@w6w/sdk 0.3.0 → 0.5.0

package/dist/src/console/apps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.d.ts","sourceRoot":"","sources":["../../../src/console/apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/B;AAED,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0FAA0F;IAC1F,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;;;;OAUG;IACH,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,4FAA4F;AAC5F,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAChG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAAC;AAE5F;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB;IACA,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB,GACC;IACA,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,KAAK,CACV;QACA,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,IAAI,CAAC;QACT,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,OAAO,CAAC;QACpB,cAAc,EAAE,OAAO,CAAC;KACzB,GACC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAC3F,CAAC;CACH,CAAC;AAEJ;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,uFAAuF;IACvF,MAAM,EAAE,OAAO,CAAC;IAChB,wFAAwF;IACxF,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,YAAY,CAAC;AAC3E,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,YAAY,CAAC;AAC/C,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,eAAe,CAAC;AAEpE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,0FAA0F;IAC1F,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAClC;AAED,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iGAAiG;AACjG,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,WAAW,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,WAAW,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,2DAA2D;AAC3D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAQD;;;;;;;;;GASG;AACH,qBAAa,OAAO;;IAGlB;;OAEG;gBACS,IAAI,EAAE,QAAQ;IAI1B;;;;;;;;;;;;OAYG;IACG,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAgBnC;;;;;;OAMG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAQzC;;;;;;;OAOG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAQ7C;;;;;;;;;;OAUG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQlD;;;;;;OAMG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAQpD;;;;;;;;;;;;OAYG;IACG,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAQvD;;;;;;OAMG;IACG,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAQ3D;;;;;;;;;OASG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAQnE;;;;;;;;;;;OAWG;IACG,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,kBAAkB,CAAC;IAS9B;;;;;;;;;;;;OAYG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtE;;;;;;;;;;;;;OAaG;IACG,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GAClC,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAa1E;;;;;;;;;;;OAWG;IACG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAS/F;;;;;;;;;OASG;IACG,MAAM,CACV,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GACjD,OAAO,CAAC,cAAc,CAAC;IAa1B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAStF;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;KAAE,CAAC;IAa3E;;;;;;;;;;;;;OAaG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAO1D"}

package/dist/src/console/apps.js

@@ -0,0 +1,402 @@
+/**
+ * `client.console.apps.*` — the app catalog (install, inspect, invoke,
+ * per-installation OAuth config), relocated from the studio's own API
+ * client.
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * **The largest single domain in this project** — 16 methods, relocated from
+ * `packages/studio/src/api/client.ts`'s single `// Apps` comment block
+ * (`client.ts:235-393` on the studio base tree). Method names below are
+ * SHORTENED (dropping the `App`/`Apps` prefix `client.ts`'s flat method names
+ * carry) to match `console.projects`'s/`console.schedules`'s own short-verb
+ * convention — a naming-only change: every wire call (method/path/body/query)
+ * is unchanged.
+ *
+ * **`listApiCalls` is deliberately NOT modeled here** — it lives under the
+ * same `client.ts` comment block but has no named apps-domain consumer (its
+ * only caller is reliability's drill-down page); it groups with a future
+ * `reliability`+`api-calls` sub-project instead. See this task's contract
+ * Requirement and `plan.md`'s FINDINGS DISPOSITION.
+ *
+ * **Two live server routes with zero client-side coverage ever are also
+ * excluded**: `DELETE /apps/:id/versions/:version` and
+ * `PATCH /apps/:id/lifecycle` — both `requireOperator`-gated, neither was ever
+ * wrapped in `client.ts` at all (not just zero callers). `requireOperator`
+ * otherwise has no bearing on this file: access control is unaffected by this
+ * relocation — every route reachable through `console.*` (this domain
+ * included) requires only an authenticated principal client-side, and the
+ * console/partner split is a naming and export-surface fence, not an
+ * authorization boundary. The methods below that DO happen to hit a
+ * `requireOperator` route server-side (`listOAuthConfig`,
+ * `upsertOAuthConfig`, `deleteOAuthConfig`, `preview`, `refresh`) still send
+ * the request the same way as every other method here; a non-operator caller
+ * simply gets a `403` back from the server like any other `ApiError`.
