@w6w/sdk 0.5.0 → 0.9.8

package/dist/src/config.d.ts

@@ -8,6 +8,7 @@
  *
  * @module
  */
+import { type ApiError } from "./errors.ts";
 /**
  * The API's base path, from the shared contract's `basePath`
  * (`packages/wrappers/endpoints.json`).
@@ -31,6 +32,28 @@ export declare const BASE_PATH = "";
  * narrower one), while a fake only has to accept a URL string.
  */
 export type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/**
+ * A per-request token supplier.
+ *
+ * Called **per request** — never cached after it settles, never resolved once
+ * at construction — so a host can rotate or mint a token out-of-band (a tenant
+ * exchange, a short-lived partner credential) and have the very next call pick
+ * it up. Requests that are in flight **concurrently** on one client share ONE
+ * supplier call (and its result); a request that starts after it settled calls
+ * the supplier again. Memoize the supplier yourself if minting is expensive.
+ * `ctx.forceRefresh` is set to `true` exactly once, on the single
+ * recovery retry a `401`/`unauthorized` triggers (`docs/implementation.md`
+ * §3); every ordinary per-request resolution omits it. A `string` `token` is
+ * the degenerate case of this shape — it behaves exactly as before.
+ *
+ * May return synchronously or return a `Promise`; either is awaited before the
+ * bearer is attached. A nullish or blank (after trimming) result is treated
+ * exactly like a nullish/blank static token — a {@linkcode ConfigError}, never
+ * a request sent with no credential.
+ */
+export type TokenProvider = (ctx?: {
+    forceRefresh?: boolean;
+}) => string | null | undefined | Promise<string | null | undefined>;
 /** Constructor options for a client. Every field is optional. */
 export interface W6WClientOptions {
     /**
@@ -42,8 +65,40 @@ export interface W6WClientOptions {
      * Overrides `W6W_BASE_URL`.
      */
     baseUrl?: string;
-    /** Bearer token, sent on every request. Overrides `W6W_TOKEN`. */
-    token?: string;
+    /**
+     * Bearer token, resolved on **every** request — not just once at
+     * construction. A plain `string` is sent verbatim on every call, exactly as
+     * before; a {@linkcode TokenProvider} function is called (and awaited)
+     * per request (concurrent requests share one in-flight call), so a host can hand back a token minted or rotated after
+     * this client was constructed. Overrides `W6W_TOKEN`, which stays a plain
+     * string (there is no environment-variable spelling of a supplier).
+     */
+    token?: string | TokenProvider;
+    /**
+     * Opt in to a single, one-shot recovery when a request fails with
+     * `401`/`unauthorized`: `token` (which must be a function for this to do
+     * anything) is called once more with `{forceRefresh: true}`, and if that
+     * yields a usable value the SAME request is re-sent once with it. Off
+     * (`false`) by default — the behaviour before this option existed. Never
+     * retries a second time, never retries any other status or code, and never
+     * applies to a `requireAuth: false` request.
+     */
+    refreshOnUnauthorized?: boolean;
+    /**
+     * Called with the terminal `401`/`unauthorized` {@linkcode ApiError} of a
+     * bearer request — after a failed recovery retry, or immediately when
+     * recovery is off or not possible (a static `token`) — at most once per
+     * call. Never called on success, never called twice, and never called for a
+     * `requireAuth: false` request.
+     */
+    onUnauthorized?: (error: ApiError) => void;
+    /**
+     * Default headers sent with every request. This is the **base** every
+     * per-request `headers` option builds on: a per-request header with the
+     * same name wins, and neither can ever displace the bearer this transport
+     * attaches (`authorization`) or the `content-type` it sets for a JSON body.
+     */
+    headers?: Record<string, string>;
     /**
      * Default project id for the project-scoped operations — `documents.*` and
      * `workflows.list`, which read it too.
@@ -69,8 +124,14 @@ export interface ResolvedConfig {
      * value that is not an absolute `http(s)` URL with a host.
      */
     readonly baseUrl: string;
-    /** The bearer token, or `null` when none was configured. */
-    readonly token: string | null;
+    /** The bearer token or supplier, or `null` when none was configured. */
+    readonly token: string | TokenProvider | null;
+    /** Opt-in one-shot 401 recovery. Defaults to `false`. */
+    readonly refreshOnUnauthorized: boolean;
+    /** Terminal-401 callback, or `null` when none was configured. */
+    readonly onUnauthorized: ((error: ApiError) => void) | null;
+    /** Default headers sent with every request. Defaults to `{}`. */
+    readonly headers: Record<string, string>;
     /** Default project id, or `null`. */
     readonly project: string | null;
 }
@@ -146,14 +207,30 @@ export declare function resolveConfig(options?: W6WClientOptions): ResolvedConfi
  * There are no anonymous operations in this surface
  * (`docs/implementation.md` §2).
  *
+ * **Resolved per call, never cached after it settles.** When `config.token` is
+ * a {@linkcode TokenProvider} it is called (and its result awaited) right here —
+ * a plain string is the degenerate case that needs no call at all. Ordinary
+ * calls (`ctx?.forceRefresh` not `true`) that overlap on one `config` share ONE
+ * in-flight supplier call; the slot is dropped when it settles, on success or
+ * failure, so nothing is cached. A forced refresh neither joins nor fills that
+ * slot. `ctx` is
+ * forwarded verbatim to the provider; passing `{forceRefresh: true}` is the
+ * one and only seam `request()`'s recovery retry uses (`docs/implementation.md`
+ * §3) — ordinary resolution never passes it.
+ *
  * A blank token counts as no token, for the same reason a blank base URL does:
  * `W6W_TOKEN=` is how a shell or a Dockerfile spells "I meant to set this and
  * did not", and `Authorization: Bearer ` would turn that into an opaque 401
- * instead of the one message that explains it.
+ * instead of the one message that explains it. The same rule applies to
+ * whatever a provider returns: nullish or blank is treated exactly like a
+ * nullish/blank static token — the error never echoes the value either way.
  *
  * @param config - The resolved configuration.
+ * @param ctx - Forwarded to a function-typed `token`; unused for a string one.
  * @returns The configured token, verbatim.
  * @throws {ConfigError} When no non-blank token is configured.
  */
-export declare function requireToken(config: ResolvedConfig): string;
+export declare function requireToken(config: ResolvedConfig, ctx?: {
+    forceRefresh?: boolean;
+}): Promise<string>;
 //# sourceMappingURL=config.d.ts.map

