@w6w/sdk 0.2.1 → 0.4.0

package/dist/src/console/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/console/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,qFAAqF;AACrF,MAAM,WAAW,IAAI;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qDAAqD;AACrD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;4FAC4F;AAC5F,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;CAC7B;AAED,4EAA4E;AAC5E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;yCACyC;AACzC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,WAAW,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,SAAS;IACxB,oCAAoC;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,OAAO;;IAGlB;;OAEG;gBACS,IAAI,EAAE,QAAQ;IAI1B;;;;;;;;;;OAUG;IACG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAUvE;;;;;;;;;OASG;IACG,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAUzD;;;;;;;;;;;OAWG;IACG,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAUvE;;;;;;;;;;;;OAYG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAS/E;;;;;;;;;;;;;;;;OAgBG;IACG,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC;CAOlC"}

package/dist/src/console/auth.js

@@ -0,0 +1,173 @@
+/**
+ * `client.console.auth.*` — self-serve login and signup, relocated from the
+ * studio's own API client.
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * **The public/authenticated split is per-method, not per-file.** `login`,
+ * `signup` and `checkAccountSlug` are registered server-side ABOVE
+ * `app.use("*", authGuard)` (`packages/server/packages/api/data/signup.ts:23-41`
+ * and `id/auth.ts:22-55`) and must never read a principal — any bearer a
+ * caller sends is inert on these three routes, so each passes
+ * `requireAuth: false` and the transport never even attempts to attach one
+ * (`../http.ts`, HITL-9). `createAccount` is the authenticated counterpart
+ * (`id/signup.ts:33-78`) and uses the default, unconditional `requireAuth`.
+ * `login` is how a caller gets a token in the first place — without
+ * `requireAuth: false` it could never be called by a tokenless client, since
+ * `requireToken` would raise before the request ever reached `fetch`.
+ *
+ * **`getMe` IS modeled here now — that changed, and this is why.** This file
+ * previously said it was deliberately not modeled, because `client.me()`
+ * (`../me.ts`, base surface) covered `GET /auth/me` exactly. It no longer does.
+ * The route answers additively with a **studio-internal capability field**,
+ * `tenantAdmin` (`plan-B.md` § WIRE PINS W1/W9), and the published `Me`
+ * (`../types.ts:104-123`) deliberately does not carry it: `Me` is part of the
+ * published partner contract — `endpoints.json` names it as the `me`
+ * operation's `returns` — so declaring a field there would be a
+ * publish-in-lockstep change across every language wrapper (CLAUDE.md), for
+ * what is a studio-only authorization hint. The console surface is exactly the
+ * place a studio-only projection belongs, so the capability is typed on
+ * {@linkcode ConsoleMe} instead, and `client.me()` stays untouched and keeps
+ * returning the published shape. Both read the same route; they differ only in
+ * what they promise about the body.
+ *
+ * **Response shapes are flat, no envelope key**, mirroring
+ * `console/reliability.ts`'s own pattern (verified against the server route
+ * handlers, not assumed) — every method here returns `res.body` directly and
+ * never calls this package's `unwrap()` helper.
+ *
+ * @module
+ */
+/**
+ * The `console.auth` namespace on a `W6wClient`.
+ *
+ * @example
+ * ```ts
+ * const { token } = await client.console.auth.login("user", "pass");
+ * const me = await client.console.auth.getMe();
+ * if (me.tenantAdmin) { // tenant-admin surface
+ * }
+ * ```
+ */
+export class AuthApi {
+    #host;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host) {
+        this.#host = host;
+    }
+    /**
+     * Authenticate with the configured credential and mint a session token.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`).
+     *
+     * @param username - The account username.
+     * @param password - The account password.
+     * @returns The token, the caller's identity, and the token's lifetime.
+     * @throws {ApiError} On any non-2xx, e.g. `401` for invalid credentials.
+     */