+ *
+ * **Four methods are HITL-4 dead code** — `getHealth`, `listOAuthConfig`,
+ * `upsertOAuthConfig`, `deleteOAuthConfig` have zero call sites anywhere in
+ * studio or `@w6w/ui`. They are still built to full type fidelity (real
+ * implementation, JSDoc, `@throws`) for SDK/wrapper coverage; only the test
+ * bar for them is deliberately lighter.
+ *
+ * **`delete`'s return value is a deliberate asymmetry** vs. `projects.delete`
+ * and `schedules.delete` in this same package: those two discard the server's
+ * uninformative `{ok: true}` and resolve `void`. This app-catalog delete does
+ * NOT — the server answers `{removed: number}`, a genuinely informative count
+ * (`apps-catalog.ts:646-651`), and this method preserves it instead of
+ * "fixing" it to match the other two.
+ *
+ * None of these 16 methods take a `project` scoping parameter — apps operate
+ * at the account/global level — so `AppsHost` needs only the transport,
+ * mirroring `VarsHost`/`ProjectsHost`, not `DocumentsHost`.
+ *
+ * @module
+ */
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * The `console.apps` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * const apps = await client.console.apps.list();
+ * const detail = await client.console.apps.get(apps[0].id);
+ * const result = await client.console.apps.invoke(detail.app.id as string, "send", { to: "a@b.com" });
+ * ```
+ */
+export class AppsApi {
+    #host;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host) {
+        this.#host = host;
+    }
+    /**
+     * List every registered app the caller can see.
+     *
+     * Every consumer treats this as the complete catalog with no "load more"
+     * UI, so this method fetches every page itself — a bare `GET /apps` only
+     * returns the server's default page and would silently hide anything past
+     * it. Capped at 20 pages (~4000 apps at the 200-per-page size) as a runaway
+     * backstop, not an expected limit; relocated verbatim from
+     * `client.ts:244-256`.
+     *
+     * @returns Every app summary across all pages, in the order the server sent them.
+     * @throws {ApiError} On any non-2xx.
+     */
+    async list() {
+        const apps = [];
+        let cursor;
+        for (let page = 0; page < 20; page++) {
+            const res = await this.#host.request({
+                method: "GET",
+                path: "/apps",
+                query: { limit: 200, cursor },
+            });
+            apps.push(...res.body.apps);
+            if (!res.body.nextCursor)
+                break;
+            cursor = res.body.nextCursor;
+        }
+        return apps;
+    }
+    /**
+     * Fetch one registered app's detail (latest manifest + actions + overlay).
+     *
+     * @param id - The app id.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async get(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${id}`,
+        });
+        return res.body;
+    }
+    /**
+     * List an app's auth methods, annotated with `available` and any
+     * `requiresHostConfig` fields.
+     *
+     * @param id - The app id.
+     * @returns The auth methods, unwrapped from the `auths` envelope.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async getAuth(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${id}/auths`,
+        });
+        return unwrap(res, "auths");
+    }
+    /**
+     * Fetch an app's declared actions.
+     *
+     * Sourced from the app detail's `actions` array — a separate call from
+     * {@linkcode get}, relocated verbatim from `client.ts:268-271` rather than
+     * refactored to call `get` internally.
+     *
+     * @param id - The app id.
+     * @returns The declared actions; `[]` when the app declares none.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async getActions(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${id}`,
+        });
+        return res.body.actions ?? [];
+    }
+    /**
+     * List an app's declared triggers.
+     *
+     * @param id - The app id.
+     * @returns The declared triggers, unwrapped from the `triggers` envelope.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async getTriggers(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${id}/triggers`,
+        });
+        return unwrap(res, "triggers");
+    }
+    /**
+     * Fetch an app's declared health-check metadata.
+     *
+     * **Dead code (HITL-4)** — zero call sites anywhere in studio or
+     * `@w6w/ui`. Built for SDK completeness only; see this module's header.
