@ekanos/cli 0.9.0 → 0.11.0

package/dist/reviewers-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewers-api.js","sourceRoot":"","sources":["../src/reviewers-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,6BAA6B,EAE7B,wBAAwB,EAExB,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,UAAU,CAAC;AAuBlB,MAAM,IAAI,GAAG,wBAAwB,CAAC;AAEtC,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE;QACvD,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,EAAE,MAAM,EAAE;KAClB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAA4D;IAE5D,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,6BAA6B,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,EAAE,MAAM,EAAE;QACjB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,MAAwC;IAExC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,gCAAgC,EAAE;QAC/D,MAAM,EAAE,QAAQ;QAChB,KAAK,kBACH,MAAM,EACN,KAAK,EAAE,MAAM,CAAC,KAAK,IAChB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9C;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAIC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,GAAG,IAAI,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACnD;QACE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CACF,CAAC;IAEF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,6DAA6D;YAC/D,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,EACvB,IAAI,KAAK,oBAAoB;YAC3B,CAAC,CAAC,mFAAmF;YACrF,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBACzB,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,IAAI,KAAK,oBAAoB;oBAC7B,CAAC,CAAC,4CAA4C;oBAC9C,CAAC,CAAC,8DAA8D,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EAC9C,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,kEAAkE,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,8CAA8C,EAC5D,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import {\n  type ReviewerReach,\n  type SourceReviewerAddResult,\n  SourceReviewerAddResultSchema,\n  type SourceReviewerList,\n  SourceReviewerListSchema,\n  type SourceReviewerRemoveResult,\n  SourceReviewerRemoveResultSchema,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  networkError,\n  notFoundError,\n  usageError,\n} from './errors';\n\n/**\n * The CLI's client for a Source's named reviewers — the people who decide\n * agent reply drafts held under an `approve` policy.\n *\n *   GET    /api/partner/reviewers?source=<slug>                 → SourceReviewerList\n *   POST   /api/partner/reviewers?source=<slug>  { email, reach, team? }\n *                                                               → SourceReviewerAddResult\n *   DELETE /api/partner/reviewers?source=<slug>&email=<email>[&team=<slug>]\n *                                                               → SourceReviewerRemoveResult\n *\n *   → 401 / 3xx  refresh once and retry\n *   → 403 { code: \"SOURCE_ADMIN_REQUIRED\" | \"MFA_REQUIRED\" | \"FORBIDDEN\" }\n *   → 404 { code: \"USER_NOT_IN_SOURCE\" | \"TEAM_NOT_FOUND\" | \"REVIEWER_NOT_FOUND\"\n *               | \"SOURCE_NOT_FOUND\" }\n *   → 400 { code: \"INVALID_REQUEST\" }\n */\n\nexport type ReviewersApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\nconst PATH = '/api/partner/reviewers';\n\nexport function listReviewers(\n  host: string,\n  accessToken: string,\n  source: string,\n): Promise<ReviewersApiResult<SourceReviewerList>> {\n  return call(host, accessToken, SourceReviewerListSchema, {\n    method: 'GET',\n    query: { source },\n  });\n}\n\nexport function addReviewer(\n  host: string,\n  accessToken: string,\n  source: string,\n  body: { email: string; reach: ReviewerReach; team?: string },\n): Promise<ReviewersApiResult<SourceReviewerAddResult>> {\n  return call(host, accessToken, SourceReviewerAddResultSchema, {\n    method: 'POST',\n    query: { source },\n    body,\n  });\n}\n\nexport function removeReviewer(\n  host: string,\n  accessToken: string,\n  source: string,\n  target: { email: string; team?: string },\n): Promise<ReviewersApiResult<SourceReviewerRemoveResult>> {\n  return call(host, accessToken, SourceReviewerRemoveResultSchema, {\n    method: 'DELETE',\n    query: {\n      source,\n      email: target.email,\n      ...(target.team ? { team: target.team } : {}),\n    },\n  });\n}\n\nasync function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'POST' | 'DELETE';\n    query: Record<string, string>;\n    body?: unknown;\n  },\n): Promise<ReviewersApiResult<T>> {\n  const response = await request(\n    `${host}${PATH}?${new URLSearchParams(init.query)}`,\n    {\n      method: init.method,\n      headers: {\n        accept: 'application/json',\n        authorization: `Bearer ${accessToken}`,\n        ...(init.body === undefined\n          ? {}\n          : { 'content-type': 'application/json' }),\n      },\n      body: init.body === undefined ? undefined : JSON.stringify(init.body),\n    },\n  );\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? 'Only a Source admin names its reviewers. Ask one to run it.'\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      code === 'USER_NOT_IN_SOURCE'\n        ? 'A reviewer must be a member of one of this Source\\'s teams — \"ekanos teams list\".'\n        : code === 'TEAM_NOT_FOUND'\n          ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n          : code === 'REVIEWER_NOT_FOUND'\n            ? '\"ekanos reviewers list\" shows who reviews.'\n            : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      'See \"ekanos reviewers --help\".',\n    );\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${PATH} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the reviewers route.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${PATH} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the reviewers contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}

package/dist/runs-api.d.ts

@@ -0,0 +1,34 @@
+import { type AgentApprovalDecideRequest, type AgentApprovalDecided, type AgentApprovalList, type AgentRunDetail, type AgentRunList, type AgentRunStartRequest, type AgentRunStarted } from '@ekanos/integration-schema';
+/**
+ * The CLI's client for a team's agent runs and approvals — `ekanos runs`,
+ * `ekanos agents test` and `ekanos approvals`.
+ *
+ *   GET  /api/partner/teams/<team>/runs?source=<slug>[&agent=<key>] → AgentRunList
+ *   POST /api/partner/teams/<team>/runs?source=<slug>                → AgentRunStarted
+ *   GET  /api/partner/teams/<team>/runs/<id>?source=<slug>[&after=] → AgentRunDetail
+ *   GET  /api/partner/teams/<team>/approvals?source=<slug>           → AgentApprovalList
+ *   POST /api/partner/teams/<team>/approvals/<id>?source=<slug>      → AgentApprovalDecided
+ */
+export type RunsApiResult<T> = {
+    status: 'ok';
+    data: T;
+} | {
+    status: 'unauthorized';
+};
+interface TeamTarget {
+    source: string;
+    team: string;
+}
+export declare function listRuns(host: string, accessToken: string, target: TeamTarget & {
+    agent?: string;
+}): Promise<RunsApiResult<AgentRunList>>;
+export declare function startRun(host: string, accessToken: string, target: TeamTarget, body: AgentRunStartRequest): Promise<RunsApiResult<AgentRunStarted>>;
+export declare function showRun(host: string, accessToken: string, target: TeamTarget & {
+    runId: string;
+    after?: number;
+}): Promise<RunsApiResult<AgentRunDetail>>;
+export declare function listApprovals(host: string, accessToken: string, target: TeamTarget): Promise<RunsApiResult<AgentApprovalList>>;
+export declare function decideApproval(host: string, accessToken: string, target: TeamTarget & {
+    approvalId: string;
+}, body: AgentApprovalDecideRequest): Promise<RunsApiResult<AgentApprovalDecided>>;
+export {};

