@w6w/sdk 0.6.0 → 0.9.8

package/dist/src/console/mod.js

@@ -21,10 +21,12 @@ import { AliasesApi } from "./aliases.js";
 import { ApiCallsApi } from "./api-calls.js";
 import { AppsApi } from "./apps.js";
 import { AuthApi } from "./auth.js";
+import { CommerceApi } from "./commerce.js";
 import { ConnectionsApi } from "./connections.js";
 import { DashboardApi } from "./dashboard.js";
 import { EndpointsApi } from "./endpoints.js";
 import { FunctionsApi } from "./functions.js";
+import { OtpApi } from "./otp.js";
 import { PasskeysApi } from "./passkeys.js";
 import { ReliabilityApi } from "./reliability.js";
 import { ProjectsApi } from "./projects.js";
@@ -32,6 +34,7 @@ import { SavedTestsApi } from "./saved-tests.js";
 import { SchedulesApi } from "./schedules.js";
 import { StepTestsApi } from "./step-tests.js";
 import { SubscriptionsApi } from "./subscriptions.js";
+import { TenantLoginFlagsApi } from "./tenant-login-flags.js";
 import { TenantOAuthAppsApi } from "./tenant-oauth-apps.js";
 import { TokensApi } from "./tokens.js";
 import { VaultApi } from "./vault.js";
@@ -39,6 +42,7 @@ import { WorkflowsApi } from "./workflows.js";
 export { AuthApi } from "./auth.js";
 export { PasskeysApi } from "./passkeys.js";
 export { DashboardApi } from "./dashboard.js";
+export { CommerceApi } from "./commerce.js";
 export { ReliabilityApi } from "./reliability.js";
 export { ProjectsApi } from "./projects.js";
 export { SchedulesApi } from "./schedules.js";
@@ -49,12 +53,14 @@ export { SavedTestsApi } from "./saved-tests.js";
 export { StepTestsApi } from "./step-tests.js";
 export { VaultApi } from "./vault.js";
 export { TokensApi } from "./tokens.js";
-export { FunctionsApi } from "./functions.js";
+export { FunctionsApi, isCallableImpl } from "./functions.js";
 export { EndpointsApi, SECRET_MASK } from "./endpoints.js";
 export { AliasesApi } from "./aliases.js";
 export { SubscriptionsApi } from "./subscriptions.js";
 export { ApiCallsApi } from "./api-calls.js";
 export { TenantOAuthAppsApi } from "./tenant-oauth-apps.js";
+export { OtpApi } from "./otp.js";
+export { TenantLoginFlagsApi } from "./tenant-login-flags.js";
 /**
  * The `console` namespace group on a `W6WClient` — studio-internal, not part
  * of the published partner contract.
@@ -71,6 +77,8 @@ export class ConsoleApi {
     auth;
     /** `console.dashboard.*`. */
     dashboard;
+    /** `console.commerce.*`. */
+    commerce;
     /** `console.projects.*`. */
     projects;
     /** `console.schedules.*`. */
@@ -103,6 +111,10 @@ export class ConsoleApi {
     tenantOAuthApps;
     /** `console.passkeys.*`. */
     passkeys;
+    /** `console.otp.*` — email one-time-code sign-in, all three methods PUBLIC. */
+    otp;
+    /** `console.tenantLoginFlags.*` — the caller's OWN tenant, never a tenant of its choosing. */
+    tenantLoginFlags;
     /**
      * @param host - The client this namespace group issues requests through.
      */
@@ -110,6 +122,7 @@ export class ConsoleApi {
         this.reliability = new ReliabilityApi(host);
         this.auth = new AuthApi(host);
         this.dashboard = new DashboardApi(host);
+        this.commerce = new CommerceApi(host);
         this.projects = new ProjectsApi(host);
         this.schedules = new SchedulesApi(host);
         this.apps = new AppsApi(host);
@@ -126,6 +139,8 @@ export class ConsoleApi {
         this.apiCalls = new ApiCallsApi(host);
         this.tenantOAuthApps = new TenantOAuthAppsApi(host);
         this.passkeys = new PasskeysApi(host);
+        this.otp = new OtpApi(host);
+        this.tenantLoginFlags = new TenantLoginFlagsApi(host);
     }
 }
 //# sourceMappingURL=mod.js.map

