@keboola/api-client 20.0.0 → 21.0.0

package/API-SURFACE.md

@@ -2,9 +2,9 @@
 
 <!-- GENERATED FILE — do not edit by hand. Run `pnpm --filter @keboola/api-client surface` to regenerate. -->
 
-Every namespace and method reachable from an initialized `ApiClient` (`createApiClient()` after `init()`, or `useApiClient()`). Generated from the TypeScript type checker — see `scripts/gen-surface.mjs`.
+Every namespace and method reachable from a ready `KeboolaApi` — the `api` half of a keboola client (`createKeboola(...).api` / `createLegacyKeboola(...).api`, or `useApiClient()`). Generated from the TypeScript type checker — see `scripts/gen-surface.mjs`.
 
-22 top-level namespaces, 449 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
+22 top-level namespaces, 472 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
 
 ## [`api.ai`](./surface/ai.md)
 
@@ -172,6 +172,9 @@ Every namespace and method reachable from an initialized `ApiClient` (`createApi
 - `features.getFeature`
 - `features.getFeatureAdmins`
 - `features.getFeatureProjects`
+- `fileStorage.getFileStoragesAbs`
+- `fileStorage.getFileStoragesGcs`
+- `fileStorage.getFileStoragesS3`
 - `maintainers.addMaintainerUser`
 - `maintainers.createMaintainer`
 - `maintainers.createMaintainerInvitation`
@@ -217,15 +220,20 @@ Every namespace and method reachable from an initialized `ApiClient` (`createApi
 - `projects.getProjectInvitations`
 - `projects.getProjectMetadata`
 - `projects.getProjectReviewers`
+- `projects.getProjectTemplates`
 - `projects.getProjectUsers`
 - `projects.moveProject`
 - `projects.removeProjectFeature`
 - `projects.removeProjectUser`
 - `projects.setProjectDisabled`
+- `projects.setProjectLimits`
 - `projects.setProjectMetadata`
 - `projects.setProjectReviewers`
 - `projects.updateProject`
 - `storageBackends.getStorageBackend`
+- `storageBackends.getStorageBackendMaintainers`
+- `storageBackends.getStorageBackendProjects`
+- `storageBackends.getStorageBackends`
 - `users.addUserAdminFeature`
 - `users.removeUserAdminFeature`
 - `verifyToken`
@@ -287,6 +295,16 @@ Every namespace and method reachable from an initialized `ApiClient` (`createApi
 - `configuration.createConfiguration`
 - `configuration.getConfiguration`
 - `configuration.updateConfiguration`
+- `semanticLayer.createModel`
+- `semanticLayer.createModelTree`
+- `semanticLayer.createObject`
+- `semanticLayer.createObjects`
+- `semanticLayer.deleteModel`
+- `semanticLayer.deleteObject`
+- `semanticLayer.listModels`
+- `semanticLayer.listObjects`
+- `semanticLayer.updateModel`
+- `semanticLayer.updateObject`
 - `storage.addTableColumn`
 - `storage.createBucketListing`
 - `storage.createSnapshot`
@@ -385,10 +403,15 @@ Every namespace and method reachable from an initialized `ApiClient` (`createApi
 - `componentsAndConfigurations.getConfigurationWorkspaces`
 - `componentsAndConfigurations.getConfigurations`
 - `componentsAndConfigurations.rebaseConfiguration`
+- `componentsAndConfigurations.resetConfigurationToDefault`
+- `componentsAndConfigurations.restoreConfiguration`
 - `componentsAndConfigurations.searchComponentConfigurations`
 - `componentsAndConfigurations.updateConfiguration`
+- `configurationMetadata.saveConfigurationMetadata`
+- `configurationVersions.copyConfigurationFromVersion`
 - `configurationVersions.getConfigurationVersion`
-- `configurationVersions.listConfigurationVersions`
+- `configurationVersions.getConfigurationVersions`
+- `configurationVersions.rollbackConfigurationToVersion`
 - `events.createEvent`
 - `events.getEvent`
 - `events.getEvents`