package/dist/runs-api.js

@@ -0,0 +1,112 @@
+import { AgentApprovalDecidedSchema, AgentApprovalListSchema, AgentRunDetailSchema, AgentRunListSchema, AgentRunStartedSchema, } from '@ekanos/integration-schema';
+import { request } from './auth/ekanos-api.js';
+import { authRequiredError, forbiddenError, invalidStateError, networkError, notFoundError, usageError, } from './errors.js';
+export function listRuns(host, accessToken, target) {
+    return call(host, accessToken, AgentRunListSchema, {
+        method: 'GET',
+        path: `${teamPath(target)}/runs`,
+        query: Object.assign({ source: target.source }, (target.agent ? { agent: target.agent } : {})),
+    });
+}
+export function startRun(host, accessToken, target, body) {
+    return call(host, accessToken, AgentRunStartedSchema, {
+        method: 'POST',
+        path: `${teamPath(target)}/runs`,
+        query: { source: target.source },
+        body,
+    });
+}
+export function showRun(host, accessToken, target) {
+    return call(host, accessToken, AgentRunDetailSchema, {
+        method: 'GET',
+        path: `${teamPath(target)}/runs/${encodeURIComponent(target.runId)}`,
+        query: Object.assign({ source: target.source }, (target.after ? { after: String(target.after) } : {})),
+    });
+}
+export function listApprovals(host, accessToken, target) {
+    return call(host, accessToken, AgentApprovalListSchema, {
+        method: 'GET',
+        path: `${teamPath(target)}/approvals`,
+        query: { source: target.source },
+    });
+}
+export function decideApproval(host, accessToken, target, body) {
+    return call(host, accessToken, AgentApprovalDecidedSchema, {
+        method: 'POST',
+        path: `${teamPath(target)}/approvals/${encodeURIComponent(target.approvalId)}`,
+        query: { source: target.source },
+        body,
+    });
+}
+function teamPath(target) {
+    return `/api/partner/teams/${encodeURIComponent(target.team)}`;
+}
+async function call(host, accessToken, schema, init) {
+    const response = await request(`${host}${init.path}?${new URLSearchParams(init.query)}`, {
+        method: init.method,
+        headers: Object.assign({ accept: 'application/json', authorization: `Bearer ${accessToken}` }, (init.body === undefined
+            ? {}
+            : { 'content-type': 'application/json' })),
+        body: init.body === undefined ? undefined : JSON.stringify(init.body),
+    });
+    if (response.status === 401 ||
+        (response.status >= 300 && response.status < 400)) {
+        return { status: 'unauthorized' };
+    }
+    const body = await readOptionalJson(response);
+    const code = typeof body.code === 'string' ? body.code : null;
+    const message = typeof body.error === 'string' && body.error ? body.error : null;
+    if (response.status === 403 && code === 'MFA_REQUIRED') {
+        throw authRequiredError(message !== null && message !== void 0 ? message : `${host} requires multi-factor authentication.`, 'Complete MFA in the browser, then run "ekanos login" again.');
+    }
+    if (response.status === 403) {
+        throw forbiddenError(message !== null && message !== void 0 ? message : 'Not permitted on this Source.', code === 'SOURCE_ADMIN_REQUIRED'
+            ? "Only a Source admin runs its teams' agents and decides their approvals."
+            : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 404) {
+        throw notFoundError(message !== null && message !== void 0 ? message : 'Not found.', code === 'TEAM_NOT_FOUND'
+            ? 'Run "ekanos teams list" to see the teams on this Source.'
+            : code === 'AGENT_NOT_FOUND' || code === 'TEMPLATE_NOT_FOUND'
+                ? 'Run "ekanos agents list" for the Source\'s agents; a team runs one once it is turned on there.'
+                : code === 'RUN_NOT_FOUND'
+                    ? 'Run "ekanos runs list --team <slug>" for the team\'s runs.'
+                    : code === 'NOT_FOUND'
+                        ? 'Run "ekanos approvals list --team <slug>" for what is waiting.'
+                        : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 409 || response.status === 502) {
+        throw invalidStateError(message !== null && message !== void 0 ? message : 'The host refused the request in its current state.', code === 'ALREADY_DECIDED'
+            ? 'Run "ekanos approvals list --team <slug>" for what is still waiting.'
+            : code === 'RESUME_FAILED'
+                ? 'The decision is saved; the run picks it up shortly. Check with "ekanos runs show <run-id>".'
+                : 'Check the agent in the app: it may be paused, need a connection, or Agents may be off for this Source.');
+    }
+    if (response.status === 400) {
+        throw usageError(message !== null && message !== void 0 ? message : 'The host refused the request.', code === 'NOT_EDITABLE'
+            ? 'Only a reply draft can be edited; approve or reject it instead.'
+            : 'See "ekanos runs --help" / "ekanos approvals --help".');
+    }
+    if (!response.ok) {
+        throw networkError(`${host}${init.path} responded ${response.status}.`, response.status >= 500
+            ? 'The Ekanos deployment returned a server error. Retry shortly.'
+            : 'Confirm the host runs a build that includes the runs routes.');
+    }
+    const parsed = schema.safeParse(body.data);
+    if (!parsed.success) {
+        throw networkError(`${host}${init.path} answered in a shape this CLI does not read.`, 'Run "ekanos upgrade" — the CLI and the host disagree on the runs contract.');
+    }
+    return { status: 'ok', data: parsed.data };
+}
+async function readOptionalJson(response) {
+    try {
+        const parsed = await response.json();
+        return typeof parsed === 'object' && parsed !== null
+            ? parsed
+            : {};
+    }
+    catch (_a) {
+        return {};
+    }
+}
+//# sourceMappingURL=runs-api.js.map

