@ekanos/cli 0.15.0 → 0.16.0

package/dist/team-lifecycle-api.js

@@ -0,0 +1,301 @@
+import { z } from 'zod';
+import { call } from './teams-api.js';
+/**
+ * The CLI's client for a team's lifecycle and a Source's roles and people —
+ * every call a Source admin's, through `call` (`teams-api.ts`) for its
+ * refresh and refusals.
+ *
+ *   POST   /api/partner/teams/<team>/members/<email>/resend     → resend | renew
+ *   POST   /api/partner/teams/<team>/leave                      → the caller leaves
+ *   GET|POST          /api/partner/teams/<team>/groups
+ *   PATCH|DELETE      /api/partner/teams/<team>/groups/<group>
+ *   PUT|DELETE        /api/partner/teams/<team>/groups/<group>/members/<email>
+ *   GET               /api/partner/teams/<team>/health
+ *   POST              /api/partner/teams/<team>/health/<product>  → run now
+ *   GET               /api/partner/teams/<team>/workspaces
+ *   PUT               /api/partner/teams/<team>/workspaces/default  { workspace }
+ *   GET|POST          /api/partner/sources/roles
+ *   PATCH|DELETE      /api/partner/sources/roles/<role>
+ *   GET               /api/partner/sources/people[?search=&page=]
+ *
+ * The shapes are read here rather than from `@ekanos/integration-schema`, so
+ * this CLI works against a host without a schema release.
+ */
+const SourceRefSchema = z.object({
+    id: z.string(),
+    slug: z.string(),
+    name: z.string().nullable(),
+});
+const TeamRefSchema = z.object({ slug: z.string(), name: z.string() });
+const PersonSchema = z.object({
+    userId: z.string(),
+    email: z.string().nullable(),
+    name: z.string().nullable(),
+});
+export const InvitationResendSchema = z.object({
+    team: TeamRefSchema,
+    email: z.string(),
+    role: z.string(),
+    action: z.enum(['renewed', 'resent']),
+    expiresAt: z.string(),
+});
+export const TeamLeaveSchema = z.object({
+    team: TeamRefSchema,
+    role: z.string(),
+});
+export const TeamGroupSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    description: z.string().nullable(),
+    members: z.array(PersonSchema),
+    products: z.array(z.object({ slug: z.string(), name: z.string() })),
+    widgetCount: z.number(),
+    mcpToolCount: z.number(),
+});
+const GroupListSchema = z.object({
+    source: SourceRefSchema,
+    team: TeamRefSchema,
+    groups: z.array(TeamGroupSchema),
+});
+const GroupResultSchema = z.object({
+    team: TeamRefSchema,
+    group: TeamGroupSchema,
+});
+const GroupUpdateSchema = GroupResultSchema.extend({
+    previous: TeamGroupSchema,
+});
+const GroupMemberSchema = GroupResultSchema.extend({
+    email: z.string(),
+    changed: z.boolean(),
+});
+const HealthStatusSchema = z.enum([
+    'healthy',
+    'degraded',
+    'unhealthy',
+    'unknown',
+]);
+export const TeamHealthRowSchema = z.object({
+    productId: z.string(),
+    productName: z.string(),
+    slug: z.string(),
+    status: HealthStatusSchema,
+    lastCheckedAt: z.string().nullable(),
+    lastSuccessAt: z.string().nullable(),
+    lastFailureAt: z.string().nullable(),
+    lastErrorMessage: z.string().nullable(),
+    errorRatePct: z.number().nullable(),
+    tokenExpiresAt: z.string().nullable(),
+    statusReason: z.string().nullable(),
+});
+const HealthListSchema = z.object({
+    source: SourceRefSchema,
+    team: TeamRefSchema,
+    integrations: z.array(TeamHealthRowSchema),
+});
+const HealthRunSchema = z.object({
+    team: TeamRefSchema,
+    integration: TeamHealthRowSchema,
+});
+const WorkspaceSchema = z.object({
+    slug: z.string(),
+    name: z.string(),
+    label: z.string().nullable(),
+    visible: z.boolean(),
+    isDefault: z.boolean(),
+});
+const WorkspaceListSchema = z.object({
+    source: SourceRefSchema,
+    team: TeamRefSchema,
+    workspaces: z.array(WorkspaceSchema),
+});
+const WorkspaceDefaultSchema = z.object({
+    team: TeamRefSchema,
+    workspace: WorkspaceSchema,
+    previous: WorkspaceSchema.nullable(),
+    changed: z.boolean(),
+});
+export const SourceRoleSchema = z.object({
+    name: z.string(),
+    displayName: z.string(),
+    description: z.string().nullable(),
+    hierarchyLevel: z.number(),
+    isSystem: z.boolean(),
+    permissions: z.array(z.string()),
+    memberCount: z.number(),
+});
+const RoleListSchema = z.object({
+    source: SourceRefSchema,
+    roles: z.array(SourceRoleSchema),
+    permissions: z.array(z.object({
+        permission: z.string(),
+        label: z.string(),
+        category: z.string(),
+    })),
+});
+const RoleResultSchema = z.object({
+    source: SourceRefSchema,
+    role: SourceRoleSchema,
+});
+const RoleUpdateSchema = RoleResultSchema.extend({
+    previous: SourceRoleSchema,
+});
+const PersonStateSchema = z.enum([
+    'active',
+    'suspended',
+    'invited',
+    'left',
+    'removed',
+]);
+const PeopleSchema = z.object({
+    source: SourceRefSchema,
+    people: z.array(z.object({
+        userId: z.string(),
+        name: z.string().nullable(),
+        email: z.string().nullable(),
+        joinedAt: z.string().nullable(),
+        status: PersonStateSchema,
+        teams: z.array(z.object({
+            accountName: z.string(),
+            roleLabel: z.string(),
+            status: PersonStateSchema,
+        })),
+    })),
+    total: z.number(),
+    page: z.number(),
+    pageSize: z.number(),
+});
+const teamPath = (team) => `/api/partner/teams/${encodeURIComponent(team)}`;
+const memberPath = (team, email) => `${teamPath(team)}/members/${encodeURIComponent(email)}`;
+const groupPath = (team, group) => `${teamPath(team)}/groups/${encodeURIComponent(group)}`;
