@pipelex/sdk 0.60.0 → 0.61.0

package/README.md

@@ -178,6 +178,18 @@ const copy = await client.copyMethod(
 );
 if (copy.outcome === "copied") console.log(copy.method.copied_from); // the original it names
 
+// The template catalog: the public methods every organization reads, in the platform's order, with
+// the categories that have a template and each card's thumbnails behind short-lived links.
+const templates = await client.listMethodTemplates({ category: "human-resources", limit: 8 });
+for (const tab of templates.categories) console.log(tab.slug, tab.label);
+// Another organization's public method reads in a narrower shape, its latest published version
+// and no draft: `updated_at` is what tells it from one of your own.
+const first = templates.items[0];
+const template = first === undefined ? undefined : await client.getMethod(first.method_id);
+if (template !== undefined && !("updated_at" in template)) {
+  console.log(template.latest_published.categories);
+}
+
 // The organization's files, newest first: uploads, test files and the files runs made. Each row's
 // `uri` goes into a run's inputs as any address does. A filtered page can be empty and still carry
 // a nextCursor; iterateFiles follows it.
@@ -285,6 +297,7 @@ These pages ship inside the published package, so a reader who has only installe
 | [`docs/files.md`](./docs/files.md) | An organization's files: `listFiles` and `iterateFiles`, the row, the whole record and its provenance, the query and its repeated filters, paging through filtered pages, one file and its uses, the records of an address, the rename rule, links that name the file, a zip of files and its caps, a run's files, the copy into a method's draft, and an upload recorded as a method's test file with the refusals that come with it |
 | [`docs/method-examples.md`](./docs/method-examples.md) | A method's saved examples: the create, the paged list and its iterator, the edit that raises the input revision, the latest-run write and its `recorded` or `stale` verdict, the build assistant's save and its `kept` or `created` verdict, how an integer past `Number.MAX_SAFE_INTEGER` in the inputs stays exact, and what is refused before sending |
 | [`docs/method-copy.md`](./docs/method-copy.md) | Copying a method into another organization or duplicating it: what a copy holds and the stored files it copies, the `copied` or `refused` verdict, every refusal, the copy's idempotency key, and `copied_from` |
+| [`docs/public-methods.md`](./docs/public-methods.md) | Public methods and the template catalog: `listMethodTemplates` and its iterator, the ordering, the categories and the thumbnails' links, another organization's public method read in its narrower shape, the copy of a public method, `visibility` and `categories` on a method, and the refusals a public method's publish adds |
 | [`docs/organization-branding.md`](./docs/organization-branding.md) | An organization's logos and colours: `getBranding`, which every member and API key reads, `updateOrganizationBranding`, an admin's write that sets, clears or keeps each key, and how a refused logo or colour names its slot in `errors` so a settings screen shows the sentence under it |
 | [`docs/exact-integers.md`](./docs/exact-integers.md) | Which reads keep an integer past `Number.MAX_SAFE_INTEGER` exact, as a `bigint` (a run's inputs and outputs, an example's inputs), how a request body writes it back with its digits, and `parseExactJson` and `stringifyExactJson` for code showing such data as JSON text |
 | [`docs/crate-routes.md`](./docs/crate-routes.md) | `resolve`, `codegen` and `pipeIo` — the method's tree as the protocol's `files` map, with its dependencies, the normalized crate, the stamped types, and a method's I/O artifacts without a validation — and the offline `runCodegenCheck` that guards a committed tree |

package/dist/cli/script.d.ts

@@ -15,7 +15,7 @@ import type { CommandIO } from "./io.js";
  * update notice and npm 12's run notices off the script's stderr, which carries the command's
  * own lines, while npm's warnings and errors still print.
