@appforge-ci/core 0.1.1

package/dist/api-client.js

@@ -0,0 +1,551 @@
+/**
+ * Every `ApiClient` call is a small JSON request/response — no file
+ * upload/download is ever routed through this client (build artifacts and
+ * OTA bundles go straight to/from R2 via a presigned URL the caller fetches
+ * separately) — but a handful of routes (`explainBuildFailure`,
+ * `analyzeSmokeTest`, `askDocsChat`, `generateAppforgeConfig`) proxy to
+ * Anthropic server-side and can legitimately take tens of seconds for a
+ * real completion, well past what a plain CRUD call needs. 60s is
+ * generous enough to cover the slowest of those with room to spare, while
+ * still being a real ceiling: without one, a connection that stalls after
+ * opening (a network partition, a proxy holding the connection open
+ * without sending further bytes, a hung Worker instance) left every
+ * caller's `fetch` promise pending forever — same shape as `packages/
+ * agent/src/lib/api.ts`'s already-fixed `AgentApi.request`, but for the
+ * single shared client every dashboard page, CLI command, and admin-cli
+ * command talks to the control plane through. */
+export const DEFAULT_REQUEST_TIMEOUT_MS = 60_000;
+export class ApiError extends Error {
+    status;
+    body;
+    constructor(status, body) {
+        super(`API error ${status}: ${JSON.stringify(body)}`);
+        this.status = status;
+        this.body = body;
+    }
+}
+/**
+ * Shared "what should the user see" extraction for a caught error from
+ * any `ApiClient` call. `ApiError` extends `Error`, so a naive
+ * `err instanceof Error ? err.message : fallback` always matches an
+ * `ApiError` too and returns *this class's own* constructor string —
+ * `API error ${status}: ${JSON.stringify(body)}`, meant for logs/
+ * debugging — instead of the server's actual user-facing text at
+ * `body.error`. This was independently found and fixed the same way in
+ * `Login.tsx`/`Signup.tsx`/`Device.tsx`/`VerifyEmail.tsx` (dashboard)
+ * and `VncViewer.tsx`'s own `vncViewerErrorMessage` before this shared
+ * helper existed; new callers (both CLIs' top-level handlers first, per
+ * ROADMAP.md) should use this instead of repeating the same extraction
+ * inline.
+ */
+export function apiErrorMessage(err, fallback) {
+    if (err instanceof ApiError) {
+        const body = err.body;
+        return typeof body?.error === "string" ? body.error : err.message;
+    }
+    return err instanceof Error ? err.message : fallback;
+}
+/**
+ * Small typed fetch wrapper shared by the CLI and the dashboard so both
+ * talk to the control-plane API through the same request/response shapes.
+ */
+export class ApiClient {
+    opts;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    async request(method, path, body, base = this.opts.baseUrl) {
+        const fetchImpl = this.opts.fetchImpl ?? fetch;
+        const res = await fetchImpl(`${base}${path}`, {
+            method,
+            headers: {
+                "content-type": "application/json",
+                ...(this.opts.token ? { authorization: `Bearer ${this.opts.token}` } : {}),
+            },
+            body: body === undefined ? undefined : JSON.stringify(body),
+            signal: AbortSignal.timeout(this.opts.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS),
+        });
+        const text = await res.text();
+        // `apps/api`'s and `apps/admin-api`'s own `jsonErrorHandler`/
+        // `jsonNotFoundHandler` guarantee *those two Workers* always answer
+        // with valid JSON, but a real deployment sits behind Cloudflare's
+        // edge — a gateway timeout (522/524), a WAF block, or a rate-limit
+        // page can all return plain-text/HTML instead, for either a non-ok
+        // or (more rarely) an ok response. `JSON.parse`-ing unconditionally
+        // used to crash every single caller (every dashboard page, both
+        // CLIs) with a raw, uncatchable `SyntaxError` the moment that
+        // happened, instead of the `ApiError`/typed rejection they already
+        // know how to catch. Mirrors `packages/agent/src/lib/api.ts`'s
+        // `AgentApi.request`, which already checks `res.ok` before ever
+        // parsing a body.
+        if (!res.ok) {
+            let json;
+            try {
+                json = text ? JSON.parse(text) : undefined;
+            }
+            catch {
+                json = text;
+            }
+            throw new ApiError(res.status, json);
+        }
+        // `null`, not `undefined` — `getOtaManifest` (the one caller that
+        // actually receives a truly empty, `c.body(null, 204)` response body
+        // from the server, apps/api/src/routes/ota.ts) is typed
+        // `Promise<OtaManifest | null>`, matching this codebase's own
+        // convention elsewhere of a real JSON `null` meaning "nothing here"
+        // (e.g. `rollbackOtaChannel`'s `{ release: OtaRelease | null }`).
+        // This used to resolve to `undefined` instead, silently breaking that
+        // type contract: any caller written against the declared type doing
+        // the natural `if (manifest === null) return;` would fall through
+        // and crash on `undefined.bundleUrl` on the overwhelmingly common
+        // "already up to date" response — the exact case this endpoint
+        // exists to handle cheaply and often. No other typed `request<T>`
+        // call site in this file expects an empty body at all (every other
+        // 2xx response from apps/api/apps/admin-api always carries an actual
+        // JSON payload), so this only changes behavior for the one caller
+        // this type was always meant to describe.