package/README.md

@@ -14,46 +14,136 @@ npm install @keboola/api-client
 
 ## Quick Start
 
-### Full client initialization (browser)
+The SDK exposes two flow-specific factories — pick the one that matches how you authenticate.
+**Both return `{ api, session }`** and work the same in browser and Node:
+
+- `createLegacyKeboola()` — legacy **Storage API token** (SAPI) flow.
+- `createKeboola()` — **bearer / OAuth** flow.
+
+`session` is the lifecycle — you drive it to _ready_. `api` is the product surface, gated by state:
+
+| Tier                                            | Live once…                              | Example                            |
+| ----------------------------------------------- | --------------------------------------- | ---------------------------------- |
+| `api.auth.*`                                    | a `baseUrl` is configured               | `api.auth.login.withPassword(...)` |
+| `api.management.*`                              | the management realm authenticates      | `api.management.projects.*`        |
+| `api.storage` / `api.queue` / `api.context` / … | the async storage build reaches `ready` | `api.storage.getStackInfo()`       |
+
+Touching a product namespace before _ready_ throws a `KeboolaError`. `session.isStorageReady()` and
+`session.subscribe(cb)` observe the transition; the `…Async` verbs below await it for you.
+
+> Options are identical for both factories: `{ baseUrl?, middlewares?, clientServiceUrls? }`. There is
+> **no built-in token persistence** — a browser app that must survive a reload re-authenticates on boot;
+> a Node process keeps the credential wherever it already stores secrets.
+
+### Legacy (SAPI token) — Node
+
+You already hold a Storage API token (env var, secret store). One step to _ready_:
 
 ```typescript
-import { createApiClient } from '@keboola/api-client';
+import { createLegacyKeboola } from '@keboola/api-client';
 
-const api = createApiClient();
+const { api, session } = createLegacyKeboola({ baseUrl: process.env.KEBOOLA_STACK_URL! });
+await session.authenticateStorageAsync(process.env.KEBOOLA_STORAGE_TOKEN!);
 
-await api.init({
-  baseUrl: 'https://connection.keboola.com',
-  token: {
-    storageApi: 'your-storage-token',
-    managementApi: 'your-management-token', // optional
-  },
-  metastoreBaseUrl: 'https://metastore.keboola.com',
+const stackInfo = await api.storage.getStackInfo();
+const project = api.context.project; // synchronous once ready
+```
+
+Optionally add the management realm with `session.authenticateManagement(manageToken)` → `api.management.*`.
+
+### Legacy (SAPI token) — Browser
+
+Identical calls; the token is whatever the host hands the app (e.g. kbc-ui's boot payload). Use the
+fire-and-forget `authenticateStorage` and observe readiness instead of awaiting:
+
+```typescript
+import { createLegacyKeboola } from '@keboola/api-client';
+
+const { api, session } = createLegacyKeboola({ baseUrl });
+session.authenticateStorage(sapiToken);
+session.subscribe((snapshot) => {
+  if (snapshot.storage === 'ready') {
+    /* render the app — api.storage.* is now live */
+  }
+});
+```
+
+> **React:** don't wire this by hand — `LegacyAuthProvider` + `useApiClient()` from
+> [`@keboola/api-client-react`](../api-client-react) drive the singleton session to ready and hand you `api`.
+
+### Bearer (OAuth) — Browser
+
+Interactive login, then scope to a project:
+
+```typescript
+import { createKeboola } from '@keboola/api-client';
+
+const { api, session } = createKeboola({ baseUrl });
+
+// api.auth is live as soon as baseUrl is configured
+const result = await api.auth.login.withPassword({ email, password });
+if (result.mfaRequired) {
+  // result is an MFA challenge — verify via api.auth.mfa.* to obtain the LoginSuccess
+}
+
+session.authenticate(result); // pass the LoginSuccess → api.management is now live
+await session.setProjectAsync(projectId); // projectId from your project picker → storage ready
+
+const stackInfo = await api.storage.getStackInfo();
+session.setProject(otherProjectId); // runtime re-scope — rebuilds against the new project
+```
+
+> **React:** `AuthProvider` + `useApiClient()` own the login → authenticate → setProject sequence.
+
+### Bearer (OAuth) — Node
+
+Same shape. Either run `api.auth.login.withPassword(...)` headlessly, or, if you already hold a
+credential, hand a `LoginSuccess`-shaped object straight to `session.authenticate`:
+
+```typescript
+import { createKeboola } from '@keboola/api-client';
+
+const { api, session } = createKeboola({ baseUrl: process.env.KEBOOLA_STACK_URL! });
+
+session.authenticate({
+  mfaRequired: false,
+  accessToken: process.env.KBC_ACCESS_TOKEN!,
+  refreshToken: process.env.KBC_REFRESH_TOKEN!,
+  tokenType: 'Bearer',
+  expiresIn: 3600,
+  sessionId: '',
+  user: { id: 0, email: '', name: '' },
 });
+await session.setProjectAsync(Number(process.env.KBC_PROJECT_ID));
 
-const tables = await api.storage.tables.list();
-const jobs = await api.queue.searchJobs();
+const stackInfo = await api.storage.getStackInfo();
 ```
 
