@w6w/sdk 0.5.0 → 0.9.8

package/dist/src/console/passkeys.js

@@ -0,0 +1,192 @@
+/**
+ * `client.console.passkeys.*` — WebAuthn passkey management and login for
+ * self-serve Studio users (T1.1.5).
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`
+ * and HITL-1 in this task's contract. `@w6w/sdk`'s instance-state mechanism
+ * pin still applies here exactly as it does to every other namespace
+ * (`docs/implementation.md` §MECHANISM PIN — instance state, never globals):
+ * this class holds no state of its own beyond the injected host, so two
+ * clients in one process never share a credential.
+ *
+ * **Who this is for (HITL-3).** Passkeys belong to self-serve Studio users
+ * only; a partner-tenant user's IdP owns its identity. No eligibility logic
+ * lives here — the server enforces it (`PasskeyNotEligibleError`), and this
+ * module is a plain transport shim over whatever it decides.
+ *
+ * **Two routes, four methods, split by who is authenticated.** The management
+ * quartet (`registrationOptions`, `registrationVerify`, `list`, `revoke`) is
+ * GUARDED, mirroring `packages/server/packages/api/data/passkeys.ts`'s own
+ * doc comment ("Registered BELOW the auth guard"). The login pair
+ * (`authenticationOptions`, `authenticationVerify`) is PUBLIC, mirroring
+ * `packages/server/packages/api/id/passkey-login.ts`'s own doc comment ("BOTH
+ * routes are PUBLIC and UNAUTHENTICATED by construction") — discoverable
+ * credentials, no identifier in the request body (P1). Each of those two
+ * methods passes `requireAuth: false`, the same mechanism
+ * `console.auth.login`/`signup`/`checkAccountSlug` rely on: without it a
+ * tokenless client (the normal case at the login screen, before any session
+ * exists) would hit `requireToken`'s `ConfigError` before `fetch` is ever
+ * called.
+ *
+ * **`authenticationVerify` mints a session, the same way `login` does
+ * (HITL-5).** A verified passkey assertion is a standalone alternative to a
+ * password, not a second factor — so its response is token-bearing, exactly
+ * like `console.auth.login`'s. It is a SEPARATE type from `LoginResponse`
+ * (`./auth.ts`), not a reuse: the server route is byte-shape-identical to
+ * `user-login.ts`'s login body (`id/passkey-login.ts`'s own doc comment) which
+ * carries `role`, `tenant` and `emailVerified` on `user` — fields
+ * `console.auth`'s `LoginResponse.user` does not declare.
+ *
+ * **WebAuthn ceremony payloads (`options`/`response`) are opaque JSON, typed
+ * as `Record<string, unknown>`, never as `@simplewebauthn/*` types.** This
+ * package has no dependency on `@simplewebauthn` (browser or server) and
+ * adding one only to type two pass-through fields would be a new dependency
+ * for zero behavioural gain — `inputs.touch` for this task explicitly
+ * excludes `package.json`. A caller passes the browser's own
+ * `PublicKeyCredentialCreationOptionsJSON`/`...RequestOptionsJSON` (from
+ * `options`) into `navigator.credentials.create()`/`.get()` (or a helper such
+ * as `@simplewebauthn/browser`'s `startRegistration`/`startAuthentication`)
+ * and forwards what comes back as `response` — this module never inspects
+ * either shape, only relays it.
+ *
+ * @module
+ */
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * The `console.passkeys` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * // Registration (authenticated).
+ * const { options, challengeToken } = await client.console.passkeys.registrationOptions();
+ * const response = await startRegistration({ optionsJSON: options }); // e.g. @simplewebauthn/browser
+ * const passkey = await client.console.passkeys.registrationVerify({ challengeToken, response });
+ *
+ * // Login (public — works on a tokenless client).
+ * const opts = await client.console.passkeys.authenticationOptions();
+ * const assertion = await startAuthentication({ optionsJSON: opts.options });
+ * const { token } = await client.console.passkeys.authenticationVerify({
+ *   challengeToken: opts.challengeToken,
+ *   response: assertion,
+ * });
+ * ```
+ */
+export class PasskeysApi {