+export function resendTeamInvitation(host, token, target) {
+    return call(host, token, InvitationResendSchema, {
+        method: 'POST',
+        path: `${memberPath(target.team, target.email)}/resend`,
+        source: target.source,
+    });
+}
+export function leaveTeam(host, token, target) {
+    return call(host, token, TeamLeaveSchema, {
+        method: 'POST',
+        path: `${teamPath(target.team)}/leave`,
+        source: target.source,
+    });
+}
+export function listTeamGroups(host, token, target) {
+    return call(host, token, GroupListSchema, {
+        method: 'GET',
+        path: `${teamPath(target.team)}/groups`,
+        source: target.source,
+    });
+}
+export function createTeamGroup(host, token, target, body) {
+    return call(host, token, GroupResultSchema, {
+        method: 'POST',
+        path: `${teamPath(target.team)}/groups`,
+        source: target.source,
+        body,
+    });
+}
+export function updateTeamGroup(host, token, target, body) {
+    return call(host, token, GroupUpdateSchema, {
+        method: 'PATCH',
+        path: groupPath(target.team, target.group),
+        source: target.source,
+        body,
+    });
+}
+export function deleteTeamGroup(host, token, target) {
+    return call(host, token, GroupResultSchema, {
+        method: 'DELETE',
+        path: groupPath(target.team, target.group),
+        source: target.source,
+    });
+}
+export function setTeamGroupMember(host, token, target, member) {
+    return call(host, token, GroupMemberSchema, {
+        method: member ? 'PUT' : 'DELETE',
+        path: `${groupPath(target.team, target.group)}/members/${encodeURIComponent(target.email)}`,
+        source: target.source,
+    });
+}
+export function listTeamHealth(host, token, target) {
+    return call(host, token, HealthListSchema, {
+        method: 'GET',
+        path: `${teamPath(target.team)}/health`,
+        source: target.source,
+    });
+}
+/** The caller's own personal connection's health; `run` checks it now. */
+export function ownTeamHealth(host, token, target, run) {
+    return call(host, token, HealthRunSchema, {
+        method: run ? 'POST' : 'GET',
+        path: `${teamPath(target.team)}/health/${encodeURIComponent(target.product)}/mine`,
+        source: target.source,
+    });
+}
+export function runTeamHealthCheck(host, token, target) {
+    return call(host, token, HealthRunSchema, {
+        method: 'POST',
+        path: `${teamPath(target.team)}/health/${encodeURIComponent(target.product)}`,
+        source: target.source,
+    });
+}
+export function listTeamWorkspaces(host, token, target) {
+    return call(host, token, WorkspaceListSchema, {
+        method: 'GET',
+        path: `${teamPath(target.team)}/workspaces`,
+        source: target.source,
+    });
+}
+export function setTeamDefaultWorkspace(host, token, target, workspace) {
+    return call(host, token, WorkspaceDefaultSchema, {
+        method: 'PUT',
+        path: `${teamPath(target.team)}/workspaces/default`,
+        source: target.source,
+        body: { workspace },
+    });
+}
+export function listSourceRoles(host, token, source) {
+    return call(host, token, RoleListSchema, {
+        method: 'GET',
+        path: '/api/partner/sources/roles',
+        source,
+    });
+}
+export function createSourceRole(host, token, source, body) {
+    return call(host, token, RoleResultSchema, {
+        method: 'POST',
+        path: '/api/partner/sources/roles',
+        source,
+        body,
+    });
+}
+export function updateSourceRole(host, token, target, body) {
+    return call(host, token, RoleUpdateSchema, {
+        method: 'PATCH',
+        path: `/api/partner/sources/roles/${encodeURIComponent(target.role)}`,
+        source: target.source,
+        body,
+    });
+}
+export function deleteSourceRole(host, token, target) {
+    return call(host, token, RoleResultSchema, {
+        method: 'DELETE',
+        path: `/api/partner/sources/roles/${encodeURIComponent(target.role)}`,
+        source: target.source,
+    });
+}
+export function listSourcePeople(host, token, source, query) {
+    const params = new URLSearchParams();
+    if (query.search)
+        params.set('search', query.search);
+    if (query.page !== undefined)
+        params.set('page', String(query.page));
+    const encoded = params.toString();
+    return call(host, token, PeopleSchema, {
+        method: 'GET',
+        path: `/api/partner/sources/people${encoded ? `?${encoded}` : ''}`,
+        source,
+    });
+}
+//# sourceMappingURL=team-lifecycle-api.js.map

package/dist/team-lifecycle-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-lifecycle-api.js","sourceRoot":"","sources":["../src/team-lifecycle-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAuB,IAAI,EAAE,MAAM,aAAa,CAAC;AAExD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAGH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,aAAa;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CACjC,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,eAAe;CACvB,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAC;AACH,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,SAAS;IACT,UAAU;IACV,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,kBAAkB;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAGH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,aAAa;IACnB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CAC3C,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,mBAAmB;CACjC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