package/dist/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAuBlD;AAkBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,gBAAqB,GAAG,cAAc,CAS5E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAS3D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,KAAK,QAAQ,EAAe,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;;;;;;;;GAUG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,GAAG,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,KAC7B,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAEpE,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,aAAa,CAAC;IAC/B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,iEAAiE;IACjE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5D,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAuBlD;AAkBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,gBAAqB,GAAG,cAAc,CAY5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,cAAc,EACtB,GAAG,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/B,OAAO,CAAC,MAAM,CAAC,CAajB"}

package/dist/src/config.js

@@ -86,7 +86,7 @@ export function joinBaseUrl(origin) {
         throw new ConfigError("No w6w base URL is configured. Pass one to the client " +
             '(new W6WClient({ baseUrl: "https://api.example.com" })) or set the ' +
             `${ENV_BASE_URL} environment variable. It holds the server's origin, ` +
-            "e.g. \"https://api.example.com\" — the API is served at its root, so no " +
+            'e.g. "https://api.example.com" — the API is served at its root, so no ' +
             "path is appended.");
     }
     if (!ABSOLUTE_HTTP_ORIGIN.test(trimmed) || !parses(trimmed)) {
@@ -138,6 +138,9 @@ export function resolveConfig(options = {}) {
         // never answer differently for the same input.
         baseUrl: joinBaseUrl(options.baseUrl ?? readEnv(ENV_BASE_URL) ?? ""),
         token: options.token ?? readEnv(ENV_TOKEN) ?? null,
+        refreshOnUnauthorized: options.refreshOnUnauthorized ?? false,
+        onUnauthorized: options.onUnauthorized ?? null,
+        headers: options.headers ?? {},
         project: options.project ?? null,
     };
 }
@@ -149,21 +152,54 @@ export function resolveConfig(options = {}) {
  * There are no anonymous operations in this surface
  * (`docs/implementation.md` §2).
  *
+ * **Resolved per call, never cached after it settles.** When `config.token` is
+ * a {@linkcode TokenProvider} it is called (and its result awaited) right here —
+ * a plain string is the degenerate case that needs no call at all. Ordinary
+ * calls (`ctx?.forceRefresh` not `true`) that overlap on one `config` share ONE
+ * in-flight supplier call; the slot is dropped when it settles, on success or
+ * failure, so nothing is cached. A forced refresh neither joins nor fills that
+ * slot. `ctx` is
+ * forwarded verbatim to the provider; passing `{forceRefresh: true}` is the
+ * one and only seam `request()`'s recovery retry uses (`docs/implementation.md`
+ * §3) — ordinary resolution never passes it.
+ *
  * A blank token counts as no token, for the same reason a blank base URL does:
  * `W6W_TOKEN=` is how a shell or a Dockerfile spells "I meant to set this and
  * did not", and `Authorization: Bearer ` would turn that into an opaque 401
- * instead of the one message that explains it.
+ * instead of the one message that explains it. The same rule applies to
+ * whatever a provider returns: nullish or blank is treated exactly like a
+ * nullish/blank static token — the error never echoes the value either way.
  *
  * @param config - The resolved configuration.
+ * @param ctx - Forwarded to a function-typed `token`; unused for a string one.