package/dist/runs-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs-api.js","sourceRoot":"","sources":["../src/runs-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAE1B,uBAAuB,EAEvB,oBAAoB,EAEpB,kBAAkB,EAGlB,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,UAAU,GACX,MAAM,UAAU,CAAC;AAsBlB,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,WAAmB,EACnB,MAAuC;IAEvC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,kBAAkB,EAAE;QACjD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO;QAChC,KAAK,kBACH,MAAM,EAAE,MAAM,CAAC,MAAM,IAClB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACjD;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,WAAmB,EACnB,MAAkB,EAClB,IAA0B;IAE1B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO;QAChC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,OAAO,CACrB,IAAY,EACZ,WAAmB,EACnB,MAAsD;IAEtD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,oBAAoB,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACpE,KAAK,kBACH,MAAM,EAAE,MAAM,CAAC,MAAM,IAClB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CACzD;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAmB,EACnB,MAAkB;IAElB,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,uBAAuB,EAAE;QACtD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY;QACrC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAAmB,EACnB,MAA2C,EAC3C,IAAgC;IAEhC,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE;QAC9E,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAChC,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,MAAkB;IAClC,OAAO,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACxD;QACE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CACF,CAAC;IAEF,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,yEAAyE;YAC3E,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,YAAY,EACvB,IAAI,KAAK,gBAAgB;YACvB,CAAC,CAAC,0DAA0D;YAC5D,CAAC,CAAC,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,oBAAoB;gBAC3D,CAAC,CAAC,gGAAgG;gBAClG,CAAC,CAAC,IAAI,KAAK,eAAe;oBACxB,CAAC,CAAC,4DAA4D;oBAC9D,CAAC,CAAC,IAAI,KAAK,WAAW;wBACpB,CAAC,CAAC,gEAAgE;wBAClE,CAAC,CAAC,8DAA8D,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,oDAAoD,EAC/D,IAAI,KAAK,iBAAiB;YACxB,CAAC,CAAC,sEAAsE;YACxE,CAAC,CAAC,IAAI,KAAK,eAAe;gBACxB,CAAC,CAAC,6FAA6F;gBAC/F,CAAC,CAAC,wGAAwG,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,cAAc;YACrB,CAAC,CAAC,iEAAiE;YACnE,CAAC,CAAC,uDAAuD,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,EACnD,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,8CAA8C,EACjE,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import {\n  type AgentApprovalDecideRequest,\n  type AgentApprovalDecided,\n  AgentApprovalDecidedSchema,\n  type AgentApprovalList,\n  AgentApprovalListSchema,\n  type AgentRunDetail,\n  AgentRunDetailSchema,\n  type AgentRunList,\n  AgentRunListSchema,\n  type AgentRunStartRequest,\n  type AgentRunStarted,\n  AgentRunStartedSchema,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  invalidStateError,\n  networkError,\n  notFoundError,\n  usageError,\n} from './errors';\n\n/**\n * The CLI's client for a team's agent runs and approvals — `ekanos runs`,\n * `ekanos agents test` and `ekanos approvals`.\n *\n *   GET  /api/partner/teams/<team>/runs?source=<slug>[&agent=<key>] → AgentRunList\n *   POST /api/partner/teams/<team>/runs?source=<slug>                → AgentRunStarted\n *   GET  /api/partner/teams/<team>/runs/<id>?source=<slug>[&after=] → AgentRunDetail\n *   GET  /api/partner/teams/<team>/approvals?source=<slug>           → AgentApprovalList\n *   POST /api/partner/teams/<team>/approvals/<id>?source=<slug>      → AgentApprovalDecided\n */\n\nexport type RunsApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\ninterface TeamTarget {\n  source: string;\n  team: string;\n}\n\nexport function listRuns(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { agent?: string },\n): Promise<RunsApiResult<AgentRunList>> {\n  return call(host, accessToken, AgentRunListSchema, {\n    method: 'GET',\n    path: `${teamPath(target)}/runs`,\n    query: {\n      source: target.source,\n      ...(target.agent ? { agent: target.agent } : {}),\n    },\n  });\n}\n\nexport function startRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget,\n  body: AgentRunStartRequest,\n): Promise<RunsApiResult<AgentRunStarted>> {\n  return call(host, accessToken, AgentRunStartedSchema, {\n    method: 'POST',\n    path: `${teamPath(target)}/runs`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nexport function showRun(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { runId: string; after?: number },\n): Promise<RunsApiResult<AgentRunDetail>> {\n  return call(host, accessToken, AgentRunDetailSchema, {\n    method: 'GET',\n    path: `${teamPath(target)}/runs/${encodeURIComponent(target.runId)}`,\n    query: {\n      source: target.source,\n      ...(target.after ? { after: String(target.after) } : {}),\n    },\n  });\n}\n\nexport function listApprovals(\n  host: string,\n  accessToken: string,\n  target: TeamTarget,\n): Promise<RunsApiResult<AgentApprovalList>> {\n  return call(host, accessToken, AgentApprovalListSchema, {\n    method: 'GET',\n    path: `${teamPath(target)}/approvals`,\n    query: { source: target.source },\n  });\n}\n\nexport function decideApproval(\n  host: string,\n  accessToken: string,\n  target: TeamTarget & { approvalId: string },\n  body: AgentApprovalDecideRequest,\n): Promise<RunsApiResult<AgentApprovalDecided>> {\n  return call(host, accessToken, AgentApprovalDecidedSchema, {\n    method: 'POST',\n    path: `${teamPath(target)}/approvals/${encodeURIComponent(target.approvalId)}`,\n    query: { source: target.source },\n    body,\n  });\n}\n\nfunction teamPath(target: TeamTarget): string {\n  return `/api/partner/teams/${encodeURIComponent(target.team)}`;\n}\n\nasync function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'POST';\n    path: string;\n    query: Record<string, string>;\n    body?: unknown;\n  },\n): Promise<RunsApiResult<T>> {\n  const response = await request(\n    `${host}${init.path}?${new URLSearchParams(init.query)}`,\n    {\n      method: init.method,\n      headers: {\n        accept: 'application/json',\n        authorization: `Bearer ${accessToken}`,\n        ...(init.body === undefined\n          ? {}\n          : { 'content-type': 'application/json' }),\n      },\n      body: init.body === undefined ? undefined : JSON.stringify(init.body),\n    },\n  );\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = typeof body.code === 'string' ? body.code : null;\n  const message =\n    typeof body.error === 'string' && body.error ? body.error : null;\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? \"Only a Source admin runs its teams' agents and decides their approvals.\"\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? 'Not found.',\n      code === 'TEAM_NOT_FOUND'\n        ? 'Run \"ekanos teams list\" to see the teams on this Source.'\n        : code === 'AGENT_NOT_FOUND' || code === 'TEMPLATE_NOT_FOUND'\n          ? 'Run \"ekanos agents list\" for the Source\\'s agents; a team runs one once it is turned on there.'\n          : code === 'RUN_NOT_FOUND'\n            ? 'Run \"ekanos runs list --team <slug>\" for the team\\'s runs.'\n            : code === 'NOT_FOUND'\n              ? 'Run \"ekanos approvals list --team <slug>\" for what is waiting.'\n              : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n  if (response.status === 409 || response.status === 502) {\n    throw invalidStateError(\n      message ?? 'The host refused the request in its current state.',\n      code === 'ALREADY_DECIDED'\n        ? 'Run \"ekanos approvals list --team <slug>\" for what is still waiting.'\n        : code === 'RESUME_FAILED'\n          ? 'The decision is saved; the run picks it up shortly. Check with \"ekanos runs show <run-id>\".'\n          : 'Check the agent in the app: it may be paused, need a connection, or Agents may be off for this Source.',\n    );\n  }\n  if (response.status === 400) {\n    throw usageError(\n      message ?? 'The host refused the request.',\n      code === 'NOT_EDITABLE'\n        ? 'Only a reply draft can be edited; approve or reject it instead.'\n        : 'See \"ekanos runs --help\" / \"ekanos approvals --help\".',\n    );\n  }\n  if (!response.ok) {\n    throw networkError(\n      `${host}${init.path} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the runs routes.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${init.path} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the runs contract.',\n    );\n  }\n  return { status: 'ok', data: parsed.data };\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n"]}

