@warmhub/sdk-ts 0.52.0 → 0.53.0

package/dist/{chunk-74GPEEAF.js → chunk-L5PODJ66.js}

@@ -2746,7 +2746,7 @@ async function submitOperationsViaStream(client, args) {
           orgName: args.orgName,
           repoName: args.repoName,
           streamId,
-          componentId: args.componentId,
+          componentRef: args.componentRef,
           committer: args.committer,
           message: args.message,
           operations: chunk
@@ -3652,7 +3652,7 @@ function validateWarmHubClientOptions(options) {
     throw new TypeError(`Unknown WarmHubClient option "${key}"${hint}`);
   }
 }
-var SDK_VERSION = "0.52.0" ;
+var SDK_VERSION = "0.53.0" ;
 var DEFAULT_API_URL = "https://api.warmhub.ai";
 var UNBATCHED_TRPC_PATHS = /* @__PURE__ */ new Set([
   "repo.shapeInstanceCounts",
@@ -4011,36 +4011,23 @@ var WarmHubClient = class _WarmHubClient {
     }
   };
   /**
-   * Lightweight permission checks for UI gating and service-side authorization probes.
+   * Effective-access resolution for UI gating and service-side authorization.
+   * First-party surface (web UI + whedge edge); the underlying `access.resolve`
+   * procedure is `@internal`.
+   * @internal
    */
   access = {
     /**
-     * Check whether the caller has a repo-scoped permission.
-     *
-     * @param permission Permission string such as `repo:read`, `repo:write`, `repo:configure`, or `repo:admin`.
+     * Resolve the caller's effective access for a batch of repos and/or orgs
+     * (addressed by name). Returns the coarse scope SET per target so one call
+     * answers any permission via `scopes.includes(...)` — e.g.
+     * `scopes.includes('repo:configure')`. Non-throwing: `visible: false` means
+     * not-found/not-visible; `scopes: []` means authenticated-but-no-access.
+     * Correlate results by the echoed `orgName`/`repoName`, not by position.
      */
-    checkRepoPermission: async (orgName, repoName, permission) => {
+    resolve: async (input) => {
       try {
-        return await this.trpc.access.checkRepoPermission.query({
-          orgName,
-          repoName,
-          permission
-        });
-      } catch (error) {
-        throw toWarmHubError(error);
-      }
-    },
-    /**
-     * Check whether the caller has an org-scoped permission.
-     *
-     * @param permission Permission string such as `org:read`, `org:configure`, or `org:admin`.
-     */
-    checkOrgPermission: async (orgName, permission) => {
-      try {
-        return await this.trpc.access.checkOrgPermission.query({
-          orgName,
-          permission
-        });
+        return await this.trpc.access.resolve.query(input);
       } catch (error) {
         throw toWarmHubError(error);
       }
@@ -4138,14 +4125,14 @@ var WarmHubClient = class _WarmHubClient {
       }
     },
     /**
-     * Fetch one installed component by component ID.
+     * Fetch one installed component by its `Org/Name` ref.
      */
-    get: async (orgName, repoName, componentId) => {
+    get: async (orgName, repoName, componentRef) => {
       try {
         return await this.trpc.component.get.query({
           orgName,
           repoName,
-          componentId
+          componentRef
         });
       } catch (error) {
         throw toWarmHubError(error);
@@ -4282,7 +4269,7 @@ var WarmHubClient = class _WarmHubClient {
      * @param message Optional commit message stored with the submitted operations.
      * @param operations Add, revise, or retract operations to submit in order.
      * @param opts.committer Optional wref identifying the actor on whose behalf the write is made. Must be a full wref string like `"Agent/bot-1"` (a thing that already exists), or a cross-repo wref like `"wh:other-org/other-repo/Agent/bot-1"`. Bare names such as `"eval-runner"` are rejected by the backend with a "Thing wref required" error — there is no implicit shape.
-     * @param opts.componentId Attribute writes to an installed component when the caller is allowed to claim it.
+     * @param opts.componentRef Attribute writes to an installed component, identified by its `Org/Name` ref, when the caller is allowed to claim it.
      * @param opts.chunkSize Maximum operations per stream append. Values are clamped by the SDK.
      * @param opts.skipExisting Return `noop` for add operations whose target already exists.
      * @param opts.streamId Advanced continuation hook for caller-managed streams.
@@ -4295,7 +4282,7 @@ var WarmHubClient = class _WarmHubClient {
           repoName,
           committer: opts?.committer,
           message,
-          componentId: opts?.componentId,
+          componentRef: opts?.componentRef,
           chunkSize: opts?.chunkSize,
           skipExisting: opts?.skipExisting,
           streamId: opts?.streamId,
@@ -4956,7 +4943,7 @@ var WarmHubClient = class _WarmHubClient {
           orgName,
           repoName,
           match: opts?.match,
-          componentId: opts?.componentId,
+          componentRef: opts?.componentRef,
           excludeComponents: opts?.excludeComponents,
           includeRetracted: opts?.includeRetracted
         });
@@ -5144,6 +5131,27 @@ var WarmHubClient = class _WarmHubClient {
         throw toWarmHubError(error);
       }
     },
+    /**
+     * Reveal the raw webhook URL(s) for a subscription.
+     *
+     * Reads return only `webhookOrigin`/`fallbackWebhookOrigin` (scheme://host);
+     * the raw URL path is a bearer secret. This break-glass call returns the
+     * raw URL(s) and is audit-logged server-side. Requires `repo:configure`.
+     * Because it returns the secret, a name-scoped principal (e.g. a component
+     * setup token) may reveal only the subscriptions it is scoped to — a
+     * stricter contract than the redacted `get`/`list`, which are unscoped.
+     */
+    reveal: async (orgName, repoName, name) => {
+      try {
+        return await this.trpc.subscription.reveal.query({
+          orgName,
+          repoName,
+          name
+        });
+      } catch (error) {
+        throw toWarmHubError(error);
+      }
+    },
     /**
      * List subscriptions attached to a repository.
      */
@@ -5442,7 +5450,7 @@ var WarmHubClient = class _WarmHubClient {
           includeRetracted: opts?.includeRetracted,
           limit: opts?.limit,
           cursor: opts?.cursor,
-          componentId: opts?.componentId,
+          componentRef: opts?.componentRef,
           excludeComponents: opts?.excludeComponents,
           excludeInfraShapes: opts?.excludeInfraShapes,
           where: opts?.where
@@ -5814,7 +5822,7 @@ var WarmHubClient = class _WarmHubClient {
           resolveCollections: opts?.resolveCollections,
           limit: opts?.limit,
           cursor: opts?.cursor,
-          componentId: opts?.componentId,
+          componentRef: opts?.componentRef,
           excludeComponents: opts?.excludeComponents,
           excludeInfraShapes: opts?.excludeInfraShapes,
           where: opts?.where
@@ -5869,7 +5877,7 @@ var WarmHubClient = class _WarmHubClient {
           resolveCollections: opts?.resolveCollections,
           limit: opts?.limit,
           cursor: opts?.cursor,
-          componentId: opts?.componentId,
+          componentRef: opts?.componentRef,
           excludeComponents: opts?.excludeComponents,
           excludeInfraShapes: opts?.excludeInfraShapes,
           mode: opts?.mode
@@ -5893,7 +5901,7 @@ var WarmHubClient = class _WarmHubClient {
           match: opts?.match,
           includeRetracted: opts?.includeRetracted,
           resolveCollections: opts?.resolveCollections,
-          componentId: opts?.componentId,
+          componentRef: opts?.componentRef,
           excludeComponents: opts?.excludeComponents,
           excludeInfraShapes: opts?.excludeInfraShapes,
           where: opts?.where
@@ -6584,5 +6592,5 @@ function isAbortError(error) {
 }
 