package/dist/src/console/mod.js.map

@@ -1 +1 @@
-{"version":3,"file":"mod.js","sourceRoot":"","sources":["../../../src/console/mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBpC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAU5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAUlD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+BpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAS9C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAe3D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAmB5D;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IACrB,+BAA+B;IACtB,WAAW,CAAiB;IACrC,wBAAwB;IACf,IAAI,CAAU;IACvB,6BAA6B;IACpB,SAAS,CAAe;IACjC,4BAA4B;IACnB,QAAQ,CAAc;IAC/B,6BAA6B;IACpB,SAAS,CAAe;IACjC,wBAAwB;IACf,IAAI,CAAU;IACvB,+BAA+B;IACtB,WAAW,CAAiB;IACrC,6BAA6B;IACpB,SAAS,CAAe;IACjC,8BAA8B;IACrB,UAAU,CAAgB;IACnC,6BAA6B;IACpB,SAAS,CAAe;IACjC,yBAAyB;IAChB,KAAK,CAAW;IACzB,0BAA0B;IACjB,MAAM,CAAY;IAC3B,6BAA6B;IACpB,SAAS,CAAe;IACjC,6BAA6B;IACpB,SAAS,CAAe;IACjC,2BAA2B;IAClB,OAAO,CAAa;IAC7B,iCAAiC;IACxB,aAAa,CAAmB;IACzC,4BAA4B;IACnB,QAAQ,CAAc;IAC/B,6FAA6F;IACpF,eAAe,CAAqB;IAC7C,4BAA4B;IACnB,QAAQ,CAAc;IAE/B;;OAEG;IACH,YAAY,IAAiB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"mod.js","sourceRoot":"","sources":["../../../src/console/mod.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAU5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AA+B5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAYlD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqCpC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAW9D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAmB3D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAU5D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAkB9D;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IACrB,+BAA+B;IACtB,WAAW,CAAiB;IACrC,wBAAwB;IACf,IAAI,CAAU;IACvB,6BAA6B;IACpB,SAAS,CAAe;IACjC,4BAA4B;IACnB,QAAQ,CAAc;IAC/B,4BAA4B;IACnB,QAAQ,CAAc;IAC/B,6BAA6B;IACpB,SAAS,CAAe;IACjC,wBAAwB;IACf,IAAI,CAAU;IACvB,+BAA+B;IACtB,WAAW,CAAiB;IACrC,6BAA6B;IACpB,SAAS,CAAe;IACjC,8BAA8B;IACrB,UAAU,CAAgB;IACnC,6BAA6B;IACpB,SAAS,CAAe;IACjC,yBAAyB;IAChB,KAAK,CAAW;IACzB,0BAA0B;IACjB,MAAM,CAAY;IAC3B,6BAA6B;IACpB,SAAS,CAAe;IACjC,6BAA6B;IACpB,SAAS,CAAe;IACjC,2BAA2B;IAClB,OAAO,CAAa;IAC7B,iCAAiC;IACxB,aAAa,CAAmB;IACzC,4BAA4B;IACnB,QAAQ,CAAc;IAC/B,6FAA6F;IACpF,eAAe,CAAqB;IAC7C,4BAA4B;IACnB,QAAQ,CAAc;IAC/B,+EAA+E;IACtE,GAAG,CAAS;IACrB,8FAA8F;IACrF,gBAAgB,CAAsB;IAE/C;;OAEG;IACH,YAAY,IAAiB;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,gBAAgB,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/src/console/otp.d.ts