+    async login(username, password) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/auth/login",
+            body: { username, password },
+            requireAuth: false,
+        });
+        return res.body;
+    }
+    /**
+     * Self-serve signup: creates the user and mints a `role: "user"` session.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`).
+     *
+     * @param input - Email, password, and the optional displayName/inviteToken.
+     * @returns The token, its lifetime, the created user, and the invite's account (else `null`).
+     * @throws {ApiError} On any non-2xx, e.g. `409` when the email is taken.
+     */
+    async signup(input) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/auth/signup",
+            body: input,
+            requireAuth: false,
+        });
+        return res.body;
+    }
+    /**
+     * Check whether an account slug is free, and get free alternatives if not.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`). Advisory only: the unique index decides at create
+     * time, so a `409` from `createAccount` is a normal outcome, not a
+     * contradiction of what this returned.
+     *
+     * @param name - The slug (or candidate name) to check.
+     * @returns The server's normalization of `name`, whether it is available, and up to five alternatives.
+     * @throws {ApiError} On any non-2xx.
+     */
+    async checkAccountSlug(name) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/auth/signup/slug-available",
+            query: { name },
+            requireAuth: false,
+        });
+        return res.body;
+    }
+    /**
+     * Create an account for the caller and re-issue the session with its claim.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies. NOTE the returned
+     * token is minted `role: "user"` unconditionally (`id/auth.ts:112`), so
+     * adopting it downgrades an operator; this method never writes the session
+     * itself, the caller decides.
+     *
+     * @param name - The account's display name.
+     * @param slug - The account's slug.
+     * @returns The created account, a re-issued token carrying its claim, and the token's lifetime.
+     * @throws {ApiError} On any non-2xx, e.g. `409` when the slug is taken.
+     */
+    async createAccount(name, slug) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/accounts",
+            body: { name, slug },
+        });
+        return res.body;
+    }
+    /**
+     * Read the caller's identity **and its tenant-admin capability**.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies, unlike `login`,
+     * `signup` and `checkAccountSlug`. `/auth/me` reads the principal, so a
+     * request without a bearer is a `401`, and a tokenless client raises
+     * `ConfigError` before `fetch` is ever called.
+     *
+     * Same route as the base surface's `client.me()`; this one promises the
+     * console projection ({@linkcode ConsoleMe}) instead of the published `Me`.
+     * Unlike `client.me()` it does **not** fill in a `versions.wrapper` entry
+     * from this package's own `VERSION` (`../me.ts` does that): what this returns
+     * is the server's body, verbatim.
+     *
+     * @returns The caller's identity, plus `tenantAdmin`.
+     * @throws {ApiError} On any non-2xx, e.g. `401` when the bearer is missing or expired.
+     */
+    async getMe() {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/auth/me",
+        });
+        return res.body;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/src/console/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/console/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAwHH;;;;;;;;;;GAUG;AACH,MAAM,OAAO,OAAO;IACT,KAAK,CAAW;IAEzB;;OAEG;IACH,YAAY,IAAc;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,QAAgB;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB;YAClD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAC5B,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB;YACnD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2B;YAC7D,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE;YACf,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,IAAY;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB;YAC1D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY;YAC9C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}

