@keboola/api-client 27.0.0 → 29.0.0

package/dist/chunk-62LG5KPI.js

@@ -1,285 +0,0 @@
-import { createOpenapiFetchClient, createGenericFetchClient, HttpHeader } from './chunk-2BQBKU6E.js';
-import * as z from 'zod';
-
-var loginInputSchema = z.object({
-  email: z.email(),
-  password: z.string().min(1, "Required")
-});
-var oidcInputSchema = z.object({
-  grantType: z.enum(["google", "microsoft"]),
-  idToken: z.string().min(1, "Required")
-});
-var userSchema = z.object({
-  id: z.number(),
-  email: z.string(),
-  name: z.string()
-});
-var loginSuccessSchema = z.object({
-  mfaRequired: z.literal(false).default(false),
-  accessToken: z.string(),
-  refreshToken: z.string(),
-  tokenType: z.string(),
-  expiresIn: z.number(),
-  sessionId: z.string(),
-  user: userSchema
-});
-var mfaChallengeSchema = z.object({
-  mfaRequired: z.literal(true),
-  mfaType: z.string(),
-  mfaToken: z.string(),
-  expiresIn: z.number(),
-  allowedMethods: z.array(z.string())
-});
-var loginResultSchema = z.union([loginSuccessSchema, mfaChallengeSchema]);
-var mfaCodeInputSchema = z.object({
-  mfaToken: z.string(),
-  type: z.enum(["totp", "recovery_code"]),
-  code: z.string().min(1, "Required")
-});
-var mfaWebauthnInputSchema = z.object({
-  mfaToken: z.string(),
-  assertion: z.string()
-});
-var totpVerifyInputSchema = z.object({
-  code: z.string().min(1, "Required"),
-  // Optional in the spec, but `openapi-typescript` emits every `default`-bearing property as
-  // required — the schema fills in the backend's own default so callers may still omit it. Set true
-  // to sign the admin out everywhere else as part of enrolling.
-  revokeOtherSessions: z.boolean().default(false)
-});
-var resetRequestInputSchema = z.object({
-  email: z.email()
-});
-var resetInputSchema = z.object({
-  // The single-use reset token (`kbc_pr_…`) delivered by e-mail.
-  token: z.string().min(1, "Required"),
-  newPassword: z.string().min(1, "Required"),
-  // Revoke every session after the reset. Defaults to true (the backend's own default), so callers
-  // may omit it; set false only to keep existing sessions alive. Password policy is backend-enforced.
-  revokeSessions: z.boolean().default(true)
-});
-var changeInputSchema = z.object({
-  currentPassword: z.string().min(1, "Required"),
-  newPassword: z.string().min(1, "Required"),
-  // Revoke every other session once the password changes. The schema fills in `true` on parse, so
-  // the SDK always sends the field (matching the backend's own default); callers may omit it. Set
-  // false only to keep the other sessions alive.
-  revokeOtherSessions: z.boolean().default(true)
-});
-
-// src/clients/auth/device/device.ts
-var createDevice = (client) => {
-  const create = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/device", { body }, { signal });
-    return data;
-  };
-  const approve = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/device/approve", { body }, { signal });
-    return data;
-  };
-  const getToken = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/device/token", { body }, { signal });
-    return data;
-  };
-  return { create, approve, getToken };
-};
-
-// src/clients/auth/login/login.ts
-var createLogin = (client) => {
-  const _login = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/login", { body }, { signal });
-    return data;
-  };
-  const withPassword = async (input, signal) => {
-    const { email: email3, password } = loginInputSchema.parse(input);
-    const data = await _login({ grantType: "password", email: email3, password }, signal);
-    return loginResultSchema.parse(data);
-  };
-  const withOidc = async (input, signal) => {
-    const { grantType, idToken } = oidcInputSchema.parse(input);
-    const data = await _login({ grantType, idToken }, signal);
-    return loginResultSchema.parse(data);
-  };
-  const methods = async (signal) => {
-    const { data } = await client.get("/v1/auth/methods", {}, { signal });
-    return data;
-  };
-  return { withPassword, withOidc, methods };
-};
-
-// src/clients/auth/mfa/mfa.ts
-var createMfa = (client) => {
-  const _verify = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/mfa", { body }, { signal });
-    return data;