-### Single-service client (recommended when you only need one service)
+> The SDK refreshes the access token in-band; persisting the rotated refresh token across process
+> restarts is the caller's responsibility (there is no storage adapter).
 
-For a single service — including in a **browser SPA** that only talks to Storage — use the per-service factory. It needs only `baseUrl` + `token`, so you avoid the full client's required `metastoreBaseUrl`. Reach for the full client (below) only when you need multiple stack services.
+### Single-service client (when you only need one service)
+
+For a single service — including a **browser SPA that only talks to Storage** — use the per-service
+factory. It needs only `baseUrl` + `auth` and skips the stack-info round-trip. Reach for a full client
+above only when you need multiple stack services.
 
 ```typescript
 import { createStorageClient } from '@keboola/api-client/storage';
 
 const storage = createStorageClient({
   baseUrl: 'https://connection.keboola.com',
-  token: 'your-storage-token',
+  auth: { type: 'sapi-token', token: 'your-storage-token' },
 });
 
 const stackInfo = await storage.getStackInfo();
-const files = await storage.files.list();
+const token = await storage.tokens.verify();
 ```
 
 ### Type imports
 
 ```typescript
-import type { ApiClientOptions, ApiClient } from '@keboola/api-client';
+import type { KeboolaOptions, AuthStrategy } from '@keboola/api-client';
 import type { StackInfo, ServiceId } from '@keboola/api-client/storage/types';
 import type { GetQueueJobPath } from '@keboola/api-client/queue/types';
 import type { VariableWithHash } from '@keboola/api-client/vault/types';
@@ -63,9 +153,13 @@ import type { VariableWithHash } from '@keboola/api-client/vault/types';
 
 ```
 src/
-  client.ts                     # createApiClient() factory — top-level entry
-  devClient.ts                  # Lightweight dev/verify client
-  constants.ts                  # HTTP headers, prefixes
+  index.ts                      # package entry — re-exports keboola/ factories, errors, utils
+  keboola/
+    bearer/keboola.ts           # createKeboola() — bearer/OAuth flow → { api, session }
+    legacy/keboola.ts           # createLegacyKeboola() — SAPI-token flow → { api, session }
+    createApi.ts                # flow-agnostic, state-gating `api` proxy
+    createResource.ts           # async storage-build resource (unresolved→pending→ready|errored)
+  internal.ts                   # HTTP headers, prefixes
   fetchClient/
     createFetchClient/          # Core fetch wrapper, middleware composition
     createGenericFetchClient.ts # Untyped HTTP client (manual generics)
@@ -113,7 +207,7 @@ src/
 
 ## Service Clients
 
-After calling `api.init(...)`, the following clients are available on the `api` object.
+On the `api` object returned by `createKeboola()` / `createLegacyKeboola()` — once the session reaches `ready` — the following clients are available.
 Clients backed by OpenAPI specs are marked with (OpenAPI); the rest use the generic fetch client.
 
 | Accessor           | Service                 | Key methods                                                                                                                                                                     |
@@ -134,7 +228,7 @@ Clients backed by OpenAPI specs are marked with (OpenAPI); the rest use the gene
 | `api.telemetry`    | Telemetry               | `provisioning.*`                                                                                                                                                                |
 | `api.import`       | Import                  | `uploadFile()`                                                                                                                                                                  |
 
