@keboola/api-client 25.0.0 → 29.0.0

package/dist/chunk-4VVF2PIX.js

@@ -1,110 +0,0 @@
-import { createAbortError } from './chunk-22E6IGXR.js';
-import { createAuthHeaders } from './chunk-EDX5D6UY.js';
-import { createOpenapiFetchClient } from './chunk-XHDYLUM4.js';
-
-// src/utils/async/collect.ts
-var collect = async ({
-  fetchFrom,
-  pageSize,
-  limit,
-  signal
-}) => {
-  if (signal?.aborted) throw createAbortError(signal.reason);
-  if (limit !== void 0 && limit < 0) throw new Error("Invalid collect limit");
-  if (pageSize !== void 0 && pageSize < 1) throw new Error("Invalid collect pageSize");
-  const items = [];
-  if (limit === 0) return items;
-  let offset = 0;
-  while (true) {
-    const batch = await fetchFrom(offset, pageSize, signal);
-    items.push(...batch);
-    offset += batch.length;
-    if (limit !== void 0 && items.length >= limit) return items.slice(0, limit);
-    if (pageSize === void 0 ? batch.length === 0 : batch.length < pageSize) return items;
-  }
-};
-
-// src/clients/queue/queueClient.ts
-var createQueueClient = ({ baseUrl, middlewares, auth }) => {
-  const client = createOpenapiFetchClient({
-    baseUrl,
-    middlewares,
-    headers: createAuthHeaders(auth)
-  });
-  const getJob = async (jobId, signal) => {
-    const { data } = await client.get(
-      "/jobs/{jobId}",
-      {
-        path: { jobId }
-      },
-      { signal }
-    );
-    return data;
-  };
-  const searchJobs = async (query, signal) => {
-    const { data } = await client.get(
-      "/search/jobs",
-      {
-        query
-      },
-      { signal }
-    );
-    return data;
-  };
-  const searchAllJobs = (query, signal) => {
-    return collect({
-      pageSize: query.limit,
-      signal,
-      fetchFrom: (offset, pageSize, batchSignal) => {
-        return searchJobs({ ...query, limit: pageSize, offset }, batchSignal);
-      }
-    });
-  };
-  const createJob = async (body, signal) => {
-    const { data } = await client.post("/jobs", { body }, { signal });
-    return data;
-  };
-  const killJob = async (jobId, signal) => {
-    const { data } = await client.post(
-      "/jobs/{jobId}/kill",
-      {
-        path: { jobId }
-      },
-      { signal }
-    );
-    return data;
-  };
-  const searchGroupedJobs = async (query, signal) => {
-    const { data } = await client.get(
-      "/search/grouped-jobs",
-      {
-        query
-      },
-      { signal }
-    );
-    return data;
-  };
-  const getOrchestrationRerunPlan = async (jobId, signal) => {
-    const { data } = await client.get(
-      "/orchestration-rerun-plan/{jobId}",
-      {
-        path: { jobId }
-      },
-      { signal }
-    );
-    return data;
-  };
-  return {
-    getJob,
-    searchJobs,
-    searchAllJobs,
-    createJob,
-    killJob,
-    searchGroupedJobs,
-    getOrchestrationRerunPlan
-  };
-};
-
-export { collect, createQueueClient };
-//# sourceMappingURL=chunk-4VVF2PIX.js.map
-//# sourceMappingURL=chunk-4VVF2PIX.js.map

package/dist/chunk-4VVF2PIX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/async/collect.ts","../src/clients/queue/queueClient.ts"],"names":[],"mappings":";;;;;AAkBO,IAAM,UAAU,OAAU;AAAA,EAC/B,SAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAA,KAAuC;AACrC,EAAA,IAAI,MAAA,EAAQ,OAAA,EAAS,MAAM,gBAAA,CAAiB,OAAO,MAAM,CAAA;AACzD,EAAA,IAAI,UAAU,MAAA,IAAa,KAAA,GAAQ,GAAG,MAAM,IAAI,MAAM,uBAAuB,CAAA;AAC7E,EAAA,IAAI,aAAa,MAAA,IAAa,QAAA,GAAW,GAAG,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAEtF,EAAA,MAAM,QAAa,EAAC;AAEpB,EAAA,IAAI,KAAA,KAAU,GAAG,OAAO,KAAA;AAExB,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,OAAO,IAAA,EAAM;AACX,IAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,MAAA,EAAQ,UAAU,MAAM,CAAA;AAEtD,IAAA,KAAA,CAAM,IAAA,CAAK,GAAG,KAAK,CAAA;AACnB,IAAA,MAAA,IAAU,KAAA,CAAM,MAAA;AAEhB,IAAA,IAAI,KAAA,KAAU,UAAa,KAAA,CAAM,MAAA,IAAU,OAAO,OAAO,KAAA,CAAM,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA;AAC7E,IAAA,IAAI,QAAA,KAAa,SAAY,KAAA,CAAM,MAAA,KAAW,IAAI,KAAA,CAAM,MAAA,GAAS,UAAU,OAAO,KAAA;AAAA,EACpF;AACF;;;AC3BO,IAAM,oBAAoB,CAAC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAK,KAAyB;AACtF,EAAA,MAAM,SAAS,wBAAA,CAAgC;AAAA,IAC7C,OAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAAS,kBAAkB,IAAI;AAAA,GAChC,CAAA;AAED,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,EAAiC,MAAA,KAAyB;AAC9E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,eAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,EAAE,KAAA;AAAM,OAChB;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,UAAA,GAAa,OAAO,KAAA,EAAyB,MAAA,KAAyB;AAC1E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,cAAA;AAAA,MACA;AAAA,QACE;AAAA,OACF;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,aAAA,GAAgB,CAAC,KAAA,EAA2B,MAAA,KAAyB;AACzE,IAAA,OAAO,OAAA,CAAQ;AAAA,MACb,UAAU,KAAA,CAAM,KAAA;AAAA,MAChB,MAAA;AAAA,MACA,SAAA,EAAW,CAAC,MAAA,EAAQ,QAAA,EAAU,WAAA,KAAgB;AAC5C,QAAA,OAAO,UAAA,CAAW,EAAE,GAAG,KAAA,EAAO,OAAO,QAAA,EAAU,MAAA,IAAU,WAAW,CAAA;AAAA,MACtE;AAAA,KACD,CAAA;AAAA,EACH,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,IAAA,EAAqB,MAAA,KAAyB;AACrE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAEhE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,OAAO,KAAA,EAA6B,MAAA,KAAyB;AAC3E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,oBAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,EAAE,KAAA;AAAM,OAChB;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,iBAAA,GAAoB,OAAO,KAAA,EAA+B,MAAA,KAAyB;AACvF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,sBAAA;AAAA,MACA;AAAA,QACE;AAAA,OACF;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,yBAAA,GAA4B,OAChC,KAAA,EACA,MAAA,KACG;AACH,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,mCAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,EAAE,KAAA;AAAM,OAChB;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,MAAA;AAAA,IACA,UAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA;AAAA,IACA,OAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-4VVF2PIX.js","sourcesContent":["import { createAbortError } from '../createAbortError';\n\nexport type CollectOptions<T> = {\n  fetchFrom: (offset: number, pageSize?: number, signal?: AbortSignal) => Promise<T[]>;\n  pageSize?: number;\n  limit?: number;\n  signal?: AbortSignal;\n};\n\n/**\n * Collects items from an offset-paginated endpoint — up to `limit` of them, or all of them when\n * `limit` is omitted. Calls `fetchFrom` sequentially with the offset advancing by the number of\n * items received, and hands it `pageSize` so the request and the traversal agree on one value.\n *\n * Traversal ends on a page shorter than `pageSize`, or — when `pageSize` is omitted — only on an\n * empty page. Passing it therefore saves the trailing request, at the cost of stopping early if the\n * endpoint returns fewer items per page than asked for.\n */\nexport const collect = async <T>({\n  fetchFrom,\n  pageSize,\n  limit,\n  signal,\n}: CollectOptions<T>): Promise<T[]> => {\n  if (signal?.aborted) throw createAbortError(signal.reason);\n  if (limit !== undefined && limit < 0) throw new Error('Invalid collect limit');\n  if (pageSize !== undefined && pageSize < 1) throw new Error('Invalid collect pageSize');\n\n  const items: T[] = [];\n\n  if (limit === 0) return items;\n\n  let offset = 0;\n\n  while (true) {\n    const batch = await fetchFrom(offset, pageSize, signal);\n\n    items.push(...batch);\n    offset += batch.length;\n\n    if (limit !== undefined && items.length >= limit) return items.slice(0, limit);\n    if (pageSize === undefined ? batch.length === 0 : batch.length < pageSize) return items;\n  }\n};\n","import { createOpenapiFetchClient } from '../../fetchClient';\nimport { collect } from '../../utils';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateJobBody,\n  GetQueueJobPath,\n  KillJobPath,\n  OrchestrationRerunPlanPath,\n  SearchAllJobsQuery,\n  SearchGroupedJobsQuery,\n  SearchJobsQuery,\n} from './types';\n\nexport const createQueueClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const getJob = async (jobId: GetQueueJobPath['jobId'], signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/jobs/{jobId}',\n      {\n        path: { jobId },\n      },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const searchJobs = async (query?: SearchJobsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/search/jobs',\n      {\n        query,\n      },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const searchAllJobs = (query: SearchAllJobsQuery, signal?: AbortSignal) => {\n    return collect({\n      pageSize: query.limit,\n      signal,\n      fetchFrom: (offset, pageSize, batchSignal) => {\n        return searchJobs({ ...query, limit: pageSize, offset }, batchSignal);\n      },\n    });\n  };\n\n  const createJob = async (body: CreateJobBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/jobs', { body }, { signal });\n\n    return data;\n  };\n\n  const killJob = async (jobId: KillJobPath['jobId'], signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/jobs/{jobId}/kill',\n      {\n        path: { jobId },\n      },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const searchGroupedJobs = async (query: SearchGroupedJobsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/search/grouped-jobs',\n      {\n        query,\n      },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const getOrchestrationRerunPlan = async (\n    jobId: OrchestrationRerunPlanPath['jobId'],\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/orchestration-rerun-plan/{jobId}',\n      {\n        path: { jobId },\n      },\n      { signal },\n    );\n\n    return data;\n  };\n\n  return {\n    getJob,\n    searchJobs,\n    searchAllJobs,\n    createJob,\n    killJob,\n    searchGroupedJobs,\n    getOrchestrationRerunPlan,\n  };\n};\n"]}

