;wBAC/B,CAAC,CAAC,kDAAkD;wBACpD,CAAC,CAAC,8DAA8D,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,wCAAwC,EACnD,IAAI,KAAK,YAAY;YACnB,CAAC,CAAC,qEAAqE;YACvE,CAAC,CAAC,sFAAsF,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EAC9C,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,+DAA+D,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,8CAA8C,EAC5D,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  networkError,\n  notFoundError,\n  usageError,\n} from './errors';\n\n/**\n * The CLI's client for a Source's event routing (plan 241.4): which team each\n * value of an integration's route key (Zendesk's organization) belongs to,\n * the Source's webhook endpoint, and the events no team is mapped to yet.\n *\n *   GET    /api/partner/routes?source=<slug>[&product=<slug>]\n *   PUT    /api/partner/routes/<product>?source=<slug>   { value, team, label? }\n *   DELETE /api/partner/routes/<product>?source=<slug>&value=<value>\n *   GET    /api/partner/routes/<product>/options?source=<slug>\n *   POST   /api/partner/routes/<product>/webhook?source=<slug>[&webhook=<id>]\n *   GET    /api/partner/routes/unrouted?source=<slug>[&product=<slug>]\n *   POST   /api/partner/routes/unrouted/<id>/replay?source=<slug>\n *\n *   → 401 / 3xx  refresh once and retry\n *   → 403 { code: \"SOURCE_ADMIN_REQUIRED\" | \"MFA_REQUIRED\" | \"FORBIDDEN\" }\n *   → 404 { code: \"PRODUCT_NOT_ENTITLED\" | \"TEAM_NOT_FOUND\" | \"ROUTE_NOT_FOUND\"\n *               | \"EVENT_NOT_FOUND\" | \"SOURCE_NOT_FOUND\" }\n *   → 409 { code: \"NO_ROUTING\" | \"NO_WEBHOOK\" }\n *\n * The contract's shapes live here rather than in `@ekanos/integration-schema`,\n * so the routing commands ship with the CLI alone.\n */\n\nconst SourceRefSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  name: z.string().nullable(),\n});\n\nconst RouteSchema = z.object({\n  product: z.string(),\n  key: z.string(),\n  value: z.string(),\n  label: z.string().nullable(),\n  team: z.object({\n    id: z.string(),\n    slug: z.string().nullable(),\n    name: z.string(),\n  }),\n  updatedAt: z.string(),\n});\nexport type SourceEventRoute = z.infer<typeof RouteSchema>;\n\nexport const RouteListSchema = z.object({\n  source: SourceRefSchema,\n  routes: z.array(RouteSchema),\n});\n\nexport const RouteSetSchema = z.object({\n  route: RouteSchema,\n  replaced: z.boolean(),\n});\n\nexport const RouteRemoveSchema = z.object({ removed: z.number() });\n\nexport const RouteOptionsSchema = z.object({\n  key: z.string(),\n  options: z\n    .array(z.object({ value: z.string(), label: z.string() }))\n    .nullable(),\n});\n\nexport const RouteWebhookSchema = z.object({\n  webhookId: z.string(),\n  url: z.string(),\n  signature: z\n    .object({ header: z.string(), secretName: z.string() })\n    .nullable(),\n});\n\nconst UnroutedEventSchema = z.object({\n  id: z.string(),\n  product: z.string(),\n  eventId: z.string(),\n  routeKey: z.string().nullable(),\n  routeValue: z.string().nullable(),\n  createdAt: z.string(),\n});\nexport type UnroutedEvent = z.infer<typeof UnroutedEventSchema>;\n\nexport const UnroutedListSchema = z.object({\n  events: z.array(UnroutedEventSchema),\n});\n\nexport const ReplaySchema = z.object({\n  status: z.enum(['routed', 'already-routed', 'unrouted']),\n});\n\nexport type RoutesApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\nconst BASE = '/api/partner/routes';\n\nexport async function routesCall<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'PUT' | 'POST' | 'DELETE';\n    path?: string;\n    query: Record<string, string | undefined>;\n    body?: unknown;\n  },\n): Promise<RoutesApiResult<T>> {\n  const query = Object.fromEntries(\n    Object.entries(init.query).filter(\n      (entry): entry is [string, string] => entry[1] !== undefined,\n    ),\n  );\n  const url = `${host}${BASE}${init.path ?? ''}?${new URLSearchParams(query)}`;\n  const response = await request(url, {\n    method: init.method,\n    headers: {\n      accept: 'application/json',\n      authorization: `Bearer ${accessToken}`,\n      ...(init.body === undefined\n        ? {}\n        : { 'content-type': 'application/json' }),\n    },\n    body: init.body === undefined ? undefined : JSON.stringify(init.body),\n  });\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? \"Only a Source admin manages the Source's routing. Ask one to run it.\"\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      code === 'TEAM_NOT_FOUND'\n        ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n        : code === 'ROUTE_NOT_FOUND'\n          ? '\"ekanos routes list\" shows the mapped values.'\n          : code === 'EVENT_NOT_FOUND'\n            ? '\"ekanos routes unrouted\" lists the events waiting for a mapping.'\n            : code === 'PRODUCT_NOT_ENTITLED'\n              ? 'Run \"ekanos catalog\" to see what the Source has.'\n              : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 409) {\n    throw usageError(\n      message ?? 'The integration does not route events.',\n      code === 'NO_WEBHOOK'\n        ? 'Name the webhook: \"ekanos routes webhook <product> --webhook <id>\".'\n        : 'Only an integration that declares a Source connection and a route key routes events.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      'See \"ekanos routes --help\".',\n    );\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${BASE} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the routes route.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${BASE} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the routes contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}

package/dist/source-products-api.d.ts

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+export declare const SourceProductSchema: z.ZodObject<{
+    slug: z.ZodString;
+    name: z.ZodString;
+    kind: z.ZodEnum<{
+        experience: "experience";
+        integration: "integration";
+    }>;
+    enabled: z.ZodBoolean;
+    lever: z.ZodEnum<{
+        entitlement: "entitlement";
+        flag: "flag";
+        plan: "plan";
+    }>;
+    registered: z.ZodBoolean;
+}, z.core.$strip>;
+export type SourceProduct = z.infer<typeof SourceProductSchema>;
+export type SourceProductsApiResult<T> = {
+    status: 'ok';
+    data: T;
+} | {
+    status: 'unauthorized';
+};
+export declare function listSourceProducts(host: string, token: string, source: string): Promise<SourceProductsApiResult<{
+    source: {
+        id: string;
+        slug: string;
+        name: string | null;
+    };
+    products: {
+        slug: string;
+        name: string;
+        kind: "experience" | "integration";
+        enabled: boolean;
+        lever: "entitlement" | "flag" | "plan";
+        registered: boolean;
+    }[];
+    canEnable: boolean;
+}>>;
+export declare function setSourceProduct(host: string, token: string, input: {
+    source: string;
+    product: string;
+    enabled: boolean;
+}): Promise<SourceProductsApiResult<{
+    source: {
+        id: string;
+        slug: string;
+        name: string | null;
+    };
+    product: {
+        slug: string;
+        name: string;
+        kind: "experience" | "integration";
+        enabled: boolean;
+        lever: "entitlement" | "flag" | "plan";
+        registered: boolean;
+    };
+    changed: boolean;
+}>>;