+        try {
+            return (text ? JSON.parse(text) : null);
+        }
+        catch {
+            throw new Error(`expected a JSON response but got: ${text.slice(0, 200)}`);
+        }
+    }
+    adminRequest(method, path, body) {
+        return this.request(method, path, body, this.opts.adminApiUrl ?? this.opts.baseUrl);
+    }
+    /**
+     * `twoFactor` is only needed on a second call, after a first call
+     * without it throws `ApiError(401, { requiresTotp: true })` — see
+     * apps/api/src/routes/auth.ts's login handler. `recoveryCode` is a
+     * lost-authenticator alternate to `totpCode`, never both at once.
+     */
+    login(email, password, twoFactor) {
+        return this.request("POST", "/auth/login", {
+            email,
+            password,
+            totpCode: twoFactor?.totpCode,
+            recoveryCode: twoFactor?.recoveryCode,
+        });
+    }
+    signup(email, password, name, orgName) {
+        return this.request("POST", "/auth/signup", {
+            email,
+            password,
+            name,
+            orgName,
+        });
+    }
+    me() {
+        return this.request("GET", "/auth/me");
+    }
+    /**
+     * Redeems the token from the signup verification email's link
+     * (`apps/api/src/lib/email-verification.ts`'s `verifyUrl`). No auth of
+     * its own — the route this hits (`POST /auth/verify-email`) doesn't
+     * require a session, since whoever clicked the link may not be logged
+     * in on this browser at all. Was previously unreachable from any
+     * client: this method, plus a dashboard route to call it, is the fix.
+     */
+    verifyEmail(token) {
+        return this.request("POST", "/auth/verify-email", { token });
+    }
+    /** Requires an existing session — unlike `verifyEmail`, this is only
+     *  ever offered to an already-logged-in user who hasn't verified yet
+     *  (see `Security.tsx`). Rate-limited server-side. */
+    resendVerification() {
+        return this.request("POST", "/auth/resend-verification");
+    }
+    /** Requires re-entering the current password — same reasoning as
+     *  `disableTwoFactor` below: a stolen session token alone must not be
+     *  enough to take over the account's own fallback credential.
+     *  Rate-limited server-side, keyed by user. Also revokes every other
+     *  live session for the account (a leaked token stops working
+     *  immediately) — `token` is a freshly-issued replacement for *this*
+     *  session specifically, so the caller must swap it in (e.g. into
+     *  `session.token`) or this same request's own session gets logged
+     *  out by its own success. */
+    changePassword(currentPassword, newPassword) {
+        return this.request("POST", "/auth/change-password", { currentPassword, newPassword });
+    }
+    /** No auth of its own — this is the entry point for someone who can't
+     *  log in at all. Always resolves the same way regardless of whether
+     *  the email is actually registered (see the route's own doc
+     *  comment) — never use the response to decide whether to tell the
+     *  caller "no account with that email". */
+    forgotPassword(email) {
+        return this.request("POST", "/auth/forgot-password", { email });
+    }
+    /** Redeems the token from the forgot-password email's link
+     *  (`apps/api/src/lib/password-reset.ts`'s `resetUrl`). No auth of its
+     *  own, same reasoning as `verifyEmail` above. Also revokes every
+     *  other live session for the account and returns a fresh one, same
+     *  as `changePassword`/`disableTwoFactor` — a reset is at least as
+     *  strong proof of ownership as re-entering the current password. */
+    resetPassword(token, newPassword) {
+        return this.request("POST", "/auth/reset-password", { token, newPassword });
+    }
+    // --- TOTP 2FA (apps/api/src/routes/two-factor.ts) ---
+    /** Starts (or restarts) enrollment — the secret is only ever returned
+     *  here and from confirmTwoFactor's success, never again afterward. */
+    enrollTwoFactor() {
+        return this.request("POST", "/auth/2fa/enroll");
+    }
+    /** Redeems the first code from an authenticator app to actually turn
+     *  2FA on — `recoveryCodes` is shown exactly once, same as the secret
+     *  above; the caller is responsible for surfacing it to the user now.
+     *  Also requires re-entering the account password, same reasoning and
+     *  requirement as `disableTwoFactor` below: without it, any live
+     *  session (a stolen JWT, or a CLI/webhook API token, which never
+     *  expires on its own) was enough to confirm 2FA with an
+     *  attacker-chosen secret, permanently locking the real account owner
+     *  out at their next login — see docs/security.md's "2FA (TOTP)" note. */
+    confirmTwoFactor(code, password) {
+        return this.request("POST", "/auth/2fa/confirm", { code, password });
+    }
+    /** Requires re-entering the account password — see docs/security.md's
+     *  "2FA (TOTP)" note on why a session token alone isn't enough here.
+     *  Also revokes every other live session for the account, same
+     *  reasoning and `token`-swap requirement as `changePassword` above —
+     *  the JWT this very request authenticated with might be the leaked
+     *  one 2FA existed to guard against. */
+    disableTwoFactor(password) {
+        return this.request("POST", "/auth/2fa/disable", { password });
+    }
+    /** Invalidates every existing recovery code and returns a fresh set,
+     *  shown exactly once like the original set from confirmTwoFactor.
