@w6w/sdk 0.9.15 → 0.9.23

package/dist/src/console/storage.js

@@ -0,0 +1,198 @@
+/**
+ * `client.console.storage.*` — the account's storage bindings and agent-limit
+ * settings: the managed-store destination an account uploads to, and the caps
+ * (§P4: `max_file_bytes`, `max_package_bytes`, `max_files`, `retentionDays`)
+ * that apply to those uploads.
+ *
+ * **Studio-internal, not the published partner contract.** Both routes are
+ * account-admin surfaces (a member's write answers `403 forbidden`; another
+ * account's id is the uniform `404`) and live under the `console` subpath
+ * export only — deliberately absent from `endpoints.json` and from the root
+ * barrel, exactly like `console.models`' catalog edits (P-D5's console-only
+ * rule).
+ *
+ * **Nothing here carries a destination or a credential.** T4.1.1's wire shape
+ * is an allowlist: a binding never returns its bucket, region, endpoint, root
+ * prefix, credential or a revision's `config`, and settings never return a
+ * storage path — only the numeric limits and a binding *id*. The types below
+ * model that allowlist, not the row, so there is no field for a caller to be
+ * tempted by.
+ *
+ * **The account is never a parameter.** Both services resolve the account from
+ * the caller's own credential (the account scope on the bearer) plus a
+ * server-side admin check, never from an id this client sends — the same rule
+ * `console.tenantLoginFlags` and `console.tenantOAuthApps` follow.
+ *
+ * @module
+ */
+import { ApiError } from "../errors.js";
+import { path } from "../http.js";
+import { unwrap } from "../types.js";
+/**
+ * A binding is answered FLAT (`c.json(bindingJson(view))`), not inside an
+ * envelope. Accept that, and refuse a body that is not one.
+ */
+function bindingBody(res) {
+    const body = res.body;
+    if (typeof body === "object" && body !== null && !Array.isArray(body) &&
+        typeof body.id === "string") {
+        return body;
+    }
+    throw new ApiError(res.status, "bad_response", `Server returned a ${res.status} without a binding object in the response body.`, body);
+}
+/** The same allowlist for settings, whose only required key is the effective `limits`. */
+function settingsBody(res) {
+    const body = res.body;
+    if (typeof body === "object" && body !== null && !Array.isArray(body) &&
+        typeof body.limits === "object") {
+        return body;
+    }
+    throw new ApiError(res.status, "bad_response", `Server returned a ${res.status} without a settings object in the response body.`, body);
+}
+/**
+ * `client.console.storage.bindings.*` — `GET|POST /storage-bindings`,
+ * `GET|DELETE /storage-bindings/:id`, `POST /storage-bindings/:id/migrate`.
+ *
+ * Reads are open to account members; `create`, `delete` and `migrate` need an
+ * account admin (`403 forbidden` otherwise).
+ */
+export class StorageBindingsApi {
+    #host;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host) {
+        this.#host = host;
+    }
+    /** `GET /storage-bindings` — the account's bindings, retired ones elided unless asked for. */
+    async list(options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/storage-bindings",
+            query: { includeRetired: options?.includeRetired },
+            signal: options?.signal,
+        });
+        return unwrap(res, "bindings");
+    }
+    /**
+     * `POST /storage-bindings` — store a destination (`201`, the binding answered flat).
+     *
+     * @throws {ApiError} `403 forbidden` (not an account admin), `422` for a refused
+     *   destination (a non-empty `rootPrefix`, an unreachable endpoint).
+     */
+    async create(input, options) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/storage-bindings",
+            body: input,
+            signal: options?.signal,
+        });
+        return bindingBody(res);
+    }
+    /**
+     * `GET /storage-bindings/:id` — one binding.
+     *
+     * @throws {ApiError} `404 not_found` — uniform, so another account's id is
+     *   indistinguishable from a nonexistent one.
+     */
+    async get(id, options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/storage-bindings/${id}`,
+            signal: options?.signal,
+        });
+        return bindingBody(res);
+    }
+    /**
+     * `DELETE /storage-bindings/:id` — retire a binding. Resolves to nothing.
+     *
+     * Retire, not erase: the row stays readable (with `includeRetired`) so
+     * versions that live on it keep their provenance.
+     *
+     * @throws {ApiError} `409` while asset versions still sit under the binding
+     *   (`connection_in_use`-shaped refusal), `403 forbidden`, `404 not_found`.
+     */
+    async delete(id, options) {
+        await this.#host.request({
+            method: "DELETE",
+            path: path `/storage-bindings/${id}`,