package/dist/skills-api.d.ts

@@ -0,0 +1,28 @@
+import { type SourceSkillList, type SourceSkillPushRequest, type SourceSkillPushResult, type SourceSkillShow } from '@ekanos/integration-schema';
+/**
+ * The CLI's client for a Source's skills.
+ *
+ * ---------------------------------------------------------------------------
+ * WIRE CONTRACT — the `SourceSkill*` schemas in `@ekanos/integration-schema`,
+ * which the host's `/api/partner/skills` routes build and this parses.
+ *
+ *   GET  /api/partner/skills?source=<s>[&team=<t>]           → { ok, data: SourceSkillList }
+ *   GET  /api/partner/skills/<slug>?source=<s>[&team=<t>]    → { ok, data: SourceSkillShow }
+ *   POST /api/partner/skills     SourceSkillPushRequest      → { ok, data: SourceSkillPushResult }
+ *
+ *   → 401 / 3xx                        refresh once and retry
+ *   → 400 { code: "INVALID_SKILL", issues: { path, message }[] }
+ *   → 403 { code: "MFA_REQUIRED" | "FORBIDDEN" | "SOURCE_ADMIN_REQUIRED" }
+ *   → 404 { code: "SOURCE_NOT_FOUND" | "TEAM_NOT_FOUND" | "SKILL_NOT_FOUND" }
+ *   → 409 { code: "SKILL_NOT_PROMPT" }
+ * ---------------------------------------------------------------------------
+ */
+export type SkillsApiResult<T> = {
+    status: 'ok';
+    data: T;
+} | {
+    status: 'unauthorized';
+};
+export declare function listSkills(host: string, accessToken: string, source: string, team?: string): Promise<SkillsApiResult<SourceSkillList>>;
+export declare function showSkill(host: string, accessToken: string, source: string, slug: string, team?: string): Promise<SkillsApiResult<SourceSkillShow>>;
+export declare function pushSkill(host: string, accessToken: string, body: SourceSkillPushRequest): Promise<SkillsApiResult<SourceSkillPushResult>>;

package/dist/skills-api.js

@@ -0,0 +1,104 @@
+import { SourceSkillListSchema, SourceSkillPushResultSchema, SourceSkillShowSchema, } from '@ekanos/integration-schema';
+import { request } from './auth/ekanos-api.js';
+import { authRequiredError, forbiddenError, invalidStateError, networkError, notFoundError, usageError, validationError, } from './errors.js';
+const ROUTE = '/api/partner/skills';
+function query(source, team) {
+    return new URLSearchParams(team ? { source, team } : { source });
+}
+export function listSkills(host, accessToken, source, team) {
+    return call(host, accessToken, SourceSkillListSchema, {
+        method: 'GET',
+        path: `${ROUTE}?${query(source, team)}`,
+        subject: team !== null && team !== void 0 ? team : source,
+    });
+}
+export function showSkill(host, accessToken, source, slug, team) {
+    return call(host, accessToken, SourceSkillShowSchema, {
+        method: 'GET',
+        path: `${ROUTE}/${encodeURIComponent(slug)}?${query(source, team)}`,
+        subject: slug,
+    });
+}
+export function pushSkill(host, accessToken, body) {
+    return call(host, accessToken, SourceSkillPushResultSchema, {
+        method: 'POST',
+        path: ROUTE,
+        body,
+        subject: body.slug,
+    });
+}
+async function call(host, accessToken, schema, init) {
+    const response = await request(`${host}${init.path}`, {
+        method: init.method,
+        headers: Object.assign({ accept: 'application/json', authorization: `Bearer ${accessToken}` }, (init.body === undefined
+            ? {}
+            : { 'content-type': 'application/json' })),
+        body: init.body === undefined ? undefined : JSON.stringify(init.body),
+    });
+    if (response.status === 401 ||
+        (response.status >= 300 && response.status < 400)) {
+        return { status: 'unauthorized' };
+    }
+    const body = await readOptionalJson(response);
+    const code = str(body.code);
+    const message = str(body.error);
+    if (response.status === 400 && code === 'INVALID_SKILL') {
+        const issues = Array.isArray(body.issues)
+            ? body.issues.flatMap((issue) => {
+                if (typeof issue !== 'object' || issue === null)
+                    return [];
+                const { path, message: text } = issue;
+                return [`  ${String(path)}: ${String(text)}`];
+            })
+            : [];
+        throw validationError([message !== null && message !== void 0 ? message : 'The host refused the skill.', ...issues].join('\n'), 'Fix the skill folder and push again.');
+    }
+    if (response.status === 400 || response.status === 413) {
+        throw usageError(message !== null && message !== void 0 ? message : (response.status === 413
+            ? 'The skill folder is too large to send.'
+            : 'The host refused the request.'), 'See "ekanos skills --help" for each subcommand\'s arguments.');
+    }
+    if (response.status === 403 && code === 'MFA_REQUIRED') {
+        throw authRequiredError(message !== null && message !== void 0 ? message : `${host} requires multi-factor authentication.`, 'Complete MFA in the browser, then run "ekanos login" again.');
+    }
+    if (response.status === 403) {
+        throw forbiddenError(message !== null && message !== void 0 ? message : 'Not permitted on this Source.', code === 'SOURCE_ADMIN_REQUIRED'
+            ? 'Only a Source admin pushes skills or reads team skills. Ask one to run it.'
+            : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 404) {
+        throw notFoundError(message !== null && message !== void 0 ? message : `"${init.subject}" was not found.`, code === 'SOURCE_NOT_FOUND'
+            ? 'Run "ekanos sources" to list the sources you hold a seat on.'
+            : code === 'TEAM_NOT_FOUND'
+                ? 'Run "ekanos teams list" to see the Source\'s teams.'
+                : 'Run "ekanos skills list" to see the skills.');
+    }
+    if (response.status === 409) {
+        throw invalidStateError(message !== null && message !== void 0 ? message : `"${init.subject}" cannot be pushed.`, 'Rename the skill folder (its slug) and push again.');
+    }
+    if (!response.ok) {
+        throw networkError(`${host}${init.path.split('?')[0]} responded ${response.status}.`, response.status >= 500
+            ? 'The Ekanos deployment returned a server error. Retry shortly.'
+            : 'Confirm the host runs a build that includes the skills routes.');
+    }
+    const parsed = schema.safeParse(body.data);
+    if (!parsed.success) {
+        throw networkError(`${host}${ROUTE} answered in a shape this CLI does not read.`, 'Run "ekanos upgrade" — the CLI and the host disagree on the skills contract.');
+    }
+    return { status: 'ok', data: parsed.data };
+}
+async function readOptionalJson(response) {
+    try {
+        const parsed = await response.json();
+        return typeof parsed === 'object' && parsed !== null
+            ? parsed
+            : {};
+    }
+    catch (_a) {
+        return {};
+    }
+}
+function str(value) {
+    return typeof value === 'string' && value.length > 0 ? value : null;
+}
+//# sourceMappingURL=skills-api.js.map

