@keboola/api-client 25.0.0 → 29.0.0

package/dist/chunk-DRNOCC6W.cjs

@@ -1,295 +0,0 @@
-'use strict';
-
-var chunkMMOAH3EH_cjs = require('./chunk-MMOAH3EH.cjs');
-var z = require('zod');
-
-function _interopNamespace(e) {
-  if (e && e.__esModule) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-var z__namespace = /*#__PURE__*/_interopNamespace(z);
-
-var loginInputSchema = z__namespace.object({
-  email: z__namespace.email(),
-  password: z__namespace.string().min(1, "Required")
-});
-var oidcInputSchema = z__namespace.object({
-  grantType: z__namespace.enum(["google", "microsoft"]),
-  idToken: z__namespace.string().min(1, "Required")
-});
-var userSchema = z__namespace.object({
-  id: z__namespace.number(),
-  email: z__namespace.string(),
-  name: z__namespace.string()
-});
-var loginSuccessSchema = z__namespace.object({
-  mfaRequired: z__namespace.literal(false).default(false),
-  accessToken: z__namespace.string(),
-  refreshToken: z__namespace.string(),
-  tokenType: z__namespace.string(),
-  expiresIn: z__namespace.number(),
-  sessionId: z__namespace.string(),
-  user: userSchema
-});
-var mfaChallengeSchema = z__namespace.object({
-  mfaRequired: z__namespace.literal(true),
-  mfaType: z__namespace.string(),
-  mfaToken: z__namespace.string(),
-  expiresIn: z__namespace.number(),
-  allowedMethods: z__namespace.array(z__namespace.string())
-});
-var loginResultSchema = z__namespace.union([loginSuccessSchema, mfaChallengeSchema]);
-var mfaCodeInputSchema = z__namespace.object({
-  mfaToken: z__namespace.string(),
-  type: z__namespace.enum(["totp", "recovery_code"]),
-  code: z__namespace.string().min(1, "Required")
-});
-var mfaWebauthnInputSchema = z__namespace.object({
-  mfaToken: z__namespace.string(),
-  assertion: z__namespace.string()
-});
-var resetRequestInputSchema = z__namespace.object({
-  email: z__namespace.email()
-});
-var resetInputSchema = z__namespace.object({
-  // The single-use reset token (`kbc_pr_…`) delivered by e-mail.
-  token: z__namespace.string().min(1, "Required"),
-  newPassword: z__namespace.string().min(1, "Required"),
-  // Revoke every session after the reset. Defaults to true (the backend's own default), so callers
-  // may omit it; set false only to keep existing sessions alive. Password policy is backend-enforced.
-  revokeSessions: z__namespace.boolean().default(true)
-});
-var changeInputSchema = z__namespace.object({
-  currentPassword: z__namespace.string().min(1, "Required"),
-  newPassword: z__namespace.string().min(1, "Required"),
-  // Revoke every other session once the password changes. The schema fills in `true` on parse, so
-  // the SDK always sends the field (matching the backend's own default); callers may omit it. Set
-  // false only to keep the other sessions alive.
-  revokeOtherSessions: z__namespace.boolean().default(true)
-});
-
-// src/clients/auth/device/device.ts
-var createDevice = (client) => {
-  const create = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/device", { body }, { signal });
-    return data;
-  };
-  const approve = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/device/approve", { body }, { signal });
-    return data;
-  };
-  const getToken = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/device/token", { body }, { signal });
-    return data;
-  };
-  return { create, approve, getToken };
-};
-
-// src/clients/auth/login/login.ts
-var createLogin = (client) => {
-  const _login = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/login", { body }, { signal });
-    return data;
-  };
-  const withPassword = async (input, signal) => {
-    const { email: email3, password } = loginInputSchema.parse(input);
-    const data = await _login({ grantType: "password", email: email3, password }, signal);
-    return loginResultSchema.parse(data);
-  };
-  const withOidc = async (input, signal) => {
-    const { grantType, idToken } = oidcInputSchema.parse(input);
-    const data = await _login({ grantType, idToken }, signal);
-    return loginResultSchema.parse(data);
-  };
-  return { withPassword, withOidc };
-};
-
-// src/clients/auth/mfa/mfa.ts
-var createMfa = (client) => {
-  const _verify = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/mfa", { body }, { signal });
-    return data;
-  };
-  const verifyWithCode = async (input, signal) => {
-    const { mfaToken, type, code } = mfaCodeInputSchema.parse(input);
-    return _verify({ mfaToken, type, code }, signal);
-  };
-  const verifyWithWebauthn = async (input, signal) => {
-    const { mfaToken, assertion } = mfaWebauthnInputSchema.parse(input);
-    return _verify({ mfaToken, type: "webauthn", assertion }, signal);
-  };
-  const regenerateRecoveryCodes = async (signal) => {
-    const { data } = await client.post("/v1/auth/mfa/recovery-codes", {}, { signal });
-    return data;
-  };
-  const totp = {
-    setup: async (signal) => {
-      const { data } = await client.post("/v1/auth/mfa/totp", {}, { signal });
-      return data;
-    },
-    verify: async (input, signal) => {
-      const { data } = await client.post("/v1/auth/mfa/totp/verify", { body: input }, { signal });
-      return data;
-    },
-    disable: async (id, signal) => {
-      await client.delete("/v1/auth/mfa/totp/{id}", { path: { id } }, { signal });
-    }
-  };
-  return { verifyWithCode, verifyWithWebauthn, regenerateRecoveryCodes, totp };
-};
-
-// src/clients/auth/password/password.ts
-var createPassword = (client) => {
-  const resetRequest = async (input, signal) => {
-    const body = resetRequestInputSchema.parse(input);
-    await client.post("/v1/auth/password/reset-request", { body }, { signal });
-  };
-  const reset = async (input, signal) => {
-    const body = resetInputSchema.parse(input);
-    await client.post("/v1/auth/password/reset", { body }, { signal });
-  };
-  const change = async (input, signal) => {
-    const body = changeInputSchema.parse(input);
