@k9o/core 1.2.0 → 1.3.0

package/dist/index.js

@@ -2,15 +2,17 @@ import "./chunk-YEYRP6PG.js";
 import {
   request,
   requestStream
-} from "./chunk-O2ZTV6YN.js";
+} from "./chunk-KC4EDMBF.js";
 import {
+  DEFAULT_BASE_URL,
   orgPath,
+  parseApiHost,
   platformPath,
   projectPath,
   resolveBaseUrl,
   validateBaseUrl,
   validateSlug
-} from "./chunk-2NDFTHUB.js";
+} from "./chunk-UL53GNYM.js";
 import {
   KError,
   kerrorFromWire
@@ -278,7 +280,7 @@ function makeProjectsNamespace(config) {
      * Create a new project under the caller's active org.
      */
     async create(input) {
-      validateSlug(input.slug, "project");
+      if (input.slug !== void 0) validateSlug(input.slug, "project");
       return request(config, {
         method: "POST",
         path: orgPath("projects"),
@@ -292,7 +294,7 @@ function makeProjectsNamespace(config) {
       validateSlug(slug, "project");
       return request(config, {
         method: "GET",
-        path: projectPath(slug, "project")
+        path: orgPath(`projects/${slug}`)
       });
     },
     /**
@@ -302,7 +304,7 @@ function makeProjectsNamespace(config) {
       validateSlug(slug, "project");
       return request(config, {
         method: "PATCH",
-        path: projectPath(slug, "project"),
+        path: orgPath(`projects/${slug}`),
         body: patch
       });
     }
@@ -385,7 +387,7 @@ function makeBucketHandle(config, bucket) {
       return request(config, { method: "POST", path: bucketPath(config, bucket, "/objects"), body: form });
     },
     /**
-     * A pre-authenticated GET URL for one object. `POST …/objects/sign`. `expiresIn` is required.
+     * A pre-authenticated GET URL for one object. `POST …/objects/sign`. `expiresIn` is required; the URL lives at most 900 seconds.
      * (A signed PUT is not offered: the gateway has no route for it yet.)
      */
     async createSignedUrl(path, options) {
@@ -543,79 +545,8 @@ function makeStorageNamespace(config) {
   };
 }
 
-// src/metadata.ts
-var METADATA_OPERATORS = [
-  "eq",
-  "neq",
-  "gt",
-  "gte",
-  "lt",
-  "lte",
-  "contains",
-  "startsWith",
-  "endsWith",
-  "in",
-  "notIn",
-  "and",
-  "or",
-  "not"
-];
-function requireProjectSlug3(config) {
-  if (config.projectSlug === void 0 || config.projectSlug.length === 0) {
-    throw new KError({
-      code: "K9O_MISSING_PROJECT_CONTEXT",
-      message: "client.metadata requires a bound projectSlug (project data-plane resource,)",
-      context: {},
-      recommendation: "Pass projectSlug when constructing the client."
-    });
-  }
-  return config.projectSlug;
-}
-function makeBuilder(config, surfaces, where, limit, cursorValue) {
-  return {
-    where(field, op, value) {
-      return makeBuilder(config, surfaces, [...where, { field, op, value }], limit, cursorValue);
-    },
-    limit(n) {
-      return makeBuilder(config, surfaces, where, n, cursorValue);
-    },
-    cursor(c) {
-      return makeBuilder(config, surfaces, where, limit, c);
-    },
-    async execute() {
-      return request(config, {
-        method: "POST",
-        path: projectPath(requireProjectSlug3(config), "metadata/query"),
-        body: {
-          surfaces,
-          where,
-          ...limit !== void 0 ? { limit } : {},
-          cursor: cursorValue
-        }
-      });
-    }
-  };
-}
-function makeMetadataNamespace(config) {
-  return {
-    /** Start a cross-surface metadata query against one or more surfaces. */
-    from(surface) {
-      const surfaces = Array.isArray(surface) ? surface : [surface];
-      if (surfaces.length === 0) {
-        throw new KError({
-          code: "K9O_UNKNOWN_SURFACE",
-          message: "client.metadata.from(...) requires at least one surface label.",
-          context: {},
-          recommendation: "Pass a surface like 'collection:posts', 'storage:images', or 'telemetry:auth.session.created'."
-        });
-      }
-      return makeBuilder(config, surfaces, [], void 0, null);
-    }
-  };
-}
-
 // src/migrations.ts
-function requireProjectSlug4(config) {
+function requireProjectSlug3(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("migrations operations require projectSlug bound on the client");
   }
@@ -625,7 +556,7 @@ function makeMigrationsNamespace(config) {
   return {
     /** Apply migrations immediately (PROJECT_ADMIN minimum). */
     async apply(input) {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, "migrations/apply"),
@@ -634,7 +565,7 @@ function makeMigrationsNamespace(config) {
     },
     /** List applied migrations on the project. */
     async list() {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, "migrations")
@@ -642,7 +573,7 @@ function makeMigrationsNamespace(config) {
     },
     /** Get a single applied migration by version. */
     async get(version) {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `migrations/${encodeURIComponent(String(version))}`)
@@ -650,19 +581,20 @@ function makeMigrationsNamespace(config) {
     },
     /** Queue migrations for maker-checker approval. */
     async queue(input) {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, "migrations/queue"),
         body: input
       });
     },
-    /** List pending (queued, not yet approved) migrations. */
-    async listPending() {
-      const slug = requireProjectSlug4(config);
+    /** List pending migrations: `queued` ones by default, or those with the given `status`. */
+    async listPending(opts) {
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "GET",
-        path: projectPath(slug, "migrations/pending")
+        path: projectPath(slug, "migrations/pending"),
+        query: opts
       });
     },
     /**
@@ -672,7 +604,7 @@ function makeMigrationsNamespace(config) {
      * needs its own approval flow, not this call).