+            signal: options?.signal,
+        });
+    }
+    /**
+     * `POST /storage-bindings/:id/migrate` — enqueue copy → verify → swap onto a
+     * new revision (`202`).
+     *
+     * The migration is asynchronous: the answer counts the jobs, and the caller
+     * polls the binding (`get`) or the version it moves.
+     *
+     * @throws {ApiError} `403 forbidden`, `404 not_found`, `409` when a migration
+     *   is already running.
+     */
+    async migrate(id, options) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/storage-bindings/${id}/migrate`,
+            signal: options?.signal,
+        });
+        return res.body;
+    }
+}
+/**
+ * `client.console.storage.settings.*` — `GET|PATCH /agent-settings`.
+ *
+ * Account-scoped (§P4/A-D4): members may read, only an account admin may patch.
+ */
+export class AgentSettingsApi {
+    #host;
+    /** @param host - The client this namespace issues requests through. */
+    constructor(host) {
+        this.#host = host;
+    }
+    /** `GET /agent-settings` — the effective limits and the stored values behind them. */
+    async get(options) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/agent-settings",
+            signal: options?.signal,
+        });
+        return settingsBody(res);
+    }
+    /**
+     * `PATCH /agent-settings` — change the stored values. Fields are sent by
+     * omission; `null` clears one back to the default.
+     *
+     * @throws {ApiError} `403 forbidden` (not an account admin), `422` for an
+     *   unknown field, a non-positive value or one above the server ceiling, and
+     *   the uniform `404` for an unknown `storageBindingId`.
+     */
+    async patch(input, options) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: "/agent-settings",
+            body: input,
+            signal: options?.signal,
+        });
+        return settingsBody(res);
+    }
+}
+/**
+ * The `console.storage` namespace on a `W6WClient` — bindings and the agent
+ * limits they bound.
+ *
+ * @example
+ * ```ts
+ * const [binding] = await client.console.storage.bindings.list();
+ * await client.console.storage.settings.patch({ maxFileBytes: 10 * 1024 * 1024 });
+ * ```
+ */
+export class StorageConsoleApi {
+    /** `console.storage.bindings.*`. */
+    bindings;
+    /** `console.storage.settings.*`. */
+    settings;
+    /** @param host - The client this namespace group issues requests through. */
+    constructor(host) {
+        this.bindings = new StorageBindingsApi(host);
+        this.settings = new AgentSettingsApi(host);
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/src/console/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/console/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAsHrC;;;GAGG;AACH,SAAS,WAAW,CAAC,GAA0B;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IACE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACjE,OAAQ,IAAgC,CAAC,EAAE,KAAK,QAAQ,EACxD,CAAC;QACD,OAAO,IAAsB,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,cAAc,EACd,qBAAqB,GAAG,CAAC,MAAM,iDAAiD,EAChF,IAAI,CACL,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,GAA0B;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IACE,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACjE,OAAQ,IAAgC,CAAC,MAAM,KAAK,QAAQ,EAC5D,CAAC;QACD,OAAO,IAAqB,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,QAAQ,CAChB,GAAG,CAAC,MAAM,EACV,cAAc,EACd,qBAAqB,GAAG,CAAC,MAAM,kDAAkD,EACjF,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAqB;IAEnC,uEAAuE;IACvE,YAAY,IAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,IAAI,CAAC,OAAoC;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,EAAE;YAClD,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAmB,GAAG,EAAE,UAAU,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,KAAgC,EAChC,OAA+B;QAE/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,OAA+B;QACnD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAA,qBAAqB,EAAE,EAAE;YACnC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAA+B;QACtD,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAChC,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,IAAI,CAAA,qBAAqB,EAAE,EAAE;YACnC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,OAA+B;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB;YACrD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,qBAAqB,EAAE,UAAU;YAC3C,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAClB,KAAK,CAAqB;IAEnC,uEAAuE;IACvE,YAAY,IAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,GAAG,CAAC,OAA+B;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,CAAC,KAAyB,EAAE,OAA+B;QACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,iBAAiB;IAC5B,oCAAoC;IAC3B,QAAQ,CAAqB;IACtC,oCAAoC;IAC3B,QAAQ,CAAmB;IAEpC,6EAA6E;IAC7E,YAAY,IAAwB;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF"}

