@1claw/sdk 0.59.9 → 0.59.10

package/README.md

@@ -1,4 +1,4 @@
-# @1claw/sdk (v0.59.4)
+# @1claw/sdk (v0.59.10)
 
 > ⭐ **Star [1clawAI/agent-templates](https://github.com/1clawAI/agent-templates)** — ready-to-run agent templates wired to 1Claw. It is our single starred repo.
 
@@ -233,6 +233,7 @@ The SDK exports a typed error hierarchy for catch-based flows:
 | `ResourceLimitExceededError` | 403    | Tier limit reached (vaults, agents, secrets)          |
 | `ApprovalRequiredError` | 403         | Human approval gate triggered                         |
 | `NotFoundError`         | 404         | Resource not found                                    |
+| `ConflictError`         | 409         | Resource already exists — e.g. a duplicate vault name  |
 | `RateLimitError`        | 429         | Rate limit exceeded                                   |
 | `ValidationError`       | 400         | Invalid request body                                  |
 | `ServerError`           | 500+        | Server-side failure                                   |

package/dist/core/errors.d.ts

@@ -41,6 +41,17 @@ export declare class ApprovalRequiredError extends OneclawError {
 export declare class NotFoundError extends OneclawError {
     constructor(message?: string);
 }
+/**
+ * Thrown on 409 Conflict — the resource already exists.
+ *
+ * Reachable since 0.59.10 on `POST /v1/vaults`, where a duplicate name used to
+ * surface as a 500. Without this class a 409 fell through to a bare
+ * `OneclawError` typed "unknown", which reads as our fault rather than as
+ * something the caller chose and can change.
+ */
+export declare class ConflictError extends OneclawError {
+    constructor(message?: string);
+}
 /** Thrown on 429 Too Many Requests responses. Includes retry timing when available. */
 export declare class RateLimitError extends OneclawError {
     readonly retryAfterMs?: number;

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAGrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM;CAQtB;AAED,6DAA6D;AAC7D,qBAAa,SAAU,SAAQ,YAAY;gBAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,GAAG,GAAG,GAAS;CAIvD;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,YAAY;gBAC5C,OAAO,EAAE,MAAM;CAI9B;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,YAAY;IAClD,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;gBAEpC,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB;CAKtE;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACnD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;gBAEvB,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAS1D;AAED,yCAAyC;AACzC,qBAAa,aAAc,SAAQ,YAAY;gBAC/B,OAAO,GAAE,MAA6B;CAIrD;AAED,uFAAuF;AACvF,qBAAa,cAAe,SAAQ,YAAY;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAG3B,OAAO,GAAE,MAA8B,EACvC,YAAY,CAAC,EAAE,MAAM;CAM5B;AAED,mEAAmE;AACnE,qBAAa,eAAgB,SAAQ,YAAY;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAK/D;AAED,yCAAyC;AACzC,qBAAa,WAAY,SAAQ,YAAY;gBAErC,OAAO,GAAE,MAAgC,EACzC,MAAM,GAAE,MAAY;CAK3B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAkD5E"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEnD;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;gBAGrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,MAAM;CAQtB;AAED,6DAA6D;AAC7D,qBAAa,SAAU,SAAQ,YAAY;gBAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,GAAG,GAAG,GAAS;CAIvD;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,YAAY;gBAC5C,OAAO,EAAE,MAAM;CAI9B;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,YAAY;IAClD,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;gBAEpC,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB;CAKtE;AAED;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,YAAY;IACnD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;gBAEvB,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;CAS1D;AAED,yCAAyC;AACzC,qBAAa,aAAc,SAAQ,YAAY;gBAC/B,OAAO,GAAE,MAA6B;CAIrD;AAED;;;;;;;GAOG;AACH,qBAAa,aAAc,SAAQ,YAAY;gBAC/B,OAAO,GAAE,MAAkC;CAI1D;AAED,uFAAuF;AACvF,qBAAa,cAAe,SAAQ,YAAY;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAG3B,OAAO,GAAE,MAA8B,EACvC,YAAY,CAAC,EAAE,MAAM;CAM5B;AAED,mEAAmE;AACnE,qBAAa,eAAgB,SAAQ,YAAY;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAE7B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;CAK/D;AAED,yCAAyC;AACzC,qBAAa,WAAY,SAAQ,YAAY;gBAErC,OAAO,GAAE,MAAgC,EACzC,MAAM,GAAE,MAAY;CAK3B;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAoD5E"}