package/dist/chunk-552FC4ZV.js

@@ -1,14 +0,0 @@
-// src/constants/adminRoles.ts
-var AdminRole = {
-  Admin: "admin",
-  Share: "share",
-  ProductionManager: "productionManager",
-  Developer: "developer",
-  Reviewer: "reviewer",
-  ReadOnly: "readOnly",
-  Guest: "guest"
-};
-
-export { AdminRole };
-//# sourceMappingURL=chunk-552FC4ZV.js.map
-//# sourceMappingURL=chunk-552FC4ZV.js.map

package/dist/chunk-552FC4ZV.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/constants/adminRoles.ts"],"names":[],"mappings":";AAAO,IAAM,SAAA,GAAY;AAAA,EACvB,KAAA,EAAO,OAAA;AAAA,EACP,KAAA,EAAO,OAAA;AAAA,EACP,iBAAA,EAAmB,mBAAA;AAAA,EACnB,SAAA,EAAW,WAAA;AAAA,EACX,QAAA,EAAU,UAAA;AAAA,EACV,QAAA,EAAU,UAAA;AAAA,EACV,KAAA,EAAO;AACT","file":"chunk-552FC4ZV.js","sourcesContent":["export const AdminRole = {\n  Admin: 'admin',\n  Share: 'share',\n  ProductionManager: 'productionManager',\n  Developer: 'developer',\n  Reviewer: 'reviewer',\n  ReadOnly: 'readOnly',\n  Guest: 'guest',\n} as const;\n\nexport type AdminRole = (typeof AdminRole)[keyof typeof AdminRole];\n"]}

package/dist/chunk-5XWVWFTC.js

@@ -1,33 +0,0 @@
-import { createAuthHeaders } from './chunk-EDX5D6UY.js';
-import { createGenericFetchClient } from './chunk-XHDYLUM4.js';
-
-// src/clients/telemetry/provisioning/provisioning.ts
-var createProvisioning = (client) => {
-  const createCredentials = async (body, signal) => {
-    const { data } = await client.post(
-      "/provisioning/workspace",
-      { body },
-      { signal }
-    );
-    return data;
-  };
-  return {
-    createCredentials
-  };
-};
-
-// src/clients/telemetry/telemetryClient.ts
-var createTelemetryClient = ({ baseUrl, middlewares, auth }) => {
-  const client = createGenericFetchClient({
-    baseUrl,
-    middlewares,
-    headers: createAuthHeaders(auth)
-  });
-  return {
-    provisioning: createProvisioning(client)
-  };
-};
-
-export { createTelemetryClient };
-//# sourceMappingURL=chunk-5XWVWFTC.js.map
-//# sourceMappingURL=chunk-5XWVWFTC.js.map

package/dist/chunk-5XWVWFTC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/telemetry/provisioning/provisioning.ts","../src/clients/telemetry/telemetryClient.ts"],"names":[],"mappings":";;;;AAIO,IAAM,kBAAA,GAAqB,CAAC,MAAA,KAA+B;AAChE,EAAA,MAAM,iBAAA,GAAoB,OAAO,IAAA,EAA6B,MAAA,KAAyB;AACrF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,yBAAA;AAAA,MACA,EAAE,IAAA,EAAK;AAAA,MACP,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL;AAAA,GACF;AACF,CAAA;;;ACVO,IAAM,wBAAwB,CAAC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAK,KAAyB;AAC1F,EAAA,MAAM,SAAS,wBAAA,CAAyB;AAAA,IACtC,OAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAAS,kBAAkB,IAAI;AAAA,GAChC,CAAA;AAED,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,mBAAmB,MAAM;AAAA,GACzC;AACF","file":"chunk-5XWVWFTC.js","sourcesContent":["import type { GenericFetchClient } from '../telemetryClient';\n\nimport type { CreateCredentialsBody, WorkspaceData } from './types';\n\nexport const createProvisioning = (client: GenericFetchClient) => {\n  const createCredentials = async (body: CreateCredentialsBody, signal?: AbortSignal) => {\n    const { data } = await client.post<WorkspaceData, void, void, CreateCredentialsBody>(\n      '/provisioning/workspace',\n      { body },\n      { signal },\n    );\n\n    return data;\n  };\n\n  return {\n    createCredentials,\n  };\n};\n","import { createGenericFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport { createProvisioning } from './provisioning/provisioning';\n\nexport type GenericFetchClient = ReturnType<typeof createGenericFetchClient>;\n\nexport const createTelemetryClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createGenericFetchClient({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  return {\n    provisioning: createProvisioning(client),\n  };\n};\n"]}