  */
-export declare const SCRIPT_RUNNER = "npx --yes --no-update-notifier --loglevel=warn @pipelex/sdk@0.60.0";
+export declare const SCRIPT_RUNNER = "npx --yes --no-update-notifier --loglevel=warn @pipelex/sdk@0.61.0";
 export declare const SCRIPT_WRITER = "@pipelex/sdk";
 export declare const SCRIPT_NEEDS = "Node 22.12 or later";
 /** Run `pipelex-sdk script` and return its exit code. */

package/dist/client.d.ts

@@ -1,7 +1,7 @@
 import type { MTHDSProtocol, ModelCategory, ModelDeck, RunOptions, StartOptions, VersionInfo } from "mthds/protocol";
 import type { CodegenRequest, CodegenResponse, CrateRouteOptions, DictPipeOutput, FormatResponse, LintResponse, ModelCheckCategory, ModelReferenceVerdict, PipeIORequest, PipeIOResponse, PipelexRunResultStart, PipelexValidateSource, PipelexValidationResult, ResolveRequest, ResolveResponse, ValidateMethodSelector } from "./models.js";
 import { type GetRunResultOptions, type RunProgress, type RunRead, type RunResults, type RunResultState, type StartAndWaitForResultOptions, type WaitForResultOptions } from "./runs.js";
-import type { BillingPortalResponse, ChangePlanResponse, CheckoutResponse, DraftFileFromFileInput, DraftFileFromFileResult, FileArchive, FileArchiveRequest, FileDetail, FileLinkTarget, FileLinksResult, FilePage, FileRecord, FileRecordList, FileRenameInput, FileSummary, GetFileQuery, GetFilesByUriOptions, InvoiceView, Membership, MembershipsResponse, OrganizationBranding, OrganizationBrandingUpdate, ListFilesQuery, ListMethodExamplesQuery, ListMethodsQuery, ListMethodVersionsQuery, ListRunFilesQuery, MethodCopyInput, MethodCopyResult, MethodData, MethodDeletionAccepted, MethodDetail, MethodDraftInput, MethodExample, MethodExampleAssistantSaveInput, MethodExampleAssistantSaveResult, MethodExampleCreateInput, MethodExampleLatestRunInput, MethodExampleLatestRunResult, MethodExamplePage, MethodExampleUpdateInput, MethodPage, MethodPublishInput, MethodPublishResult, MethodRenameInput, MethodSummary, MethodVersion, MethodVersionPage, MethodWriteInput, OnboardingSubmission, PipelexApiKeyCreated, PipelexApiKeyList, ListRunsQuery, RunHistoryItem, RunDetail, RunFilesPage, RunPage, PlanView, ResolvedStorageUrl, SavedMethodFile, SubscriptionResponse, UpdateRunInput, UploadGrant, UploadGrantInput, UploadInput, UploadedFile, UserProfile } from "./product-models.js";
+import type { BillingPortalResponse, ChangePlanResponse, CheckoutResponse, DraftFileFromFileInput, DraftFileFromFileResult, FileArchive, FileArchiveRequest, FileDetail, FileLinkTarget, FileLinksResult, FilePage, FileRecord, FileRecordList, FileRenameInput, FileSummary, GetFileQuery, GetFilesByUriOptions, InvoiceView, Membership, MembershipsResponse, OrganizationBranding, OrganizationBrandingUpdate, ListFilesQuery, ListMethodExamplesQuery, ListMethodsQuery, ListMethodTemplatesQuery, ListMethodVersionsQuery, ListRunFilesQuery, MethodCopyInput, MethodCopyResult, MethodData, MethodDeletionAccepted, MethodDetail, MethodDraftInput, MethodExample, MethodExampleAssistantSaveInput, MethodExampleAssistantSaveResult, MethodExampleCreateInput, MethodExampleLatestRunInput, MethodExampleLatestRunResult, MethodExamplePage, MethodExampleUpdateInput, MethodPage, MethodPublishInput, MethodPublishResult, MethodRenameInput, MethodSummary, MethodTemplate, MethodTemplatePage, MethodVersion, MethodVersionPage, MethodWriteInput, OnboardingSubmission, PublicMethodDetail, PipelexApiKeyCreated, PipelexApiKeyList, ListRunsQuery, RunHistoryItem, RunDetail, RunFilesPage, RunPage, PlanView, ResolvedStorageUrl, SavedMethodFile, SubscriptionResponse, UpdateRunInput, UploadGrant, UploadGrantInput, UploadInput, UploadedFile, UserProfile } from "./product-models.js";
 import type { MethodTreeForms, MethodTreeLimits } from "./method-trees.js";
 import type { AppInfo } from "./user-agent.js";
 import type { WebhookDeliveryDetail, WebhookDeliveryList, WebhookReplayAccepted, WebhookReplayOptions, WebhookSecret, WebhookSecretRotateOptions } from "./webhooks.js";
@@ -988,7 +988,49 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      */
     iterateMethods(query?: Omit<ListMethodsQuery, "cursor">): AsyncGenerator<MethodSummary, void, undefined>;
     /**
-     * Read one method with its draft's files — `GET /v1/methods/{id}`: its identity, its draft
+     * One page of the template catalog — `GET /v1/method-templates`: the public methods of the
+     * organization the deployment names as its templates organization, the same for every caller.
+     *
+     * The templates the ordering lists lead, in its order, and every other template follows by name.
+     * `ordering` names the ordering to serve, such as `default` or an arm of a test; an absent,
+     * unknown or malformed name serves `default`, and the page's `ordering` names the one served,
+     * `null` when there is none. `category` keeps one category's templates, by slug, in the same
+     * order; an unknown slug keeps none. Whatever the filter, the page's `categories` names, with its
+     * label, every category at least one template shows, in the catalog's order, so no tab drawn
+     * from it is ever empty.
+     *
+     * Each `MethodTemplate` carries the method's id and name, its latest published version's number,
+     * description and categories, its organization's display name and each thumbnail with its size
+     * and a link to its bytes valid for about fifteen minutes. A template reads, runs and copies by
+     * its `method_id`, as another organization's public method does (`getMethod`, `copyMethod`).
