@oasisomniverse/web7-api 1.0.0

package/README.md

@@ -0,0 +1,132 @@
+# @oasisomniverse/web7-api
+
+Isomorphic (Node 18+ and browser) JavaScript/TypeScript-friendly client for the
+**WEB7 OASIS Symbiosis API** - consenting bio-signal symbiosis sessions and
+shared collective-consciousness fields built on the OASIS2 WEB7 WebAPI.
+
+Zero dependencies. Wraps the global `fetch`. Works the same in Node and the
+browser.
+
+## Installation
+
+```bash
+npm install @oasisomniverse/web7-api
+```
+
+## Quick start
+
+```js
+const { Web7Client } = require('@oasisomniverse/web7-api');
+// or: import { Web7Client } from '@oasisomniverse/web7-api';
+
+const web7 = new Web7Client({ baseUrl: 'https://api.web7.oasisomniverse.one' });
+
+const { isError, message, result } = await web7.symbiosis.startSession({ consentGranted: true });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+## Calling any endpoint
+
+Every controller on the OASIS2 WEB7 WebAPI is reachable as a lowerCamel
+property on the client (`web7.symbiosis`, `web7.collectiveConsciousness`).
+Every generated method takes a single args object:
+
+- Any key matching a `{token}` in the route template is consumed and
+  substituted into the URL (case-insensitive match).
+- Any remaining keys become the query string (GET/DELETE) or JSON body
+  (POST/PUT) - **matching the real `[FromQuery]`/`[FromBody]` binding of the
+  underlying C# action**, not just the HTTP verb. `endpoints.json` records
+  exactly which arg names are query-bound per operation (see
+  [`docs/`](./docs/README.md) for the per-method breakdown).
+
+```js
+// GET v1/symbiosis/sessions/{sessionId} -> sessionId consumed as a route token
+const session = await web7.symbiosis.getSession({ sessionId });
+
+// POST v1/symbiosis/sessions/{sessionId}/signals -> sessionId consumed, samples becomes the body
+await web7.symbiosis.submitSignals({ sessionId, samples: [{ type: 'HeartRate', value: 72 }] });
+
+// POST v1/symbiosis/sessions -> consentGranted/retention are [FromQuery] even
+// though this is a POST, so they're sent on the URL, not as a JSON body
+const session2 = await web7.symbiosis.startSession({ consentGranted: true, retention: 'Ephemeral' });
+```
+
+Every response has the shape:
+
+```ts
+interface OASISResponse<T = any> {
+  isError: boolean;
+  message: string | null;
+  result: T;
+  raw: any;
+  statusCode: number;
+}
+```
+
+## Auth
+
+WEB7 is an internal bio-symbiosis layer that sits behind the same OASIS
+avatar identity as WEB4/WEB5/WEB6 - it has no avatar/login endpoints of its
+own. Reuse a JWT you've already obtained elsewhere (e.g. from
+`web4-oasis-api`'s `client.auth.login()`):
+
+```js
+web7.setToken(jwtToken);
+```
+
+## Module examples
+
+### Symbiosis (`web7.symbiosis`)
+
+```js
+const session = await web7.symbiosis.startSession({ consentGranted: true, retention: 'Ephemeral' });
+const intentionState = await web7.symbiosis.submitSignals({
+  sessionId: session.result.id,
+  samples: [{ type: 'HeartRate', value: 72, timestamp: new Date().toISOString() }]
+});
+await web7.symbiosis.endSession({ sessionId: session.result.id });
+```
+
+### Collective Consciousness (`web7.collectiveConsciousness`)
+
+```js
+const space = await web7.collectiveConsciousness.createSpace({ name: 'Morning Meditation' });
+await web7.collectiveConsciousness.joinSpace({ spaceId: space.result.id, sessionId: session.result.id });
+const field = await web7.collectiveConsciousness.getAggregateField({ spaceId: space.result.id });
+```
+
+## Module reference
+
+2 modules, 7 operations in total. Full per-method tables live in
+[`docs/`](./docs/README.md).
+
+| Client property | Route prefix | Operations |
+| --- | --- | --- |
+| `web7.collectiveConsciousness` | `v1/collective-consciousness` | 3 |
+| `web7.symbiosis` | `v1/symbiosis` | 4 |
+
+See [`docs/README.md`](./docs/README.md) for the full generated reference,
+or [`docs/modules/`](./docs/modules) for per-module method tables with
+parameter and route details.
+
+## Regenerating
+
+The generated modules, type declarations and docs are produced from
+`endpoints.json` (extracted from the WEB7 WebAPI controller source):
+
+```bash
+npm run generate   # src/modules/*.js + src/modules/index.js
+npm run types      # src/modules/*.d.ts + index.d.ts + src/core/types.d.ts
+npm run docs       # docs/README.md + docs/modules/*.md
+```
+
+## Testing
+
+```bash
+npm test
+```
+
+## License
+
+MIT