package/dist/src/console/tokens.d.ts

@@ -74,6 +74,41 @@ export interface ApiToken {
     revokedAt: string | null;
     /** ISO-8601 timestamp of the token's last authenticated use, or `null` while unused. Optional: absent on a server build that predates this field. */
     lastUsedAt?: string | null;
+    /** What the token may do, or `null` for legacy full access (every token created without scopes). */
+    scopes: TokenScopes | null;
+    /** The IP allow-list in canonical `addr/prefix` form. `[]` means any IP. */
+    allowedIps: string[];
+}
+/**
+ * A token's scopes (wire version 1). `null` on {@linkcode ApiToken.scopes} means
+ * legacy full access. Reads are always allowed; the server rejects any other
+ * shape with `400 invalid_scopes`.
+ */
+export interface TokenScopes {
+    /** Always `1`. */
+    v: 1;
+    /** Which callables the token may invoke: all, none, or an explicit list of `fn_`/`ep_`/`wf_` ids (1..100). */
+    invoke: "all" | "none" | {
+        callables: string[];
+    };
+    /** Which kinds of definition the token may manage. */
+    manage: {
+        functions: boolean;
+        endpoints: boolean;
+        workflows: boolean;
+    };
+}
+/** Options for {@linkcode TokensApi.create}. */
+export interface CreateTokenOptions {
+    /** Caller-chosen label. */
+    name: string;
+    /** Scopes; omit for full access. */
+    scopes?: TokenScopes;
+    /**
+     * IP allow-list. A string (comma/whitespace separated) or an array, sent
+     * exactly as given — the server parses and canonicalizes it. Omit for any IP.
+     */
+    allowedIps?: string | string[];
 }
 /**
  * `create`'s result — the token's metadata plus its plaintext secret, shown
@@ -127,11 +162,26 @@ export declare class TokensApi {
      * established "no envelope key" pattern. `unwrap()` is deliberately not
      * called here: there is no single key to unwrap.
      *
-     * @param name - Caller-chosen label.
+     * @param nameOrOptions - A label, or `{name, scopes?, allowedIps?}`. The string
+     * form sends exactly `{name}`; undefined options are omitted from the body.
      * @returns The created token's metadata plus its one-time plaintext secret.
-     * @throws {ApiError} `400 invalid_name`.
+     * @throws {ApiError} `400 invalid_name`/`invalid_scopes`/`invalid_allowed_ips`.
+     */
+    create(nameOrOptions: string | CreateTokenOptions): Promise<CreateTokenResponse>;
+    /**
+     * Rotate a token: mint a new secret for it. **The old secret stops working
+     * at once.** **Returns the new plaintext secret exactly once** — like
+     * {@linkcode create}, there is no reveal-later route, so a caller that does
+     * not capture it here has permanently lost it.
+     *
+     * No envelope key to peel — the whole body IS `{token, secret}`, so this
+     * returns `res.body` as `create` does, not via `unwrap()`.
+     *
+     * @param id - The token id.
+     * @returns The token's metadata plus its new one-time plaintext secret.
+     * @throws {ApiError} `404 unknown_token`/`unknown_account`.
      */
-    create(name: string): Promise<CreateTokenResponse>;
+    rotate(id: string): Promise<CreateTokenResponse>;
     /**
      * Disable a token. Reversible — see {@linkcode enable}.
      *

package/dist/src/console/tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../src/console/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,yFAAyF;AACzF,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qJAAqJ;IACrJ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,KAAK,EAAE,QAAQ,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAS;;IAGpB;;OAEG;gBACS,IAAI,EAAE,UAAU;IAI5B;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKjC;;;;;;;;;;;;;;OAcG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IASxD;;;;;;OAMG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS5C;;;;;;;OAOG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS3C;;;;;;OAMG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAQ5C"}
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../src/console/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,yFAAyF;AACzF,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,wBAAwB;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,qJAAqJ;IACrJ,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oGAAoG;IACpG,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B,4EAA4E;IAC5E,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,kBAAkB;IAClB,CAAC,EAAE,CAAC,CAAC;IACL,8GAA8G;IAC9G,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACjD,sDAAsD;IACtD,MAAM,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;CACxE;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,KAAK,EAAE,QAAQ,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,SAAS;;IAGpB;;OAEG;gBACS,IAAI,EAAE,UAAU;IAI5B;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAKjC;;;;;;;;;;;;;;;OAeG;IACG,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgBtF;;;;;;;;;;;;OAYG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAStD;;;;;;OAMG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS5C;;;;;;;OAOG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAS3C;;;;;;OAMG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAQ5C"}