-Additional accessors on the initialized client:
+Additional accessors on the ready client:
 
 | Accessor                    | Purpose                                                                                                                                            |
 | --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -148,8 +242,14 @@ Additional accessors on the initialized client:
 ## Entry Points
 
 ```typescript
-// Main entry — full ApiClient + all exports
-import { createApiClient, isApiError, concurrent, poll } from '@keboola/api-client';
+// Main entry — SDK factories + all exports
+import {
+  createKeboola,
+  createLegacyKeboola,
+  isApiError,
+  concurrent,
+  poll,
+} from '@keboola/api-client';
 
 // Per-client imports — individual client factories
 import { createStorageClient } from '@keboola/api-client/storage';

package/dist/{ManagementClientAuthError-BMOhz4mx.d.ts → ManagementClientAuthError-B3PZRWBU.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApiError, A as ApiResponse } from './types-0yn6OefX.js';
+import { a as ApiError, A as ApiResponse } from './types-DqxZDbM1.js';
 
 declare class ManagementClientAuthError extends ApiError {
     title: string;

package/dist/{ManagementClientAuthError-B7mGrnGn.d.cts → ManagementClientAuthError-CJu_hpGi.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApiError, A as ApiResponse } from './types-0yn6OefX.cjs';
+import { a as ApiError, A as ApiResponse } from './types-DqxZDbM1.cjs';
 
 declare class ManagementClientAuthError extends ApiError {
     title: string;

package/dist/ai/index.cjs

@@ -1,14 +1,14 @@
 'use strict';
 
-var chunkJJXTE2SL_cjs = require('../chunk-JJXTE2SL.cjs');
-require('../chunk-HNP33VR5.cjs');
+var chunkSB7AVZQU_cjs = require('../chunk-SB7AVZQU.cjs');
+require('../chunk-UQWVZTEA.cjs');
 require('../chunk-IUN2ZSU3.cjs');
 
 
 
 Object.defineProperty(exports, "createAiClient", {
   enumerable: true,
-  get: function () { return chunkJJXTE2SL_cjs.createAiClient; }
+  get: function () { return chunkSB7AVZQU_cjs.createAiClient; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/ai/index.d.cts

@@ -1,5 +1,5 @@
 import { D as DescribeConfigurationVersionBody, a as DescribeConfigurationMergeBody, E as ExplainErrorBody, b as DescribeConfigurationBody, S as SuggestComponentBody, c as components, F as FeedbackBody, d as DocsQuestionBody } from '../types-CvHPHNH0.cjs';
-import { C as ClientInitOptions } from '../types-0yn6OefX.cjs';
+import { C as ClientInitOptions } from '../types-DqxZDbM1.cjs';
 import '../types-jKnx7Tm_.cjs';
 import 'qs';
 

package/dist/ai/index.d.ts

@@ -1,5 +1,5 @@
 import { D as DescribeConfigurationVersionBody, a as DescribeConfigurationMergeBody, E as ExplainErrorBody, b as DescribeConfigurationBody, S as SuggestComponentBody, c as components, F as FeedbackBody, d as DocsQuestionBody } from '../types-D3Kkh6yW.js';
-import { C as ClientInitOptions } from '../types-0yn6OefX.js';
+import { C as ClientInitOptions } from '../types-DqxZDbM1.js';
 import '../types-jKnx7Tm_.js';
 import 'qs';
 

package/dist/ai/index.js

@@ -1,5 +1,5 @@
-export { createAiClient } from '../chunk-UREIP7XG.js';
-import '../chunk-WJRHT346.js';
+export { createAiClient } from '../chunk-YVC4NGW2.js';
+import '../chunk-6JXSO3AR.js';
 import '../chunk-RK2VGHJE.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/assets/index.d.cts

@@ -1,4 +1,4 @@
-import { C as ClientInitOptions } from '../types-0yn6OefX.cjs';
+import { C as ClientInitOptions } from '../types-DqxZDbM1.cjs';
 import { Post } from './types.cjs';
 import 'qs';
 

package/dist/assets/index.d.ts

@@ -1,4 +1,4 @@
-import { C as ClientInitOptions } from '../types-0yn6OefX.js';
+import { C as ClientInitOptions } from '../types-DqxZDbM1.js';
