@graph8/sdk 0.13.1 → 0.15.0

package/dist/index.js

@@ -23,9 +23,12 @@ __export(index_exports, {
   DEFAULT_APP_API: () => DEFAULT_APP_API,
   G8Error: () => G8Error,
   KNOWN_WEBHOOK_EVENTS: () => KNOWN_WEBHOOK_EVENTS,
+  MAX_TAIL_LINES: () => MAX_TAIL_LINES,
+  MIN_TAIL_LINES: () => MIN_TAIL_LINES,
   WebhookSignatureError: () => WebhookSignatureError,
   backoffDelayMs: () => backoffDelayMs,
   constructEvent: () => constructEvent,
+  createAppPlatformClient: () => createAppPlatformClient,
   createAppRequester: () => createAppRequester,
   createGraph8AppClient: () => createGraph8AppClient,
   createGraph8ServiceClient: () => createGraph8ServiceClient,
@@ -888,6 +891,8 @@ var KNOWN_WEBHOOK_EVENTS = [
   "engagement.email_bounced",
   "engagement.email_skipped",
   "engagement.call_dispatched",
+  "engagement.call_connected",
+  "engagement.call_graded",
   "engagement.sms_sent",
   "engagement.sms_replied",
   "engagement.whatsapp_sent",
@@ -898,7 +903,12 @@ var KNOWN_WEBHOOK_EVENTS = [
   "engagement.linkedin_connection_accepted",
   "meeting.booked",
   "meeting.cancelled",
-  "meeting.rescheduled"
+  "meeting.rescheduled",
+  "deal.won",
+  "crm.record.created",
+  "crm.record.updated",
+  "crm.record.archived",
+  "crm.record.restored"
 ];
 var WebhookSignatureError = class extends Error {
   constructor(message) {
@@ -1258,10 +1268,284 @@ var createAppsClient = (apiKey, apiUrl) => {
   };
 };
 