+    #host;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host) {
+        this.#host = host;
+    }
+    /**
+     * A fresh registration challenge, scoped to the caller's own identity.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies.
+     *
+     * @returns The ceremony options and a single-use challenge token.
+     * @throws {ApiError} `400 passkey_not_configured`, `403 passkey_not_eligible`.
+     */
+    async registrationOptions() {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/me/passkeys/options",
+            body: {},
+        });
+        return res.body;
+    }
+    /**
+     * Verify a registration ceremony and store the credential.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies.
+     *
+     * @param input - The challenge token from `registrationOptions()`, the browser's ceremony
+     *   response, and an optional caller-chosen label.
+     * @returns The stored passkey's metadata, unwrapped from the `passkey` envelope.
+     * @throws {ApiError} `400 passkey_registration_failed`, `403 passkey_not_eligible`,
+     *   `409 passkey_already_registered`.
+     */
+    async registrationVerify(input) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/me/passkeys",
+            body: input,
+        });
+        return unwrap(res, "passkey");
+    }
+    /**
+     * A fresh authentication challenge. No identifier is sent or accepted —
+     * discoverable credentials only (P1): the owner is resolved server-side
+     * from the assertion itself, never from anything this call sends.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`). Without it, the login screen (the normal case:
+     * no session exists yet) could never call this method at all — a tokenless
+     * client would hit `requireToken`'s `ConfigError` before `fetch` is ever
+     * called.
+     *
+     * @returns The ceremony options and a single-use challenge token.
+     * @throws {ApiError} `400 passkey_not_configured`.
+     */
+    async authenticationOptions() {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/auth/passkey/options",
+            body: {},
+            requireAuth: false,
+        });
+        return res.body;
+    }
+    /**
+     * Verify an authentication (login) ceremony and mint a session — the same
+     * way `console.auth.login` does (HITL-5).
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`). Every failure mode past a malformed body is the
+     * same `401 passkey_rejected` (P9): unknown credential, revoked credential,
+     * wrong kind, bad signature, counter regression, and a spent/invalid
+     * challenge are indistinguishable to the caller.
+     *
+     * @param input - The challenge token from `authenticationOptions()` and the browser's ceremony
+     *   response.
+     * @returns The token, the caller's identity, and the token's lifetime.
+     * @throws {ApiError} `401 passkey_rejected` on any verification failure.
+     */
+    async authenticationVerify(input) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/auth/passkey/verify",
+            body: input,
+            requireAuth: false,
+        });
+        return res.body;
+    }
+    /**
+     * List the caller's own passkeys.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies.
+     *
+     * @returns The caller's passkeys, unwrapped from the `passkeys` envelope. Never the empty array
+     *   collapsed to `undefined` — an empty account gets `[]`.
+     */
+    async list() {
+        const res = await this.#host.request({ method: "GET", path: "/me/passkeys" });
+        return unwrap(res, "passkeys");
+    }
+    /**
+     * Revoke (delete) one of the caller's own passkeys.
+     *
+     * AUTHENTICATED — the default `requireAuth` applies.
+     *
+     * @param id - The passkey id.
+     * @returns Nothing: the server answers `204` with no body.
+     * @throws {ApiError} `404 passkey_not_found`.
+     */
+    async revoke(id) {
+        await this.#host.request({ method: "DELETE", path: path `/me/passkeys/${id}` });
+    }
+}
+//# sourceMappingURL=passkeys.js.map