+     *  Also requires re-entering the account password, same reasoning as
+     *  `disableTwoFactor` above: without it, a stolen session token alone
+     *  was enough to silently destroy the real owner's recovery path
+     *  (this codebase has no account-recovery flow) and hand the
+     *  attacker a fresh set of recovery codes instead — see
+     *  docs/security.md's "2FA (TOTP)" note. */
+    regenerateRecoveryCodes(password) {
+        return this.request("POST", "/auth/2fa/recovery-codes/regenerate", { password });
+    }
+    /** `appforge-admin login --web`'s device-authorization flow (#5) — the CLI calls this first, no auth of its own yet. */
+    startDeviceAuth() {
+        return this.request("POST", "/auth/device/start");
+    }
+    /** Poll with the long deviceCode until status stops being "pending" — same shape as gh/OAuth device flow polling. */
+    pollDeviceAuth(deviceCode) {
+        return this.request("GET", `/auth/device/poll?device_code=${encodeURIComponent(deviceCode)}`);
+    }
+    /** Called from the dashboard (already has a user session) with the short, human-typed userCode. */
+    approveDeviceAuth(userCode) {
+        return this.request("POST", "/auth/device/approve", { userCode });
+    }
+    denyDeviceAuth(userCode) {
+        return this.request("POST", "/auth/device/deny", { userCode });
+    }
+    /** Drafts an appforge.yaml from real project files — see #8. `files` is path -> file contents for whatever the caller found on disk. */
+    generateAppforgeConfig(input) {
+        return this.request("POST", "/generate-appforge-config", input);
+    }
+    /** Public, unauthenticated docs Q&A widget (pricing page) — see #10. Resend the whole conversation each call; nothing is kept server-side. */
+    askDocsChat(history) {
+        return this.request("POST", "/docs-chat", { history });
+    }
+    createApiToken(orgId, label) {
+        return this.request("POST", `/orgs/${orgId}/tokens`, { label });
+    }
+    /** Never includes the token value itself or its hash — see
+     *  `ApiTokenInfo`'s own docblock. */
+    listApiTokens(orgId, pagination) {
+        const params = new URLSearchParams();
+        if (pagination?.limit !== undefined)
+            params.set("limit", String(pagination.limit));
+        if (pagination?.offset !== undefined)
+            params.set("offset", String(pagination.offset));
+        const qs = params.toString();
+        return this.request("GET", `/orgs/${orgId}/tokens${qs ? `?${qs}` : ""}`);
+    }
+    /** Immediate and permanent — there's no undo once a token is
+     *  revoked (a fresh one via `createApiToken` is the only way back). */
+    revokeApiToken(orgId, tokenId) {
+        return this.request("DELETE", `/orgs/${orgId}/tokens/${tokenId}`);
+    }
+    /** Fixes a typo'd or since-changed org name (e.g. a placeholder used
+     *  at signup) without any of `updateApp`'s deletion/recreation
+     *  downsides — there's nothing else to break, since unlike an app's
+     *  `webhookSecret`, an org's identity has no dependent secret tied to
+     *  it. `name` is the only updatable field; see `updateOrgSchema`'s own
+     *  docblock in `packages/core/src/schemas.ts`. */
+    updateOrg(orgId, input) {
+        return this.request("PATCH", `/orgs/${orgId}`, input);
+    }
+    listApps(orgId, pagination) {
+        const params = new URLSearchParams();
+        if (pagination?.limit !== undefined)
+            params.set("limit", String(pagination.limit));
+        if (pagination?.offset !== undefined)
+            params.set("offset", String(pagination.offset));
+        const qs = params.toString();
+        return this.request("GET", `/orgs/${orgId}/apps${qs ? `?${qs}` : ""}`);
+    }
+    createApp(orgId, input) {
+        return this.request("POST", `/orgs/${orgId}/apps`, input);
+    }
+    /** A single app's own name/platform/etc. — `listApps` only ever returns a
+     *  whole org's apps, so a page that already knows just the `appId` (any
+     *  `/apps/:appId/*` page) needs this rather than fetching every app in
+     *  the org just to find the one it's showing. */
+    getApp(appId) {
+        return this.request("GET", `/apps/${appId}`);
+    }
+    /** The one route that actually returns `webhookSecret` — every other
+     *  app response (`getApp`/`listApps`/`createApp`/`updateApp`)
+     *  deliberately omits it. This is the value GitHub's webhook settings
+     *  "Secret" field needs, per `docs/security.md`'s "GitHub webhooks"
+     *  note; without it there's no way to ever configure a working
+     *  webhook at all. */
+    getAppWebhookSecret(appId) {
+        return this.request("GET", `/apps/${appId}/webhook-secret`);
+    }
+    /** `platform` isn't updatable — see `updateAppSchema`'s own docblock
+     *  in `packages/core/src/schemas.ts`. */
+    updateApp(appId, input) {
+        return this.request("PATCH", `/apps/${appId}`, input);
+    }
+    /** Permanently removes the app and cascades every `Build`/OTA row for
+     *  it — 409s (a plain `ApiError`) if a build is still queued/leased/
+     *  running, so an in-flight build never has its `App` row vanish out
+     *  from under it. */
+    deleteApp(appId) {
