picked 0.0.107-next.4 → 0.0.107-next.5

package/docs/reference/management-api/schema/analytics-sign-in.md

@@ -0,0 +1,110 @@
+---
+type: reference
+layout: docs
+generated: true
+---
+
+# Analytics sign in schema
+
+See [Management API schema](/reference/management-api/schema) for every domain, the endpoint and authentication.
+
+## Mutations
+
+### `analyticsSignInTokenCreate`
+
+Creates a short-lived token that signs the current user into analytics for an organization.
+Refuses tokens issued to OAuth clients.
+Scope: `ORGANIZATION_REPORTS_READ`.
+
+```graphql
+analyticsSignInTokenCreate(input: AnalyticsSignInTokenCreateInput!): AnalyticsSignInTokenCreatePayload! @auth(only: USER)
+```
+
+### `organizationAnalyticsProvision`
+
+Sets analytics up for an organization: everything the organization's members need to sign
+into analytics. Running it again sets up only what is missing.
+Scope: `ORGANIZATION_REPORTS_READ`.
+
+```graphql
+organizationAnalyticsProvision(input: OrganizationAnalyticsProvisionInput!): OrganizationAnalyticsProvisionPayload! @auth(only: USER)
+```
+
+## Types
+
+### `AnalyticsSignInTokenCreateInput`
+
+```graphql
+"""The input of `analyticsSignInTokenCreate`."""
+input AnalyticsSignInTokenCreateInput {
+  """The ID of the organization whose reports the user opens."""
+  organizationId: ID!
+}
+```
+
+### `AnalyticsSignInTokenCreatePayload`
+
+```graphql
+"""The result of `analyticsSignInTokenCreate`."""
+type AnalyticsSignInTokenCreatePayload {
+  """
+  The signed token analytics accepts in exchange for a session. It expires after five minutes.
+  """
+  token: String!
+}
+```
+
+### `AnalyticsProvisioningStatus`
+
+```graphql
+"""Whether an organization's members can sign into analytics."""
+enum AnalyticsProvisioningStatus {
+  """Analytics is still being set up for the organization."""
+  PENDING
+  """Members can sign into analytics."""
+  READY
+  """
+  The last attempt to set analytics up failed. Running `organizationAnalyticsProvision` retries it.
+  """
+  FAILED
+}
+```
+
+### `OrganizationAnalyticsProvisioning`
+
+```graphql
+"""How far analytics is set up for an organization."""
+type OrganizationAnalyticsProvisioning {
+  """The organization's status."""
+  status: AnalyticsProvisioningStatus!
+}
+```
+
+### `Organization` (extension)
+
+```graphql
+extend type Organization {
+  """How far analytics is set up for the organization."""
+  analyticsProvisioning: OrganizationAnalyticsProvisioning!
+}
+```
+
+### `OrganizationAnalyticsProvisionInput`
+
+```graphql
+"""The input of `organizationAnalyticsProvision`."""
+input OrganizationAnalyticsProvisionInput {
+  """The ID of the organization to set analytics up for."""
+  organizationId: ID!
+}
+```
+
+### `OrganizationAnalyticsProvisionPayload`
+
+```graphql
+"""The result of `organizationAnalyticsProvision`."""
+type OrganizationAnalyticsProvisionPayload {
+  """How far analytics is set up after the attempt."""
+  analyticsProvisioning: OrganizationAnalyticsProvisioning!
+}
+```