      */
     async applyPending(pendingId) {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `migrations/pending/${encodeURIComponent(pendingId)}/apply`)
@@ -680,7 +612,7 @@ function makeMigrationsNamespace(config) {
     },
     /** Reject a pending migration (transitions to rejected; does not apply). */
     async rejectPending(pendingId, input) {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `migrations/pending/${encodeURIComponent(pendingId)}/reject`),
@@ -689,7 +621,7 @@ function makeMigrationsNamespace(config) {
     },
     /** Delete a pending migration from the queue. */
     async deletePending(pendingId) {
-      const slug = requireProjectSlug4(config);
+      const slug = requireProjectSlug3(config);
       return request(config, {
         method: "DELETE",
         path: projectPath(slug, `migrations/pending/${encodeURIComponent(pendingId)}`)
@@ -699,7 +631,7 @@ function makeMigrationsNamespace(config) {
 }
 
 // src/functions.ts
-function requireProjectSlug5(config) {
+function requireProjectSlug4(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("functions operations require projectSlug bound on the client");
   }
@@ -707,9 +639,23 @@ function requireProjectSlug5(config) {
 }
 function makeFunctionsNamespace(config) {
   return {
-    /** Deploy or redeploy a function. Returns the function record with status. */
+    /**
+     * Upload a function artifact and get back its content-addressed `artifactKey`, to pass to `deploy`.
+     * `POST /@<projectSlug>/functions/artifacts` with the raw bytes: a WebAssembly module for the gateway tier (up to
+     * 16 MiB) or an OCI image archive for the sandbox tier (up to 256 MiB). Uploading the same bytes again returns the same key.
+     */
+    async uploadArtifact(bytes, kind) {
+      const slug = requireProjectSlug4(config);
+      return request(config, {
+        method: "POST",
+        path: projectPath(slug, "functions/artifacts"),
+        rawBody: bytes,
+        headers: { "content-type": kind === "wasm" ? "application/wasm" : "application/x-tar" }
+      });
+    },
+    /** Deploy or redeploy a function from an uploaded artifact. Returns the function record with status. */
     async deploy(input) {
-      const slug = requireProjectSlug5(config);
+      const slug = requireProjectSlug4(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, "functions"),
@@ -718,7 +664,7 @@ function makeFunctionsNamespace(config) {
     },
     /** List deployed functions (cursor pagination). */
     async list(opts) {
-      const slug = requireProjectSlug5(config);
+      const slug = requireProjectSlug4(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, "functions"),
@@ -727,43 +673,40 @@ function makeFunctionsNamespace(config) {
     },
     /** Get a function by name. */
     async get(name) {
-      const slug = requireProjectSlug5(config);
+      const slug = requireProjectSlug4(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `functions/${encodeURIComponent(name)}`)
       });
     },
-    /** Retire a function. Returns confirmation; the function name enters a 24h cooldown. */
+    /** Retire a function. Returns the retired record; the function name enters a 24h cooldown. */
     async delete(name) {
-      const slug = requireProjectSlug5(config);
+      const slug = requireProjectSlug4(config);
       return request(config, {
         method: "DELETE",
         path: projectPath(slug, `functions/${encodeURIComponent(name)}`)
       });
     },
     /**
-     * Invoke a function. The `payload` is passed to the function runtime
-     * verbatim; the gateway returns whatever the function returns wrapped
-     * in the standard envelope.
-     *
-     * Per: invoke authority is per-function (declared in the
-     * function manifest). Per: streaming responses use the
-     * subscription/async-iterator pattern; this method covers the
+     * Invoke a function. The `payload` is sent as the `payload` field of
+     * the request body and passed to the function runtime verbatim; the
+     * gateway returns whatever the function returns wrapped in the standard
+     * envelope. Invoke authority is per function. This method covers the
      * request-response variant only.
      */
-    async invoke(name, payload) {
-      const slug = requireProjectSlug5(config);
+    async invoke(name, payload, options) {
+      const slug = requireProjectSlug4(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `functions/${encodeURIComponent(name)}/invoke`),
-        body: payload
+        body: { ...payload !== void 0 ? { payload } : {}, ...options ?? {} }
       });
     }
   };
 }
 
 // src/policies.ts
-function requireProjectSlug6(config) {
+function requireProjectSlug5(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("policies operations require projectSlug bound on the client");
   }
@@ -773,15 +716,15 @@ function makePoliciesNamespace(config) {
   return {
     /** Return the currently-active policy for the project. */
     async current() {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, "policy")
       });
     },
-    /** List all policy bundles (draft + published + deactivated). */
+    /** List all policy bundles (draft + published + superseded). */
     async list(opts) {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, "policies"),
@@ -790,16 +733,16 @@ function makePoliciesNamespace(config) {
     },
     /** Create a draft policy bundle. */
     async create(input) {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, "policies"),
         body: input
       });
     },
-    /** Lint a candidate rule set without persisting. */
+    /** Lint a candidate policy document without persisting. */
     async validate(input) {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, "policies/validate"),
@@ -808,42 +751,47 @@ function makePoliciesNamespace(config) {
     },
     /** Get a single bundle by id. */
     async get(bundleId) {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `policies/${encodeURIComponent(bundleId)}`)
       });
     },
-    /** Patch a draft bundle. Cannot patch published bundles (publish→republish flow). */
+    /** Replace a draft bundle's policy document. Cannot patch published bundles (publish→republish flow). */
     async update(bundleId, patch) {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "PATCH",
         path: projectPath(slug, `policies/${encodeURIComponent(bundleId)}`),
         body: patch
       });
     },
-    /** Delete a draft bundle. Cannot delete published bundles. */
+    /** Delete a draft bundle. Cannot delete published bundles. The gateway answers 204 with no body. */
     async delete(bundleId) {
-      const slug = requireProjectSlug6(config);
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "DELETE",
         path: projectPath(slug, `policies/${encodeURIComponent(bundleId)}`)
       });
     },
-    /** Publish a draft bundle — transitions to `published` + becomes active for the project. */
-    async publish(bundleId) {
-      const slug = requireProjectSlug6(config);
+    /**
+     * Publish a draft bundle. The gateway answers 202 with `{ pendingChangeId, bundleId }`: the publish waits for
+     * approval, then the bundle becomes active. Pass `acknowledgeSelfLockout: true` to proceed when the bundle
+     * would remove your own read access to a collection.