+     *
+     * Pass the page's `nextCursor` back as `cursor` with the same `ordering` and `category`, which the
+     * cursor does not hold; `null` is the last page. `iterateMethodTemplates` follows it for you.
+     *
+     * Throws `ApiResponseError`: `422` `request.invalid` for a `limit` outside 1 to 200 or a cursor of
+     * another listing, `422` `request.malformed` for a cursor that does not decode, `500`
+     * `runtime.misconfigured` when the templates organization the deployment names has no record or
+     * a link cannot be signed, and `503` `runtime.unavailable`, safe to retry. A page whose `items`
+     * or `categories` is not an array, whose `next_cursor` or `ordering` is neither a string nor
+     * `null`, a template lacking a member a card is drawn from (a string `method_id`, `name` and
+     * `organization_name`, a `description` that is a string or `null`, a positive integer
+     * `latest_version`, an array of string `categories`, and `thumbnails` each with a string `path`,
+     * `media_type`, `sha256`, `url` and `expires_at` and a positive integer `width` and `height`), and a
+     * category without a string `slug` and `label` are an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too, its links redacted.
+     */
+    listMethodTemplates(query?: ListMethodTemplatesQuery): Promise<MethodTemplatePage>;
+    /**
+     * Every template of the catalog, in the order served — follows `listMethodTemplates`'s cursor
+     * for you, with the same `ordering` and `category` on every page. It stops on a `null` cursor or
+     * on a cursor the server failed to advance, and throws `PagingNotTerminatingError` past a page
+     * ceiling no real catalog reaches. The ordering served and the categories are on each page, so
+     * read one page with `listMethodTemplates` when you need them.
+     */
+    iterateMethodTemplates(query?: Omit<ListMethodTemplatesQuery, "cursor">): AsyncGenerator<MethodTemplate, void, undefined>;
+    /**
+     * Read one method with its files — `GET /v1/methods/{id}`. One of the caller's organization's
+     * methods answers a `MethodDetail`: its identity, its draft
      * (`files`, `input_data`) with the draft's token (`updated_at`) and digest (`draft_digest`),
      * and its latest published version's summary (`latest_version`, `latest_published`), whatever
      * the publish state. A method never published reads with both `null`, never as an error.
@@ -996,6 +1038,11 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * link to its bytes valid for about fifteen minutes, and is empty for an empty draft;
      * `writeMethodTree` brings the tree to disk.
      *
+     * **Another organization's public method reads too, in a narrower shape**, a
+     * `PublicMethodDetail`: its latest published version, that version's description, categories
+     * and files, and nothing of its draft or of the owner's people, so no `updated_at` to write or
+     * publish with. Narrow the answer with `"updated_at" in method` before reading the draft.
+     *
      * Takes a bare catalog id: the method routes address the method itself, never a version of
      * it. A caller holding `mt_…@3` strips the suffix with `parseMethodSelector` and reads that
      * version with `getMethodVersion`. Every method route throws `RequestArgumentError` for a
@@ -1003,13 +1050,18 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * and for an id that is empty, `.` or `..`, which the URL would resolve into another route's
      * path.
      *
-     * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for an unknown or foreign-org
-     * method, `409` `pipelex.catalog.being_deleted` while its erasure runs, and a `500`
-     * `runtime.unexpected` for a method whose draft names a tree the platform holds no record of. An
-     * answer whose `files` is not a listing is an answer the SDK cannot read, thrown as an
-     * `ApiResponseError` too.
+     * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for an unknown method, for
+     * another organization's internal one, and for a public one made internal again or being
+     * erased; `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method
+     * runs; and a `500` `runtime.unexpected` for a method whose tree the platform holds no record
+     * of. An answer whose `files` is not a listing is an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too, its links redacted, and so is one that lacks `updated_at` while it
+     * carries a member only the owner's read has (`draft_digest`, `created_by_user_id`,
+     * `input_data`, `pipe_output`, `copied_from`, `deletion_state`), which would otherwise pass for
+     * another organization's public method, and a public read without an integer `latest_version`
+     * and a `latest_published` object.
      */
-    getMethod(methodId: string): Promise<MethodDetail>;
+    getMethod(methodId: string): Promise<MethodDetail | PublicMethodDetail>;
     /**
      * Create a method — `POST /v1/methods`. The new method holds its tree as its draft and has no
      * published version, so its bare id answers `409` `pipelex.catalog.not_published` on the run and
@@ -1239,9 +1291,12 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      *
      * The answer is a `MethodPublishResult` discriminated on `outcome` — branch on it:
      * `published` with the new `version`; `unchanged` with the existing latest `version`;
-     * `refused` with a `reason` (`invalid`, or `not_runnable` for a draft that validates with
-     * pending signatures), a `message` and the runner's `validation` verdict, whose problem items
-     * are read member by member as `validate` reads them. Every arm carries the `method`. A publish
+     * `refused` with a `reason`, a `message` and the runner's `validation` verdict, whose problem
+     * items are read member by member as `validate` reads them. The reason is `invalid`, or
+     * `not_runnable` for a draft that validates with pending signatures, and for a public method
+     * also `thumbnail_missing`, `thumbnail_invalid` or `storage_reference` (see
+     * `MethodPublishRefusalReason`); a reason this SDK does not know is passed through as its raw
+     * string, still a verdict, so show its `message`. Every arm carries the `method`. A publish
      * moves no token.