package/dist/src/console/connections.d.ts

@@ -0,0 +1,188 @@
+/**
+ * `client.console.connections.*` — the app-catalog write surface for
+ * connections (list-for-app, get, create, update, test, delete), relocated
+ * from the studio's own API client.
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * **Console placement is a resolved HITL, not a default applied without
+ * thought — see `HITL-10` in `HITL.md` and `plan.md`'s SP2.3 section for the
+ * full investigation.** `endpoints.json`'s `outOfScope` entry for connections
+ * writes frames the eventual intent as a real partner operation, unlike
+ * `projects`/`schedules`/`apps`; the server routes this file wraps are plain,
+ * stateless handlers over an already-resolved payload for both real studio
+ * call sites, which makes console placement technically safe for studio's own
+ * use — it does not by itself justify promoting straight to the partner
+ * surface (cli/python lockstep; no partner-facing OAuth-flow counterpart
+ * exists yet either). Console placement is the pinned default here; partner
+ * promotion is deferred to a dedicated future project.
+ *
+ * **`listConnections` (base `client.connections.list()`,
+ * `../connections.ts:47-64`) is deliberately NOT relocated here** — it is the
+ * one method of the seven studio call sites that already has a home on the
+ * pre-existing BASE namespace; duplicating it under `console.connections`
+ * would give a caller two ways to reach the same route. See this task's
+ * contract Requirement.
+ *
+ * Six methods relocate from the studio's single `// Connections` comment block
+ * (`packages/studio/src/api/client.ts:252-298` on the studio base tree) —
+ * field-for-field, not redesigned.
+ *
+ * None of these methods take a `project` scoping parameter — connections carry
+ * no `?project=`, the server scopes by tenant/account from the credential
+ * alone — so `ConnectionsHost` needs only the transport, mirroring
+ * `VarsHost`/the base `ConnectionsHost`, not `DocumentsHost`.
+ *
+ * @module
+ */
+import { type HttpResponse, type RequestOptions } from "../http.ts";
+import { type ConnectionSummary } from "../types.ts";
+/**
+ * The slice of `W6wClient` this namespace needs: the transport, and nothing
+ * else. Structural rather than a concrete client type, so the namespace stays
+ * independently constructible in a test and this module never imports the
+ * client back — mirrors `VarsHost` in `../vars.ts`.
+ */
+export interface ConnectionsHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/**
+ * `test`'s result — the whole response body, no envelope key
+ * (`packages/server/packages/api/admin/connections.ts:151-190`). Three
+ * possible 200-status shapes:
+ *
+ * - `{ok: true, untested: true, message}` — no safe probe action exists for
+ *   this connection's app.
+ * - `{ok: true, actionKey}` — the probe action ran and passed.
+ * - `{ok: false, actionKey, error: {message}}` — the probe action ran and
+ *   failed. **Still a 200** — a failed test is data, never a raised error,
+ *   the same rule `client.run()`/`workflows.run()` already document for a
+ *   failed run.
+ *
+ * Only a genuine non-2xx (e.g. `404 unknown_connection`) raises `ApiError`.
+ */
+export interface ConnectionTestResult {
+    ok: boolean;
+    actionKey?: string;
+    untested?: boolean;
+    message?: string;
+    error?: {
+        message: string;
+    };
+}
+/**
+ * The `console.connections` namespace on a `W6wClient`.
+ *
+ * @example
+ * ```ts
+ * const conns = await client.console.connections.listForApp("sendgrid");
+ * const created = await client.console.connections.create("sendgrid", {
+ *   authKey: "apiKey",
+ *   credential: { key: "sk_live_…" },
+ * });
+ * const result = await client.console.connections.test(created.id);
+ * if (!result.ok) console.log(result.error?.message);
+ * await client.console.connections.delete(created.id);
+ * ```
+ */
+export declare class ConnectionsApi {
+    #private;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host: ConnectionsHost);