package/docs/README.md

@@ -0,0 +1,20 @@
+# WEB7 Symbiosis & Collective Consciousness API — JavaScript SDK Reference
+
+Generated from `endpoints.json` (extracted from the WebAPI controllers) by
+`scripts/generate-full-docs.js`. Regenerate the full pipeline after the API
+changes:
+
+```
+node scripts/extract-endpoints.js
+node scripts/generate-modules.js
+node scripts/generate-full-docs.js
+```
+
+- [Module Reference](#module-reference) (2 modules, 7 operations)
+
+## Module Reference
+
+| Client property | Route prefix | Operations |
+| --- | --- | --- |
+| [`web7.collectiveConsciousness`](modules/CollectiveConsciousness.md) | `v1/collective-consciousness` | 3 |
+| [`web7.symbiosis`](modules/Symbiosis.md) | `v1/symbiosis` | 4 |

package/docs/modules/CollectiveConsciousness.md

@@ -0,0 +1,162 @@
+# CollectiveConsciousness — `web7.collectiveConsciousness`
+
+Source controller: [`CollectiveConsciousnessController.cs`](https://github.com/NextGenSoftwareUK/OASIS2/blob/main/WEB7/NextGenSoftware.OASIS.Web7.WebAPI/Controllers/CollectiveConsciousnessController.cs)
+Route prefix: `v1/collective-consciousness`
+3 operation(s).
+
+Every method takes a single args object: any key matching a `{token}` in the route is substituted into the URL; everything else becomes the query string (GET/DELETE) or JSON body (POST/PUT). Every call resolves to the standard OASIS envelope:
+
+```ts
+{
+  isError: boolean;
+  isWarning: boolean;
+  message: string;
+  errorCode?: string;
+  result: T; // see each endpoint's Response section below
+}
+```
+
+## Operations
+
+### `createSpace`
+
+Shared intention fields where multiple consenting symbiosis sessions co-create. Only the aggregate state is ever exposed.
+
+**POST** `v1/collective-consciousness/spaces`
+
+**Request**
+
+Body fields:
+
+| Field | Type |
+| --- | --- |
+| `name` | `string` |
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `CollectiveConsciousnessSpace`
+
+| Field | Type |
+| --- | --- |
+| `Id` | `Guid` |
+| `Name` | `string` |
+| `ParticipantSessionIds` | `List<Guid>` |
+| `AggregateState` | `IntentionState` |
+| `CreatedUtc` | `DateTime` |
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.collectiveConsciousness.createSpace({
+    name: 'example string'
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": { "Id": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "Name": "example string", "ParticipantSessionIds": ["3fa85f64-5717-4562-b3fc-2c963f66afa6"], "AggregateState": { "Focus": 1.0, "EmotionalValence": 1.0, "Arousal": 1.0, "CognitiveLoad": 1.0, "Features": { "<string>": 1.0 }, "ComputedUtc": "2026-01-01T00:00:00Z" }, "CreatedUtc": "2026-01-01T00:00:00Z" }
+}
+```
+
+---
+
+### `getAggregateField`
+
+**GET** `v1/collective-consciousness/spaces/{spaceId}/field`
+
+Route parameters:
+
+| Field | Type |
+| --- | --- |
+| `spaceId` | `Guid` |
+
+**Request**
+
+No request body.
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `CollectiveConsciousnessSpace`
+
+| Field | Type |
+| --- | --- |
+| `Id` | `Guid` |
+| `Name` | `string` |
+| `ParticipantSessionIds` | `List<Guid>` |
+| `AggregateState` | `IntentionState` |
+| `CreatedUtc` | `DateTime` |
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.collectiveConsciousness.getAggregateField({
+    spaceId: '<spaceId>'
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": { "Id": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "Name": "example string", "ParticipantSessionIds": ["3fa85f64-5717-4562-b3fc-2c963f66afa6"], "AggregateState": { "Focus": 1.0, "EmotionalValence": 1.0, "Arousal": 1.0, "CognitiveLoad": 1.0, "Features": { "<string>": 1.0 }, "ComputedUtc": "2026-01-01T00:00:00Z" }, "CreatedUtc": "2026-01-01T00:00:00Z" }
+}
+```
+
+---
+
+### `joinSpace`
+
+**POST** `v1/collective-consciousness/spaces/{spaceId}/join/{sessionId}`
+
+Route parameters:
+
+| Field | Type |
+| --- | --- |
+| `spaceId` | `Guid` |
+| `sessionId` | `Guid` |
+
+**Request**
+
+No request body.
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `bool`
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.collectiveConsciousness.joinSpace({
+    spaceId: '<spaceId>',
+    sessionId: '<sessionId>'
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": true
+}
+```
+