      *
      * Takes a bare catalog id, as `getMethod` does. Throws `RequestArgumentError` when
@@ -1256,11 +1311,14 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * cannot be reached, answers unusably or does not finish within the platform's deadline is a
      * `502` or a `503` with nothing written, so a retry is safe; a runner that refuses the request
      * itself is relayed under its own status. A retry of a publish that landed while its answer was
-     * lost, as on a client timeout, answers `unchanged` with the version it wrote.
+     * lost, as on a client timeout, answers `unchanged` with the version it wrote. A method made
+     * public while its publish ran is a `503` with nothing written, safe to retry, which a retry
+     * judges as a public method's publish.
      *
      * An answer whose `outcome` is not one of the outcomes above, that carries no `method` object,
-     * or a refusal whose `validation` is not a verdict object with a boolean `is_valid`, is an answer
-     * the SDK cannot read, thrown as an `ApiResponseError` too.
+     * or a refusal whose `reason` or `message` is not a string or whose `validation` is not a verdict
+     * object with a boolean `is_valid`, is an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too.
      */
     publishMethod(methodId: string, input: MethodPublishInput): Promise<MethodPublishResult>;
     /**
@@ -1269,11 +1327,13 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      *
      * Pass the page's `nextCursor` back as `cursor` to continue; `null` is the last page. A page
      * may be short while `nextCursor` is set, because the platform reads versions whole. A method
-     * never published answers an empty page.
+     * never published answers an empty page. Another organization's public method lists its
+     * versions too, each without its `published_by`.
      *
      * Takes a bare catalog id, as `getMethod` does. Throws `ApiResponseError`: `404`
-     * `pipelex.catalog.not_found` for an unknown method, `409` `pipelex.catalog.being_deleted`, and
-     * `422` `request.invalid` for a cursor the listing did not issue for this method or a `limit`
+     * `pipelex.catalog.not_found` for an unknown method and for another organization's internal
+     * one, `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs,
+     * and `422` `request.invalid` for a cursor the listing did not issue for this method or a `limit`
      * outside 1 to 100. A page whose `items` is not an array or whose `next_cursor` is neither a
      * string nor `null` is an answer the SDK cannot read, thrown as an `ApiResponseError` too.
      */
@@ -1281,12 +1341,15 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
     /**
      * One published version of a method, with its files — `GET /v1/methods/{id}/versions/{n}`.
      * `files` lists the version's tree as `getMethod` lists the draft's, each file with a link to
-     * its bytes valid for about fifteen minutes, which `writeMethodTree` writes to disk.
+     * its bytes valid for about fifteen minutes, which `writeMethodTree` writes to disk. Another
+     * organization's public method reads its versions too, without their `published_by`, the files
+     * linked in the organization that holds it.
      *
      * Takes a bare catalog id, as `getMethod` does, and the version number. Throws
      * `RequestArgumentError` for a `version` that is not a positive integer, before any request.
      * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for a version the method never
-     * published and for an unknown method, `409` `pipelex.catalog.being_deleted`, and `500`
+     * published, for an unknown method and for another organization's internal one, `409`
+     * `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs, and `500`
      * `runtime.unexpected` for a version stored before methods were trees and never rewritten as
      * one, which names no tree to serve.
      */
@@ -1303,10 +1366,16 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * original stays as it was. The copy takes the draft, never the latest published version; with
      * `expected_draft_updated_at`, it takes exactly the draft the caller last saw.
      *
+     * **Another organization's public method copies too**, a template of the catalog among them,
+     * from its latest published version rather than its draft: that version's tree, description and
+     * categories, and the method's examples, never the owner's form inputs, with `copied_from`
+     * naming the `version`. Leave `expected_draft_updated_at` out then: sent with such a method, it
+     * is refused with a `422` `request.invalid` naming it.
+     *
      * The answer is a `MethodCopyResult` discriminated on `outcome` — branch on it: `copied` with
      * the copy as `method`, `examples_copied` and `stored_files_copied`; `refused` with the
      * `reason` `bundle_names_other_storage`, a `message` and every `references` entry (`{ path, uri
-     * }`) a `.mthds` file of the draft holds that the destination cannot read and, in a duplicate,
+     * }`) a `.mthds` file of the tree holds that the destination cannot read and, in a duplicate,
      * that names a file under the original's run files, which erasing the original would remove,
      * nothing written.