,aAAa;IACnB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;CACrC,CAAC,CAAC;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAGH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,KAAK,CAClB,CAAC,CAAC,MAAM,CAAC;QACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;KACrB,CAAC,CACH;CACF,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,gBAAgB;CACvB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,gBAAgB;CAC3B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,QAAQ;IACR,WAAW;IACX,SAAS;IACT,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AACH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CACb,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,MAAM,EAAE,iBAAiB;QACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;YACP,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,MAAM,EAAE,iBAAiB;SAC1B,CAAC,CACH;KACF,CAAC,CACH;IACD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAMH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAChC,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AACnD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CACjD,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3D,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAChD,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AAE1D,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,KAAa,EACb,MAAsC;IAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;QACvD,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,KAAa,EACb,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;QACtC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAAa,EACb,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;QACxC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAa,EACb,MAAkB,EAClB,IAAiE;IAEjE,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAa,EACb,MAAsC,EACtC,IAAyE;IAEzE,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC1C,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAa,EACb,MAAsC;IAEtC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC1C,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,KAAa,EACb,MAAqD,EACrD,MAAe;IAEf,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;QAC1C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACjC,IAAI,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QAC3F,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAAa,EACb,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACzC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,KAAa,EACb,MAAwC,EACxC,GAAY;IAEZ,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;QACxC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;QAC5B,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO;QAClF,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,KAAa,EACb,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAC7E,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,KAAa,EACb,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE;QAC5C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,KAAa,EACb,MAAkB,EAClB,SAAiB;IAEjB,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE;QAC/C,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB;QACnD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,EAAE,SAAS,EAAE;KACpB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,KAAa,EACb,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE;QACvC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,4BAA4B;QAClC,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,KAAa,EACb,MAAc,EACd,IAMC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,4BAA4B;QAClC,MAAM;QACN,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,KAAa,EACb,MAAwC,EACxC,IAOC;IAED,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACzC,MAAM,EAAE,OAAO;QACf,IAAI,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACrE,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,KAAa,EACb,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;QACzC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACrE,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,IAAY,EACZ,KAAa,EACb,MAAc,EACd,KAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE;QACrC,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,8BAA8B,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAClE,MAAM;KACP,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { z } from 'zod';\n\nimport { type TeamsApiResult, call } from './teams-api';\n\n/**\n * The CLI's client for a team's lifecycle and a Source's roles and people —\n * every call a Source admin's, through `call` (`teams-api.ts`) for its\n * refresh and refusals.\n *\n *   POST   /api/partner/teams/<team>/members/<email>/resend     → resend | renew\n *   POST   /api/partner/teams/<team>/leave                      → the caller leaves\n *   GET|POST          /api/partner/teams/<team>/groups\n *   PATCH|DELETE      /api/partner/teams/<team>/groups/<group>\n *   PUT|DELETE        /api/partner/teams/<team>/groups/<group>/members/<email>\n *   GET               /api/partner/teams/<team>/health\n *   POST              /api/partner/teams/<team>/health/<product>  → run now\n *   GET               /api/partner/teams/<team>/workspaces\n *   PUT               /api/partner/teams/<team>/workspaces/default  { workspace }\n *   GET|POST          /api/partner/sources/roles\n *   PATCH|DELETE      /api/partner/sources/roles/<role>\n *   GET               /api/partner/sources/people[?search=&page=]\n *\n * The shapes are read here rather than from `@ekanos/integration-schema`, so\n * this CLI works against a host without a schema release.