package/dist/chunk-6YZQIMML.cjs

@@ -1,163 +0,0 @@
-'use strict';
-
-var chunkYXGBD4WP_cjs = require('./chunk-YXGBD4WP.cjs');
-
-// src/domain/permissions/errors.ts
-var PermissionDeniedError = class extends Error {
-  action;
-  reason;
-  subject;
-  constructor({ action, reason, subject }) {
-    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);
-    this.name = "PermissionDeniedError";
-    this.action = action;
-    this.reason = reason;
-    this.subject = subject;
-  }
-};
-
-// src/domain/permissions/admin.ts
-var role = (token) => token.admin.role;
-var isAdmin = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.Admin;
-var isAdminOrShare = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.Admin || role(token) === chunkYXGBD4WP_cjs.AdminRole.Share;
-var isProductionManager = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.ProductionManager;
-var isDeveloperOrReviewer = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.Developer || role(token) === chunkYXGBD4WP_cjs.AdminRole.Reviewer;
-var isReadOnlyRole = (token) => role(token) === chunkYXGBD4WP_cjs.AdminRole.ReadOnly;
-var isKnownAdminRole = (adminRole) => Object.values(chunkYXGBD4WP_cjs.AdminRole).includes(adminRole ?? "");
-var isKaiSettingsWriterRole = (adminRole) => {
-  switch (adminRole) {
-    case chunkYXGBD4WP_cjs.AdminRole.Admin:
-    case chunkYXGBD4WP_cjs.AdminRole.Share:
-      return true;
-    default:
-      return false;
-  }
-};
-var canWriteKaiSettings = (token) => token.isMasterToken && isKaiSettingsWriterRole(token.admin?.role);
-var assertCanWriteKaiSettings = (token) => {
-  if (!canWriteKaiSettings(token)) {
-    throw new PermissionDeniedError({
-      action: "write-kai-settings",
-      reason: token.isMasterToken ? `role '${token.admin?.role ?? "none"}' may not write Kai settings` : "a limited (non-master) token may not write Kai settings"
-    });
-  }
-};
-var assertCanAdmin = (token) => {
-  if (!isAdmin(token)) {
-    throw new PermissionDeniedError({
-      action: "admin",
-      reason: `role '${role(token)}' is not admin`
-    });
-  }
-};
-var assertCanAdminOrShare = (token) => {
-  if (!isAdminOrShare(token)) {
-    throw new PermissionDeniedError({
-      action: "admin-or-share",
-      reason: `role '${role(token)}' is not admin or share`
-    });
-  }
-};
-var assertCanProductionManage = (token) => {
-  if (!isProductionManager(token)) {
-    throw new PermissionDeniedError({
-      action: "production-manage",
-      reason: `role '${role(token)}' is not productionManager`
-    });
-  }
-};
-var assertCanDevelopOrReview = (token) => {
-  if (!isDeveloperOrReviewer(token)) {
-    throw new PermissionDeniedError({
-      action: "develop-or-review",
-      reason: `role '${role(token)}' is not developer or reviewer`
-    });
-  }
-};
-
-// src/domain/permissions/configurations.ts
-var meetsBaseRule = (token, ctx) => ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);
-var baseDenialReason = (ctx) => ctx.isDevModeActive ? "dev branch requires developer or reviewer role" : "production requires productionManager role";
-var canCreateConfiguration = (token, ctx) => meetsBaseRule(token, ctx);
-var canUpdateConfiguration = (token, ctx) => meetsBaseRule(token, ctx);
-var canCopyConfiguration = (token, ctx) => meetsBaseRule(token, ctx);
-var canMigrateFromTemplate = (token, ctx) => meetsBaseRule(token, ctx);
-var canPurgeConfiguration = (token) => isAdmin(token);
-var canAssignFolder = (token, ctx) => meetsBaseRule(token, ctx);
-var assertCanCreateConfiguration = (token, ctx) => {
-  if (!canCreateConfiguration(token, ctx)) {
-    throw new PermissionDeniedError({
-      action: "create-configuration",
-      reason: baseDenialReason(ctx)
-    });
-  }
-};
-var assertCanUpdateConfiguration = (token, ctx) => {
-  if (!canUpdateConfiguration(token, ctx)) {
-    throw new PermissionDeniedError({
-      action: "update-configuration",
-      reason: baseDenialReason(ctx)
-    });
-  }
-};
-var assertCanCopyConfiguration = (token, ctx) => {
-  if (!canCopyConfiguration(token, ctx)) {
-    throw new PermissionDeniedError({
-      action: "copy-configuration",
-      reason: baseDenialReason(ctx)
-    });
-  }
-};
-var assertCanMigrateFromTemplate = (token, ctx) => {
-  if (!canMigrateFromTemplate(token, ctx)) {
-    throw new PermissionDeniedError({
-      action: "migrate-from-template",
-      reason: baseDenialReason(ctx)
-    });
-  }
-};
-var assertCanPurgeConfiguration = (token, ctx) => {
-  if (!canPurgeConfiguration(token)) {
-    throw new PermissionDeniedError({
-      action: "purge-configuration",
-      reason: "purge requires admin role"
-    });
-  }
-};
-var assertCanAssignFolder = (token, ctx) => {
-  if (!canAssignFolder(token, ctx)) {
-    throw new PermissionDeniedError({
-      action: "assign-folder",
-      reason: baseDenialReason(ctx)
-    });
-  }
-};
-
-exports.PermissionDeniedError = PermissionDeniedError;
-exports.assertCanAdmin = assertCanAdmin;
-exports.assertCanAdminOrShare = assertCanAdminOrShare;
-exports.assertCanAssignFolder = assertCanAssignFolder;
-exports.assertCanCopyConfiguration = assertCanCopyConfiguration;
-exports.assertCanCreateConfiguration = assertCanCreateConfiguration;
-exports.assertCanDevelopOrReview = assertCanDevelopOrReview;
-exports.assertCanMigrateFromTemplate = assertCanMigrateFromTemplate;
-exports.assertCanProductionManage = assertCanProductionManage;
-exports.assertCanPurgeConfiguration = assertCanPurgeConfiguration;
-exports.assertCanUpdateConfiguration = assertCanUpdateConfiguration;
-exports.assertCanWriteKaiSettings = assertCanWriteKaiSettings;
-exports.canAssignFolder = canAssignFolder;
-exports.canCopyConfiguration = canCopyConfiguration;
-exports.canCreateConfiguration = canCreateConfiguration;
-exports.canMigrateFromTemplate = canMigrateFromTemplate;
-exports.canPurgeConfiguration = canPurgeConfiguration;
-exports.canUpdateConfiguration = canUpdateConfiguration;
-exports.canWriteKaiSettings = canWriteKaiSettings;
-exports.isAdmin = isAdmin;
-exports.isAdminOrShare = isAdminOrShare;
-exports.isDeveloperOrReviewer = isDeveloperOrReviewer;
-exports.isKaiSettingsWriterRole = isKaiSettingsWriterRole;
-exports.isKnownAdminRole = isKnownAdminRole;
-exports.isProductionManager = isProductionManager;
-exports.isReadOnlyRole = isReadOnlyRole;
-//# sourceMappingURL=chunk-6YZQIMML.cjs.map
-//# sourceMappingURL=chunk-6YZQIMML.cjs.map