      *
@@ -1325,7 +1394,8 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * that is not from a web session, or for a role that may not change methods, in the method's
      * organization or in the destination; `404` `pipelex.org.not_found` for a destination the
      * caller does not belong to, still being set up or unknown, alike; `404`
-     * `pipelex.catalog.not_found` for an unknown method; `409` `pipelex.catalog.being_deleted`;
+     * `pipelex.catalog.not_found` for an unknown method and for another organization's internal
+     * one; `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs;
      * `409` `pipelex.catalog.update_conflict` for a draft that moved since
      * `expected_draft_updated_at`; a `409` whose `domain` is `runtime` and `retry` `no`, for a
      * draft whose tree the method's organization holds no record of or no longer holds every file

package/dist/client.js

@@ -1935,7 +1935,84 @@ export class PipelexApiClient {
         yield* followCursor("listMethods", (cursor) => this.listMethods({ ...query, cursor }));
     }
     /**
-     * Read one method with its draft's files — `GET /v1/methods/{id}`: its identity, its draft
+     * One page of the template catalog — `GET /v1/method-templates`: the public methods of the
+     * organization the deployment names as its templates organization, the same for every caller.
+     *
+     * The templates the ordering lists lead, in its order, and every other template follows by name.
+     * `ordering` names the ordering to serve, such as `default` or an arm of a test; an absent,
+     * unknown or malformed name serves `default`, and the page's `ordering` names the one served,
+     * `null` when there is none. `category` keeps one category's templates, by slug, in the same
+     * order; an unknown slug keeps none. Whatever the filter, the page's `categories` names, with its
+     * label, every category at least one template shows, in the catalog's order, so no tab drawn
+     * from it is ever empty.
+     *
+     * Each `MethodTemplate` carries the method's id and name, its latest published version's number,
+     * description and categories, its organization's display name and each thumbnail with its size
+     * and a link to its bytes valid for about fifteen minutes. A template reads, runs and copies by
+     * its `method_id`, as another organization's public method does (`getMethod`, `copyMethod`).
+     *
+     * Pass the page's `nextCursor` back as `cursor` with the same `ordering` and `category`, which the
+     * cursor does not hold; `null` is the last page. `iterateMethodTemplates` follows it for you.
+     *
+     * Throws `ApiResponseError`: `422` `request.invalid` for a `limit` outside 1 to 200 or a cursor of
+     * another listing, `422` `request.malformed` for a cursor that does not decode, `500`
+     * `runtime.misconfigured` when the templates organization the deployment names has no record or
+     * a link cannot be signed, and `503` `runtime.unavailable`, safe to retry. A page whose `items`
+     * or `categories` is not an array, whose `next_cursor` or `ordering` is neither a string nor
+     * `null`, a template lacking a member a card is drawn from (a string `method_id`, `name` and
+     * `organization_name`, a `description` that is a string or `null`, a positive integer
+     * `latest_version`, an array of string `categories`, and `thumbnails` each with a string `path`,
+     * `media_type`, `sha256`, `url` and `expires_at` and a positive integer `width` and `height`), and a
+     * category without a string `slug` and `label` are an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too, its links redacted.
+     */
+    async listMethodTemplates(query = {}) {
+        const search = productQuery({
+            ordering: query.ordering,
+            category: query.category,
+            limit: query.limit,
+            cursor: query.cursor,
+        });
+        const endpoint = `method-templates${search}`;
+        const res = withLinks(await this.requestProductAnswer("GET", endpoint, undefined));
+        const page = this.readObjectAnswer("GET", endpoint, res);
+        const { items, next_cursor: nextCursor, ordering, categories } = page;
+        let fault = null;
+        if (!Array.isArray(items))
+            fault = "`items` is not an array";
+        else if (nextCursor !== null && typeof nextCursor !== "string") {
+            fault = "`next_cursor` is neither a string nor null";
+        }
+        else if (ordering !== null && typeof ordering !== "string") {
+            fault = "`ordering` is neither a string nor null";
+        }
+        else if (!Array.isArray(categories))
+            fault = "`categories` is not an array";
+        else
+            fault = methodTemplatesFault(items) ?? methodCategoriesFault(categories);
+        if (fault !== null) {
+            throw this.unreadableAnswer("GET", `/${API_PREFIX}/${endpoint}`, res, `a page of templates whose ${fault}`);
+        }
+        return {
+            items: items,
+            nextCursor: nextCursor,
+            ordering: ordering,
+            categories: categories,
+        };
+    }
+    /**
+     * Every template of the catalog, in the order served — follows `listMethodTemplates`'s cursor
+     * for you, with the same `ordering` and `category` on every page. It stops on a `null` cursor or
+     * on a cursor the server failed to advance, and throws `PagingNotTerminatingError` past a page
+     * ceiling no real catalog reaches. The ordering served and the categories are on each page, so
+     * read one page with `listMethodTemplates` when you need them.