\n */\n\nconst SourceRefSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  name: z.string().nullable(),\n});\nconst TeamRefSchema = z.object({ slug: z.string(), name: z.string() });\nconst PersonSchema = z.object({\n  userId: z.string(),\n  email: z.string().nullable(),\n  name: z.string().nullable(),\n});\n\nexport const InvitationResendSchema = z.object({\n  team: TeamRefSchema,\n  email: z.string(),\n  role: z.string(),\n  action: z.enum(['renewed', 'resent']),\n  expiresAt: z.string(),\n});\n\nexport const TeamLeaveSchema = z.object({\n  team: TeamRefSchema,\n  role: z.string(),\n});\n\nexport const TeamGroupSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  description: z.string().nullable(),\n  members: z.array(PersonSchema),\n  products: z.array(z.object({ slug: z.string(), name: z.string() })),\n  widgetCount: z.number(),\n  mcpToolCount: z.number(),\n});\nexport type TeamGroup = z.infer<typeof TeamGroupSchema>;\n\nconst GroupListSchema = z.object({\n  source: SourceRefSchema,\n  team: TeamRefSchema,\n  groups: z.array(TeamGroupSchema),\n});\nconst GroupResultSchema = z.object({\n  team: TeamRefSchema,\n  group: TeamGroupSchema,\n});\nconst GroupUpdateSchema = GroupResultSchema.extend({\n  previous: TeamGroupSchema,\n});\nconst GroupMemberSchema = GroupResultSchema.extend({\n  email: z.string(),\n  changed: z.boolean(),\n});\n\nconst HealthStatusSchema = z.enum([\n  'healthy',\n  'degraded',\n  'unhealthy',\n  'unknown',\n]);\nexport const TeamHealthRowSchema = z.object({\n  productId: z.string(),\n  productName: z.string(),\n  slug: z.string(),\n  status: HealthStatusSchema,\n  lastCheckedAt: z.string().nullable(),\n  lastSuccessAt: z.string().nullable(),\n  lastFailureAt: z.string().nullable(),\n  lastErrorMessage: z.string().nullable(),\n  errorRatePct: z.number().nullable(),\n  tokenExpiresAt: z.string().nullable(),\n  statusReason: z.string().nullable(),\n});\nexport type TeamHealthRow = z.infer<typeof TeamHealthRowSchema>;\n\nconst HealthListSchema = z.object({\n  source: SourceRefSchema,\n  team: TeamRefSchema,\n  integrations: z.array(TeamHealthRowSchema),\n});\nconst HealthRunSchema = z.object({\n  team: TeamRefSchema,\n  integration: TeamHealthRowSchema,\n});\n\nconst WorkspaceSchema = z.object({\n  slug: z.string(),\n  name: z.string(),\n  label: z.string().nullable(),\n  visible: z.boolean(),\n  isDefault: z.boolean(),\n});\nconst WorkspaceListSchema = z.object({\n  source: SourceRefSchema,\n  team: TeamRefSchema,\n  workspaces: z.array(WorkspaceSchema),\n});\nconst WorkspaceDefaultSchema = z.object({\n  team: TeamRefSchema,\n  workspace: WorkspaceSchema,\n  previous: WorkspaceSchema.nullable(),\n  changed: z.boolean(),\n});\n\nexport const SourceRoleSchema = z.object({\n  name: z.string(),\n  displayName: z.string(),\n  description: z.string().nullable(),\n  hierarchyLevel: z.number(),\n  isSystem: z.boolean(),\n  permissions: z.array(z.string()),\n  memberCount: z.number(),\n});\nexport type SourceRole = z.infer<typeof SourceRoleSchema>;\n\nconst RoleListSchema = z.object({\n  source: SourceRefSchema,\n  roles: z.array(SourceRoleSchema),\n  permissions: z.array(\n    z.object({\n      permission: z.string(),\n      label: z.string(),\n      category: z.string(),\n    }),\n  ),\n});\nconst RoleResultSchema = z.object({\n  source: SourceRefSchema,\n  role: SourceRoleSchema,\n});\nconst RoleUpdateSchema = RoleResultSchema.extend({\n  previous: SourceRoleSchema,\n});\n\nconst PersonStateSchema = z.enum([\n  'active',\n  'suspended',\n  'invited',\n  'left',\n  'removed',\n]);\nconst PeopleSchema = z.object({\n  source: SourceRefSchema,\n  people: z.array(\n    z.object({\n      userId: z.string(),\n      name: z.string().nullable(),\n      email: z.string().nullable(),\n      joinedAt: z.string().nullable(),\n      status: PersonStateSchema,\n      teams: z.array(\n        z.object({\n          accountName: z.string(),\n          roleLabel: z.string(),\n          status: PersonStateSchema,\n        }),\n      ),\n    }),\n  ),\n  total: z.number(),\n  page: z.number(),\n  pageSize: z.number(),\n});\nexport type SourcePeople = z.infer<typeof PeopleSchema>;\n\ntype TeamTarget = { source: string; team: string };\ntype Api<T> = Promise<TeamsApiResult<T>>;\n\nconst teamPath = (team: string) =>\n  `/api/partner/teams/${encodeURIComponent(team)}`;\nconst memberPath = (team: string, email: string) =>\n  `${teamPath(team)}/members/${encodeURIComponent(email)}`;\nconst groupPath = (team: string, group: string) =>\n  `${teamPath(team)}/groups/${encodeURIComponent(group)}`;\n\nexport function resendTeamInvitation(\n  host: string,\n  token: string,\n  target: TeamTarget & { email: string },\n): Api<z.infer<typeof InvitationResendSchema>> {\n  return call(host, token, InvitationResendSchema, {\n    method: 'POST',\n    path: `${memberPath(target.team, target.email)}/resend`,\n    source: target.source,\n  });\n}\n\nexport function leaveTeam(\n  host: string,\n  token: string,\n  target: TeamTarget,\n): Api<z.infer<typeof TeamLeaveSchema>> {\n  return call(host, token, TeamLeaveSchema, {\n    method: 'POST',\n    path: `${teamPath(target.team)}/leave`,\n    source: target.source,\n  });\n}\n\nexport function listTeamGroups(\n  host: string,\n  token: string,\n  target: TeamTarget,\n): Api<z.infer<typeof GroupListSchema>> {\n  return call(host, token, GroupListSchema, {\n    method: 'GET',\n    path: `${teamPath(target.team)}/groups`,\n    source: target.source,\n  });\n}\n\nexport function createTeamGroup(\n  host: string,\n  token: string,\n  target: TeamTarget,\n  body: { name: string; description?: string; products?: string[] },\n): Api<z.infer<typeof