package/docs/modules/Symbiosis.md

@@ -0,0 +1,238 @@
+# Symbiosis — `web7.symbiosis`
+
+Source controller: [`SymbiosisController.cs`](https://github.com/NextGenSoftwareUK/OASIS2/blob/main/WEB7/NextGenSoftware.OASIS.Web7.WebAPI/Controllers/SymbiosisController.cs)
+Route prefix: `v1/symbiosis`
+4 operation(s).
+
+Every method takes a single args object: any key matching a `{token}` in the route is substituted into the URL; everything else becomes the query string (GET/DELETE) or JSON body (POST/PUT). Every call resolves to the standard OASIS envelope:
+
+```ts
+{
+  isError: boolean;
+  isWarning: boolean;
+  message: string;
+  errorCode?: string;
+  result: T; // see each endpoint's Response section below
+}
+```
+
+## Operations
+
+### `endSession`
+
+Ends the session instantly - with Ephemeral retention (the default), all signal-derived data is wiped immediately.
+
+**POST** `v1/symbiosis/sessions/{sessionId}/end`
+
+Route parameters:
+
+| Field | Type |
+| --- | --- |
+| `sessionId` | `Guid` |
+
+**Request**
+
+No request body.
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `bool`
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.symbiosis.endSession({
+    sessionId: '<sessionId>'
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": true
+}
+```
+
+---
+
+### `getSession`
+
+**GET** `v1/symbiosis/sessions/{sessionId}`
+
+Route parameters:
+
+| Field | Type |
+| --- | --- |
+| `sessionId` | `Guid` |
+
+**Request**
+
+No request body.
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `SymbiosisSession`
+
+| Field | Type |
+| --- | --- |
+| `Id` | `Guid` |
+| `AvatarId` | `Guid` |
+| `ConsentGranted` | `bool` |
+| `IsActive` | `bool` |
+| `Retention` | `Enums.RetentionMode` |
+| `StartedUtc` | `DateTime` |
+| `EndedUtc` | `DateTime?` |
+| `LastIntentionState` | `IntentionState` |
+| `AuditLog` | `List<string>` |
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.symbiosis.getSession({
+    sessionId: '<sessionId>'
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": { "Id": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "AvatarId": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "ConsentGranted": true, "IsActive": true, "Retention": /* <Enums.RetentionMode> */, "StartedUtc": "2026-01-01T00:00:00Z", "EndedUtc": "2026-01-01T00:00:00Z", "LastIntentionState": { "Focus": 1.0, "EmotionalValence": 1.0, "Arousal": 1.0, "CognitiveLoad": 1.0, "Features": { "<string>": 1.0 }, "ComputedUtc": "2026-01-01T00:00:00Z" }, "AuditLog": ["example string"] }
+}
+```
+
+---
+
+### `startSession`
+
+Starts a new symbiosis session. ConsentGranted must be explicitly true.
+
+**POST** `v1/symbiosis/sessions`
+
+**Request**
+
+Body fields:
+
+| Field | Type |
+| --- | --- |
+| `consentGranted` | `bool` |
+| `retention` | `RetentionMode (optional)` |
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `SymbiosisSession`
+
+| Field | Type |
+| --- | --- |
+| `Id` | `Guid` |
+| `AvatarId` | `Guid` |
+| `ConsentGranted` | `bool` |
+| `IsActive` | `bool` |
+| `Retention` | `Enums.RetentionMode` |
+| `StartedUtc` | `DateTime` |
+| `EndedUtc` | `DateTime?` |
+| `LastIntentionState` | `IntentionState` |
+| `AuditLog` | `List<string>` |
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.symbiosis.startSession({
+    consentGranted: true,
+    retention: '<retention>'
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": { "Id": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "AvatarId": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "ConsentGranted": true, "IsActive": true, "Retention": /* <Enums.RetentionMode> */, "StartedUtc": "2026-01-01T00:00:00Z", "EndedUtc": "2026-01-01T00:00:00Z", "LastIntentionState": { "Focus": 1.0, "EmotionalValence": 1.0, "Arousal": 1.0, "CognitiveLoad": 1.0, "Features": { "<string>": 1.0 }, "ComputedUtc": "2026-01-01T00:00:00Z" }, "AuditLog": ["example string"] }
+}
+```
+
+---
+
+### `submitSignals`
+
+Submits a batch of raw bio-signal samples and returns the freshly computed intention state.
+
+**POST** `v1/symbiosis/sessions/{sessionId}/signals`
+
+Route parameters:
+
+| Field | Type |
+| --- | --- |
+| `sessionId` | `Guid` |
+
+**Request**
+
+Body type: `BioSignalSample` (array)
+
+| Field | Type |
+| --- | --- |
+| `SignalType` | `BioSignalType` |
+| `Channel` | `string` |
+| `SampleRateHz` | `double` |
+| `Values` | `List<double>` |
+| `CapturedUtc` | `DateTime` |
+
+**Response**
+
+Standard `OASISResult` envelope (see top of this page) with:
+
+`result` type: `IntentionState`
+
+| Field | Type |
+| --- | --- |
+| `Focus` | `double` |
+| `EmotionalValence` | `double` |
+| `Arousal` | `double` |
+| `CognitiveLoad` | `double` |
+| `Features` | `Dictionary<string, double>` |
+| `ComputedUtc` | `DateTime` |
+
+**Example**
+
+```js
+const { isError, message, result } = await web7.symbiosis.submitSignals({
+    sessionId: '<sessionId>',
+    signalType: {  },
+    channel: "example string",
+    sampleRateHz: 1.0,
+    values: [1.0],
+    capturedUtc: "2026-01-01T00:00:00Z"
+  });
+if (isError) throw new Error(message);
+console.log(result);
+```
+
+Example response:
+
+```json
+{
+  "isError": false,
+  "message": "",
+  "result": { "Focus": 1.0, "EmotionalValence": 1.0, "Arousal": 1.0, "CognitiveLoad": 1.0, "Features": { "<string>": 1.0 }, "ComputedUtc": "2026-01-01T00:00:00Z" }
+}
+```
+

