@warmhub/sdk-ts 0.52.0 → 0.53.0

package/dist/index.d.ts

@@ -74,6 +74,29 @@ type ActionRunStats = {
         dead_letter: number;
     };
 };
+type AccessResolveInput$1 = {
+    repos?: Array<{
+        orgName: string;
+        repoName: string;
+    }>;
+    orgs?: Array<{
+        orgName: string;
+    }>;
+};
+type AccessResolveResult$1 = {
+    repos: Array<{
+        orgName: string;
+        repoName: string;
+        visible: boolean;
+        scopes: Array<'repo:read' | 'repo:write' | 'repo:configure' | 'repo:admin'>;
+        allowedMatches?: Array<string>;
+    }>;
+    orgs: Array<{
+        orgName: string;
+        visible: boolean;
+        scopes: Array<'org:read' | 'org:configure' | 'org:admin'>;
+    }>;
+};
 type AuthSyncResult = {
     success: boolean;
 };
@@ -107,7 +130,7 @@ type CommitApplyResult = {
     }>;
 };
 type ComponentDetail = {
-    componentId: string;
+    ref?: string;
     componentName: string;
     version?: string;
     state?: string;
@@ -150,14 +173,14 @@ type ComponentDetail = {
             data: unknown;
             dataHash: string;
         } | null;
-        componentId?: string;
+        componentRef?: string;
     }>;
     ownedThings: Array<{
         wref: string;
         name: string;
         kind: 'shape' | 'thing' | 'assertion' | 'collection';
         shapeName?: string;
-        componentId?: string;
+        componentRef?: string;
         version: number;
         createdAt: number;
         data?: unknown;
@@ -172,7 +195,7 @@ type ComponentDetail = {
 };
 type ComponentListResult = {
     items: Array<{
-        componentId: string;
+        ref?: string;
         componentName: string;
         version?: string;
         state?: string;
@@ -188,7 +211,7 @@ type ComponentListResult = {
     nextCursor?: string;
 };
 type ComponentSummary = {
-    componentId: string;
+    ref?: string;
     componentName: string;
     version?: string;
     state?: string;
@@ -222,7 +245,7 @@ type StreamAppendInput$1 = {
     orgName: string;
     repoName: string;
     streamId: string;
-    componentId?: string;
+    componentRef?: string;
     workspaceName?: never;
     committer?: string;
     message?: string;
@@ -407,7 +430,7 @@ type ShapeGetResult = {
         data: unknown;
         dataHash: string;
     } | null;
-    componentId?: string;
+    componentRef?: string;
 };
 type ShapeListResult = {
     items: Array<{
@@ -420,7 +443,7 @@ type ShapeListResult = {
             data: unknown;
             dataHash: string;
         } | null;
-        componentId?: string;
+        componentRef?: string;
     }>;
 };
 type ThingGetManyResult$1 = {
@@ -591,6 +614,10 @@ type SubscriptionBindCredentialsResult$1 = {
     subscriptionName: string;
     credentialSetName: string;
 };
+type SubscriptionRevealResult = {
+    webhookUrl?: string;
+    fallbackWebhookUrl?: string;
+};
 type SubscriptionUnbindCredentialsResult$1 = {
     unbound: true;
     subscriptionName: string;
@@ -1002,7 +1029,7 @@ declare function submitOperationsViaStream(client: OperationStreamClient, args:
     committer?: string;
     message?: string;
     operations: Operation[];
-    componentId?: string;
+    componentRef?: string;
     chunkSize?: number;
     skipExisting?: boolean;
     streamId?: string;
@@ -1721,6 +1748,10 @@ type ShapeRemove = {
  * and `actionContainerConfig` appear on the type as optional fields but are
  * always returned as `undefined` on reads.
  *
+ * Webhook URLs are redacted to their origin (`webhookOrigin`,
+ * `fallbackWebhookOrigin` = scheme://host) on read — the raw URL path is a
+ * bearer secret and is returned only via `client.subscription.reveal`.