package/dist/skills-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-api.js","sourceRoot":"","sources":["../src/skills-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,qBAAqB,EAGrB,2BAA2B,EAE3B,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAyBlB,MAAM,KAAK,GAAG,qBAAqB,CAAC;AAEpC,SAAS,KAAK,CAAC,MAAc,EAAE,IAAwB;IACrD,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAAa;IAEb,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACpD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;QACvC,OAAO,EAAE,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,MAAM;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,WAAmB,EACnB,MAAc,EACd,IAAY,EACZ,IAAa;IAEb,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,qBAAqB,EAAE;QACpD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,GAAG,KAAK,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;QACnE,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,IAAY,EACZ,WAAmB,EACnB,IAA4B;IAE5B,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,2BAA2B,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,KAAK;QACX,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,IAAI;KACnB,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,WAAmB,EACnB,MAAoB,EACpB,IAKC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,kBACL,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,UAAU,WAAW,EAAE,IACnC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAC5C;QACD,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;KACtE,CAAC,CAAC;IAEH,IACE,QAAQ,CAAC,MAAM,KAAK,GAAG;QACvB,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EACjD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAc,EAAE,EAAE;gBACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAC;gBAC3D,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAgC,CAAC;gBACjE,OAAO,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChD,CAAC,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,eAAe,CACnB,CAAC,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,6BAA6B,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAChE,sCAAsC,CACvC,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,UAAU,CACd,OAAO,aAAP,OAAO,cAAP,OAAO,GACL,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG;YACtB,CAAC,CAAC,wCAAwC;YAC1C,CAAC,CAAC,+BAA+B,CAAC,EACtC,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QACvD,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,GAAG,IAAI,wCAAwC,EAC1D,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,cAAc,CAClB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,+BAA+B,EAC1C,IAAI,KAAK,uBAAuB;YAC9B,CAAC,CAAC,4EAA4E;YAC9E,CAAC,CAAC,8DAA8D,CACnE,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,aAAa,CACjB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,IAAI,IAAI,CAAC,OAAO,kBAAkB,EAC7C,IAAI,KAAK,kBAAkB;YACzB,CAAC,CAAC,8DAA8D;YAChE,CAAC,CAAC,IAAI,KAAK,gBAAgB;gBACzB,CAAC,CAAC,qDAAqD;gBACvD,CAAC,CAAC,6CAA6C,CACpD,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,iBAAiB,CACrB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,IAAI,IAAI,CAAC,OAAO,qBAAqB,EAChD,oDAAoD,CACrD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,MAAM,GAAG,EACjE,QAAQ,CAAC,MAAM,IAAI,GAAG;YACpB,CAAC,CAAC,+DAA+D;YACjE,CAAC,CAAC,gEAAgE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,CAChB,GAAG,IAAI,GAAG,KAAK,8CAA8C,EAC7D,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,QAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;eAAO,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC","sourcesContent":["import {\n  type SourceSkillList,\n  SourceSkillListSchema,\n  type SourceSkillPushRequest,\n  type SourceSkillPushResult,\n  SourceSkillPushResultSchema,\n  type SourceSkillShow,\n  SourceSkillShowSchema,\n} from '@ekanos/integration-schema';\nimport type { z } from 'zod';\n\nimport { request } from './auth/ekanos-api';\nimport {\n  authRequiredError,\n  forbiddenError,\n  invalidStateError,\n  networkError,\n  notFoundError,\n  usageError,\n  validationError,\n} from './errors';\n\n/**\n * The CLI's client for a Source's skills.\n *\n * ---------------------------------------------------------------------------\n * WIRE CONTRACT — the `SourceSkill*` schemas in `@ekanos/integration-schema`,\n * which the host's `/api/partner/skills` routes build and this parses.\n *\n *   GET  /api/partner/skills?source=<s>[&team=<t>]           → { ok, data: SourceSkillList }\n *   GET  /api/partner/skills/<slug>?source=<s>[&team=<t>]    → { ok, data: SourceSkillShow }\n *   POST /api/partner/skills     SourceSkillPushRequest      → { ok, data: SourceSkillPushResult }\n *\n *   → 401 / 3xx                        refresh once and retry\n *   → 400 { code: \"INVALID_SKILL\", issues: { path, message }[] }\n *   → 403 { code: \"MFA_REQUIRED\" | \"FORBIDDEN\" | \"SOURCE_ADMIN_REQUIRED\" }\n *   → 404 { code: \"SOURCE_NOT_FOUND\" | \"TEAM_NOT_FOUND\" | \"SKILL_NOT_FOUND\" }\n *   → 409 { code: \"SKILL_NOT_PROMPT\" }\n * ---------------------------------------------------------------------------\n */\n\nexport type SkillsApiResult<T> =\n  | { status: 'ok'; data: T }\n  | { status: 'unauthorized' };\n\nconst ROUTE = '/api/partner/skills';\n\nfunction query(source: string, team: string | undefined) {\n  return new URLSearchParams(team ? { source, team } : { source });\n}\n\nexport function listSkills(\n  host: string,\n  accessToken: string,\n  source: string,\n  team?: string,\n): Promise<SkillsApiResult<SourceSkillList>> {\n  return call(host, accessToken, SourceSkillListSchema, {\n    method: 'GET',\n    path: `${ROUTE}?