+     * Sourced from the app detail's `health` array — a separate call from
+     * {@linkcode get}, relocated verbatim from `client.ts:278-281` rather than
+     * refactored to call `get` internally.
+     *
+     * @param id - The app id.
+     * @returns The declared health checks; `[]` when the app declares none.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async getHealth(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${id}`,
+        });
+        return res.body.health ?? [];
+    }
+    /**
+     * Run an app's PUBLIC health checks and return the live verdict.
+     *
+     * @param id - The app id.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async getHealthStatus(id) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${id}/health`,
+        });
+        return res.body;
+    }
+    /**
+     * List every stored per-installation OAuth config summary for an app (no secrets).
+     *
+     * **Dead code (HITL-4)** — zero call sites anywhere in studio or
+     * `@w6w/ui`. Built for SDK completeness only; see this module's header.
+     *
+     * @param appId - The app id.
+     * @returns The configs, unwrapped from the `configs` envelope.
+     * @throws {ApiError} `404 unknown_app` when there is no such id.
+     */
+    async listOAuthConfig(appId) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/apps/${appId}/oauth-config`,
+        });
+        return unwrap(res, "configs");
+    }
+    /**
+     * Upsert the OAuth client credentials for one (app, auth method).
+     *
+     * **Dead code (HITL-4)** — zero call sites anywhere in studio or
+     * `@w6w/ui`. Built for SDK completeness only; see this module's header.
+     *
+     * @param appId - The app id.
+     * @param authKey - The oauth2 auth method's key, as declared by the app's manifest.
+     * @param body - The client credentials, forwarded verbatim.
+     * @returns The stored config summary (the server answers `201`).
+     * @throws {ApiError} `404 unknown_app`/`unknown_auth`; `400 invalid_auth_type`/`invalid_body`.
+     */
+    async upsertOAuthConfig(appId, authKey, body) {
+        const res = await this.#host.request({
+            method: "PUT",
+            path: path `/apps/${appId}/oauth-config/${authKey}`,
+            body,
+        });
+        return unwrap(res, "config");
+    }
+    /**
+     * Remove the stored OAuth client credentials for one (app, auth method).
+     *
+     * **Dead code (HITL-4)** — zero call sites anywhere in studio or
+     * `@w6w/ui`. Built for SDK completeness only; see this module's header.
+     * Returns nothing: the server's `{ok: true}` carries no information a
+     * caller can use, mirroring `documents.ts`'s/`projects.ts`'s established
+     * delete convention.
+     *
+     * @param appId - The app id.
+     * @param authKey - The oauth2 auth method's key.
+     * @throws {ApiError} `404 unknown_oauth_config` when there is no such config.
+     */
+    async deleteOAuthConfig(appId, authKey) {
+        await this.#host.request({
+            method: "DELETE",
+            path: path `/apps/${appId}/oauth-config/${authKey}`,
+        });
+    }
+    /**
+     * Kick off an OAuth 2.0 flow: the server builds the provider's authorize
+     * URL for the caller to open.
+     *
+     * No studio-page caller, but this method's shape must exactly match
+     * `W6WApi.startAppOAuthFlow`'s signature on the `@w6w/ui` facade
+     * (`packages/ui/src/provider.tsx:110-114`), which calls it.
+     *
+     * @param appId - The app id.
+     * @param authKey - The oauth2 auth method's key, as declared by the app's manifest.
+     * @param body - Optional display name for the resulting connection; omitted fields are left to the server.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} `404 unknown_app`/`unknown_auth`; `400 invalid_auth_type`; `409 oauth_not_configured`.
+     */
+    async startOAuthFlow(appId, authKey, body = {}) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/apps/${appId}/oauth-config/${authKey}/authorize-url`,
+            body,
+        });
+        return res.body;
+    }
+    /**
+     * Peek what installing a source ref would touch, without persisting
+     * anything. Distinguishes a single-app ref from a pack ref, and (for a
+     * pack) previews each entry for a checkbox picker.
