@hitch42/applet 0.1.1-beta.21 → 0.1.1-beta.23

package/dist/{hitch-client-Dph_kzDd.js → hitch-client-CNN-dU6d.js}

@@ -1,5 +1,5 @@
-import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-DtMavo8Q.js";
-import { t as withBatchRecorder } from "./batch-CiLZ177G.js";
+import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-D1mzpsSk.js";
+import { t as withBatchRecorder } from "./batch-DwyWmiaE.js";
 import { t as createLazyClientProxy } from "./lazy-client--QCL0wiu.js";
 import { createORPCClient } from "@orpc/client";
 import { OpenAPILink } from "@orpc/openapi-client/fetch";

package/dist/{hitch-client-D33JOEOi.d.ts → hitch-client-k7_jIjPw.d.ts}

@@ -1,7 +1,7 @@
 import { l as RegisteredContract, u as RegisteredManifest } from "./manifest-CpghlaJc.js";
 import { t as NarrowContract } from "./contract-CUc0B2rl.js";
 import { i as WithBatchRecorder, n as WithRecordCreates, r as WithSingleRecordCreates, t as WithRecordCreateCalls } from "./create-BJqLT8Uq.js";
-import { o as WithFilesUpload } from "./upload-DXZyjZSS.js";
+import { o as WithFilesUpload } from "./upload-wp-Ilsv6.js";
 import { t as ExactRouterUtils } from "./query-utils-okxIoKM3.js";
 import { ContractRouterClient } from "@orpc/contract";
 type AuthorContract = NarrowContract<RegisteredContract, RegisteredManifest>;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { a as AppletSourceDefinition, c as RegisteredCatalog, d as RegisteredRouter, f as RegisteredVariableKeys, h as registerHitchContract, i as AppletPackages, l as RegisteredContract, m as RegisteredWorkflows, n as AppletManifest, o as RegisteredAppletSourceDefinition, p as RegisteredVariables, r as AppletManifestObject, s as HitchRegister, t as AppletDefinition, u as RegisteredManifest } from "./manifest-CpghlaJc.js";
 import { n as pruneContract, t as NarrowContract } from "./contract-CUc0B2rl.js";
-import { a as UploadedHitchFile, c as filesContract, i as UploadProgress, n as FilesUpload, r as UploadFileOptions, s as uploadFile, t as FilesClient } from "./upload-DXZyjZSS.js";
-import { a as EmailTracker, c as HitchEmailMessage, f as ListEmailTrackersOutput, g as emailContract, h as SendHitchEmailInput, i as EmailContract, l as HitchEmailThread, m as ListHitchEmailThreadsInput, n as TelephonyMessageReceivedEvent, o as HitchEmailAddress, p as ListHitchEmailMessagesInput, s as HitchEmailAttachment, t as EmailMessageReceivedEvent, u as HitchMailbox } from "./email-protocol-CEqzASSx.js";
+import { a as UploadedHitchFile, c as filesContract, i as UploadProgress, n as FilesUpload, r as UploadFileOptions, s as uploadFile, t as FilesClient } from "./upload-wp-Ilsv6.js";
+import { a as EmailTracker, c as HitchEmailMessage, f as ListEmailTrackersOutput, g as emailContract, h as SendHitchEmailInput, i as EmailContract, l as HitchEmailThread, m as ListHitchEmailThreadsInput, n as TelephonyMessageReceivedEvent, o as HitchEmailAddress, p as ListHitchEmailMessagesInput, s as HitchEmailAttachment, t as EmailMessageReceivedEvent, u as HitchMailbox } from "./email-protocol-BWja_v7c.js";
 import { ContractProcedure, Meta, Schema } from "@orpc/contract";
 interface HitchConfig {
   sdk: string;
@@ -109,7 +109,10 @@ type SendHitchMessageInput = {
   requestId?: string;
 };
 type MessageIdInput = {
-  id: string;
+  messageId: string;
+};
+type CallIdInput = {
+  callId: string;
 };
 type NumbersOutput = {
   data: HitchPhoneNumber[];
@@ -124,7 +127,7 @@ type CallsOutput = {
 };
 type TelephonyContract = {
   calls: {
-    get: ContractProcedure<Schema<MessageIdInput, MessageIdInput>, Schema<HitchCall, HitchCall>, Record<never, never>, Meta>;
+    get: ContractProcedure<Schema<CallIdInput, CallIdInput>, Schema<HitchCall, HitchCall>, Record<never, never>, Meta>;
     list: ContractProcedure<Schema<ListHitchCallsInput, ListHitchCallsInput>, Schema<CallsOutput, CallsOutput>, Record<never, never>, Meta>;
   };
   numbers: {
@@ -150,7 +153,7 @@ type HitchTeamMember = {
 };
 type TeamInput = {
   params: {
-    team: string;
+    teamCode: string;
   };
 };
 type TeamsOutput = {