+        return this.request("DELETE", `/apps/${appId}`);
+    }
+    /** Build-secrets v1 (ROADMAP.md, split off from #322) — sets or
+     *  overwrites a named secret for this app, injected as an env var
+     *  under that name on every build. Never returns the value back;
+     *  see `getAppSecretNames` for why. */
+    setAppSecret(appId, input) {
+        return this.request("POST", `/apps/${appId}/secrets`, input);
+    }
+    /** Names only — this codebase has no route anywhere that returns a
+     *  secret's decrypted value once it's been set (same discipline
+     *  `getAppWebhookSecret` deliberately doesn't extend to). */
+    getAppSecretNames(appId) {
+        return this.request("GET", `/apps/${appId}/secrets`);
+    }
+    deleteAppSecret(appId, name) {
+        return this.request("DELETE", `/apps/${appId}/secrets/${encodeURIComponent(name)}`);
+    }
+    /** Fleet-secrets v1 (issue #392) — sets or overwrites one of the
+     *  org's fleet-wide infra secrets (`JWT_SECRET`,
+     *  `JWT_SECRET_PREVIOUS`, `INTERNAL_SERVICE_TOKEN`; see
+     *  `FLEET_SECRET_NAMES`). Every Mac mini enrolled in this org picks
+     *  the new value up on its next heartbeat and re-applies it locally,
+     *  so this call *is* the rotation — there's no per-machine follow-up
+     *  step. Never returns the value back, same as `setAppSecret`. */
+    setFleetSecret(orgId, input) {
+        return this.request("POST", `/orgs/${orgId}/fleet-secrets`, input);
+    }
+    /** Names only — as with `getAppSecretNames`, no route anywhere returns
+     *  a fleet secret's decrypted value to a human-facing client; the only
+     *  decrypt-and-return path in this codebase is apps/admin-api's
+     *  `GET /agents/fleet-secrets`, which requires an agent bearer token. */
+    getFleetSecretNames(orgId) {
+        return this.request("GET", `/orgs/${orgId}/fleet-secrets`);
+    }
+    deleteFleetSecret(orgId, name) {
+        return this.request("DELETE", `/orgs/${orgId}/fleet-secrets/${encodeURIComponent(name)}`);
+    }
+    listBuilds(appId) {
+        return this.request("GET", `/apps/${appId}/builds`);
+    }
+    /** Best-effort suggestions for the trigger-build form's "Workflow"
+     *  field — see `apps/api/src/lib/appforge-yaml.ts`'s own docblock for
+     *  why this can legitimately come back empty (private repo, no
+     *  appforge.yaml on this branch yet, etc.) rather than erroring. */
+    listAppWorkflows(appId) {
+        return this.request("GET", `/apps/${appId}/workflows`);
+    }
+    getBuild(buildId) {
+        return this.request("GET", `/builds/${buildId}`);
+    }
+    triggerBuild(input) {
+        return this.request("POST", "/builds", input);
+    }
+    cancelBuild(buildId) {
+        return this.request("POST", `/builds/${buildId}/cancel`);
+    }
+    // --- Fleet management — served by the separately-deployed admin
+    // Worker (apps/admin-api), not the customer-facing API. See
+    // ApiClientOptions.adminApiUrl. ---
+    listAgents(orgId) {
+        return this.adminRequest("GET", `/orgs/${orgId}/agents`);
+    }
+    createEnrollmentToken(orgId) {
+        return this.adminRequest("POST", `/orgs/${orgId}/agents/enrollment-token`);
+    }
+    /** Permanently remove a Mac mini from the fleet. The daemon on the
+     *  machine itself must be stopped separately — see apps/admin-api's
+     *  DELETE handler and `appforge-admin agents decommission`. */
+    deleteAgent(orgId, agentId) {
+        return this.adminRequest("DELETE", `/orgs/${orgId}/agents/${agentId}`);
+    }
+    /** `scriptName` is only used by RUN_MAINTENANCE_SCRIPT; `targetVersion`
+     *  only by UPDATE_AGENT (npm version or, for a repo-checkout install, a
+     *  git ref); `buildId` only by CANCEL_BUILD (which of this agent's
+     *  possibly-several concurrent builds to kill) — all three are ignored
+     *  server-side for every other command type. `buildId` was the one
+     *  missing piece keeping CANCEL_BUILD entirely unreachable from any
+     *  client despite the rest of the stack (route, schema, DB column,
+     *  agent handling) already being fully built — see ROADMAP.md. */
+    sendAgentCommand(agentId, type, scriptName, targetVersion, buildId) {
+        return this.adminRequest("POST", `/agents/${agentId}/commands`, {
+            type,
+            scriptName,
+            targetVersion,
+            buildId,
+        });
+    }
+    /** Remote-management history for one agent, newest first — how the
+     *  Fleet page shows whether a DRAIN/REBOOT/... actually landed
+     *  (`done`/`failed` + the agent's `result` string) instead of leaving
+     *  the operator guessing after a click. */
+    listAgentCommands(agentId, limit) {
+        const qs = limit ? `?limit=${limit}` : "";
+        return this.adminRequest("GET", `/agents/${agentId}/commands${qs}`);
+    }
+    /** VNC "Connect" button, Phase 1c: mints a 5-minute session token plus
+     *  the `wsUrl` (`apps/device-stream`'s `/vnc` relay, see that Worker's
+     *  Phase 1b) the dashboard's viewer page dials it against. Called fresh
+     *  each time the viewer page mounts, same "no pre-fetched token sitting
+     *  in a URL or router state" shape as `startDeviceTestSession`.