@@ -0,0 +1,127 @@
+/**
+ * `client.console.otp.*` — email one-time-code sign-in, a third standalone
+ * login option beside password and passkey (T2.1.3).
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`.
+ * `@w6w/sdk`'s instance-state mechanism pin still applies here exactly as it
+ * does to every other namespace (`docs/implementation.md` §MECHANISM PIN —
+ * instance state, never globals): this class holds no state of its own beyond
+ * the injected host, so two clients in one process never share a credential.
+ *
+ * **All three methods are PUBLIC — the login screen has no token.** Mirrors
+ * `console.passkeys`'s login pair exactly: each passes `requireAuth: false`,
+ * without which a tokenless client (the normal case at `/login`, before any
+ * session exists) would hit `requireToken`'s `ConfigError` before `fetch` is
+ * ever called. Wire pins are T2.1.1's contract §Wire pins, above its
+ * `requireTenantAdmin`-guarded `/tenant/login-flags` pair (see
+ * `./tenant-login-flags.ts`).
+ *
+ * **`OtpVerifyResponse` is a type ALIAS of `PasskeyAuthenticationVerifyResponse`,
+ * not a second declaration of the same four fields.** The server's
+ * `POST /auth/otp/verify` answers a byte-identical body to
+ * `id/passkey-login.ts`'s own verify route (T2.1.1's wire pin: "byte-shape
+ * identical to `id/user-login.ts`'s and `id/passkey-login.ts`'s"), and the
+ * passkey names (`PasskeyUser`, `PasskeyAuthenticationVerifyResponse`) are
+ * published and cannot be renamed — a third copy of the same shape would be a
+ * third thing to drift out of sync with the other two.
+ *
+ * @module
+ */
+import { type HttpResponse, type RequestOptions } from "../http.ts";
+import type { PasskeyAuthenticationVerifyResponse } from "./passkeys.ts";
+/**
+ * The slice of `W6WClient` this namespace needs: the transport, and nothing
+ * else. Structural rather than a concrete client type, so the namespace stays
+ * independently constructible in a test and this module never imports the
+ * client back — mirrors `PasskeysHost` in `./passkeys.ts`.
+ */
+export interface OtpHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/**
+ * Which sign-in methods this tenant currently offers — `GET
+ * /auth/login-providers` (T2.1.1's wire pin). Read by `/login` to decide what
+ * to render; see `packages/studio/src/lib/login-providers.ts`'s
+ * `providerVisibility`, the one place that decision is made.
+ */
+export interface LoginProviders {
+    password: boolean;
+    passkey: boolean;
+    otp: boolean;
+}
+/**
+ * The user identity `verifyCode` mints a session for — the SAME shape
+ * `PasskeyAuthenticationVerifyResponse` already declares (see this module's
+ * header). A type alias, not a reuse of `console.auth`'s `LoginResponse`:
+ * that type's `user` does not carry `role`/`tenant`/`emailVerified`.
+ */
+export type OtpVerifyResponse = PasskeyAuthenticationVerifyResponse;
+/**
+ * The `console.otp` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * const client = new W6WClient({ baseUrl: "https://api.example.com" }); // no token — see below
+ * const { providers } = { providers: await client.console.otp.loginProviders() };
+ * if (providers.otp) {
+ *   await client.console.otp.requestCode({ email: "alice@example.com" });
+ *   const { token } = await client.console.otp.verifyCode({
+ *     email: "alice@example.com",
+ *     code: "123456",
+ *   });
+ * }
+ * ```
+ */
+export declare class OtpApi {
+    #private;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host: OtpHost);
+    /**
+     * Which sign-in methods this tenant currently offers.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`). The `/login` screen calls this before any session
+     * exists, so a tokenless client must be able to reach it.
+     *
+     * @returns `{ password, passkey, otp }`, unwrapped from the `providers` envelope.
+     */
+    loginProviders(): Promise<LoginProviders>;
+    /**
+     * Request a one-time sign-in code by email.
+     *
+     * PUBLIC — sends no bearer (`requireAuth: false`). Answers `202 {ok: true}`
+     * ALWAYS, whether or not a user exists with that email (T2.1.1's wire pin)
+     * — this method discards that body and resolves `void`, since there is
+     * nothing informative in it for the caller to act on.
+     *
+     * @param input - The email to send the code to.
+     * @throws {ApiError} `403 otp_disabled` when the tenant's `otp_enabled` is
+     *   false; `400 invalid_body` for a non-object/non-string body.
+     */
+    requestCode(input: {
+        email: string;
+    }): Promise<void>;
+    /**
+     * Verify a one-time code and mint a session — a standalone alternative to
+     * a password, not a second factor, exactly like `console.passkeys`'s
+     * `authenticationVerify` (HITL-5 there).
+     *
+     * PUBLIC — sends no bearer (`requireAuth: false`).
+     *
+     * @param input - The email the code was requested for, and the code itself.
+     * @returns The token, the caller's identity, and the token's lifetime.
+     * @throws {ApiError} `401 otp_rejected` for every failure mode (T2.1.1's
+     *   wire pin) — an unknown email, an expired code, a wrong code and a
+     *   spent code are all indistinguishable to the caller.
+     */
+    verifyCode(input: {
+        email: string;
+        code: string;
+    }): Promise<OtpVerifyResponse>;
+}
+//# sourceMappingURL=otp.d.ts.map