+    /**
+     * List an app's connections.
+     *
+     * @param appId - The app id.
+     * @returns The connections, unwrapped from the `connections` envelope.
+     * @throws {ApiError} `404 unknown_app` when there is no such app.
+     */
+    listForApp(appId: string): Promise<ConnectionSummary[]>;
+    /**
+     * Fetch one connection.
+     *
+     * No 404 special-casing — propagates as `ApiError` like every other "get"
+     * in this package except `console.schedules.get`, which has its own
+     * documented, unrelated exception.
+     *
+     * @param id - The `conn_…` id.
+     * @returns The connection, unwrapped from the `connection` envelope.
+     * @throws {ApiError} `404 unknown_connection` when there is no such id.
+     */
+    get(id: string): Promise<ConnectionSummary>;
+    /**
+     * Create a connection for an app.
+     *
+     * `credential` is opaque — forwarded verbatim, never inspected, logged, or
+     * transformed. This is a security-adjacent discipline, not a style note:
+     * the whole point of this field is a caller-opaque secret payload.
+     *
+     * @param appId - The app id.
+     * @param body - `authKey` selects the app's auth method; `credential` is
+     * the secret payload it needs; `displayName` and `profile` are optional.
+     * @returns The created connection, unwrapped from the `connection` envelope (the server answers `201`).
+     * @throws {ApiError} `400 invalid_auth_key`/`invalid_credential`; `404 unknown_app`.
+     */
+    create(appId: string, body: {
+        authKey: string;
+        credential: Record<string, unknown>;
+        displayName?: string;
+        profile?: Record<string, unknown>;
+    }): Promise<ConnectionSummary>;
+    /**
+     * Update a connection: rename it and/or replace its credential.
+     *
+     * `credential` is opaque — forwarded verbatim, never inspected, logged, or
+     * transformed, same discipline as {@linkcode create}. The body is sent
+     * exactly as given; this method does not pre-validate it — the server also
+     * validates "nothing to update" and answers `400 invalid_body` itself.
+     *
+     * @param id - The `conn_…` id.
+     * @param body - `displayName` and/or `credential`, forwarded verbatim.
+     * @returns The updated connection, unwrapped from the `connection` envelope.
+     * @throws {ApiError} `400 invalid_body` ("Nothing to update"); `404 unknown_connection`.
+     */
+    update(id: string, body: {
+        displayName?: string;
+        credential?: Record<string, unknown>;
+    }): Promise<ConnectionSummary>;
+    /**
+     * Probe a connection by running a safe read action of its app.
+     *
+     * **No envelope key — the whole body IS the result**, mirroring
+     * `console.reliability.list`'s pattern. A failed probe (`ok: false`) is
+     * still a `200` and resolves normally; this method never throws on it — the
+     * same rule `client.run()`/`workflows.run()` already document: a failed
+     * run (here, a failed test) is data. Only a genuine non-2xx (e.g.
+     * `404 unknown_connection`) raises `ApiError`. See {@linkcode ConnectionTestResult}.
+     *
+     * @param id - The `conn_…` id.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} `404 unknown_connection` when there is no such id.
+     */
+    test(id: string): Promise<ConnectionTestResult>;
+    /**
+     * Delete a connection.
+     *
+     * Returns nothing: the server's `{ok: true}` carries no information a
+     * caller can use, mirroring `console.projects.delete`/
+     * `console.schedules.delete` in this same package (NOT
+     * `console.apps.delete`, which is the one documented exception, preserving
+     * a genuinely informative `{removed: number}`) — connections delete has no
+     * such value to preserve.
+     *
+     * @param id - The `conn_…` id.
+     * @throws {ApiError} `404 unknown_connection` when there is no such id.
+     */
+    delete(id: string): Promise<void>;
+}
+//# sourceMappingURL=connections.d.ts.map