package/dist/index.js

@@ -1,4 +1,4 @@
-import { i as registerHitchContract, t as uploadFile } from "./upload-DtMavo8Q.js";
+import { i as registerHitchContract, t as uploadFile } from "./upload-D1mzpsSk.js";
 import { t as pruneContract } from "./contract-D9LCNGjD.js";
 import { oc, type } from "@orpc/contract";
 // src/hitch/email.ts
@@ -16,7 +16,7 @@ function emailContract(appletCode) {
 			}).input(type()).output(type()),
 			get: oc.route({
 				method: "GET",
-				path: "/resource/v1/email/threads/{id}"
+				path: "/resource/v1/email/threads/{threadId}"
 			}).input(type()).output(type())
 		},
 		messages: {
@@ -26,7 +26,7 @@ function emailContract(appletCode) {
 			}).input(type()).output(type()),
 			get: oc.route({
 				method: "GET",
-				path: "/resource/v1/email/messages/{id}"
+				path: "/resource/v1/email/messages/{messageId}"
 			}).input(type()).output(type()),
 			send: oc.route({
 				method: "POST",
@@ -35,12 +35,12 @@ function emailContract(appletCode) {
 			}).input(type()).output(type()),
 			raw: oc.route({
 				method: "GET",
-				path: "/resource/v1/email/messages/{id}/raw"
+				path: "/resource/v1/email/messages/{messageId}/raw"
 			}).input(type()).output(type())
 		},
 		attachments: { get: oc.route({
 			method: "GET",
-			path: "/resource/v1/email/attachments/{id}"
+			path: "/resource/v1/email/attachments/{attachmentId}"
 		}).input(type()).output(type()) },
 		tracking: {
 			createPixel: oc.route({
@@ -50,11 +50,11 @@ function emailContract(appletCode) {
 			}).input(type()).output(type()),
 			markSent: oc.route({
 				method: "PATCH",
-				path: `${path}/{id}`
+				path: `${path}/{trackerId}`
 			}).input(type()).output(type()),
 			get: oc.route({
 				method: "GET",
-				path: `${path}/{id}`
+				path: `${path}/{trackerId}`
 			}).input(type()).output(type()),
 			list: oc.route({
 				method: "POST",
@@ -73,13 +73,13 @@ const filesContract = {
 	}).input(type()).output(type()),
 	confirm: oc.route({
 		method: "POST",
-		path: "/resource/v1/files/{file}/confirm",
+		path: "/resource/v1/files/{fileId}/confirm",
 		successStatus: 200,
 		inputStructure: "detailed"
 	}).input(type()).output(type()),
 	get: oc.route({
 		method: "GET",
-		path: "/resource/v1/files/{file}",
+		path: "/resource/v1/files/{fileId}",
 		inputStructure: "detailed"
 	}).input(type()).output(type())
 };
@@ -93,7 +93,7 @@ const telephonyContract = {
 	calls: {
 		get: oc.route({
 			method: "GET",
-			path: "/resource/v1/telephony/calls/{id}"
+			path: "/resource/v1/telephony/calls/{callId}"
 		}).input(type()).output(type()),
 		list: oc.route({
 			method: "GET",
@@ -107,7 +107,7 @@ const telephonyContract = {
 	messages: {
 		get: oc.route({
 			method: "GET",
-			path: "/resource/v1/telephony/messages/{id}"
+			path: "/resource/v1/telephony/messages/{messageId}"
 		}).input(type()).output(type()),
 		list: oc.route({
 			method: "GET",
@@ -128,7 +128,7 @@ const teamsContract = {
 	}).input(type()).output(type()),
 	members: { list: oc.route({
 		method: "GET",
-		path: "/resource/v1/teams/{team}/members",
+		path: "/resource/v1/teams/{teamCode}/members",
 		inputStructure: "detailed"
 	}).input(type()).output(type()) }
 };

package/dist/{init-Bb6WT8UB.js → init-C5HqIRt8.js}

@@ -1,13 +1,12 @@
 import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { f as resolveAuth, m as resolveInstanceUrl, p as resolveAuthForOrg } from "./store-E5NhITHl.js";
+import { _ as resolveInstanceUrl, g as resolveAuthForOrg, h as resolveAuth, r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, i as findWorkspaceConfig, o as isRootLayout, r as findParentRoot, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { r as orgUsesHitchGit, t as canCheckHitchGit } from "./auth-DuMRqSGe.js";
-import { n as loadAppletSourceDefinition } from "./load-config-Cffvj-aM.js";
-import { r as runGenerate } from "./generate-48pqFh5M.js";
+import { n as loadAppletSourceDefinition } from "./load-config-Df-zmfrd.js";
+import { r as runGenerate } from "./generate-Ct-Rbh0f.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
-import { l as writeRootSupport, n as loadCliManifest, r as loadPackageManifest, s as writeAppletSupport, t as assertWorkspaceCli, u as writeWorkspaceSupport } from "./project-DZGk765E.js";
+import { l as writeRootSupport, n as loadCliManifest, r as loadPackageManifest, s as writeAppletSupport, t as assertWorkspaceCli, u as writeWorkspaceSupport } from "./project-BbpU_VN2.js";
 import { n as childApplets } from "./parent-Zx8Eg1Ki.js";
-import { t as migrateIfEnabled } from "./git-migration-CIq-sN61.js";
+import { t as migrateIfEnabled } from "./git-migration-6V31iafL.js";
 import { access, cp, mkdir, readdir, writeFile } from "node:fs/promises";
 import { relative, resolve } from "node:path";
 import { spawn } from "node:child_process";