package/dist/src/console/otp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.d.ts","sourceRoot":"","sources":["../../../src/console/otp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAEpE,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAEpE;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,MAAM;;IAGjB;;OAEG;gBACS,IAAI,EAAE,OAAO;IAIzB;;;;;;;;OAQG;IACG,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC;IAS/C;;;;;;;;;;;OAWG;IACG,WAAW,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1D;;;;;;;;;;;;OAYG;IACG,UAAU,CAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;CASrF"}

package/dist/src/console/otp.js

@@ -0,0 +1,118 @@
+/**
+ * `client.console.otp.*` — email one-time-code sign-in, a third standalone
+ * login option beside password and passkey (T2.1.3).
+ *
+ * **Studio-internal, not the published partner contract.** This namespace
+ * lives under the `console` subpath export (`@w6w/sdk/console`), excluded from
+ * `endpoints.json` and from the root barrel (`mod.ts`) — see `docs/console.md`.
+ * `@w6w/sdk`'s instance-state mechanism pin still applies here exactly as it
+ * does to every other namespace (`docs/implementation.md` §MECHANISM PIN —
+ * instance state, never globals): this class holds no state of its own beyond
+ * the injected host, so two clients in one process never share a credential.
+ *
+ * **All three methods are PUBLIC — the login screen has no token.** Mirrors
+ * `console.passkeys`'s login pair exactly: each passes `requireAuth: false`,
+ * without which a tokenless client (the normal case at `/login`, before any
+ * session exists) would hit `requireToken`'s `ConfigError` before `fetch` is
+ * ever called. Wire pins are T2.1.1's contract §Wire pins, above its
+ * `requireTenantAdmin`-guarded `/tenant/login-flags` pair (see
+ * `./tenant-login-flags.ts`).
+ *
+ * **`OtpVerifyResponse` is a type ALIAS of `PasskeyAuthenticationVerifyResponse`,
+ * not a second declaration of the same four fields.** The server's
+ * `POST /auth/otp/verify` answers a byte-identical body to
+ * `id/passkey-login.ts`'s own verify route (T2.1.1's wire pin: "byte-shape
+ * identical to `id/user-login.ts`'s and `id/passkey-login.ts`'s"), and the
+ * passkey names (`PasskeyUser`, `PasskeyAuthenticationVerifyResponse`) are
+ * published and cannot be renamed — a third copy of the same shape would be a
+ * third thing to drift out of sync with the other two.
+ *
+ * @module
+ */
+import {} from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * The `console.otp` namespace on a `W6WClient`.
+ *
+ * @example
+ * ```ts
+ * const client = new W6WClient({ baseUrl: "https://api.example.com" }); // no token — see below
+ * const { providers } = { providers: await client.console.otp.loginProviders() };
+ * if (providers.otp) {
+ *   await client.console.otp.requestCode({ email: "alice@example.com" });
+ *   const { token } = await client.console.otp.verifyCode({
+ *     email: "alice@example.com",
+ *     code: "123456",
+ *   });
+ * }
+ * ```
+ */
+export class OtpApi {
+    #host;
+    /**
+     * @param host - The client this namespace issues requests through.
+     */
+    constructor(host) {
+        this.#host = host;
+    }
+    /**
+     * Which sign-in methods this tenant currently offers.
+     *
+     * PUBLIC — sends no bearer, even on a client that already holds one
+     * (`requireAuth: false`). The `/login` screen calls this before any session
+     * exists, so a tokenless client must be able to reach it.
+     *
+     * @returns `{ password, passkey, otp }`, unwrapped from the `providers` envelope.
+     */
+    async loginProviders() {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/auth/login-providers",
+            requireAuth: false,
+        });
+        return unwrap(res, "providers");
+    }
+    /**
+     * Request a one-time sign-in code by email.
+     *
+     * PUBLIC — sends no bearer (`requireAuth: false`). Answers `202 {ok: true}`
+     * ALWAYS, whether or not a user exists with that email (T2.1.1's wire pin)
+     * — this method discards that body and resolves `void`, since there is
+     * nothing informative in it for the caller to act on.
+     *
+     * @param input - The email to send the code to.
+     * @throws {ApiError} `403 otp_disabled` when the tenant's `otp_enabled` is
+     *   false; `400 invalid_body` for a non-object/non-string body.
+     */
+    async requestCode(input) {
+        await this.#host.request({
+            method: "POST",
+            path: "/auth/otp/request",
+            body: input,
+            requireAuth: false,
+        });
+    }
+    /**
+     * Verify a one-time code and mint a session — a standalone alternative to
+     * a password, not a second factor, exactly like `console.passkeys`'s
+     * `authenticationVerify` (HITL-5 there).
+     *
+     * PUBLIC — sends no bearer (`requireAuth: false`).
+     *
+     * @param input - The email the code was requested for, and the code itself.
+     * @returns The token, the caller's identity, and the token's lifetime.
+     * @throws {ApiError} `401 otp_rejected` for every failure mode (T2.1.1's
+     *   wire pin) — an unknown email, an expired code, a wrong code and a
+     *   spent code are all indistinguishable to the caller.
+     */
+    async verifyCode(input) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/auth/otp/verify",
+            body: input,
+            requireAuth: false,
+        });
+        return res.body;
+    }
+}
+//# sourceMappingURL=otp.js.map