package/index.d.ts

@@ -0,0 +1,44 @@
+// AUTO-GENERATED by scripts/generate-types.js - do not hand-edit.
+import type { OASISResponse, OASISSession } from './src/core/types';
+import type { CollectiveConsciousnessModule } from './src/modules/CollectiveConsciousness';
+import type { SymbiosisModule } from './src/modules/Symbiosis';
+
+export type { OASISResponse, OASISSession };
+
+export interface Web7ClientOptions {
+  baseUrl?: string;
+  persistSession?: boolean;
+  fetchImpl?: typeof fetch;
+}
+
+export declare class HttpClient {
+  constructor(options?: { baseUrl?: string; tokenStore?: unknown; fetchImpl?: typeof fetch });
+  setBaseUrl(baseUrl: string): void;
+  request(verb: 'GET' | 'POST' | 'PUT' | 'DELETE', path: string, options?: Record<string, any>): Promise<OASISResponse>;
+  get(path: string, options?: Record<string, any>): Promise<OASISResponse>;
+  post(path: string, options?: Record<string, any>): Promise<OASISResponse>;
+  put(path: string, options?: Record<string, any>): Promise<OASISResponse>;
+  delete(path: string, options?: Record<string, any>): Promise<OASISResponse>;
+}
+
+export declare class TokenStore {
+  constructor(options?: { persist?: boolean });
+  getSession(): OASISSession | null;
+  getToken(): string | null;
+  setSession(session: OASISSession | null): void;
+  clear(): void;
+}
+
+export declare const DEFAULT_BASE_URL: string;
+
+export declare class Web7Client {
+  constructor(options?: Web7ClientOptions);
+  readonly http: HttpClient;
+  readonly tokenStore: TokenStore;
+  readonly collectiveConsciousness: CollectiveConsciousnessModule;
+  readonly symbiosis: SymbiosisModule;
+  setBaseUrl(baseUrl: string): void;
+  setToken(jwtToken: string, sessionExtras?: Partial<OASISSession>): void;
+}
+
+export default Web7Client;

package/index.js

@@ -0,0 +1,3 @@
+'use strict';
+
+module.exports = require('./src/index');

package/index.mjs

@@ -0,0 +1,4 @@
+import cjs from './index.js';
+
+export const { Web7Client, HttpClient, TokenStore, DEFAULT_BASE_URL } = cjs;
+export default Web7Client;

