@hydradb/sdk 2.1.3 → 2.1.5

package/dist/api/resources/databases/client/requests/HandlerInstructionsUpdateReq.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/resources/databases/client/requests/TenantsTenantCreateRequest.d.ts

@@ -20,4 +20,5 @@ export interface TenantsTenantCreateRequest {
     tenantId?: string;
     /** deprecated: use database_metadata_schema */
     tenantMetadataSchema?: HydraDB.TenantsCustomPropertyDefinition[];
+    type?: HydraDB.GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout;
 }

package/dist/api/resources/databases/client/requests/TenantsTenantRenameRequest.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @example
+ *     {
+ *         database: "acme_corp",
+ *         newName: "new_name"
+ *     }
+ */
+export interface TenantsTenantRenameRequest {
+    /** Current database identifier */
+    database: string;
+    /**
+     * NewName is the database's new caller-facing name. Same rules as a
+     * create-time name (ValidateTenantName).
+     *
+     * binding:"required" is read by swag, so the published schema lists the
+     * field as required and generated SDKs make it a mandatory argument; it is
+     * inert at runtime, because the handler decodes through ParseRenameRequest,
+     * which rejects a missing or blank new_name itself.
+     */
+    newName: string;
+}

package/dist/api/resources/databases/client/requests/TenantsTenantRenameRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/resources/databases/client/requests/index.d.ts

@@ -1,7 +1,11 @@
 export type { CollectionsDatabasesRequest } from "./CollectionsDatabasesRequest.js";
+export type { DeleteCollectionDatabasesRequest } from "./DeleteCollectionDatabasesRequest.js";
 export type { DeleteDatabasesRequest } from "./DeleteDatabasesRequest.js";
+export type { GetInstructionsDatabasesRequest } from "./GetInstructionsDatabasesRequest.js";
 export type { GetMetadataSchemaDatabasesRequest } from "./GetMetadataSchemaDatabasesRequest.js";
+export type { HandlerInstructionsUpdateReq } from "./HandlerInstructionsUpdateReq.js";
 export type { StatsDatabasesRequest } from "./StatsDatabasesRequest.js";
 export type { StatusDatabasesRequest } from "./StatusDatabasesRequest.js";
 export type { TenantsTenantCreateRequest } from "./TenantsTenantCreateRequest.js";
 export type { TenantsTenantMetadataSchemaUpdateRequest } from "./TenantsTenantMetadataSchemaUpdateRequest.js";
+export type { TenantsTenantRenameRequest } from "./TenantsTenantRenameRequest.js";

package/dist/api/resources/feedback/client/Client.d.ts

@@ -22,9 +22,7 @@ export declare class FeedbackClient {
      *
      * @example
      *     await client.feedback.submit({
-     *         feedback: {
-     *             "key": "value"
-     *         }
+     *         requestId: "9d13aef4-02f4-4e73-8c62-4c2601d04f9d"
      *     })
      */
     submit(request: HydraDB.FeedbackSubmitRequest, requestOptions?: FeedbackClient.RequestOptions): core.HttpResponsePromise<HydraDB.HandlerEnvelopeFeedbackSubmitResponse>;

package/dist/api/resources/feedback/client/Client.js

@@ -59,9 +59,7 @@ class FeedbackClient {
      *
      * @example
      *     await client.feedback.submit({
-     *         feedback: {
-     *             "key": "value"
-     *         }
+     *         requestId: "9d13aef4-02f4-4e73-8c62-4c2601d04f9d"
      *     })
      */
     submit(request, requestOptions) {

package/dist/api/resources/feedback/client/index.d.ts

@@ -1 +1 @@
-export {};
+export * from "./requests/index.js";

package/dist/api/resources/feedback/client/index.js

@@ -1,2 +1,17 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./requests/index.js"), exports);