-    await client.post("/v1/auth/password/change", { body }, { signal });
-  };
-  return { resetRequest, reset, change };
-};
-
-// src/clients/auth/pat/pat.ts
-var createPat = (client) => {
-  const getAll = async (signal) => {
-    const { data } = await client.get("/v1/auth/pat", {}, { signal });
-    return data;
-  };
-  const create = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/pat", { body }, { signal });
-    return data;
-  };
-  const exchange = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/pat/exchange", { body }, { signal });
-    return data;
-  };
-  const revoke = async (id, signal) => {
-    await client.delete("/v1/auth/pat/{id}", { path: { id } }, { signal });
-  };
-  return { create, exchange, revoke, getAll };
-};
-
-// src/clients/auth/pkce/pkce.ts
-var createPkce = (client) => {
-  const getToken = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/pkce/token", { body }, { signal });
-    return data;
-  };
-  return { getToken };
-};
-
-// src/clients/auth/saml/saml.ts
-var createSaml = (client) => {
-  const assert = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/saml/assert", { body }, { signal });
-    return data;
-  };
-  const initiate = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/saml/initiate", { body }, { signal });
-    return data;
-  };
-  return { assert, initiate };
-};
-
-// src/clients/auth/session/session.ts
-var createSession = (client) => {
-  const getAll = async (signal) => {
-    const { data } = await client.get("/v1/auth/sessions", {}, { signal });
-    return data;
-  };
-  const revoke = async (sessionId, signal) => {
-    await client.delete("/v1/auth/sessions/{sessionId}", { path: { sessionId } }, { signal });
-  };
-  const revokeAll = async (signal) => {
-    await client.delete("/v1/auth/sessions", {}, { signal });
-  };
-  return { getAll, revoke, revokeAll };
-};
-
-// src/clients/auth/sudo/sudo.ts
-var createSudo = (client) => {
-  const verify = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/sudo", { body }, { signal });
-    return data;
-  };
-  const challenge = async (signal) => {
-    const { data } = await client.post("/v1/auth/sudo/challenge", {}, { signal });
-    return data;
-  };
-  return { verify, challenge };
-};
-
-// src/clients/auth/token/token.ts
-var createToken = (client) => {
-  const refresh = async (refreshToken, signal) => {
-    const { data } = await client.post(
-      "/v1/auth/token/refresh",
-      { body: { refreshToken } },
-      { signal }
-    );
-    return data;
-  };
-  const introspect = async (token, signal) => {
-    const { data } = await client.get(
-      "/v1/auth/token/introspect",
-      {},
-      { signal, headers: token ? { [chunkMMOAH3EH_cjs.HttpHeader.AUTHORIZATION]: `Bearer ${token}` } : void 0 }
-    );
-    return data;
-  };
-  const revoke = async (body, signal) => {
-    await client.post("/v1/auth/token/revoke", { body }, { signal });
-  };
-  return { refresh, introspect, revoke };
-};
-
-// src/clients/auth/authClient.ts
-var createAuthClient = ({ baseUrl, middlewares }) => {
-  const client = chunkMMOAH3EH_cjs.createOpenapiFetchClient({ baseUrl, middlewares });
-  return {
-    login: createLogin(client),
-    mfa: createMfa(client),
-    password: createPassword(client),
-    saml: createSaml(client),
-    pat: createPat(client),
-    device: createDevice(client),
-    sudo: createSudo(client),
-    pkce: createPkce(client),
-    session: createSession(client),
-    token: createToken(client)
-  };
-};
-
-exports.changeInputSchema = changeInputSchema;
-exports.createAuthClient = createAuthClient;
-exports.loginInputSchema = loginInputSchema;
-exports.loginResultSchema = loginResultSchema;
-exports.loginSuccessSchema = loginSuccessSchema;
-exports.mfaChallengeSchema = mfaChallengeSchema;
-exports.mfaCodeInputSchema = mfaCodeInputSchema;
-exports.mfaWebauthnInputSchema = mfaWebauthnInputSchema;
-exports.oidcInputSchema = oidcInputSchema;
-exports.resetInputSchema = resetInputSchema;
-exports.resetRequestInputSchema = resetRequestInputSchema;
-//# sourceMappingURL=chunk-DRNOCC6W.cjs.map
-//# sourceMappingURL=chunk-DRNOCC6W.cjs.map

package/dist/chunk-DRNOCC6W.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/auth/login/schemas.ts","../src/clients/auth/mfa/schemas.ts","../src/clients/auth/password/schemas.ts","../src/clients/auth/device/device.ts","../src/clients/auth/login/login.ts","../src/clients/auth/mfa/mfa.ts","../src/clients/auth/password/password.ts","../src/clients/auth/pat/pat.ts","../src/clients/auth/pkce/pkce.ts","../src/clients/auth/saml/saml.ts","../src/clients/auth/session/session.ts","../src/clients/auth/sudo/sudo.ts","../src/clients/auth/token/token.ts","../src/clients/auth/authClient.ts"],"names":["z","z2","z3","email","HttpHeader","createOpenapiFetchClient"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAEO,IAAM,mBAAqBA,YAAA,CAAA,MAAA,CAAO;AAAA,EACvC,OAASA,YAAA,CAAA,KAAA,EAAM;AAAA,EACf,QAAA,EAAYA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU;AACxC,CAAC;AAEM,IAAM,kBAAoBA,YAAA,CAAA,MAAA,CAAO;AAAA,EACtC,SAAA,EAAaA,YAAA,CAAA,IAAA,CAAK,CAAC,QAAA,EAAU,WAAW,CAAC,CAAA;AAAA,EACzC,OAAA,EAAWA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU;AACvC,CAAC;AAKD,IAAM,aAAeA,YAAA,CAAA,MAAA,CAAO;AAAA,EAC1B,IAAMA,YAAA,CAAA,MAAA,EAAO;AAAA,EACb,OAASA,YAAA,CAAA,MAAA,EAAO;AAAA,EAChB,MAAQA,YAAA,CAAA,MAAA;AACV,CAAC,CAAA;AAIM,IAAM,qBAAuBA,YAAA,CAAA,MAAA,CAAO;AAAA,EACzC,WAAA,EAAeA,YAAA,CAAA,OAAA,CAAQ,KAAK,CAAA,CAAE,QAAQ,KAAK,CAAA;AAAA,EAC3C,aAAeA,YAAA,CAAA,MAAA,EAAO;AAAA,EACtB,cAAgBA,YAAA,CAAA,MAAA,EAAO;AAAA,EACvB,WAAaA,YAAA,CAAA,MAAA,EAAO;AAAA,EACpB,WAAaA,YAAA,CAAA,MAAA,EAAO;AAAA,EACpB,WAAaA,YAAA,CAAA,MAAA,EAAO;AAAA,EACpB,IAAA,EAAM;AACR,CAAC;AAGM,IAAM,qBAAuBA,YAAA,CAAA,MAAA,CAAO;AAAA,EACzC,WAAA,EAAeA,qBAAQ,IAAI,CAAA;AAAA,EAC3B,SAAWA,YAAA,CAAA,MAAA,EAAO;AAAA,EAClB,UAAYA,YAAA,CAAA,MAAA,EAAO;AAAA,EACnB,WAAaA,YAAA,CAAA