+     */
+    async publish(bundleId, options) {
+      const slug = requireProjectSlug5(config);
       return request(config, {
         method: "POST",
-        path: projectPath(slug, `policies/${encodeURIComponent(bundleId)}/publish`)
+        path: projectPath(slug, `policies/${encodeURIComponent(bundleId)}/publish`),
+        ...options !== void 0 ? { body: options } : {}
       });
     }
   };
 }
 
 // src/audit.ts
-function requireProjectSlug7(config) {
+function requireProjectSlug6(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("audit operations require projectSlug bound on the client");
   }
@@ -855,12 +803,11 @@ function makeAuditNamespace(config) {
      * Query the audit log. Returns reverse-chronological events matching
      * all supplied filters (AND composition).
      *
-     * Per RBAC: requires `AUDIT_READER` role minimum; Custodian-
-     * class roles inherit. Project-level audit is project-scoped (this
-     * endpoint); platform-level audit is admin-only (separate surface).
+     * Requires the `AUDIT_READER` role at minimum. This endpoint is
+     * project-scoped.
      */
     async query(opts) {
-      const slug = requireProjectSlug7(config);
+      const slug = requireProjectSlug6(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, "audit-log"),
@@ -869,17 +816,16 @@ function makeAuditNamespace(config) {
     },
     /**
      * Convenience: live-tail recent events. Currently single-shot read
-     * with `since` defaulted to "1 minute ago"; subscription-mode tail
-     * (SSE) lands when the streaming layer ships pattern.
+     * with `after` defaulted to "1 minute ago".
      */
     async tail(opts) {
-      const slug = requireProjectSlug7(config);
+      const slug = requireProjectSlug6(config);
       const minutes = opts?.sinceMinutes ?? 1;
       const since = new Date(Date.now() - minutes * 6e4).toISOString();
       return request(config, {
         method: "GET",
         path: projectPath(slug, "audit-log"),
-        query: { since, limit: opts?.limit ?? 100 }
+        query: { after: since, limit: opts?.limit ?? 100 }
       });
     }
   };
@@ -923,19 +869,18 @@ function makeOrgsNamespace(config) {
 // src/org.ts
 function makeMembersNamespace(config) {
   return {
-    /** GET /members (org-plane LIST). */
+    /** GET /members (org-plane LIST). The route is not paged; it filters by userId, role, acceptanceStatus, status and state. */
     async list(opts) {
       return request(config, { method: "GET", path: orgPath("members"), query: opts });
     },
-    /** POST /members — invite a new org member by email. */
+    /**
+     * POST /members — add a member by email. An existing user becomes a member at once (201, the member row);
+     * an unknown email gets an invitation (202, `{ invitation, delivery }`).
+     */
     async invite(input) {
       return request(config, { method: "POST", path: orgPath("members"), body: input });
     },
-    /** GET /members/<userId> — single-read (existing endpoint). */
-    async get(userId) {
-      return request(config, { method: "GET", path: orgPath(`members/${encodeURIComponent(userId)}`) });
-    },
-    /** DELETE /members/<userId> — remove a member from the org. */
+    /** DELETE /members/<userId> — remove a member from the org. The gateway answers 204 with no body. */
     async remove(userId) {
       return request(config, { method: "DELETE", path: orgPath(`members/${encodeURIComponent(userId)}`) });
     }
@@ -947,84 +892,63 @@ function makeGroupsNamespace(config) {
     async list(opts) {
       return request(config, { method: "GET", path: orgPath("groups"), query: opts });
     },
-    /** POST /groups — create a new group. */
-    async create(input) {
-      return request(config, { method: "POST", path: orgPath("groups"), body: input });
-    },
-    /** GET /groups/<groupId> — single-read (pre-cement existing endpoint). */
+    /** GET /groups/<groupId> — single-read. */
     async get(groupId) {
       return request(config, { method: "GET", path: orgPath(`groups/${encodeURIComponent(groupId)}`) });
-    },
-    /** DELETE /groups/<groupId> — remove a group. */
-    async delete(groupId) {
-      return request(config, { method: "DELETE", path: orgPath(`groups/${encodeURIComponent(groupId)}`) });
     }
   };
 }
 function makeOrgAuditLogNamespace(config) {
   return {
     /**
-     * GET /audit-log (org-plane).
-     * Distinct from project-plane `client.audit.query()` which routes to
-     * `@<projectSlug>/audit-log`. Org-plane events cover the 6-event family
-     * (member_invited/removed/role_granted/revoked/
-     * idp_config_changed/settings_updated).
+     * GET /audit-log (org-plane), newest first. The route reads `type` and `limit` (1 to 500, default 100) only.
+     * Distinct from project-plane `client.audit.query()` which routes to `@<projectSlug>/audit-log`.