-  };
-  const verifyWithCode = async (input, signal) => {
-    const { mfaToken, type, code } = mfaCodeInputSchema.parse(input);
-    return _verify({ mfaToken, type, code }, signal);
-  };
-  const verifyWithWebauthn = async (input, signal) => {
-    const { mfaToken, assertion } = mfaWebauthnInputSchema.parse(input);
-    return _verify({ mfaToken, type: "webauthn", assertion }, signal);
-  };
-  const regenerateRecoveryCodes = async (signal) => {
-    const { data } = await client.post("/v1/auth/mfa/recovery-codes", {}, { signal });
-    return data;
-  };
-  const totp = {
-    setup: async (signal) => {
-      const { data } = await client.post("/v1/auth/mfa/totp", {}, { signal });
-      return data;
-    },
-    verify: async (input, signal) => {
-      const body = totpVerifyInputSchema.parse(input);
-      const { data } = await client.post("/v1/auth/mfa/totp/verify", { body }, { signal });
-      return data;
-    },
-    disable: async (id, signal) => {
-      await client.delete("/v1/auth/mfa/totp/{id}", { path: { id } }, { signal });
-    }
-  };
-  return { verifyWithCode, verifyWithWebauthn, regenerateRecoveryCodes, totp };
-};
-
-// src/clients/auth/password/password.ts
-var createPassword = (client) => {
-  const resetRequest = async (input, signal) => {
-    const body = resetRequestInputSchema.parse(input);
-    await client.post("/v1/auth/password/reset-request", { body }, { signal });
-  };
-  const reset = async (input, signal) => {
-    const body = resetInputSchema.parse(input);
-    await client.post("/v1/auth/password/reset", { body }, { signal });
-  };
-  const change = async (input, signal) => {
-    const body = changeInputSchema.parse(input);
-    await client.post("/v1/auth/password/change", { body }, { signal });
-  };
-  return { resetRequest, reset, change };
-};
-
-// src/clients/auth/pat/pat.ts
-var createPat = (client) => {
-  const getAll = async (signal) => {
-    const { data } = await client.get("/v1/auth/pat", {}, { signal });
-    return data;
-  };
-  const create = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/pat", { body }, { signal });
-    return data;
-  };
-  const exchange = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/pat/exchange", { body }, { signal });
-    return data;
-  };
-  const revoke = async (id, signal) => {
-    await client.delete("/v1/auth/pat/{id}", { path: { id } }, { signal });
-  };
-  return { create, exchange, revoke, getAll };
-};
-
-// src/clients/auth/pkce/pkce.ts
-var createPkce = (client) => {
-  const getToken = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/pkce/token", { body }, { signal });
-    return data;
-  };
-  return { getToken };
-};
-
-// src/clients/auth/saml/saml.ts
-var createSaml = (client) => {
-  const assert = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/saml/assert", { body }, { signal });
-    return data;
-  };
-  const initiate = async (body, signal) => {
-    const { data } = await client.post("/v1/auth/saml/initiate", { body }, { signal });
-    return data;
-  };
-  return { assert, initiate };
-};
-
-// src/clients/auth/session/session.ts
-var createSession = (client) => {
-  const getAll = async (signal) => {
-    const { data } = await client.get("/v1/auth/sessions", {}, { signal });
-    return data;
-  };
-  const revoke = async (sessionId, signal) => {
-    await client.delete("/v1/auth/sessions/{sessionId}", { path: { sessionId } }, { signal });
-  };
-  const revokeAll = async (signal) => {
-    await client.delete("/v1/auth/sessions", {}, { signal });
-  };
-  return { getAll, revoke, revokeAll };
-};
-
-// src/clients/auth/sudo/sudo.ts
-var createSudo = (client) => {
-  const verify = async (body, signal) => {
-    const { data } = await client.post(
-      "/v1/auth/sudo",
-      { body },
-      { signal }
-    );
-    return data;
-  };
-  const challenge = async (signal) => {
-    const { data } = await client.post("/v1/auth/sudo/challenge", {}, { signal });
-    return data;
-  };
-  return { verify, challenge };
-};
-
-// src/clients/auth/token/token.ts
-var createToken = (client) => {
-  const refresh = async (refreshToken, signal) => {
-    const { data } = await client.post(
-      "/v1/auth/token/refresh",