${query(source, team)}`,\n    subject: team ?? source,\n  });\n}\n\nexport function showSkill(\n  host: string,\n  accessToken: string,\n  source: string,\n  slug: string,\n  team?: string,\n): Promise<SkillsApiResult<SourceSkillShow>> {\n  return call(host, accessToken, SourceSkillShowSchema, {\n    method: 'GET',\n    path: `${ROUTE}/${encodeURIComponent(slug)}?${query(source, team)}`,\n    subject: slug,\n  });\n}\n\nexport function pushSkill(\n  host: string,\n  accessToken: string,\n  body: SourceSkillPushRequest,\n): Promise<SkillsApiResult<SourceSkillPushResult>> {\n  return call(host, accessToken, SourceSkillPushResultSchema, {\n    method: 'POST',\n    path: ROUTE,\n    body,\n    subject: body.slug,\n  });\n}\n\nasync function call<T>(\n  host: string,\n  accessToken: string,\n  schema: z.ZodType<T>,\n  init: {\n    method: 'GET' | 'POST';\n    path: string;\n    body?: unknown;\n    subject: string;\n  },\n): Promise<SkillsApiResult<T>> {\n  const response = await request(`${host}${init.path}`, {\n    method: init.method,\n    headers: {\n      accept: 'application/json',\n      authorization: `Bearer ${accessToken}`,\n      ...(init.body === undefined\n        ? {}\n        : { 'content-type': 'application/json' }),\n    },\n    body: init.body === undefined ? undefined : JSON.stringify(init.body),\n  });\n\n  if (\n    response.status === 401 ||\n    (response.status >= 300 && response.status < 400)\n  ) {\n    return { status: 'unauthorized' };\n  }\n\n  const body = await readOptionalJson(response);\n  const code = str(body.code);\n  const message = str(body.error);\n\n  if (response.status === 400 && code === 'INVALID_SKILL') {\n    const issues = Array.isArray(body.issues)\n      ? body.issues.flatMap((issue: unknown) => {\n          if (typeof issue !== 'object' || issue === null) return [];\n          const { path, message: text } = issue as Record<string, unknown>;\n          return [`  ${String(path)}: ${String(text)}`];\n        })\n      : [];\n    throw validationError(\n      [message ?? 'The host refused the skill.', ...issues].join('\\n'),\n      'Fix the skill folder and push again.',\n    );\n  }\n\n  if (response.status === 400 || response.status === 413) {\n    throw usageError(\n      message ??\n        (response.status === 413\n          ? 'The skill folder is too large to send.'\n          : 'The host refused the request.'),\n      'See \"ekanos skills --help\" for each subcommand\\'s arguments.',\n    );\n  }\n\n  if (response.status === 403 && code === 'MFA_REQUIRED') {\n    throw authRequiredError(\n      message ?? `${host} requires multi-factor authentication.`,\n      'Complete MFA in the browser, then run \"ekanos login\" again.',\n    );\n  }\n\n  if (response.status === 403) {\n    throw forbiddenError(\n      message ?? 'Not permitted on this Source.',\n      code === 'SOURCE_ADMIN_REQUIRED'\n        ? 'Only a Source admin pushes skills or reads team skills. Ask one to run it.'\n        : 'Run \"ekanos sources\" to list the sources you hold a seat on.',\n    );\n  }\n\n  if (response.status === 404) {\n    throw notFoundError(\n      message ?? `\"${init.subject}\" was not found.`,\n      code === 'SOURCE_NOT_FOUND'\n        ? 'Run \"ekanos sources\" to list the sources you hold a seat on.'\n        : code === 'TEAM_NOT_FOUND'\n          ? 'Run \"ekanos teams list\" to see the Source\\'s teams.'\n          : 'Run \"ekanos skills list\" to see the skills.',\n    );\n  }\n\n  if (response.status === 409) {\n    throw invalidStateError(\n      message ?? `\"${init.subject}\" cannot be pushed.`,\n      'Rename the skill folder (its slug) and push again.',\n    );\n  }\n\n  if (!response.ok) {\n    throw networkError(\n      `${host}${init.path.split('?')[0]} responded ${response.status}.`,\n      response.status >= 500\n        ? 'The Ekanos deployment returned a server error. Retry shortly.'\n        : 'Confirm the host runs a build that includes the skills routes.',\n    );\n  }\n\n  const parsed = schema.safeParse(body.data);\n  if (!parsed.success) {\n    throw networkError(\n      `${host}${ROUTE} answered in a shape this CLI does not read.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the skills contract.',\n    );\n  }\n\n  return { status: 'ok', data: parsed.data };\n}\n\nasync function readOptionalJson(\n  response: Response,\n): Promise<Record<string, unknown>> {\n  try {\n    const parsed: unknown = await response.json();\n    return typeof parsed === 'object' && parsed !== null\n      ? (parsed as Record<string, unknown>)\n      : {};\n  } catch {\n    return {};\n  }\n}\n\nfunction str(value: unknown): string | null {\n  return typeof value === 'string' && value.length > 0 ? value : null;\n}\n"]}