  * @returns The configured token, verbatim.
  * @throws {ConfigError} When no non-blank token is configured.
  */
-export function requireToken(config) {
-    if (config.token === null || config.token.trim().length === 0) {
+export function requireToken(config, ctx) {
+    if (typeof config.token !== "function" || ctx?.forceRefresh === true) {
+        return resolveToken(config, ctx);
+    }
+    const pending = inflightTokens.get(config);
+    if (pending)
+        return pending;
+    const flight = resolveToken(config, ctx);
+    inflightTokens.set(config, flight);
+    const clear = () => {
+        if (inflightTokens.get(config) === flight)
+            inflightTokens.delete(config);
+    };
+    flight.then(clear, clear);
+    return flight;
+}
+/** One in-flight ordinary supplier call per config (never a module-level slot). */
+const inflightTokens = new WeakMap();
+async function resolveToken(config, ctx) {
+    const raw = typeof config.token === "function" ? await config.token(ctx) : config.token;
+    if (raw === null || raw === undefined || raw.trim().length === 0) {
         throw new ConfigError("No w6w API token is configured. Pass one to the client " +
             '(new W6WClient({ token: "…" })) or set the ' +
             `${ENV_TOKEN} environment variable. Every w6w API operation is authenticated.`);
     }
-    return config.token;
+    return raw;
 }
 //# sourceMappingURL=config.js.map

package/dist/src/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AA4D5B;;;;;;;;;;GAUG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,0EAA0E;IAC1E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,WAAW,CACnB,wDAAwD;YACtD,qEAAqE;YACrE,GAAG,YAAY,uDAAuD;YACtE,0EAA0E;YAC1E,mBAAmB,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,WAAW,CACnB,qBAAqB,OAAO,oCAAoC;YAC9D,GAAG,YAAY,sEAAsE;YACrF,6EAA6E;YAC7E,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B,EAAE;IAC1D,OAAO;QACL,6EAA6E;QAC7E,2EAA2E;QAC3E,+CAA+C;QAC/C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI;QAClD,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,MAAsB;IACjD,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,WAAW,CACnB,yDAAyD;YACvD,6CAA6C;YAC7C,GAAG,SAAS,kEAAkE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAiB,WAAW,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAyH5B;;;;;;;;;;GAUG;AACH,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,0EAA0E;IAC1E,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,WAAW,CACnB,wDAAwD;YACtD,qEAAqE;YACrE,GAAG,YAAY,uDAAuD;YACtE,wEAAwE;YACxE,mBAAmB,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,WAAW,CACnB,qBAAqB,OAAO,oCAAoC;YAC9D,GAAG,YAAY,sEAAsE;YACrF,6EAA6E;YAC7E,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,aAAa,CAAC,UAA4B,EAAE;IAC1D,OAAO;QACL,6EAA6E;QAC7E,2EAA2E;QAC3E,+CAA+C;QAC/C,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI;QAClD,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,KAAK;QAC7D,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;QAC9C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,GAAgC;IAEhC,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;QACrE,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzC,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,MAAM;YAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,cAAc,GAAG,IAAI,OAAO,EAAmC,CAAC;AAEtE,KAAK,UAAU,YAAY,CACzB,MAAsB,EACtB,GAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACxF,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,WAAW,CACnB,yDAAyD;YACvD,6CAA6C;YAC7C,GAAG,SAAS,kEAAkE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/connections.d.ts