package/dist/src/console/passkeys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeys.js","sourceRoot":"","sources":["../../../src/console/passkeys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAqGrC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,WAAW;IACb,KAAK,CAAe;IAE7B;;OAEG;IACH,YAAY,IAAkB;QAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAyB;YAC3D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAA8B;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,OAAO,MAAM,CAAU,GAAG,EAAE,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,qBAAqB;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAyB;YAC3D,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,EAAE;YACR,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAgC;QAEhC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsC;YACxE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvF,OAAO,MAAM,CAAY,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAA,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;CACF"}

package/dist/src/console/reliability.d.ts

@@ -1,5 +1,5 @@
 /**
- * `client.console.reliability.*` — the account-scoped reliability board,
+ * `client.console.reliability.*` — the project-scoped reliability board,
  * relocated from the studio's own API client.
  *
  * **Studio-internal, not the published partner contract.** This namespace
@@ -51,6 +51,36 @@ export interface ReliabilityUptimeDay {
     calls: number;
     errors: ReliabilityErrorMix;
 }
+/**
+ * Per-component detail inside a `ReliabilityVendorStatus.components` map. No
+ * `@w6w/types` dependency here — this is the SDK's own local copy, the same
+ * deliberate pattern `ReliabilityState` already follows.
+ */
+export interface ReliabilityComponentReport {
+    state: ReliabilityState;
+    message?: string;
+}
+/**
+ * One entry in a vendor's own incident history. Field-for-field with core's
+ * `HealthTimelineEntry` — see `ReliabilityComponentReport` for why this is a
+ * local copy rather than an import.
+ */
+export interface ReliabilityTimelineEntry {
+    /** Stable identity, when the source states one — an incident id, not a title. */
+    id?: string;
+    title: string;
+    state: ReliabilityState;
+    /** Component ids (matching `ReliabilityVendorStatus.components`) this entry is about. */
+    components?: string[];
+    /** ISO 8601 — when the incident began. */
+    startedAt?: string;
+    /** ISO 8601 — when the incident was last updated. */
+    updatedAt?: string;
+    /** ISO 8601 — when the incident was resolved. Absent means "not stated". */
+    resolvedAt?: string;
+    /** Link to the vendor's own incident/status page entry, when it has one. */
+    link?: string;
+}
 /** The vendor's own verdict for one service. See `ReliabilityService.vendorStatus`. */
 export interface ReliabilityVendorStatus {
     state: ReliabilityState;
@@ -59,11 +89,27 @@ export interface ReliabilityVendorStatus {
     checkedAt: string;
     /** Keys of the checks behind a non-`ok` verdict. Empty when `ok`. */
     attributedTo: string[];
+    /** Every surface every public check named, worst-state-wins on collision.
+     *  `null` = no public check reported a breakdown at all. */
+    components: Record<string, ReliabilityComponentReport> | null;
+    /** Vendor incident history, newest first. `null` = no public check publishes history
+     *  (Stripe); `[]` = one does and there is nothing in it. The two are DIFFERENT FACTS
+     *  and the studio renders them differently. */
+    timeline: ReliabilityTimelineEntry[] | null;
+    /** The vendor's own status PAGE (not the feed URL), for a link out. `null` when the
+     *  App declares nothing to derive one from. */
+    statusPageUrl: string | null;
 }
 /** One row of the service board — a single external service the account calls. */
 export interface ReliabilityService {
     appId: string;
     displayName: string;
+    /** Inlined catalog icon for this requested service, when it declares one. */
+    iconSrc?: string;
+    /** Optional dark-mode icon variant. */
+    iconSrcDark?: string;
+    /** Brand-colour fallback when the app has no icon. */
+    brandColor?: string;
     state: ReliabilityState;
     hasDeclaredHealth: boolean;
     calls: number;
@@ -73,8 +119,17 @@ export interface ReliabilityService {