,MAAA,EAAO;AAAA,EACpB,cAAA,EAAkBA,YAAA,CAAA,KAAA,CAAQA,YAAA,CAAA,MAAA,EAAQ;AACpC,CAAC;AAEM,IAAM,iBAAA,GAAsBA,YAAA,CAAA,KAAA,CAAM,CAAC,kBAAA,EAAoB,kBAAkB,CAAC;ACxC1E,IAAM,qBAAuBC,YAAA,CAAA,MAAA,CAAO;AAAA,EACzC,UAAYA,YAAA,CAAA,MAAA,EAAO;AAAA,EACnB,IAAA,EAAQA,YAAA,CAAA,IAAA,CAAK,CAAC,MAAA,EAAQ,eAAe,CAAC,CAAA;AAAA,EACtC,IAAA,EAAQA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU;AACpC,CAAC;AAEM,IAAM,yBAA2BA,YAAA,CAAA,MAAA,CAAO;AAAA,EAC7C,UAAYA,YAAA,CAAA,MAAA,EAAO;AAAA,EACnB,WAAaA,YAAA,CAAA,MAAA;AACf,CAAC;ACTM,IAAM,0BAA4BC,YAAA,CAAA,MAAA,CAAO;AAAA,EAC9C,OAASA,YAAA,CAAA,KAAA;AACX,CAAC;AAEM,IAAM,mBAAqBA,YAAA,CAAA,MAAA,CAAO;AAAA;AAAA,EAEvC,KAAA,EAASA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA,EACnC,WAAA,EAAeA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA,EAGzC,cAAA,EAAkBA,YAAA,CAAA,OAAA,EAAQ,CAAE,OAAA,CAAQ,IAAI;AAC1C,CAAC;AAEM,IAAM,oBAAsBA,YAAA,CAAA,MAAA,CAAO;AAAA,EACxC,eAAA,EAAmBA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA,EAC7C,WAAA,EAAeA,YAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAIzC,mBAAA,EAAuBA,YAAA,CAAA,OAAA,EAAQ,CAAE,OAAA,CAAQ,IAAI;AAC/C,CAAC;;;ACdM,IAAM,YAAA,GAAe,CAAC,MAAA,KAAmC;AAC9D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAqC,MAAA,KAAyB;AAClF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,iBAAA,EAAmB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC1E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAsC,MAAA,KAAyB;AACpF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,yBAAA,EAA2B,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAClF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAuC,MAAA,KAAyB;AACtF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,uBAAA,EAAyB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAS;AACrC,CAAA;;;ACnBO,IAAM,WAAA,GAAc,CAAC,MAAA,KAAmC;AAC7D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAiB,MAAA,KAAyB;AAC9D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,gBAAA,EAAkB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACzE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,KAAA,EAAmB,MAAA,KAAyB;AACtE,IAAA,MAAM,EAAE,KAAA,EAAAC,MAAAA,EAAO,UAAS,GAAI,gBAAA,CAAiB,MAAM,KAAK,CAAA;AAExD,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,EAAE,SAAA,EAAW,YAAY,KAAA,EAAAA,MAAAA,EAAO,QAAA,EAAS,EAAgB,MAAM,CAAA;AAGzF,IAAA,OAAO,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,KAAA,EAAkB,MAAA,KAAyB;AACjE,IAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,eAAA,CAAgB,MAAM,KAAK,CAAA;AAE1D,IAAA,MAAM,OAAO,MAAM,MAAA,CAAO,EAAE,SAAA,EAAW,OAAA,IAAwB,MAAM,CAAA;AACrE,IAAA,OAAO,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,OAAO,EAAE,cAAc,QAAA,EAAS;AAClC,CAAA;;;ACvBO,IAAM,SAAA,GAAY,CAAC,MAAA,KAAmC;AAC3D,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAqB,MAAA,KAAyB;AACnE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,cAAA,EAAgB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OAAO,KAAA,EAAqB,MAAA,KAAyB;AAC1E,IAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,MAAK,GAAI,kBAAA,CAAmB,MAAM,KAAK,CAAA;AAE/D,IAAA,OAAO,QAAQ,EAAE,QAAA,EAAU,IAAA,EAAM,IAAA,IAAyB,MAAM,CAAA;AAAA,EAClE,CAAA;AAEA,EAAA,MAAM,kBAAA,GAAqB,OAAO,KAAA,EAAyB,MAAA,KAAyB;AAClF,IAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAU,GAAI,sBAAA,CAAuB,MAAM,KAAK,CAAA;AAElE,IAAA,OAAO,QAAQ,EAAE,QAAA,EAAU,MAAM,UAAA,EAAY,SAAA,IAA8B,MAAM,CAAA;AAAA,EACnF,CAAA;AAEA,EAAA,MAAM,uBAAA,GAA0B,OAAO,MAAA,KAAyB;AAC9D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,6BAAA,EAA+B,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAKA,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,KAAA,EAAO,OAAO,MAAA,KAAyB;AACrC,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,mBAAA,EAAqB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AACtE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,KAAA,EAAuB,MAAA,KAAyB;AAC7D,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,0BAAA,EAA4B,EAAE,IAAA,EAAM,KAAA,EAAM,EAAG,EAAE,QAAQ,CAAA;AAC1F,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,OAAA,EAAS,OAAO,EAAA,EAA2B,MAAA,KAAyB;AAClE,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,wBAAA,EAA0B,EAAE,IAAA,EAAM,EAAE,EAAA,EAAG,EAAE,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,IAC5E;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,cAAA,EAAgB,kBAAA,EAAoB,uBAAA,EAAyB,IAAA,EAAK;AAC7E,CAAA;;;AC1CO,IAAM,cAAA,GAAiB,CAAC,MAAA,KAAmC;AAGhE,EAAA,MAAM,YAAA,GAAe,OAAO,KAAA,EAA0B,MAAA,KAAyB;AAC7E,IAAA,MAAM,IAAA,GAAO,uBAAA,CAAwB,KAAA,CAAM,KAAK,CAAA;AAChD,IAAA,MAAM,MAAA,CAAO,KAAK,iCAAA,EAAmC,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EAC3E,CAAA;AAIA,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,EAAmB,MAAA,KAAyB;AAG/D,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,CAAM,KAAK,CAAA;AACzC,IAAA,MAAM,MAAA,CAAO,KAAK,yBAAA,EAA2B,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EACnE,CAAA;AAKA,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,EAA4B,MAAA,KAAyB;AACzE,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,KAAA,CAAM,KAAK,CAAA;AAC1C,IAAA,MAAM,MAAA,CAAO,KAAK,0BAAA,EAA4B,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EACpE,CAAA;AAEA,EAAA,OAAO,EAAE,YAAA,EAAc,KAAA,EAAO,MAAA,EAAO;AACvC,CAAA;;;AC3BO,IAAM,SAAA,GAAY,CAAC,MAAA,KAAmC;AAC3D,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAyB;AAC7C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,cAAA,EAAgB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAqB,MAAA,KAAyB;AAClE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,cAAA,EAAgB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAwB,MAAA,KAAyB;AACvE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,uBAAA,EAAyB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,EAAA,EAAyB,MAAA,KAAyB;AACtE,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,mBAAA,EAAqB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAG,EAAE,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,EACvE,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAO;AAC5C,CAAA;;;ACrBO,IAAM,UAAA,GAAa,CAAC,MAAA,KAAmC;AAC5D,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAwB,MAAA,KAAyB;AACvE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,qBAAA,EAAuB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC9E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,QAAA,EAAS;AACpB,CAAA;;;ACPO,IAAM,UAAA,GAAa,CAAC,MAAA,KAAmC;AAC5D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAsB,MAAA,KAAyB;AACnE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,sBAAA,EAAwB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC/E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAyB,MAAA,KAAyB;AACxE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,wBAAA,EAA0B,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACjF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,QAAQ,QAAA,EAAS;AAC5B,CAAA;;;ACZO,IAAM,aAAA,GAAgB,CAAC,MAAA,KAAmC;AAC/D,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAyB;AAC7C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,mBAAA,EAAqB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AACrE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAA2C,MAAA,KAAyB;AACxF,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,+BAAA,EAAiC,EAAE,IAAA,EAAM,EAAE,SAAA,EAAU,EAAE,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,EAC1F,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,MAAA,KAAyB;AAChD,IAAA,MAAM,OAAO,MAAA,CAAO,mBAAA,EAAqB,EAAC,EAAG,EAAE,QAAQ,CAAA;AAAA,EACzD,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAU;AACrC,CAAA;;;ACfO,IAAM,UAAA,GAAa,CAAC,MAAA,KAAmC;AAC5D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAgB,MAAA,KAAyB;AAC7D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,eAAA,EAAiB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACxE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,MAAA,KAAyB;AAChD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,yBAAA,EAA2B,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC5E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAC7B,CAAA;;;ACXO,IAAM,WAAA,GAAc,CAAC,MAAA,KAAmC;AAC7D,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,EAAsB,MAAA,KAAyB;AACpE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,wBAAA;AAAA,MACA,EAAE,IAAA,EAAM,EAAE,YAAA,EAAa,EAAE;AAAA,MACzB,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAOA,EAAA,MAAM,UAAA,GAAa,OAAO,KAAA,EAAgB,MAAA,KAAyB;AACjE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,2BAAA;AAAA,MACA,EAAC;AAAA,MACD,EAAE,MAAA,EAAQ,OAAA,EAAS,KAAA,GAAQ,EAAE,CAACC,4BAAA,CAAW,aAAa,GAAG,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA,KAAO,MAAA;AAAU,KAC3F;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAuB,MAAA,KAAyB;AACpE,IAAA,MAAM,MAAA,CAAO,KAAK,uBAAA,EAAyB,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EACjE,CAAA;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,UAAA,EAAY,MAAA,EAAO;AACvC,CAAA;;;AChBO,IAAM,gBAAA,GAAmB,CAAC,EAAE,OAAA,EAAS,aAAY,KAA6B;AACnF,EAAA,MAAM,MAAA,GAASC,0CAAA,CAAgC,EAAE,OAAA,EAAS,aAAa,CAAA;AAEvE,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,YAAY,MAAM,CAAA;AAAA,IACzB,GAAA,EAAK,UAAU,MAAM,CAAA;AAAA,IACrB,QAAA,EAAU,eAAe,MAAM,CAAA;AAAA,IAC/B,IAAA,EAAM,WAAW,MAAM,CAAA;AAAA,IACvB,GAAA,EAAK,UAAU,MAAM,CAAA;AAAA,IACrB,MAAA,EAAQ,aAAa,MAAM,CAAA;AAAA,IAC3B,IAAA,EAAM,WAAW,MAAM,CAAA;AAAA,IACvB,IAAA,EAAM,WAAW,MAAM,CAAA;AAAA,IACvB,OAAA,EAAS,cAAc,MAAM,CAAA;AAAA,IAC7B,KAAA,EAAO,YAAY,MAAM;AAAA,GAC3B;AACF","file":"chunk-DRNOCC6W.cjs","sourcesContent":["import * as z from 'zod';\n\nexport const loginInputSchema = z.object({\n  email: z.email(),\n  password: z.string().min(1, 'Required'),\n});\n\nexport const oidcInputSchema = z.object({\n  grantType: z.enum(['google', 'microsoft']),\n  idToken: z.string().min(1, 'Required'),\n});\n\nexport type LoginInput = z.infer<typeof loginInputSchema>;\nexport type OidcInput = z.infer<typeof oidcInputSchema>;\n\nconst userSchema = z.object({\n  id: z.number(),\n  email: z.string(),\n  name: z.string(),\n});\n\n// Success shape. The backend omits `mfaRequired` here, so we inject a `false`\n// literal to make the outcome a discriminated union on `mfaRequired`.\nexport const loginSuccessSchema = z.object({\n  mfaRequired: z.literal(false).default(false),\n  accessToken: z.string(),\n  refreshToken: z.string(),\n  tokenType: z.string(),\n  expiresIn: z.number(),\n  sessionId: z.string(),\n  user: userSchema,\n});\n\n// MFA-challenge shape. `mfaRequired` is always true here — it is the discriminant.\nexport const mfaChallengeSchema = z.object({\n  mfaRequired: z.literal(true),\n  mfaType: z.string(),\n  mfaToken: z.string(),\n  expiresIn: z.number(),\n  allowedMethods: z.array(z.string()),\n});\n\nexport const loginResultSchema = z.union([loginSuccessSchema, mfaChallengeSchema]);\n\nexport type LoginUser = z.infer<typeof userSchema>;\nexport type LoginSuccess = z.infer<typeof loginSuccessSchema>;\nexport type LoginResult = z.infer<typeof loginResultSchema>;\n","import * as z from 'zod';\n\nexport const mfaCodeInputSchema = z.object({\n  mfaToken: z.string(),\n  type: z.enum(['totp', 'recovery_code']),\n  code: z.string().min(1, 'Required'),\n});\n\nexport const mfaWebauthnInputSchema = z.object({\n  mfaToken: z.string(),\n  assertion: z.string(),\n});\n\nexport type MfaCodeInput = z.infer<typeof mfaCodeInputSchema>;\nexport type MfaWebauthnInput = z.infer<typeof mfaWebauthnInputSchema>;\n","import * as z from 'zod';\n\nexport const resetRequestInputSchema = z.object({\n  email: z.email(),\n});\n\nexport const resetInputSchema = z.object({\n  // The single-use reset token (`kbc_pr_…`) delivered by e-mail.\n  token: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Revoke every session after the reset. Defaults to true (the backend's own default), so callers\n  // may omit it; set false only to keep existing sessions alive. Password policy is backend-enforced.