package/dist/{load-config-Cffvj-aM.js → load-config-Df-zmfrd.js}

@@ -1,3 +1,4 @@
+import "./auth-OvyoB6M-.js";
 import { c as validateRootManifest, i as findWorkspaceConfig, n as findAppletRoot, o as isRootLayout } from "./workspace-CtIKSgMD.js";
 import { n as ORG_CODE_PATTERN, t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";

package/dist/{login-BWZKo7Ui.js → login-B41-WWtD.js}

@@ -1,5 +1,4 @@
-import { c as normalizeInstanceUrl, h as revokeOAuthCredentials, m as resolveInstanceUrl, s as deleteCredentials, t as AuthenticationError, u as readCredentialStore } from "./store-E5NhITHl.js";
-import { t as loginWithDevice } from "./device-CZWWckCq.js";
+import { _ as resolveInstanceUrl, a as loginWithDevice, d as normalizeInstanceUrl, o as AuthenticationError, p as readCredentialStore, u as deleteCredentials, v as revokeOAuthCredentials } from "./auth-OvyoB6M-.js";
 import { i as findWorkspaceConfig } from "./workspace-CtIKSgMD.js";
 // src/login.ts
 async function runLogin(options) {

package/dist/{logs-glCVHI-8.js → logs-DrL2ytmg.js}

@@ -1,6 +1,6 @@
+import { n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
 import { s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
-import { o as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { o as resolveWorkspaceOrg, t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
 import { t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 // src/logs.ts

package/dist/{markdown-BXt65dDo.d.ts → markdown-CnB35mjc.d.ts}

@@ -1,4 +1,4 @@
-import { a as UploadedHitchFile } from "./upload-DXZyjZSS.js";
+import { a as UploadedHitchFile } from "./upload-wp-Ilsv6.js";
 import { ReactElement } from "react";
 type MarkdownFiles = {
   download: (id: string) => Promise<Pick<UploadedHitchFile, "downloadUrl">>;

package/dist/{markdown-BA_XzFxq.js → markdown-DLdJOJ59.js}

@@ -70,6 +70,7 @@ function HitchImage({ src, alt, files, node: _node, ...props }) {
 		}
 	});
 }
+const LINK_SAFETY = { enabled: false };
 function Markdown({ children, files, className }) {
 	const rehypePlugins = useMemo(withHitchFileProtocol, []);
 	const components = useMemo(() => ({ img: (props) => /* @__PURE__ */ jsx(HitchImage, {
@@ -79,6 +80,7 @@ function Markdown({ children, files, className }) {
 	return /* @__PURE__ */ jsx(Streamdown, {
 		className,
 		components,
+		linkSafety: LINK_SAFETY,
 		rehypePlugins,
 		urlTransform: (url, key, node) => url.startsWith("hitch-file://") ? url : defaultUrlTransform(url, key, node),
 		children

package/dist/{markdown-editor-CB_nWLzj.d.ts → markdown-editor-xF3uATBp.d.ts}

@@ -1,4 +1,4 @@
-import { a as UploadedHitchFile } from "./upload-DXZyjZSS.js";
+import { a as UploadedHitchFile } from "./upload-wp-Ilsv6.js";
 import { ReactElement } from "react";
 import "@tiptap/core";
 type MarkdownEditorFiles = {

package/dist/{project-DZGk765E.js → project-BbpU_VN2.js}

@@ -1,7 +1,7 @@
 import { r as writeGeneratedAgents, t as GENERATED_SKILLS } from "./generated-agents-BUnJ0FQA.js";
-import { l as organizationInstanceUrl, n as DEFAULT_INSTANCE_URL } from "./store-E5NhITHl.js";
+import { f as organizationInstanceUrl, s as DEFAULT_INSTANCE_URL } from "./auth-OvyoB6M-.js";
 import { a as findWorkspaceRoot, n as findAppletRoot, o as isRootLayout, s as readWorkspaceConfig } from "./workspace-CtIKSgMD.js";
-import { n as loadAppletSourceDefinition, r as appletMountPath } from "./load-config-Cffvj-aM.js";
+import { n as loadAppletSourceDefinition, r as appletMountPath } from "./load-config-Df-zmfrd.js";
 import { z } from "zod";
 import { existsSync } from "node:fs";
 import { cp, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";