package/dist/src/console/tokens.js

@@ -83,15 +83,46 @@ export class TokensApi {
      * established "no envelope key" pattern. `unwrap()` is deliberately not
      * called here: there is no single key to unwrap.
      *
-     * @param name - Caller-chosen label.
+     * @param nameOrOptions - A label, or `{name, scopes?, allowedIps?}`. The string
+     * form sends exactly `{name}`; undefined options are omitted from the body.
      * @returns The created token's metadata plus its one-time plaintext secret.
-     * @throws {ApiError} `400 invalid_name`.
+     * @throws {ApiError} `400 invalid_name`/`invalid_scopes`/`invalid_allowed_ips`.
      */
-    async create(name) {
+    async create(nameOrOptions) {
+        const body = typeof nameOrOptions === "string"
+            ? { name: nameOrOptions }
+            : { name: nameOrOptions.name };
+        if (typeof nameOrOptions !== "string") {
+            if (nameOrOptions.scopes !== undefined)
+                body.scopes = nameOrOptions.scopes;
+            if (nameOrOptions.allowedIps !== undefined)
+                body.allowedIps = nameOrOptions.allowedIps;
+        }
         const res = await this.#host.request({
             method: "POST",
             path: "/tokens",
-            body: { name },
+            body,
+        });
+        return res.body;
+    }
+    /**
+     * Rotate a token: mint a new secret for it. **The old secret stops working
+     * at once.** **Returns the new plaintext secret exactly once** — like
+     * {@linkcode create}, there is no reveal-later route, so a caller that does
+     * not capture it here has permanently lost it.
+     *
+     * No envelope key to peel — the whole body IS `{token, secret}`, so this
+     * returns `res.body` as `create` does, not via `unwrap()`.
+     *
+     * @param id - The token id.
+     * @returns The token's metadata plus its new one-time plaintext secret.
+     * @throws {ApiError} `404 unknown_token`/`unknown_account`.
+     */
+    async rotate(id) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/tokens/${id}/rotate`,
+            body: {},
         });
         return res.body;
     }

package/dist/src/console/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/console/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAwDrC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,SAAS;IACX,KAAK,CAAa;IAE3B;;OAEG;IACH,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,CAAa,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,EAAE,IAAI,EAAE;SACf,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,UAAU;YACjC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,SAAS;YAChC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,SAAS;YAChC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../src/console/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAqB,IAAI,EAAuB,MAAM,YAAY,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAuFrC;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,SAAS;IACX,KAAK,CAAa;IAE3B;;OAEG;IACH,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClF,OAAO,MAAM,CAAa,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,MAAM,CAAC,aAA0C;QACrD,MAAM,IAAI,GAA4B,OAAO,aAAa,KAAK,QAAQ;YACrE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE;YACzB,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;YAC3E,IAAI,aAAa,CAAC,UAAU,KAAK,SAAS;gBAAE,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS;YACf,IAAI;SACL,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB;YACxD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,SAAS;YAChC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,EAAU;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,UAAU;YACjC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,SAAS;YAChC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAU;YAC5C,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAA,WAAW,EAAE,SAAS;YAChC,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAW,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/src/console/vault.d.ts

@@ -58,7 +58,7 @@ export interface VaultHost {
 export interface VaultSecretSummary {
     /** Server-issued id, `sec_…`. */
     id: string;
-    /** Caller-chosen name, matching `^[a-z_][a-z0-9_]*$`. */
+    /** Caller-chosen name, matching `^[A-Za-z_][A-Za-z0-9_]*$` (case-sensitive). */
     name: string;
     /** Free-text description; `""` when unset. */
     description: string;
@@ -128,7 +128,7 @@ export declare class VaultApi {
      * `value` is opaque — forwarded verbatim, never inspected, logged, or
      * transformed.
      *
-     * @param body - `name` (unique, matches `^[a-z_][a-z0-9_]*$`), `value` (the
+     * @param body - `name` (unique, matches `^[A-Za-z_][A-Za-z0-9_]*$`), `value` (the
      * plaintext to store), and an optional `description`.
      * @returns The created secret, unwrapped from the `secret` envelope (the
      * server answers `201`). Never carries `value`.