+     *
+     *  `options.requestControl` (Feature 3) asks the server for a session
+     *  that can also forward mouse/keyboard input, not just watch — sent
+     *  as `{ mode: "control" }` only when true, so an omitted/false call
+     *  sends no body at all, unchanged from before this option existed.
+     *  This is only ever a *request*: the response's own `mode` field
+     *  ("view" | "control") is what the server actually granted (`403` if
+     *  control was requested but `Agent.remoteControlEnabled` isn't set —
+     *  see `apps/admin-api/src/routes/fleet.ts`), and callers must treat
+     *  that field, never their own request, as authoritative. */
+    startVncSession(orgId, agentId, options) {
+        return this.adminRequest("POST", `/orgs/${orgId}/agents/${agentId}/vnc-session`, options?.requestControl ? { mode: "control" } : undefined);
+    }
+    /** Grants or revokes `Agent.remoteControlEnabled` (Feature 3) — the
+     *  one and only way that flag changes, mirroring `deleteAgent` above's
+     *  "dedicated route with its own DB write" shape rather than the
+     *  AgentCommand queue, since this is a persisted authorization bit
+     *  `startVncSession` needs to read synchronously, not a directive for
+     *  the agent daemon to act on. See `appforge-admin agents
+     *  allow-remote-control` (`packages/admin-cli`) for the CLI surface
+     *  this same route backs. */
+    setAgentRemoteControl(orgId, agentId, enabled) {
+        return this.adminRequest("PATCH", `/orgs/${orgId}/agents/${agentId}/remote-control`, { enabled });
+    }
+    /** The audit trail's read side — who's requested a VNC "Connect"
+     *  session for this agent and when, newest first. How a "Last VNC
+     *  session" column reads this (`apps/dashboard/src/pages/Fleet.tsx`),
+     *  same shape `listAgentCommands` above already established. */
+    listVncSessions(orgId, agentId) {
+        return this.adminRequest("GET", `/orgs/${orgId}/agents/${agentId}/vnc-sessions`);
+    }
+    getBalance(orgId) {
+        return this.request("GET", `/orgs/${orgId}/billing/balance`);
+    }
+    listTokenPacks() {
+        return this.request("GET", "/billing/packs");
+    }
+    /** Starts an LHV Paytech checkout session for a token top-up — also opportunistically saves a card for MIT monthly billing. */
+    createLhvCheckoutSession(orgId, packId) {
+        return this.request("POST", `/orgs/${orgId}/billing/checkout/lhv`, { packId });
+    }
+    isLhvConfigured() {
+        return this.request("GET", "/billing/providers/lhv");
+    }
+    listLedger(orgId) {
+        return this.request("GET", `/orgs/${orgId}/billing/ledger`);
+    }
+    getBillingUsage(orgId) {
+        return this.request("GET", `/orgs/${orgId}/billing/usage`);
+    }
+    setBillingMode(orgId, mode) {
+        return this.request("POST", `/orgs/${orgId}/billing/mode`, { mode });
+    }
+    listMonthlyInvoices(orgId) {
+        return this.request("GET", `/orgs/${orgId}/billing/invoices`);
+    }
+    /** AI triage of a failed build's log — see docs/ai-failure-triage.md.
+     *  Throws ApiError(501) if ANTHROPIC_API_KEY isn't configured on this
+     *  deployment; callers should show that as "not available here", not
+     *  as a generic error. */
+    explainBuildFailure(buildId) {
+        return this.request("POST", `/builds/${buildId}/explain-failure`);
+    }
+    /** On-demand re-analysis of every smoke-test screenshot a build produced
+     *  (#9), one verdict per screenshot in index order — same
+     *  501-if-unconfigured contract as explainBuildFailure above. */
+    analyzeSmokeTest(buildId) {
+        return this.request("POST", `/builds/${buildId}/analyze-smoke-test`);
+    }
+    startDeviceTestSession(buildId) {
+        return this.request("POST", `/builds/${buildId}/device-test/start`);
+    }
+    // --- OTA (Over-The-Air) updates ---
+    /** `appKey` is required — the manifest endpoint has no unauthenticated
+     *  fallback (see `apps/api/src/routes/ota.ts`'s docblock on it), only
+     *  `generateOtaAppKey`'s one-time response ever reveals a usable
+     *  value. This call carries no user session (a mobile app binary has
+     *  none), so the key travels as a query param rather than the
+     *  `authorization` header `request()` already reserves for the
+     *  dashboard/CLI's bearer token. */
+    getOtaManifest(appId, channel, appKey, currentHash, installationId) {
+        const params = new URLSearchParams({ appKey });
+        if (currentHash)
+            params.set("currentHash", currentHash);
+        // Lets a client SDK participate in staged rollout (apps/api/src/
+        // routes/ota.ts's isInStagedRollout) — omit it and the server treats
+        // the caller as always-in-rollout, same as every caller before this
+        // parameter existed.