package/dist/core/errors.js

@@ -58,6 +58,20 @@ export class NotFoundError extends OneclawError {
         this.name = "NotFoundError";
     }
 }
+/**
+ * Thrown on 409 Conflict — the resource already exists.
+ *
+ * Reachable since 0.59.10 on `POST /v1/vaults`, where a duplicate name used to
+ * surface as a 500. Without this class a 409 fell through to a bare
+ * `OneclawError` typed "unknown", which reads as our fault rather than as
+ * something the caller chose and can change.
+ */
+export class ConflictError extends OneclawError {
+    constructor(message = "Resource already exists") {
+        super(message, 409, "conflict");
+        this.name = "ConflictError";
+    }
+}
 /** Thrown on 429 Too Many Requests responses. Includes retry timing when available. */
 export class RateLimitError extends OneclawError {
     constructor(message = "Rate limit exceeded", retryAfterMs) {
@@ -119,6 +133,8 @@ export async function errorFromResponse(res) {
         }
         case 404:
             return new NotFoundError(message);
+        case 409:
+            return new ConflictError(message);
         case 429: {
             const retryHeader = res.headers.get("Retry-After");
             const retryAfterMs = retryHeader

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAKnC,YACI,OAAe,EACf,MAAc,EACd,IAAY,EACZ,MAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAED,6DAA6D;AAC7D,MAAM,OAAO,SAAU,SAAQ,YAAY;IACvC,YAAY,OAAe,EAAE,SAAoB,GAAG;QAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC5B,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,OAAO,0BAA2B,SAAQ,YAAY;IACxD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAGlD,YAAY,OAAe,EAAE,kBAAsC;QAC/D,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;IACjD,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IAGnD,YAAY,iBAAyB,EAAE,OAAgB;QACnD,KAAK,CACD,OAAO,IAAI,kDAAkD,EAC7D,GAAG,EACH,mBAAmB,CACtB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC/C,CAAC;CACJ;AAED,yCAAyC;AACzC,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC3C,YAAY,UAAkB,oBAAoB;QAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAChC,CAAC;CACJ;AAED,uFAAuF;AACvF,MAAM,OAAO,cAAe,SAAQ,YAAY;IAG5C,YACI,UAAkB,qBAAqB,EACvC,YAAqB;QAErB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;CACJ;AAED,mEAAmE;AACnE,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAG7C,YAAY,OAAe,EAAE,MAA+B;QACxD,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAED,yCAAyC;AACzC,MAAM,OAAO,WAAY,SAAQ,YAAY;IACzC,YACI,UAAkB,uBAAuB,EACzC,SAAiB,GAAG;QAEpB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC9B,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAa;IACjD,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACL,8BAA8B;IAClC,CAAC;IAED,MAAM,OAAO,GACR,IAAI,CAAC,MAAiB;QACtB,IAAI,CAAC,OAAkB;QACvB,IAAI,CAAC,KAAgB;QACtB,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAEzB,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,GAAG;YACJ,OAAO,IAAI,eAAe,CACtB,OAAO,EACP,IAAI,CAAC,MAAgC,CACxC,CAAC;QACN,KAAK,GAAG;YACJ,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,KAAK,GAAG,CAAC,CAAC,CAAC;YACP,MAAM,SAAS,GAAG,IAAI,CAAC,IAAc,CAAC;YACtC,IAAI,SAAS,KAAK,yBAAyB,EAAE,CAAC;gBAC1C,OAAO,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAI,IAAI,CAAC,mBAA8B,IAAI,EAAE,CAAC;gBAC9D,OAAO,IAAI,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACP,MAAM,WAAW,GAAG,IAAqC,CAAC;YAC1D,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,GAAG;YACJ,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,GAAG,CAAC,CAAC,CAAC;YACP,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,WAAW;gBAC5B,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,IAAI;gBAClC,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QACD;YACI,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnE,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;AACL,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAKnC,YACI,OAAe,EACf,MAAc,EACd,IAAY,EACZ,MAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAED,6DAA6D;AAC7D,MAAM,OAAO,SAAU,SAAQ,YAAY;IACvC,YAAY,OAAe,EAAE,SAAoB,GAAG;QAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC5B,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,OAAO,0BAA2B,SAAQ,YAAY;IACxD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IAGlD,YAAY,OAAe,EAAE,kBAAsC;QAC/D,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;IACjD,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,OAAO,qBAAsB,SAAQ,YAAY;IAGnD,YAAY,iBAAyB,EAAE,OAAgB;QACnD,KAAK,CACD,OAAO,IAAI,kDAAkD,EAC7D,GAAG,EACH,mBAAmB,CACtB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC/C,CAAC;CACJ;AAED,yCAAyC;AACzC,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC3C,YAAY,UAAkB,oBAAoB;QAC9C,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAChC,CAAC;CACJ;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;IAC3C,YAAY,UAAkB,yBAAyB;QACnD,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAChC,CAAC;CACJ;AAED,uFAAuF;AACvF,MAAM,OAAO,cAAe,SAAQ,YAAY;IAG5C,YACI,UAAkB,qBAAqB,EACvC,YAAqB;QAErB,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;CACJ;AAED,mEAAmE;AACnE,MAAM,OAAO,eAAgB,SAAQ,YAAY;IAG7C,YAAY,OAAe,EAAE,MAA+B;QACxD,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;CACJ;AAED,yCAAyC;AACzC,MAAM,OAAO,WAAY,SAAQ,YAAY;IACzC,YACI,UAAkB,uBAAuB,EACzC,SAAiB,GAAG;QAEpB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC9B,CAAC;CACJ;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAa;IACjD,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACL,8BAA8B;IAClC,CAAC;IAED,MAAM,OAAO,GACR,IAAI,CAAC,MAAiB;QACtB,IAAI,CAAC,OAAkB;QACvB,IAAI,CAAC,KAAgB;QACtB,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IAEzB,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,GAAG;YACJ,OAAO,IAAI,eAAe,CACtB,OAAO,EACP,IAAI,CAAC,MAAgC,CACxC,CAAC;QACN,KAAK,GAAG;YACJ,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,KAAK,GAAG,CAAC,CAAC,CAAC;YACP,MAAM,SAAS,GAAG,IAAI,CAAC,IAAc,CAAC;YACtC,IAAI,SAAS,KAAK,yBAAyB,EAAE,CAAC;gBAC1C,OAAO,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAI,IAAI,CAAC,mBAA8B,IAAI,EAAE,CAAC;gBAC9D,OAAO,IAAI,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,GAAG,CAAC,CAAC,CAAC;YACP,MAAM,WAAW,GAAG,IAAqC,CAAC;YAC1D,OAAO,IAAI,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,GAAG;YACJ,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,GAAG;YACJ,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,GAAG,CAAC,CAAC,CAAC;YACP,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,WAAW;gBAC5B,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,IAAI;gBAClC,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrD,CAAC;QACD;YACI,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnE,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;AACL,CAAC"}