-// src/fields.ts
+// src/appPlatform.ts
 var DEFAULT_API18 = "https://be.graph8.com";
-var createFieldsClient = (apiKey, apiUrl) => {
+var MIN_TAIL_LINES = 1;
+var MAX_TAIL_LINES = 2e3;
+var createAppPlatformClient = (apiKey, apiUrl) => {
   const baseUrl = apiUrl || DEFAULT_API18;
+  const unwrap = (resp) => resp.data ?? resp;
+  return {
+    // ---- source binding -------------------------------------------------
+    /**
+     * Bind the repository an app builds from.
+     *
+     * `repo_url` must be fetchable -- `https://`, `ssh://` or `git@`, with no
+     * whitespace. A `file://` or bare path is refused with 422, because a build
+     * that can read the builder's filesystem is a build that can read ours.
+     *
+     * `credential_ref` is a POINTER into your secret manager, not a token.
+     */
+    async setSource(appId, params) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/source`,
+        apiKey,
+        {
+          method: "PUT",
+          body: {
+            repo_url: params.repo_url,
+            provider: params.provider,
+            default_branch: params.default_branch ?? null,
+            credential_ref: params.credential_ref ?? null
+          }
+        }
+      );
+      return unwrap(resp);
+    },
+    /** Unbind the source. Returns the full app with every source field null. */
+    async clearSource(appId) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/source`,
+        apiKey,
+        { method: "DELETE" }
+      );
+      return unwrap(resp);
+    },
+    // ---- deployments ----------------------------------------------------
+    /** Every deployment for this app, newest first. Never 404s for an app with none. */
+    async listDeployments(appId) {
+      return request(baseUrl, `/api/v1/apps/${appId}/deployments`, apiKey);
+    },
+    /**
+     * Queue a deployment. Returns `201` with `status: "queued"` -- nothing builds
+     * as a side effect of this call; the build controller picks it up.
+     *
+     * NOT idempotent: two identical calls create two deployments.
+     */
+    async deploy(appId, params) {
+      const body = { source_ref: params.source_ref };
+      if (params.schema_version_id) body.schema_version_id = params.schema_version_id;
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/deployments`,
+        apiKey,
+        { method: "POST", body }
+      );
+      return unwrap(resp);
+    },
+    /** Fetch one deployment. The polling endpoint for a build loop. */
+    async getDeployment(appId, deploymentId) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/deployments/${deploymentId}`,
+        apiKey
+      );
+      return unwrap(resp);
+    },
+    /**
+     * The deployment currently serving traffic, or `null`.
+     *
+     * `null` is a real answer with a 200, not a 404: "this app has never shipped"
+     * is information, while a 404 would read as "no such app".
+     */
+    async activeDeployment(appId) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/deployments/active`,
+        apiKey
+      );
+      return resp.data ?? null;
+    },
+    /**
+     * Promote a built deployment to serve traffic. Anything it displaces moves to
+     * `rolled_back` in the same transaction, so there is never a moment with two
+     * live deployments.
+     *
+     * `409` when the state machine forbids it -- a deployment cannot become
+     * `deployed` without having been built, and a `failed` one cannot be revived.
+     * A retry is a new deployment, not a resurrection.
+     */
+    async promote(appId, deploymentId, imageDigest) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/deployments/${deploymentId}/promote`,
+        apiKey,
+        { method: "POST", body: { image_digest: imageDigest } }
+      );
+      return unwrap(resp);
+    },
+    /** Roll back a deployment that is currently serving. Only a `deployed` one may be. */
+    async rollback(appId, deploymentId) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/deployments/${deploymentId}/rollback`,
+        apiKey,
+        { method: "POST", body: {} }
+      );
+      return unwrap(resp);
+    },
+    // ---- logs -----------------------------------------------------------
+    /**
+     * Why a build failed. Returns every step of the build pod in the order
+     * Kubernetes runs them; a step that has not started yet is omitted rather
+     * than returned empty.
+     *
+     * An empty `containers` list is not an error -- build pods are reaped an hour
+     * after they finish, so logs for an older deployment are genuinely gone.
+     * `last_error_sanitized` on the deployment is what survives.
+     *
+     * `503` means graph8 could not reach the cluster, which is deliberately
+     * different from an empty `200`: one means we could not look, the other means
+     * your build produced no output.
+     */
+    async deploymentLogs(appId, deploymentId, tailLines) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/deployments/${deploymentId}/logs`,
+        apiKey,
+        { query: tailLines === void 0 ? void 0 : { tail_lines: tailLines } }
+      );
+      return unwrap(resp);
+    },
+    /**