+     */
+    async *iterateMethodTemplates(query = {}) {
+        yield* followCursor("listMethodTemplates", (cursor) => this.listMethodTemplates({ ...query, cursor }));
+    }
+    /**
+     * Read one method with its files — `GET /v1/methods/{id}`. One of the caller's organization's
+     * methods answers a `MethodDetail`: its identity, its draft
      * (`files`, `input_data`) with the draft's token (`updated_at`) and digest (`draft_digest`),
      * and its latest published version's summary (`latest_version`, `latest_published`), whatever
      * the publish state. A method never published reads with both `null`, never as an error.
@@ -1943,6 +2020,11 @@ export class PipelexApiClient {
      * link to its bytes valid for about fifteen minutes, and is empty for an empty draft;
      * `writeMethodTree` brings the tree to disk.
      *
+     * **Another organization's public method reads too, in a narrower shape**, a
+     * `PublicMethodDetail`: its latest published version, that version's description, categories
+     * and files, and nothing of its draft or of the owner's people, so no `updated_at` to write or
+     * publish with. Narrow the answer with `"updated_at" in method` before reading the draft.
+     *
      * Takes a bare catalog id: the method routes address the method itself, never a version of
      * it. A caller holding `mt_…@3` strips the suffix with `parseMethodSelector` and reads that
      * version with `getMethodVersion`. Every method route throws `RequestArgumentError` for a
@@ -1950,16 +2032,26 @@ export class PipelexApiClient {
      * and for an id that is empty, `.` or `..`, which the URL would resolve into another route's
      * path.
      *
-     * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for an unknown or foreign-org
-     * method, `409` `pipelex.catalog.being_deleted` while its erasure runs, and a `500`
-     * `runtime.unexpected` for a method whose draft names a tree the platform holds no record of. An
-     * answer whose `files` is not a listing is an answer the SDK cannot read, thrown as an
-     * `ApiResponseError` too.
+     * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for an unknown method, for
+     * another organization's internal one, and for a public one made internal again or being
+     * erased; `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method
+     * runs; and a `500` `runtime.unexpected` for a method whose tree the platform holds no record
+     * of. An answer whose `files` is not a listing is an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too, its links redacted, and so is one that lacks `updated_at` while it
+     * carries a member only the owner's read has (`draft_digest`, `created_by_user_id`,
+     * `input_data`, `pipe_output`, `copied_from`, `deletion_state`), which would otherwise pass for
+     * another organization's public method, and a public read without an integer `latest_version`
+     * and a `latest_published` object.
      */
     async getMethod(methodId) {
         const endpoint = methodPath(methodId, "getMethod");
-        const res = await this.requestProductAnswer("GET", endpoint, undefined);
-        return this.readSavedTree("GET", endpoint, withLinks(res), "a stored method");
+        const res = withLinks(await this.requestProductAnswer("GET", endpoint, undefined));
+        const method = this.readSavedTree("GET", endpoint, res, "a stored method");
+        const fault = methodReadFault(method);
+        if (fault !== null) {
+            throw this.unreadableAnswer("GET", `/${API_PREFIX}/${endpoint}`, res, `a stored method ${fault}`);
+        }
+        return method;
     }
     /**
      * Create a method — `POST /v1/methods`. The new method holds its tree as its draft and has no
@@ -2399,9 +2491,12 @@ export class PipelexApiClient {
      *
      * The answer is a `MethodPublishResult` discriminated on `outcome` — branch on it:
      * `published` with the new `version`; `unchanged` with the existing latest `version`;
-     * `refused` with a `reason` (`invalid`, or `not_runnable` for a draft that validates with
-     * pending signatures), a `message` and the runner's `validation` verdict, whose problem items
-     * are read member by member as `validate` reads them. Every arm carries the `method`. A publish
+     * `refused` with a `reason`, a `message` and the runner's `validation` verdict, whose problem
+     * items are read member by member as `validate` reads them. The reason is `invalid`, or
+     * `not_runnable` for a draft that validates with pending signatures, and for a public method
+     * also `thumbnail_missing`, `thumbnail_invalid` or `storage_reference` (see
+     * `MethodPublishRefusalReason`); a reason this SDK does not know is passed through as its raw
+     * string, still a verdict, so show its `message`. Every arm carries the `method`. A publish
      * moves no token.
      *
      * Takes a bare catalog id, as `getMethod` does. Throws `RequestArgumentError` when
@@ -2416,11 +2511,14 @@ export class PipelexApiClient {
      * cannot be reached, answers unusably or does not finish within the platform's deadline is a
      * `502` or a `503` with nothing written, so a retry is safe; a runner that refuses the request
      * itself is relayed under its own status. A retry of a publish that landed while its answer was
-     * lost, as on a client timeout, answers `unchanged` with the version it wrote.
+     * lost, as on a client timeout, answers `unchanged` with the version it wrote. A method made
+     * public while its publish ran is a `503` with nothing written, safe to retry, which a retry
+     * judges as a public method's publish.
      *
      * An answer whose `outcome` is not one of the outcomes above, that carries no `method` object,
-     * or a refusal whose `validation` is not a verdict object with a boolean `is_valid`, is an answer
-     * the SDK cannot read, thrown as an `ApiResponseError` too.