package/dist/api/resources/feedback/client/requests/FeedbackSubmitRequest.d.ts

@@ -0,0 +1,29 @@
+import type * as HydraDB from "../../../../index.js";
+/**
+ * @example
+ *     {
+ *         requestId: "9d13aef4-02f4-4e73-8c62-4c2601d04f9d"
+ *     }
+ */
+export interface FeedbackSubmitRequest {
+    /** Optional collection scope for this feedback. A collection is scoped to a database, so `database` must be sent alongside it; sending `collection` on its own is rejected. */
+    collection?: string;
+    /** Owning database. Formerly `tenant_id`; the `tenant_id` alias is still accepted (deprecated). */
+    database?: string;
+    /** Free-text comment describing what was right or wrong about the results. Required unless `ground_truth` is supplied. */
+    feedback?: string;
+    /** What you already know the right answer to be, when you know it. Supply an expected `answer`, the `source_ids` that contain it, or both — at least one is required if the field is present. Machine-checkable, so it is a stronger signal than a comment: submit it alone and `feedback` becomes optional. */
+    groundTruth?: HydraDB.FeedbackGroundTruth;
+    /** Free-form key-value context stored alongside the feedback (e.g. agent name, conversation or eval-run ID). */
+    metadata?: Record<string, string>;
+    /** Optional overall judgement: `positive`, `negative`, or `neutral`. Omit to send a comment with no rating. */
+    rating?: HydraDB.FeedbackRating;
+    /** The `request_id` from `response.meta` of the query this feedback is about. Required — it is what links the feedback to the query that ran. */
+    requestId: string;
+    /** Who is submitting: `user` (default) or `agent`. */
+    source?: HydraDB.FeedbackSource;
+    /** deprecated: use collection */
+    subTenantId?: string;
+    /** deprecated: use database */
+    tenantId?: string;
+}

package/dist/api/resources/feedback/client/requests/FeedbackSubmitRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/resources/feedback/client/requests/index.d.ts

@@ -0,0 +1 @@
+export type { FeedbackSubmitRequest } from "./FeedbackSubmitRequest.js";

package/dist/api/resources/feedback/client/requests/index.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/resources/index.d.ts

@@ -5,6 +5,7 @@ export * as context from "./context/index.js";
 export * from "./context/types/index.js";
 export * from "./databases/client/requests/index.js";
 export * as databases from "./databases/index.js";
+export * from "./feedback/client/requests/index.js";
 export * as feedback from "./feedback/index.js";
 export * from "./webhooks/client/requests/index.js";
 export * as webhooks from "./webhooks/index.js";

package/dist/api/resources/index.js

@@ -44,6 +44,7 @@ exports.context = __importStar(require("./context/index.js"));
 __exportStar(require("./context/types/index.js"), exports);
 __exportStar(require("./databases/client/requests/index.js"), exports);
 exports.databases = __importStar(require("./databases/index.js"));
+__exportStar(require("./feedback/client/requests/index.js"), exports);
 exports.feedback = __importStar(require("./feedback/index.js"));
 __exportStar(require("./webhooks/client/requests/index.js"), exports);
 exports.webhooks = __importStar(require("./webhooks/index.js"));

package/dist/api/resources/webhooks/client/Client.d.ts

@@ -124,4 +124,23 @@ export declare class WebhooksClient {
      */
     test(requestOptions?: WebhooksClient.RequestOptions): core.HttpResponsePromise<HydraDB.HandlerEnvelopeWebhooksWebhookTestResponse>;
     private __test;
+    /**
+     * Ingest a Supabase INSERT/UPDATE/DELETE row change into the graph.
+     *
+     * @param {HydraDB.PostWebhooksSupabaseRequest} request
+     * @param {WebhooksClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link HydraDB.BadRequestError}
+     * @throws {@link HydraDB.NotFoundError}
+     *
+     * @example
+     *     await client.webhooks.supabaseRowChangeWebhook({
+     *         hydraDbConnector: "X-HydraDB-Connector",
+     *         body: {
+     *             "key": "value"
+     *         }
+     *     })
+     */
+    supabaseRowChangeWebhook(request: HydraDB.PostWebhooksSupabaseRequest, requestOptions?: WebhooksClient.RequestOptions): core.HttpResponsePromise<HydraDB.HandlerEnvelopeHandlerSupabaseWebhookAck>;
+    private __supabaseRowChangeWebhook;
 }