@@ -19,7 +19,7 @@
  *
  * @module
  */
-import type { HttpResponse, RequestOptions } from "./http.ts";
+import type { CallOptions, HttpResponse, RequestOptions } from "./http.ts";
 import { type ConnectionSummary } from "./types.ts";
 /**
  * The slice of `W6WClient` this namespace needs: the transport, and nothing
@@ -50,9 +50,10 @@ export declare class ConnectionsApi {
     /**
      * List the caller's connections.
      *
+     * @param options - Optional per-call transport options (`signal` to abort).
      * @returns The connections, unwrapped from the `connections` envelope.
      * @throws {ApiError} On any non-2xx.
      */
-    list(): Promise<ConnectionSummary[]>;
+    list(options?: CallOptions): Promise<ConnectionSummary[]>;
 }
 //# sourceMappingURL=connections.d.ts.map

package/dist/src/connections.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../../src/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,KAAK,iBAAiB,EAAU,MAAM,YAAY,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;;;;GASG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;OAKG;IACG,IAAI,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;CAI3C"}
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../../src/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,KAAK,iBAAiB,EAAU,MAAM,YAAY,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;;;;GASG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;;OAMG;IACG,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;CAQhE"}

package/dist/src/connections.js

@@ -41,11 +41,16 @@ export class ConnectionsApi {
     /**
      * List the caller's connections.
      *
+     * @param options - Optional per-call transport options (`signal` to abort).
      * @returns The connections, unwrapped from the `connections` envelope.
      * @throws {ApiError} On any non-2xx.
      */
-    async list() {
-        const res = await this.#host.request({ method: "GET", path: "/connections" });
+    async list(options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/connections",
+            signal: options?.signal,
+        });
         return unwrap(res, "connections");
     }
 }

package/dist/src/connections.js.map

@@ -1 +1 @@
-{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../src/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAA0B,MAAM,EAAE,MAAM,YAAY,CAAC;AAa5D;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvF,OAAO,MAAM,CAAsB,GAAG,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;CACF"}
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../src/connections.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAA0B,MAAM,EAAE,MAAM,YAAY,CAAC;AAa5D;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,OAAqB;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAsB,GAAG,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/src/console/aliases.d.ts