+     * or a refusal whose `reason` or `message` is not a string or whose `validation` is not a verdict
+     * object with a boolean `is_valid`, is an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too.
      */
     async publishMethod(methodId, input) {
         const token = input
@@ -2445,8 +2543,16 @@ export class PipelexApiClient {
         // The refused arm carries the runner's verdict, whose problem items are read member by
         // member as `validate` reads them, so one malformed item never costs the caller the others.
         const validation = answer.validation;
-        if (!isPlainObject(validation) || typeof validation.is_valid !== "boolean") {
-            throw this.unreadableAnswer("POST", `/${API_PREFIX}/${endpoint}`, res, "a publish result whose `validation` is not an object");
+        let fault = null;
+        if (typeof answer.reason !== "string")
+            fault = "`reason` is not a string";
+        else if (typeof answer.message !== "string")
+            fault = "`message` is not a string";
+        else if (!isPlainObject(validation) || typeof validation.is_valid !== "boolean") {
+            fault = "`validation` is not an object";
+        }
+        if (fault !== null) {
+            throw this.unreadableAnswer("POST", `/${API_PREFIX}/${endpoint}`, res, `a publish result whose ${fault}`);
         }
         return {
             ...answer,
@@ -2461,11 +2567,13 @@ export class PipelexApiClient {
      *
      * Pass the page's `nextCursor` back as `cursor` to continue; `null` is the last page. A page
      * may be short while `nextCursor` is set, because the platform reads versions whole. A method
-     * never published answers an empty page.
+     * never published answers an empty page. Another organization's public method lists its
+     * versions too, each without its `published_by`.
      *
      * Takes a bare catalog id, as `getMethod` does. Throws `ApiResponseError`: `404`
-     * `pipelex.catalog.not_found` for an unknown method, `409` `pipelex.catalog.being_deleted`, and
-     * `422` `request.invalid` for a cursor the listing did not issue for this method or a `limit`
+     * `pipelex.catalog.not_found` for an unknown method and for another organization's internal
+     * one, `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs,
+     * and `422` `request.invalid` for a cursor the listing did not issue for this method or a `limit`
      * outside 1 to 100. A page whose `items` is not an array or whose `next_cursor` is neither a
      * string nor `null` is an answer the SDK cannot read, thrown as an `ApiResponseError` too.
      */
@@ -2477,12 +2585,15 @@ export class PipelexApiClient {
     /**
      * One published version of a method, with its files — `GET /v1/methods/{id}/versions/{n}`.
      * `files` lists the version's tree as `getMethod` lists the draft's, each file with a link to
-     * its bytes valid for about fifteen minutes, which `writeMethodTree` writes to disk.
+     * its bytes valid for about fifteen minutes, which `writeMethodTree` writes to disk. Another
+     * organization's public method reads its versions too, without their `published_by`, the files
+     * linked in the organization that holds it.
      *
      * Takes a bare catalog id, as `getMethod` does, and the version number. Throws
      * `RequestArgumentError` for a `version` that is not a positive integer, before any request.
      * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for a version the method never
-     * published and for an unknown method, `409` `pipelex.catalog.being_deleted`, and `500`
+     * published, for an unknown method and for another organization's internal one, `409`
+     * `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs, and `500`
      * `runtime.unexpected` for a version stored before methods were trees and never rewritten as
      * one, which names no tree to serve.
      */
@@ -2506,10 +2617,16 @@ export class PipelexApiClient {
      * original stays as it was. The copy takes the draft, never the latest published version; with
      * `expected_draft_updated_at`, it takes exactly the draft the caller last saw.
      *
+     * **Another organization's public method copies too**, a template of the catalog among them,
+     * from its latest published version rather than its draft: that version's tree, description and
+     * categories, and the method's examples, never the owner's form inputs, with `copied_from`
+     * naming the `version`. Leave `expected_draft_updated_at` out then: sent with such a method, it
+     * is refused with a `422` `request.invalid` naming it.
+     *
      * The answer is a `MethodCopyResult` discriminated on `outcome` — branch on it: `copied` with
      * the copy as `method`, `examples_copied` and `stored_files_copied`; `refused` with the
      * `reason` `bundle_names_other_storage`, a `message` and every `references` entry (`{ path, uri
-     * }`) a `.mthds` file of the draft holds that the destination cannot read and, in a duplicate,
+     * }`) a `.mthds` file of the tree holds that the destination cannot read and, in a duplicate,
      * that names a file under the original's run files, which erasing the original would remove,
      * nothing written.