package/dist/chunk-6YZQIMML.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/domain/permissions/errors.ts","../src/domain/permissions/admin.ts","../src/domain/permissions/configurations.ts"],"names":["AdminRole"],"mappings":";;;;;AAgBO,IAAM,qBAAA,GAAN,cAAoC,KAAA,CAAM;AAAA,EAC/B,MAAA;AAAA,EACA,MAAA;AAAA,EACA,OAAA;AAAA,EAEhB,WAAA,CAAY,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAQ,EAA0D;AAC9F,IAAA,KAAA,CAAM,MAAA,GAAS,sBAAsB,MAAM,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,CAAA,GAAM,CAAA,mBAAA,EAAsB,MAAM,CAAA,CAAE,CAAA;AAC1F,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AACZ,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AACF;;;ACfA,IAAM,IAAA,GAAO,CAAC,KAAA,KAAgC,KAAA,CAAM,KAAA,CAAM,IAAA;AAEnD,IAAM,UAAU,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAE5E,IAAM,cAAA,GAAiB,CAAC,KAAA,KAC7B,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU,KAAA,IAAS,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU;AAExD,IAAM,sBAAsB,CAAC,KAAA,KAClC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAErB,IAAM,qBAAA,GAAwB,CAAC,KAAA,KACpC,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU,SAAA,IAAa,IAAA,CAAK,KAAK,CAAA,KAAMA,2BAAA,CAAU;AAE5D,IAAM,iBAAiB,CAAC,KAAA,KAAiC,IAAA,CAAK,KAAK,MAAMA,2BAAA,CAAU;AAWnF,IAAM,gBAAA,GAAmB,CAAC,SAAA,KAC9B,MAAA,CAAO,OAAOA,2BAAS,CAAA,CAAe,QAAA,CAAS,SAAA,IAAa,EAAE;AAkB1D,IAAM,uBAAA,GAA0B,CAAC,SAAA,KAAkD;AACxF,EAAA,QAAQ,SAAA;AAAW,IACjB,KAAKA,2BAAA,CAAU,KAAA;AAAA,IACf,KAAKA,2BAAA,CAAU,KAAA;AACb,MAAA,OAAO,IAAA;AAAA,IACT;AACE,MAAA,OAAO,KAAA;AAAA;AAEb;AAQO,IAAM,mBAAA,GAAsB,CAAC,KAAA,KAClC,KAAA,CAAM,iBAAiB,uBAAA,CAAwB,KAAA,CAAM,OAAO,IAAI;AAE3D,IAAM,yBAAA,GAA4B,CAAC,KAAA,KAA8B;AACtE,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,oBAAA;AAAA,MACR,MAAA,EAAQ,MAAM,aAAA,GACV,CAAA,MAAA,EAAS,MAAM,KAAA,EAAO,IAAA,IAAQ,MAAM,CAAA,4BAAA,CAAA,GACpC;AAAA,KACL,CAAA;AAAA,EACH;AACF;AAEO,IAAM,cAAA,GAAiB,CAAC,KAAA,KAA8B;AAC3D,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAK,CAAA,EAAG;AACnB,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,OAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,cAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,KAA8B;AAClE,EAAA,IAAI,CAAC,cAAA,CAAe,KAAK,CAAA,EAAG;AAC1B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,gBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,uBAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,yBAAA,GAA4B,CAAC,KAAA,KAA8B;AACtE,EAAA,IAAI,CAAC,mBAAA,CAAoB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,0BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,wBAAA,GAA2B,CAAC,KAAA,KAA8B;AACrE,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,mBAAA;AAAA,MACR,MAAA,EAAQ,CAAA,MAAA,EAAS,IAAA,CAAK,KAAK,CAAC,CAAA,8BAAA;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;;;AChEA,IAAM,aAAA,GAAgB,CAAC,KAAA,EAAqB,GAAA,KAC1C,GAAA,CAAI,kBAAkB,qBAAA,CAAsB,KAAK,CAAA,GAAI,mBAAA,CAAoB,KAAK,CAAA;AAEhF,IAAM,gBAAA,GAAmB,CAAC,GAAA,KACxB,GAAA,CAAI,kBACA,gDAAA,GACA,4CAAA;AAEC,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,uBAAuB,CAAC,KAAA,EAAqB,GAAA,KACxD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,yBAAyB,CAAC,KAAA,EAAqB,GAAA,KAC1D,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,qBAAA,GAAiF,CAC5F,KAAA,KACG,OAAA,CAAQ,KAAK;AAEX,IAAM,kBAAkB,CAAC,KAAA,EAAqB,GAAA,KACnD,aAAA,CAAc,OAAO,GAAG;AAEnB,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,sBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,sBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,0BAAA,GAA6B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC9F,EAAA,IAAI,CAAC,oBAAA,CAAqB,KAAA,EAAO,GAAG,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,oBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,4BAAA,GAA+B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAChG,EAAA,IAAI,CAAC,sBAAA,CAAuB,KAAA,EAAO,GAAG,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,uBAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF;AAEO,IAAM,2BAAA,GAA8B,CAAC,KAAA,EAAqB,GAAA,KAAgC;AAC/F,EAAA,IAAI,CAAC,qBAAA,CAAsB,KAAU,CAAA,EAAG;AACtC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,qBAAA;AAAA,MACR,MAAA,EAAQ;AAAA,KACT,CAAA;AAAA,EACH;AACF;AAEO,IAAM,qBAAA,GAAwB,CAAC,KAAA,EAAqB,GAAA,KAAgC;AACzF,EAAA,IAAI,CAAC,eAAA,CAAgB,KAAA,EAAO,GAAG,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,qBAAA,CAAsB;AAAA,MAC9B,MAAA,EAAQ,eAAA;AAAA,MACR,MAAA,EAAQ,iBAAiB,GAAG;AAAA,KAC7B,CAAA;AAAA,EACH;AACF","file":"chunk-6YZQIMML.cjs","sourcesContent":["/**\n * @module domain/permissions/errors\n *\n * Stable error contract for permission denials.\n *\n * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The\n * three public fields are part of the SDK's published contract — consumers\n * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`\n * and surface `reason` in UI, so renames here are breaking changes.\n *\n * PII boundary on `subject`:\n *   `subject` is optional and intended for debugging hints only — admin id,\n *   role name, configuration id, branch id, etc. It MUST NOT carry the full\n *   `StorageToken`, raw tokens, secrets, or any value that could be logged or\n *   surfaced to a user without further redaction.\n */\nexport class PermissionDeniedError extends Error {\n  public readonly action: string;\n  public readonly reason?: string;\n  public readonly subject?: string;\n\n  constructor({ action, reason, subject }: { action: string; reason?: string; subject?: string }) {\n    super(reason ? `Permission denied: ${action} (${reason})` : `Permission denied: ${action}`);\n    this.name = 'PermissionDeniedError';\n    this.action = action;\n    this.reason = reason;\n    this.subject = subject;\n  }\n}\n","/**\n * @module domain/permissions/admin\n *\n * Baseline admin-role predicates. Token-only — depend purely on the admin\n * role string carried in `StorageToken.admin.role`. Each predicate has an\n * `assertCan*` pair that throws `PermissionDeniedError` with a stable\n * kebab-case `action` field documented per pair.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\nimport { AdminRole } from '../../constants/adminRoles';\n\nimport { PermissionDeniedError } from './errors';\n\nconst role = (token: StorageToken): string => token.admin.role;\n\nexport const isAdmin = (token: StorageToken): boolean => role(token) === AdminRole.Admin;\n\nexport const isAdminOrShare = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Admin || role(token) === AdminRole.Share;\n\nexport const isProductionManager = (token: StorageToken): boolean =>\n  role(token) === AdminRole.ProductionManager;\n\nexport const isDeveloperOrReviewer = (token: StorageToken): boolean =>\n  role(token) === AdminRole.Developer || role(token) === AdminRole.Reviewer;\n\nexport const isReadOnlyRole = (token: StorageToken): boolean => role(token) === AdminRole.ReadOnly;\n\n/**\n * Whether a role string is a member of `AdminRole` at all — distinct from\n * whether it may do any particular thing. A role failing this check is not\n * \"denied\", it's *unrecognized*: either Storage started returning a role this\n * client has never heard of, or something upstream is sending garbage. Callers\n * that deny-by-default on every predicate here (the common case) still want to\n * know about this distinction, because it never shows up as a failed request —\n * a caller should log it loudly rather than treat it as routine.\n */\nexport const isKnownAdminRole = (adminRole: string | null | undefined): boolean =>\n  (Object.values(AdminRole) as string[]).includes(adminRole ?? '');\n\n/**\n * Whether an admin role may write Kai's **project-wide** settings (custom\n * instructions injected into every project member's system prompt).