+     * What the running app is printing. The app's own pods only -- the per-app
+     * egress proxy shares the namespace and is deliberately excluded.
+     *
+     * Empty until a deployment reaches `deployed`.
+     */
+    async logs(appId, tailLines) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/logs`,
+        apiKey,
+        { query: tailLines === void 0 ? void 0 : { tail_lines: tailLines } }
+      );
+      return unwrap(resp);
+    },
+    // ---- domains --------------------------------------------------------
+    /** Every hostname claimed for this app, whatever its verification state. */
+    async listDomains(appId) {
+      return request(baseUrl, `/api/v1/apps/${appId}/domains`, apiKey);
+    },
+    /**
+     * Claim a hostname and get the TXT record that proves you own it.
+     *
+     * Returns `201`, and the domain is NESTED at `data.domain` -- this is the one
+     * route on the surface whose payload is not the record itself. Hostnames are
+     * globally unique, so a host another app holds is refused.
+     */
+    async claimDomain(appId, hostname) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/domains`,
+        apiKey,
+        { method: "POST", body: { hostname } }
+      );
+      return unwrap(resp);
+    },
+    /**
+     * Check DNS for the TXT record and advance the domain to `verified`.
+     *
+     * Idempotent: verifying an already-verified domain re-checks and stays
+     * verified, so it is safe to re-run after a DNS change. Send no body -- the
+     * record in DNS is the payload.
+     */
+    async verifyDomain(appId, hostname) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/domains/${encodeURIComponent(hostname)}/verify`,
+        apiKey,
+        { method: "POST", body: {} }
+      );
+      return unwrap(resp);
+    },
+    /**
+     * Release a claimed hostname.
+     *
+     * A HARD delete. Hostnames are globally unique, so a row left behind in any
+     * status keeps the host burned for every other builder. Releasing one you
+     * already released is a `404`, because after the first call the claim
+     * genuinely does not exist.
+     *
+     * Returns the NORMALIZED hostname, which may differ from what you passed.
+     */
+    async releaseDomain(appId, hostname) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/domains/${encodeURIComponent(hostname)}`,
+        apiKey,
+        { method: "DELETE" }
+      );
+      return unwrap(resp);
+    },
+    // ---- secrets --------------------------------------------------------
+    /**
+     * Which secrets this app declares, and when each was last rotated.
+     *
+     * NEVER returns a value. graph8 stores a POINTER into your secret manager and
+     * has no column for the secret itself.
+     */
+    async listSecrets(appId) {
+      return request(baseUrl, `/api/v1/apps/${appId}/secrets`, apiKey);
+    },
+    /**
+     * Declare a secret, or rotate the pointer to it.
+     *
+     * `providerRef` is a REFERENCE, and the server rejects anything that looks
+     * like a credential -- a value starting `bearer `, `sk-`, `ghp_`, `xox` and
+     * friends is a 422. That refusal is the feature: it catches the mistake of
+     * pasting the secret where its address belongs.
+     */
+    async putSecret(appId, secretKey, providerRef) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/secrets/${encodeURIComponent(secretKey)}`,
+        apiKey,
+        { method: "PUT", body: { provider_ref: providerRef ?? null } }
+      );
+      return unwrap(resp);
+    },
+    /** Undeclare a secret. A key the app never declared is a 404, so a typo is
+     *  never reported as a successful removal. */
+    async deleteSecret(appId, secretKey) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/secrets/${encodeURIComponent(secretKey)}`,
+        apiKey,
+        { method: "DELETE" }
+      );
+      return unwrap(resp);
+    },
+    // ---- schema versions ------------------------------------------------
+    /**
+     * Publish a custom-object schema version. Returns `201`.
+     *
+     * Takes only the `objects` list, not a whole `graph8.app.yaml`: the rest of
+     * that file is app metadata the control plane already holds, and accepting it
+     * here would create a second place for it to disagree.
+     */
+    async publishSchemaVersion(appId, objects) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/apps/${appId}/schema-versions`,
+        apiKey,
+        { method: "POST", body: { objects } }
+      );
+      return unwrap(resp);
+    },
+    /** Every schema version this app has published. Empty array, never 404. */
+    async listSchemaVersions(appId) {
+      return request(baseUrl, `/api/v1/apps/${appId}/schema-versions`, apiKey);
+    }
+  };
+};
+
+// src/fields.ts
+var DEFAULT_API19 = "https://be.graph8.com";
+var createFieldsClient = (apiKey, apiUrl) => {
+  const baseUrl = apiUrl || DEFAULT_API19;
   return {
     /** List contact fields (base + custom). Pass listId to include list-specific custom fields. */
     async listContactFields(listId) {
@@ -1303,14 +1587,38 @@ var createFieldsClient = (apiKey, apiUrl) => {
 };
 
