@alvera-ai/platform-sdk 0.19.2 → 0.20.0-next.gaafd87a

package/dist/index.mjs

@@ -1105,6 +1105,41 @@ const platformApiDatalakeControllerUpdate = (options) => (options.client ?? clie
 	}
 });
 /**
+* Resolve an authenticated link's token
+*
+* Called by the host serving an action's link prefix when a person taps
+* `<link_prefix>/<token>`. Returns the link: where it goes, the recipient's
+* legal entity, the workflow, run and action that sent it, when it expires
+* and when a person first clicked it, with the message it was sent in. The
+* message carries its metadata as stored: the recipient's `to` merged with
+* what the action's metadata template rendered.
+*
+* A person's tap also moves the message to `clicked`, in the same request;
+* the first click stamps the link's `link_clicked_at` and the message's
+* `clicked_at`, and later ones keep both. A `HEAD` request, a
+* prefetch header, an empty user agent, or a bot, link-preview or
+* mail-scanner user agent looks automated and moves nothing. Every tap is
+* recorded with the request details forwarded here and the signal that
+* flagged it, if any. Answers every time until the link expires: 404 for an
+* unknown token, 410 past its expiry, 503 when the datalake cannot be
+* reached.
+*
+* **Requires X-API-Key authentication.** A publishable key is enough.
+*
+*/
+const platformApiAuthenticatedLinkControllerExchange = (options) => (options.client ?? client).post({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/authenticated-links/exchange",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
 * List accessible tenants
 *
 * Returns a paginated list of tenants accessible to the authenticated identity.
@@ -1496,28 +1531,6 @@ const platformApiDataSourceControllerUpdate = (options) => (options.client ?? cl
 	}
 });
 /**
-* Update message tracking fields for a page
-*
-* Updates tracking timestamps (opened_at, form_submitted_at) on the message
-* linked to a page token. Called by the connected app when a user opens a page
-* or submits a form.
-*
-* **Requires X-API-Key authentication.**
-*
-*/
-const platformApiConnectedAppControllerUpdateMessageTracking = (options) => (options.client ?? client).patch({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{slug}/update-message-tracking",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Delete an agentic workflow
 *
 * Deletes a workflow and all associated actions, context datasets, and AI agent attachments. A workflow with run logs cannot be deleted (409 Conflict) — the logs preserve its run history; rename the workflow instead to free its name for a replacement.
@@ -1590,33 +1603,6 @@ const platformApiActionStatusUpdaterControllerRefresh = (options) => (options.cl
 	}
 });
 /**
-* Resolve a short URL token to a page
-*
-* Given a connected app slug and a Puid short URL token, resolves the token to
-* the pre-stored route path and legal entity id. The Cloudflare app calls this
-* endpoint when a customer clicks a short URL, forwarding the original client
-* headers (user-agent, IP, country) in the request body.
-*
-* When the page token is linked to a message (via workflow action execution),
-* the raw message details (raw body, channel, status) are included in
-* the response.
-*
-* **Requires X-API-Key authentication.**
-*
-*/
-const platformApiConnectedAppControllerResolvePage = (options) => (options.client ?? client).post({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{slug}/resolve-page",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Compute the drift checksum for a datalake config
 *
 * Returns the server-computed drift fingerprint a create/update would stamp for the submitted config, without persisting anything. `alvera plan` posts the operator's desired config here and compares the result against the deployed datalake's `checksum` (from GET) to decide absent / unchanged / edited.
@@ -1833,26 +1819,6 @@ const platformApiAiAgentControllerChecksum = (options) => (options.client ?? cli
 	}
 });
 /**
-* Compute the drift checksum for a connected app config
-*
-* Returns the server-computed drift fingerprint a create/update would stamp for the submitted config, without persisting anything. `alvera plan` posts the operator's desired config here and compares the result against the deployed app's `checksum` (from GET) to decide absent / unchanged / edited.
-*/
-const platformApiConnectedAppMgmtControllerChecksum = (options) => (options.client ?? client).post({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/checksum",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Get a workflow run
 *
 * Returns one run with everything known about it so far.