     openAdvisories: number;
     /** Non-null while an outage is still open. */
     ongoingOutageId: string | null;
-    /** Null when the account has never called this service. Drives the server's
-     * recency ordering (`?limit=N`) — the client never re-sorts by it. */
+    /**
+     * Null when the account has never called this service.
+     *
+     * Breaks ties in the server's ordering — but only WITHIN an urgency tier. The
+     * server sorts a board by how urgent each row is first (anything degraded or
+     * down on either signal, then anything the window shows trouble in, then the
+     * rest) and by `lastCallAt` descending, nulls last, inside each tier. That
+     * matters most under `?limit=N`: a purely recency-ordered cap can cut the
+     * degraded services the board exists to surface. The client never re-sorts by
+     * this or anything else.
+     */
     lastCallAt: string | null;
     /**
      * Gap-free, exactly `window.days` entries, ONE PER CALENDAR DAY, OLDEST FIRST —
@@ -97,6 +152,26 @@ export interface ReliabilityService {
      * board renders them differently.
      */
     vendorStatus: ReliabilityVendorStatus | null;
+    /**
+     * Which urgency tier the server sorted this row into — and the field a UI
+     * should GROUP on rather than re-deriving the tier from `state`,
+     * `ongoingOutageId` and `vendorStatus` itself.
+     *
+     *   `now`    — degraded or down right now, on YOUR CALLS or PER THE VENDOR.
+     *              Either signal alone is enough: a service can be answering you
+     *              perfectly while its vendor publishes an incident.
+     *   `recent` — clear now, but this window holds a failed stretch or an open
+     *              advisory.
+     *   `none`   — clear.
+     *
+     * `unknown` on either signal is NOT attention: on your calls it means the
+     * window held none (idle, not broken), and on the vendor it means the status
+     * page could not be read — a gap in our reading, not a finding about them.
+     *
+     * This drives the `?limit=N` cut, which is why it is worth having on the
+     * wire: a capped board keeps the most urgent rows, not the most recent ones.
+     */
+    attention: "now" | "recent" | "none";
 }
 /**
  * Account-scoped reliability board (server `GET /reliability/services?days=…`,
@@ -122,12 +197,28 @@ export interface ReliabilityServices {
     };
     services: ReliabilityService[];
 }
+/** Identifier-only project membership discovery; it performs no status probes. */
+export interface ReliabilityServiceMembers {
+    account: string;
+    window: {
+        from: string;
+        to: string;
+        days: number;
+    };
+    uptimeMeans: string;
+    definition: {
+        id: string;
+        version: string;
+        source: string;
+    };
+    appIds: string[];
+}
 /**
  * The `console.reliability` namespace on a `W6WClient`.
  *
  * @example
  * ```ts
- * const board = await client.console.reliability.list(30, 5);
+ * const board = await client.console.reliability.list("prj_123", ["io.w6w.stripe"], 30);
  * ```
  */
 export declare class ReliabilityApi {
@@ -137,13 +228,17 @@ export declare class ReliabilityApi {
      */
     constructor(host: ReliabilityHost);
     /**
-     * Fetch the account-scoped reliability board.
+     * Fetch one project's reliability board.
      *
+     * @param project - The project whose services and calls are reported.
+     * @param appIds - Explicit service filter. The server accepts at most ten ids.
      * @param days - The window size in days. Omitted, the server applies its own default.
      * @param limit - Cap on the number of services returned, most-recently-called first. Omitted, no cap.
      * @returns The board, exactly as the server sent it — no envelope key to peel.
      * @throws {ApiError} On any non-2xx.
      */
-    list(days?: number, limit?: number): Promise<ReliabilityServices>;
+    list(project: string, appIds: readonly string[], days?: number, limit?: number): Promise<ReliabilityServices>;
+    /** Discover project members before issuing bounded status batches. */
+    listMembers(project: string, days?: number): Promise<ReliabilityServiceMembers>;
 }
 //# sourceMappingURL=reliability.d.ts.map