+ *
  * @internal
  */
 type SubscriptionInfo = {
@@ -1730,8 +1761,8 @@ type SubscriptionInfo = {
     shapeName?: string;
     sourceRepo?: string;
     filterJson?: unknown;
-    webhookUrl?: string;
-    fallbackWebhookUrl?: string;
+    webhookOrigin?: string;
+    fallbackWebhookOrigin?: string;
     actionContainerConfig?: unknown;
     actionContainer?: string;
     cronConfig?: {
@@ -1740,7 +1771,7 @@ type SubscriptionInfo = {
     };
     allowTraceReentry?: boolean;
     notifyOnSuccess?: boolean;
-    componentId?: string;
+    componentRef?: string;
     credentialSetNames: Array<string>;
     createdAt: number;
 };
@@ -1759,7 +1790,7 @@ type SubscriptionCompatCreateBase = {
     fallbackWebhookUrl?: string;
     allowTraceReentry?: boolean;
     notifyOnSuccess?: boolean;
-    componentId?: string;
+    componentRef?: string;
     workspacePolicy?: never;
     /** @internal */
     actionContainer?: string;
@@ -1879,7 +1910,6 @@ type ComponentListOptions = {
     cursor?: string;
 };
 type ComponentRegistryInfo = {
-    id: string;
     ownerOrgName: string;
     componentName: string;
     ref: string;
@@ -1954,7 +1984,7 @@ type ComponentRegistryCliCallResult = ComponentRegistrySetupCallResult;
 /** @internal */
 type ShapeListOptions = {
     match?: string;
-    componentId?: string;
+    componentRef?: string;
     excludeComponents?: boolean;
     includeRetracted?: boolean;
 };
@@ -2313,7 +2343,7 @@ type ThingHeadRequest = {
     includeRetracted?: boolean;
     limit?: number;
     cursor?: string;
-    componentId?: string;
+    componentRef?: string;
     excludeComponents?: boolean;
     excludeInfraShapes?: boolean;
     where?: WherePredicate[];
@@ -2567,8 +2597,8 @@ type FilterOptions = {
     limit?: number;
     /** Pagination cursor returned by the prior call. */
     cursor?: string;
-    /** Filter to records attributed to this component identifier. */
-    componentId?: string;
+    /** Filter to records attributed to this installed component's `Org/Name` ref. */
+    componentRef?: string;
     /** Exclude records attributed to any component. */
     excludeComponents?: boolean;
     /** Exclude internal infrastructure shapes from the result set. */
@@ -2789,6 +2819,29 @@ declare function sdkVersionIsBelowMinimum(version: string, minimum: string): boo
  *
  * @see https://docs.warmhub.ai/sdk/client/
  */
+/**
+ * Input for {@link WarmHubClient.access.resolve} — repos/orgs addressed by name.
+ * @internal
+ */
+type AccessResolveInput = AccessResolveInput$1;
+/**
+ * Batch effective-access result; correlate by the echoed `orgName`/`repoName`.
+ * @internal
+ */
+type AccessResolveResult = AccessResolveResult$1;
+/**
+ * Effective repo access for the caller (one entry of {@link AccessResolveResult}).
+ * @internal
+ */
+type RepoAccessResult = AccessResolveResult$1['repos'][number];
+/**
+ * Effective org-level access for the caller (one entry of {@link AccessResolveResult}).
+ * @internal
+ */
+type OrgAccessResult = AccessResolveResult$1['orgs'][number];
+/**
+ * @see https://docs.warmhub.ai/sdk-reference/classes/warmhubclient/
+ */
 declare class WarmHubClient {
     /**
      * The resolved API base URL the client issues requests against. Defaults to
@@ -2831,22 +2884,21 @@ declare class WarmHubClient {
         whoami: () => Promise<WhoamiInfo>;
     };
     /**
-     * Lightweight permission checks for UI gating and service-side authorization probes.
-     * @see https://docs.warmhub.ai/sdk-reference/classes/warmhubclient/#access
+     * Effective-access resolution for UI gating and service-side authorization.
+     * First-party surface (web UI + whedge edge); the underlying `access.resolve`
+     * procedure is `@internal`.
+     * @internal
      */
     readonly access: {
         /**
-         * Check whether the caller has a repo-scoped permission.