 // src/objects.ts
-var DEFAULT_API19 = "https://be.graph8.com";
+var DEFAULT_API20 = "https://be.graph8.com";
 var createObjectsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API19;
+  const baseUrl = apiUrl || DEFAULT_API20;
   const encode = (value) => encodeURIComponent(value);
   return {
     /** List the custom object types in your workspace. */
-    async list() {
-      return request(baseUrl, "/api/v1/objects", apiKey);
+    async list(params = {}) {
+      const query = params.include_archived ? "?include_archived=true" : "";
+      return request(baseUrl, `/api/v1/objects${query}`, apiKey);
+    },
+    /** Create a native custom object. Requires objects:manage and Admin access. */
+    async create(input) {
+      const resp = await request(baseUrl, "/api/v1/objects", apiKey, {
+        method: "POST",
+        body: input
+      });
+      return resp.data;
+    },
+    /** Rename, archive or restore an object while preserving its slug and data. */
+    async update(objectSlug, input) {
+      const resp = await request(baseUrl, `/api/v1/objects/${encode(objectSlug)}`, apiKey, {
+        method: "PATCH",
+        body: input
+      });
+      return resp.data;
+    },
+    /** Archive the object without deleting records; restore with update({ is_archived: false }). */
+    async archive(objectSlug) {
+      const resp = await request(baseUrl, `/api/v1/objects/${encode(objectSlug)}`, apiKey, {
+        method: "DELETE"
+      });
+      return resp.data;
     },
     /** Fetch one object type by slug. */
     async get(objectSlug) {
@@ -1322,10 +1630,35 @@ var createObjectsClient = (apiKey, apiUrl) => {
       return resp.data ?? resp;
     },
     /** The object's attributes — the schema its records must satisfy. */
-    async listAttributes(objectSlug) {
-      return request(baseUrl, `/api/v1/objects/${encode(objectSlug)}/attributes`, apiKey);
+    async listAttributes(objectSlug, params = {}) {
+      const query = params.include_archived ? "?include_archived=true" : "";
+      return request(baseUrl, `/api/v1/objects/${encode(objectSlug)}/attributes${query}`, apiKey);
+    },
+    /** Create a field using the same schema rules as the customer UI. */
+    async createAttribute(objectSlug, input) {
+      const resp = await request(baseUrl, `/api/v1/objects/${encode(objectSlug)}/attributes`, apiKey, {
+        method: "POST",
+        body: input
+      });
+      return resp.data;
     },
-    /** Paginated records with their current values. Archived records are excluded. */
+    /** Edit or restore a field; its type and slug are immutable. */
+    async updateAttribute(objectSlug, attributeSlug, input) {
+      const resp = await request(baseUrl, `/api/v1/objects/${encode(objectSlug)}/attributes/${encode(attributeSlug)}`, apiKey, {
+        method: "PATCH",
+        body: input
+      });
+      return resp.data;
+    },
+    /** Archive without deleting values; restore with updateAttribute({ is_archived: false }). */
+    async archiveAttribute(objectSlug, attributeSlug) {
+      const resp = await request(baseUrl, `/api/v1/objects/${encode(objectSlug)}/attributes/${encode(attributeSlug)}`, apiKey, {
+        method: "DELETE"
+      });
+      return resp.data;
+    },
+    /** Paginated custom records or canonical deals with current values and revisions.
+     * Deal totals and related references respect current record access. */
     async listRecords(objectSlug, params = {}) {
       const query = {};
       if (params.page != null) query.page = params.page;
@@ -1349,7 +1682,24 @@ var createObjectsClient = (apiKey, apiUrl) => {
       );
       return resp.data ?? resp;
     },
-    /** Fetch one record with its currently active values. */
+    /** Match a unique single-value key, creating or updating while preserving omitted fields. */
+    async upsertRecord(objectSlug, matchingAttribute, values, options = {}) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/objects/${encode(objectSlug)}/records/upsert`,
+        apiKey,
+        { method: "POST", body: {
+          matching_attribute: matchingAttribute,
+          values,
+          ...options.expectedRevision !== void 0 ? { expected_revision: options.expectedRevision } : {}
+        } }
+      );
+      return resp.data;
+    },
+    /** Fetch one custom record, canonical contact/company, or deal by its stable graph8 ID.
+     * Deals retain their UUIDs and expose company, primary-contact and contact_ids references only
+     * when permitted. Generic deal mutations are not yet supported.
+     */
     async getRecord(objectSlug, recordId) {
       const resp = await request(
         baseUrl,
@@ -1363,15 +1713,24 @@ var createObjectsClient = (apiKey, apiUrl) => {
      * required attributes you omit are left alone rather than reported missing.
      * Sending an explicit `null` CLEARS that attribute.
      *
-     * Values are versioned rather than overwritten, so the previous value stays
-     * readable through `history`.
+     * Custom values retain generations through `history`. Canonical contacts and
+     * companies require expectedRevision from a fresh read and expose recorded
+     * mutations through `changes`. They do not yet support appendValues/removeValues.
      */
     async updateRecord(objectSlug, recordId, values, options) {
       const resp = await request(
         baseUrl,
         `/api/v1/objects/${encode(objectSlug)}/records/${encode(recordId)}`,
         apiKey,
-        { method: "PATCH", body: { values, ...options?.expectedRevision === void 0 ? {} : { expected_revision: options.expectedRevision } } }
+        {
+          method: "PATCH",
+          body: {
+            values,
+            ...options?.expectedRevision === void 0 ? {} : { expected_revision: options.expectedRevision },
+            ...options?.appendValues === void 0 ? {} : { append_values: options.appendValues },
+            ...options?.removeValues === void 0 ? {} : { remove_values: options.removeValues }
+          }
+        }
       );
       return resp.data ?? resp;
     },
@@ -1410,14 +1769,27 @@ var createObjectsClient = (apiKey, apiUrl) => {
         { query: limit != null ? { limit } : void 0 }
       );
       return resp.data ?? resp;
+    },
+    /** Recorded custom-record or canonical contact/company mutations. Pass next_cursor to continue.
+     * Canonical history respects current access/privacy; archived records and older
+     * unrecorded writes are not reconstructed. Store unavailability returns 503.
+     */
+    async changes(objectSlug, recordId, options = {}) {
+      const resp = await request(
+        baseUrl,
+        `/api/v1/objects/${encode(objectSlug)}/records/${encode(recordId)}/changes`,
+        apiKey,
+        { query: options }
+      );
+      return resp.data ?? resp;
     }
   };
 };
 