package/dist/src/console/reliability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reliability.d.ts","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtE,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,uFAAuF;AACvF,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,CAAC;IACxB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,gBAAgB,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;IAC5B,yEAAyE;IACzE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;0EACsE;IACtE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;;;OAOG;IACG,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAQxE"}
+{"version":3,"file":"reliability.d.ts","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtE,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,iFAAiF;IACjF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,gBAAgB,CAAC;IACxB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uFAAuF;AACvF,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,CAAC;IACxB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;gEAC4D;IAC5D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,GAAG,IAAI,CAAC;IAC9D;;mDAE+C;IAC/C,QAAQ,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAC5C;mDAC+C;IAC/C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,gBAAgB,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;IAC5B,yEAAyE;IACzE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC7C;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;;;;;OASG;IACG,IAAI,CACR,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAS/B,sEAAsE;IAChE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAQtF"}

package/dist/src/console/reliability.js

@@ -1,5 +1,5 @@
 /**
- * `client.console.reliability.*` — the account-scoped reliability board,
+ * `client.console.reliability.*` — the project-scoped reliability board,
  * relocated from the studio's own API client.
  *
  * **Studio-internal, not the published partner contract.** This namespace
@@ -25,7 +25,7 @@
  *
  * @example
  * ```ts
- * const board = await client.console.reliability.list(30, 5);
+ * const board = await client.console.reliability.list("prj_123", ["io.w6w.stripe"], 30);
  * ```
  */
 export class ReliabilityApi {
@@ -37,18 +37,29 @@ export class ReliabilityApi {
         this.#host = host;
     }
     /**
-     * Fetch the account-scoped reliability board.
+     * Fetch one project's reliability board.
      *
+     * @param project - The project whose services and calls are reported.
+     * @param appIds - Explicit service filter. The server accepts at most ten ids.
      * @param days - The window size in days. Omitted, the server applies its own default.
      * @param limit - Cap on the number of services returned, most-recently-called first. Omitted, no cap.
      * @returns The board, exactly as the server sent it — no envelope key to peel.
      * @throws {ApiError} On any non-2xx.
      */
-    async list(days, limit) {
+    async list(project, appIds, days, limit) {
         const res = await this.#host.request({
             method: "GET",
             path: "/reliability/services",
-            query: { days, limit },
+            query: { project, apps: appIds.join(","), days, limit },
+        });
+        return res.body;
+    }
+    /** Discover project members before issuing bounded status batches. */
+    async listMembers(project, days) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/reliability/services/members",
+            query: { project, days },
         });
         return res.body;
     }

package/dist/src/console/reliability.js.map

@@ -1 +1 @@
-{"version":3,"file":"reliability.js","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAwGH;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,KAAc;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACvB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"reliability.js","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA8LH;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CACR,OAAe,EACf,MAAyB,EACzB,IAAa,EACb,KAAc;QAEd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;SACxD,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAa;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B;YAC9D,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}

package/dist/src/console/step-tests.d.ts

@@ -42,6 +42,7 @@
  * @module
  */
 import { type HttpResponse, type RequestOptions } from "../http.ts";
+import type { StepMeta } from "./apps.ts";
 /**
  * The slice of `W6WClient` this namespace needs: the transport, and nothing
  * else. Structural rather than a concrete client type, so the namespace stays
@@ -72,6 +73,8 @@ export interface StepTest {
     lastRunStatus?: string | null;
     lastRunError?: unknown;
     lastRunOutput?: unknown;
+    /** Metadata of the most recent run; omitted when none was recorded. */
+    lastRunMeta?: StepMeta | null;
 }
 /** The real row `recordRun` creates (mirrors the server's `StepTestRun`). */
 export interface StepTestRun {
@@ -84,6 +87,8 @@ export interface StepTestRun {
     output: unknown;
     error: unknown;
     createdAt: string;
+    /** Metadata the run reported; omitted when none was recorded. */
+    meta?: StepMeta | null;
 }
 /**
  * The `console.stepTests` namespace on a `W6WClient`.
@@ -143,7 +148,7 @@ export declare class StepTestsApi {
      * @param workflowId - The `wf_…` id.
      * @param stepId - The step's id within that workflow.
      * @param body - `stepTestId` (optional), `status`, and optional
-     * `input`/`output`/`error`, forwarded verbatim.
+     * `input`/`output`/`error`/`meta` (the server sanitizes `meta`), forwarded verbatim.
      * @returns The created `StepTestRun`, unwrapped from the `run` envelope (the server answers `201`).
      * @throws {ApiError} `400 invalid_body`/`invalid_status`. No `404` — the
      * route never checks the workflow/step exist before writing.
@@ -154,6 +159,7 @@ export declare class StepTestsApi {
         input?: unknown;
         output?: unknown;
         error?: unknown;
+        meta?: unknown;
     }): Promise<StepTestRun>;
 }
 //# sourceMappingURL=step-tests.d.ts.map