      */
     async query(opts) {
       return request(config, { method: "GET", path: orgPath("audit-log"), query: opts });
-    },
-    /** Convenience: recent events (defaults to 5 minute window). */
-    async tail(opts) {
-      const minutes = opts?.sinceMinutes ?? 5;
-      const since = new Date(Date.now() - minutes * 6e4).toISOString();
-      return request(config, {
-        method: "GET",
-        path: orgPath("audit-log"),
-        query: { since, limit: opts?.limit ?? 100 }
-      });
     }
   };
 }
 function makeOrgGateNamespace(config) {
   return {
     roles: {
-      /** GET /org-role-grants — list active grants ask 4. */
-      async list(opts) {
-        return request(config, { method: "GET", path: orgPath("org-role-grants"), query: opts });
+      /** GET /role-grants — list role grants. */
+      async list() {
+        return request(config, { method: "GET", path: orgPath("role-grants") });
       },
-      /** POST /org-role-grants — grant an ORG_ADMIN or ORG_BILLING_ADMIN role. */
+      /** POST /role-grants — grant an org role. */
       async grant(input) {
-        return request(config, { method: "POST", path: orgPath("org-role-grants"), body: input });
+        return request(config, { method: "POST", path: orgPath("role-grants"), body: input });
       },
-      /** GET /org-role-grants/<grantId> — single-read. */
+      /** GET /role-grants/<grantId> — single-read. */
       async get(grantId) {
-        return request(config, { method: "GET", path: orgPath(`org-role-grants/${encodeURIComponent(grantId)}`) });
+        return request(config, { method: "GET", path: orgPath(`role-grants/${encodeURIComponent(grantId)}`) });
       },
-      /** DELETE /org-role-grants/<grantId> — revoke a grant (soft delete; sets revokedAt). */
-      async revoke(grantId) {
-        return request(config, { method: "DELETE", path: orgPath(`org-role-grants/${encodeURIComponent(grantId)}`) });
+      /** DELETE /role-grants/<grantId> — revoke a grant (soft delete; sets revokedAt). */
+      async revoke(grantId, opts) {
+        return request(config, { method: "DELETE", path: orgPath(`role-grants/${encodeURIComponent(grantId)}`), ...opts ? { body: opts } : {} });
       }
     },
     idpProviders: {
-      /** GET /idp-providers — list configured org operator IdP providers ask 7. */
+      /** GET /identity-providers — list configured identity providers. */
       async list() {
-        return request(config, { method: "GET", path: orgPath("idp-providers") });
+        return request(config, { method: "GET", path: orgPath("identity-providers") });
       },
-      /** POST /idp-providers — create a new IdP integration. */
+      /** POST /identity-providers — create a new IdP integration. */
       async create(input) {
-        return request(config, { method: "POST", path: orgPath("idp-providers"), body: input });
+        return request(config, { method: "POST", path: orgPath("identity-providers"), body: input });
       },
-      /** GET /idp-providers/<idpId>. */
+      /** GET /identity-providers/<idpId>. */
       async get(idpId) {
-        return request(config, { method: "GET", path: orgPath(`idp-providers/${encodeURIComponent(idpId)}`) });
+        return request(config, { method: "GET", path: orgPath(`identity-providers/${encodeURIComponent(idpId)}`) });
       },
-      /** PATCH /idp-providers/<idpId> — update config or enable/disable. */
+      /** PATCH /identity-providers/<idpId> — update settings or enable/disable. */
       async configure(idpId, patch) {
-        return request(config, { method: "PATCH", path: orgPath(`idp-providers/${encodeURIComponent(idpId)}`), body: patch });
+        return request(config, { method: "PATCH", path: orgPath(`identity-providers/${encodeURIComponent(idpId)}`), body: patch });
       },
-      /** DELETE /idp-providers/<idpId>. */
+      /** DELETE /identity-providers/<idpId>. */
       async delete(idpId) {
-        return request(config, { method: "DELETE", path: orgPath(`idp-providers/${encodeURIComponent(idpId)}`) });
+        return request(config, { method: "DELETE", path: orgPath(`identity-providers/${encodeURIComponent(idpId)}`) });
       }
     }
   };
@@ -1032,18 +956,8 @@ function makeOrgGateNamespace(config) {
 function makeSmtpNamespace(config) {
   return {
     /**
-     * GET /org/smtp — read current SMTP config.
-     * Returns null when no org-level SMTP is configured (falls back to
-     * platform SMTP 3-tier cascade).
-     */
-    async get() {
-      return request(config, { method: "GET", path: orgPath("org/smtp") });
-    },
-    /**
-     * PATCH /orgs/<orgSlug> with `smtpConfig` body — set or update SMTP.
-     * PATCH on the org resource accepts smtpConfig.
-     * Passwords route through Kibo enclave — SDK accepts plaintext at
-     * the SDK boundary; gateway stores the reference.
+     * PATCH /org with `smtpConfig` body — set or update SMTP. Answers the org record.
+     * The body carries `passwordRef` (a reference to the stored password), not the password.
      */
     async set(config_) {
       return request(config, { method: "PATCH", path: orgPath("org"), body: { smtpConfig: config_ } });
@@ -1056,7 +970,7 @@ function makeSmtpNamespace(config) {
     async test(input) {
       return request(config, { method: "POST", path: orgPath("org/smtp/test-email"), body: input });
     },
-    /** PATCH /orgs/<orgSlug> with `smtpConfig: null` — clear org-level SMTP. */
+    /** PATCH /org with `smtpConfig: null` — clear org-level SMTP. Answers the org record. */
     async unset() {
       return request(config, { method: "PATCH", path: orgPath("org"), body: { smtpConfig: null } });
     }
@@ -1065,39 +979,38 @@ function makeSmtpNamespace(config) {
 function makeDefaultLlmNamespace(config) {
   return {
     /**
-     * GET /org/default-llm — read the org-default LLM model id
-     *. Returns `null` when no explicit default is set (gateway
-     * falls back to `mistral-7b`). ORG_ADMIN read; tier-gated.