 // src/deals.ts
-var DEFAULT_API20 = "https://be.graph8.com";
+var DEFAULT_API21 = "https://be.graph8.com";
 var createDealsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API20;
+  const baseUrl = apiUrl || DEFAULT_API21;
   return {
     /** List all deal pipelines and their stages. */
     async pipelines() {
@@ -1461,9 +1833,9 @@ var createDealsClient = (apiKey, apiUrl) => {
 };
 
 // src/inbox.ts
-var DEFAULT_API21 = "https://be.graph8.com";
+var DEFAULT_API22 = "https://be.graph8.com";
 var createInboxClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API21;
+  const baseUrl = apiUrl || DEFAULT_API22;
   return {
     /** List inbox threads across email, SMS, and LinkedIn. */
     async list(params = {}) {
@@ -1516,9 +1888,9 @@ var createInboxClient = (apiKey, apiUrl) => {
 };
 
 // src/quotes.ts
-var DEFAULT_API22 = "https://be.graph8.com";
+var DEFAULT_API23 = "https://be.graph8.com";
 var createQuotesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API22;
+  const baseUrl = apiUrl || DEFAULT_API23;
   return {
     /** List quotes org-wide with optional filters and pagination. */
     async list(params = {}) {
@@ -1590,9 +1962,9 @@ var createQuotesClient = (apiKey, apiUrl) => {
 };
 
 // src/pipelines.ts
-var DEFAULT_API23 = "https://be.graph8.com";
+var DEFAULT_API24 = "https://be.graph8.com";
 var createPipelinesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API23;
+  const baseUrl = apiUrl || DEFAULT_API24;
   return {
     /** List all stage-checklist pipelines with stages, evidence, scripts. */
     async list() {
@@ -1674,9 +2046,9 @@ var createPipelinesClient = (apiKey, apiUrl) => {
 };
 