 import { Post } from './types.js';
 import 'qs';
 

package/dist/auth/index.cjs

@@ -1,41 +1,41 @@
 'use strict';
 
-var chunkN3GNUFMA_cjs = require('../chunk-N3GNUFMA.cjs');
+var chunkXPQBE77T_cjs = require('../chunk-XPQBE77T.cjs');
 require('../chunk-IUN2ZSU3.cjs');
 
 
 
 Object.defineProperty(exports, "createAuthClient", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.createAuthClient; }
+  get: function () { return chunkXPQBE77T_cjs.createAuthClient; }
 });
 Object.defineProperty(exports, "loginInputSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.loginInputSchema; }
+  get: function () { return chunkXPQBE77T_cjs.loginInputSchema; }
 });
 Object.defineProperty(exports, "loginResultSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.loginResultSchema; }
+  get: function () { return chunkXPQBE77T_cjs.loginResultSchema; }
 });
 Object.defineProperty(exports, "loginSuccessSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.loginSuccessSchema; }
+  get: function () { return chunkXPQBE77T_cjs.loginSuccessSchema; }
 });
 Object.defineProperty(exports, "mfaChallengeSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.mfaChallengeSchema; }
+  get: function () { return chunkXPQBE77T_cjs.mfaChallengeSchema; }
 });
 Object.defineProperty(exports, "mfaCodeInputSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.mfaCodeInputSchema; }
+  get: function () { return chunkXPQBE77T_cjs.mfaCodeInputSchema; }
 });
 Object.defineProperty(exports, "mfaWebauthnInputSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.mfaWebauthnInputSchema; }
+  get: function () { return chunkXPQBE77T_cjs.mfaWebauthnInputSchema; }
 });
 Object.defineProperty(exports, "oidcInputSchema", {
   enumerable: true,
-  get: function () { return chunkN3GNUFMA_cjs.oidcInputSchema; }
+  get: function () { return chunkXPQBE77T_cjs.oidcInputSchema; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/auth/index.d.cts

@@ -1,12 +1,86 @@
-import { c as components, A as AssertSamlBody, I as InitiateSamlBody, C as CreatePatBody, E as ExchangePatBody, R as RevokePatPath, a as CreateDeviceAuthorizationBody, b as ApproveDeviceAuthorizationBody, G as GetDeviceAuthorizationTokenBody, S as SudoBody, d as GetPkceTokenBody, e as RevokeSessionPath, f as RevokeTokenBody } from '../types-59-LNg5i.cjs';
-import { L as LoginInput, O as OidcInput, M as MfaCodeInput, a as MfaWebauthnInput } from '../schemas-CraXbXke.cjs';
-export { b as LoginResult, l as loginInputSchema, c as loginResultSchema, d as loginSuccessSchema, m as mfaChallengeSchema, e as mfaCodeInputSchema, f as mfaWebauthnInputSchema, o as oidcInputSchema } from '../schemas-CraXbXke.cjs';
-import { c as createOpenapiFetchClient } from '../createOpenapiFetchClient-zK2SckO2.cjs';
-import { C as ClientInitOptions } from '../types-0yn6OefX.cjs';
+import { t as components, b as AssertSamlBody, I as InitiateSamlBody, e as CreatePatBody, E as ExchangePatBody, n as RevokePatPath, C as CreateDeviceAuthorizationBody, A as ApproveDeviceAuthorizationBody, G as GetDeviceAuthorizationTokenBody, S as SudoBody, i as GetPkceTokenBody, o as RevokeSessionPath, q as RevokeTokenBody } from '../types-BjcRP8q1.cjs';
+import * as zod from 'zod';
+import { c as createOpenapiFetchClient } from '../createOpenapiFetchClient-DQL2ZYNb.cjs';
+import { C as ClientInitOptions } from '../types-DqxZDbM1.cjs';
 import '../types-jKnx7Tm_.cjs';
-import 'zod';
 import 'qs';
 
+declare const mfaCodeInputSchema: zod.ZodObject<{
+    mfaToken: zod.ZodString;
+    type: zod.ZodEnum<{
+        totp: "totp";
+        recovery_code: "recovery_code";
+    }>;
+    code: zod.ZodString;
+}, zod.core.$strip>;
+declare const mfaWebauthnInputSchema: zod.ZodObject<{
+    mfaToken: zod.ZodString;
+    assertion: zod.ZodString;
+}, zod.core.$strip>;