+     * GET /default-llm — read the org-default LLM model id.
+     * Any accepted member of the org may read it.
      */
     async get() {
-      return request(config, { method: "GET", path: orgPath("org/default-llm") });
+      return request(config, { method: "GET", path: orgPath("default-llm") });
     },
     /**
-     * PATCH /org/default-llm — set the org-default LLM.
-     * ORG_ADMIN only. The model must be available to the org's tier per
+     * PATCH /default-llm — set the org-default LLM.
+     * ORG_ADMIN or ORG_OWNER only. The model must be available to the org's tier
      * or the gateway returns K9O_TIER_FEATURE_GATED.
      */
     async set(input) {
-      return request(config, { method: "PATCH", path: orgPath("org/default-llm"), body: input });
+      return request(config, { method: "PATCH", path: orgPath("default-llm"), body: input });
     }
   };
 }
 function makeOrgNamespace(config) {
   return {
-    /** Member lifecycle — list / invite / get / remove. */
+    /** Member lifecycle — list / invite / remove. */
     members: makeMembersNamespace(config),
-    /** Group lifecycle — list / create / get / delete. */
+    /** Groups — list / get (read-only). */
     groups: makeGroupsNamespace(config),
-    /** Org-plane audit log — query / tail. Distinct from project-plane `client.audit`. */
+    /** Org-plane audit log — query. Distinct from project-plane `client.audit`. */
     auditLog: makeOrgAuditLogNamespace(config),
     /** Gate (IAK) org-level surfaces — role-grants + IdP-providers. */
     gate: makeOrgGateNamespace(config),
-    /** Org-level SMTP config — get / set / test / unset. */
+    /** Org-level SMTP config — set / test / unset. */
     smtp: makeSmtpNamespace(config),
     /** Org-default LLM — get / set (ORG_ADMIN). */
     defaultLLM: makeDefaultLlmNamespace(config),
     /**
-     * GET /org — read the current org (slug + name + status + settings).
+     * GET /org — read the current org (slug, displayName, products, billing tier, your role).
      * Mirrors `client.orgs.current()` for symmetry; `client.org.get()` is
      * the singular-namespace convention for use within an org-bound client.
      */
@@ -1115,7 +1028,7 @@ function makeMeNamespace(config) {
       async get() {
         return request(config, { method: "GET", path: orgPath("me") });
       },
-      /** PATCH /me — update mutable profile fields (displayName). */
+      /** PATCH /me — update mutable profile fields (displayName, locale, timezone). */
       async update(patch) {
         return request(config, { method: "PATCH", path: orgPath("me"), body: patch });
       }
@@ -1125,19 +1038,16 @@ function makeMeNamespace(config) {
       async list() {
         return request(config, { method: "GET", path: orgPath("me/sessions") });
       },
-      /** DELETE /me/sessions/<sessionId> — revoke a specific session. */
+      /** POST /auth/sessions/<sessionId>/revoke — revoke a specific session. */
       async revoke(sessionId) {
-        return request(config, { method: "DELETE", path: orgPath(`me/sessions/${encodeURIComponent(sessionId)}`) });
+        return request(config, { method: "POST", path: orgPath(`auth/sessions/${encodeURIComponent(sessionId)}/revoke`) });
       },
-      /** DELETE /me/sessions (no path) — revoke all sessions except the current one. */
+      /** POST /me/sessions/revoke-all — revoke all of the operator's sessions except the current one. */
       async revokeAll() {
-        return request(config, { method: "DELETE", path: orgPath("me/sessions") });
+        return request(config, { method: "POST", path: orgPath("me/sessions/revoke-all") });
       }
     },
-    /**
-     * API tokens for personal scripting. The gateway endpoints are not available yet,
-     * so these methods return K9O_NOT_FOUND until they ship.
-     */
+    /** Personal access tokens for scripting. */
     apiTokens: {
       async list() {
         return request(config, { method: "GET", path: orgPath("me/api-tokens") });
@@ -1148,43 +1058,6 @@ function makeMeNamespace(config) {
       async delete(tokenId) {
         return request(config, { method: "DELETE", path: orgPath(`me/api-tokens/${encodeURIComponent(tokenId)}`) });
       }
-    },
-    /**
-     * Notifications — operator-targeted (account-level events). Forward-
-     * cycle substrate; methods route correctly when gateway ships.
-     */
-    notifications: {
-      async list(opts) {
-        return request(config, { method: "GET", path: orgPath("me/notifications"), query: opts });
-      },
-      async markRead(notificationId) {
-        return request(config, { method: "PATCH", path: orgPath(`me/notifications/${encodeURIComponent(notificationId)}`), body: { read: true } });
-      },
-      async markAllRead() {
-        return request(config, { method: "PATCH", path: orgPath("me/notifications"), body: { read: true } });
-      }
-    },
-    /**
-     * Operator-self audit log — actions performed BY this operator across
-     * orgs. Distinct from `client.audit` (project-plane) and
-     * `client.org.auditLog` (org-plane).
-     */
-    auditLog: {
-      async query(opts) {
-        return request(config, { method: "GET", path: orgPath("me/audit-log"), query: opts });
-      }
-    },
-    /**
-     * Personal data export per GDPR-style requests. Returns a job id
-     * the operator polls for completion.