package/dist/api/resources/webhooks/client/Client.js

@@ -576,5 +576,85 @@ class WebhooksClient {
         }
         return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/webhooks/indexing/test");
     }
+    /**
+     * Ingest a Supabase INSERT/UPDATE/DELETE row change into the graph.
+     *
+     * @param {HydraDB.PostWebhooksSupabaseRequest} request
+     * @param {WebhooksClient.RequestOptions} requestOptions - Request-specific configuration.
+     *
+     * @throws {@link HydraDB.BadRequestError}
+     * @throws {@link HydraDB.NotFoundError}
+     *
+     * @example
+     *     await client.webhooks.supabaseRowChangeWebhook({
+     *         hydraDbConnector: "X-HydraDB-Connector",
+     *         body: {
+     *             "key": "value"
+     *         }
+     *     })
+     */
+    supabaseRowChangeWebhook(request, requestOptions) {
+        return core.HttpResponsePromise.fromPromise(this.__supabaseRowChangeWebhook(request, requestOptions));
+    }
+    async __supabaseRowChangeWebhook(request, requestOptions) {
+        const { hydraDbConnector, body: _body } = request;
+        const _authRequest = await this._options.authProvider.getAuthRequest();
+        const _headers = (0, headers_js_1.mergeHeaders)(_authRequest.headers, this._options?.headers, (0, headers_js_1.mergeOnlyDefinedHeaders)({
+            "X-HydraDB-Connector": hydraDbConnector,
+            "API-Version": requestOptions?.apiVersion ?? this._options?.apiVersion ?? "2",
+        }), requestOptions?.headers);
+        const _response = await core.fetcher({
+            url: core.url.join((await core.Supplier.get(this._options.baseUrl)) ??
+                (await core.Supplier.get(this._options.environment)) ??
+                environments.HydraDBEnvironment.Default, "webhooks/supabase"),
+            method: "POST",
+            headers: _headers,
+            contentType: "application/json",
+            queryString: core.url.queryBuilder().mergeAdditional(requestOptions?.queryParams).build(),
+            requestType: "json",
+            body: serializers.webhooks.supabaseRowChangeWebhook.Request.jsonOrThrow(_body, {
+                unrecognizedObjectKeys: "strip",
+                omitUndefined: true,
+            }),
+            timeoutMs: (requestOptions?.timeoutInSeconds ?? this._options?.timeoutInSeconds ?? 60) * 1000,
+            maxRetries: requestOptions?.maxRetries ?? this._options?.maxRetries,
+            abortSignal: requestOptions?.abortSignal,
+            fetchFn: this._options?.fetch,
+            logging: this._options.logging,
+        });
+        if (_response.ok) {
+            return {
+                data: serializers.HandlerEnvelopeHandlerSupabaseWebhookAck.parseOrThrow(_response.body, {
+                    unrecognizedObjectKeys: "passthrough",
+                    allowUnrecognizedUnionMembers: true,
+                    allowUnrecognizedEnumValues: true,
+                    skipValidation: true,
+                    breadcrumbsPrefix: ["response"],
+                }),
+                rawResponse: _response.rawResponse,
+            };
+        }
+        if (_response.error.reason === "status-code") {
+            switch (_response.error.statusCode) {
+                case 400:
+                    throw new HydraDB.BadRequestError(serializers.HandlerErrorResponse.parseOrThrow(_response.error.body, {
+                        unrecognizedObjectKeys: "passthrough",
+                        allowUnrecognizedUnionMembers: true,
+                        allowUnrecognizedEnumValues: true,
+                        skipValidation: true,
+                        breadcrumbsPrefix: ["response"],
+                    }), _response.rawResponse);
+                case 404:
+                    throw new HydraDB.NotFoundError(_response.error.body, _response.rawResponse);
+                default:
+                    throw new errors.HydraDBError({
+                        statusCode: _response.error.statusCode,
+                        body: _response.error.body,
+                        rawResponse: _response.rawResponse,
+                    });
+            }
+        }
+        return (0, handleNonStatusCodeError_js_1.handleNonStatusCodeError)(_response.error, _response.rawResponse, "POST", "/webhooks/supabase");
+    }
 }
 exports.WebhooksClient = WebhooksClient;

package/dist/api/resources/webhooks/client/requests/PostWebhooksSupabaseRequest.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @example
+ *     {
+ *         hydraDbConnector: "X-HydraDB-Connector",
+ *         body: {
+ *             "key": "value"
+ *         }
+ *     }
+ */
+export interface PostWebhooksSupabaseRequest {
+    /** Connector id */
+    hydraDbConnector: string;
+    body: Record<string, unknown>;
+}

package/dist/api/resources/webhooks/client/requests/PostWebhooksSupabaseRequest.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/api/resources/webhooks/client/requests/index.d.ts