GroupResultSchema>> {\n  return call(host, token, GroupResultSchema, {\n    method: 'POST',\n    path: `${teamPath(target.team)}/groups`,\n    source: target.source,\n    body,\n  });\n}\n\nexport function updateTeamGroup(\n  host: string,\n  token: string,\n  target: TeamTarget & { group: string },\n  body: { name?: string; description?: string | null; products?: string[] },\n): Api<z.infer<typeof GroupUpdateSchema>> {\n  return call(host, token, GroupUpdateSchema, {\n    method: 'PATCH',\n    path: groupPath(target.team, target.group),\n    source: target.source,\n    body,\n  });\n}\n\nexport function deleteTeamGroup(\n  host: string,\n  token: string,\n  target: TeamTarget & { group: string },\n): Api<z.infer<typeof GroupResultSchema>> {\n  return call(host, token, GroupResultSchema, {\n    method: 'DELETE',\n    path: groupPath(target.team, target.group),\n    source: target.source,\n  });\n}\n\nexport function setTeamGroupMember(\n  host: string,\n  token: string,\n  target: TeamTarget & { group: string; email: string },\n  member: boolean,\n): Api<z.infer<typeof GroupMemberSchema>> {\n  return call(host, token, GroupMemberSchema, {\n    method: member ? 'PUT' : 'DELETE',\n    path: `${groupPath(target.team, target.group)}/members/${encodeURIComponent(target.email)}`,\n    source: target.source,\n  });\n}\n\nexport function listTeamHealth(\n  host: string,\n  token: string,\n  target: TeamTarget,\n): Api<z.infer<typeof HealthListSchema>> {\n  return call(host, token, HealthListSchema, {\n    method: 'GET',\n    path: `${teamPath(target.team)}/health`,\n    source: target.source,\n  });\n}\n\n/** The caller's own personal connection's health; `run` checks it now. */\nexport function ownTeamHealth(\n  host: string,\n  token: string,\n  target: TeamTarget & { product: string },\n  run: boolean,\n): Api<z.infer<typeof HealthRunSchema>> {\n  return call(host, token, HealthRunSchema, {\n    method: run ? 'POST' : 'GET',\n    path: `${teamPath(target.team)}/health/${encodeURIComponent(target.product)}/mine`,\n    source: target.source,\n  });\n}\n\nexport function runTeamHealthCheck(\n  host: string,\n  token: string,\n  target: TeamTarget & { product: string },\n): Api<z.infer<typeof HealthRunSchema>> {\n  return call(host, token, HealthRunSchema, {\n    method: 'POST',\n    path: `${teamPath(target.team)}/health/${encodeURIComponent(target.product)}`,\n    source: target.source,\n  });\n}\n\nexport function listTeamWorkspaces(\n  host: string,\n  token: string,\n  target: TeamTarget,\n): Api<z.infer<typeof WorkspaceListSchema>> {\n  return call(host, token, WorkspaceListSchema, {\n    method: 'GET',\n    path: `${teamPath(target.team)}/workspaces`,\n    source: target.source,\n  });\n}\n\nexport function setTeamDefaultWorkspace(\n  host: string,\n  token: string,\n  target: TeamTarget,\n  workspace: string,\n): Api<z.infer<typeof WorkspaceDefaultSchema>> {\n  return call(host, token, WorkspaceDefaultSchema, {\n    method: 'PUT',\n    path: `${teamPath(target.team)}/workspaces/default`,\n    source: target.source,\n    body: { workspace },\n  });\n}\n\nexport function listSourceRoles(\n  host: string,\n  token: string,\n  source: string,\n): Api<z.infer<typeof RoleListSchema>> {\n  return call(host, token, RoleListSchema, {\n    method: 'GET',\n    path: '/api/partner/sources/roles',\n    source,\n  });\n}\n\nexport function createSourceRole(\n  host: string,\n  token: string,\n  source: string,\n  body: {\n    name: string;\n    displayName: string;\n    description?: string;\n    hierarchyLevel: number;\n    permissions: string[];\n  },\n): Api<z.infer<typeof RoleResultSchema>> {\n  return call(host, token, RoleResultSchema, {\n    method: 'POST',\n    path: '/api/partner/sources/roles',\n    source,\n    body,\n  });\n}\n\nexport function updateSourceRole(\n  host: string,\n  token: string,\n  target: { source: string; role: string },\n  body: {\n    displayName?: string;\n    description?: string;\n    hierarchyLevel?: number;\n    permissions?: string[];\n    grant?: string[];\n    revoke?: string[];\n  },\n): Api<z.infer<typeof RoleUpdateSchema>> {\n  return call(host, token, RoleUpdateSchema, {\n    method: 'PATCH',\n    path: `/api/partner/sources/roles/${encodeURIComponent(target.role)}`,\n    source: target.source,\n    body,\n  });\n}\n\nexport function deleteSourceRole(\n  host: string,\n  token: string,\n  target: { source: string; role: string },\n): Api<z.infer<typeof RoleResultSchema>> {\n  return call(host, token, RoleResultSchema, {\n    method: 'DELETE',\n    path: `/api/partner/sources/roles/${encodeURIComponent(target.role)}`,\n    source: target.source,\n  });\n}\n\nexport function listSourcePeople(\n  host: string,\n  token: string,\n  source: string,\n  query: { search?: string; page?: number },\n): Api<SourcePeople> {\n  const params = new URLSearchParams();\n  if (query.search) params.set('search', query.search);\n  if (query.page !== undefined) params.set('page', String(query.page));\n  const encoded = params.toString();\n  return call(host, token, PeopleSchema, {\n    method: 'GET',\n    path: `/api/partner/sources/people${encoded ? `?${encoded}` : ''}`,\n    source,\n  });\n}\n"]}

package/dist/teams-api.d.ts

@@ -1,4 +1,4 @@
-import { type ProductScopeList, type ProductScopeProductChange, type TeamScopes, type TeamScopesSetResult, type TeamAppSetResult, type TeamCreateRequest, type TeamCreateResult, type TeamDisconnectResult, type TeamMemberChangeResult, type TeamMemberInviteResult, type TeamMemberList, type TeamRenameResult, type TeamRoles, type TeamIntegrationStatus, type TeamIntegrationEventList, type TeamList, type TeamWebhookMintResult } from '@ekanos/integration-schema';