-     */
-    dataExport: {
-      async request(input) {
-        return request(config, { method: "POST", path: orgPath("me/data-export"), body: input ?? {} });
-      },
-      async status(jobId) {
-        return request(config, { method: "GET", path: orgPath(`me/data-export/${encodeURIComponent(jobId)}`) });
-      }
     }
   };
 }
@@ -1198,7 +1071,7 @@ var WORKFLOW_ERROR_CODES = {
   RUN_NOT_CANCELLABLE: "K9O_WORKFLOW_RUN_NOT_CANCELLABLE",
   WEBHOOK_SIGNATURE_INVALID: "K9O_WORKFLOW_WEBHOOK_SIGNATURE_INVALID"
 };
-function requireProjectSlug8(config) {
+function requireProjectSlug7(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("studio.workflows operations require projectSlug bound on the client");
   }
@@ -1208,7 +1081,7 @@ function makeRunsNamespace(config) {
   return {
     /** GET /@<slug>/workflows/<wfl-id>/runs — cursor-paginated runs list. */
     async list(workflowId, filters) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}/runs`),
@@ -1217,7 +1090,7 @@ function makeRunsNamespace(config) {
     },
     /** GET /@<slug>/workflows/<wfl-id>/runs/<wfr-id> — run detail (per-step + cost). */
     async read(workflowId, runId) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}/runs/${encodeURIComponent(runId)}`)
@@ -1225,7 +1098,7 @@ function makeRunsNamespace(config) {
     },
     /** POST /@<slug>/workflows/<wfl-id>/runs/<wfr-id>/cancel — cancel pending or running run. */
     async cancel(workflowId, runId) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}/runs/${encodeURIComponent(runId)}/cancel`)
@@ -1237,17 +1110,17 @@ function makeWorkflowsNamespace(config) {
   return {
     /** GET /@<slug>/workflows — list workflows (cursor pagination). */
     async list(filters) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, { method: "GET", path: projectPath(slug, "workflows"), query: filters });
     },
     /** POST /@<slug>/workflows — create a workflow. Requires PROJECT_AUTHOR. */
     async create(workflow) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, { method: "POST", path: projectPath(slug, "workflows"), body: workflow });
     },
     /** GET /@<slug>/workflows/<wfl-id> — read a workflow. */
     async read(workflowId) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}`)
@@ -1255,7 +1128,7 @@ function makeWorkflowsNamespace(config) {
     },
     /** PATCH /@<slug>/workflows/<wfl-id> — update a workflow. Requires PROJECT_AUTHOR. */
     async update(workflowId, updates) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "PATCH",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}`),
@@ -1264,7 +1137,7 @@ function makeWorkflowsNamespace(config) {
     },
     /** DELETE /@<slug>/workflows/<wfl-id> — delete a workflow. Requires PROJECT_AUTHOR. */
     async delete(workflowId) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "DELETE",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}`)
@@ -1273,14 +1146,14 @@ function makeWorkflowsNamespace(config) {
     /**
      * POST /@<slug>/workflows/<wfl-id>/runs — manual-trigger a run.
      * Valid only for `triggerType: 'manual'` workflows.
-     * Requires PROJECT_AUTHOR. Returns the materialised WorkflowRun.
+     * Requires PROJECT_AUTHOR. The argument is sent as `{ triggerContext }`. Returns the materialised WorkflowRun.
      */
     async trigger(workflowId, triggerContext = {}) {
-      const slug = requireProjectSlug8(config);
+      const slug = requireProjectSlug7(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `workflows/${encodeURIComponent(workflowId)}/runs`),
-        body: triggerContext
+        body: { triggerContext }
       });
     },
     /** Run sub-namespace — list / read / cancel runs of a workflow. */
@@ -1293,7 +1166,7 @@ var DASHBOARD_ERROR_CODES = {
   NOT_FOUND: "K9O_DASHBOARD_NOT_FOUND",
   WIDGET_INVALID: "K9O_DASHBOARD_WIDGET_INVALID"
 };
-function requireProjectSlug9(config) {
+function requireProjectSlug8(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("studio.dashboards operations require projectSlug bound on the client");
   }
@@ -1303,17 +1176,17 @@ function makeDashboardsNamespace(config) {
   return {
     /** GET /@<slug>/dashboards — list dashboards (cursor pagination). */
     async list(filters) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, { method: "GET", path: projectPath(slug, "dashboards"), query: filters });
     },
     /** POST /@<slug>/dashboards — create a dashboard. Requires PROJECT_AUTHOR. */
     async create(dashboard) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, { method: "POST", path: projectPath(slug, "dashboards"), body: dashboard });
     },
     /** GET /@<slug>/dashboards/<dsh-id> — read a dashboard. */
     async read(dashboardId) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `dashboards/${encodeURIComponent(dashboardId)}`)
@@ -1321,7 +1194,7 @@ function makeDashboardsNamespace(config) {
     },
     /** PATCH /@<slug>/dashboards/<dsh-id> — update a dashboard. Requires PROJECT_AUTHOR. */
     async update(dashboardId, updates) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, {
         method: "PATCH",
         path: projectPath(slug, `dashboards/${encodeURIComponent(dashboardId)}`),
@@ -1330,7 +1203,7 @@ function makeDashboardsNamespace(config) {
     },
     /** DELETE /@<slug>/dashboards/<dsh-id> — delete a dashboard. Requires PROJECT_AUTHOR. */
     async delete(dashboardId) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, {
         method: "DELETE",
         path: projectPath(slug, `dashboards/${encodeURIComponent(dashboardId)}`)
@@ -1338,7 +1211,7 @@ function makeDashboardsNamespace(config) {
     },
     /** POST /@<slug>/dashboards/<dsh-id>/pin — pin to Workspace sidebar. Requires PROJECT_AUTHOR. */
     async pin(dashboardId) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `dashboards/${encodeURIComponent(dashboardId)}/pin`)
@@ -1346,7 +1219,7 @@ function makeDashboardsNamespace(config) {
     },
     /** POST /@<slug>/dashboards/<dsh-id>/unpin — unpin. Requires PROJECT_AUTHOR. */
     async unpin(dashboardId) {
-      const slug = requireProjectSlug9(config);
+      const slug = requireProjectSlug8(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `dashboards/${encodeURIComponent(dashboardId)}/unpin`)
@@ -1424,10 +1297,13 @@ function decodePayload(payload) {
 }
 
 // src/compute/llms.ts
+function invokeBody(input) {
+  return { prompt: input.prompt, ...input.params };
+}
 var LLM_ERROR_CODES = {
   PROVIDER_UNAVAILABLE: "K9O_LLM_PROVIDER_UNAVAILABLE"
 };
-function requireProjectSlug10(config) {
+function requireProjectSlug9(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("compute.llms operations require projectSlug bound on the client");
   }
@@ -1437,12 +1313,12 @@ function makeLlmsNamespace(config) {
   return {
     /** GET /@<slug>/compute/llms — list models available to the project tier. */
     async list(opts) {
-      const slug = requireProjectSlug10(config);
+      const slug = requireProjectSlug9(config);
       return request(config, { method: "GET", path: projectPath(slug, "compute/llms"), query: opts });
     },
     /** GET /@<slug>/compute/llms/<model-id> — read single model metadata + cost. */
     async read(modelId) {
-      const slug = requireProjectSlug10(config);
+      const slug = requireProjectSlug9(config);
       return request(config, {
         method: "GET",
         path: projectPath(slug, `compute/llms/${encodeURIComponent(modelId)}`)
@@ -1453,27 +1329,26 @@ function makeLlmsNamespace(config) {
      * Requires PROJECT_AUTHOR or PROJECT_ADMIN (LLM cost gate).