 // src/workflows.ts
-var DEFAULT_API24 = "https://be.graph8.com";
+var DEFAULT_API25 = "https://be.graph8.com";
 var createWorkflowsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API24;
+  const baseUrl = apiUrl || DEFAULT_API25;
   return {
     /** List workflows org-wide. */
     async list(params = {}) {
@@ -1792,9 +2164,9 @@ var createWorkflowsClient = (apiKey, apiUrl) => {
 };
 
 // src/skills.ts
-var DEFAULT_API25 = "https://be.graph8.com";
+var DEFAULT_API26 = "https://be.graph8.com";
 var createSkillsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API25;
+  const baseUrl = apiUrl || DEFAULT_API26;
   return {
     /** List skills. */
     async list(params = {}) {
@@ -1881,9 +2253,9 @@ var createSkillsClient = (apiKey, apiUrl) => {
 };
 
 // src/intent.ts
-var DEFAULT_API26 = "https://be.graph8.com";
+var DEFAULT_API27 = "https://be.graph8.com";
 var createIntentClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API26;
+  const baseUrl = apiUrl || DEFAULT_API27;
   const get = (path) => request(baseUrl, `/api/v1${path}`, apiKey);
   const post = (path, body = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "POST", body });
   const del = (path) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "DELETE" });
@@ -1958,9 +2330,9 @@ var createIntentClient = (apiKey, apiUrl) => {
 };
 
 // src/studio.ts
-var DEFAULT_API27 = "https://be.graph8.com";
+var DEFAULT_API28 = "https://be.graph8.com";
 var createStudioClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API27;
+  const baseUrl = apiUrl || DEFAULT_API28;
   const get = (path, params = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { query: params });
   const post = (path, body = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "POST", body });
   const patch = (path, body = {}) => request(baseUrl, `/api/v1${path}`, apiKey, { method: "PATCH", body });
@@ -2015,9 +2387,9 @@ var createStudioClient = (apiKey, apiUrl) => {
 };
 
 // src/meetings.ts
-var DEFAULT_API28 = "https://be.graph8.com";
+var DEFAULT_API29 = "https://be.graph8.com";
 var createMeetingsClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API28;
+  const baseUrl = apiUrl || DEFAULT_API29;
   return {
     /** List meetings with optional filters. Returns summary rows without transcript / analysis. */
     async list(params = {}) {
@@ -2032,9 +2404,9 @@ var createMeetingsClient = (apiKey, apiUrl) => {
 };
 
 // src/audiences.ts
-var DEFAULT_API29 = "https://be.graph8.com";
+var DEFAULT_API30 = "https://be.graph8.com";
 var createAudiencesClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API29;
+  const baseUrl = apiUrl || DEFAULT_API30;
   const base = "/api/v1/audience-syncs";
   return {
     /** List all audience syncs for the organization. */
@@ -2082,9 +2454,9 @@ var createAudiencesClient = (apiKey, apiUrl) => {
 };
 
 // src/search.ts
-var DEFAULT_API30 = "https://be.graph8.com";
+var DEFAULT_API31 = "https://be.graph8.com";
 var createSearchClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API30;
+  const baseUrl = apiUrl || DEFAULT_API31;
   const body = (p) => ({ filters: [], page: 1, limit: 25, ...p });
   return {
     /** Search open-data contacts by filter. */
@@ -2115,9 +2487,9 @@ var createSearchClient = (apiKey, apiUrl) => {
 };
 
 // src/agency.ts
-var DEFAULT_API31 = "https://be.graph8.com";
+var DEFAULT_API32 = "https://be.graph8.com";
 var createAgencyClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API31;
+  const baseUrl = apiUrl || DEFAULT_API32;
   return {
     /** Describe the agency credential: agency org + authorized client count. */
     async me() {
@@ -2132,9 +2504,9 @@ var createAgencyClient = (apiKey, apiUrl) => {
 };
 