package/dist/src/console/otp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.js","sourceRoot":"","sources":["../../../src/console/otp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAA0C,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAkCrC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,MAAM;IACR,KAAK,CAAU;IAExB;;OAEG;IACH,YAAY,IAAa;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB;YAC7B,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,MAAM,CAAiB,GAAG,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,WAAW,CAAC,KAAwB;QACxC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CAAC,KAAsC;QACrD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB;YACtD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}

package/dist/src/console/reliability.d.ts

@@ -1,5 +1,5 @@
 /**
- * `client.console.reliability.*` — the account-scoped reliability board,
+ * `client.console.reliability.*` — the project-scoped reliability board,
  * relocated from the studio's own API client.
  *
  * **Studio-internal, not the published partner contract.** This namespace
@@ -51,6 +51,36 @@ export interface ReliabilityUptimeDay {
     calls: number;
     errors: ReliabilityErrorMix;
 }
+/**
+ * Per-component detail inside a `ReliabilityVendorStatus.components` map. No
+ * `@w6w/types` dependency here — this is the SDK's own local copy, the same
+ * deliberate pattern `ReliabilityState` already follows.
+ */
+export interface ReliabilityComponentReport {
+    state: ReliabilityState;
+    message?: string;
+}
+/**
+ * One entry in a vendor's own incident history. Field-for-field with core's
+ * `HealthTimelineEntry` — see `ReliabilityComponentReport` for why this is a
+ * local copy rather than an import.
+ */
+export interface ReliabilityTimelineEntry {
+    /** Stable identity, when the source states one — an incident id, not a title. */
+    id?: string;
+    title: string;
+    state: ReliabilityState;
+    /** Component ids (matching `ReliabilityVendorStatus.components`) this entry is about. */
+    components?: string[];
+    /** ISO 8601 — when the incident began. */
+    startedAt?: string;
+    /** ISO 8601 — when the incident was last updated. */
+    updatedAt?: string;
+    /** ISO 8601 — when the incident was resolved. Absent means "not stated". */
+    resolvedAt?: string;
+    /** Link to the vendor's own incident/status page entry, when it has one. */
+    link?: string;
+}
 /** The vendor's own verdict for one service. See `ReliabilityService.vendorStatus`. */
 export interface ReliabilityVendorStatus {
     state: ReliabilityState;
@@ -59,11 +89,27 @@ export interface ReliabilityVendorStatus {
     checkedAt: string;
     /** Keys of the checks behind a non-`ok` verdict. Empty when `ok`. */
     attributedTo: string[];
+    /** Every surface every public check named, worst-state-wins on collision.
+     *  `null` = no public check reported a breakdown at all. */
+    components: Record<string, ReliabilityComponentReport> | null;
+    /** Vendor incident history, newest first. `null` = no public check publishes history
+     *  (Stripe); `[]` = one does and there is nothing in it. The two are DIFFERENT FACTS
+     *  and the studio renders them differently. */
+    timeline: ReliabilityTimelineEntry[] | null;
+    /** The vendor's own status PAGE (not the feed URL), for a link out. `null` when the
+     *  App declares nothing to derive one from. */
+    statusPageUrl: string | null;
 }
 /** One row of the service board — a single external service the account calls. */
 export interface ReliabilityService {
     appId: string;
     displayName: string;
+    /** Inlined catalog icon for this requested service, when it declares one. */
+    iconSrc?: string;
+    /** Optional dark-mode icon variant. */
+    iconSrcDark?: string;
+    /** Brand-colour fallback when the app has no icon. */
+    brandColor?: string;
     state: ReliabilityState;
     hasDeclaredHealth: boolean;
     calls: number;
@@ -73,8 +119,17 @@ export interface ReliabilityService {
     openAdvisories: number;
     /** Non-null while an outage is still open. */
     ongoingOutageId: string | null;