package/dist/teams-api.d.ts

@@ -0,0 +1,85 @@
+import { type TeamAppSetResult, type TeamCreateRequest, type TeamCreateResult, type TeamMemberChangeResult, type TeamMemberInviteResult, type TeamMemberList, type TeamRoles, type TeamIntegrationStatus, type TeamList, type TeamWebhookMintResult } from '@ekanos/integration-schema';
+import type { z } from 'zod';
+/**
+ * The CLI's client for a Source's teams and their integration setup — the
+ * team-level counterpart of `apps-api.ts`.
+ *
+ *   GET  /api/partner/teams?source=<slug>                              → TeamList
+ *   GET  /api/partner/teams/<team>/integrations/<product>?source=<slug> → TeamIntegrationStatus
+ *   PUT  …/integrations/<product>/app?source=<slug>  { connectionId?, fields }
+ *                                                                      → TeamAppSetResult
+ *   POST …/integrations/<product>/webhooks/<id>?source=<slug>         → TeamWebhookMintResult
+ *   POST /api/partner/teams?source=<slug>  { name, slug?, ownerEmail? } → TeamCreateResult
+ *   GET  /api/partner/teams/<team>/members?source=<slug>               → TeamMemberList
+ *   POST …/<team>/members?source=<slug>  { email, role }               → TeamMemberInviteResult
+ *   PATCH  …/<team>/members/<email>?source=<slug>  { role }            → TeamMemberChangeResult
+ *   DELETE …/<team>/members/<email>?source=<slug>                      → TeamMemberChangeResult
+ *   GET  /api/partner/teams/<team>/roles?source=<slug>                 → TeamRoles
+ *
+ *   → 401 / 3xx  refresh once and retry
+ *   → 403 { code: "SOURCE_ADMIN_REQUIRED" | "MFA_REQUIRED" | "FORBIDDEN" }
+ *   → 404 { code: "TEAM_NOT_FOUND" | "PRODUCT_NOT_ENTITLED" | "WEBHOOK_NOT_FOUND"
+ *               | "CONNECTION_NOT_FOUND" | "SOURCE_NOT_FOUND" }
+ *               | "MEMBER_NOT_FOUND" }
+ *   → 409 { code: "NO_TEAM_APP" | "SLUG_TAKEN" | "TEAM_ACCOUNTS_DISABLED"
+ *               | "ALREADY_MEMBER" | "ALREADY_INVITED" | "PRIMARY_OWNER" }
+ *   → 400 { code: "INVALID_FIELDS" | "INVALID_REQUEST" | "UNKNOWN_ROLE" }
+ */
+export type TeamsApiResult<T> = {
+    status: 'ok';
+    data: T;
+} | {
+    status: 'unauthorized';
+};
+export declare function listTeams(host: string, accessToken: string, source: string): Promise<TeamsApiResult<TeamList>>;
+export declare function showTeamIntegration(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+    product: string;
+}): Promise<TeamsApiResult<TeamIntegrationStatus>>;
+export declare function setTeamApp(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+    product: string;
+}, body: {
+    connectionId?: string;
+    fields: Record<string, string>;
+}): Promise<TeamsApiResult<TeamAppSetResult>>;
+export declare function mintTeamWebhook(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+    product: string;
+}, webhookId: string): Promise<TeamsApiResult<TeamWebhookMintResult>>;
+export declare function createTeam(host: string, accessToken: string, source: string, body: TeamCreateRequest): Promise<TeamsApiResult<TeamCreateResult>>;
+export declare function listTeamMembers(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+}): Promise<TeamsApiResult<TeamMemberList>>;
+export declare function inviteTeamMember(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+}, body: {
+    email: string;
+    role: string;
+}): Promise<TeamsApiResult<TeamMemberInviteResult>>;
+export declare function setTeamMemberRole(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+    email: string;
+}, role: string): Promise<TeamsApiResult<TeamMemberChangeResult>>;
+export declare function removeTeamMember(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+    email: string;
+}): Promise<TeamsApiResult<TeamMemberChangeResult>>;
+export declare function listTeamRoles(host: string, accessToken: string, target: {
+    source: string;
+    team: string;
+}): Promise<TeamsApiResult<TeamRoles>>;
+/** One partner teams call; shared by the team-agent clients (`team-agents-api.ts`). */
+export declare function call<T>(host: string, accessToken: string, schema: z.ZodType<T>, init: {
+    method: 'GET' | 'PUT' | 'POST' | 'PATCH' | 'DELETE';
+    path: string;
+    source: string;
+    body?: unknown;
+}): Promise<TeamsApiResult<T>>;