+     *
+     * @param source - A source ref (e.g. `github:org/repo`, `file:./local-app`).
+     * @param opts - `refresh: true` busts the sources cache — needed for a
+     * moving GitHub pointer (`@main`, `@HEAD`, or no `@ref`) whenever the
+     * remote has advanced since the last fetch.
+     * @returns The whole response body — a `kind`-discriminated union, no envelope key to peel.
+     * @throws {ApiError} `400 invalid_source` and whatever the source resolution itself raises.
+     */
+    async preview(source, opts = {}) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/apps/preview",
+            body: { source, ...(opts.refresh ? { refresh: true } : {}) },
+        });
+        return res.body;
+    }
+    /**
+     * Install a single app or a pack from a source ref.
+     *
+     * @param source - A source ref (e.g. `github:org/repo`, `file:./local-app`).
+     * @param opts - `paths` (pack refs only) limits which entries are
+     * installed — omitted, every entry is installed. `refresh: true` busts the
+     * sources cache (see {@linkcode preview}).
+     * @returns The whole response body — a `kind`-discriminated union, no envelope key to peel.
+     * @throws {ApiError} `400 invalid_source`; `403 user_import_disabled`/`local_import_forbidden` for a non-operator.
+     */
+    async import(source, opts = {}) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/apps/import",
+            body: {
+                source,
+                ...(opts.paths ? { paths: opts.paths } : {}),
+                ...(opts.refresh ? { refresh: true } : {}),
+            },
+        });
+        return res.body;
+    }
+    /**
+     * Re-resolve an already-registered app from its recorded source ref and
+     * re-register it (operator-only server-side — non-operators get a `403`).
+     *
+     * @param id - The app id.
+     * @param opts - `force: true` busts the sources cache ("Reload"); the
+     * server ignores unknown fields, so `force` is harmless until server-side
+     * handling for it lands.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} `404 unknown_app`; `403` for a non-operator.
+     */
+    async refresh(id, opts = {}) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/apps/${id}/refresh`,
+            body: opts.force ? { force: true } : {},
+        });
+        return res.body;
+    }
+    /**
+     * Invoke one of an app's actions.
+     *
+     * This method's shape must exactly match `W6WApi.invokeAction`'s signature on
+     * the `@w6w/ui` facade (`packages/ui/src/provider.tsx`). It now models the
+     * WHOLE of that `opts` — `project` and `state` included.
+     *
+     * **They are not decoration, and modelling only `connectionId` was a live
+     * bug.** `params` may contain unresolved `ExprValue` envelopes, which the
+     * server resolves against an ambient scope built from exactly these two
+     * fields (`invoke.ts` → `buildAmbientScope`): `state` seeds
+     * `steps.<id>.output` and `trigger.event`, `project` chooses which project's
+     * vars and documents are in scope. Dropped, every
+     * `{{ steps.<id>.output.<field> }}` in a step test resolves to the empty
+     * string and the action fails on a required param it was visibly given — the
+     * editor's own preview resolves locally and shows the right value, so the
+     * failure reads as an app bug rather than a lost field.
+     *
+     * @param appId - The app id.
+     * @param actionKey - The action's key, as declared by the app's manifest.
+     * @param params - The action's parameters, forwarded verbatim.
+     * @param opts - `connectionId` to run with (omitted, the server picks);
+     *   `project` to scope vars/documents to; `state` to resolve upstream
+     *   references against.
+     * @returns The whole response body — no envelope key to peel.
+     * @throws {ApiError} On any non-2xx, including an action's own failure (`424`).
+     */
+    async invoke(appId, actionKey, params, opts = {}) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/apps/${appId}/actions/${actionKey}/invoke`,
+            body: { params, ...opts },
+        });
+        return res.body;
+    }
+    /**
+     * Unregister an app (all versions by default).
+     *
+     * **Returns the server's real value, unlike `projects.delete`/`schedules.delete`
+     * in this same package** — the server answers `{removed: number}`, a
+     * genuinely informative count (`apps-catalog.ts:646-651`), and this method
+     * preserves it rather than discarding it to `void`. This is the one
+     * deliberate asymmetry vs. this package's other two `delete` conventions;
+     * see this module's header.