package/dist/src/console/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../../../src/console/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,KAAK,iBAAiB,EAAU,MAAM,aAAa,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;;OAMG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAQ7D;;;;;;;;;;OAUG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQjD;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;QACJ,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACnC,GACA,OAAO,CAAC,iBAAiB,CAAC;IAS7B;;;;;;;;;;;;OAYG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GACnE,OAAO,CAAC,iBAAiB,CAAC;IAS7B;;;;;;;;;;;;;OAaG;IACG,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAQrD;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC"}

package/dist/src/console/connections.js

@@ -0,0 +1,182 @@
+/**
+ * `client.console.connections.*` — the app-catalog write surface for
+ * connections (list-for-app, get, create, update, test, delete), relocated
+ * from the studio's own API client.
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * **Console placement is a resolved HITL, not a default applied without
+ * thought — see `HITL-10` in `HITL.md` and `plan.md`'s SP2.3 section for the
+ * full investigation.** `endpoints.json`'s `outOfScope` entry for connections
+ * writes frames the eventual intent as a real partner operation, unlike
+ * `projects`/`schedules`/`apps`; the server routes this file wraps are plain,
+ * stateless handlers over an already-resolved payload for both real studio
+ * call sites, which makes console placement technically safe for studio's own
+ * use — it does not by itself justify promoting straight to the partner
+ * surface (cli/python lockstep; no partner-facing OAuth-flow counterpart
+ * exists yet either). Console placement is the pinned default here; partner
+ * promotion is deferred to a dedicated future project.
+ *
+ * **`listConnections` (base `client.connections.list()`,
+ * `../connections.ts:47-64`) is deliberately NOT relocated here** — it is the
+ * one method of the seven studio call sites that already has a home on the
+ * pre-existing BASE namespace; duplicating it under `console.connections`
+ * would give a caller two ways to reach the same route. See this task's
+ * contract Requirement.
+ *
+ * Six methods relocate from the studio's single `// Connections` comment block
+ * (`packages/studio/src/api/client.ts:252-298` on the studio base tree) —
+ * field-for-field, not redesigned.
+ *
+ * None of these methods take a `project` scoping parameter — connections carry
+ * no `?project=`, the server scopes by tenant/account from the credential
+ * alone — so `ConnectionsHost` needs only the transport, mirroring
+ * `VarsHost`/the base `ConnectionsHost`, not `DocumentsHost`.
+ *
+ * @module
+ */
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * The `console.connections` namespace on a `W6wClient`.
+ *
+ * @example
+ * ```ts
+ * const conns = await client.console.connections.listForApp("sendgrid");
+ * const created = await client.console.connections.create("sendgrid", {
+ *   authKey: "apiKey",
+ *   credential: { key: "sk_live_…" },
+ * });
+ * const result = await client.console.connections.test(created.id);
+ * if (!result.ok) console.log(result.error?.message);
+ * await client.console.connections.delete(created.id);
+ * ```
+ */
+export class ConnectionsApi {
+    #host;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host) {
+        this.#host = host;
+    }
+    /**
+     * List an app's connections.
+     *
+     * @param appId - The app id.
+     * @returns The connections, unwrapped from the `connections` envelope.
+     * @throws {ApiError} `404 unknown_app` when there is no such app.
+     */
+    async listForApp(appId) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${appId}/connections`,
+        });
+        return unwrap(res, "connections");
+    }
+    /**
+     * Fetch one connection.
+     *
+     * No 404 special-casing — propagates as `ApiError` like every other "get"
+     * in this package except `console.schedules.get`, which has its own
+     * documented, unrelated exception.
+     *
+     * @param id - The `conn_…` id.
+     * @returns The connection, unwrapped from the `connection` envelope.
+     * @throws {ApiError} `404 unknown_connection` when there is no such id.
+     */
+    async get(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/connections/${id}`,
+        });
+        return unwrap(res, "connection");
+    }
+    /**
+     * Create a connection for an app.
+     *
+     * `credential` is opaque — forwarded verbatim, never inspected, logged, or
+     * transformed. This is a security-adjacent discipline, not a style note:
+     * the whole point of this field is a caller-opaque secret payload.
+     *
+     * @param appId - The app id.
+     * @param body - `authKey` selects the app's auth method; `credential` is
+     * the secret payload it needs; `displayName` and `profile` are optional.
+     * @returns The created connection, unwrapped from the `connection` envelope (the server answers `201`).
+     * @throws {ApiError} `400 invalid_auth_key`/`invalid_credential`; `404 unknown_app`.
+     */
+    async create(appId, body) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/apps/${appId}/connections`,
+            body,
+        });
+        return unwrap(res, "connection");
+    }
+    /**
+     * Update a connection: rename it and/or replace its credential.
+     *
+     * `credential` is opaque — forwarded verbatim, never inspected, logged, or
+     * transformed, same discipline as {@linkcode create}. The body is sent
+     * exactly as given; this method does not pre-validate it — the server also
+     * validates "nothing to update" and answers `400 invalid_body` itself.
+     *
+     * @param id - The `conn_…` id.
+     * @param body - `displayName` and/or `credential`, forwarded verbatim.
+     * @returns The updated connection, unwrapped from the `connection` envelope.
+     * @throws {ApiError} `400 invalid_body` ("Nothing to update"); `404 unknown_connection`.
+     */
+    async update(id, body) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: path `/connections/${id}`,
+            body,
+        });
+        return unwrap(res, "connection");
+    }
+    /**
+     * Probe a connection by running a safe read action of its app.
+     *
+     * **No envelope key — the whole body IS the result**, mirroring
+     * `console.reliability.list`'s pattern. A failed probe (`ok: false`) is
+     * still a `200` and resolves normally; this method never throws on it — the
+     * same rule `client.run()`/`workflows.run()` already document: a failed
+     * run (here, a failed test) is data. Only a genuine non-2xx (e.g.
+     * `404 unknown_connection`) raises `ApiError`. See {@linkcode ConnectionTestResult}.
+     *
+     * @param id - The `conn_…` id.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} `404 unknown_connection` when there is no such id.
+     */
+    async test(id) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/connections/${id}/test`,
+        });
+        return res.body;
+    }
+    /**
+     * Delete a connection.
+     *
+     * Returns nothing: the server's `{ok: true}` carries no information a
+     * caller can use, mirroring `console.projects.delete`/
+     * `console.schedules.delete` in this same package (NOT
+     * `console.apps.delete`, which is the one documented exception, preserving
+     * a genuinely informative `{removed: number}`) — connections delete has no
+     * such value to preserve.
+     *
+     * @param id - The `conn_…` id.
+     * @throws {ApiError} `404 unknown_connection` when there is no such id.
+     */
+    async delete(id) {
+        await this.#host.request({ method: "DELETE", path: path `/connections/${id}` });
+    }
+}
+//# sourceMappingURL=connections.js.map