+type MfaCodeInput = zod.infer<typeof mfaCodeInputSchema>;
+type MfaWebauthnInput = zod.infer<typeof mfaWebauthnInputSchema>;
+
+declare const loginInputSchema: zod.ZodObject<{
+    email: zod.ZodEmail;
+    password: zod.ZodString;
+}, zod.core.$strip>;
+declare const oidcInputSchema: zod.ZodObject<{
+    grantType: zod.ZodEnum<{
+        google: "google";
+        microsoft: "microsoft";
+    }>;
+    idToken: zod.ZodString;
+}, zod.core.$strip>;
+type LoginInput = zod.infer<typeof loginInputSchema>;
+type OidcInput = zod.infer<typeof oidcInputSchema>;
+declare const userSchema: zod.ZodObject<{
+    id: zod.ZodNumber;
+    email: zod.ZodString;
+    name: zod.ZodString;
+}, zod.core.$strip>;
+declare const loginSuccessSchema: zod.ZodObject<{
+    mfaRequired: zod.ZodDefault<zod.ZodLiteral<false>>;
+    accessToken: zod.ZodString;
+    refreshToken: zod.ZodString;
+    tokenType: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    sessionId: zod.ZodString;
+    user: zod.ZodObject<{
+        id: zod.ZodNumber;
+        email: zod.ZodString;
+        name: zod.ZodString;
+    }, zod.core.$strip>;
+}, zod.core.$strip>;
+declare const mfaChallengeSchema: zod.ZodObject<{
+    mfaRequired: zod.ZodLiteral<true>;
+    mfaType: zod.ZodString;
+    mfaToken: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    allowedMethods: zod.ZodArray<zod.ZodString>;
+}, zod.core.$strip>;
+declare const loginResultSchema: zod.ZodUnion<readonly [zod.ZodObject<{
+    mfaRequired: zod.ZodDefault<zod.ZodLiteral<false>>;
+    accessToken: zod.ZodString;
+    refreshToken: zod.ZodString;
+    tokenType: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    sessionId: zod.ZodString;
+    user: zod.ZodObject<{
+        id: zod.ZodNumber;
+        email: zod.ZodString;
+        name: zod.ZodString;
+    }, zod.core.$strip>;
+}, zod.core.$strip>, zod.ZodObject<{
+    mfaRequired: zod.ZodLiteral<true>;
+    mfaType: zod.ZodString;
+    mfaToken: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    allowedMethods: zod.ZodArray<zod.ZodString>;
+}, zod.core.$strip>]>;
+type LoginUser = zod.infer<typeof userSchema>;
+type LoginSuccess = zod.infer<typeof loginSuccessSchema>;
+type LoginResult = zod.infer<typeof loginResultSchema>;
+
 type AuthClientInitOptions = Omit<ClientInitOptions, 'auth'>;
 type AuthOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;
 declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions) => {
@@ -29,7 +103,6 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
             mfaToken: string;
             expiresIn: number;
             allowedMethods: string[];
-            webauthn: Record<string, unknown> | null;
         }>;
         withOidc: (input: OidcInput, signal?: AbortSignal) => Promise<{
             mfaRequired: false;
@@ -49,7 +122,6 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
             mfaToken: string;
             expiresIn: number;
             allowedMethods: string[];
-            webauthn: Record<string, unknown> | null;
         }>;
     };
     mfa: {
@@ -195,4 +267,4 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
     };
 };
 
-export { type AuthClientInitOptions, type AuthOpenApiFetchClient, LoginInput, MfaCodeInput, MfaWebauthnInput, OidcInput, createAuthClient };
+export { type AuthClientInitOptions, type AuthOpenApiFetchClient, type LoginInput, type LoginResult, type LoginSuccess, type LoginUser, type MfaCodeInput, type MfaWebauthnInput, type OidcInput, createAuthClient, loginInputSchema, loginResultSchema, loginSuccessSchema, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema };

package/dist/auth/index.d.ts

@@ -1,12 +1,86 @@