package/dist/src/console/vault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../../src/console/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,QAAQ;;IAGnB;;OAEG;gBACS,IAAI,EAAE,SAAS;IAI3B;;;;;OAKG;IACG,IAAI,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAK3C;;;;;;;;;;;OAWG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKlD;;;;;;;;;;;OAWG;IACG,MAAM,CACV,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,kBAAkB,CAAC;IAK9B;;;;;;;;;;OAUG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,kBAAkB,CAAC;IAS9B;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC;;;;;;;;;;;;;;;OAeG;IACG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAQhD"}
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../../../src/console/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAG1E;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,QAAQ;;IAGnB;;OAEG;gBACS,IAAI,EAAE,SAAS;IAI3B;;;;;OAKG;IACG,IAAI,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAK3C;;;;;;;;;;;OAWG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKlD;;;;;;;;;;;OAWG;IACG,MAAM,CACV,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC,kBAAkB,CAAC;IAK9B;;;;;;;;;;OAUG;IACG,MAAM,CACV,EAAE,EAAE,MAAM,EACV,IAAI,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,kBAAkB,CAAC;IAS9B;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC;;;;;;;;;;;;;;;OAeG;IACG,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAQhD"}

package/dist/src/console/vault.js

@@ -92,7 +92,7 @@ export class VaultApi {
      * `value` is opaque — forwarded verbatim, never inspected, logged, or
      * transformed.
      *
-     * @param body - `name` (unique, matches `^[a-z_][a-z0-9_]*$`), `value` (the
+     * @param body - `name` (unique, matches `^[A-Za-z_][A-Za-z0-9_]*$`), `value` (the
      * plaintext to store), and an optional `description`.
      * @returns The created secret, unwrapped from the `secret` envelope (the
      * server answers `201`). Never carries `value`.

package/dist/src/context.d.ts

@@ -0,0 +1,68 @@
+/**
+ * `client.context.*` — context collections and their text entries (contract 0.11.0).
+ *
+ * `entries.update` is a precondition write: it sends the body `revision` and,
+ * when given, the `x-w6w-if-unmodified-since` header. A missing header is a
+ * `428`, a stale one a `409` — both surface as {@linkcode ApiError}.
+ *
+ * @module
+ */
+import { type CallOptions, type HttpResponse, type RequestOptions } from "./http.ts";
+import { type ContextApi as ContextApiShape, type ContextCollection, type ContextEntry, type ContextEntryView, type CreateContextCollectionInput, type CreateContextEntryInput, type CreateStandaloneContextEntryInput, type ListArchivedOptions, type ListContextEntriesOptions, type ListPagedOptions, type PreconditionOptions, type UpdateContextCollectionInput, type UpdateContextEntryInput } from "./types.ts";
+/** The slice of `W6WClient` this namespace needs: the transport and nothing else. */
+export interface ContextHost {
+    /** Perform one request. */
+    request<T>(options: RequestOptions): Promise<HttpResponse<T>>;
+}
+/** The `client.context.entries.*` half. */
+declare class CollectionEntriesApi {
+    #private;
+    constructor(host: ContextHost);
+    /** List a collection's entries. `id` is the collection id. */
+    list(id: string, opts?: ListArchivedOptions): Promise<ContextEntry[]>;
+    /** Add a text entry to a collection. */
+    create(id: string, input: CreateContextEntryInput, opts?: CallOptions): Promise<ContextEntryView>;
+    /** Replace an entry's text. Sends body `revision` and the precondition header when given. */
+    update(id: string, entryId: string, input: UpdateContextEntryInput, opts?: PreconditionOptions): Promise<ContextEntryView>;
+}
+/** `client.context` — see the module doc. */
+export declare class ContextApi implements ContextApiShape {
+    #private;
+    /** Text entries of a collection. */
+    readonly entries: CollectionEntriesApi;
+    constructor(host: ContextHost);
+    /** List collections visible to the caller. */
+    list(opts?: ListPagedOptions): Promise<ContextCollection[]>;
+    /** Create an (empty) collection. */
+    create(input: CreateContextCollectionInput, opts?: CallOptions): Promise<ContextCollection>;
+    /** Fetch one collection. */
+    get(id: string, opts?: CallOptions): Promise<ContextCollection>;
+    /** Patch a collection's name, description or tags. */
+    update(id: string, patch: UpdateContextCollectionInput, opts?: CallOptions): Promise<ContextCollection>;
+    /** Archive a collection; returns the archived row. */
+    archive(id: string, opts?: CallOptions): Promise<ContextCollection>;
+}
+/**
+ * `client.contextEntries.*` — top-level, collection-independent context entries
+ * (contract 0.12.0). `update` is a precondition write like `context.entries.update`.
+ */
+export declare class ContextEntriesApi {
+    #private;
+    constructor(host: ContextHost);
+    /** List entries visible to the caller; `collectionId` filters to one collection. */
+    list(opts?: ListContextEntriesOptions): Promise<ContextEntry[]>;
+    /** Create a text entry, optionally a member of `collectionIds`. */
+    create(input: CreateStandaloneContextEntryInput, opts?: CallOptions): Promise<ContextEntryView>;
+    /** Fetch one entry. */
+    get(id: string, opts?: CallOptions): Promise<ContextEntryView>;
+    /** Replace an entry's text. Sends body `revision` and the precondition header when given. */
+    update(id: string, input: UpdateContextEntryInput, opts?: PreconditionOptions): Promise<ContextEntryView>;
+    /** Archive an entry. */
+    archive(id: string, opts?: CallOptions): Promise<ContextEntry>;
+    /** Add an entry to a collection (idempotent). */
+    addToCollection(id: string, collectionId: string, opts?: CallOptions): Promise<ContextEntry>;
+    /** Remove an entry from a collection (idempotent). */
+    removeFromCollection(id: string, collectionId: string, opts?: CallOptions): Promise<ContextEntry>;
+}
+export {};
+//# sourceMappingURL=context.d.ts.map