+import { type ProductScopeList, type ProductScopeProductChange, type TeamScopes, type TeamScopesSetResult, type TeamAppSetResult, type TeamCreateRequest, type TeamCreateResult, type TeamDisconnectResult, type TeamMemberChangeResult, type TeamMemberAddResult, type TeamMemberInviteResult, type TeamMemberList, type TeamRenameResult, type TeamRoles, type TeamIntegrationStatus, type TeamIntegrationEventList, type TeamList, type TeamWebhookMintResult } from '@ekanos/integration-schema';
 import type { z } from 'zod';
 /**
  * The CLI's client for a Source's teams and their integration setup — the
@@ -64,6 +64,7 @@ export declare function disconnectTeamIntegration(host: string, accessToken: str
     source: string;
     team: string;
     product: string;
+    mine?: boolean;
 }): Promise<TeamsApiResult<TeamDisconnectResult>>;
 export declare function createTeam(host: string, accessToken: string, source: string, body: TeamCreateRequest): Promise<TeamsApiResult<TeamCreateResult>>;
 export declare function renameTeam(host: string, accessToken: string, target: {
@@ -81,6 +82,17 @@ export declare function inviteTeamMember(host: string, accessToken: string, targ
     email: string;
     role: string;
 }): Promise<TeamsApiResult<TeamMemberInviteResult>>;
+/** `teams members add`: a member now, no invitation email (`PUT`). */
+export declare function addTeamMember(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+}, body: {
+    self: true;
+    role?: string;
+} | {
+    email: string;
+    role?: string;
+}): Promise<TeamsApiResult<TeamMemberAddResult>>;
 export declare function setTeamMemberRole(host: string, accessToken: string, target: {
     source: string;
     team: string;

package/dist/teams-api.js

@@ -1,4 +1,4 @@
-import { ProductScopeListSchema, ProductScopeProductChangeSchema, TeamScopesSchema, TeamScopesSetResultSchema, TeamAppSetResultSchema, TeamCreateResultSchema, TeamDisconnectResultSchema, TeamMemberChangeResultSchema, TeamMemberInviteResultSchema, TeamMemberListSchema, TeamRenameResultSchema, TeamRolesSchema, TeamIntegrationStatusSchema, TeamIntegrationEventListSchema, TeamListSchema, TeamWebhookMintResultSchema, } from '@ekanos/integration-schema';
+import { ProductScopeListSchema, ProductScopeProductChangeSchema, TeamScopesSchema, TeamScopesSetResultSchema, TeamAppSetResultSchema, TeamCreateResultSchema, TeamDisconnectResultSchema, TeamMemberChangeResultSchema, TeamMemberAddResultSchema, TeamMemberInviteResultSchema, TeamMemberListSchema, TeamRenameResultSchema, TeamRolesSchema, TeamIntegrationStatusSchema, TeamIntegrationEventListSchema, TeamListSchema, TeamWebhookMintResultSchema, } from '@ekanos/integration-schema';
 import { request } from './auth/ekanos-api.js';
 import { authRequiredError, forbiddenError, invalidStateError, networkError, notFoundError, usageError, validationError, } from './errors.js';
 export function listTeams(host, accessToken, source) {
@@ -33,7 +33,8 @@ export function mintTeamWebhook(host, accessToken, target, webhookId) {
 export function disconnectTeamIntegration(host, accessToken, target) {
     return call(host, accessToken, TeamDisconnectResultSchema, {
         method: 'DELETE',
-        path: integrationPath(target),
+        // `--mine`: the caller's own personal connection, never another's.
+        path: `${integrationPath(target)}${target.mine ? '/mine' : ''}`,
         source: target.source,
     });
 }
@@ -68,6 +69,15 @@ export function inviteTeamMember(host, accessToken, target, body) {
         body,
     });
 }
+/** `teams members add`: a member now, no invitation email (`PUT`). */
+export function addTeamMember(host, accessToken, target, body) {
+    return call(host, accessToken, TeamMemberAddResultSchema, {
+        method: 'PUT',
+        path: membersPath(target.team),
+        source: target.source,
+        body,
+    });
+}
 export function setTeamMemberRole(host, accessToken, target, role) {
     return call(host, accessToken, TeamMemberChangeResultSchema, {
         method: 'PATCH',
@@ -143,6 +153,7 @@ function integrationPath(target) {
 }
 /** One partner teams call; shared by the team-agent clients (`team-agents-api.ts`). */
 export async function call(host, accessToken, schema, init) {
+    var _a, _b;
     const response = await request(`${host}${init.path}${init.path.includes('?') ? '&' : '?'}${new URLSearchParams({ source: init.source })}`, {
         method: init.method,
         headers: Object.assign({ accept: 'application/json', authorization: `Bearer ${accessToken}` }, (init.body === undefined
@@ -165,10 +176,18 @@ export async function call(host, accessToken, schema, init) {
             ? "Only a Source admin manages its teams' integrations. Ask one to run it."
             : code === 'CONFIRM_NOT_PERMITTED'
                 ? "Only a Source admin of the team's Source, or someone who manages the team's agents, confirms what an agent may use."
-                : 'Run "ekanos sources" to list the sources you hold a seat on.');
+                : code === 'PERSONAL_AGENT_CREATOR_ONLY'
+                    ? 'A personal agent acts with its creator\'s own connections, so only they change it, run it, decide its approvals or cancel its runs. "ekanos teams agents list <team>" shows whose each agent is.'
+                    : code === 'NOT_A_TEAM_MEMBER'
+                        ? 'Add yourself to the team first ("ekanos teams members add <team> --self"), then run this again.'