 // src/marketplace.ts
-var DEFAULT_API32 = "https://be.graph8.com";
+var DEFAULT_API33 = "https://be.graph8.com";
 var createMarketplaceClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API32;
+  const baseUrl = apiUrl || DEFAULT_API33;
   const base = "/api/v1/marketplace";
   return {
     /** Your own marketplace SDR profile. */
@@ -2184,9 +2556,9 @@ var createMarketplaceClient = (apiKey, apiUrl) => {
 };
 
 // src/snippet.ts
-var DEFAULT_API33 = "https://be.graph8.com";
+var DEFAULT_API34 = "https://be.graph8.com";
 var createSnippetClient = (apiKey, apiUrl) => {
-  const baseUrl = apiUrl || DEFAULT_API33;
+  const baseUrl = apiUrl || DEFAULT_API34;
   return {
     /** Get your org's tracking snippet (write key + React/script-tag embeds + config). */
     async get() {
@@ -2198,7 +2570,7 @@ var createSnippetClient = (apiKey, apiUrl) => {
 
 // src/core.ts
 var DEFAULT_HOST = "https://t.graph8.com";
-var DEFAULT_API34 = "https://be.graph8.com";
+var DEFAULT_API35 = "https://be.graph8.com";
 var G8 = class {
   constructor() {
     /** @internal */
@@ -2242,6 +2614,8 @@ var G8 = class {
     /** @internal */
     this._apps = null;
     /** @internal */
+    this._appPlatform = null;
+    /** @internal */
     this._objects = null;
     /** @internal */
     this._deals = null;
@@ -2285,7 +2659,7 @@ var G8 = class {
         debug: config.debug
       });
     }
-    const apiUrl = config.apiUrl || DEFAULT_API34;
+    const apiUrl = config.apiUrl || DEFAULT_API35;
     const writeKey = config.writeKey || "";
     const apiKey = config.apiKey || "";
     if (writeKey) {
@@ -2309,6 +2683,7 @@ var G8 = class {
       this._tasks = createTasksClient(apiKey, apiUrl);
       this._fields = createFieldsClient(apiKey, apiUrl);
       this._apps = createAppsClient(apiKey, apiUrl);
+      this._appPlatform = createAppPlatformClient(apiKey, apiUrl);
       this._objects = createObjectsClient(apiKey, apiUrl);
       this._deals = createDealsClient(apiKey, apiUrl);
       this._inbox = createInboxClient(apiKey, apiUrl);
@@ -2435,6 +2810,18 @@ var G8 = class {
     this._assertKey("apps");
     return this._apps;
   }
+  /**
+   * Ship a hosted app: bind a source, deploy, promote, attach a hostname, read
+   * build logs (requires API key). PREVIEW.
+   *
+   * Separate from `apps` on purpose. `apps` is the app's IDENTITY -- create it,
+   * see who installed it, what it cost. This is its LIFECYCLE, and the two have
+   * different blast radii: a mistake here takes a customer's app down.
+   */
+  get appPlatform() {
+    this._assertKey("appPlatform");
+    return this._appPlatform;
+  }
   /** Custom object types, their schema, and their records (requires API key). PREVIEW. */
   get objects() {
     this._assertKey("objects");
@@ -2692,9 +3079,12 @@ function createGraph8ServiceClient(config) {
   DEFAULT_APP_API,
   G8Error,
   KNOWN_WEBHOOK_EVENTS,
+  MAX_TAIL_LINES,
+  MIN_TAIL_LINES,
   WebhookSignatureError,
   backoffDelayMs,
   constructEvent,
+  createAppPlatformClient,
   createAppRequester,
   createGraph8AppClient,
   createGraph8ServiceClient,