\n *\n * `admin` and `share` only. The value is a shared prompt-injection surface, so\n * changing it counts as project administration rather than project work:\n * `productionManager` and `guest` are read-only for project management in kbc-ui,\n * and `developer`/`reviewer` are denied because `agent_settings` is keyed by\n * `project_id` alone — editing it \"inside a dev branch\" writes production-visible\n * global config.\n *\n * An allowlist, deliberately: `AdminRole` gains members upstream, and a denylist\n * would admit each new one silently with no test failing. Takes the raw role\n * string so a caller holding an unparsed `tokens.verify()` response can use it\n * without fabricating a `StorageToken`. AI-3671.\n */\nexport const isKaiSettingsWriterRole = (adminRole: string | null | undefined): boolean => {\n  switch (adminRole) {\n    case AdminRole.Admin:\n    case AdminRole.Share:\n      return true;\n    default:\n      return false;\n  }\n};\n\n/**\n * Whether this token may write Kai's project-wide settings. A limited\n * (non-master) token never may: it carries no project role at all, and its\n * `admin` block is absent despite the hand-authored type declaring it required\n * (AI-3593) — hence the optional chain.\n */\nexport const canWriteKaiSettings = (token: StorageToken): boolean =>\n  token.isMasterToken && isKaiSettingsWriterRole(token.admin?.role);\n\nexport const assertCanWriteKaiSettings = (token: StorageToken): void => {\n  if (!canWriteKaiSettings(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-settings',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' may not write Kai settings`\n        : 'a limited (non-master) token may not write Kai settings',\n    });\n  }\n};\n\nexport const assertCanAdmin = (token: StorageToken): void => {\n  if (!isAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin',\n      reason: `role '${role(token)}' is not admin`,\n    });\n  }\n};\n\nexport const assertCanAdminOrShare = (token: StorageToken): void => {\n  if (!isAdminOrShare(token)) {\n    throw new PermissionDeniedError({\n      action: 'admin-or-share',\n      reason: `role '${role(token)}' is not admin or share`,\n    });\n  }\n};\n\nexport const assertCanProductionManage = (token: StorageToken): void => {\n  if (!isProductionManager(token)) {\n    throw new PermissionDeniedError({\n      action: 'production-manage',\n      reason: `role '${role(token)}' is not productionManager`,\n    });\n  }\n};\n\nexport const assertCanDevelopOrReview = (token: StorageToken): void => {\n  if (!isDeveloperOrReviewer(token)) {\n    throw new PermissionDeniedError({\n      action: 'develop-or-review',\n      reason: `role '${role(token)}' is not developer or reviewer`,\n    });\n  }\n};\n","/**\n * @module domain/permissions/configurations\n *\n * Predicate pairs guarding the Core SDK configuration workflow methods\n * (create / update / copy / migrate-from-template / purge / assign-folder). Each\n * predicate composes the baseline admin role predicates with the caller-\n * supplied dev-mode flag from `ctx`.\n *\n * Rule shape:\n *   - In a dev branch (`ctx.isDevModeActive === true`) → caller must be a\n *     developer or reviewer.\n *   - In production (`ctx.isDevModeActive === false`) → caller must be a\n *     production manager.\n *   - `canPurgeConfiguration` is **admin-only**, regardless of branch mode.\n *     Purge is destructive and the situational base rule does not apply —\n *     `token.admin.role` is a single scalar, so requiring both \"admin\" and\n *     \"developer/reviewer/productionManager\" simultaneously would be an\n *     impossible conjunction. The `ctx` parameter is accepted for signature\n *     symmetry with the other configuration predicates and ignored.\n *\n * `ctx` is the trailing object argument convention for composed predicates;\n * extra fields land here as future rules grow (see AGENTS.md).\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdmin, isDeveloperOrReviewer, isProductionManager } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Caller-supplied context for configuration predicates.\n *\n * @property isDevModeActive — `true` when the user is operating inside a\n *   development branch (any storage branch other than the protected default /\n *   production branch); `false` when operating on the default branch in\n *   production.\n *\n *   How the caller determines this:\n *   - The active branch comes from the caller's own routing / app state\n *     (e.g. `/branch/:branchId` in kbc-ui).\n *   - A branch is \"dev mode\" when it is **not** the default branch returned by\n *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).\n *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`\n *     compared against the default branch id; the api-client itself stays\n *     isomorphic and never reads that state directly.\n *\n *   Why it changes the rule:\n *   - In dev branches Keboola allows broader write access — `developer` and\n *     `reviewer` roles may create / copy / migrate configurations because the\n *     branch is sandboxed from production.\n *   - On the default branch only `productionManager` (or `admin`) may perform\n *     the same writes, since changes ship live to production.\n */\nexport type ConfigurationCtx = {\n  isDevModeActive: boolean;\n};\n\nconst meetsBaseRule = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  ctx.isDevModeActive ? isDeveloperOrReviewer(token) : isProductionManager(token);\n\nconst baseDenialReason = (ctx: ConfigurationCtx): string =>\n  ctx.isDevModeActive\n    ? 'dev branch requires developer or reviewer role'\n    : 'production requires productionManager role';\n\nexport const canCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const canPurgeConfiguration: (token: StorageToken, ctx: ConfigurationCtx) => boolean = (\n  token,\n) => isAdmin(token);\n\nexport const canAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): boolean =>\n  meetsBaseRule(token, ctx);\n\nexport const assertCanCreateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCreateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'create-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanUpdateConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canUpdateConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'update-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanCopyConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canCopyConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'copy-configuration',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanMigrateFromTemplate = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canMigrateFromTemplate(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'migrate-from-template',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n\nexport const assertCanPurgeConfiguration = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canPurgeConfiguration(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'purge-configuration',\n      reason: 'purge requires admin role',\n    });\n  }\n};\n\nexport const assertCanAssignFolder = (token: StorageToken, ctx: ConfigurationCtx): void => {\n  if (!canAssignFolder(token, ctx)) {\n    throw new PermissionDeniedError({\n      action: 'assign-folder',\n      reason: baseDenialReason(ctx),\n    });\n  }\n};\n"]}