@@ -1877,6 +1843,23 @@ const platformApiWorkflowRunControllerShow = (options) => (options.client ?? cli
 	...options
 });
 /**
+* List runs for a Data Activation Client
+*
+* Returns a Flop-paginated list of this client's runs — **one row per run**, not one per dataset table. `closed_at` is empty while a run is still going, and `status` means nothing until it is set. For the per-table detail of a run, read `/logs` and filter on the same `batch_id`.
+*/
+const platformApiDataActivationClientControllerBatchesIndex = (options) => (options.client ?? client).get({
+	querySerializer: { parameters: { filters: { array: { style: "deepObject" } } } },
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}, {
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/data-activation-clients/{slug}/batches",
+	...options
+});
+/**
 * List the datasets the platform registers
 *
 * Returns the dataset name strings the platform registers:
@@ -2022,6 +2005,22 @@ const platformApiAgenticWorkflowOperationsControllerWorkflowLogsIndex = (options
 	...options
 });
 /**
+* Show a single run
+*
+* Returns one run by the identifier every job of that run carries. **This is the "is it done yet" question**: `closed_at` is empty while the run is still going and set once it is over, whatever the outcome — read `status` for that, and only once `closed_at` is set. Returns 404 if the identifier belongs to a different client.
+*/
+const platformApiDataActivationClientControllerBatchShow = (options) => (options.client ?? client).get({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}, {
+		scheme: "bearer",
+		type: "http"
+	}],
+	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/data-activation-clients/{slug}/batches/{batch_id}",
+	...options
+});
+/**
 * Get single contract field metadata
 *
 * Returns a markdown document describing the fields of the contract's target resource type. Combines `@moduledoc` (resource description) and `@typedoc` (field definitions) from the schema.
@@ -2074,6 +2073,36 @@ const platformApiAgenticWorkflowOperationsControllerExecute = (options) => (opti
 	}
 });
 /**
+* Report engagement on an authenticated link's message
+*
+* Called by the host serving an action's link prefix to report what the
+* person did after the exchange, with develop's fields: `opened` with
+* `opened_at` when its landing page opened, `form_submitted` with
+* `form_submitted_at` when they finish the link's form. The status goes
+* through the message's order guard, so it only ever moves the message
+* forward; a time left empty keeps the message's value. Returns the link with
+* its message, as the exchange does.
+*
+* Takes the link's token until it expires: 404 for an unknown token, 410 past
+* its expiry, 503 when the datalake cannot be reached, 422 for a status a
+* message cannot have.
+*
+* **Requires X-API-Key authentication.** A publishable key is enough.
+*
+*/
+const platformApiAuthenticatedLinkControllerUpdateMessageTracking = (options) => (options.client ?? client).patch({
+	security: [{
+		name: "X-API-Key",
+		type: "apiKey"
+	}],
+	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/authenticated-links/update-message-tracking",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
 * Page results from a UserSearch — outer SQL chunk + inner resource Flop
 *
 * Two-tier pagination at two layers:
@@ -2511,43 +2540,6 @@ const platformApiAiAgentControllerInvoke = (options) => (options.client ?? clien
 	}
 });
 /**
-* List connected apps
-*
-* Returns a paginated list of connected apps for the authenticated tenant.
-*/
-const platformApiConnectedAppMgmtControllerIndex = (options) => (options.client ?? client).get({
-	querySerializer: { parameters: { filters: { array: { style: "deepObject" } } } },
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps",
-	...options
-});
-/**
-* Create a connected app
-*
-* Creates a new connected app with automatic API key provisioning.
-*/
-const platformApiConnectedAppMgmtControllerCreate = (options) => (options.client ?? client).post({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Revoke current session
 *
 * Revokes the current Bearer session — deactivates the session and deletes
@@ -2658,23 +2650,6 @@ const platformApiAgenticWorkflowControllerCreate = (options) => (options.client
 	}
 });
 /**
-* Connected apps catalog as markdown
-*
-* Returns one page of the connected app catalog for the current datalake, rendered as markdown. Accepts the same pagination, filtering, and ordering parameters as `index`; each entry includes wrapper fields + URLs + discovered routes, with the page's pagination state in a narrative line at the top. Trailing `Shared Types` section documents `TemplateConfig` + Solid filters.