+        if (installationId)
+            params.set("installationId", installationId);
+        return this.request("GET", `/apps/${appId}/ota/${encodeURIComponent(channel)}/manifest?${params.toString()}`);
+    }
+    /** Generates (rotates) this app's OTA manifest key — see
+     *  `getOtaManifest`. Returned once; the server keeps only its hash. */
+    generateOtaAppKey(appId) {
+        return this.request("POST", `/apps/${appId}/ota/app-key`);
+    }
+    listOtaReleases(appId, channel, pagination) {
+        const params = new URLSearchParams();
+        if (channel)
+            params.set("channel", channel);
+        if (pagination?.limit !== undefined)
+            params.set("limit", String(pagination.limit));
+        if (pagination?.offset !== undefined)
+            params.set("offset", String(pagination.offset));
+        const qs = params.toString();
+        return this.request("GET", `/apps/${appId}/ota/releases${qs ? `?${qs}` : ""}`);
+    }
+    listOtaChannels(appId, pagination) {
+        const params = new URLSearchParams();
+        if (pagination?.limit !== undefined)
+            params.set("limit", String(pagination.limit));
+        if (pagination?.offset !== undefined)
+            params.set("offset", String(pagination.offset));
+        const qs = params.toString();
+        return this.request("GET", `/apps/${appId}/ota/channels${qs ? `?${qs}` : ""}`);
+    }
+    promoteOtaRelease(appId, input) {
+        return this.request("POST", `/apps/${appId}/ota/promote`, input);
+    }
+    /** Progresses an existing release's rollout in place (10% -> 50% ->
+     *  100%) instead of re-promoting the same build, which would mint a
+     *  new release id and reshuffle `isInStagedRollout`'s per-install
+     *  bucketing — see `updateOtaReleaseRolloutSchema`'s own docblock in
+     *  `packages/core/src/schemas.ts`. */
+    updateOtaReleaseRollout(appId, releaseId, rollout) {
+        return this.request("PATCH", `/apps/${appId}/ota/releases/${releaseId}/rollout`, { rollout });
+    }
+    setActiveOtaRelease(appId, channel, releaseId) {
+        return this.request("POST", `/apps/${appId}/ota/channels/${encodeURIComponent(channel)}/active`, { releaseId });
+    }
+    rollbackOtaChannel(appId, channel) {
+        return this.request("POST", `/apps/${appId}/ota/channels/${encodeURIComponent(channel)}/rollback`);
+    }
+}
+//# sourceMappingURL=api-client.js.map

package/dist/api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../src/api-client.ts"],"names":[],"mappings":"AA2CA;;;;;;;;;;;;;;;iDAeiD;AACjD,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD,MAAM,OAAO,QAAS,SAAQ,KAAK;IAExB;IACA;IAFT,YACS,MAAc,EACd,IAAa;QAEpB,KAAK,CAAC,aAAa,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAH/C,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;IAGtB,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,QAAgB;IAC5D,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAkC,CAAC;QACpD,OAAO,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,SAAS;IACA;IAApB,YAAoB,IAAsB;QAAtB,SAAI,GAAJ,IAAI,CAAkB;IAAG,CAAC;IAEtC,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,IAAc,EACd,OAAe,IAAI,CAAC,IAAI,CAAC,OAAO;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;YAC5C,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E;YACD,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;SACtF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,8DAA8D;QAC9D,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,gEAAgE;QAChE,8DAA8D;QAC9D,mEAAmE;QACnE,+DAA+D;QAC/D,gEAAgE;QAChE,kBAAkB;QAClB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,IAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,kEAAkE;QAClE,qEAAqE;QACrE,wDAAwD;QACxD,8DAA8D;QAC9D,oEAAoE;QACpE,kEAAkE;QAClE,sEAAsE;QACtE,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,kEAAkE;QAClE,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,0CAA0C;QAC1C,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAM,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAEO,YAAY,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QAClE,OAAO,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAa,EAAE,QAAgB,EAAE,SAAwD;QAC7F,OAAO,IAAI,CAAC,OAAO,CAAgC,MAAM,EAAE,aAAa,EAAE;YACxE,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,SAAS,EAAE,QAAQ;YAC7B,YAAY,EAAE,SAAS,EAAE,YAAY;SACtC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,QAAgB,EAAE,IAAwB,EAAE,OAAe;QAC/E,OAAO,IAAI,CAAC,OAAO,CAA0C,MAAM,EAAE,cAAc,EAAE;YACnF,KAAK;YACL,QAAQ;YACR,IAAI;YACJ,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,EAAE;QACA,OAAO,IAAI,CAAC,OAAO,CAA8B,KAAK,EAAE,UAAU,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