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@oasisomniverse/web7-api",
+  "version": "1.0.0",
+  "publishConfig": { "access": "public" },
+  "description": "Isomorphic (Node + browser) JavaScript/TypeScript-friendly client for the WEB7 OASIS Symbiosis API - consenting bio-signal symbiosis sessions and shared collective-consciousness fields built on the OASIS2 WEB7 WebAPI.",
+  "main": "index.js",
+  "module": "index.mjs",
+  "types": "index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "import": "./index.mjs",
+      "require": "./index.js"
+    }
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "files": [
+    "index.js",
+    "index.mjs",
+    "index.d.ts",
+    "src",
+    "docs"
+  ],
+  "scripts": {
+    "generate": "node scripts/generate-modules.js",
+    "docs": "node scripts/generate-docs.js",
+    "types": "node scripts/generate-types.js",
+    "test": "node --test test"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/NextGenSoftwareUK/OASIS-API-Javascript-Package-WEB7.git"
+  },
+  "author": "NextGen Software Ltd",
+  "license": "MIT",
+  "keywords": [
+    "WEB7 Symbiosis API",
+    "WEB7 WebAPI",
+    "OASIS Symbiosis",
+    "Bio-Signal Processing",
+    "Intention Engine",
+    "Collective Consciousness",
+    "Consent-Based Sessions",
+    "OASIS API",
+    "WEB 4",
+    "WEB 5",
+    "WEB 6",
+    "WEB 7",
+    "Blockchain",
+    "Interoperable",
+    "Metaverse",
+    "Aggregation",
+    "HOT-Swappable-Architecture",
+    "Decentralised",
+    "Distributed",
+    "Abstraction-Layer",
+    "Multi-Network",
+    "SSO",
+    "Agent-Centric",
+    "GOD-Protocol/API",
+    "More Coming..."
+  ]
+}

package/src/core/httpClient.js

@@ -0,0 +1,110 @@
+'use strict';
+
+const DEFAULT_BASE_URL = 'https://api.web7.oasisomniverse.one';
+
+function buildQueryString(query) {
+  const entries = Object.entries(query || {}).filter(([, v]) => v !== undefined && v !== null);
+  if (!entries.length) return '';
+  const params = new URLSearchParams();
+  for (const [key, value] of entries) {
+    params.set(key, typeof value === 'object' ? JSON.stringify(value) : String(value));
+  }
+  return `?${params.toString()}`;
+}
+
+/**
+ * Thin isomorphic HTTP client around the global fetch API (Node 18+, all modern browsers).
+ * Every WEB7 Symbiosis & Collective Consciousness API call ultimately goes through `request()` below - there are no mocked
+ * or stubbed responses anywhere in this SDK.
+ */
+class HttpClient {
+  constructor({ baseUrl = DEFAULT_BASE_URL, tokenStore, fetchImpl = globalThis.fetch } = {}) {
+    if (!fetchImpl) {
+      throw new Error(
+        'No global fetch implementation found. Use Node 18+, a modern browser, or pass { fetchImpl } explicitly.'
+      );
+    }
+    this.baseUrl = baseUrl.replace(/\/+$/, '');
+    this.tokenStore = tokenStore;
+    this.fetchImpl = fetchImpl;
+  }
+
+  setBaseUrl(baseUrl) {
+    this.baseUrl = baseUrl.replace(/\/+$/, '');
+  }
+
+  /**
+   * @param {string} verb GET | POST | PUT | DELETE
+   * @param {string} path e.g. "v1/complete"
+   * @param {object} [options]
+   * @param {object} [options.query] query string params (GET/DELETE)
+   * @param {object} [options.body] JSON body (POST/PUT/DELETE)
+   * @param {boolean} [options.auth] attach Authorization: Bearer <token> (default true)
+   * @param {string} [options.token] override token for this single request
+   */
+  async request(verb, path, { query, body, auth = true, token } = {}) {
+    const url = `${this.baseUrl}/${path.replace(/^\/+/, '')}${buildQueryString(query)}`;
+    const headers = {
+      'Content-Type': 'application/json',
+      Accept: 'application/json'
+    };
+
+    const bearer = token || (auth ? this.tokenStore?.getToken() : null);
+    if (bearer) headers.Authorization = `Bearer ${bearer}`;
+
+    const init = { method: verb, headers };
+    if (body !== undefined && verb !== 'GET') init.body = JSON.stringify(body);
+
+    let res;
+    try {
+      res = await this.fetchImpl(url, init);
+    } catch (err) {
+      return { isError: true, message: `Network error calling ${url}: ${err.message}`, exception: err };
+    }
+
+    const text = await res.text();
+    let json;
+    try {
+      json = text ? JSON.parse(text) : null;
+    } catch {
+      json = null;
+    }
+
+    if (!res.ok) {
+      const message =
+        json?.result?.message || json?.message || json?.title || `Request failed with status ${res.status}`;
+      return { isError: true, message, statusCode: res.status, raw: json };
+    }
+
+    // OASIS responses are typically { isError, message, result: { isError, message, result: <payload> } }.
+    // We surface the innermost payload as `.result` while keeping the full envelope available as `.raw`.
+    const inner = json?.result !== undefined ? json.result : json;
+    const payload = inner?.result !== undefined ? inner.result : inner;
+
+    return {
+      isError: Boolean(inner?.isError || json?.isError),
+      message: inner?.message || json?.message || null,
+      result: payload,
+      raw: json,
+      statusCode: res.status
+    };
+  }
+
+  get(path, options) {
+    return this.request('GET', path, options);
+  }
+
+  post(path, options) {
+    return this.request('POST', path, options);
+  }
+
+  put(path, options) {
+    return this.request('PUT', path, options);
+  }
+
+  delete(path, options) {
+    return this.request('DELETE', path, options);
+  }
+}
+
+module.exports = { HttpClient, DEFAULT_BASE_URL };