-*/
-const platformApiConnectedAppMgmtControllerMetadata = (options) => (options.client ?? client).get({
-	querySerializer: { parameters: { filters: { array: { style: "deepObject" } } } },
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/metadata",
-	...options
-});
-/**
 * List processing logs for a Data Activation Client
 *
 * Returns a Flop-paginated list of `DataActivationLog` rows for this DAC. One log per `(batch_id, dataset_table)` — a single run produces multiple log rows, one per dataset table the DAC writes into. Filter or group client-side on `batch_id` to reconstruct a batch-level view.
@@ -2877,49 +2852,6 @@ const platformApiPingControllerPing = (options) => (options?.client ?? client).g
 	...options
 });
 /**
-* Reveal a connected app's publishable API key (admin)
-*
-* Returns the plaintext publishable (`public_api`) API key auto-provisioned for
-* a connected app — Alvera's analogue of a Stripe publishable key. The platform
-* stores the key Cloak-encrypted "for admin viewing"; this endpoint decrypts and
-* returns it.
-*
-* Wraps `Platform.ApiKeys.get_api_key_plaintext/1` over the connected app's api
-* key — the same primitive the API-keys UI uses to display a key. **Zero new
-* business logic.** Returns 404 when the app does not exist or its key was revoked.
-*
-* Powerful primitive: exposes a live credential. Every successful call is
-* structured-logged with `caller_user_id`, `connected_app_id`, and `api_key_id`
-* for a forensic trail.
-*
-* **Requires platform-admin authentication** (`User.role == :admin`).
-*
-*/
-const platformApiIntegrationTestOnlyAdminControllerRevealConnectedAppApiKey = (options) => (options.client ?? client).get({
-	security: [{
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/admin/connected-apps/{id}/api-key",
-	...options
-});
-/**
-* Sync routes
-*
-* Enqueues a background job to fetch routes from the connected app's `/.well-known/routes.json` endpoint and update the stored routes.
-*/
-const platformApiConnectedAppMgmtControllerSyncRoutes = (options) => (options.client ?? client).post({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{id}/sync-routes",
-	...options
-});
-/**
 * List data activation clients
 *
 * Returns a paginated list of DACs for the datalake in the path.
@@ -3155,58 +3087,6 @@ const platformApiDatalakeControllerProvisionTokenization = (options) => (options
 	...options
 });
 /**
-* Delete a connected app
-*
-* Deletes a connected app (addressed by id) within the authenticated datalake. For managed apps, infrastructure cleanup is queued before the record is removed.
-*/
-const platformApiConnectedAppMgmtControllerDelete = (options) => (options.client ?? client).delete({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{id}",
-	...options
-});
-/**
-* Get a connected app
-*
-* Returns a single connected app by ID.
-*/
-const platformApiConnectedAppMgmtControllerShow = (options) => (options.client ?? client).get({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{id}",
-	...options
-});
-/**
-* Replace a connected app
-*
-* Replaces a connected app with the full resource body. PUT semantics — all required fields must be present.
-*/
-const platformApiConnectedAppMgmtControllerUpdate = (options) => (options.client ?? client).put({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{id}",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Invite a user to the tenant
 *
 * Creates a `tenant_admin`-issued invitation. Mirrors the LiveView flow at
@@ -3458,22 +3338,6 @@ const platformApiAgenticWorkflowOperationsControllerBatchLogRefresh = (options)
 	...options
 });
 /**
-* Single connected app metadata as markdown
-*
-* Returns markdown for one connected app — wrapper + URLs + discovered routes.
-*/
-const platformApiConnectedAppMgmtControllerMetadataDetails = (options) => (options.client ?? client).get({
-	security: [{
-		name: "X-API-Key",
-		type: "apiKey"
-	}, {
-		scheme: "bearer",
-		type: "http"
-	}],
-	url: "/api/v1/tenants/{tenant_slug}/datalakes/{datalake_slug}/connected-apps/{id}/metadata",
-	...options
-});
-/**
 * Start or restart refresh polling for a batch run log
 *
 * Creates a DynamicCron job to poll this batch. Idempotent — if cron already exists, it's a no-op.