+     *
+     * @param appId - The app id.
+     * @returns `{removed}` — how many versions were unregistered.
+     * @throws {ApiError} `404 unknown_app`; `403 forbidden` when a non-operator does not own the app.
+     */
+    async delete(appId) {
+        const res = await this.#host.request({
+            method: "DELETE",
+            path: path `/apps/${appId}`,
+        });
+        return res.body;
+    }
+}
+//# sourceMappingURL=apps.js.map

package/dist/src/console/apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps.js","sourceRoot":"","sources":["../../../src/console/apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAiYrC;;;;;;;;;GASG;AACH,MAAM,OAAO,OAAO;IACT,KAAK,CAAW;IAEzB;;OAEG;IACH,YAAY,IAAc;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,GAAiB,EAAE,CAAC;QAC9B,IAAI,MAA0B,CAAC;QAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAW;gBAC7C,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE;aAC9B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM;YAChC,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY;YAC9C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,QAAQ;SAC9B,CAAC,CAAC;QACH,OAAO,MAAM,CAAY,GAAG,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY;YAC9C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,WAAW;SACjC,CAAC,CAAC;QACH,OAAO,MAAM,CAAe,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,SAAS,CAAC,EAAU;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY;YAC9C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,EAAU;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB;YACpD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,SAAS;SAC/B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,eAAe,CAAC,KAAa;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,eAAe;SACxC,CAAC,CAAC;QACH,OAAO,MAAM,CAAuB,GAAG,EAAE,SAAS,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,OAAe,EACf,IAA4B;QAE5B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,iBAAiB,OAAO,EAAE;YAClD,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAqB,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAa,EAAE,OAAe;QACpD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,iBAAiB,OAAO,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,OAAe,EACf,OAAiC,EAAE;QAEnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAGlC;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,iBAAiB,OAAO,gBAAgB;YAChE,IAAI;SACL,CACF,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,OAA8B,EAAE;QAC5D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB;YAC1D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAC7D,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CACV,MAAc,EACd,OAAgD,EAAE;QAElD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAiB;YACnD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE;gBACJ,MAAM;gBACN,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C;SACF,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAA4B,EAAE;QACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAqB;YACvD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,SAAS,EAAE,UAAU;YAC/B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SACxC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,KAAK,CAAC,MAAM,CACV,KAAa,EACb,SAAiB,EACjB,MAA+B,EAC/B,OAAsB,EAAE;QAExB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAGlC;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,YAAY,SAAS,SAAS;YACtD,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE;SAC1B,CACF,CAAC;QACF,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAA,SAAS,KAAK,EAAE;SAC3B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}

package/dist/src/console/auth.d.ts

@@ -0,0 +1,241 @@
+/**
+ * `client.console.auth.*` — self-serve login and signup, relocated from the
+ * studio's own API client.
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * **The public/authenticated split is per-method, not per-file.** `login`,
+ * `signup` and `checkAccountSlug` are registered server-side ABOVE
+ * `app.use("*", authGuard)` (`packages/server/packages/api/data/signup.ts:23-41`
+ * and `id/auth.ts:22-55`) and must never read a principal — any bearer a
+ * caller sends is inert on these three routes, so each passes
+ * `requireAuth: false` and the transport never even attempts to attach one
+ * (`../http.ts`, HITL-9). `createAccount` is the authenticated counterpart
+ * (`id/signup.ts:33-78`) and uses the default, unconditional `requireAuth`.
+ * `login` is how a caller gets a token in the first place — without
+ * `requireAuth: false` it could never be called by a tokenless client, since
+ * `requireToken` would raise before the request ever reached `fetch`.
+ *
+ * **`getMe` IS modeled here now — that changed, and this is why.** This file
+ * previously said it was deliberately not modeled, because `client.me()`
+ * (`../me.ts`, base surface) covered `GET /auth/me` exactly. It no longer does.