package/dist/generated/api-types.d.ts

@@ -9244,7 +9244,8 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        get?: never;
+        /** List the browser bridges paired to this organization. Revoked devices are included: 'was this machine ever paired' is the question asked after a laptop goes missing. */
+        get: operations["list_browser_devices"];
         put?: never;
         /** Pair a browser bridge and mint its credential. Human callers only, behind a step-up re-auth: pairing is what gives a browser the standing to ask for credentials later. */
         post: operations["pair_browser_device"];
@@ -9254,6 +9255,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/browser/devices/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /** Revoke a paired bridge. This is what makes a leaked bb_ credential stop working. */
+        delete: operations["revoke_browser_device"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/browser/credentials": {
         parameters: {
             query?: never;
@@ -9712,6 +9730,7 @@ export interface components {
             keys?: components["schemas"]["ApiKeyResponse"][];
         };
         CreateVaultRequest: {
+            /** @description Unique within the organization. Trimmed before it is stored, and the trimmed value is what must be unique. Counted in characters, not bytes. */
             name: string;
             description?: string;
             /** @description MPC custody mode to enable at creation (e.g. "2-of-2", "2-of-3") */
@@ -16616,7 +16635,24 @@ export interface operations {
                     "application/json": components["schemas"]["VaultResponse"];
                 };
             };
-            400: components["responses"]["BadRequest"];
+            /** @description The name is empty or longer than 255 characters. Checked before the consensus gate and the quota, so a malformed request consumes neither an approval nor a rate-limit slot. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ProblemDetails"];
+                };
+            };
+            /** @description A vault with that name already exists in this organization. Names are unique per org; this previously surfaced as a 500. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ProblemDetails"];
+                };
+            };
         };
     };
     getVault: {
@@ -24607,6 +24643,21 @@ export interface operations {
             401: components["responses"]["Unauthorized"];
             403: components["responses"]["Forbidden"];
             404: components["responses"]["NotFound"];
+            /**
+             * @description The runtime's last start failed less than 120 seconds ago and is not
+             *     being retried yet. Chat starts a stopped runtime, so a client that
+             *     retries on failure turns every attempt into another deploy — one
+             *     polling client did exactly that every 8 seconds for days. Wait out
+             *     the cooldown, or call the start endpoint to see the underlying error.
+             */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ProblemDetails"];
+                };
+            };
         };
     };
     listMemoryNamespaces: {
@@ -29460,6 +29511,50 @@ export interface operations {
             };
         };
     };
+    list_browser_devices: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The paired devices. No credential material is returned — the row holds an Argon2 hash and a prefix, and neither is exposed. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        devices?: {
+                            /** Format: uuid */
+                            id?: string;
+                            label?: string;
+                            platform?: string | null;
+                            bridge_version?: string | null;
+                            /** Format: date-time */
+                            last_seen_at?: string | null;
+                            /**
+                             * Format: date-time
+                             * @description Set once revoked. A revoked credential stops resolving.
+                             */
+                            revoked_at?: string | null;
+                            /** Format: date-time */
+                            created_at?: string;
+                        }[];
+                    };
+                };
+            };
+            /** @description Unauthenticated */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     pair_browser_device: {
         parameters: {
             query?: never;
@@ -29518,6 +29613,40 @@ export interface operations {
             };
         };
     };
+    revoke_browser_device: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Revoked. Subsequent use of that credential resolves to nothing. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Unauthenticated */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description No such device in this organization */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
     list_browser_credentials: {
         parameters: {
             query?: never;
@@ -29556,7 +29685,7 @@ export interface operations {
                     secret_path: string;
                     /** @description https only, and its host must be in allowed_hosts or sso_hosts — the bridge navigates here itself, one step before a password is typed. */
                     login_url: string;
-                    /** @description Bare hostnames, compared exactly. URLs, ports and wildcards are refused: a wildcard would match nothing while looking like it allowed something. */
+                    /** @description Hostnames. A bare entry matches only itself; a leading dot ('.example.com') matches that host and any subdomain. URLs, ports and '*' are refused — '*' has no meaning to the matcher, so it would be stored and then match nothing. */
                     allowed_hosts: string[];
                     /** @description Identity-provider hosts the login legitimately bounces through. */
                     sso_hosts?: string[];
@@ -29725,8 +29854,19 @@ export interface operations {
                      * @description The bridge's navigation counter. Compared again at consume: a navigation in between means the page decided about is no longer the page in front of the bridge.
                      */
                     generation: number;
-                    /** @description Where the form would POST. Checked as well as the two origins — a login form on an allowed page can still submit to somebody else's host. */
+                    /** @description Where the form would POST. Checked as well as the two origins — a login form on an allowed page can still submit to somebody else's host. Absent is not treated as 'same as the tab'; it denies. */
                     form_action_origin?: string;
+                    /** @description Path of the form being filled, checked against the binding's fingerprint. */
+                    form_path: string;
+                    /** @description Field names on that form. Every field the fingerprint expects must be present; extra fields are fine, since sites add hidden inputs. */
+                    field_names: string[];
+                    /** @description Hosts the login has redirected through, in order. Each is checked against the binding's allowed hosts union its sso hosts. */
+                    redirect_chain: string[];
+                    /**
+                     * Format: int64
+                     * @description The target's generation now. A mismatch with `generation` means the page moved and the fill is denied.
+                     */
+                    current_generation: number;
                     /** @description Origin of the tab being driven. Checked against the binding's allowed and sso hosts by exact host match. */
                     tab_origin: string;
                     /** @description Origin of the frame holding the form. Checked separately — a credential typed into an allowed tab can still land in an attacker's iframe. */