-import { c as components, A as AssertSamlBody, I as InitiateSamlBody, C as CreatePatBody, E as ExchangePatBody, R as RevokePatPath, a as CreateDeviceAuthorizationBody, b as ApproveDeviceAuthorizationBody, G as GetDeviceAuthorizationTokenBody, S as SudoBody, d as GetPkceTokenBody, e as RevokeSessionPath, f as RevokeTokenBody } from '../types-oJnjpvPi.js';
-import { L as LoginInput, O as OidcInput, M as MfaCodeInput, a as MfaWebauthnInput } from '../schemas-CraXbXke.js';
-export { b as LoginResult, l as loginInputSchema, c as loginResultSchema, d as loginSuccessSchema, m as mfaChallengeSchema, e as mfaCodeInputSchema, f as mfaWebauthnInputSchema, o as oidcInputSchema } from '../schemas-CraXbXke.js';
-import { c as createOpenapiFetchClient } from '../createOpenapiFetchClient-DLA4-_yg.js';
-import { C as ClientInitOptions } from '../types-0yn6OefX.js';
+import { t as components, b as AssertSamlBody, I as InitiateSamlBody, e as CreatePatBody, E as ExchangePatBody, n as RevokePatPath, C as CreateDeviceAuthorizationBody, A as ApproveDeviceAuthorizationBody, G as GetDeviceAuthorizationTokenBody, S as SudoBody, i as GetPkceTokenBody, o as RevokeSessionPath, q as RevokeTokenBody } from '../types-CbEJaobw.js';
+import * as zod from 'zod';
+import { c as createOpenapiFetchClient } from '../createOpenapiFetchClient-BMaILWyq.js';
+import { C as ClientInitOptions } from '../types-DqxZDbM1.js';
 import '../types-jKnx7Tm_.js';
-import 'zod';
 import 'qs';
 
+declare const mfaCodeInputSchema: zod.ZodObject<{
+    mfaToken: zod.ZodString;
+    type: zod.ZodEnum<{
+        totp: "totp";
+        recovery_code: "recovery_code";
+    }>;
+    code: zod.ZodString;
+}, zod.core.$strip>;
+declare const mfaWebauthnInputSchema: zod.ZodObject<{
+    mfaToken: zod.ZodString;
+    assertion: zod.ZodString;
+}, zod.core.$strip>;
+type MfaCodeInput = zod.infer<typeof mfaCodeInputSchema>;
+type MfaWebauthnInput = zod.infer<typeof mfaWebauthnInputSchema>;
+
+declare const loginInputSchema: zod.ZodObject<{
+    email: zod.ZodEmail;
+    password: zod.ZodString;
+}, zod.core.$strip>;
+declare const oidcInputSchema: zod.ZodObject<{
+    grantType: zod.ZodEnum<{
+        google: "google";
+        microsoft: "microsoft";
+    }>;
+    idToken: zod.ZodString;
+}, zod.core.$strip>;
+type LoginInput = zod.infer<typeof loginInputSchema>;
+type OidcInput = zod.infer<typeof oidcInputSchema>;
+declare const userSchema: zod.ZodObject<{
+    id: zod.ZodNumber;
+    email: zod.ZodString;
+    name: zod.ZodString;
+}, zod.core.$strip>;
+declare const loginSuccessSchema: zod.ZodObject<{
+    mfaRequired: zod.ZodDefault<zod.ZodLiteral<false>>;
+    accessToken: zod.ZodString;
+    refreshToken: zod.ZodString;
+    tokenType: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    sessionId: zod.ZodString;
+    user: zod.ZodObject<{
+        id: zod.ZodNumber;
+        email: zod.ZodString;
+        name: zod.ZodString;
+    }, zod.core.$strip>;
+}, zod.core.$strip>;
+declare const mfaChallengeSchema: zod.ZodObject<{
+    mfaRequired: zod.ZodLiteral<true>;
+    mfaType: zod.ZodString;
+    mfaToken: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    allowedMethods: zod.ZodArray<zod.ZodString>;
+}, zod.core.$strip>;
+declare const loginResultSchema: zod.ZodUnion<readonly [zod.ZodObject<{
+    mfaRequired: zod.ZodDefault<zod.ZodLiteral<false>>;
+    accessToken: zod.ZodString;
+    refreshToken: zod.ZodString;
+    tokenType: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    sessionId: zod.ZodString;
+    user: zod.ZodObject<{
+        id: zod.ZodNumber;
+        email: zod.ZodString;
+        name: zod.ZodString;
+    }, zod.core.$strip>;
+}, zod.core.$strip>, zod.ZodObject<{
+    mfaRequired: zod.ZodLiteral<true>;
+    mfaType: zod.ZodString;
+    mfaToken: zod.ZodString;
+    expiresIn: zod.ZodNumber;
+    allowedMethods: zod.ZodArray<zod.ZodString>;