+ * The route answers additively with a **studio-internal capability field**,
+ * `tenantAdmin` (`plan-B.md` § WIRE PINS W1/W9), and the published `Me`
+ * (`../types.ts:104-123`) deliberately does not carry it: `Me` is part of the
+ * published partner contract — `endpoints.json` names it as the `me`
+ * operation's `returns` — so declaring a field there would be a
+ * publish-in-lockstep change across every language wrapper (CLAUDE.md), for
+ * what is a studio-only authorization hint. The console surface is exactly the
+ * place a studio-only projection belongs, so the capability is typed on
+ * {@linkcode ConsoleMe} instead, and `client.me()` stays untouched and keeps
+ * returning the published shape. Both read the same route; they differ only in
+ * what they promise about the body.
+ *
+ * **Response shapes are flat, no envelope key**, mirroring
+ * `console/reliability.ts`'s own pattern (verified against the server route
+ * handlers, not assumed) — every method here returns `res.body` directly and
+ * never calls this package's `unwrap()` helper.
+ *
+ * @module
+ */
+import type { HttpResponse, RequestOptions } from "../http.ts";
+/**
+ * The slice of `W6WClient` this namespace needs: the transport, and nothing
+ * else. Structural rather than a concrete client type, so the namespace stays
+ * independently constructible in a test and this module never imports the
+ * client back — mirrors `ReliabilityHost` in `./reliability.ts`.
+ */
+export interface AuthHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/** The authenticated user, as `POST /auth/login` returns it (`id/auth.ts:49-53`). */
+export interface User {
+    username: string;
+}
+/** `POST /auth/login` → 200 (`id/auth.ts:49-53`). */
+export interface LoginResponse {
+    token: string;
+    user: User;
+    expiresIn: number;
+}
+/** The signed-up user, as `POST /auth/signup` returns it (`data/signup.ts:147-152`). */
+export interface SignupUser {
+    id: string;
+    email: string;
+    displayName: string;
+    /** Derived server-side from `email_verified_at`; signup never waits on it. */
+    emailVerified: boolean;
+    tenant: string;
+}
+/** An account, as the signup family returns it (`data/signup.ts` / `id/signup.ts`). */
+export interface AccountWire {
+    id: string;
+    tenant: string;
+    name: string;
+    slug: string;
+    status: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** The body `signup` sends. `inviteToken` is accepted server-side (`data/signup.ts:129-134`)
+ * even though the studio's own client never sends it — modeled here for a future caller. */
+export interface SignupInput {
+    email: string;
+    password: string;
+    displayName?: string;
+    inviteToken?: string;
+}
+/**
+ * `POST /auth/signup` → 201 (`data/signup.ts:147-152`). `account` is the
+ * invite's account, else `null` — a signup with no `inviteToken` always gets
+ * `null` here.
+ */
+export interface SignupResponse {
+    token: string;
+    expiresIn: number;
+    user: SignupUser;
+    account: AccountWire | null;
+}
+/** `GET /auth/signup/slug-available?name=` → 200 (`data/signup.ts:170`). */
+export interface SlugAvailabilityResponse {
+    slug: string;
+    available: boolean;
+    suggestions: string[];
+}
+/** `POST /accounts` → 201 (`id/signup.ts:69-73`). The token re-issues the session
+ * with the new account's claim on it. */
+export interface CreateAccountResponse {
+    account: AccountWire;
+    token: string;
+    expiresIn: number;
+}
+/**
+ * `GET /auth/me` as the console reads it (W1/W9) — a **superset** of the
+ * published `Me` (`../types.ts:104-123`), carrying the studio-internal
+ * capability field that shape deliberately does not declare. See this module's
+ * header for why the field lives here and not there.
+ *
+ * The published contract already requires clients to tolerate unknown keys on
+ * this route, so widening it server-side broke no partner; this type simply
+ * names one of those keys for the one client that acts on it.