\n  revokeSessions: z.boolean().default(true),\n});\n\nexport const changeInputSchema = z.object({\n  currentPassword: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Revoke every other session once the password changes. The schema fills in `true` on parse, so\n  // the SDK always sends the field (matching the backend's own default); callers may omit it. Set\n  // false only to keep the other sessions alive.\n  revokeOtherSessions: z.boolean().default(true),\n});\n\nexport type ResetRequestInput = z.infer<typeof resetRequestInputSchema>;\n// `z.input`, not `z.infer`: callers may omit `revokeSessions` (the default fills it in on parse).\nexport type ResetInput = z.input<typeof resetInputSchema>;\n// `z.input`: callers may omit `revokeOtherSessions` (the default fills it in on parse).\nexport type ChangePasswordInput = z.input<typeof changeInputSchema>;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  ApproveDeviceAuthorizationBody,\n  CreateDeviceAuthorizationBody,\n  GetDeviceAuthorizationTokenBody,\n} from './types';\n\nexport const createDevice = (client: AuthOpenApiFetchClient) => {\n  const create = async (body: CreateDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device', { body }, { signal });\n    return data;\n  };\n\n  const approve = async (body: ApproveDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/approve', { body }, { signal });\n    return data;\n  };\n\n  const getToken = async (body: GetDeviceAuthorizationTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/token', { body }, { signal });\n    return data;\n  };\n\n  return { create, approve, getToken };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { LoginInput, OidcInput } from './schemas';\nimport { loginInputSchema, loginResultSchema, oidcInputSchema } from './schemas';\nimport type { LoginBody } from './types';\n\nexport const createLogin = (client: AuthOpenApiFetchClient) => {\n  const _login = async (body: LoginBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/login', { body }, { signal });\n    return data;\n  };\n\n  const withPassword = async (input: LoginInput, signal?: AbortSignal) => {\n    const { email, password } = loginInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login({ grantType: 'password', email, password } as LoginBody, signal);\n    // Validate against our own schema — the generated response type is unreliable,\n    // and this narrows the outcome to a discriminated union on `mfaRequired`.\n    return loginResultSchema.parse(data);\n  };\n\n  const withOidc = async (input: OidcInput, signal?: AbortSignal) => {\n    const { grantType, idToken } = oidcInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login({ grantType, idToken } as LoginBody, signal);\n    return loginResultSchema.parse(data);\n  };\n\n  return { withPassword, withOidc };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { MfaCodeInput, MfaWebauthnInput } from './schemas';\nimport { mfaCodeInputSchema, mfaWebauthnInputSchema } from './schemas';\nimport type { DisableTotpPath, TotpVerifyBody, VerifyMfaBody } from './types';\n\nexport const createMfa = (client: AuthOpenApiFetchClient) => {\n  const _verify = async (body: VerifyMfaBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa', { body }, { signal });\n    return data;\n  };\n\n  const verifyWithCode = async (input: MfaCodeInput, signal?: AbortSignal) => {\n    const { mfaToken, type, code } = mfaCodeInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type, code } as VerifyMfaBody, signal);\n  };\n\n  const verifyWithWebauthn = async (input: MfaWebauthnInput, signal?: AbortSignal) => {\n    const { mfaToken, assertion } = mfaWebauthnInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type: 'webauthn', assertion } as VerifyMfaBody, signal);\n  };\n\n  const regenerateRecoveryCodes = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa/recovery-codes', {}, { signal });\n    return data;\n  };\n\n  // TOTP enrollment for the signed-in user (account MFA management). `setup` returns the shared\n  // secret + `otpauthUri` to render as a QR; `verify` confirms the first code and hands back the\n  // one-time recovery codes plus the new factor `id`; `disable` removes a factor by that `id`.\n  const totp = {\n    setup: async (signal?: AbortSignal) => {\n      const { data } = await client.post('/v1/auth/mfa/totp', {}, { signal });\n      return data;\n    },\n    verify: async (input: TotpVerifyBody, signal?: AbortSignal) => {\n      const { data } = await client.post('/v1/auth/mfa/totp/verify', { body: input }, { signal });\n      return data;\n    },\n    disable: async (id: DisableTotpPath['id'], signal?: AbortSignal) => {\n      await client.delete('/v1/auth/mfa/totp/{id}', { path: { id } }, { signal });\n    },\n  };\n\n  return { verifyWithCode, verifyWithWebauthn, regenerateRecoveryCodes, totp };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { ChangePasswordInput, ResetInput, ResetRequestInput } from './schemas';\nimport { changeInputSchema, resetInputSchema, resetRequestInputSchema } from './schemas';\n\nexport const createPassword = (client: AuthOpenApiFetchClient) => {\n  // Fire-and-forget from the caller's view: the backend always answers 202 and reveals nothing about\n  // whether the account exists. Resolves on 202; rejects on 429 (rate limited) or 400.\n  const resetRequest = async (input: ResetRequestInput, signal?: AbortSignal) => {\n    const body = resetRequestInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset-request', { body }, { signal });\n  };\n\n  // Applies the new password for the given reset token. Resolves on 204; rejects on 400 (invalid or\n  // expired token, or a password that violates the policy).\n  const reset = async (input: ResetInput, signal?: AbortSignal) => {\n    // `revokeSessions` is defaulted by the schema, so the parsed body always carries all three\n    // fields the endpoint requires — no field omission, no type assertion.