package/dist/{schedules-CSUb84e2.js → schedules-2Q_fkY_a.js}

@@ -1,5 +1,5 @@
 import { n as findAppletRoot } from "./workspace-CtIKSgMD.js";
-import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
 import { t as question } from "./prompt-CW98R-Un.js";
 import { RPCLink } from "@orpc/client/fetch";
 import { readFile } from "node:fs/promises";

package/dist/server.d.ts

@@ -2,7 +2,7 @@ import { a as createWorkflow, i as WorkflowStep, n as WorkflowDefinition, r as W
 import { l as RegisteredContract, m as RegisteredWorkflows, p as RegisteredVariables, u as RegisteredManifest } from "./manifest-CpghlaJc.js";
 import { t as NarrowContract } from "./contract-CUc0B2rl.js";
 import { i as WithBatchRecorder, n as WithRecordCreates } from "./create-BJqLT8Uq.js";
-import { o as WithFilesUpload } from "./upload-DXZyjZSS.js";
+import { o as WithFilesUpload } from "./upload-wp-Ilsv6.js";
 import { ContractRouterClient } from "@orpc/contract";
 type WorkflowRunStatus<Result> = {
   id: string;

package/dist/server.js

@@ -1,8 +1,8 @@
-import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-DtMavo8Q.js";
+import { n as withFilesUpload, r as getRegisteredHitchContract } from "./upload-D1mzpsSk.js";
 import { t as HITCH_APPLET_CODE_HEADER } from "./headers-BcEMIVCo.js";
 import { a as getRequestContext, i as getIdentityBearer, n as createWorkflow, s as tryGetRequestContext } from "./workflow-l2SlVePB.js";
 import { s as publishNote, t as APP_CONTEXT_CHANNEL } from "./log-context-BepwdjrR.js";
-import { t as withBatchRecorder } from "./batch-CiLZ177G.js";
+import { t as withBatchRecorder } from "./batch-DwyWmiaE.js";
 import { t as createLazyClientProxy } from "./lazy-client--QCL0wiu.js";
 import { createORPCClient } from "@orpc/client";
 import { OpenAPILink } from "@orpc/openapi-client/fetch";

package/dist/{upload-DtMavo8Q.js → upload-D1mzpsSk.js}

@@ -79,7 +79,7 @@ async function uploadFile(files, file, options = {}) {
 	} }, { signal: options.signal });
 	const status = await putFile(file, created.uploadUrl, created.data.contentType, options);
 	if (status < 200 || status >= 300) throw new Error(`Upload of "${file.name}" failed with status ${status}.`);
-	const confirmed = await files.confirm({ params: { file: created.data.id } }, { signal: options.signal });
+	const confirmed = await files.confirm({ params: { fileId: created.data.id } }, { signal: options.signal });
 	return {
 		...confirmed.data,
 		downloadUrl: confirmed.downloadUrl
@@ -94,7 +94,7 @@ function withFilesUpload(target, files) {
 		const proxy = new Proxy(value, { get: (filesInner, filesProperty, filesReceiver) => {
 			if (filesProperty === "upload") return (file, options) => uploadFile(files(), file, options);
 			if (filesProperty === "download") return async (id, options) => {
-				const result = await files().get({ params: { file: id } }, options);
+				const result = await files().get({ params: { fileId: id } }, options);
 				return {
 					...result.data,
 					downloadUrl: result.downloadUrl

package/dist/{upload-DXZyjZSS.d.ts → upload-wp-Ilsv6.d.ts}

@@ -27,7 +27,7 @@ type CreateFileOutput = {
 };
 type FileInput = {
   params: {
-    file: string;
+    fileId: string;
   };
 };
 type FileOutput = {
@@ -57,7 +57,7 @@ type FilesClient = {
   }>;
   confirm(input: {
     params: {
-      file: string;
+      fileId: string;
     };
   }, options?: {
     signal?: AbortSignal;
@@ -67,7 +67,7 @@ type FilesClient = {
   }>;
   get(input: {
     params: {
-      file: string;
+      fileId: string;
     };
   }, options?: {
     signal?: AbortSignal;

package/dist/{variables-CgZstC7I.js → variables-CGwbmUom.js}

@@ -1,5 +1,5 @@
-import { n as fetchWithOrgAuth } from "./auth-DuMRqSGe.js";
-import { t as loadAppletConfig } from "./load-config-Cffvj-aM.js";
+import { n as fetchWithOrgAuth } from "./auth-OvyoB6M-.js";
+import { t as loadAppletConfig } from "./load-config-Df-zmfrd.js";
 import { t as question } from "./prompt-CW98R-Un.js";
 import { z } from "zod";
 // src/variables.ts