+ */
+export interface ConsoleMe {
+    /** Tenant the caller belongs to. */
+    tenant: string;
+    /** The authenticated subject (a user or a machine principal). */
+    subject: string;
+    /** Account the caller is acting in. */
+    account: string;
+    /** The caller's role within that account. */
+    role: string;
+    /** The base callable URLs are rendered against. Present on this host; do not derive URLs from it. */
+    invokeBaseUrl?: string;
+    /**
+     * Server-decided: may this caller administer its tenant? Studio-internal;
+     * not on the published `Me`.
+     *
+     * **Required, not optional, on purpose.** A client forced to branch on
+     * `undefined` is a client that will branch wrong; an older server that omits
+     * the key yields `undefined` at runtime, which is falsy, so every
+     * `if (me.tenantAdmin)` fails CLOSED — the capability is denied, never
+     * accidentally granted.
+     */
+    tenantAdmin: boolean;
+    /** Component versions, as the published `Me` documents them. Optional and open. */
+    versions?: Record<string, string>;
+}
+/**
+ * The `console.auth` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * const { token } = await client.console.auth.login("user", "pass");
+ * const me = await client.console.auth.getMe();
+ * if (me.tenantAdmin) { // tenant-admin surface
+ * }
+ * ```
+ */
+export declare class AuthApi {
+    #private;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host: AuthHost);
+    /**
+     * Authenticate with the configured credential and mint a session token.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`).
+     *
+     * @param username - The account username.
+     * @param password - The account password.
+     * @returns The token, the caller's identity, and the token's lifetime.
+     * @throws {ApiError} On any non-2xx, e.g. `401` for invalid credentials.
+     */
+    login(username: string, password: string): Promise<LoginResponse>;
+    /**
+     * Self-serve signup: creates the user and mints a `role: "user"` session.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`).
+     *
+     * @param input - Email, password, and the optional displayName/inviteToken.
+     * @returns The token, its lifetime, the created user, and the invite's account (else `null`).
+     * @throws {ApiError} On any non-2xx, e.g. `409` when the email is taken.
+     */
+    signup(input: SignupInput): Promise<SignupResponse>;
+    /**
+     * Check whether an account slug is free, and get free alternatives if not.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`). Advisory only: the unique index decides at create
+     * time, so a `409` from `createAccount` is a normal outcome, not a
+     * contradiction of what this returned.
+     *
+     * @param name - The slug (or candidate name) to check.
+     * @returns The server's normalization of `name`, whether it is available, and up to five alternatives.
+     * @throws {ApiError} On any non-2xx.
+     */
+    checkAccountSlug(name: string): Promise<SlugAvailabilityResponse>;
+    /**
+     * Create an account for the caller and re-issue the session with its claim.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies. NOTE the returned
+     * token is minted `role: "user"` unconditionally (`id/auth.ts:112`), so
+     * adopting it downgrades an operator; this method never writes the session
+     * itself, the caller decides.
+     *
+     * @param name - The account's display name.
+     * @param slug - The account's slug.
+     * @returns The created account, a re-issued token carrying its claim, and the token's lifetime.
+     * @throws {ApiError} On any non-2xx, e.g. `409` when the slug is taken.
+     */
+    createAccount(name: string, slug: string): Promise<CreateAccountResponse>;
+    /**
+     * Read the caller's identity **and its tenant-admin capability**.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies, unlike `login`,
+     * `signup` and `checkAccountSlug`. `/auth/me` reads the principal, so a
+     * request without a bearer is a `401`, and a tokenless client raises
+     * `ConfigError` before `fetch` is ever called.
+     *
+     * Same route as the base surface's `client.me()`; this one promises the
+     * console projection ({@linkcode ConsoleMe}) instead of the published `Me`.
+     * Unlike `client.me()` it does **not** fill in a `versions.wrapper` entry
+     * from this package's own `VERSION` (`../me.ts` does that): what this returns
+     * is the server's body, verbatim.
+     *
+     * @returns The caller's identity, plus `tenantAdmin`.
+     * @throws {ApiError} On any non-2xx, e.g. `401` when the bearer is missing or expired.
+     */
+    getMe(): Promise<ConsoleMe>;
+}
+//# sourceMappingURL=auth.d.ts.map