\n    const body = resetInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset', { body }, { signal });\n  };\n\n  // Changes the password for the signed-in user (bearer session). Resolves on 204; rejects on 400\n  // (wrong current password, or a new password that violates the policy). Password policy is\n  // backend-enforced.\n  const change = async (input: ChangePasswordInput, signal?: AbortSignal) => {\n    const body = changeInputSchema.parse(input);\n    await client.post('/v1/auth/password/change', { body }, { signal });\n  };\n\n  return { resetRequest, reset, change };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { CreatePatBody, ExchangePatBody, RevokePatPath } from './types';\n\nexport const createPat = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/pat', {}, { signal });\n    return data;\n  };\n\n  const create = async (body: CreatePatBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pat', { body }, { signal });\n    return data;\n  };\n\n  const exchange = async (body?: ExchangePatBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pat/exchange', { body }, { signal });\n    return data;\n  };\n\n  const revoke = async (id: RevokePatPath['id'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/pat/{id}', { path: { id } }, { signal });\n  };\n\n  return { create, exchange, revoke, getAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { GetPkceTokenBody } from './types';\n\nexport const createPkce = (client: AuthOpenApiFetchClient) => {\n  const getToken = async (body: GetPkceTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pkce/token', { body }, { signal });\n    return data;\n  };\n\n  return { getToken };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { AssertSamlBody, InitiateSamlBody } from './types';\n\nexport const createSaml = (client: AuthOpenApiFetchClient) => {\n  const assert = async (body: AssertSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/assert', { body }, { signal });\n    return data;\n  };\n\n  const initiate = async (body?: InitiateSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/initiate', { body }, { signal });\n    return data;\n  };\n\n  return { assert, initiate };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RevokeSessionPath } from './types';\n\nexport const createSession = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/sessions', {}, { signal });\n    return data;\n  };\n\n  const revoke = async (sessionId: RevokeSessionPath['sessionId'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions/{sessionId}', { path: { sessionId } }, { signal });\n  };\n\n  const revokeAll = async (signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions', {}, { signal });\n  };\n\n  return { getAll, revoke, revokeAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { SudoBody } from './types';\n\nexport const createSudo = (client: AuthOpenApiFetchClient) => {\n  const verify = async (body: SudoBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/sudo', { body }, { signal });\n    return data;\n  };\n\n  const challenge = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/sudo/challenge', {}, { signal });\n    return data;\n  };\n\n  return { verify, challenge };\n};\n","import { HttpHeader } from '../../../fetchClient';\nimport type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RevokeTokenBody } from './types';\n\nexport const createToken = (client: AuthOpenApiFetchClient) => {\n  const refresh = async (refreshToken: string, signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/v1/auth/token/refresh',\n      { body: { refreshToken } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /**\n   * Introspects an authenticated session token.\n   *\n   * @param token - Optional token to introspect (`Authorization: Bearer`); a middleware-set header wins.\n   */\n  const introspect = async (token?: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/v1/auth/token/introspect',\n      {},\n      { signal, headers: token ? { [HttpHeader.AUTHORIZATION]: `Bearer ${token}` } : undefined },\n    );\n    return data;\n  };\n\n  const revoke = async (body: RevokeTokenBody, signal?: AbortSignal) => {\n    await client.post('/v1/auth/token/revoke', { body }, { signal });\n  };\n\n  return { refresh, introspect, revoke };\n};\n","import { createOpenapiFetchClient } from '../../fetchClient';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport { createDevice } from './device';\nimport { createLogin } from './login';\nimport { createMfa } from './mfa';\nimport { createPassword } from './password';\nimport { createPat } from './pat';\nimport { createPkce } from './pkce';\nimport { createSaml } from './saml';\nimport { createSession } from './session';\nimport { createSudo } from './sudo';\nimport { createToken } from './token';\n\nexport type AuthClientInitOptions = Omit<ClientInitOptions, 'auth'>;\n\nexport type AuthOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;\n\nexport const createAuthClient = ({ baseUrl, middlewares }: AuthClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({ baseUrl, middlewares });\n\n  return {\n    login: createLogin(client),\n    mfa: createMfa(client),\n    password: createPassword(client),\n    saml: createSaml(client),\n    pat: createPat(client),\n    device: createDevice(client),\n    sudo: createSudo(client),\n    pkce: createPkce(client),\n    session: createSession(client),\n    token: createToken(client),\n  };\n};\n"]}

package/dist/chunk-EDX5D6UY.js

@@ -1,14 +0,0 @@
-import { KeboolaHttpHeader, HttpHeader } from './chunk-XHDYLUM4.js';
-
-// src/clients/auth.ts
-var createAuthHeaders = (auth) => {
-  if (auth.type === "sapi-token") return { [KeboolaHttpHeader.STORAGE_API_TOKEN]: auth.token };
-  return {
-    [HttpHeader.AUTHORIZATION]: `Bearer ${auth.token}`,
-    [KeboolaHttpHeader.PROJECT_ID]: auth.projectId.toString()
-  };
-};
-
-export { createAuthHeaders };
-//# sourceMappingURL=chunk-EDX5D6UY.js.map
-//# sourceMappingURL=chunk-EDX5D6UY.js.map

package/dist/chunk-EWMXK3EI.cjs

@@ -1,8 +0,0 @@