package/src/core/routeHelper.js

@@ -0,0 +1,85 @@
+'use strict';
+
+const TOKEN_PATTERN = /\{(\w+)(?::\w+)?\}/g;
+
+/**
+ * Resolves a route template like "get-by-id/{id}" against an args object,
+ * substituting path tokens and returning the resolved path plus whatever
+ * args were *not* consumed as path tokens (these become the query/body).
+ */
+function resolveRoute(routeTemplate, args = {}) {
+  const consumed = new Set();
+  const path = routeTemplate.replace(TOKEN_PATTERN, (match, name) => {
+    const key = Object.keys(args).find((k) => k.toLowerCase() === name.toLowerCase());
+    consumed.add(key);
+    const value = key !== undefined ? args[key] : undefined;
+    if (value === undefined) {
+      throw new Error(`Missing required route parameter "${name}" for route "${routeTemplate}"`);
+    }
+    return encodeURIComponent(value);
+  });
+
+  const rest = {};
+  for (const [key, value] of Object.entries(args)) {
+    if (!consumed.has(key)) rest[key] = value;
+  }
+
+  return { path, rest };
+}
+
+function takeKey(obj, name) {
+  const matchKey = Object.keys(obj).find((k) => k.toLowerCase() === name.toLowerCase());
+  if (matchKey === undefined) return { found: false, value: undefined };
+  const value = obj[matchKey];
+  delete obj[matchKey];
+  return { found: true, value };
+}
+
+/**
+ * Builds a bound method for a single WEB7 endpoint operation.
+ * @param {import('./httpClient').HttpClient} http
+ * @param {string} routePrefix e.g. "api/avatar"
+ * @param {string} verb GET | POST | PUT | DELETE
+ * @param {string} route route template relative to routePrefix, e.g. "get-by-id/{id}"
+ * @param {object} [opts]
+ * @param {string[]} [opts.query] arg names that ASP.NET binds from the query
+ *   string on this action regardless of HTTP verb (e.g. `[FromQuery]` flags
+ *   mixed into an otherwise-body-bound POST/PUT action). Always sent as query.
+ * @param {string} [opts.bodyParam] when the action's entire request body is a
+ *   single `[FromBody]` parameter (primitive or object), the JSON body is
+ *   that arg's value directly rather than the leftover-args object wrapped
+ *   around it.
+ */
+function makeOperation(http, routePrefix, verb, route, opts = {}) {
+  const declaredQueryKeys = opts.query || [];
+  const bodyParam = opts.bodyParam;
+
+  return async function operation(args = {}) {
+    const { path, rest } = resolveRoute(route, args);
+    const fullPath = path ? `${routePrefix}/${path}` : routePrefix;
+
+    const query = {};
+    for (const key of declaredQueryKeys) {
+      const { found, value } = takeKey(rest, key);
+      if (found) query[key] = value;
+    }
+
+    let body;
+    if (bodyParam) {
+      const { found, value } = takeKey(rest, bodyParam);
+      if (found) body = value;
+      // Any args left over that we don't recognize still get sent (as query)
+      // rather than silently dropped.
+      Object.assign(query, rest);
+    } else if (verb === 'GET' || verb === 'DELETE') {
+      Object.assign(query, rest);
+    } else {
+      body = Object.keys(rest).length ? rest : undefined;
+    }
+
+    const hasQuery = Object.keys(query).length > 0;
+    return http.request(verb, fullPath, { query: hasQuery ? query : undefined, body });
+  };
+}
+
+module.exports = { resolveRoute, makeOperation };