@@ -4044,11 +3908,6 @@ function _buildApi(myClient) {
 				client: myClient,
 				throwOnError: true
 			}),
-			revealConnectedAppApiKey: (id) => platformApiIntegrationTestOnlyAdminControllerRevealConnectedAppApiKey({
-				path: { id },
-				client: myClient,
-				throwOnError: true
-			}),
 			createTenantApiKey: (tenantSlug, body) => platformApiIntegrationTestOnlyAdminControllerCreateTenantApiKey({
 				path: { tenant_slug: tenantSlug },
 				body,
@@ -4806,27 +4665,8 @@ function _buildApi(myClient) {
 				throwOnError: true
 			})
 		},
-		connectedApps: {
-			list: (tenantSlug, datalakeSlug, query) => platformApiConnectedAppMgmtControllerIndex({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug
-				},
-				query,
-				querySerializer: bracketQuerySerializer,
-				client: myClient,
-				throwOnError: true
-			}),
-			get: (tenantSlug, datalakeSlug, id) => platformApiConnectedAppMgmtControllerShow({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					id
-				},
-				client: myClient,
-				throwOnError: true
-			}),
-			create: (tenantSlug, datalakeSlug, body) => platformApiConnectedAppMgmtControllerCreate({
+		authenticatedLinks: {
+			exchange: (tenantSlug, datalakeSlug, body) => platformApiAuthenticatedLinkControllerExchange({
 				path: {
 					tenant_slug: tenantSlug,
 					datalake_slug: datalakeSlug
@@ -4835,7 +4675,7 @@ function _buildApi(myClient) {
 				client: myClient,
 				throwOnError: true
 			}),
-			checksum: (tenantSlug, datalakeSlug, body) => platformApiConnectedAppMgmtControllerChecksum({
+			updateMessageTracking: (tenantSlug, datalakeSlug, body) => platformApiAuthenticatedLinkControllerUpdateMessageTracking({
 				path: {
 					tenant_slug: tenantSlug,
 					datalake_slug: datalakeSlug
@@ -4843,72 +4683,6 @@ function _buildApi(myClient) {
 				body,
 				client: myClient,
 				throwOnError: true
-			}),
-			update: (tenantSlug, datalakeSlug, id, body) => platformApiConnectedAppMgmtControllerUpdate({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					id
-				},
-				body,
-				client: myClient,
-				throwOnError: true
-			}),
-			delete: (tenantSlug, datalakeSlug, id) => platformApiConnectedAppMgmtControllerDelete({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					id
-				},
-				client: myClient,
-				throwOnError: true
-			}),
-			syncRoutes: (tenantSlug, datalakeSlug, id) => platformApiConnectedAppMgmtControllerSyncRoutes({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					id
-				},
-				client: myClient,
-				throwOnError: true
-			}),
-			resolvePage: (tenantSlug, datalakeSlug, slug, body) => platformApiConnectedAppControllerResolvePage({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					slug
-				},
-				body,
-				client: myClient,
-				throwOnError: true
-			}),
-			updateMessageTracking: (tenantSlug, datalakeSlug, slug, body) => platformApiConnectedAppControllerUpdateMessageTracking({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					slug
-				},
-				body,
-				client: myClient,
-				throwOnError: true
-			}),
-			metadata: (tenantSlug, datalakeSlug, query) => platformApiConnectedAppMgmtControllerMetadata({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug
-				},
-				query,
-				client: myClient,
-				throwOnError: true
-			}),
-			metadataDetails: (tenantSlug, datalakeSlug, id) => platformApiConnectedAppMgmtControllerMetadataDetails({
-				path: {
-					tenant_slug: tenantSlug,
-					datalake_slug: datalakeSlug,
-					id
-				},
-				client: myClient,
-				throwOnError: true
 			})
 		},
 		dataActivationClients: {
@@ -5038,6 +4812,29 @@ function _buildApi(myClient) {
 					client: myClient,
 					throwOnError: true
 				})
+			},
+			batches: {
+				list: (tenantSlug, datalakeSlug, slug, query) => platformApiDataActivationClientControllerBatchesIndex({
+					path: {
+						tenant_slug: tenantSlug,
+						datalake_slug: datalakeSlug,
+						slug
+					},
+					query,
+					querySerializer: bracketQuerySerializer,
+					client: myClient,
+					throwOnError: true
+				}),
+				get: (tenantSlug, datalakeSlug, slug, batchId) => platformApiDataActivationClientControllerBatchShow({
+					path: {
+						tenant_slug: tenantSlug,
+						datalake_slug: datalakeSlug,
+						slug,
+						batch_id: batchId
+					},
+					client: myClient,
+					throwOnError: true
+				})
 			}
 		},
 		interoperabilityContracts: {