 export { AllStreamOperationsFailedError, CLI_INSTALL_REPO_HEADER, CLI_SIGNATURE_HEADER, CLI_TIMESTAMP_HEADER, CONTENT_FIELD_LIMIT_ERROR, CliCallVerificationError, DEFAULT_API_URL, DEFAULT_STREAM_CHUNK_SIZE, MAX_CONTENT_FIELD_BYTES, MAX_STREAM_APPEND_OPERATION_COUNT2 as MAX_STREAM_APPEND_OPERATION_COUNT, OperationBuilder, PartialStreamSubmissionError, SDK_VERSION, WarmHubClient, WarmHubError, connectionErrorMessage, contentFieldLimitError, countStreamAppendResultStatuses, isConnectionError, isRetryable, isWarmHubError, normalizeWref, resolveFunctionLogMode, sanitizeErrorMessage, sdkVersionIsBelowMinimum, streamAppendResultStatus, submitOperationsViaStream, toWarmHubError, validateAgainstShape, verifyCliCall };
-//# sourceMappingURL=chunk-74GPEEAF.js.map
-//# sourceMappingURL=chunk-74GPEEAF.js.map
+//# sourceMappingURL=chunk-L5PODJ66.js.map
+//# sourceMappingURL=chunk-L5PODJ66.js.map