package/dist/src/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../src/context.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAQ,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3F,OAAO,EACL,KAAK,UAAU,IAAI,eAAe,EAClC,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC5B,KAAK,iCAAiC,EACtC,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EAExB,KAAK,4BAA4B,EACjC,KAAK,uBAAuB,EAC7B,MAAM,YAAY,CAAC;AAKpB,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC/D;AAED,2CAA2C;AAC3C,cAAM,oBAAoB;;gBAGZ,IAAI,EAAE,WAAW;IAI7B,8DAA8D;IACxD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAU3E,wCAAwC;IAClC,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,uBAAuB,EAC9B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,gBAAgB,CAAC;IAU5B,6FAA6F;IACvF,MAAM,CACV,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,uBAAuB,EAC9B,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,gBAAgB,CAAC;CAY7B;AAED,6CAA6C;AAC7C,qBAAa,UAAW,YAAW,eAAe;;IAEhD,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;gBAE3B,IAAI,EAAE,WAAW;IAK7B,8CAA8C;IACxC,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAUjE,oCAAoC;IAC9B,MAAM,CACV,KAAK,EAAE,4BAA4B,EACnC,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,iBAAiB,CAAC;IAU7B,4BAA4B;IACtB,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IASrE,sDAAsD;IAChD,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,4BAA4B,EACnC,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,iBAAiB,CAAC;IAU7B,sDAAsD;IAChD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAQ1E;AAED;;;GAGG;AACH,qBAAa,iBAAiB;;gBAGhB,IAAI,EAAE,WAAW;IAI7B,oFAAoF;IAC9E,IAAI,CAAC,IAAI,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAcrE,mEAAmE;IAC7D,MAAM,CACV,KAAK,EAAE,iCAAiC,EACxC,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,gBAAgB,CAAC;IAU5B,uBAAuB;IACjB,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC;IASpE,6FAA6F;IACvF,MAAM,CACV,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,uBAAuB,EAC9B,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,gBAAgB,CAAC;IAa5B,wBAAwB;IAClB,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IASpE,iDAAiD;IAC3C,eAAe,CACnB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,YAAY,CAAC;IASxB,sDAAsD;IAChD,oBAAoB,CACxB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,YAAY,CAAC;CAQzB"}