@@ -1,5 +1,6 @@
 export type { GetDeliveryWebhooksRequest } from "./GetDeliveryWebhooksRequest.js";
 export type { ListDeliveriesWebhooksRequest } from "./ListDeliveriesWebhooksRequest.js";
+export type { PostWebhooksSupabaseRequest } from "./PostWebhooksSupabaseRequest.js";
 export type { RetryDeliveryWebhooksRequest } from "./RetryDeliveryWebhooksRequest.js";
 export type { WebhooksSigningSecretRequest } from "./WebhooksSigningSecretRequest.js";
 export type { WebhooksWebhookRegisterRequest } from "./WebhooksWebhookRegisterRequest.js";

package/dist/api/types/ConnectorsResource.d.ts

@@ -1,4 +1,33 @@
 export interface ConnectorsResource {
+    /**
+     * ACL is the customer-declared access-control list stamped onto every
+     * object synced from this resource (PRO-1684; see internal/domain/acl).
+     * Stored in caller-supplied form and normalized at transform time. nil
+     * means no ACL, documents stay unrestricted. Provider-derived ACLs
+     * (Phase 2) take precedence over this when the provider supports them.
+     */
+    acl?: string[];
+    /**
+     * ACLFingerprint is the stable identity of the ACL last APPLIED to this
+     * resource's already-indexed documents (PRO-1684). The sync compares the
+     * freshly-resolved provider ACL against it: equal means nothing to do,
+     * different means fan the new ACL out to existing documents. Empty means
+     * nothing has been applied yet (first capture-enabled sync).
+     */
+    aclFingerprint?: string;
+    /**
+     * ACLWarning explains, in the provider's own words, why this resource's
+     * permissions could not be captured. Capture fails OPEN, so the resource
+     * is readable by everyone while this is set; without surfacing it, that
+     * widening would be invisible to the person who turned RBAC on. Cleared
+     * automatically by the next successful capture.
+     */
+    aclWarning?: string;
+    /**
+     * ACLWarningAt is when this warning last CHANGED (RFC3339). An unchanged
+     * warning is not rewritten each cycle, so it reads as "open since".
+     */
+    aclWarningAt?: string;
     /**
      * AdditionalMetadata is merged into the additional_metadata (document
      * metadata) layer of every object synced from this resource. User-supplied
@@ -11,6 +40,26 @@ export interface ConnectorsResource {
      * time so the scheduler can thread it into each chunk's workflow input.
      */
     backfillChunkIntervalSeconds?: number;
+    /**
+     * BackfillFloor is the fixed oldest boundary the historical crawl is working
+     * towards, stamped once at configure time as now-lookback_days.
+     *
+     * It exists because the floor used to be recomputed per chunk from the
+     * workflow's own clock, which made it a *moving* target: every hour the
+     * crawl was delayed, the boundary advanced an hour with it. A connector
+     * paused mid-backfill (PRO-1762) makes that trivially reachable — pause for
+     * longer than the crawl has left and it resumes, finds backfill_oldest
+     * already at or past the recomputed floor, declares itself complete and
+     * clears the marker. The remaining history is never fetched and nothing
+     * reports it missing. Anchoring the boundary is what makes "backfill 30
+     * days" mean 30 days from when it was asked for, however long the crawl
+     * takes.
+     *
+     * Empty on rows configured before this field existed; the workflow falls
+     * back to the old now-relative computation for those, so their behaviour is
+     * unchanged rather than silently altered by a deploy.
+     */
+    backfillFloor?: string;
     /**
      * BackfillNextChunkAt is the RFC3339 time the next chunk becomes due. The
      * backfill workflow processes one chunk then sets this to now+interval and
@@ -34,6 +83,14 @@ export interface ConnectorsResource {
     collectionOverride?: string;
     /** Connector this resource belongs to. */
     connectorId?: string;
+    /**
+     * CustomInstructions is optional free-text ingestion guidance scoped to
+     * this resource. When set it replaces the connector-level
+     * custom_instructions for documents synced from this resource; empty means
+     * the resource inherits the connector's value. Max 4000 characters;