@@ -0,0 +1,137 @@
+/**
+ * `client.console.aliases.*` — account-scoped alias management
+ * (`list`/`get`/`upsert`/`delete`) for the names `run`'s URN dispatch
+ * resolves alongside its four `conn_…`/`wf_…`/`fn_…`/`ep_…` arms
+ * (`src/run.ts`).
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded
+ * from `endpoints.json` and from the root barrel (`mod.ts`) — see
+ * `docs/console.md` and HITL-2 in this project's contract. This surface is
+ * **new**: unlike `console.functions`/`console.endpoints`, there is no
+ * pre-existing `studio/src/api/client.ts` alias code being relocated here —
+ * Studio never had alias CRUD before this project. `@w6w/sdk`'s
+ * instance-state mechanism pin still applies here exactly as it does to
+ * every other namespace (`docs/implementation.md` §MECHANISM PIN — instance
+ * state, never globals): this class holds no state of its own beyond the
+ * injected host, so two clients in one process never share a credential.
+ *
+ * **`invoke`/`run` is deliberately NOT modeled here.** The base
+ * `client.run({urn: aliasName, payload})` (already-published surface,
+ * `endpoints.json`-named, exported from the root `mod.ts`) already reaches
+ * an alias's target — an alias name is one of `run`'s runnable `urn` arms,
+ * alongside `conn_…`/`wf_…`/`fn_…`/`ep_…` (`src/run.ts`). Adding a duplicate
+ * `console.aliases.invoke` would give a caller two ways to reach the same
+ * route — the exact anti-duplication defect `console/functions.ts:15-26`
+ * flags for Functions, applied here with alias/`run` substituted for
+ * function/`run`; `console.endpoints`/`console.workflows` follow the same
+ * precedent. No invoke method lives here, and none should be added later
+ * without re-litigating this reasoning.
+ *
+ * @module
+ */
+import { type HttpResponse, type RequestOptions } from "../http.ts";
+import type { EndpointTarget } from "./endpoints.ts";
+/**
+ * The slice of `W6WClient` this namespace needs: the transport, and nothing
+ * else. Structural rather than a concrete client type, so the namespace
+ * stays independently constructible in a test and this module never
+ * imports the client back — mirrors `FunctionsHost` in `./functions.ts`.
+ */
+export interface AliasesHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/**
+ * An alias definition — an account-scoped name bound to one runnable
+ * target, typed with the same {@linkcode EndpointTarget} union
+ * `console.endpoints` dispatches to. Unlike `EndpointDef.target`, an
+ * alias's `target` may also carry the `endpoint` arm
+ * ({@linkcode EndpointRefTarget}) — dispatching to another Endpoint by id is
+ * legal for an alias only, so `run`'s URN dispatch can resolve it by name
+ * instead of by id.
+ *
+ * `name` is **immutable after first save** (HITL-3): a save that changes
+ * `name` on an already-stored alias answers `409 alias_name_immutable`.
+ */
+export interface AliasDef {
+    id: string;
+    name: string;
+    displayName?: string;
+    description?: string;
+    target: EndpointTarget;
+}
+/** One row of `list`'s result — an alias's summary, not its full definition. */
+export interface AliasSummary {
+    id: string;
+    name: string;
+    displayName: string;
+    description: string;
+    updatedAt: string;
+    target: EndpointTarget;
+}
+/**
+ * The `console.aliases` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * const aliases = await client.console.aliases.list();
+ * const alias = await client.console.aliases.get(aliases[0].id);
+ * await client.console.aliases.upsert({ ...alias, description: "Send email" });
+ * await client.console.aliases.delete(alias.id);
+ * ```
+ */
+export declare class AliasesApi {
+    #private;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host: AliasesHost);
+    /**
+     * List the caller's aliases.
+     *
+     * @returns The aliases, unwrapped from the `aliases` envelope.
+     */
+    list(): Promise<AliasSummary[]>;
+    /**
+     * Fetch one alias's stored definition.
+     *
+     * No server-computed field to splice in — unlike
+     * {@linkcode FunctionsApi.get}'s `valid` merge, this returns
+     * `unwrap<AliasDef>(res, "alias")` plainly.
+     *
+     * @param id - The alias's `id`.
+     * @returns The alias definition, unwrapped from the `alias` envelope.
+     * @throws {ApiError} `404 unknown_alias` when there is no such id.
+     */
+    get(id: string): Promise<AliasDef>;
+    /**
+     * Register (create or overwrite) an alias definition.
+     *
+     * `definition` is the whole definition, sent verbatim as the request body
+     * — not wrapped in an envelope key.
+     *
+     * @param definition - The whole alias definition, forwarded verbatim.
+     * @returns The new/updated alias's id and name.
+     * @throws {ApiError} `400 invalid_alias` — structurally invalid body.
+     * @throws {ApiError} `409 alias_conflict` — another `(tenant,subject)` owns this id.
+     * @throws {ApiError} `409 alias_name_conflict` — another alias already owns this name.
+     * @throws {ApiError} `409 alias_name_immutable` — `name` changed on an already-stored alias (HITL-3).
+     */
+    upsert(definition: AliasDef): Promise<{
+        id: string;
+        name: string;
+    }>;
+    /**
+     * Delete an alias.
+     *
+     * Returns nothing: the server's `{ok: true}` carries no information a
+     * caller can use, mirroring `console.vault.delete`/`console.projects.delete`
+     * in this same package.
+     *
+     * @param id - The alias's `id`.
+     * @throws {ApiError} `404 unknown_alias` when there is no such id.
+     */
+    delete(id: string): Promise<void>;
+}
+//# sourceMappingURL=aliases.d.ts.map

package/dist/src/console/aliases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliases.d.ts","sourceRoot":"","sources":["../../../src/console/aliases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,cAAc,CAAC;CACxB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,UAAU;;IAGrB;;OAEG;gBACS,IAAI,EAAE,WAAW;IAI7B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAKrC;;;;;;;;;;OAUG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAKxC;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,UAAU,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IASzE;;;;;;;;;OASG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC"}