package/dist/vite.js

@@ -3,10 +3,10 @@ import { a as openQueryCacheDatabase } from "./query-cache-DQJy45RT.js";
 import { d as HITCH_SESSION_HEADER, f as HITCH_USER_HEADER } from "./headers-BcEMIVCo.js";
 import { a as workflowOutcomeSchema, n as runWorkflowJournal } from "./workflow-engine-CyyaVENo.js";
 import { r as writeGeneratedAgents } from "./generated-agents-BUnJ0FQA.js";
-import { d as rejectEnvironmentKey, i as bearerToken, l as organizationInstanceUrl, m as resolveInstanceUrl, p as resolveAuthForOrg } from "./store-E5NhITHl.js";
+import { _ as resolveInstanceUrl, f as organizationInstanceUrl, g as resolveAuthForOrg, l as bearerToken, m as rejectEnvironmentKey } from "./auth-OvyoB6M-.js";
 import { c as validateRootManifest, o as isRootLayout } from "./workspace-CtIKSgMD.js";
-import { a as appletSourceDefinitionSchema, i as appletReleaseManifest, o as resolveWorkspaceOrg, r as appletMountPath } from "./load-config-Cffvj-aM.js";
-import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-48pqFh5M.js";
+import { a as appletSourceDefinitionSchema, i as appletReleaseManifest, o as resolveWorkspaceOrg, r as appletMountPath } from "./load-config-Df-zmfrd.js";
+import { a as writeRegisterDeclaration, c as writeAppletRoot, d as writeServerEntry, i as syncContract, l as writeClientEntry, n as routesModuleSource, u as writeManifestGen } from "./generate-Ct-Rbh0f.js";
 import { t as APPLET_CODE_PATTERN } from "./manifest-patterns-BfxqImlp.js";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hitch42/applet",
-  "version": "0.1.1-beta.21",
+  "version": "0.1.1-beta.23",
   "license": "MIT",
   "bin": {
     "applet": "./dist/applet.js"
@@ -13,7 +13,8 @@
   ],
   "type": "module",
   "sideEffects": [
-    "*.css"
+    "*.css",
+    "./src/auth.ts"
   ],
   "exports": {
     ".": {
@@ -55,10 +56,10 @@
     }
   },
   "dependencies": {
-    "@cloudflare/vite-plugin": "^1.51.1",
+    "@cloudflare/vite-plugin": "^1.66.0",
     "@fontsource-variable/geist-mono": "^5.3.0",
     "@fontsource-variable/inter": "^5.3.0",
-    "@hey-api/openapi-ts": "0.0.0-next-20260824173136",
+    "@hey-api/openapi-ts": "0.0.0-next-20260930190945",
     "@napi-rs/keyring": "2.1.2",
     "@orpc/client": "^1.15.0",
     "@orpc/contract": "^1.15.0",
@@ -67,8 +68,8 @@
     "@react-aria/optimize-locales-plugin": "^2.1.0",
     "@tailwindcss/vite": "^4.3.0",
     "@tanstack/react-query-persist-client": "5.101.4",
-    "@tanstack/router-cli": "^1.167.24",
-    "@tanstack/router-plugin": "^1.168.23",
+    "@tanstack/router-cli": "^1.167.46",
+    "@tanstack/router-plugin": "^1.168.48",
     "@telnyx/webrtc": "^2.27.10",
     "@tiptap/core": "^3.30.3",
     "@tiptap/extension-image": "^3.30.3",
@@ -101,7 +102,7 @@
   "peerDependencies": {
     "@orpc/server": "^1.15.0",
     "@tanstack/react-query": "5.101.4",
-    "@tanstack/react-router": "^1.170.18",
+    "@tanstack/react-router": "^1.170.46",
     "@types/node": "^24",
     "@types/react": "^19.2.0",
     "@types/react-dom": "^19.2.0",

package/scaffold/.agents/skills/hitch-applets/references/email-tracking.md

@@ -9,15 +9,15 @@ const { id, url } = await hitch.email.tracking.createPixel({
 });
 const html = `<p>Hello</p><img src="${url}" width="1" height="1" alt="">`;
 // Send the email with the applet's email provider.
-await hitch.email.tracking.markSent({ id });
+await hitch.email.tracking.markSent({ trackerId: id });
 ```
 
-`markSent({ id, sentAt })` accepts an ISO time. A later call replaces the sent time.
-`get({ id })` returns one tracker. `list()` returns up to 100 trackers by default.
+`markSent({ trackerId, sentAt })` accepts an ISO time. A later call replaces the sent time.
+`get({ trackerId })` returns one tracker. `list()` returns up to 100 trackers by default.
 Use `filter`, `sentAt`, `cursor`, and `limit` to select a page.
 