package/dist/src/console/step-tests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"step-tests.d.ts","sourceRoot":"","sources":["../../../src/console/step-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAY;;IAGvB;;OAEG;gBACS,IAAI,EAAE,aAAa;IAI/B;;;;;;;;;OASG;IACG,IAAI,CACR,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GACrF,OAAO,CAAC,QAAQ,CAAC;IASpB;;;;;;OAMG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAQnE;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QACJ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,OAAO,CAAC,WAAW,CAAC;CAQxB"}
+{"version":3,"file":"step-tests.d.ts","sourceRoot":"","sources":["../../../src/console/step-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CAC/B;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAY;;IAGvB;;OAEG;gBACS,IAAI,EAAE,aAAa;IAI/B;;;;;;;;;OASG;IACG,IAAI,CACR,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GACrF,OAAO,CAAC,QAAQ,CAAC;IASpB;;;;;;OAMG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAQnE;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QACJ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GACA,OAAO,CAAC,WAAW,CAAC;CAQxB"}

package/dist/src/console/step-tests.js

@@ -112,7 +112,7 @@ export class StepTestsApi {
      * @param workflowId - The `wf_…` id.
      * @param stepId - The step's id within that workflow.
      * @param body - `stepTestId` (optional), `status`, and optional
-     * `input`/`output`/`error`, forwarded verbatim.
+     * `input`/`output`/`error`/`meta` (the server sanitizes `meta`), forwarded verbatim.
      * @returns The created `StepTestRun`, unwrapped from the `run` envelope (the server answers `201`).
      * @throws {ApiError} `400 invalid_body`/`invalid_status`. No `404` — the
      * route never checks the workflow/step exist before writing.

package/dist/src/console/step-tests.js.map

@@ -1 +1 @@
-{"version":3,"file":"step-tests.js","sourceRoot":"","sources":["../../../src/console/step-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAgDrC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,YAAY;IACd,KAAK,CAAgB;IAE9B;;OAEG;IACH,YAAY,IAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,MAAc,EACd,IAAsF;QAEtF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,cAAc,UAAU,UAAU,MAAM,QAAQ;YAC1D,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,MAAc;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,cAAc,UAAU,UAAU,MAAM,QAAQ;SAC3D,CAAC,CAAC;QACH,OAAO,MAAM,CAAa,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,MAAc,EACd,IAMC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,cAAc,UAAU,UAAU,MAAM,YAAY;YAC9D,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAc,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;CACF"}
+{"version":3,"file":"step-tests.js","sourceRoot":"","sources":["../../../src/console/step-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAqDrC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,YAAY;IACd,KAAK,CAAgB;IAE9B;;OAEG;IACH,YAAY,IAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CACR,UAAkB,EAClB,MAAc,EACd,IAAsF;QAEtF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,cAAc,UAAU,UAAU,MAAM,QAAQ;YAC1D,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,MAAc;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,cAAc,UAAU,UAAU,MAAM,QAAQ;SAC3D,CAAC,CAAC;QACH,OAAO,MAAM,CAAa,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,MAAc,EACd,IAOC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,cAAc,UAAU,UAAU,MAAM,YAAY;YAC9D,IAAI;SACL,CAAC,CAAC;QACH,OAAO,MAAM,CAAc,GAAG,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/src/console/subscriptions.d.ts