      */
     async invoke(modelId, input) {
-      const slug = requireProjectSlug10(config);
+      const slug = requireProjectSlug9(config);
       return request(config, {
         method: "POST",
         path: projectPath(slug, `compute/llms/${encodeURIComponent(modelId)}/invoke`),
-        body: { prompt: input.prompt, params: input.params }
+        body: invokeBody(input)
       });
     },
     /**
      * POST /@<slug>/compute/llms/<model-id>/invoke-stream — streaming
-     * inference (SSE; per-token delta for low-latency UX).
+     * inference (SSE; the model server's OpenAI-style chunks).
      * Returns an async iterable of `LLMStreamChunk` — caller writes
      * `for await (const chunk of client.compute.llms.invokeStream(...))`.
-     * The SDK handles SSE framing internally per
-     * `feedback_sdk_abstracted_primitive_default_to_richer_interaction.md`.
+     * The SDK handles SSE framing internally.
      */
     async *invokeStream(modelId, input) {
-      const slug = requireProjectSlug10(config);
+      const slug = requireProjectSlug9(config);
       const response = await requestStream(config, {
         method: "POST",
         path: projectPath(slug, `compute/llms/${encodeURIComponent(modelId)}/invoke-stream`),
-        body: { prompt: input.prompt, params: input.params },
+        body: invokeBody(input),
         accept: "text/event-stream"
       });
       yield* parseSseStream(response.body);
@@ -1482,13 +1357,13 @@ function makeLlmsNamespace(config) {
 }
 function makeComputeNamespace(config) {
   return {
-    /** LLM registry + inference — `client.compute.llms.*`. */
+    /** LLM registry + inference — `client.compute.llms.*` . */
     llms: makeLlmsNamespace(config)
   };
 }
 
 // src/ai.ts
-function requireProjectSlug11(config) {
+function requireProjectSlug10(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("ai operations require projectSlug bound on the client");
   }
@@ -1498,7 +1373,7 @@ function makeAiNamespace(config) {
   return {
     /** POST /@<slug>/ai/embeddings — embed one or more strings. */
     async embed(input) {
-      const slug = requireProjectSlug11(config);
+      const slug = requireProjectSlug10(config);
       const body = {
         input: typeof input.input === "string" ? input.input : [...input.input]
       };
@@ -1535,80 +1410,14 @@ var realtimeTopic = {
     return `audit.org.${eventFamily}`;
   }
 };
-function requireProjectSlug12(config) {
+function requireProjectSlug11(config) {
   if (typeof config.projectSlug !== "string" || config.projectSlug.length === 0) {
     throw new Error("realtime operations require projectSlug bound on the client");
   }
   return config.projectSlug;
 }
-function selectTransport(forced) {
-  if (forced) return forced;
-  if (typeof globalThis.WebSocket === "function") return "websocket";
-  return "sse";
-}
-function toWebSocketUrl(baseUrl, path, query) {
-  const trimmed = baseUrl.endsWith("/") ? baseUrl.slice(0, -1) : baseUrl;
-  const wsBase = trimmed.replace(/^http/, "ws");
-  const qs = new URLSearchParams(query).toString();
-  return `${wsBase}${path}${qs ? `?${qs}` : ""}`;
-}
-async function* websocketTransport(config, topic, options, closed) {
-  const slug = requireProjectSlug12(config);
-  const query = { topic };
-  if (options.filter) query.filter = JSON.stringify(options.filter);
-  if (config.apiKey) query.access_token = config.apiKey;
-  const url = toWebSocketUrl(config.baseUrl, projectPath(slug, "realtime/subscribe"), query);
-  const WS = globalThis.WebSocket;
-  const socket = new WS(url);
-  const queue = [];
-  let resolveNext = null;
-  let socketClosed = false;
-  let socketError = null;
-  const wake = () => {
-    if (resolveNext) {
-      resolveNext();
-      resolveNext = null;
-    }
-  };
-  socket.onmessage = (ev) => {
-    try {
-      queue.push(JSON.parse(typeof ev.data === "string" ? ev.data : String(ev.data)));
-    } catch {
-    }
-    wake();
-  };
-  socket.onerror = () => {
-    socketError = new Error("realtime websocket transport error");
-    wake();
-  };
-  socket.onclose = () => {
-    socketClosed = true;
-    wake();
-  };
-  options.signal?.addEventListener("abort", () => socket.close());
-  try {
-    while (!closed.value) {
-      if (queue.length > 0) {
-        yield queue.shift();
-        continue;
-      }
-      if (socketClosed) {
-        if (socketError) throw socketError;
-        return;
-      }
-      await new Promise((resolve) => {
-        resolveNext = resolve;
-      });
-    }
-  } finally {
-    try {
-      socket.close();
-    } catch {
-    }
-  }
-}
 async function* sseTransport(config, topic, options, closed) {
-  const slug = requireProjectSlug12(config);
+  const slug = requireProjectSlug11(config);
   const query = { topic };