+     * changes apply from the next sync cycle.
+     */
+    customInstructions?: string;
     /**
      * DatabaseOverride/CollectionOverride are the canonical v2 names for the
      * deprecated tenant_id_override/sub_tenant_id_override wire fields. Empty
@@ -54,6 +111,31 @@ export interface ConnectorsResource {
      * system-set fields.
      */
     metadata?: Record<string, unknown>;
+    /**
+     * PageACLWarning is the same signal for SOURCE-level failures inside this
+     * resource: individual pages whose own restrictions could not be resolved
+     * and were therefore opened (Confluence, PRO-1684).
+     *
+     * A SEPARATE field from ACLWarning on purpose. The two are written by
+     * different steps at different points in a sync, and ACLWarning is CLEARED
+     * whenever resource capture succeeds. Sharing one field would let a healthy
+     * space wipe a live page warning every cycle, leaving a window in which the
+     * dashboard reports no problems while pages are still open — a false
+     * all-clear on an access-control surface, which is worse than no surface.
+     */
+    pageAclWarning?: string;
+    /** PageACLWarningAt is when PageACLWarning last CHANGED (RFC3339). */
+    pageAclWarningAt?: string;
+    /**
+     * PageACLWarningRun is the drain run that last observed a page failing open
+     * here. It is what makes the warning self-clearing: the drain settles each
+     * resource at the END of a cycle, and a stored run that is not the current
+     * one means that whole cycle passed with nothing failing, so the warning is
+     * withdrawn. Durable on purpose — the alternative was remembering it in the
+     * worker, which a restart loses and which has no moment that means "all
+     * pages have now been judged".
+     */
+    pageAclWarningRun?: string;
     /** Bookmark of the last synced position. Non-empty value confirms the first sync has run. */
     providerCursor?: string;
     /** Additional provider-supplied metadata for this resource. */
@@ -66,6 +148,25 @@ export interface ConnectorsResource {
     status?: string;
     /** Overrides the connector-level collection for objects synced from this resource. */
     subTenantIdOverride?: string;
+    /**
+     * SyncBlocked marks a resource the provider will go on refusing — a table
+     * that was dropped, a channel this credential was never invited to.
+     *
+     * Deliberately not a Status value. Status gates ListConnectorResources,
+     * which is what GET /connectors/{id}/status reads, so expressing this as a
+     * status would hide the resource from the one endpoint that explains why it
+     * stopped. The resource stays active and visible; this only takes it out of
+     * what gets synced.
+     */
+    syncBlocked?: boolean;
+    /** SyncBlockedAt is when the resource was stopped (RFC3339). */
+    syncBlockedAt?: string;
+    /**
+     * SyncBlockedReason is the provider's own explanation, carried forward from
+     * the health that triggered the block so it survives the next sync
+     * overwriting that health.
+     */
+    syncBlockedReason?: string;
     /** Overrides the connector-level database for objects synced from this resource. Deprecated. */
     tenantIdOverride?: string;
 }

package/dist/api/types/GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout.d.ts

@@ -0,0 +1,13 @@
+/**
+ * StorageLayout is the physical storage layout the database is created with
+ * (PRO-1618), from the request's `type` field. Absent or "split" keeps the
+ * two-collection layout every existing database uses; "unified" is the
+ * single-collection layout. Fixed at creation and IMMUTABLE thereafter: the
+ * layout decides how every entity id is hashed, so a database that changed
+ * its mind would orphan everything already stored.
+ */
+export declare const GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout: {
+    readonly Split: "split";
+    readonly Unified: "unified";
+};
+export type GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout = (typeof GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout)[keyof typeof GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout];

package/dist/api/types/GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout.js