+                        : code === 'AGENTS_MANAGE_REQUIRED'
+                            ? 'Take a role on the team that holds agents.manage ("ekanos teams roles list <team>"), or make it your own agent with --personal.'
+                            : code === 'PERSONAL_AGENT_CHANNEL_TRIGGER'
+                                ? 'Add a schedule or a webhook trigger instead: "ekanos teams triggers add <team> <key> schedule|webhook --prompt ...".'
+                                : 'Run "ekanos sources" to list the sources you hold a seat on.');
     }
     if (response.status === 404) {
-        throw notFoundError(message !== null && message !== void 0 ? message : 'Not found.', code === 'TEAM_NOT_FOUND'
+        throw notFoundError(message !== null && message !== void 0 ? message : 'Not found.', (_a = (code ? LIFECYCLE_HINTS[code] : undefined)) !== null && _a !== void 0 ? _a : (code === 'TEAM_NOT_FOUND'
             ? 'Run "ekanos teams list" to see the teams on this Source.'
             : code === 'PRODUCT_NOT_ENTITLED'
                 ? '"ekanos sources products" shows what this Source has; only a super-admin enables a product for a Source (in /admin).'
@@ -178,37 +197,56 @@ export async function call(host, accessToken, schema, init) {
                         ? 'Run "ekanos teams show <team> <product>" to see its team apps and webhooks.'
                         : code === 'MEMBER_NOT_FOUND'
                             ? 'Run "ekanos teams members list <team>" to see its members and invitations.'
-                            : code === 'SKILL_NOT_FOUND'
-                                ? 'Run "ekanos skills list --team <team>" (and "ekanos skills list") to see the skills this team can use.'
-                                : (code === null || code === void 0 ? void 0 : code.startsWith('AGENT_')) || code === 'TEMPLATE_NOT_FOUND'
-                                    ? 'Run "ekanos teams agents list <team>" to see the team\'s agents.'
-                                    : /^(TRIGGER|LINK|MCP)_/.test(code !== null && code !== void 0 ? code : '')
-                                        ? 'List them first: "ekanos teams triggers|links|mcp list <team> ..."'
-                                        : 'Run "ekanos sources" to list the sources you hold a seat on.');
+                            : code === 'NOT_A_SOURCE_USER'
+                                ? 'Invite them instead, by email: "ekanos teams members invite <team> <email> --role <role>".'
+                                : code === 'SKILL_NOT_FOUND'
+                                    ? 'Run "ekanos skills list --team <team>" (and "ekanos skills list") to see the skills this team can use.'
+                                    : (code === null || code === void 0 ? void 0 : code.startsWith('AGENT_')) ||
+                                        code === 'TEMPLATE_NOT_FOUND'
+                                        ? 'Run "ekanos teams agents list <team>" to see the team\'s agents.'
+                                        : /^(TRIGGER|LINK|MCP)_/.test(code !== null && code !== void 0 ? code : '')
+                                            ? 'List them first: "ekanos teams triggers|links|mcp list <team> ..."'
+                                            : 'Run "ekanos sources" to list the sources you hold a seat on.'));
     }
     if (response.status === 409 && code === 'NO_TEAM_APP') {
         throw invalidStateError(message !== null && message !== void 0 ? message : 'This integration takes no team app.', 'Teams connect through the Source\'s app: "ekanos apps show <product>".');
     }
     if (response.status === 409 || response.status === 422) {
-        throw invalidStateError(message !== null && message !== void 0 ? message : 'The host refused the change.', code === 'SLUG_TAKEN'
+        throw invalidStateError(message !== null && message !== void 0 ? message : 'The host refused the change.', (_b = (code ? LIFECYCLE_HINTS[code] : undefined)) !== null && _b !== void 0 ? _b : (code === 'SLUG_TAKEN'
             ? 'Pick another with --slug, or run "ekanos teams list" to see the teams.'
             : code === 'AGENT_VERSION_CHANGED'
                 ? 'A newer version was published since it was shown to you. Review it with "ekanos teams agents show <team> <key>", then run "ekanos teams agents confirm" again.'
-                : code === 'ALREADY_MEMBER' || code === 'ALREADY_INVITED'
-                    ? 'Run "ekanos teams members list <team>"; change a role with "ekanos teams members role <team> <email> <role>".'
-                    : code === 'PRIMARY_OWNER'
-                        ? "The primary owner's ownership is transferred in the app (team Settings → Members)."
-                        : code === 'TEAM_ACCOUNTS_DISABLED'
-                            ? 'Ekanos switches team accounts on for a Source; ask a super-admin.'
-                            : code === 'PERSONAL_CONNECTION'
-                                ? "The member who made it disconnects it on the team's Integrations page in the app."
-                                : code === 'MCP_SERVER_FROM_TEMPLATE'
-                                    ? 'It stays while the agent template declares it: change the template, apply and publish.'
-                                    : code === 'PRODUCT_NOT_ENTITLED'
-                                        ? '"ekanos sources products" shows what this Source has; only those can be in its scopes.'
-                                        : code === 'TEMPLATE_ARCHIVED'
-                                            ? 'Unarchive it first: "ekanos agents unarchive <key>".'
-                                            : 'See "ekanos teams --help".');
+                : code === 'ROLE_NEEDS_ACCEPTANCE'
+                    ? 'Add them with a lower role (--role admin), or invite them to the top role so they accept it: "ekanos teams members invite <team> <email> --role owner".'