;OAOG;IACH,WAAW,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED;;0DAEsD;IACtD,kBAAkB;QAChB,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;;;kCAQ8B;IAC9B,cAAc,CAAC,eAAuB,EAAE,WAAmB;QACzD,OAAO,IAAI,CAAC,OAAO,CAA8B,MAAM,EAAE,uBAAuB,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC,CAAC;IACtH,CAAC;IAED;;;;+CAI2C;IAC3C,cAAc,CAAC,KAAa;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;IAED;;;;;yEAKqE;IACrE,aAAa,CAAC,KAAa,EAAE,WAAmB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAA8B,MAAM,EAAE,sBAAsB,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,uDAAuD;IAEvD;2EACuE;IACvE,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAAyC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;;8EAQ0E;IAC1E,gBAAgB,CAAC,IAAY,EAAE,QAAgB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAwC,MAAM,EAAE,mBAAmB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED;;;;;4CAKwC;IACxC,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAA8B,MAAM,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;;;gDAO4C;IAC5C,uBAAuB,CAAC,QAAgB;QACtC,OAAO,IAAI,CAAC,OAAO,CAAwC,MAAM,EAAE,qCAAqC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,wHAAwH;IACxH,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED,qHAAqH;IACrH,cAAc,CAAC,UAAkB;QAC/B,OAAO,IAAI,CAAC,OAAO,CAEjB,KAAK,EAAE,iCAAiC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,mGAAmG;IACnG,iBAAiB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,OAAO,CAAgC,MAAM,EAAE,sBAAsB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,wIAAwI;IACxI,sBAAsB,CAAC,KAAiH;QACtI,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,2BAA2B,EAAE,KAAK,CAAC,CAAC;IACpF,CAAC;IAED,8IAA8I;IAC9I,WAAW,CAAC,OAA0D;QACpE,OAAO,IAAI,CAAC,OAAO,CAAqB,MAAM,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,cAAc,CAAC,KAAa,EAAE,KAAa;QACzC,OAAO,IAAI,CAAC,OAAO,CAAoB,MAAM,EAAE,SAAS,KAAK,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;yCACqC;IACrC,aAAa,CAAC,KAAa,EAAE,UAAgD;QAC3E,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,IAAI,UAAU,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAA6B,KAAK,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvG,CAAC;IAED;2EACuE;IACvE,cAAc,CAAC,KAAa,EAAE,OAAe;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAqC,QAAQ,EAAE,SAAS,KAAK,WAAW,OAAO,EAAE,CAAC,CAAC;IACxG,CAAC;IAED;;;;;sDAKkD;IAClD,SAAS,CAAC,KAAa,EAAE,KAAyD;QAChF,OAAO,IAAI,CAAC,OAAO,CAAe,OAAO,EAAE,SAAS,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,QAAQ,CAAC,KAAa,EAAE,UAAgD;QACtE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,IAAI,UAAU,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAkB,KAAK,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,KAAiF;QACxG,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,SAAS,KAAK,OAAO,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IAED;;;qDAGiD;IACjD,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;0BAKsB;IACtB,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,OAAO,CAA4B,KAAK,EAAE,SAAS,KAAK,iBAAiB,CAAC,CAAC;IACzF,CAAC;IAED;6CACyC;IACzC,SAAS,CAAC,KAAa,EAAE,KAAkE;QACzF,OAAO,IAAI,CAAC,OAAO,CAAe,OAAO,EAAE,SAAS,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IACtE,CAAC;IAED;;;yBAGqB;IACrB,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,OAAO,CAAmC,QAAQ,EAAE,SAAS,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IAED;;;2CAGuC;IACvC,YAAY,CAAC,KAAa,EAAE,KAAsC;QAChE,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,SAAS,KAAK,UAAU,EAAE,KAAK,CAAC,CAAC;IACjF,CAAC;IAED;;iEAE6D;IAC7D,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAsB,KAAK,EAAE,SAAS,KAAK,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED,eAAe,CAAC,KAAa,EAAE,IAAY;QACzC,OAAO,IAAI,CAAC,OAAO,CAAkC,QAAQ,EAAE,SAAS,KAAK,YAAY,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IAED;;;;;;sEAMkE;IAClE,cAAc,CAAC,KAAa,EAAE,KAAsC;QAClE,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,SAAS,KAAK,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACvF,CAAC;IAED;;;6EAGyE;IACzE,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAsB,KAAK,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC;IAClF,CAAC;IAED,iBAAiB,CAAC,KAAa,EAAE,IAAY;QAC3C,OAAO,IAAI,CAAC,OAAO,CACjB,QAAQ,EACR,SAAS,KAAK,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,OAAO,CAAsB,KAAK,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED;;;wEAGoE;IACpE,gBAAgB,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,SAAS,KAAK,YAAY,CAAC,CAAC;IAClF,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,OAAO,CAAmB,KAAK,EAAE,WAAW,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,YAAY,CAAC,KAA2D;QACtE,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,OAAO,IAAI,CAAC,OAAO,CAAmB,MAAM,EAAE,WAAW,OAAO,