-    /** Null when the account has never called this service. Drives the server's
-     * recency ordering (`?limit=N`) — the client never re-sorts by it. */
+    /**
+     * Null when the account has never called this service.
+     *
+     * Breaks ties in the server's ordering — but only WITHIN an urgency tier. The
+     * server sorts a board by how urgent each row is first (anything degraded or
+     * down on either signal, then anything the window shows trouble in, then the
+     * rest) and by `lastCallAt` descending, nulls last, inside each tier. That
+     * matters most under `?limit=N`: a purely recency-ordered cap can cut the
+     * degraded services the board exists to surface. The client never re-sorts by
+     * this or anything else.
+     */
     lastCallAt: string | null;
     /**
      * Gap-free, exactly `window.days` entries, ONE PER CALENDAR DAY, OLDEST FIRST —
@@ -97,6 +152,26 @@ export interface ReliabilityService {
      * board renders them differently.
      */
     vendorStatus: ReliabilityVendorStatus | null;
+    /**
+     * Which urgency tier the server sorted this row into — and the field a UI
+     * should GROUP on rather than re-deriving the tier from `state`,
+     * `ongoingOutageId` and `vendorStatus` itself.
+     *
+     *   `now`    — degraded or down right now, on YOUR CALLS or PER THE VENDOR.
+     *              Either signal alone is enough: a service can be answering you
+     *              perfectly while its vendor publishes an incident.
+     *   `recent` — clear now, but this window holds a failed stretch or an open
+     *              advisory.
+     *   `none`   — clear.
+     *
+     * `unknown` on either signal is NOT attention: on your calls it means the
+     * window held none (idle, not broken), and on the vendor it means the status
+     * page could not be read — a gap in our reading, not a finding about them.
+     *
+     * This drives the `?limit=N` cut, which is why it is worth having on the
+     * wire: a capped board keeps the most urgent rows, not the most recent ones.
+     */
+    attention: "now" | "recent" | "none";
 }
 /**
  * Account-scoped reliability board (server `GET /reliability/services?days=…`,
@@ -122,12 +197,28 @@ export interface ReliabilityServices {
     };
     services: ReliabilityService[];
 }
+/** Identifier-only project membership discovery; it performs no status probes. */
+export interface ReliabilityServiceMembers {
+    account: string;
+    window: {
+        from: string;
+        to: string;
+        days: number;
+    };
+    uptimeMeans: string;
+    definition: {
+        id: string;
+        version: string;
+        source: string;
+    };
+    appIds: string[];
+}
 /**
  * The `console.reliability` namespace on a `W6WClient`.
  *
  * @example
  * ```ts
- * const board = await client.console.reliability.list(30, 5);
+ * const board = await client.console.reliability.list("prj_123", ["io.w6w.stripe"], 30);
  * ```
  */
 export declare class ReliabilityApi {
@@ -137,13 +228,17 @@ export declare class ReliabilityApi {
      */
     constructor(host: ReliabilityHost);
     /**
-     * Fetch the account-scoped reliability board.
+     * Fetch one project's reliability board.
      *
+     * @param project - The project whose services and calls are reported.
+     * @param appIds - Explicit service filter. The server accepts at most ten ids.
      * @param days - The window size in days. Omitted, the server applies its own default.
      * @param limit - Cap on the number of services returned, most-recently-called first. Omitted, no cap.
      * @returns The board, exactly as the server sent it — no envelope key to peel.
      * @throws {ApiError} On any non-2xx.
      */
-    list(days?: number, limit?: number): Promise<ReliabilityServices>;
+    list(project: string, appIds: readonly string[], days?: number, limit?: number): Promise<ReliabilityServices>;
+    /** Discover project members before issuing bounded status batches. */
+    listMembers(project: string, days?: number): Promise<ReliabilityServiceMembers>;
 }
 //# sourceMappingURL=reliability.d.ts.map