package/dist/teams-api.js

@@ -0,0 +1,168 @@
+import { TeamAppSetResultSchema, TeamCreateResultSchema, TeamMemberChangeResultSchema, TeamMemberInviteResultSchema, TeamMemberListSchema, TeamRolesSchema, TeamIntegrationStatusSchema, TeamListSchema, TeamWebhookMintResultSchema, } from '@ekanos/integration-schema';
+import { request } from './auth/ekanos-api.js';
+import { authRequiredError, forbiddenError, invalidStateError, networkError, notFoundError, usageError, validationError, } from './errors.js';
+export function listTeams(host, accessToken, source) {
+    return call(host, accessToken, TeamListSchema, {
+        method: 'GET',
+        path: '/api/partner/teams',
+        source,
+    });
+}
+export function showTeamIntegration(host, accessToken, target) {
+    return call(host, accessToken, TeamIntegrationStatusSchema, {
+        method: 'GET',
+        path: integrationPath(target),
+        source: target.source,
+    });
+}
+export function setTeamApp(host, accessToken, target, body) {
+    return call(host, accessToken, TeamAppSetResultSchema, {
+        method: 'PUT',
+        path: `${integrationPath(target)}/app`,
+        source: target.source,
+        body,
+    });
+}
+export function mintTeamWebhook(host, accessToken, target, webhookId) {
+    return call(host, accessToken, TeamWebhookMintResultSchema, {
+        method: 'POST',
+        path: `${integrationPath(target)}/webhooks/${encodeURIComponent(webhookId)}`,
+        source: target.source,
+    });
+}
+export function createTeam(host, accessToken, source, body) {
+    return call(host, accessToken, TeamCreateResultSchema, {
+        method: 'POST',
+        path: '/api/partner/teams',
+        source,
+        body,
+    });
+}
+export function listTeamMembers(host, accessToken, target) {
+    return call(host, accessToken, TeamMemberListSchema, {
+        method: 'GET',
+        path: membersPath(target.team),
+        source: target.source,
+    });
+}
+export function inviteTeamMember(host, accessToken, target, body) {
+    return call(host, accessToken, TeamMemberInviteResultSchema, {
+        method: 'POST',
+        path: membersPath(target.team),
+        source: target.source,
+        body,
+    });
+}
+export function setTeamMemberRole(host, accessToken, target, role) {
+    return call(host, accessToken, TeamMemberChangeResultSchema, {
+        method: 'PATCH',
+        path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}`,
+        source: target.source,
+        body: { role },
+    });
+}
+export function removeTeamMember(host, accessToken, target) {
+    return call(host, accessToken, TeamMemberChangeResultSchema, {
+        method: 'DELETE',
+        path: `${membersPath(target.team)}/${encodeURIComponent(target.email)}`,
+        source: target.source,
+    });
+}
+export function listTeamRoles(host, accessToken, target) {
+    return call(host, accessToken, TeamRolesSchema, {
+        method: 'GET',
+        path: `/api/partner/teams/${encodeURIComponent(target.team)}/roles`,
+        source: target.source,
+    });
+}
+function membersPath(team) {
+    return `/api/partner/teams/${encodeURIComponent(team)}/members`;
+}
+function integrationPath(target) {
+    return `/api/partner/teams/${encodeURIComponent(target.team)}/integrations/${encodeURIComponent(target.product)}`;
+}
+/** One partner teams call; shared by the team-agent clients (`team-agents-api.ts`). */
+export async function call(host, accessToken, schema, init) {
+    const response = await request(`${host}${init.path}?${new URLSearchParams({ source: init.source })}`, {
+        method: init.method,
+        headers: Object.assign({ accept: 'application/json', authorization: `Bearer ${accessToken}` }, (init.body === undefined
+            ? {}
+            : { 'content-type': 'application/json' })),
+        body: init.body === undefined ? undefined : JSON.stringify(init.body),
+    });
+    if (response.status === 401 ||
+        (response.status >= 300 && response.status < 400)) {
+        return { status: 'unauthorized' };
+    }
+    const body = await readOptionalJson(response);
+    const code = typeof body.code === 'string' ? body.code : null;
+    const message = typeof body.error === 'string' && body.error ? body.error : null;
+    if (response.status === 403 && code === 'MFA_REQUIRED') {
+        throw authRequiredError(message !== null && message !== void 0 ? message : `${host} requires multi-factor authentication.`, 'Complete MFA in the browser, then run "ekanos login" again.');
+    }
+    if (response.status === 403) {
+        throw forbiddenError(message !== null && message !== void 0 ? message : 'Not permitted on this Source.', code === 'SOURCE_ADMIN_REQUIRED'
+            ? "Only a Source admin manages its teams' integrations. Ask one to run it."
+            : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 404) {
+        throw notFoundError(message !== null && message !== void 0 ? message : 'Not found.', code === 'TEAM_NOT_FOUND'
+            ? 'Run "ekanos teams list" to see the teams on this Source.'
+            : code === 'PRODUCT_NOT_ENTITLED'
+                ? '"ekanos catalog" lists what this Source has; Ekanos enables a product for a Source.'
+                : code === 'WEBHOOK_NOT_FOUND' || code === 'CONNECTION_NOT_FOUND'
+                    ? 'Run "ekanos teams show <team> <product>" to see its team apps and webhooks.'
+                    : code === 'MEMBER_NOT_FOUND'
+                        ? 'Run "ekanos teams members list <team>" to see its members and invitations.'
+                        : (code === null || code === void 0 ? void 0 : code.startsWith('AGENT_')) || code === 'TEMPLATE_NOT_FOUND'
+                            ? 'Run "ekanos teams agents list <team>" to see the team\'s agents.'
+                            : /^(TRIGGER|LINK|MCP)_/.test(code !== null && code !== void 0 ? code : '')
+                                ? 'List them first: "ekanos teams triggers|links|mcp list <team> ..."'
+                                : 'Run "ekanos sources" to list the sources you hold a seat on.');
+    }
+    if (response.status === 409 && code === 'NO_TEAM_APP') {
+        throw invalidStateError(message !== null && message !== void 0 ? message : 'This integration takes no team app.', 'Teams connect through the Source\'s app: "ekanos apps show <product>".');
+    }
+    if (response.status === 409 || response.status === 422) {
+        throw invalidStateError(message !== null && message !== void 0 ? message : 'The host refused the change.', code === 'SLUG_TAKEN'
+            ? 'Pick another with --slug, or run "ekanos teams list" to see the teams.'
+            : code === 'ALREADY_MEMBER' || code === 'ALREADY_INVITED'
+                ? 'Run "ekanos teams members list <team>"; change a role with "ekanos teams members role <team> <email> <role>".'
+                : code === 'PRIMARY_OWNER'
+                    ? "The primary owner's ownership is transferred in the app (team Settings → Members)."
+                    : code === 'TEAM_ACCOUNTS_DISABLED'
+                        ? 'Ekanos switches team accounts on for a Source; ask a super-admin.'
+                        : 'See "ekanos teams --help".');
+    }
+    if (response.status === 400 && code === 'UNKNOWN_ROLE') {
+        throw validationError(message !== null && message !== void 0 ? message : 'No such role.', 'Run "ekanos teams roles list <team>" for the roles this Source uses.');
+    }
+    if (response.status === 400 && code === 'INVALID_FIELDS') {
+        throw validationError(message !== null && message !== void 0 ? message : 'The host refused the fields.', 'Run "ekanos teams app set <team> <product>" again.');
+    }
+    if (response.status === 400) {
+        throw usageError(message !== null && message !== void 0 ? message : 'The host refused the request.', 'See "ekanos teams --help".');
+    }
+    if (!response.ok) {
+        throw networkError(`${host}${init.path} responded ${response.status}.`, response.status >= 500
+            ? 'The Ekanos deployment returned a server error. Retry shortly.'
+            : 'Confirm the host runs a build that includes the teams routes.');
+    }
+    const parsed = schema.safeParse(body.data);
+    if (!parsed.success) {
+        throw networkError(`${host}/api/partner/teams answered in a shape this CLI does not read.`, 'Run "ekanos upgrade" — the CLI and the host disagree on the teams contract.');
+    }
+    return { status: 'ok', data: parsed.data };
+}
+async function readOptionalJson(response) {
+    try {
+        const parsed = await response.json();
+        return typeof parsed === 'object' && parsed !== null
+            ? parsed
+            : {};
+    }
+    catch (_a) {
+        return {};
+    }
+}
+//# sourceMappingURL=teams-api.js.map