package/dist/src/context.js

@@ -0,0 +1,195 @@
+/**
+ * `client.context.*` — context collections and their text entries (contract 0.11.0).
+ *
+ * `entries.update` is a precondition write: it sends the body `revision` and,
+ * when given, the `x-w6w-if-unmodified-since` header. A missing header is a
+ * `428`, a stale one a `409` — both surface as {@linkcode ApiError}.
+ *
+ * @module
+ */
+import { path } from "./http.js";
+import { unwrap, } from "./types.js";
+/** The precondition header (same name as the workflow and function arms). */
+const PRECONDITION_HEADER = "x-w6w-if-unmodified-since";
+/** The `client.context.entries.*` half. */
+class CollectionEntriesApi {
+    #host;
+    constructor(host) {
+        this.#host = host;
+    }
+    /** List a collection's entries. `id` is the collection id. */
+    async list(id, opts) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/context-collections/${id}/entries`,
+            query: { includeArchived: opts?.includeArchived },
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entries");
+    }
+    /** Add a text entry to a collection. */
+    async create(id, input, opts) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/context-collections/${id}/entries`,
+            body: input,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+    /** Replace an entry's text. Sends body `revision` and the precondition header when given. */
+    async update(id, entryId, input, opts) {
+        const res = await this.#host.request({
+            method: "PUT",
+            path: path `/context-collections/${id}/entries/${entryId}`,
+            body: input,
+            ...(opts?.ifUnmodifiedSince
+                ? { headers: { [PRECONDITION_HEADER]: opts.ifUnmodifiedSince } }
+                : {}),
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+}
+/** `client.context` — see the module doc. */
+export class ContextApi {
+    #host;
+    /** Text entries of a collection. */
+    entries;
+    constructor(host) {
+        this.#host = host;
+        this.entries = new CollectionEntriesApi(host);
+    }
+    /** List collections visible to the caller. */
+    async list(opts) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/context-collections",
+            query: { includeArchived: opts?.includeArchived, limit: opts?.limit },
+            signal: opts?.signal,
+        });
+        return unwrap(res, "collections");
+    }
+    /** Create an (empty) collection. */
+    async create(input, opts) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/context-collections",
+            body: input,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "collection");
+    }
+    /** Fetch one collection. */
+    async get(id, opts) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/context-collections/${id}`,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "collection");
+    }
+    /** Patch a collection's name, description or tags. */
+    async update(id, patch, opts) {
+        const res = await this.#host.request({
+            method: "PATCH",
+            path: path `/context-collections/${id}`,
+            body: patch,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "collection");
+    }
+    /** Archive a collection; returns the archived row. */
+    async archive(id, opts) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/context-collections/${id}/archive`,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "collection");
+    }
+}
+/**
+ * `client.contextEntries.*` — top-level, collection-independent context entries
+ * (contract 0.12.0). `update` is a precondition write like `context.entries.update`.
+ */
+export class ContextEntriesApi {
+    #host;
+    constructor(host) {
+        this.#host = host;
+    }
+    /** List entries visible to the caller; `collectionId` filters to one collection. */
+    async list(opts) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: "/context-entries",
+            query: {
+                collectionId: opts?.collectionId,
+                includeArchived: opts?.includeArchived,
+                project: opts?.project,
+            },
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entries");
+    }
+    /** Create a text entry, optionally a member of `collectionIds`. */
+    async create(input, opts) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: "/context-entries",
+            body: input,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+    /** Fetch one entry. */
+    async get(id, opts) {
+        const res = await this.#host.request({
+            method: "GET",
+            path: path `/context-entries/${id}`,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+    /** Replace an entry's text. Sends body `revision` and the precondition header when given. */
+    async update(id, input, opts) {
+        const res = await this.#host.request({
+            method: "PUT",
+            path: path `/context-entries/${id}`,
+            body: input,
+            ...(opts?.ifUnmodifiedSince
+                ? { headers: { [PRECONDITION_HEADER]: opts.ifUnmodifiedSince } }
+                : {}),
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+    /** Archive an entry. */
+    async archive(id, opts) {
+        const res = await this.#host.request({
+            method: "POST",
+            path: path `/context-entries/${id}/archive`,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+    /** Add an entry to a collection (idempotent). */
+    async addToCollection(id, collectionId, opts) {
+        const res = await this.#host.request({
+            method: "PUT",
+            path: path `/context-entries/${id}/collections/${collectionId}`,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+    /** Remove an entry from a collection (idempotent). */
+    async removeFromCollection(id, collectionId, opts) {
+        const res = await this.#host.request({
+            method: "DELETE",
+            path: path `/context-entries/${id}/collections/${collectionId}`,
+            signal: opts?.signal,
+        });
+        return unwrap(res, "entry");
+    }
+}
+//# sourceMappingURL=context.js.map