package/dist/chunk-77LILJYX.js

@@ -1,110 +0,0 @@
-import { createAuthHeaders } from './chunk-EDX5D6UY.js';
-import { createOpenapiFetchClient } from './chunk-XHDYLUM4.js';
-
-// src/clients/editor/editorClient.ts
-var createEditorClient = ({ baseUrl, middlewares, auth }) => {
-  const client = createOpenapiFetchClient({
-    baseUrl,
-    middlewares,
-    headers: createAuthHeaders(auth)
-  });
-  const createSession = async (body) => {
-    const { data } = await client.post("/sql/sessions", {
-      body
-    });
-    return data;
-  };
-  const getSession = async ({ id }, signal) => {
-    const { data } = await client.get(`/sql/sessions/{id}`, { path: { id } }, { signal });
-    return data;
-  };
-  const getSessions = async (query, signal) => {
-    const { data } = await client.get(`/sql/sessions`, { query }, { signal });
-    return data;
-  };
-  const getSessionSchema = async ({
-    id,
-    onlyWorkspaceSchema = "1",
-    loadTables = "1"
-  }, signal) => {
-    const { data } = await client.get(
-      `/sql/sessions/{id}/schema`,
-      {
-        path: { id },
-        query: { onlyWorkspaceSchema, loadTables }
-      },
-      { signal }
-    );
-    return data;
-  };
-  const createQueryJob = async ({ id }, body) => {
-    const { data } = await client.post(`/sql/sessions/{id}/run-query`, {
-      path: { id },
-      body
-    });
-    return data;
-  };
-  const tablePreview = async ({ id }, body) => {
-    const { data } = await client.post(`/sql/sessions/{id}/table-preview`, {
-      path: { id },
-      body
-    });
-    return data;
-  };
-  const tableDefinition = async ({ id, ...query }, signal) => {
-    const { data } = await client.get(
-      `/sql/sessions/{id}/table-ddl`,
-      { path: { id }, query },
-      { signal }
-    );
-    return data;
-  };
-  const load = async ({ id }, body) => {
-    const { data } = await client.post(`/sql/sessions/{id}/load`, {
-      path: { id },
-      body
-    });
-    return data;
-  };
-  const unload = async ({ id }, body) => {
-    const { data } = await client.post(`/sql/sessions/{id}/unload`, {
-      path: { id },
-      // BE error: The body is optional; however, without it, the request will fail with the message "Request content type must be application/json."
-      // This is expected, as our client cannot correctly determine the content type without the body.
-      // This issue should be addressed to indicate that the body is required in their Swagger schema.
-      body: body ?? { tableId: null }
-    });
-    return data;
-  };
-  const resetWorkspacePassword = async (id) => {
-    const { data } = await client.post(`/sql/sessions/{id}/reset-password`, {
-      path: { id }
-    });
-    return data;
-  };
-  const getSessionCredentials = async (id, signal) => {
-    const { data } = await client.get(
-      `/sql/sessions/{id}/credentials`,
-      { path: { id } },
-      { signal }
-    );
-    return data;
-  };
-  return {
-    createSession,
-    getSession,
-    getSessions,
-    getSessionSchema,
-    createQueryJob,
-    tablePreview,
-    tableDefinition,
-    load,
-    unload,
-    resetWorkspacePassword,
-    getSessionCredentials
-  };
-};
-
-export { createEditorClient };
-//# sourceMappingURL=chunk-77LILJYX.js.map
-//# sourceMappingURL=chunk-77LILJYX.js.map