package/src/core/tokenStore.js

@@ -0,0 +1,52 @@
+'use strict';
+
+const hasLocalStorage = typeof globalThis.localStorage !== 'undefined';
+const STORAGE_KEY = 'oasis_session';
+
+/**
+ * Holds the current JWT/avatar session for the SDK.
+ * In the browser it persists to localStorage by default; in Node (or when
+ * persistence is disabled) it simply lives in memory for the lifetime of
+ * the client instance. Callers can always set/get/clear explicitly.
+ */
+class TokenStore {
+  constructor({ persist = hasLocalStorage } = {}) {
+    this.persist = persist;
+    this._session = null;
+
+    if (this.persist) {
+      try {
+        const raw = globalThis.localStorage.getItem(STORAGE_KEY);
+        if (raw) this._session = JSON.parse(raw);
+      } catch {
+        this._session = null;
+      }
+    }
+  }
+
+  getSession() {
+    return this._session;
+  }
+
+  getToken() {
+    return this._session?.jwtToken || this._session?.token || null;
+  }
+
+  setSession(session) {
+    this._session = session || null;
+    if (this.persist) {
+      try {
+        if (session) globalThis.localStorage.setItem(STORAGE_KEY, JSON.stringify(session));
+        else globalThis.localStorage.removeItem(STORAGE_KEY);
+      } catch {
+        // Storage unavailable (e.g. private browsing) - in-memory session still works.
+      }
+    }
+  }
+
+  clear() {
+    this.setSession(null);
+  }
+}
+
+module.exports = { TokenStore };

package/src/core/types.d.ts

@@ -0,0 +1,18 @@
+// AUTO-GENERATED by scripts/generate-types.js - do not hand-edit.
+export interface OASISResponse<T = any> {
+  isError: boolean;
+  message: string | null;
+  result: T;
+  raw: any;
+  statusCode: number;
+}
+
+export interface OASISSession {
+  avatarId: string;
+  username: string;
+  email: string;
+  firstName?: string;
+  lastName?: string;
+  jwtToken: string;
+  refreshToken?: string;
+}

package/src/index.js

@@ -0,0 +1,45 @@
+'use strict';
+
+const { HttpClient, DEFAULT_BASE_URL } = require('./core/httpClient');
+const { TokenStore } = require('./core/tokenStore');
+const { attachGeneratedModules } = require('./modules/index');
+
+/**
+ * Main SDK entry point. Works in Node 18+ and any modern browser.
+ *
+ *   const { Web7Client } = require('@oasisomniverse/web7-api');
+ *   const web7 = new Web7Client({ baseUrl: 'https://api.web7.oasisomniverse.one' });
+ *   web7.setToken(jwtToken); // reuse a WEB4 OASIS JWT - WEB7 has no auth of its own
+ *   const session = await web7.symbiosis.startSession({ avatarId, consentGranted: true });
+ *
+ * Every controller on the WEB7 Symbiosis WebAPI is reachable as a lowerCamel
+ * property (web7.symbiosis, web7.collectiveConsciousness). Generated methods
+ * take a single args object; route template tokens (e.g. {sessionId}) are
+ * consumed from it automatically, remaining keys become the query string
+ * (GET/DELETE) or JSON body (POST/PUT).
+ */
+class Web7Client {
+  constructor({ baseUrl = DEFAULT_BASE_URL, persistSession, fetchImpl } = {}) {
+    this.tokenStore = new TokenStore({ persist: persistSession });
+    this.http = new HttpClient({ baseUrl, tokenStore: this.tokenStore, fetchImpl });
+
+    attachGeneratedModules(this, this.http);
+  }
+
+  setBaseUrl(baseUrl) {
+    this.http.setBaseUrl(baseUrl);
+  }
+
+  /**
+   * WEB7 is an internal bio-symbiosis layer sitting behind the same OASIS
+   * identity as WEB4/WEB5/WEB6 - it has no avatar/auth endpoints of its own.
+   * Reuse a JWT you already obtained from the WEB4 OASIS API (or your own
+   * backend) here.
+   */
+  setToken(jwtToken, sessionExtras = {}) {
+    this.tokenStore.setSession({ ...sessionExtras, jwtToken });
+  }
+}
+
+module.exports = { Web7Client, HttpClient, TokenStore, DEFAULT_BASE_URL };
+module.exports.default = Web7Client;

package/src/modules/CollectiveConsciousness.d.ts

@@ -0,0 +1,15 @@
+// AUTO-GENERATED by scripts/generate-types.js - do not hand-edit.
+import type { OASISResponse } from '../core/types';
+
+export declare class CollectiveConsciousnessModule {
+  constructor(http: unknown);
+
+  /** POST v1/collective-consciousness/spaces (query: name) */
+  createSpace(args?: Record<string, any>): Promise<OASISResponse>;
+
+  /** GET v1/collective-consciousness/spaces/{spaceId}/field */
+  getAggregateField(args?: Record<string, any>): Promise<OASISResponse>;
+
+  /** POST v1/collective-consciousness/spaces/{spaceId}/join/{sessionId} */
+  joinSpace(args?: Record<string, any>): Promise<OASISResponse>;
+}