 ```ts
-const tracker = await hitch.email.tracking.get({ id });
+const tracker = await hitch.email.tracking.get({ trackerId: id });
 const query = {
   filter: { buyerId: "acme" },
   sentAt: { $gte: "2026-10-01T00:00:00Z" },

package/scaffold/.agents/skills/hitch-applets/references/files.md

@@ -77,7 +77,7 @@ Use the `get` query utilities when React needs file metadata as query state.
 ```ts
 const fileQuery = useQuery(
   hitch.files.get.queryOptions({
-    input: { params: { file: id } },
+    input: { params: { fileId: id } },
   }),
 );
 
@@ -100,7 +100,7 @@ Store `uploaded.id` as the value of an attachment attribute. A multi-value attac
 const uploaded = await hitch.files.upload(file);
 
 await hitch.records.claims.update.call({
-  params: { record: claimId },
+  params: { recordId: claimId },
   body: { receipt_id: uploaded.id }, // multi-value: [uploaded.id]
 });
 ```

package/scaffold/.agents/skills/hitch-applets/references/performance.md

@@ -50,8 +50,8 @@ await hitch.batch(
   (tx) => {
     tx.companies.create({ body: { id: companyId, name: "Acme" } });
     tx.deals.create({ body: { name: "Acme renewal", company_id: companyId } });
-    tx.deals.update({ params: { record: dealId }, body: { stage: "won" } });
-    tx.deals.delete({ params: { record: staleDealId } });
+    tx.deals.update({ params: { recordId: dealId }, body: { stage: "won" } });
+    tx.deals.delete({ params: { recordId: staleDealId } });
     tx.deals.updateWhere({ body: { filter: { stage: "open" }, set: { stage: "lost" } } });
   },
   { idempotencyKey: `import-${runId}-${chunkIndex}` },

package/scaffold/.agents/skills/hitch-applets/references/records.md

@@ -15,15 +15,15 @@ Use the generated Hitch contract as the typed data plane.
 
 - `list` sends `GET /v1/<objectCode>` and lists records with query parameters.
 - `create` sends `POST /v1/<objectCode>` and creates one record or an array of records.
-- `get` sends `GET /v1/<objectCode>/{record}` and gets one record.
-- `history` sends `GET /v1/<objectCode>/{record}/history` and gets record changes.
-- `update` sends `PATCH /v1/<objectCode>/{record}` and updates one record.
-- `delete` sends `DELETE /v1/<objectCode>/{record}` and deletes one record.
+- `get` sends `GET /v1/<objectCode>/{recordId}` and gets one record.
+- `history` sends `GET /v1/<objectCode>/{recordId}/history` and gets record changes.
+- `update` sends `PATCH /v1/<objectCode>/{recordId}` and updates one record.
+- `delete` sends `DELETE /v1/<objectCode>/{recordId}` and deletes one record.
 - `query` sends `POST /v1/<objectCode>/query` and lists records with a structured body.
 - `updateWhere` sends `POST /v1/<objectCode>/bulk-update` and updates matching records.
 - `aggregate` sends `POST /v1/<objectCode>/aggregate` and calculates aggregate values.
 
-- Pass a record ID in `params.record` for `get`, `history`, `update`, and `delete`.
+- Pass a record ID in `params.recordId` for `get`, `history`, `update`, and `delete`.
 - Pass record fields in `body` for `create` and `update`.
 - Pass structured query data in `body` for `query`.
 
@@ -67,7 +67,7 @@ const deals = await hitch.records.deals.query({
 });
 
 const deal = await hitch.records.deals.get({
-  params: { record: dealId },
+  params: { recordId: dealId },
 });
 ```
 
@@ -93,7 +93,7 @@ The first record has index 0. An empty array returns an empty array and requires
 
 ```ts
 const page = await hitch.records.deals.history({
-  params: { record: id },
+  params: { recordId: id },
   query: { limit: 25, cursor },
 });
 