-         *
-         * @param permission Permission string such as `repo:read`, `repo:write`, `repo:configure`, or `repo:admin`.
-         */
-        checkRepoPermission: (orgName: string, repoName: string, permission: string) => Promise<boolean>;
-        /**
-         * Check whether the caller has an org-scoped permission.
-         *
-         * @param permission Permission string such as `org:read`, `org:configure`, or `org:admin`.
+         * Resolve the caller's effective access for a batch of repos and/or orgs
+         * (addressed by name). Returns the coarse scope SET per target so one call
+         * answers any permission via `scopes.includes(...)` — e.g.
+         * `scopes.includes('repo:configure')`. Non-throwing: `visible: false` means
+         * not-found/not-visible; `scopes: []` means authenticated-but-no-access.
+         * Correlate results by the echoed `orgName`/`repoName`, not by position.
          */
-        checkOrgPermission: (orgName: string, permission: string) => Promise<boolean>;
+        resolve: (input: AccessResolveInput) => Promise<AccessResolveResult>;
     };
     /**
      * Connectivity and compatibility helpers for checking the configured WarmHub backend.
@@ -2892,9 +2944,9 @@ declare class WarmHubClient {
          */
         list: (orgName: string, repoName: string, opts?: ComponentListOptions) => Promise<ComponentList>;
         /**
-         * Fetch one installed component by component ID.
+         * Fetch one installed component by its `Org/Name` ref.
          */
-        get: (orgName: string, repoName: string, componentId: string) => Promise<ComponentView>;
+        get: (orgName: string, repoName: string, componentRef: string) => Promise<ComponentView>;
         /**
          * Registered-component identity and install-pipeline operations.
          *
@@ -2951,7 +3003,7 @@ declare class WarmHubClient {
          * @param message Optional commit message stored with the submitted operations.
          * @param operations Add, revise, or retract operations to submit in order.
          * @param opts.committer Optional wref identifying the actor on whose behalf the write is made. Must be a full wref string like `"Agent/bot-1"` (a thing that already exists), or a cross-repo wref like `"wh:other-org/other-repo/Agent/bot-1"`. Bare names such as `"eval-runner"` are rejected by the backend with a "Thing wref required" error — there is no implicit shape.
-         * @param opts.componentId Attribute writes to an installed component when the caller is allowed to claim it.
+         * @param opts.componentRef Attribute writes to an installed component, identified by its `Org/Name` ref, when the caller is allowed to claim it.
          * @param opts.chunkSize Maximum operations per stream append. Values are clamped by the SDK.
          * @param opts.skipExisting Return `noop` for add operations whose target already exists.
          * @param opts.streamId Advanced continuation hook for caller-managed streams.
@@ -2959,7 +3011,7 @@ declare class WarmHubClient {
          */
         apply: (orgName: string, repoName: string, message: string | undefined, operations: Operation[], opts?: {
             committer?: string;
-            componentId?: string;
+            componentRef?: string;
             chunkSize?: number;
             skipExisting?: boolean;
             streamId?: string;
@@ -3323,6 +3375,17 @@ declare class WarmHubClient {
          * Get one subscription by name.
          */
         get: (orgName: string, repoName: string, name: string) => Promise<SubscriptionInfo>;
+        /**
+         * Reveal the raw webhook URL(s) for a subscription.
+         *
+         * Reads return only `webhookOrigin`/`fallbackWebhookOrigin` (scheme://host);
+         * the raw URL path is a bearer secret. This break-glass call returns the
+         * raw URL(s) and is audit-logged server-side. Requires `repo:configure`.
+         * Because it returns the secret, a name-scoped principal (e.g. a component
+         * setup token) may reveal only the subscriptions it is scoped to — a
+         * stricter contract than the redacted `get`/`list`, which are unscoped.
+         */
+        reveal: (orgName: string, repoName: string, name: string) => Promise<SubscriptionRevealResult>;
         /**
          * List subscriptions attached to a repository.