@@ -26,16 +26,13 @@
  * `console.apps`'s/`console.functions`' identical treatment of their own
  * zero-caller methods.
  *
- * **`webhookUrl` is a real server-side field this module deliberately does
- * NOT model.** For a subscription whose `appId === "@w6w/webhook"`, the
- * server enriches the response with a `webhookUrl` field computed from a
- * config value genuinely distinct from studio's own `apiBaseUrl()`
- * (`internal-triggers.ts:123-127`, `config.ts:27,259`). Studio's current
- * `Subscription` type never modeled this and no in-boundary code reads it
- * (`SubscriptionsPage.tsx` computes its own webhook URL client-side
- * independently) — this is a deliberate, verified omission, not an
- * oversight: whatever extra field the server sends is silently ignored,
- * exactly as today.
+ * **`webhookUrl` is modeled.** For a subscription whose `appId ===
+ * "@w6w/webhook"`, the server enriches the response with a `webhookUrl`
+ * field — produced by `withUrl` in `server/packages/api/admin/triggers.ts:74`
+ * — computed from a config value genuinely distinct from studio's own
+ * `apiBaseUrl()` (`internal-triggers.ts:123-127`, `config.ts:27,259`).
+ * Present only for `appId === "@w6w/webhook"`; absent for every other
+ * subscription.
  *
  * Subscriptions are account-level, never scoped by `project` — so
  * `SubscriptionsHost` needs only the transport, mirroring `VarsHost`/
@@ -54,11 +51,18 @@ export interface SubscriptionsHost {
     /** Perform one request. */
     request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
 }
+/** How a trigger's events arrive: pushed to a webhook, or fetched by a poll. */
+export type TriggerType = "webhook" | "poll";
+/**
+ * Where a subscription is in its registration lifecycle. Only `registered`
+ * subscriptions receive events.
+ */
+export type SubscriptionStatus = "pending" | "registered" | "failed" | "destroying";
 /**
  * A (trigger → workflow) binding. Field-for-field per
  * `packages/studio/src/api/types.ts:72-83` — this module does not redesign
- * the shape, only gives it a second home. Deliberately does NOT carry
- * `webhookUrl` — see this module's header.
+ * the shape, only gives it a second home. Also carries `webhookUrl` — see
+ * this module's header.
  */
 export interface Subscription {
     id: string;
@@ -71,6 +75,25 @@ export interface Subscription {
     enabled: boolean;
     createdAt: string;
     updatedAt: string;
+    /** How events arrive. */
+    type: TriggerType;
+    /** Registration lifecycle state. */
+    status: SubscriptionStatus;
+    /** Poll interval in ms; `null` for a webhook subscription. */
+    intervalMs: number | null;
+    /** Principal ids (workflow, connection, …) this subscription depends on. */
+    dependencies: string[];
+    /** When the next poll is due; `null` when not a poll or not yet scheduled. */
+    nextCheckAt: string | null;
+    /** The last registration failure, if any; `null` otherwise. */
+    lastError: {
+        code: string;
+        message: string;
+    } | null;
+    /** When registration last succeeded; `null` if it never has. */
+    registeredAt: string | null;
+    /** Present only for `appId === "@w6w/webhook"` — the server's own computed receive URL. */
+    webhookUrl?: string;
 }
 /**
  * The body of `create`, forwarded verbatim as the whole POST body.
@@ -80,9 +103,11 @@ export interface SubscriptionCreateInput {
     workflowId: string;
     connectionId?: string | null;
     params?: Record<string, unknown>;
+    /** Poll interval in ms (integer). Poll triggers only — the server defaults it to its floor. */
+    intervalMs?: number;
 }
 /** The lifecycle a delivered trigger event can be in. */
-export type TriggerEventStatus = "received" | "dispatching" | "dispatched" | "failed";
+export type TriggerEventStatus = "received" | "dispatching" | "dispatched" | "failed" | "ignored";
 /**
  * Metadata-only view of a delivered trigger event. Field-for-field per
  * `packages/studio/src/api/types.ts:85-96`.
@@ -124,9 +149,6 @@ export declare class SubscriptionsApi {
     /**
      * List the subscriptions bound to one workflow.
      *
-     * **Dead code (HITL-4)** — zero call sites anywhere in studio or
-     * `@w6w/ui`. Built for SDK completeness only; see this module's header.
-     *
      * @param workflowId - The `wf_…` id.
      * @returns The subscriptions, unwrapped from the `subscriptions` envelope.
      * @throws {ApiError} On any non-2xx.