package/docs/reference/management-api/schema/index.md

@@ -29,6 +29,7 @@ An operation with `@auth` needs a caller that has authenticated. `@auth(only: US
 | [`actionDelete`](/reference/management-api/schema/action#actiondelete) | Mutation | Deletes an action and the workflow it starts. An action that an experience references is not deleted, and comes back as an `IN_USE` user error. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |
 | [`actions`](/reference/management-api/schema/action#actions) | Query | Lists the actions in a workspace. `search` matches a case-insensitive substring of the name; `sortKey` and `reverse` set the order. Scope: `ORGANIZATION_WORKSPACE_READ`. |
 | [`actionUpdate`](/reference/management-api/schema/action#actionupdate) | Mutation | Updates an action. Scope: `ORGANIZATION_WORKSPACE_UPDATE`. |
+| [`analyticsSignInTokenCreate`](/reference/management-api/schema/analytics-sign-in#analyticssignintokencreate) | Mutation | Creates a short-lived token that signs the current user into analytics for an organization. Refuses tokens issued to OAuth clients. Scope: `ORGANIZATION_REPORTS_READ`. |
 | [`apiKeyCreate`](/reference/management-api/schema/api-key#apikeycreate) | Mutation | Creates an API key and returns the full key, once. A blank name, no scopes, or a scope the caller does not hold or the key cannot carry returns `VALIDATION_ERROR`. Scope: `ORGANIZATION_API_KEYS_CREATE`. |
 | [`apiKeyRevoke`](/reference/management-api/schema/api-key#apikeyrevoke) | Mutation | Revokes an API key, which then stops authenticating at once. Cannot be undone; an unknown or revoked key returns `NOT_FOUND`. Scope: `ORGANIZATION_API_KEYS_DELETE`. |
 | [`apiKeys`](/reference/management-api/schema/api-key#apikeys) | Query | Lists an organisation's API keys, newest first. Revoked keys are left out. Scope: `ORGANIZATION_API_KEYS_READ`. |
@@ -121,6 +122,7 @@ An operation with `@auth` needs a caller that has authenticated. `@auth(only: US
 | [`oauthConsentDeny`](/reference/management-api/schema/auth#oauthconsentdeny) | Mutation | Denies an OAuth authorisation request for the signed-in user. |
 | [`oauthConsentDetails`](/reference/management-api/schema/auth#oauthconsentdetails) | Query | Reads an OAuth authorisation request waiting for the signed-in user's consent. Reading a request the user already consented to approves it. |
 | [`organization`](/reference/management-api/schema/organization#organization) | Query | Reads an organisation by ID or slug. Null when no organisation matches. Scope: `ORGANIZATION_READ`. |
+| [`organizationAnalyticsProvision`](/reference/management-api/schema/analytics-sign-in#organizationanalyticsprovision) | Mutation | Sets analytics up for an organization: everything the organization's members need to sign into analytics. Running it again sets up only what is missing. Scope: `ORGANIZATION_REPORTS_READ`. |
 | [`organizationClientManagerScopesUpdate`](/reference/management-api/schema/organization#organizationclientmanagerscopesupdate) | Mutation | Sets the scopes a client manager holds in one organisation. The caller cannot edit their own scopes, and a client manager can add or remove only scopes they hold there themselves. Scope: `STAFF_INVITE_CLIENT_MANAGER`. |
 | [`organizationCreate`](/reference/management-api/schema/organization#organizationcreate) | Mutation | Creates an organisation owned by the calling user. Scope: `ORGANIZATION_CREATE`. |
 | [`organizationDelete`](/reference/management-api/schema/organization#organizationdelete) | Mutation | Deletes an organisation. Scope: `ORGANIZATION_DELETE`. |
@@ -212,6 +214,7 @@ An operation with `@auth` needs a caller that has authenticated. `@auth(only: US
 
 - [Action](/reference/management-api/schema/action)
 - [Analytics session](/reference/management-api/schema/analytics-session)
+- [Analytics sign in](/reference/management-api/schema/analytics-sign-in)
 - [Analytics](/reference/management-api/schema/analytics)
 - [Api key](/reference/management-api/schema/api-key)
 - [Auth](/reference/management-api/schema/auth)

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "picked",
   "description": "The Picked SDK front door: the client, the picked.config helpers, and the picked CLI in one install",
-  "version": "0.0.107-next.4",
+  "version": "0.0.107-next.5",
   "bin": {
     "picked": "dist/esm/bin.js"
   },
   "dependencies": {
-    "@picked/cli": "0.0.107-next.4",
-    "@picked/config": "0.0.107-next.4"
+    "@picked/cli": "0.0.107-next.5",
+    "@picked/config": "0.0.107-next.5"
   },
   "devDependencies": {
     "@picked/client": "workspace:*",
@@ -64,7 +64,7 @@
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
   "peerDependencies": {
-    "@picked/client": "0.0.107-next.4"
+    "@picked/client": "0.0.107-next.5"
   },
   "private": false,
   "publishConfig": {