package/dist/src/console/aliases.js

@@ -0,0 +1,113 @@
+/**
+ * `client.console.aliases.*` — account-scoped alias management
+ * (`list`/`get`/`upsert`/`delete`) for the names `run`'s URN dispatch
+ * resolves alongside its four `conn_…`/`wf_…`/`fn_…`/`ep_…` arms
+ * (`src/run.ts`).
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded
+ * from `endpoints.json` and from the root barrel (`mod.ts`) — see
+ * `docs/console.md` and HITL-2 in this project's contract. This surface is
+ * **new**: unlike `console.functions`/`console.endpoints`, there is no
+ * pre-existing `studio/src/api/client.ts` alias code being relocated here —
+ * Studio never had alias CRUD before this project. `@w6w/sdk`'s
+ * instance-state mechanism pin still applies here exactly as it does to
+ * every other namespace (`docs/implementation.md` §MECHANISM PIN — instance
+ * state, never globals): this class holds no state of its own beyond the
+ * injected host, so two clients in one process never share a credential.
+ *
+ * **`invoke`/`run` is deliberately NOT modeled here.** The base
+ * `client.run({urn: aliasName, payload})` (already-published surface,
+ * `endpoints.json`-named, exported from the root `mod.ts`) already reaches
+ * an alias's target — an alias name is one of `run`'s runnable `urn` arms,
+ * alongside `conn_…`/`wf_…`/`fn_…`/`ep_…` (`src/run.ts`). Adding a duplicate
+ * `console.aliases.invoke` would give a caller two ways to reach the same
+ * route — the exact anti-duplication defect `console/functions.ts:15-26`
+ * flags for Functions, applied here with alias/`run` substituted for
+ * function/`run`; `console.endpoints`/`console.workflows` follow the same
+ * precedent. No invoke method lives here, and none should be added later
+ * without re-litigating this reasoning.
+ *
+ * @module
+ */
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * The `console.aliases` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * const aliases = await client.console.aliases.list();
+ * const alias = await client.console.aliases.get(aliases[0].id);
+ * await client.console.aliases.upsert({ ...alias, description: "Send email" });
+ * await client.console.aliases.delete(alias.id);
+ * ```
+ */
+export class AliasesApi {
+    #host;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host) {
+        this.#host = host;
+    }
+    /**
+     * List the caller's aliases.
+     *
+     * @returns The aliases, unwrapped from the `aliases` envelope.
+     */
+    async list() {
+        const res = await this.#host.request({ method: "GET", path: "/aliases" });
+        return unwrap(res, "aliases");
+    }
+    /**
+     * Fetch one alias's stored definition.
+     *
+     * No server-computed field to splice in — unlike
+     * {@linkcode FunctionsApi.get}'s `valid` merge, this returns
+     * `unwrap<AliasDef>(res, "alias")` plainly.
+     *
+     * @param id - The alias's `id`.
+     * @returns The alias definition, unwrapped from the `alias` envelope.
+     * @throws {ApiError} `404 unknown_alias` when there is no such id.
+     */
+    async get(id) {
+        const res = await this.#host.request({ method: "GET", path: path `/aliases/${id}` });
+        return unwrap(res, "alias");
+    }
+    /**
+     * Register (create or overwrite) an alias definition.
+     *
+     * `definition` is the whole definition, sent verbatim as the request body
+     * — not wrapped in an envelope key.
+     *
+     * @param definition - The whole alias definition, forwarded verbatim.
+     * @returns The new/updated alias's id and name.
+     * @throws {ApiError} `400 invalid_alias` — structurally invalid body.
+     * @throws {ApiError} `409 alias_conflict` — another `(tenant,subject)` owns this id.
+     * @throws {ApiError} `409 alias_name_conflict` — another alias already owns this name.
+     * @throws {ApiError} `409 alias_name_immutable` — `name` changed on an already-stored alias (HITL-3).
+     */
+    async upsert(definition) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/aliases",
+            body: definition,
+        });
+        return unwrap(res, "alias");
+    }
+    /**
+     * Delete an alias.
+     *
+     * Returns nothing: the server's `{ok: true}` carries no information a
+     * caller can use, mirroring `console.vault.delete`/`console.projects.delete`
+     * in this same package.
+     *
+     * @param id - The alias's `id`.
+     * @throws {ApiError} `404 unknown_alias` when there is no such id.
+     */
+    async delete(id) {
+        await this.#host.request({ method: "DELETE", path: path `/aliases/${id}` });
+    }
+}
+//# sourceMappingURL=aliases.js.map