          */
@@ -3895,4 +3958,4 @@ declare class WarmHubClient {
     private watchRepoQuery;
 }
 
-export { type AboutOptions, type AboutResult, type AccessTokenProvider, type ActionAttemptInfo, type ActionLeaseAcquire, type ActionLeaseOp, type ActionListNotificationsOptions, type ActionListRunsOptions, type ActionLiveFeed, type ActionLiveFeedOptions, type ActionNotificationInfo, type ActionRunInfo, type ActionRunStatsInfo, type ActionRunStatsOptions, type AddOp, type AddOperation, AllStreamOperationsFailedError, type Assertion, CLI_INSTALL_REPO_HEADER, CLI_SIGNATURE_HEADER, CLI_TIMESTAMP_HEADER, CONTENT_FIELD_LIMIT_ERROR, type CliCallSecrets, CliCallVerificationError, type CliCallVerificationFailureReason, type CollectionAbout, type CollectionTag, type ComponentInfo, type ComponentList, type ComponentListOptions, type ComponentView, type CoreErrorKind, type CountOptions, type CountResult, type CredentialAuditEntry, type CredentialDeleteResult, type CredentialGrantResult, type CredentialInfo, type CredentialKeyMutationResult, type CredentialRevokeResult, type CredentialUngrantResult, type CurrentUserInfo, DEFAULT_API_URL, DEFAULT_STREAM_CHUNK_SIZE, type ErrorKind, type FilterOptions, type FilterResult, type FunctionLogMode, type HeadResult, type HistoryResult, type IndexedFieldEntry, type IndexedFieldsReport, type LiveHandle, type LiveRepoEvent, type LiveSubscriptionLogOptions, type LiveThingHeadOptions, type LiveThingHistoryOptions, type LiveWatchResult, MAX_CONTENT_FIELD_BYTES, MAX_STREAM_APPEND_OPERATION_COUNT, type Operation, OperationBuilder, type OperationBuilderClient, type OperationBuilderOp, type OperationBuilderOptions, type OperationSubmitResult, type OrgInfo, type OrgList, type OrgListMembersOptions, type OrgListOptions, type OrgMemberInfo, type OrgMemberList, type OrgRef, type OrgRole, type Page, type PageRequest, PartialStreamSubmissionError, type PingResult, type RefLink, type RefsOptions, type RefsResult, type RenameResult, type RepoConfigureStatsView, type RepoDescribeResult, type RepoInfo, type RepoList, type RepoListForCallerOptions, type RepoListOptions, type RepoListPageOptions, type RepoListPageResult, type RepoLocator, type RepoRecentInfo, type RepoRef, type RepoShapeInstanceCountsView, type RepoSort, type RepoStatsBatchResult, type RepoStatsView, type RepoWithStatsInfo, type RequestEvent, type ResolveWrefResult, type RetractOp, type RetractOperation, type RetryPolicyOptions, type ReviseOp, type ReviseOperation, SDK_VERSION, type SearchOptions, type SearchResult, type Shape, type ShapeChange, type ShapeCreateOptions, type ShapeFields, type ShapeGetOptions, type ShapeHistory, type ShapeHistoryOptions, type ShapeList, type ShapeListOptions, type ShapeRef, type ShapeRemove, type ShapeReviseOptions, type ShapeValidatorResult, type StreamAppendInput, type StreamAppendResult, type StreamContinuationState, type SubscriptionBindCredentialsResult, type SubscriptionCompatCreateInput, type SubscriptionCompatUpdateInput, type SubscriptionInfo, type SubscriptionList, type SubscriptionUnbindCredentialsResult, type SynthesizedRepoContent, type ThingDetail, type ThingGet, type ThingGetManyResult, type ThingGetOptions, type ThingGetWithLease, type ThingGraphOptions, type ThingGraphResult, type ThingGraphValue, type ThingHead, type ThingHeadOptions, type ThingHeadRequest, type ThingHeadVersionsResult, type ThingHistory, type ThingHistoryOptions, type ThingItem, type ThingMetadata, type TokenInfo, type