@@ -0,0 +1,16 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout = void 0;
+/**
+ * StorageLayout is the physical storage layout the database is created with
+ * (PRO-1618), from the request's `type` field. Absent or "split" keeps the
+ * two-collection layout every existing database uses; "unified" is the
+ * single-collection layout. Fixed at creation and IMMUTABLE thereafter: the
+ * layout decides how every entity id is hashed, so a database that changed
+ * its mind would orphan everything already stored.
+ */
+exports.GithubComHydradbHydradbApplicationInternalPlatformStoragelayoutLayout = {
+    Split: "split",
+    Unified: "unified",
+};

package/dist/api/types/GithubComHydradbHydradbApplicationInternalServiceMetadataEditResult.d.ts

@@ -1,4 +1,13 @@
 export interface GithubComHydradbHydradbApplicationInternalServiceMetadataEditResult {
+    /**
+     * ACLDriftRecorded reports that a failed ACL mirror was durably recorded
+     * for reconciliation. Always true when vector_acl_synced is true. False
+     * beside acl_updated=true and vector_acl_synced=false is the one state
+     * the operator must act on (the error log names the document).
+     */
+    aclDriftRecorded?: boolean;
+    /** ACLUpdated reports that this edit replaced the source's ACL (PRO-1684). */
+    aclUpdated?: boolean;
     /** Additional metadata keys included in the update request. */
     additionalMetadataKeys?: string[];
     /** Number of MongoDB chunk rows matched by the source update. */
@@ -22,6 +31,12 @@ export interface GithubComHydradbHydradbApplicationInternalServiceMetadataEditRe
     milvusSyncRequired?: boolean;
     /** deprecated: use vector_synced */
     milvusSynced?: boolean;
+    /**
+     * PartialCommit reports that the edit committed in at least one database
+     * of a shared deployment but a later write in another failed; the
+     * idempotent retry converges the database that fell behind.
+     */
+    partialCommit?: string;
     /** deprecated: use collection */
     subTenantId?: string;
     /** deprecated: use database */
@@ -30,8 +45,23 @@ export interface GithubComHydradbHydradbApplicationInternalServiceMetadataEditRe
     tenantMetadataKeys?: string[];
     /** Whether the source metadata was updated. */
     updated?: boolean;
+    /**
+     * VectorACLSynced reports that the ACL edit also reached the vector rows'
+     * pushdown columns (PRO-1740). False with ACLUpdated true means the
+     * document's own-ACL projection is stale until its next re-index: still
+     * enforced correctly from Mongo, but invisible to the pushdown lane for
+     * any principal the edit ADDED. Always false for collections created
+     * before PRO-1740, which carry no pushdown columns.
+     */
+    vectorAclSynced?: boolean;
     /** Number of chunk rows synced to the vector store when sync was required. */
     vectorRowsSynced?: number;
+    /**
+     * VectorSyncError explains a vector_synced=false when a sync was
+     * required: the authority (Mongo) committed, the vector metadata did
+     * not follow; the idempotent retry converges it.
+     */
+    vectorSyncError?: string;
     /**
      * Vendor-neutral vector-sync signal (PRO-1185): the canonical field must not
      * name the vector store. The milvus_* fields below are deprecated aliases kept

package/dist/api/types/GraphEntity.d.ts

@@ -1,6 +1,18 @@
 export interface GraphEntity {
     /** Unique identifier for this entity in the graph. */
     entityId?: string;
+    /**
+     * Hydration is set on Source nodes in AuxiliaryRelations only, and omitted
+     * everywhere else. RELATES_TO MERGEs its target by source_id, so a target
+     * that has not been ingested yet still exists as a node — callers must be
+     * able to tell a real document from a forward reference to one.
+     *
+     * 	resolved    — ingested; source_id and app_provider both present
+     * 	stub        — MERGE-created target; source_id present, no app_provider
+     * 	placeholder — source_id IS NULL, keyed by app_external_id, awaiting
+     * 	              builder.py's reconciliation pass
+     */
+    hydration?: string;
     /** NO omitempty — serialize as null */
     identifier?: string;
     /** Human-readable label for this resource. */