package/dist/chunk-77LILJYX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/editor/editorClient.ts"],"names":[],"mappings":";;;;AAuBO,IAAM,qBAAqB,CAAC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAK,KAAyB;AACvF,EAAA,MAAM,SAAS,wBAAA,CAAgC;AAAA,IAC7C,OAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAAS,kBAAkB,IAAI;AAAA,GAChC,CAAA;AAED,EAAA,MAAM,aAAA,GAAgB,OAAO,IAAA,KAA+B;AAC1D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,KAAK,eAAA,EAAiB;AAAA,MAClD;AAAA,KACD,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,UAAA,GAAa,OAAO,EAAE,EAAA,IAAyB,MAAA,KAAyB;AAC5E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,OAAO,GAAA,CAAI,CAAA,kBAAA,CAAA,EAAsB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAG,EAAE,EAAG,EAAE,QAAQ,CAAA;AACpF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,WAAA,GAAc,OAAO,KAAA,EAA4B,MAAA,KAAyB;AAC9E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,CAAA,aAAA,CAAA,EAAiB,EAAE,KAAA,EAAM,EAAG,EAAE,MAAA,EAAQ,CAAA;AAExE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,mBAAmB,OACvB;AAAA,IACE,EAAA;AAAA,IACA,mBAAA,GAAsB,GAAA;AAAA,IACtB,UAAA,GAAa;AAAA,KAEf,MAAA,KACG;AACH,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,CAAA,yBAAA,CAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,EAAE,EAAA,EAAG;AAAA,QACX,KAAA,EAAO,EAAE,mBAAA,EAAqB,UAAA;AAAW,OAC3C;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OAAO,EAAE,EAAA,IAA2B,IAAA,KAA8B;AACvF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,KAAK,CAAA,4BAAA,CAAA,EAAgC;AAAA,MACjE,IAAA,EAAM,EAAE,EAAA,EAAG;AAAA,MACX;AAAA,KACD,CAAA;AACD,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,EAAE,EAAA,IAA+B,IAAA,KAAkC;AAC7F,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,KAAK,CAAA,gCAAA,CAAA,EAAoC;AAAA,MACrE,IAAA,EAAM,EAAE,EAAA,EAAG;AAAA,MACX;AAAA,KACD,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,kBAAkB,OACtB,EAAE,IAAI,GAAG,KAAA,IACT,MAAA,KACG;AACH,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,CAAA,4BAAA,CAAA;AAAA,MACA,EAAE,IAAA,EAAM,EAAE,EAAA,IAAM,KAAA,EAAM;AAAA,MACtB,EAAE,MAAA;AAAO,KACX;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,IAAA,GAAO,OAAO,EAAE,EAAA,IAA8B,IAAA,KAAiC;AACnF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,KAAK,CAAA,uBAAA,CAAA,EAA2B;AAAA,MAC5D,IAAA,EAAM,EAAE,EAAA,EAAG;AAAA,MACX;AAAA,KACD,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,EAAE,EAAA,IAAgC,IAAA,KAAoC;AAC1F,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,KAAK,CAAA,yBAAA,CAAA,EAA6B;AAAA,MAC9D,IAAA,EAAM,EAAE,EAAA,EAAG;AAAA;AAAA;AAAA;AAAA,MAIX,IAAA,EAAM,IAAA,IAAQ,EAAE,OAAA,EAAS,IAAA;AAAK,KAC/B,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,sBAAA,GAAyB,OAAO,EAAA,KAAe;AACnD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,KAAK,CAAA,iCAAA,CAAA,EAAqC;AAAA,MACtE,IAAA,EAAM,EAAE,EAAA;AAAG,KACZ,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,qBAAA,GAAwB,OAAO,EAAA,EAAY,MAAA,KAAyB;AACxE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,CAAA,8BAAA,CAAA;AAAA,MACA,EAAE,IAAA,EAAM,EAAE,EAAA,EAAG,EAAE;AAAA,MACf,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA;AAAA,IACA,cAAA;AAAA,IACA,YAAA;AAAA,IACA,eAAA;AAAA,IACA,IAAA;AAAA,IACA,MAAA;AAAA,IACA,sBAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-77LILJYX.js","sourcesContent":["import { createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateSqlSessionBody,\n  GetSqlSessionPath,\n  GetSqlSessionSchemaPath,\n  GetSqlSessionSchemaQuery,\n  GetSqlSessionsQuery,\n  GetSqlSessionTableDdlPath,\n  GetSqlSessionTableDdlQuery,\n  PostSqlRunQueryBody,\n  PostSqlRunQueryPath,\n  PostSqlSessionLoadBody,\n  PostSqlSessionLoadPath,\n  PostSqlSessionUnloadBody,\n  PostSqlSessionUnloadPath,\n  PostSqlTablePreviewBody,\n  PostSqlTablePreviewPath,\n} from './types';\n\nexport const createEditorClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const createSession = async (body: CreateSqlSessionBody) => {\n    const { data } = await client.post('/sql/sessions', {\n      body,\n    });\n    return data;\n  };\n\n  const getSession = async ({ id }: GetSqlSessionPath, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions/{id}`, { path: { id } }, { signal });\n    return data;\n  };\n\n  const getSessions = async (query: GetSqlSessionsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions`, { query }, { signal });\n\n    return data;\n  };\n\n  const getSessionSchema = async (\n    {\n      id,\n      onlyWorkspaceSchema = '1',\n      loadTables = '1',\n    }: GetSqlSessionSchemaPath & GetSqlSessionSchemaQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/schema`,\n      {\n        path: { id },\n        query: { onlyWorkspaceSchema, loadTables },\n      },\n      { signal },\n    );\n    return data;\n  };\n\n  const createQueryJob = async ({ id }: PostSqlRunQueryPath, body: PostSqlRunQueryBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/run-query`, {\n      path: { id },\n      body,\n    });\n    return data;\n  };\n\n  const tablePreview = async ({ id }: PostSqlTablePreviewPath, body: PostSqlTablePreviewBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/table-preview`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const tableDefinition = async (\n    { id, ...query }: GetSqlSessionTableDdlPath & GetSqlSessionTableDdlQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/table-ddl`,\n      { path: { id }, query },\n      { signal },\n    );\n    return data;\n  };\n\n  const load = async ({ id }: PostSqlSessionLoadPath, body: PostSqlSessionLoadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/load`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const unload = async ({ id }: PostSqlSessionUnloadPath, body?: PostSqlSessionUnloadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/unload`, {\n      path: { id },\n      // BE error: The body is optional; however, without it, the request will fail with the message \"Request content type must be application/json.\"\n      // This is expected, as our client cannot correctly determine the content type without the body.\n      // This issue should be addressed to indicate that the body is required in their Swagger schema.\n      body: body ?? { tableId: null },\n    });\n\n    return data;\n  };\n\n  const resetWorkspacePassword = async (id: string) => {\n    const { data } = await client.post(`/sql/sessions/{id}/reset-password`, {\n      path: { id },\n    });\n\n    return data;\n  };\n\n  const getSessionCredentials = async (id: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/credentials`,\n      { path: { id } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  return {\n    createSession,\n    getSession,\n    getSessions,\n    getSessionSchema,\n    createQueryJob,\n    tablePreview,\n    tableDefinition,\n    load,\n    unload,\n    resetWorkspacePassword,\n    getSessionCredentials,\n  };\n};\n"]}

package/dist/chunk-7J2R6XHB.js

@@ -1,3 +0,0 @@
-
-//# sourceMappingURL=chunk-7J2R6XHB.js.map
-//# sourceMappingURL=chunk-7J2R6XHB.js.map

package/dist/chunk-7J2R6XHB.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-7J2R6XHB.js"}

package/dist/chunk-7R22VKV7.cjs

@@ -1,62 +0,0 @@
-'use strict';
-
-var chunkRRC5RKF7_cjs = require('./chunk-RRC5RKF7.cjs');
-var chunk7RO6PKZ4_cjs = require('./chunk-7RO6PKZ4.cjs');
-var chunkMMOAH3EH_cjs = require('./chunk-MMOAH3EH.cjs');
-
-// src/clients/vault/vaultClient.ts
-var createVaultClient = ({ baseUrl, middlewares, auth }) => {
-  const client = chunkMMOAH3EH_cjs.createOpenapiFetchClient({
-    baseUrl,
-    middlewares,
-    headers: chunk7RO6PKZ4_cjs.createAuthHeaders(auth)
-  });
-  const getVariables = async (query, signal) => {
-    const { data } = await client.get(
-      "/variables",
-      { query },
-      {
-        signal
-      }
-    );
-    return data;
-  };
-  const deleteVariable = async (hash, signal) => {
-    await client.delete(
-      "/variables/{hash}",
-      {
-        path: { hash }
-      },
-      { signal }
-    );
-  };
-  const createVariable = async (body, signal) => {
-    if (body.flags.includes("encrypted") && !body.value.startsWith(chunkMMOAH3EH_cjs.ENCRYPTED_VALUE_PREFIX)) {
-      throw new chunkRRC5RKF7_cjs.UserError("Encryption of a value failed. Please contact our support.");
-    }
-    const { data } = await client.post("/variables", { body }, { signal });
-    return data;
-  };
-  const getVariablesByBranchId = async (branchId, signal) => {
-    const { data } = await client.get(
-      "/variables/scoped/branch/{branchId}",
-      {
-        path: { branchId }
-      },
-      { signal }
-    );
-    return data;
-  };
-  const getProjectWideVariables = (signal) => getVariablesByBranchId("null", signal);
-  return {
-    createVariable,
-    deleteVariable,
-    getProjectWideVariables,
-    getVariables,
-    getVariablesByBranchId
-  };
-};
-
-exports.createVaultClient = createVaultClient;
-//# sourceMappingURL=chunk-7R22VKV7.cjs.map
-//# sourceMappingURL=chunk-7R22VKV7.cjs.map