package/dist/src/console/subscriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../../src/console/subscriptions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEtF;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAgB;;IAG3B;;OAEG;gBACS,IAAI,EAAE,iBAAiB;IAInC;;;;;OAKG;IACG,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAQrC;;;;;;;;;OASG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAQlE;;;;;;;;;;;;OAYG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ5C;;;;;;;;OAQG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,YAAY,CAAC;IASxB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvC;;;;;;;;;;;OAWG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAQ5D;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMnD"}
+{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../../src/console/subscriptions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,CAAC;AAE7C;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,yBAAyB;IACzB,IAAI,EAAE,WAAW,CAAC;IAClB,oCAAoC;IACpC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,8DAA8D;IAC9D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4EAA4E;IAC5E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8EAA8E;IAC9E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+DAA+D;IAC/D,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,gEAAgE;IAChE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,+FAA+F;IAC/F,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,yDAAyD;AACzD,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;AAElG;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAgB;;IAG3B;;OAEG;gBACS,IAAI,EAAE,iBAAiB;IAInC;;;;;OAKG;IACG,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAQrC;;;;;;OAMG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAQlE;;;;;;;;;;;;OAYG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAQ5C;;;;;;;;OAQG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,YAAY,CAAC;IASxB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvC;;;;;;;;;;;OAWG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAQ5D;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMnD"}

package/dist/src/console/subscriptions.js

@@ -26,16 +26,13 @@
  * `console.apps`'s/`console.functions`' identical treatment of their own
  * zero-caller methods.
  *
- * **`webhookUrl` is a real server-side field this module deliberately does
- * NOT model.** For a subscription whose `appId === "@w6w/webhook"`, the
- * server enriches the response with a `webhookUrl` field computed from a
- * config value genuinely distinct from studio's own `apiBaseUrl()`
- * (`internal-triggers.ts:123-127`, `config.ts:27,259`). Studio's current
- * `Subscription` type never modeled this and no in-boundary code reads it
- * (`SubscriptionsPage.tsx` computes its own webhook URL client-side
- * independently) — this is a deliberate, verified omission, not an
- * oversight: whatever extra field the server sends is silently ignored,
- * exactly as today.
+ * **`webhookUrl` is modeled.** For a subscription whose `appId ===
+ * "@w6w/webhook"`, the server enriches the response with a `webhookUrl`
+ * field — produced by `withUrl` in `server/packages/api/admin/triggers.ts:74`
+ * — computed from a config value genuinely distinct from studio's own
+ * `apiBaseUrl()` (`internal-triggers.ts:123-127`, `config.ts:27,259`).
+ * Present only for `appId === "@w6w/webhook"`; absent for every other
+ * subscription.
  *
  * Subscriptions are account-level, never scoped by `project` — so
  * `SubscriptionsHost` needs only the transport, mirroring `VarsHost`/
@@ -81,9 +78,6 @@ export class SubscriptionsApi {
     /**
      * List the subscriptions bound to one workflow.
      *
-     * **Dead code (HITL-4)** — zero call sites anywhere in studio or
-     * `@w6w/ui`. Built for SDK completeness only; see this module's header.
-     *
      * @param workflowId - The `wf_…` id.
      * @returns The subscriptions, unwrapped from the `subscriptions` envelope.
      * @throws {ApiError} On any non-2xx.