      *
@@ -2528,7 +2645,8 @@ export class PipelexApiClient {
      * that is not from a web session, or for a role that may not change methods, in the method's
      * organization or in the destination; `404` `pipelex.org.not_found` for a destination the
      * caller does not belong to, still being set up or unknown, alike; `404`
-     * `pipelex.catalog.not_found` for an unknown method; `409` `pipelex.catalog.being_deleted`;
+     * `pipelex.catalog.not_found` for an unknown method and for another organization's internal
+     * one; `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs;
      * `409` `pipelex.catalog.update_conflict` for a draft that moved since
      * `expected_draft_updated_at`; a `409` whose `domain` is `runtime` and `retry` `no`, for a
      * draft whose tree the method's organization holds no record of or no longer holds every file
@@ -4387,6 +4505,106 @@ function savedFilesFault(files) {
     }
     return null;
 }
+/** The members only the owner's read of a method carries, never another organization's. */
+const OWNER_ONLY_METHOD_MEMBERS = [
+    "draft_digest",
+    "created_by_user_id",
+    "input_data",
+    "pipe_output",
+    "copied_from",
+    "deletion_state",
+];
+/**
+ * Why a method read is not one the SDK reads, or `null` when it is. The owner's read carries the
+ * draft's token, `updated_at`, which is what tells it from another organization's public method;
+ * so an answer without the token that still carries a member only the owner's read has is a
+ * damaged owner read rather than a public one, and a public read must carry the latest published
+ * version it is about.
+ */
+function methodReadFault(method) {
+    if ("updated_at" in method)
+        return null;
+    const ownerMember = OWNER_ONLY_METHOD_MEMBERS.find((member) => member in method);
+    if (ownerMember !== undefined) {
+        return `without \`updated_at\` that carries the owner's \`${ownerMember}\``;
+    }
+    if (!isPositiveInteger(method.latest_version)) {
+        return "read as another organization's public method whose `latest_version` is not a positive integer";
+    }
+    if (!isPlainObject(method.latest_published)) {
+        return "read as another organization's public method whose `latest_published` is not an object";
+    }
+    return null;
+}
+function isPositiveInteger(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value >= 1;
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === "string");
+}
+/**
+ * Why the catalog's templates are not ones the SDK reads, or `null` when they are: each an object
+ * with what a card is drawn from, a string `method_id`, `name` and `organization_name`, a
+ * `description` that is a string or `null`, a positive integer `latest_version`, an array of string `categories`, and `thumbnails`, each with
+ * a string `path`, `media_type`, `sha256`, `url` and `expires_at` and a positive integer `width`
+ * and `height`.
+ */
+function methodTemplatesFault(items) {
+    for (let index = 0; index < items.length; index += 1) {
+        const item = items[index];
+        if (!isPlainObject(item))
+            return `\`items\` holds an entry that is not an object, at [${index}]`;
+        for (const member of ["method_id", "name", "organization_name"]) {
+            if (typeof item[member] !== "string") {
+                return `\`items\` holds a template whose \`${member}\` is not a string, at [${index}]`;
+            }
+        }
+        if (item.description !== null &&
+            item.description !== undefined &&
+            typeof item.description !== "string") {
+            return `\`items\` holds a template whose \`description\` is neither a string nor null, at [${index}]`;
+        }
+        if (!isPositiveInteger(item.latest_version)) {
+            return `\`items\` holds a template whose \`latest_version\` is not a positive integer, at [${index}]`;
+        }
+        if (!isStringArray(item.categories)) {
+            return `\`items\` holds a template whose \`categories\` is not an array of strings, at [${index}]`;
+        }
+        const thumbnails = item.thumbnails;
+        if (!Array.isArray(thumbnails)) {
+            return `\`items\` holds a template whose \`thumbnails\` is not an array, at [${index}]`;
+        }
+        for (let position = 0; position < thumbnails.length; position += 1) {
+            const thumbnail = thumbnails[position];
+            const where = `at [${index}].thumbnails[${position}]`;
+            if (!isPlainObject(thumbnail))
+                return `\`items\` holds a thumbnail that is not an object, ${where}`;
+            for (const member of ["path", "media_type", "sha256", "url", "expires_at"]) {
+                if (typeof thumbnail[member] !== "string") {
+                    return `\`items\` holds a thumbnail whose \`${member}\` is not a string, ${where}`;
+                }
+            }
+            for (const member of ["width", "height"]) {
+                if (!isPositiveInteger(thumbnail[member])) {
+                    return `\`items\` holds a thumbnail whose \`${member}\` is not a positive integer, ${where}`;
+                }
+            }
+        }
+    }
+    return null;
+}
+/** Why the catalog's categories are not ones the SDK reads, or `null`: each a string `slug` and `label`. */
+function methodCategoriesFault(categories) {
+    for (let index = 0; index < categories.length; index += 1) {
+        const category = categories[index];
+        if (!isPlainObject(category) ||
+            typeof category.slug !== "string" ||
+            typeof category.label !== "string") {
+            return `\`categories\` holds an entry without a string \`slug\` and \`label\`, at [${index}]`;
+        }
+    }
+    return null;
+}
 function extractNetworkErrorCode(err) {
     if (err instanceof DOMException && err.name === "TimeoutError") {
         return "ABORT_TIMEOUT";