package/dist/chunk-7R22VKV7.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/vault/vaultClient.ts"],"names":["createOpenapiFetchClient","createAuthHeaders","ENCRYPTED_VALUE_PREFIX","UserError"],"mappings":";;;;;;;AAeO,IAAM,oBAAoB,CAAC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAK,KAAyB;AACtF,EAAA,MAAM,SAASA,0CAAA,CAAgC;AAAA,IAC7C,OAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAASC,oCAAkB,IAAI;AAAA,GAChC,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,OAAO,KAAA,EAA0B,MAAA,KAAyB;AAC7E,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,YAAA;AAAA,MACA,EAAE,KAAA,EAAM;AAAA,MACR;AAAA,QACE;AAAA;AACF,KACF;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OAAO,IAAA,EAAkC,MAAA,KAAyB;AACvF,IAAA,MAAM,MAAA,CAAO,MAAA;AAAA,MACX,mBAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,EAAE,IAAA;AAAK,OACf;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OAAO,IAAA,EAA0B,MAAA,KAAyB;AAC/E,IAAA,IAAI,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,WAAW,CAAA,IAAK,CAAC,IAAA,CAAK,KAAA,CAAM,UAAA,CAAWC,wCAAsB,CAAA,EAAG;AACtF,MAAA,MAAM,IAAIC,4BAAU,2DAA2D,CAAA;AAAA,IACjF;AACA,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACrE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,sBAAA,GAAyB,OAC7B,QAAA,EACA,MAAA,KACG;AACH,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,qCAAA;AAAA,MACA;AAAA,QACE,IAAA,EAAM,EAAE,QAAA;AAAS,OACnB;AAAA,MACA,EAAE,MAAA;AAAO,KACX;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,uBAAA,GAA0B,CAAC,MAAA,KAAyB,sBAAA,CAAuB,QAAQ,MAAM,CAAA;AAE/F,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,cAAA;AAAA,IACA,uBAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-7R22VKV7.cjs","sourcesContent":["import { UserError } from '../../errors';\nimport { createOpenapiFetchClient } from '../../fetchClient';\nimport { ENCRYPTED_VALUE_PREFIX } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateVariableBody,\n  DeleteVariablePath,\n  GetVariablesByBranchId,\n  GetVariablesQuery,\n  VariableWithHash,\n} from './types';\n\nexport const createVaultClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const getVariables = async (query: GetVariablesQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/variables',\n      { query },\n      {\n        signal,\n      },\n    );\n\n    return data as VariableWithHash[];\n  };\n\n  const deleteVariable = async (hash: DeleteVariablePath['hash'], signal?: AbortSignal) => {\n    await client.delete(\n      '/variables/{hash}',\n      {\n        path: { hash },\n      },\n      { signal },\n    );\n  };\n\n  const createVariable = async (body: CreateVariableBody, signal?: AbortSignal) => {\n    if (body.flags.includes('encrypted') && !body.value.startsWith(ENCRYPTED_VALUE_PREFIX)) {\n      throw new UserError('Encryption of a value failed. Please contact our support.');\n    }\n    const { data } = await client.post('/variables', { body }, { signal });\n    return data;\n  };\n\n  const getVariablesByBranchId = async (\n    branchId: GetVariablesByBranchId['branchId'],\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/variables/scoped/branch/{branchId}',\n      {\n        path: { branchId },\n      },\n      { signal },\n    );\n    return data as VariableWithHash[];\n  };\n\n  const getProjectWideVariables = (signal?: AbortSignal) => getVariablesByBranchId('null', signal);\n\n  return {\n    createVariable,\n    deleteVariable,\n    getProjectWideVariables,\n    getVariables,\n    getVariablesByBranchId,\n  };\n};\n"]}

package/dist/chunk-7RO6PKZ4.cjs

@@ -1,16 +0,0 @@
-'use strict';
-
-var chunkMMOAH3EH_cjs = require('./chunk-MMOAH3EH.cjs');
-
-// src/clients/auth.ts
-var createAuthHeaders = (auth) => {
-  if (auth.type === "sapi-token") return { [chunkMMOAH3EH_cjs.KeboolaHttpHeader.STORAGE_API_TOKEN]: auth.token };
-  return {
-    [chunkMMOAH3EH_cjs.HttpHeader.AUTHORIZATION]: `Bearer ${auth.token}`,
-    [chunkMMOAH3EH_cjs.KeboolaHttpHeader.PROJECT_ID]: auth.projectId.toString()
-  };
-};
-
-exports.createAuthHeaders = createAuthHeaders;
-//# sourceMappingURL=chunk-7RO6PKZ4.cjs.map
-//# sourceMappingURL=chunk-7RO6PKZ4.cjs.map

package/dist/chunk-7RO6PKZ4.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/auth.ts"],"names":["KeboolaHttpHeader","HttpHeader"],"mappings":";;;;;AAcO,IAAM,iBAAA,GAAoB,CAAC,IAAA,KAA+C;AAC/E,EAAA,IAAI,IAAA,CAAK,IAAA,KAAS,YAAA,EAAc,OAAO,EAAE,CAACA,mCAAA,CAAkB,iBAAiB,GAAG,IAAA,CAAK,KAAA,EAAM;AAM3F,EAAA,OAAO;AAAA,IACL,CAACC,4BAAA,CAAW,aAAa,GAAG,CAAA,OAAA,EAAU,KAAK,KAAK,CAAA,CAAA;AAAA,IAChD,CAACD,mCAAA,CAAkB,UAAU,GAAG,IAAA,CAAK,UAAU,QAAA;AAAS,GAC1D;AACF","file":"chunk-7RO6PKZ4.cjs","sourcesContent":["import { HttpHeader } from '../fetchClient';\nimport { KeboolaHttpHeader } from '../internal';\n\nexport type AuthStrategy =\n  | {\n      type: 'sapi-token';\n      token: string;\n    }\n  | {\n      type: 'bearer';\n      token: string;\n      projectId: number;\n    };\n\nexport const createAuthHeaders = (auth: AuthStrategy): Record<string, string> => {\n  if (auth.type === 'sapi-token') return { [KeboolaHttpHeader.STORAGE_API_TOKEN]: auth.token };\n\n  // `auth.token` is the bare token; the `Bearer ` wire prefix is added here (mirroring the\n  // management client). In the browser bearer flow the bearer auth middleware stamps the\n  // Authorization header on every request, so this value only matters for middleware-less\n  // clients (e.g. kai-agent's storage token verification).\n  return {\n    [HttpHeader.AUTHORIZATION]: `Bearer ${auth.token}`,\n    [KeboolaHttpHeader.PROJECT_ID]: auth.projectId.toString(),\n  };\n};\n"]}