   if (options.filter) query.filter = JSON.stringify(options.filter);
   const response = await requestStream(config, {
@@ -1619,63 +1428,31 @@ async function* sseTransport(config, topic, options, closed) {
   });
   for await (const event of parseSseStream(response.body)) {
     if (closed.value || options.signal?.aborted) return;
+    if (typeof event.eventType !== "string") continue;
     yield event;
   }
 }
-async function* pollTransport(config, topic, options, closed) {
-  const slug = requireProjectSlug12(config);
-  const interval = options.pollIntervalMs ?? 2e3;
-  let cursor = 0;
-  while (!closed.value && !options.signal?.aborted) {
-    const { data } = await request(config, {
-      method: "POST",
-      path: projectPath(slug, "realtime/replay"),
-      body: { topic, filter: options.filter, fromSequence: cursor }
-    });
-    for (const event of data ?? []) {
-      if (closed.value || options.signal?.aborted) return;
-      cursor = Math.max(cursor, event.sequence + 1);
-      yield event;
-    }
-    if (closed.value || options.signal?.aborted) return;
-    await new Promise((resolve) => setTimeout(resolve, interval));
-  }
-}
 function makeRealtimeNamespace(config) {
   return {
     /**
      * Subscribe to a topic. Returns a `RealtimeSubscription` — an async
-     * iterable of `RealtimeEvent`s. The SDK selects the richest available
-     * transport (WebSocket → SSE → poll); the caller's
-     * `for await` loop is transport-agnostic.
+     * iterable of `RealtimeEvent`s over SSE.
      *
      * ```ts
      * const sub = client.realtime.subscribe(
      *   realtimeTopic.dashboardRefresh("dsh_abc"),
      * );
      * for await (const event of sub) {
-     *   if (event.type === "dashboard.widget.data_refreshed") rerender(event.payload);
+     *   if (event.eventType === "dashboard.widget.data_refreshed") rerender(event.payload);
      * }
      * ```
      */
     subscribe(topic, options = {}) {
-      requireProjectSlug12(config);
-      const transport = selectTransport(options.transport);
+      requireProjectSlug11(config);
       const closed = { value: false };
-      const iterate = () => {
-        switch (transport) {
-          case "websocket":
-            return websocketTransport(config, topic, options, closed);
-          case "poll":
-            return pollTransport(config, topic, options, closed);
-          case "sse":
-          default:
-            return sseTransport(config, topic, options, closed);
-        }
-      };
+      const iterate = () => sseTransport(config, topic, options, closed);
       let active = null;
       return {
-        transport,
         [Symbol.asyncIterator]() {
           active = iterate();
           return active;
@@ -1685,34 +1462,6 @@ function makeRealtimeNamespace(config) {
           void active?.return(void 0);
         }
       };
-    },
-    /**
-     * One-shot historical replay — catch up on missed
-     * events from `fromSequence`. Capped at 10k events server-side;
-     * paginate via the returned events' `sequence`. Use the highest
-     * `sequence` you've seen as the next `fromSequence`.
-     */
-    async replay(input) {
-      const slug = requireProjectSlug12(config);
-      if (!Number.isInteger(input.fromSequence) || input.fromSequence < 0) {
-        throw new KError({
-          code: "K9O_INVALID_FILTER",
-          message: "replay fromSequence must be a non-negative integer",
-          context: { fromSequence: input.fromSequence },
-          recommendation: "Pass the highest sequence number you have already observed (or 0 to replay from the start)."
-        });
-      }
-      return request(config, {
-        method: "POST",
-        path: projectPath(slug, "realtime/replay"),
-        body: {
-          topic: input.topic,
-          filter: input.filter,
-          fromSequence: input.fromSequence,
-          untilSequence: input.untilSequence,
-          limit: input.limit
-        }
-      });
     }
   };
 }
@@ -1855,7 +1604,6 @@ function createClient(options) {
     from: makeFromFactory(config),
     projects: makeProjectsNamespace(config),
     storage: makeStorageNamespace(config),
-    metadata: makeMetadataNamespace(config),
     migrations: makeMigrationsNamespace(config),
     functions: makeFunctionsNamespace(config),
     policies: makePoliciesNamespace(config),
@@ -1885,9 +1633,9 @@ export {
   BYOS_CRED_VAULT_NAME_PREFIX,
   BYOS_PROVIDER_SCHEME,
   DASHBOARD_ERROR_CODES,
+  DEFAULT_BASE_URL,
   KError,
   LLM_ERROR_CODES,
-  METADATA_OPERATORS,
   WORKFLOW_ERROR_CODES,
   assertProviderRegion,
   byosCredVaultName,
@@ -1897,6 +1645,7 @@ export {
   isProviderRegion,
   kerrorFromWire,
   orgPath,
+  parseApiHost,
   platformPath,
   projectPath,
   realtimeTopic,