package/dist/api/types/GraphGraphRelationsResponse.d.ts

@@ -1,5 +1,28 @@
 import type * as HydraDB from "../index.js";
 export interface GraphGraphRelationsResponse {
+    /**
+     * AuxiliaryRelations carries the structural graph around the entity
+     * relations: Entity->Source presence, Source->Comment/Attachment,
+     * Actor->Source/Comment, and Source->Source links. Same item shape as
+     * Relations, so a caller wanting one graph concatenates the two.
+     *
+     * Deliberately a SEPARATE array rather than merged into Relations:
+     * capPreservingTies counts triplets against the caller's limit, and
+     * computeNextCursor keys on relation timestamps. Auxiliary edges carry
+     * created_at — a different clock — so merging them would both shrink the
+     * entity relations returned for a given limit and corrupt the cursor.
+     */
+    auxiliaryRelations?: HydraDB.GraphTripletWithEvidence[];
+    /**
+     * AuxiliaryTruncated reports that an aggregate row ceiling clipped the
+     * auxiliary graph. Distinct from the per-triplet Truncated flag, which only
+     * covers a single node exceeding its fan-out cap: a wide page can blow the
+     * aggregate ceiling with every individual node still under its own cap, and
+     * without this the caller would receive a subset presented as complete.
+     *
+     * Independent of IsTruncated, which describes Relations pagination only.
+     */
+    auxiliaryTruncated?: boolean;
     /** Whether the response was truncated due to the result limit. */
     isTruncated?: boolean;
     /** Human-readable result message. */

package/dist/api/types/GraphRelationEvidence.d.ts

@@ -13,6 +13,14 @@ export interface GraphRelationEvidence {
     relationshipId?: string;
     /** NO omitempty */
     sourceEntityId?: string;
+    /**
+     * Synthesized marks a triplet with no stored edge behind it. Only
+     * `present_in` sets it: that edge is derived by collapsing
+     * Entity-PRESENT_IN->Chunk-HAS_CHUNK->Source, so its RelationshipID is a
+     * deterministic synthetic id rather than a graph relationship id. Omitted
+     * (false) on every stored edge.
+     */
+    synthesized?: boolean;
     /** NO omitempty */
     targetEntityId?: string;
     /** NO omitempty */

package/dist/api/types/GraphSourceSubgraphResponse.d.ts

@@ -0,0 +1,40 @@
+import type * as HydraDB from "../index.js";
+export interface GraphSourceSubgraphResponse {
+    /**
+     * AuxiliaryRelations carries the structural graph around the member
+     * sources: Entity->Source presence, Source->Comment/Attachment and
+     * Actor->Source/Comment links. Same item shape as Relations, matching
+     * GraphRelationsResponse so the dashboard renderer works unchanged.
+     */
+    auxiliaryRelations?: HydraDB.GraphTripletWithEvidence[];
+    /**
+     * AuxiliaryTruncated reports that a fetch ceiling clipped the auxiliary
+     * graph, same contract as GraphRelationsResponse.AuxiliaryTruncated.
+     */
+    auxiliaryTruncated?: boolean;
+    /**
+     * IsTruncated reports that the traversal stopped before exhausting the
+     * connected component: the source budget or an edge/expansion fetch cap
+     * was hit, or the depth limit left an unexpanded frontier.
+     */
+    isTruncated?: boolean;
+    /** MaxDepthReached is the deepest BFS level that admitted a member. */
+    maxDepthReached?: number;
+    /** Human-readable result message. */
+    message?: string;
+    /**
+     * Relations holds the Source->Source triplets: every RELATES_TO edge whose
+     * endpoints are both members, plus synthesized same_thread / child_of
+     * provenance edges for members reached through a node property rather than
+     * a stored edge (those carry Synthesized on their evidence).
+     */
+    relations?: HydraDB.GraphTripletWithEvidence[];
+    seedSourceId?: string;
+    /**
+     * Sources is every member of the subgraph in BFS discovery order, seed
+     * first.
+     */
+    sources?: HydraDB.GraphSubgraphSource[];
+    /** Whether the request succeeded. */
+    success?: boolean;
+}

package/dist/api/types/GraphSourceSubgraphResponse.js

@@ -0,0 +1,3 @@
+"use strict";
+// This file was auto-generated by Fern from our API Definition.
+Object.defineProperty(exports, "__esModule", { value: true });