package/scaffold/.agents/skills/hitch-cli/SKILL.md

@@ -44,7 +44,7 @@ Every generated command comes from an API route. The words of the command are th
 - `hitch manage ...` changes the organization: objects and attributes, changesets, grants, teams, members, invitations, capabilities, API keys, applets, and the theme. Each command needs a capability.
 - `hitch me get` shows who you are. `hitch me teams list` and `hitch me applets list` show your teams and the applets that you can open.
 - The verb comes from the HTTP method: `list` or `get` for GET, `create` for POST, `update` for PATCH, `set` for PUT, `delete` for DELETE. A POST to an action uses the action as the verb: `hitch manage changesets apply`.
-- Every path, query, and body field becomes a flag in kebab case. A path field names its thing: `--object`, `--record`, `--team`, `--grant`, `--changeset`. An object field takes JSON: `--filter '{"stage":"won"}'`. An array field takes one JSON value per item: `--aggregates '{"op":"sum","attribute":"amount","as":"total"}' '{"op":"count","as":"n"}'`.
+- Every path, query, and body field becomes a flag in kebab case. A path field names its thing: `--object-code`, `--record-id`, `--team-code`, `--changeset-id`. An object field takes JSON: `--filter '{"stage":"won"}'`. An array field takes one JSON value per item: `--aggregates '{"op":"sum","attribute":"amount","as":"total"}' '{"op":"count","as":"n"}'`.
 - A required field is a required flag. The CLI does not prompt for a missing value. It prints the usage error.
 - Run `hitch <command> --help` to see its flags. The flags of a data command follow that organization's schema.
 - Every `delete` command asks for confirmation. Pass `--yes` to skip it. A script without a terminal must pass `--yes`.
@@ -57,16 +57,16 @@ Examples use an object called `deals` with attributes `amount`, `stage`, and `ow
 
 ```sh
 hitch deals list --limit 20 --include owner
-hitch deals get --record 0192f1a2-3b4c-7d5e-8f60-123456789abc --include owner
+hitch deals get --record-id 0192f1a2-3b4c-7d5e-8f60-123456789abc --include owner
 hitch deals create --name "Acme renewal" --amount 5000 --stage open
-hitch deals update --record 0192f1a2-3b4c-7d5e-8f60-123456789abc --stage won
-hitch deals delete --record 0192f1a2-3b4c-7d5e-8f60-123456789abc --yes
-hitch deals history get --record 0192f1a2-3b4c-7d5e-8f60-123456789abc
+hitch deals update --record-id 0192f1a2-3b4c-7d5e-8f60-123456789abc --stage won
+hitch deals delete --record-id 0192f1a2-3b4c-7d5e-8f60-123456789abc --yes
+hitch deals history get --record-id 0192f1a2-3b4c-7d5e-8f60-123456789abc
 hitch deals query --filter '{"stage":{"$in":["open","won"]}}' --sort '{"attribute":"createdAt","direction":"desc"}' --limit 50
 hitch deals bulk-update --filter '{"stage":"open"}' --set '{"stage":"lost"}' --expect 3
 hitch deals aggregate --aggregates '{"op":"sum","attribute":"amount","as":"total"}' --group-by '[{"attribute":"stage"}]'
 hitch batch run --requests '{"method":"POST","path":"/v1/deals","body":{"name":"A","stage":"open"}}'
-hitch objects schema get --object deals
+hitch objects schema get --object-code deals
 ```
 
 - The filter, sort, include, aggregate, and batch bodies use the same shapes as the SDK. Read the `hitch-data` skill for the rules and limits.
@@ -80,21 +80,21 @@ hitch objects schema get --object deals
 ```sh
 hitch resource teams list
 hitch manage teams create --name Sales
-hitch manage teams members set --team sales --member james@acme.com
+hitch manage teams members set --team-code sales --member-email james@acme.com
 hitch manage invitations create --email bob@acme.com
 hitch manage capabilities list
-hitch manage capabilities grants set --capability objects:manage --grant sales
-hitch manage objects access get --object deals
-hitch manage objects grants set --object deals --grant sales --can-create --can-read --can-update --conditions '{"path":["owner"],"operator":"equals","operand":"current_user"}'
-hitch manage objects grants set --object deals --grant default --can-read
-hitch manage objects grants delete --object deals --grant sales --yes
-hitch manage applets access get --applet sales_portal
-hitch manage applets grants set --applet sales_portal --grant sales
+hitch manage capabilities grants set --capability-name objects:manage --team-code sales
+hitch manage objects access get --object-code deals
+hitch manage objects grants set --object-code deals --team-code sales --can-create --can-read --can-update --conditions '{"path":["owner"],"operator":"equals","operand":"current_user"}'
+hitch manage objects grants set --object-code deals --team-code default --can-read
+hitch manage objects grants delete --object-code deals --team-code sales --yes
+hitch manage applets access get --applet-code sales_portal
+hitch manage applets grants set --applet-code sales_portal --team-code sales
 ```
 