package/dist/src/console/reliability.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reliability.d.ts","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtE,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,uFAAuF;AACvF,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,CAAC;IACxB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,gBAAgB,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;IAC5B,yEAAyE;IACzE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;0EACsE;IACtE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;;;OAOG;IACG,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAQxE"}
+{"version":3,"file":"reliability.d.ts","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEtE,sFAAsF;AACtF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,gBAAgB,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,iFAAiF;IACjF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,gBAAgB,CAAC;IACxB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uFAAuF;AACvF,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,gBAAgB,CAAC;IACxB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;gEAC4D;IAC5D,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,GAAG,IAAI,CAAC;IAC9D;;mDAE+C;IAC/C,QAAQ,EAAE,wBAAwB,EAAE,GAAG,IAAI,CAAC;IAC5C;mDAC+C;IAC/C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,kFAAkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,gBAAgB,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,mBAAmB,CAAC;IAC5B,yEAAyE;IACzE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;;;;OAUG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B;;;;;;;;;;;;OAYG;IACH,YAAY,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC7C;;;;;;;;;;;;;;;;;;OAkBG;IACH,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,qFAAqF;IACrF,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,cAAc;;IAGzB;;OAEG;gBACS,IAAI,EAAE,eAAe;IAIjC;;;;;;;;;OASG;IACG,IAAI,CACR,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,IAAI,CAAC,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC;IAS/B,sEAAsE;IAChE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;CAQtF"}

package/dist/src/console/reliability.js

@@ -1,5 +1,5 @@
 /**
- * `client.console.reliability.*` — the account-scoped reliability board,
+ * `client.console.reliability.*` — the project-scoped reliability board,
  * relocated from the studio's own API client.
  *
  * **Studio-internal, not the published partner contract.** This namespace
@@ -25,7 +25,7 @@
  *
  * @example
  * ```ts
- * const board = await client.console.reliability.list(30, 5);
+ * const board = await client.console.reliability.list("prj_123", ["io.w6w.stripe"], 30);
  * ```
  */
 export class ReliabilityApi {
@@ -37,18 +37,29 @@ export class ReliabilityApi {
         this.#host = host;
     }
     /**
-     * Fetch the account-scoped reliability board.
+     * Fetch one project's reliability board.
      *
+     * @param project - The project whose services and calls are reported.
+     * @param appIds - Explicit service filter. The server accepts at most ten ids.
      * @param days - The window size in days. Omitted, the server applies its own default.
      * @param limit - Cap on the number of services returned, most-recently-called first. Omitted, no cap.
      * @returns The board, exactly as the server sent it — no envelope key to peel.
      * @throws {ApiError} On any non-2xx.
      */
-    async list(days, limit) {
+    async list(project, appIds, days, limit) {
         const res = await this.#host.request({
             method: "GET",
             path: "/reliability/services",
-            query: { days, limit },
+            query: { project, apps: appIds.join(","), days, limit },
+        });
+        return res.body;
+    }
+    /** Discover project members before issuing bounded status batches. */
+    async listMembers(project, days) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/reliability/services/members",
+            query: { project, days },
         });
         return res.body;
     }