package/src/modules/CollectiveConsciousness.js

@@ -0,0 +1,27 @@
+'use strict';
+
+// AUTO-GENERATED by scripts/generate-modules.js from endpoints.json - do not hand-edit.
+// Regenerate with: node scripts/generate-modules.js
+
+const { makeOperation } = require('../core/routeHelper');
+
+/**
+ * Generated wrapper for v1/collective-consciousness (source: WEB7 Symbiosis WebAPI CollectiveConsciousnessController.cs).
+ * Every method takes a single args object: path-template tokens (e.g. {id})
+ * are consumed from it automatically; any remaining keys are sent as the
+ * query string (GET/DELETE) or JSON body (POST/PUT).
+ */
+class CollectiveConsciousnessModule {
+  constructor(http) {
+    this._http = http;
+
+    // POST v1/collective-consciousness/spaces (query: name)
+    this.createSpace = makeOperation(http, "v1/collective-consciousness", "POST", "spaces", {"query":["name"]});
+    // GET v1/collective-consciousness/spaces/{spaceId}/field
+    this.getAggregateField = makeOperation(http, "v1/collective-consciousness", "GET", "spaces/{spaceId}/field");
+    // POST v1/collective-consciousness/spaces/{spaceId}/join/{sessionId}
+    this.joinSpace = makeOperation(http, "v1/collective-consciousness", "POST", "spaces/{spaceId}/join/{sessionId}");
+  }
+}
+
+module.exports = { CollectiveConsciousnessModule };

package/src/modules/Symbiosis.d.ts

@@ -0,0 +1,18 @@
+// AUTO-GENERATED by scripts/generate-types.js - do not hand-edit.
+import type { OASISResponse } from '../core/types';
+
+export declare class SymbiosisModule {
+  constructor(http: unknown);
+
+  /** POST v1/symbiosis/sessions/{sessionId}/end */
+  endSession(args?: Record<string, any>): Promise<OASISResponse>;
+
+  /** GET v1/symbiosis/sessions/{sessionId} */
+  getSession(args?: Record<string, any>): Promise<OASISResponse>;
+
+  /** POST v1/symbiosis/sessions (query: consentGranted, retention) */
+  startSession(args?: Record<string, any>): Promise<OASISResponse>;
+
+  /** POST v1/symbiosis/sessions/{sessionId}/signals */
+  submitSignals(args?: Record<string, any>): Promise<OASISResponse>;
+}

package/src/modules/Symbiosis.js

@@ -0,0 +1,29 @@
+'use strict';
+
+// AUTO-GENERATED by scripts/generate-modules.js from endpoints.json - do not hand-edit.
+// Regenerate with: node scripts/generate-modules.js
+
+const { makeOperation } = require('../core/routeHelper');
+
+/**
+ * Generated wrapper for v1/symbiosis (source: WEB7 Symbiosis WebAPI SymbiosisController.cs).
+ * Every method takes a single args object: path-template tokens (e.g. {id})
+ * are consumed from it automatically; any remaining keys are sent as the
+ * query string (GET/DELETE) or JSON body (POST/PUT).
+ */
+class SymbiosisModule {
+  constructor(http) {
+    this._http = http;
+
+    // POST v1/symbiosis/sessions/{sessionId}/end
+    this.endSession = makeOperation(http, "v1/symbiosis", "POST", "sessions/{sessionId}/end");
+    // GET v1/symbiosis/sessions/{sessionId}
+    this.getSession = makeOperation(http, "v1/symbiosis", "GET", "sessions/{sessionId}");
+    // POST v1/symbiosis/sessions (query: consentGranted, retention)
+    this.startSession = makeOperation(http, "v1/symbiosis", "POST", "sessions", {"query":["consentGranted","retention"]});
+    // POST v1/symbiosis/sessions/{sessionId}/signals
+    this.submitSignals = makeOperation(http, "v1/symbiosis", "POST", "sessions/{sessionId}/signals");
+  }
+}
+
+module.exports = { SymbiosisModule };

package/src/modules/index.js

@@ -0,0 +1,17 @@
+'use strict';
+
+// AUTO-GENERATED by scripts/generate-modules.js - do not hand-edit.
+const { CollectiveConsciousnessModule } = require('./CollectiveConsciousness');
+const { SymbiosisModule } = require('./Symbiosis');
+
+/**
+ * Attaches every generated module to the client under its lowerCamel controller
+ * name (e.g. client.completion, client.images, client.holonicMemory).
+ */
+function attachGeneratedModules(client, http) {
+  client.collectiveConsciousness = client.collectiveConsciousness || new CollectiveConsciousnessModule(http);
+  client.symbiosis = client.symbiosis || new SymbiosisModule(http);
+  return client;
+}
+
+module.exports = { attachGeneratedModules };