-- Paths name things by key, not by id. `--team` and `--grant` take a team code. `--member` and `--invitation` take an email. `--api-key` takes the key name, for example `CI_DEPLOY`. `--object` and `--attribute` take a code. `--mailbox` takes the mailbox address.
+- Paths name things by key, not by id. `--team-code` takes a team code. `--member-email` and `--invitation-email` take an email. `--api-key-name` takes the key name, for example `CI_DEPLOY`. `--object-code` and `--attribute-code` take a code. `--mailbox-email` takes the mailbox address.
 - A team code is the team name folded to ASCII and lower case, with each run of other characters as one `_`. `Sales Team` has the code `sales_team`. A rename changes the code.
-- `manage objects grants set` sets the whole object grant of one grantee: a verb that you leave out is off, and the conditions and attribute rules that you pass replace the saved ones. `--grant` is a team code, or `default` for the grant that every member holds.
+- `manage objects grants set` sets the whole object grant of one grantee: a verb that you leave out is off, and the conditions and attribute rules that you pass replace the saved ones. `--team-code` is a team code, or `default` for the grant that every member holds.
 - Pass each condition and each attribute rule as one JSON value, for example `--attributes '{"attribute":"owner","canUpdate":true}'`. Name attributes by code.
 - Add `--delegate '"company"'` to delegate through a reference attribute. The value is the attribute code as a JSON string.
 - `manage objects access get` shows each object grant in the shape that `manage objects grants set` takes. `manage applets access get` shows which grantees cannot use what an applet reads.
@@ -106,11 +106,11 @@ Schema changes go through a changeset.
 ```sh
 hitch manage changesets create
 hitch manage objects create --name Deals --changeset-id <changesetId>
-hitch manage objects attributes create --object deals --name Amount --type currency --changeset-id <changesetId>
-hitch manage changesets check --changeset <changesetId>
-hitch manage changesets apply --changeset <changesetId>
-hitch manage changesets merge --changeset <changesetId> --from <otherChangesetId>
-hitch manage changesets abandon --changeset <changesetId>
+hitch manage objects attributes create --object-code deals --name Amount --type currency --changeset-id <changesetId>
+hitch manage changesets check --changeset-id <changesetId>
+hitch manage changesets apply --changeset-id <changesetId>
+hitch manage changesets merge --changeset-id <changesetId> --from <otherChangesetId>
+hitch manage changesets abandon --changeset-id <changesetId>
 ```
 
 - A schema command without `--changeset-id` applies at once when it has no blockers. With a blocker, Hitch stages it in a new pending changeset and names it in the error.

package/dist/auth-DuMRqSGe.js

@@ -1,49 +0,0 @@
-import { a as configureKeyring, d as rejectEnvironmentKey, i as bearerToken, l as organizationInstanceUrl, m as resolveInstanceUrl, p as resolveAuthForOrg, r as LoginRequiredError, t as AuthenticationError, u as readCredentialStore } from "./store-E5NhITHl.js";
-import { n as parseMe, t as loginWithDevice } from "./device-CZWWckCq.js";
-import "./workspace-CtIKSgMD.js";
-import { Entry, findCredentials } from "@napi-rs/keyring";
-// src/auth.ts
-configureKeyring(Entry, findCredentials);
-async function fetchWithOrgAuth(orgCode, request) {
-	return withOrgAuth(orgCode, async (organizationUrl, accessToken) => {
-		const response = await request(organizationUrl, accessToken);
-		return {
-			response,
-			unauthorized: response.status === 401
-		};
-	}).then(({ response }) => response);
-}
-async function withOrgAuth(orgCode, request) {
-	const instanceUrl = await resolveInstanceUrl();
-	const organizationUrl = organizationInstanceUrl(instanceUrl, orgCode);
-	const auth = await resolveAuthForOrg(instanceUrl, orgCode).catch((error) => {
-		if (error instanceof LoginRequiredError && process.stdin.isTTY === true) return void 0;
-		throw error;
-	});
-	if (auth !== void 0) {
-		const result = await request(organizationUrl, bearerToken(auth));
-		if ("response" in result && result.response instanceof Response) rejectEnvironmentKey(result.response, auth);
-		if (!result.unauthorized) return result;
-		if (auth.source === "environment") throw new AuthenticationError("HITCH_API_KEY was rejected.");
-	}
-	if (process.stdin.isTTY !== true) throw new LoginRequiredError();
-	await loginWithDevice(instanceUrl, { expectedOrg: orgCode });
-	const credentials = await resolveAuthForOrg(instanceUrl, orgCode);
-	if (credentials === void 0) throw new Error(`login did not provide credentials for organization "${orgCode}"`);
-	return request(organizationUrl, bearerToken(credentials));
-}
-async function orgUsesHitchGit(org) {
-	const response = await fetchWithOrgAuth(org, (organizationUrl, token) => fetch(`${organizationUrl}/api/me/v1`, { headers: { Authorization: `Bearer ${token}` } }));
-	if (!response.ok) throw new AuthenticationError(`Could not read organization membership (${response.status}).`);
-	const membership = parseMe(await response.json()).memberships.find((item) => item.code === org);
-	if (membership === void 0) throw new AuthenticationError(`You are not a member of ${org}.`);
-	if (typeof membership.gitEnabled !== "boolean") throw new Error("The membership response has no \"gitEnabled\" flag. Update the Hitch server.");
-	return membership.gitEnabled;
-}
-async function canCheckHitchGit() {
-	if (process.env.GITHUB_ACTIONS === "true") return false;
-	if (process.env.HITCH_API_KEY) return true;
-	const instance = await resolveInstanceUrl();
-	return Object.entries((await readCredentialStore()).instances).some(([url, credentials]) => url === instance && Object.keys(credentials).length > 0);
-}
-export { withOrgAuth as i, fetchWithOrgAuth as n, orgUsesHitchGit as r, canCheckHitchGit as t };

package/dist/build-C7hi2yg4.js

@@ -1 +0,0 @@
-export { i as runBuild } from "./build-FAQSHJgm.js";