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED,iEAAiE;IACjE,4DAA4D;IAC5D,oCAAoC;IAEpC,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,YAAY,CAA0B,KAAK,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC;IACpF,CAAC;IAED,qBAAqB,CAAC,KAAa;QACjC,OAAO,IAAI,CAAC,YAAY,CACtB,MAAM,EACN,SAAS,KAAK,0BAA0B,CACzC,CAAC;IACJ,CAAC;IAED;;mEAE+D;IAC/D,WAAW,CAAC,KAAa,EAAE,OAAe;QACxC,OAAO,IAAI,CAAC,YAAY,CACtB,QAAQ,EACR,SAAS,KAAK,WAAW,OAAO,EAAE,CACnC,CAAC;IACJ,CAAC;IAED;;;;;;;sEAOkE;IAClE,gBAAgB,CAAC,OAAe,EAAE,IAAY,EAAE,UAAmB,EAAE,aAAsB,EAAE,OAAgB;QAC3G,OAAO,IAAI,CAAC,YAAY,CAA8B,MAAM,EAAE,WAAW,OAAO,WAAW,EAAE;YAC3F,IAAI;YACJ,UAAU;YACV,aAAa;YACb,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED;;;+CAG2C;IAC3C,iBAAiB,CAAC,OAAe,EAAE,KAAc;QAC/C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,YAAY,CAA+B,KAAK,EAAE,WAAW,OAAO,YAAY,EAAE,EAAE,CAAC,CAAC;IACpG,CAAC;IAED;;;;;;;;;;;;;;iEAc6D;IAC7D,eAAe,CAAC,KAAa,EAAE,OAAe,EAAE,OAAsC;QACpF,OAAO,IAAI,CAAC,YAAY,CACtB,MAAM,EACN,SAAS,KAAK,WAAW,OAAO,cAAc,EAC9C,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAC1D,CAAC;IACJ,CAAC;IAED;;;;;;;iCAO6B;IAC7B,qBAAqB,CAAC,KAAa,EAAE,OAAe,EAAE,OAAgB;QACpE,OAAO,IAAI,CAAC,YAAY,CACtB,OAAO,EACP,SAAS,KAAK,WAAW,OAAO,iBAAiB,EACjD,EAAE,OAAO,EAAE,CACZ,CAAC;IACJ,CAAC;IAED;;;oEAGgE;IAChE,eAAe,CAAC,KAAa,EAAE,OAAe;QAC5C,OAAO,IAAI,CAAC,YAAY,CACtB,KAAK,EACL,SAAS,KAAK,WAAW,OAAO,eAAe,CAChD,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,SAAS,KAAK,kBAAkB,CACjC,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,OAAO,CAAyB,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAED,+HAA+H;IAC/H,wBAAwB,CAAC,KAAa,EAAE,MAAc;QACpD,OAAO,IAAI,CAAC,OAAO,CAAkB,MAAM,EAAE,SAAS,KAAK,uBAAuB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAChF,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,OAAO,CAA6B,KAAK,EAAE,SAAS,KAAK,iBAAiB,CAAC,CAAC;IAC1F,CAAC;IAED,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,SAAS,KAAK,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAED,cAAc,CAAC,KAAa,EAAE,IAAiB;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,SAAS,KAAK,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAiC,KAAK,EAAE,SAAS,KAAK,mBAAmB,CAAC,CAAC;IAChG,CAAC;IAED;;;8BAG0B;IAC1B,mBAAmB,CAAC,OAAe;QACjC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,WAAW,OAAO,kBAAkB,CACrC,CAAC;IACJ,CAAC;IAED;;qEAEiE;IACjE,gBAAgB,CAAC,OAAe;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAmC,MAAM,EAAE,WAAW,OAAO,qBAAqB,CAAC,CAAC;IACzG,CAAC;IAED,sBAAsB,CAAC,OAAe;QACpC,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,EACN,WAAW,OAAO,oBAAoB,CACvC,CAAC;IACJ,CAAC;IAED,qCAAqC;IAErC;;;;;;wCAMoC;IACpC,cAAc,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc,EAAE,WAAoB,EAAE,cAAuB;QAC1G,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,IAAI,WAAW;YAAE,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACxD,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,qBAAqB;QACrB,IAAI,cAAc;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,SAAS,KAAK,QAAQ,kBAAkB,CAAC,OAAO,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,EAAE,CAClF,CAAC;IACJ,CAAC;IAED;2EACuE;IACvE,iBAAiB,CAAC,KAAa;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAqB,MAAM,EAAE,SAAS,KAAK,cAAc,CAAC,CAAC;IAChF,CAAC;IAED,eAAe,CAAC,KAAa,EAAE,OAAgB,EAAE,UAAgD;QAC/F,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,IAAI,UAAU,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAA6B,KAAK,EAAE,SAAS,KAAK,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,eAAe,CAAC,KAAa,EAAE,UAAgD;QAC7E,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,IAAI,UAAU,EAAE,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACtF,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAA6B,KAAK,EAAE,SAAS,KAAK,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,iBAAiB,CAAC,KAAa,EAAE,KAAmF;QAClH,OAAO,IAAI,CAAC,OAAO,CAA0B,MAAM,EAAE,SAAS,KAAK,cAAc,EAAE,KAAK,CAAC,CAAC;IAC5F,CAAC;IAED;;;;0CAIsC;IACtC,uBAAuB,CAAC,KAAa,EAAE,SAAiB,EAAE,OAAe;QACvE,OAAO,IAAI,CAAC,OAAO,CAA0B,OAAO,EAAE,SAAS,KAAK,iBAAiB,SAAS,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACzH,CAAC;IAED,mBAAmB,CAAC,KAAa,EAAE,OAAe,EAAE,SAAwB;QAC1E,OAAO,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,SAAS,KAAK,iBAAiB,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IAChI,CAAC;IAED,kBAAkB,CAAC,KAAa,EAAE,OAAe;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAiC,MAAM,EAAE,SAAS,KAAK,iBAAiB,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrI,CAAC;CACF"}

package/dist/api-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=api-client.test.d.ts.map

package/dist/api-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-client.test.d.ts","sourceRoot":"","sources":["../src/api-client.test.ts"],"names":[],"mappings":""}