-'use strict';
-
-// src/utils/generateUUID.ts
-var generateUUID = () => crypto.randomUUID();
-
-exports.generateUUID = generateUUID;
-//# sourceMappingURL=chunk-EWMXK3EI.cjs.map
-//# sourceMappingURL=chunk-EWMXK3EI.cjs.map

package/dist/chunk-EWMXK3EI.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/generateUUID.ts"],"names":[],"mappings":";;;AAAO,IAAM,YAAA,GAAe,MAAM,MAAA,CAAO,UAAA","file":"chunk-EWMXK3EI.cjs","sourcesContent":["export const generateUUID = () => crypto.randomUUID();\n"]}

package/dist/chunk-EYIPM2XB.cjs

@@ -1,82 +0,0 @@
-'use strict';
-
-var chunkFMS5PNM2_cjs = require('./chunk-FMS5PNM2.cjs');
-
-// src/sdks/vault/helpers.ts
-var isVariableEncryptionRequired = (variable) => !!variable.flags?.includes("encrypted");
-var isVariableOauth = (variable) => !!variable.flags?.includes("oauthCredentialsId");
-var isSameAttributes = (a, b) => {
-  const aKeys = Object.keys(a);
-  const bKeys = Object.keys(b);
-  if (aKeys.length !== bKeys.length) return false;
-  return aKeys.every((k) => a[k] === b[k]);
-};
-var isSameVariable = (a, b) => a.key === b.key && isSameAttributes(a.attributes, b.attributes);
-var VAULT_REF_RE = /^\{\{ vault\.(.+) \}\}$/;
-var vaultRef = {
-  encode: (key) => `{{ vault.${key} }}`,
-  decode: (s) => s.match(VAULT_REF_RE)?.[1] ?? null,
-  isMatch: (s) => VAULT_REF_RE.test(s)
-};
-var partitionByOauth = (variables) => variables.reduce(
-  (acc, variable) => {
-    if (isVariableOauth(variable)) return { ...acc, oauth: [...acc.oauth, variable] };
-    return { ...acc, regular: [...acc.regular, variable] };
-  },
-  { oauth: [], regular: [] }
-);
-
-// src/sdks/vault/vaultSdk.ts
-var resolveBranchType = (variable, defaultBranchId) => {
-  const branchId = variable.attributes?.branchId;
-  if (!branchId) return null;
-  return branchId === defaultBranchId ? "default" : "dev";
-};
-var stripEmptyOptionals = (body) => {
-  const { group, attributes, ...rest } = body;
-  const { branchId, ...restAttrs } = attributes ?? {};
-  return {
-    ...rest,
-    ...group ? { group } : {},
-    attributes: branchId ? { ...restAttrs, branchId } : restAttrs
-  };
-};
-var createVaultSdk = ({ vaultClient, encryptionClient }) => {
-  const createVariable = async (variable, encryption) => {
-    const body = stripEmptyOptionals(variable);
-    const encryptedValue = isVariableEncryptionRequired(body) ? await encryptionClient.encrypt({
-      projectId: encryption.projectId,
-      data: body.value,
-      branchType: resolveBranchType(body, encryption.defaultBranchId)
-    }) : body.value;
-    return vaultClient.createVariable({ ...body, value: encryptedValue });
-  };
-  const deleteVariable = async (variable, signal) => {
-    if (!variable.hash) throw new Error("Variable hash is missing");
-    await vaultClient.deleteVariable(variable.hash, signal);
-  };
-  const updateVariable = async (variable, encryption, signal) => {
-    await deleteVariable(variable, signal);
-    return createVariable(variable, encryption);
-  };
-  const setVariablesGroup = async (group, variables, encryption, signal) => chunkFMS5PNM2_cjs.concurrent({
-    items: variables,
-    process: (variable) => updateVariable({ ...variable, group }, encryption, signal),
-    concurrency: 3
-  });
-  return {
-    createVariable,
-    deleteVariable,
-    updateVariable,
-    setVariablesGroup
-  };
-};
-
-exports.createVaultSdk = createVaultSdk;
-exports.isSameVariable = isSameVariable;
-exports.isVariableEncryptionRequired = isVariableEncryptionRequired;
-exports.isVariableOauth = isVariableOauth;
-exports.partitionByOauth = partitionByOauth;
-exports.vaultRef = vaultRef;
-//# sourceMappingURL=chunk-EYIPM2XB.cjs.map
-//# sourceMappingURL=chunk-EYIPM2XB.cjs.map

package/dist/chunk-EYIPM2XB.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdks/vault/helpers.ts","../src/sdks/vault/vaultSdk.ts"],"names":["concurrent"],"mappings":";;;;;AAEO,IAAM,4BAAA,GAA+B,CAAC,QAAA,KAC3C,CAAC,CAAC,QAAA,CAAS,KAAA,EAAO,SAAS,WAAW;AAEjC,IAAM,eAAA,GAAkB,CAAC,QAAA,KAC9B,CAAC,CAAC,QAAA,CAAS,KAAA,EAAO,SAAS,oBAAoB;AAEjD,IAAM,gBAAA,GAAmB,CACvB,CAAA,EACA,CAAA,KACY;AACZ,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AAC3B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AAC3B,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,KAAA,CAAM,MAAA,EAAQ,OAAO,KAAA;AAC1C,EAAA,OAAO,KAAA,CAAM,MAAM,CAAC,CAAA,KAAM,EAAE,CAAC,CAAA,KAAM,CAAA,CAAE,CAAC,CAAC,CAAA;AACzC,CAAA;AAEO,IAAM,cAAA,GAAiB,CAAC,CAAA,EAAgB,CAAA,KAC7C,CAAA,CAAE,GAAA,KAAQ,CAAA,CAAE,GAAA,IAAO,gBAAA,CAAiB,CAAA,CAAE,UAAA,EAAY,CAAA,CAAE,UAAU;AAEhE,IAAM,YAAA,GAAe,yBAAA;AAEd,IAAM,QAAA,GAAW;AAAA,EACtB,MAAA,EAAQ,CAAC,GAAA,KAAwB,CAAA,SAAA,EAAY,GAAG,CAAA,GAAA,CAAA;AAAA,EAChD,MAAA,EAAQ,CAAC,CAAA,KAA6B,CAAA,CAAE,MAAM,YAAY,CAAA,GAAI,CAAC,CAAA,IAAK,IAAA;AAAA,EACpE,OAAA,EAAS,CAAC,CAAA,KAAuB,YAAA,CAAa,KAAK,CAAC;AACtD;AAEO,IAAM,gBAAA,GAAmB,CAC9B,SAAA,KAEA,SAAA,CAAU,MAAA;AAAA,EACR,CAAC,KAAK,QAAA,KAAa;AACjB,IAAA,IAAI,eAAA,CAAgB,QAAQ,CAAA,EAAG,OAAO,EAAE,GAAG,GAAA,EAAK,KAAA,EAAO,CAAC,GAAG,GAAA,CAAI,KAAA,EAAO,QAAQ,CAAA,EAAE;AAChF,IAAA,OAAO,EAAE,GAAG,GAAA,EAAK,OAAA,EAAS,CAAC,GAAG,GAAA,CAAI,OAAA,EAAS,QAAQ,CAAA,EAAE;AAAA,EACvD,CAAA;AAAA,EACA,EAAE,KAAA,EAAO,EAAC,EAAG,OAAA,EAAS,EAAC;AACzB;;;ACvBF,IAAM,iBAAA,GAAoB,CACxB,QAAA,EACA,eAAA,KAC+B;AAC/B,EAAA,MAAM,QAAA,GAAW,SAAS,UAAA,EAAY,QAAA;AACtC,EAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AACtB,EAAA,OAAO,QAAA,KAAa,kBAAkB,SAAA,GAAY,KAAA;AACpD,CAAA;AAQA,IAAM,mBAAA,GAAsB,CAAC,IAAA,KAAiD;AAC5E,EAAA,MAAM,EAAE,KAAA,EAAO,UAAA,EAAY,GAAG,MAAK,GAAI,IAAA;AACvC,EAAA,MAAM,EAAE,QAAA,EAAU,GAAG,SAAA,EAAU,GAAI,cAAc,EAAC;AAClD,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU,EAAC;AAAA,IACzB,YAAY,QAAA,GAAW,EAAE,GAAG,SAAA,EAAW,UAAS,GAAI;AAAA,GACtD;AACF,CAAA;AAEO,IAAM,cAAA,GAAiB,CAAC,EAAE,WAAA,EAAa,kBAAiB,KAAe;AAC5E,EAAA,MAAM,cAAA,GAAiB,OAAO,QAAA,EAA8B,UAAA,KAA8B;AACxF,IAAA,MAAM,IAAA,GAAO,oBAAoB,QAAQ,CAAA;AAEzC,IAAA,MAAM,iBAAiB,4BAAA,CAA6B,IAAI,CAAA,GACpD,MAAM,iBAAiB,OAAA,CAAQ;AAAA,MAC7B,WAAW,UAAA,CAAW,SAAA;AAAA,MACtB,MAAM,IAAA,CAAK,KAAA;AAAA,MACX,UAAA,EAAY,iBAAA,CAAkB,IAAA,EAAM,UAAA,CAAW,eAAe;AAAA,KAC/D,IACD,IAAA,CAAK,KAAA;AAET,IAAA,OAAO,YAAY,cAAA,CAAe,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,gBAAgB,CAAA;AAAA,EACtE,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OAAO,QAAA,EAA4B,MAAA,KAAyB;AACjF,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,EAAM,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC9D,IAAA,MAAM,WAAA,CAAY,cAAA,CAAe,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AAAA,EACxD,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OACrB,QAAA,EACA,UAAA,EACA,MAAA,KACG;AACH,IAAA,MAAM,cAAA,CAAe,UAAU,MAAM,CAAA;AACrC,IAAA,OAAO,cAAA,CAAe,UAAU,UAAU,CAAA;AAAA,EAC5C,CAAA;AAEA,EAAA,MAAM,oBAAoB,OACxB,KAAA,EACA,SAAA,EACA,UAAA,EACA,WAEAA,4BAAA,CAAW;AAAA,IACT,KAAA,EAAO,SAAA;AAAA,IACP,OAAA,EAAS,CAAC,QAAA,KAAa,cAAA,CAAe,EAAE,GAAG,QAAA,EAAU,KAAA,EAAM,EAAG,UAAA,EAAY,MAAM,CAAA;AAAA,IAChF,WAAA,EAAa;AAAA,GACd,CAAA;AAEH,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,cAAA;AAAA,IACA,cAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-EYIPM2XB.cjs","sourcesContent":["import type { AnyVariable, CreateVariableBody } from '../../clients/vault/types';\n\nexport const isVariableEncryptionRequired = (variable: AnyVariable): boolean =>\n  !!variable.flags?.includes('encrypted');\n\nexport const isVariableOauth = (variable: AnyVariable): boolean =>\n  !!variable.flags?.includes('oauthCredentialsId');\n\nconst isSameAttributes = (\n  a: CreateVariableBody['attributes'],\n  b: CreateVariableBody['attributes'],\n): boolean => {\n  const aKeys = Object.keys(a);\n  const bKeys = Object.keys(b);\n  if (aKeys.length !== bKeys.length) return false;\n  return aKeys.every((k) => a[k] === b[k]);\n};\n\nexport const isSameVariable = (a: AnyVariable, b: AnyVariable): boolean =>\n  a.key === b.key && isSameAttributes(a.attributes, b.attributes);\n\nconst VAULT_REF_RE = /^\\{\\{ vault\\.(.+) \\}\\}$/;\n\nexport const vaultRef = {\n  encode: (key: string): string => `{{ vault.${key} }}`,\n  decode: (s: string): string | null => s.match(VAULT_REF_RE)?.[1] ?? null,\n  isMatch: (s: string): boolean => VAULT_REF_RE.test(s),\n};\n\nexport const partitionByOauth = <T extends AnyVariable>(\n  variables: T[],\n): { oauth: T[]; regular: T[] } =>\n  variables.reduce<{ oauth: T[]; regular: T[] }>(\n    (acc, variable) => {\n      if (isVariableOauth(variable)) return { ...acc, oauth: [...acc.oauth, variable] };\n      return { ...acc, regular: [...acc.regular, variable] };\n    },\n    { oauth: [], regular: [] },\n  );\n","import type { EncryptQuery } from '../../clients/encryption/types';\nimport type { CreateVariableBody, VariableWithHash } from '../../clients/vault/types';\nimport { concurrent } from '../../utils';\n\nimport { isVariableEncryptionRequired } from './helpers';\nimport type { EncryptionClient, EncryptionCtx, VaultClient } from './types';\n\ntype Options = {\n  vaultClient: VaultClient;\n  encryptionClient: EncryptionClient;\n};\n\n// branchType is a property of each variable's own branchId, not of the batch — resolving it\n// here (rather than letting callers pre-compute one value) keeps a group write correct when it\n// spans branch scopes.\nconst resolveBranchType = (\n  variable: CreateVariableBody,\n  defaultBranchId: string,\n): EncryptQuery['branchType'] => {\n  const branchId = variable.attributes?.branchId;\n  if (!branchId) return null;\n  return branchId === defaultBranchId ? 'default' : 'dev';\n};\n\n// The vault API rejects optional fields when they're present as empty strings — `group: ''`\n// and `attributes.branchId: ''` both 400 the request. The strict thing for an SDK to do is\n// throw and force callers to clean their input at the edge. We tolerate empties only because\n// kbc-ui's form state defaults un-filled text inputs to '' and the cost of fixing every form\n// submit to normalize before calling is too high right now. Remove this helper once the\n// caller side stops emitting empties — the SDK should ideally be strict about its inputs.\nconst stripEmptyOptionals = (body: CreateVariableBody): CreateVariableBody => {\n  const { group, attributes, ...rest } = body;\n  const { branchId, ...restAttrs } = attributes ?? {};\n  return {\n    ...rest,\n    ...(group ? { group } : {}),\n    attributes: branchId ? { ...restAttrs, branchId } : restAttrs,\n  };\n};\n\nexport const createVaultSdk = ({ vaultClient, encryptionClient }: Options) => {\n  const createVariable = async (variable: CreateVariableBody, encryption: EncryptionCtx) => {\n    const body = stripEmptyOptionals(variable);\n\n    const encryptedValue = isVariableEncryptionRequired(body)\n      ? await encryptionClient.encrypt({\n          projectId: encryption.projectId,\n          data: body.value,\n          branchType: resolveBranchType(body, encryption.defaultBranchId),\n        })\n      : body.value;\n\n    return vaultClient.createVariable({ ...body, value: encryptedValue });\n  };\n\n  const deleteVariable = async (variable: VariableWithHash, signal?: AbortSignal) => {\n    if (!variable.hash) throw new Error('Variable hash is missing');\n    await vaultClient.deleteVariable(variable.hash, signal);\n  };\n\n  const updateVariable = async (\n    variable: VariableWithHash,\n    encryption: EncryptionCtx,\n    signal?: AbortSignal,\n  ) => {\n    await deleteVariable(variable, signal);\n    return createVariable(variable, encryption);\n  };\n\n  const setVariablesGroup = async (\n    group: string,\n    variables: VariableWithHash[],\n    encryption: EncryptionCtx,\n    signal?: AbortSignal,\n  ) =>\n    concurrent({\n      items: variables,\n      process: (variable) => updateVariable({ ...variable, group }, encryption, signal),\n      concurrency: 3,\n    });\n\n  return {\n    createVariable,\n    deleteVariable,\n    updateVariable,\n    setVariablesGroup,\n  };\n};\n"]}