+                    : code === 'AGENT_VERSION_CONFLICT'
+                        ? `Review it with "ekanos teams agents show <team> <key>", then apply with --base-version ${typeof body.latestVersion === 'number' ? body.latestVersion : '<its version>'} (or --overwrite to replace it anyway).`
+                        : code === 'ALREADY_MEMBER' || code === 'ALREADY_INVITED'
+                            ? 'Run "ekanos teams members list <team>"; change a role with "ekanos teams members role <team> <email> <role>".'
+                            : code === 'PRIMARY_OWNER'
+                                ? "The primary owner's ownership is transferred in the app (team Settings → Members)."
+                                : code === 'TEAM_ACCOUNTS_DISABLED'
+                                    ? 'Ekanos switches team accounts on for a Source; ask a super-admin.'
+                                    : code === 'PERSONAL_CONNECTION'
+                                        ? 'Each member disconnects their own: "ekanos teams disconnect <team> <product> --mine".'
+                                        : code === 'MCP_SERVER_FROM_TEMPLATE'
+                                            ? 'It stays while the agent template declares it: change the template, apply and publish.'
+                                            : code === 'PRODUCT_NOT_ENTITLED'
+                                                ? '"ekanos sources products" shows what this Source has; only those can be in its scopes.'
+                                                : code === 'TEMPLATE_ARCHIVED'
+                                                    ? 'Unarchive it first: "ekanos agents unarchive <key>".'
+                                                    : 'See "ekanos teams --help".'));
+    }
+    if (response.status === 400 && code === 'INVALID_AGENT') {
+        const issues = Array.isArray(body.issues)
+            ? body.issues.flatMap((issue) => { var _a; return typeof issue === 'object' &&
+                issue !== null &&
+                typeof issue.message === 'string'
+                ? [
+                    `  ${String((_a = issue.path) !== null && _a !== void 0 ? _a : '(root)')}: ${issue.message}`,
+                ]
+                : []; })
+            : [];
+        throw validationError([message !== null && message !== void 0 ? message : 'The agent is not valid.', ...issues].join('\n'), 'Fix agent.json and run it again.');
     }
     if (response.status === 400 && code === 'UNKNOWN_ROLE') {
         throw validationError(message !== null && message !== void 0 ? message : 'No such role.', 'Run "ekanos teams roles list <team>" for the roles this Source uses.');
@@ -216,9 +254,15 @@ export async function call(host, accessToken, schema, init) {
     if (response.status === 400 && code === 'INVALID_FIELDS') {
         throw validationError(message !== null && message !== void 0 ? message : 'The host refused the fields.', 'Run "ekanos teams app set <team> <product>" again.');
     }
+    if (response.status === 400 && code === 'SECRET_AS_ARGUMENT') {
+        throw usageError(message !== null && message !== void 0 ? message : 'A secret was passed as an argument.', 'Leave that field out of --set: pass it with --set-secret <field>=env:<NAME>|file:<path>|stdin or --browser, or run the command at your terminal, which asks for it hidden.');
+    }
     if (response.status === 400) {
         throw usageError(message !== null && message !== void 0 ? message : 'The host refused the request.', 'See "ekanos teams --help".');
     }
+    if (response.status >= 500 && code && message) {
+        throw networkError(message, 'The host could not finish it; retry shortly.');
+    }
     if (!response.ok) {
         throw networkError(`${host}${init.path} responded ${response.status}.`, response.status >= 500
             ? 'The Ekanos deployment returned a server error. Retry shortly.'
@@ -230,6 +274,23 @@ export async function call(host, accessToken, schema, init) {
     }
     return { status: 'ok', data: parsed.data };
 }
+/** Next steps for the refusals of the team lifecycle, roles and groups calls. */
+const LIFECYCLE_HINTS = {
+    GROUP_NOT_FOUND: 'Run "ekanos teams groups list <team>" to see its groups (name one by name or id).',
+    GROUP_AMBIGUOUS: 'Run "ekanos teams groups list <team> --json" and name the group by its id.',
+    GROUP_EXISTS: 'Pick another name, or change that group: "ekanos teams groups update <team> <group> …".',
+    ROLE_NOT_FOUND: 'Run "ekanos sources roles list" to see the Source\'s roles.',
+    ROLE_EXISTS: 'Change it instead: "ekanos sources roles update <role> …", or pick another name.',
+    SYSTEM_ROLE: 'Owner, admin and member are fixed; create a custom role with "ekanos sources roles create <name> …".',
+    ROLE_IN_USE: 'Give its members another role first: "ekanos teams members role <team> <email> <role>"; "ekanos sources people" shows who holds what.',
+    WORKSPACE_NOT_FOUND: 'Run "ekanos teams workspace list <team>" to see its workspaces.',
+    WORKSPACES_DISABLED: 'Workspaces are a Source Flag (enable_workspaces) only a super-admin switches.',
+    NOT_A_MEMBER: 'Run "ekanos teams members list <team>" to see who is on it; you leave only a team you are a member of.',
+    NOT_CONNECTED: 'Connect it first: "ekanos teams connect <team> <product>"; "ekanos teams health <team>" lists what it has.',
+    USER_SCOPED: 'Each person connects it for themselves and checks it on their own Integrations → Health page.',
+    NO_HEALTH_CHECK: 'The product has no package on this deployment; "ekanos sources products" shows what is registered.',
+    PRODUCT_NOT_VISIBLE_TO_TEAM: 'Run "ekanos teams scope show <team>" for the products the team sees.',
+};
 async function readOptionalJson(response) {
     try {
         const parsed = await response.json();