TokenResult, type UndeclaredFieldsWarning, type ValidationDiagnostic, type ValidationResult, type VerifiedCliCall, WarmHubClient, type WarmHubClientOptions, WarmHubError, type WarmHubErrorDetails, type WherePredicate, type WhoamiInfo, type WhoamiScopeEntry, type WireScopeEntry, connectionErrorMessage, contentFieldLimitError, countStreamAppendResultStatuses, isConnectionError, isRetryable, isWarmHubError, normalizeWref, resolveFunctionLogMode, sanitizeErrorMessage, sdkVersionIsBelowMinimum, streamAppendResultStatus, submitOperationsViaStream, toWarmHubError, validateAgainstShape, verifyCliCall };
+export { type AboutOptions, type AboutResult, type AccessResolveInput, type AccessResolveResult, type AccessTokenProvider, type ActionAttemptInfo, type ActionLeaseAcquire, type ActionLeaseOp, type ActionListNotificationsOptions, type ActionListRunsOptions, type ActionLiveFeed, type ActionLiveFeedOptions, type ActionNotificationInfo, type ActionRunInfo, type ActionRunStatsInfo, type ActionRunStatsOptions, type AddOp, type AddOperation, AllStreamOperationsFailedError, type Assertion, CLI_INSTALL_REPO_HEADER, CLI_SIGNATURE_HEADER, CLI_TIMESTAMP_HEADER, CONTENT_FIELD_LIMIT_ERROR, type CliCallSecrets, CliCallVerificationError, type CliCallVerificationFailureReason, type CollectionAbout, type CollectionTag, type ComponentInfo, type ComponentList, type ComponentListOptions, type ComponentView, type CoreErrorKind, type CountOptions, type CountResult, type CredentialAuditEntry, type CredentialDeleteResult, type CredentialGrantResult, type CredentialInfo, type CredentialKeyMutationResult, type CredentialRevokeResult, type CredentialUngrantResult, type CurrentUserInfo, DEFAULT_API_URL, DEFAULT_STREAM_CHUNK_SIZE, type ErrorKind, type FilterOptions, type FilterResult, type FunctionLogMode, type HeadResult, type HistoryResult, type IndexedFieldEntry, type IndexedFieldsReport, type LiveHandle, type LiveRepoEvent, type LiveSubscriptionLogOptions, type LiveThingHeadOptions, type LiveThingHistoryOptions, type LiveWatchResult, MAX_CONTENT_FIELD_BYTES, MAX_STREAM_APPEND_OPERATION_COUNT, type Operation, OperationBuilder, type OperationBuilderClient, type OperationBuilderOp, type OperationBuilderOptions, type OperationSubmitResult, type OrgAccessResult, type OrgInfo, type OrgList, type OrgListMembersOptions, type OrgListOptions, type OrgMemberInfo, type OrgMemberList, type OrgRef, type OrgRole, type Page, type PageRequest, PartialStreamSubmissionError, type PingResult, type RefLink, type RefsOptions, type RefsResult, type RenameResult, type RepoAccessResult, type RepoConfigureStatsView, type RepoDescribeResult, type RepoInfo, type RepoList, type RepoListForCallerOptions, type RepoListOptions, type RepoListPageOptions, type RepoListPageResult, type RepoLocator, type RepoRecentInfo, type RepoRef, type RepoShapeInstanceCountsView, type RepoSort, type RepoStatsBatchResult, type RepoStatsView, type RepoWithStatsInfo, type RequestEvent, type ResolveWrefResult, type RetractOp, type RetractOperation, type RetryPolicyOptions, type ReviseOp, type ReviseOperation, SDK_VERSION, type SearchOptions, type SearchResult, type Shape, type ShapeChange, type ShapeCreateOptions, type ShapeFields, type ShapeGetOptions, type ShapeHistory, type ShapeHistoryOptions, type ShapeList, type ShapeListOptions, type ShapeRef, type ShapeRemove, type ShapeReviseOptions, type ShapeValidatorResult, type StreamAppendInput, type StreamAppendResult, type StreamContinuationState, type