package/dist/src/console/reliability.js.map

@@ -1 +1 @@
-{"version":3,"file":"reliability.js","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAwGH;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,IAAa,EAAE,KAAc;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACvB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"reliability.js","sourceRoot":"","sources":["../../../src/console/reliability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA8LH;;;;;;;GAOG;AACH,MAAM,OAAO,cAAc;IAChB,KAAK,CAAkB;IAEhC;;OAEG;IACH,YAAY,IAAqB;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,IAAI,CACR,OAAe,EACf,MAAyB,EACzB,IAAa,EACb,KAAc;QAEd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;SACxD,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAAa;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B;YAC9D,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF"}

package/dist/src/console/step-tests.d.ts

@@ -42,6 +42,7 @@
  * @module
  */
 import { type HttpResponse, type RequestOptions } from "../http.ts";
+import type { StepMeta } from "./apps.ts";
 /**
  * The slice of `W6WClient` this namespace needs: the transport, and nothing
  * else. Structural rather than a concrete client type, so the namespace stays
@@ -72,6 +73,8 @@ export interface StepTest {
     lastRunStatus?: string | null;
     lastRunError?: unknown;
     lastRunOutput?: unknown;
+    /** Metadata of the most recent run; omitted when none was recorded. */
+    lastRunMeta?: StepMeta | null;
 }
 /** The real row `recordRun` creates (mirrors the server's `StepTestRun`). */
 export interface StepTestRun {
@@ -84,6 +87,8 @@ export interface StepTestRun {
     output: unknown;
     error: unknown;
     createdAt: string;
+    /** Metadata the run reported; omitted when none was recorded. */
+    meta?: StepMeta | null;
 }
 /**
  * The `console.stepTests` namespace on a `W6WClient`.
@@ -143,7 +148,7 @@ export declare class StepTestsApi {
      * @param workflowId - The `wf_…` id.
      * @param stepId - The step's id within that workflow.
      * @param body - `stepTestId` (optional), `status`, and optional
-     * `input`/`output`/`error`, forwarded verbatim.
+     * `input`/`output`/`error`/`meta` (the server sanitizes `meta`), forwarded verbatim.
      * @returns The created `StepTestRun`, unwrapped from the `run` envelope (the server answers `201`).
      * @throws {ApiError} `400 invalid_body`/`invalid_status`. No `404` — the
      * route never checks the workflow/step exist before writing.
@@ -154,6 +159,7 @@ export declare class StepTestsApi {
         input?: unknown;
         output?: unknown;
         error?: unknown;
+        meta?: unknown;
     }): Promise<StepTestRun>;
 }
 //# sourceMappingURL=step-tests.d.ts.map

package/dist/src/console/step-tests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"step-tests.d.ts","sourceRoot":"","sources":["../../../src/console/step-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAY;;IAGvB;;OAEG;gBACS,IAAI,EAAE,aAAa;IAI/B;;;;;;;;;OASG;IACG,IAAI,CACR,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GACrF,OAAO,CAAC,QAAQ,CAAC;IASpB;;;;;;OAMG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAQnE;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QACJ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,OAAO,CAAC,WAAW,CAAC;CAQxB"}
+{"version":3,"file":"step-tests.d.ts","sourceRoot":"","sources":["../../../src/console/step-tests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;;GAMG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,WAAW,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CAC/B;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAY;;IAGvB;;OAEG;gBACS,IAAI,EAAE,aAAa;IAI/B;;;;;;;;;OASG;IACG,IAAI,CACR,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GACrF,OAAO,CAAC,QAAQ,CAAC;IASpB;;;;;;OAMG;IACG,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAQnE;;;;;;;;;;;;;;;;OAgBG;IACG,SAAS,CACb,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;QACJ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,OAAO,CAAC;QAChB,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,GACA,OAAO,CAAC,WAAW,CAAC;CAQxB"}

package/dist/src/console/step-tests.js

@@ -112,7 +112,7 @@ export class StepTestsApi {
      * @param workflowId - The `wf_…` id.
      * @param stepId - The step's id within that workflow.
      * @param body - `stepTestId` (optional), `status`, and optional
-     * `input`/`output`/`error`, forwarded verbatim.
+     * `input`/`output`/`error`/`meta` (the server sanitizes `meta`), forwarded verbatim.
      * @returns The created `StepTestRun`, unwrapped from the `run` envelope (the server answers `201`).
      * @throws {ApiError} `400 invalid_body`/`invalid_status`. No `404` — the
      * route never checks the workflow/step exist before writing.