+}, zod.core.$strip>]>;
+type LoginUser = zod.infer<typeof userSchema>;
+type LoginSuccess = zod.infer<typeof loginSuccessSchema>;
+type LoginResult = zod.infer<typeof loginResultSchema>;
+
 type AuthClientInitOptions = Omit<ClientInitOptions, 'auth'>;
 type AuthOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;
 declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions) => {
@@ -29,7 +103,6 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
             mfaToken: string;
             expiresIn: number;
             allowedMethods: string[];
-            webauthn: Record<string, unknown> | null;
         }>;
         withOidc: (input: OidcInput, signal?: AbortSignal) => Promise<{
             mfaRequired: false;
@@ -49,7 +122,6 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
             mfaToken: string;
             expiresIn: number;
             allowedMethods: string[];
-            webauthn: Record<string, unknown> | null;
         }>;
     };
     mfa: {
@@ -195,4 +267,4 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
     };
 };
 
-export { type AuthClientInitOptions, type AuthOpenApiFetchClient, LoginInput, MfaCodeInput, MfaWebauthnInput, OidcInput, createAuthClient };
+export { type AuthClientInitOptions, type AuthOpenApiFetchClient, type LoginInput, type LoginResult, type LoginSuccess, type LoginUser, type MfaCodeInput, type MfaWebauthnInput, type OidcInput, createAuthClient, loginInputSchema, loginResultSchema, loginSuccessSchema, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema };

package/dist/auth/index.js

@@ -1,4 +1,4 @@
-export { createAuthClient, loginInputSchema, loginResultSchema, loginSuccessSchema, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema } from '../chunk-4HJUQVXR.js';
+export { createAuthClient, loginInputSchema, loginResultSchema, loginSuccessSchema, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema } from '../chunk-KF5EI2IB.js';
 import '../chunk-RK2VGHJE.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/auth/types.d.cts

@@ -1,5 +1,5 @@
-import { p as paths } from '../types-59-LNg5i.cjs';
-export { b as ApproveDeviceAuthorizationBody, g as ApproveDeviceAuthorizationResult, A as AssertSamlBody, h as AssertSamlResult, a as CreateDeviceAuthorizationBody, i as CreateDeviceAuthorizationResult, C as CreatePatBody, j as CreatePatResult, E as ExchangePatBody, k as ExchangePatResult, G as GetDeviceAuthorizationTokenBody, l as GetDeviceAuthorizationTokenResult, d as GetPkceTokenBody, m as GetPkceTokenResult, I as InitiateSamlBody, n as InitiateSamlResult, o as IntrospectTokenResult, L as ListPatsResult, q as ListSessionsResult, r as RefreshTokenResult, R as RevokePatPath, e as RevokeSessionPath, f as RevokeTokenBody, S as SudoBody, s as SudoChallengeResult, t as SudoResult } from '../types-59-LNg5i.cjs';
+import { p as paths } from '../types-BjcRP8q1.cjs';
+export { A as ApproveDeviceAuthorizationBody, a as ApproveDeviceAuthorizationResult, b as AssertSamlBody, c as AssertSamlResult, C as CreateDeviceAuthorizationBody, d as CreateDeviceAuthorizationResult, e as CreatePatBody, f as CreatePatResult, E as ExchangePatBody, g as ExchangePatResult, G as GetDeviceAuthorizationTokenBody, h as GetDeviceAuthorizationTokenResult, i as GetPkceTokenBody, j as GetPkceTokenResult, I as InitiateSamlBody, k as InitiateSamlResult, l as IntrospectTokenResult, L as ListPatsResult, m as ListSessionsResult, R as RefreshTokenResult, n as RevokePatPath, o as RevokeSessionPath, q as RevokeTokenBody, S as SudoBody, r as SudoChallengeResult, s as SudoResult } from '../types-BjcRP8q1.cjs';
 import { b as OpenapiBodyType, a as OpenapiReturnType } from '../types-jKnx7Tm_.cjs';
 
 type LoginBody = OpenapiBodyType<paths['/v1/auth/login']['post']>;