SubscriptionBindCredentialsResult, type SubscriptionCompatCreateInput, type SubscriptionCompatUpdateInput, type SubscriptionInfo, type SubscriptionList, type SubscriptionUnbindCredentialsResult, type SynthesizedRepoContent, type ThingDetail, type ThingGet, type ThingGetManyResult, type ThingGetOptions, type ThingGetWithLease, type ThingGraphOptions, type ThingGraphResult, type ThingGraphValue, type ThingHead, type ThingHeadOptions, type ThingHeadRequest, type ThingHeadVersionsResult, type ThingHistory, type ThingHistoryOptions, type ThingItem, type ThingMetadata, type TokenInfo, type TokenResult, type UndeclaredFieldsWarning, type ValidationDiagnostic, type ValidationResult, type VerifiedCliCall, WarmHubClient, type WarmHubClientOptions, WarmHubError, type WarmHubErrorDetails, type WherePredicate, type WhoamiInfo, type WhoamiScopeEntry, type WireScopeEntry, connectionErrorMessage, contentFieldLimitError, countStreamAppendResultStatuses, isConnectionError, isRetryable, isWarmHubError, normalizeWref, resolveFunctionLogMode, sanitizeErrorMessage, sdkVersionIsBelowMinimum, streamAppendResultStatus, submitOperationsViaStream, toWarmHubError, validateAgainstShape, verifyCliCall };

package/dist/index.js

@@ -1,3 +1,3 @@
-export { AllStreamOperationsFailedError, CLI_INSTALL_REPO_HEADER, CLI_SIGNATURE_HEADER, CLI_TIMESTAMP_HEADER, CONTENT_FIELD_LIMIT_ERROR, CliCallVerificationError, DEFAULT_API_URL, DEFAULT_STREAM_CHUNK_SIZE, MAX_CONTENT_FIELD_BYTES, MAX_STREAM_APPEND_OPERATION_COUNT, OperationBuilder, PartialStreamSubmissionError, SDK_VERSION, WarmHubClient, WarmHubError, connectionErrorMessage, contentFieldLimitError, countStreamAppendResultStatuses, isConnectionError, isRetryable, isWarmHubError, normalizeWref, resolveFunctionLogMode, sanitizeErrorMessage, sdkVersionIsBelowMinimum, streamAppendResultStatus, submitOperationsViaStream, toWarmHubError, validateAgainstShape, verifyCliCall } from './chunk-74GPEEAF.js';
+export { AllStreamOperationsFailedError, CLI_INSTALL_REPO_HEADER, CLI_SIGNATURE_HEADER, CLI_TIMESTAMP_HEADER, CONTENT_FIELD_LIMIT_ERROR, CliCallVerificationError, DEFAULT_API_URL, DEFAULT_STREAM_CHUNK_SIZE, MAX_CONTENT_FIELD_BYTES, MAX_STREAM_APPEND_OPERATION_COUNT, OperationBuilder, PartialStreamSubmissionError, SDK_VERSION, WarmHubClient, WarmHubError, connectionErrorMessage, contentFieldLimitError, countStreamAppendResultStatuses, isConnectionError, isRetryable, isWarmHubError, normalizeWref, resolveFunctionLogMode, sanitizeErrorMessage, sdkVersionIsBelowMinimum, streamAppendResultStatus, submitOperationsViaStream, toWarmHubError, validateAgainstShape, verifyCliCall } from './chunk-L5PODJ66.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/react.js

@@ -1,5 +1,5 @@
-import { WarmHubClient } from './chunk-74GPEEAF.js';
-export { DEFAULT_API_URL, SDK_VERSION, WarmHubClient, WarmHubError, toWarmHubError } from './chunk-74GPEEAF.js';
+import { WarmHubClient } from './chunk-L5PODJ66.js';
+export { DEFAULT_API_URL, SDK_VERSION, WarmHubClient, WarmHubError, toWarmHubError } from './chunk-L5PODJ66.js';
 import { createContext, useMemo, useState, useEffect, useContext } from 'react';
 import { jsx } from 'react/jsx-runtime';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmhub/sdk-ts",
-  "version": "0.52.0",
+  "version": "0.53.0",
   "private": false,
   "type": "module",
   "description": "The TypeScript SDK for WarmHub — create repos, commit and query data, and compound knowledge with your AI agents.",