package/dist/src/console/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../../src/console/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAA0B,MAAM,EAAE,MAAM,aAAa,CAAC;AAoC7D;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,cAAc;SACvC,CAAC,CAAC;QACH,OAAO,MAAM,CAAsB,GAAG,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,gBAAgB,EAAE,EAAE;SAC/B,CAAC,CAAC;QACH,OAAO,MAAM,CAAoB,GAAG,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,IAKC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,cAAc;YACtC,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAoB,GAAG,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CACV,EAAU,EACV,IAAoE;QAEpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,IAAI,CAAA,gBAAgB,EAAE,EAAE;YAC9B,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAoB,GAAG,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB;YACzD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,gBAAgB,EAAE,OAAO;SACpC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAA,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;CACF"}

package/dist/src/console/dashboard.d.ts

@@ -0,0 +1,102 @@
+/**
+ * `client.console.dashboard.*` — the account-scoped dashboard rollup,
+ * relocated from the studio's own API client.
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * One operation: `stats`, `GET /dashboard/stats`. AUTHENTICATED — the account
+ * is derived server-side from the principal (`admin/dashboard.ts:44-96`), so
+ * this uses the default, unconditional `requireAuth` (HITL-9); the client
+ * never sends an account. Unlike `client.documents.*` and `client.vars.*`,
+ * the response carries **no envelope key** — the `DashboardStats`-shaped
+ * object IS the top-level response body (`admin/dashboard.ts:90-95`, which
+ * answers `c.json({range, headline, series, recent})`), so `stats` returns
+ * `res.body` directly and never calls this package's `unwrap()` helper.
+ *
+ * @module
+ */
+import type { HttpResponse, RequestOptions } from "../http.ts";
+/**
+ * The slice of `W6wClient` this namespace needs: the transport, and nothing
+ * else. Structural rather than a concrete client type, so the namespace stays
+ * independently constructible in a test and this module never imports the
+ * client back — mirrors `ReliabilityHost` in `./reliability.ts`.
+ */
+export interface DashboardHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/** Optional window/bucketing for `stats`. Omitted fields fall back to the server's own defaults. */
+export interface DashboardStatsParams {
+    from?: string;
+    to?: string;
+    bucket?: "day" | "week";
+}
+/**
+ * Account-scoped dashboard rollup over the `run_log` ledger (server `GET
+ * /dashboard/stats`). A free-form fetch seam, so this shape mirrors the
+ * server envelope field for field — relocated verbatim from
+ * `packages/studio/src/api/client.ts:189-197` rather than redesigned. The
+ * account is derived server-side from the session; the client never sends
+ * one. The `series` array is the charts-later seam (a flat payload the studio
+ * slices client-side; no chart dependency).
+ */
+export interface DashboardStats {
+    range: {
+        from: string;
+        to: string;
+        bucket: "day" | "week";
+    };
+    headline: {
+        workflowRuns: number;
+        succeeded: number;
+        failed: number;
+    };
+    series: Array<{
+        bucket: string;
+        kind: string;
+        ok: boolean | null;
+        count: number;
+    }>;
+    recent: Array<{
+        id: string;
+        kind: string;
+        ok: boolean | null;
+        summary: string | null;
+        occurredAt: string;
+        workflowId: string | null;
+    }>;
+}
+/**
+ * The `console.dashboard` namespace on a `W6wClient`.
+ *
+ * @example
+ * ```ts
+ * const rollup = await client.console.dashboard.stats({ bucket: "week" });
+ * ```
+ */
+export declare class DashboardApi {
+    #private;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host: DashboardHost);
+    /**
+     * Fetch the account-scoped dashboard rollup.
+     *
+     * @param params - Optional `from`/`to`/`bucket`; each is forwarded as a
+     * query parameter when given, and omitted from the query string entirely
+     * when not (the server applies its own defaults).
+     * @returns The rollup, exactly as the server sent it — no envelope key to peel.
+     * @throws {ApiError} On any non-2xx.
+     */
+    stats(params?: DashboardStatsParams): Promise<DashboardStats>;
+}
+//# sourceMappingURL=dashboard.d.ts.map

package/dist/src/console/dashboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.d.ts","sourceRoot":"","sources":["../../../src/console/dashboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,oGAAoG;AACpG,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAA;KAAE,CAAC;IAC5D,QAAQ,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,MAAM,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,MAAM,EAAE,KAAK,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC,CAAC;CACJ;AAED;;;;;;;GAOG;AACH,qBAAa,YAAY;;IAGvB;;OAEG;gBACS,IAAI,EAAE,aAAa;IAI/B;;;;;;;;OAQG;IACG,KAAK,CAAC,MAAM,GAAE,oBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;CAQxE"}