package/dist/src/console/aliases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliases.js","sourceRoot":"","sources":["../../../src/console/aliases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA4CrC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,UAAU;IACZ,KAAK,CAAc;IAE5B;;OAEG;IACH,YAAY,IAAiB;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,OAAO,MAAM,CAAiB,GAAG,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAA,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7F,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CAAC,UAAoB;QAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,OAAO,MAAM,CAA+B,GAAG,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAA,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;CACF"}

package/dist/src/console/api-calls.d.ts

@@ -20,9 +20,9 @@
  * result type) and `console/mod.ts` already re-exports it — this module
  * imports it as a type and uses it verbatim as `list`'s return element type.
  *
- * `api-calls` is scoped to the caller by the server's own repo, not by a
- * `project` query param — so `ApiCallsHost` needs only the transport,
- * mirroring `VarsHost`/`ProjectsHost`, not `DocumentsHost`.
+ * `api-calls` is scoped to the caller and can be narrowed to one project. The
+ * reliability detail page always supplies that project so its drill-down rows
+ * are the same rows that produced the reliability numbers.
  *
  * @module
  */
@@ -46,6 +46,7 @@ export interface ApiCallsHost {
  * values.
  */
 export interface ApiCallsFilter {
+    project?: string;
     appId?: string;
     actionKey?: string;
     connectionId?: string;

package/dist/src/console/api-calls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-calls.d.ts","sourceRoot":"","sources":["../../../src/console/api-calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAK/C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,qBAAa,WAAW;;IAGtB;;OAEG;gBACS,IAAI,EAAE,YAAY;IAI9B;;;;;;;OAOG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAc9D"}
+{"version":3,"file":"api-calls.d.ts","sourceRoot":"","sources":["../../../src/console/api-calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAK/C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,qBAAa,WAAW;;IAGtB;;OAEG;gBACS,IAAI,EAAE,YAAY;IAI9B;;;;;;;OAOG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAe9D"}

package/dist/src/console/api-calls.js

@@ -20,9 +20,9 @@
  * result type) and `console/mod.ts` already re-exports it — this module
  * imports it as a type and uses it verbatim as `list`'s return element type.
  *
- * `api-calls` is scoped to the caller by the server's own repo, not by a
- * `project` query param — so `ApiCallsHost` needs only the transport,
- * mirroring `VarsHost`/`ProjectsHost`, not `DocumentsHost`.
+ * `api-calls` is scoped to the caller and can be narrowed to one project. The
+ * reliability detail page always supplies that project so its drill-down rows
+ * are the same rows that produced the reliability numbers.
  *
  * @module
  */
@@ -57,6 +57,7 @@ export class ApiCallsApi {
             path: "/api-calls",
             query: {
                 appId: filter?.appId,
+                project: filter?.project,
                 actionKey: filter?.actionKey,
                 connectionId: filter?.connectionId,
                 sessionId: filter?.sessionId,

package/dist/src/console/api-calls.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-calls.js","sourceRoot":"","sources":["../../../src/console/api-calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAkCrC;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACb,KAAK,CAAe;IAE7B;;OAEG;IACH,YAAY,IAAkB;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,MAAuB;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE;gBACL,KAAK,EAAE,MAAM,EAAE,KAAK;gBACpB,SAAS,EAAE,MAAM,EAAE,SAAS;gBAC5B,YAAY,EAAE,MAAM,EAAE,YAAY;gBAClC,SAAS,EAAE,MAAM,EAAE,SAAS;gBAC5B,KAAK,EAAE,MAAM,EAAE,KAAK;aACrB;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAkB,GAAG,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC;CACF"}
+{"version":3,"file":"api-calls.js","sourceRoot":"","sources":["../../../src/console/api-calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAmCrC;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACb,KAAK,CAAe;IAE7B;;OAEG;IACH,YAAY,IAAkB;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,MAAuB;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE;gBACL,KAAK,EAAE,MAAM,EAAE,KAAK;gBACpB,OAAO,EAAE,MAAM,EAAE,OAAO;gBACxB,SAAS,EAAE,MAAM,EAAE,SAAS;gBAC5B,YAAY,EAAE,MAAM,EAAE,YAAY;gBAClC,SAAS,EAAE,MAAM,EAAE,SAAS;gBAC5B,KAAK,EAAE,MAAM,EAAE,KAAK;aACrB;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAkB,GAAG,EAAE,UAAU,CAAC,CAAC;IAClD,CAAC;CACF"}