-      { body: { refreshToken } },
-      { signal }
-    );
-    return data;
-  };
-  const introspect = async (token, signal) => {
-    const { data } = await client.get(
-      "/v1/auth/token/introspect",
-      {},
-      { signal, headers: token ? { [HttpHeader.AUTHORIZATION]: `Bearer ${token}` } : void 0 }
-    );
-    return data;
-  };
-  const revoke = async (body, signal) => {
-    await client.post("/v1/auth/token/revoke", { body }, { signal });
-  };
-  return { refresh, introspect, revoke };
-};
-
-// src/clients/auth/authClient.ts
-var createAuthClient = ({ baseUrl, middlewares }) => {
-  const client = createOpenapiFetchClient({ baseUrl, middlewares });
-  const genericClient = createGenericFetchClient({ baseUrl, middlewares });
-  const healthCheck = async (signal) => {
-    const { data } = await genericClient.get("/health-check", {}, { signal });
-    return data;
-  };
-  return {
-    healthCheck,
-    login: createLogin(client),
-    mfa: createMfa(client),
-    password: createPassword(client),
-    saml: createSaml(client),
-    pat: createPat(client),
-    device: createDevice(client),
-    sudo: createSudo(client),
-    pkce: createPkce(client),
-    session: createSession(client),
-    token: createToken(client)
-  };
-};
-
-export { changeInputSchema, createAuthClient, loginInputSchema, loginResultSchema, loginSuccessSchema, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema, resetInputSchema, resetRequestInputSchema, totpVerifyInputSchema };
-//# sourceMappingURL=chunk-62LG5KPI.js.map
-//# sourceMappingURL=chunk-62LG5KPI.js.map

package/dist/chunk-62LG5KPI.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/auth/login/schemas.ts","../src/clients/auth/mfa/schemas.ts","../src/clients/auth/password/schemas.ts","../src/clients/auth/device/device.ts","../src/clients/auth/login/login.ts","../src/clients/auth/mfa/mfa.ts","../src/clients/auth/password/password.ts","../src/clients/auth/pat/pat.ts","../src/clients/auth/pkce/pkce.ts","../src/clients/auth/saml/saml.ts","../src/clients/auth/session/session.ts","../src/clients/auth/sudo/sudo.ts","../src/clients/auth/token/token.ts","../src/clients/auth/authClient.ts"],"names":["z2","z3","email"],"mappings":";;;AAEO,IAAM,mBAAqB,CAAA,CAAA,MAAA,CAAO;AAAA,EACvC,OAAS,CAAA,CAAA,KAAA,EAAM;AAAA,EACf,QAAA,EAAY,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU;AACxC,CAAC;AAEM,IAAM,kBAAoB,CAAA,CAAA,MAAA,CAAO;AAAA,EACtC,SAAA,EAAa,CAAA,CAAA,IAAA,CAAK,CAAC,QAAA,EAAU,WAAW,CAAC,CAAA;AAAA,EACzC,OAAA,EAAW,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU;AACvC,CAAC;AAKD,IAAM,aAAe,CAAA,CAAA,MAAA,CAAO;AAAA,EAC1B,IAAM,CAAA,CAAA,MAAA,EAAO;AAAA,EACb,OAAS,CAAA,CAAA,MAAA,EAAO;AAAA,EAChB,MAAQ,CAAA,CAAA,MAAA;AACV,CAAC,CAAA;AAIM,IAAM,qBAAuB,CAAA,CAAA,MAAA,CAAO;AAAA,EACzC,WAAA,EAAe,CAAA,CAAA,OAAA,CAAQ,KAAK,CAAA,CAAE,QAAQ,KAAK,CAAA;AAAA,EAC3C,aAAe,CAAA,CAAA,MAAA,EAAO;AAAA,EACtB,cAAgB,CAAA,CAAA,MAAA,EAAO;AAAA,EACvB,WAAa,CAAA,CAAA,MAAA,EAAO;AAAA,EACpB,WAAa,CAAA,CAAA,MAAA,EAAO;AAAA,EACpB,WAAa,CAAA,CAAA,MAAA,EAAO;AAAA,EACpB,IAAA,EAAM;AACR,CAAC;AAGM,IAAM,qBAAuB,CAAA,CAAA,MAAA,CAAO;AAAA,EACzC,WAAA,EAAe,UAAQ,IAAI,CAAA;AAAA,EAC3B,SAAW,CAAA,CAAA,MAAA,EAAO;AAAA,EAClB,UAAY,CAAA,CAAA,MAAA,EAAO;AAAA,EACnB,WAAa,CAAA,CAAA,MAAA,EAAO;AAAA,EACpB,cAAA,EAAkB,CAAA,CAAA,KAAA,CAAQ,CAAA,CAAA,MAAA,EAAQ;AACpC,CAAC;AAEM,IAAM,iBAAA,GAAsB,CAAA,CAAA,KAAA,CAAM,CAAC,kBAAA,EAAoB,kBAAkB,CAAC;ACxC1E,IAAM,qBAAuBA,CAAA,CAAA,MAAA,CAAO;AAAA,EACzC,UAAYA,CAAA,CAAA,MAAA,EAAO;AAAA,EACnB,IAAA,EAAQA,CAAA,CAAA,IAAA,CAAK,CAAC,MAAA,EAAQ,eAAe,CAAC,CAAA;AAAA,EACtC,IAAA,EAAQA,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU;AACpC,CAAC;AAEM,IAAM,yBAA2BA,CAAA,CAAA,MAAA,CAAO;AAAA,EAC7C,UAAYA,CAAA,CAAA,MAAA,EAAO;AAAA,EACnB,WAAaA,CAAA,CAAA,MAAA;AACf,CAAC;AAEM,IAAM,wBAA0BA,CAAA,CAAA,MAAA,CAAO;AAAA,EAC5C,IAAA,EAAQA,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAIlC,mBAAA,EAAuBA,CAAA,CAAA,OAAA,EAAQ,CAAE,OAAA,CAAQ,KAAK;AAChD,CAAC;ACjBM,IAAM,0BAA4BC,CAAA,CAAA,MAAA,CAAO;AAAA,EAC9C,OAASA,CAAA,CAAA,KAAA;AACX,CAAC;AAEM,IAAM,mBAAqBA,CAAA,CAAA,MAAA,CAAO;AAAA;AAAA,EAEvC,KAAA,EAASA,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA,EACnC,WAAA,EAAeA,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA,EAGzC,cAAA,EAAkBA,CAAA,CAAA,OAAA,EAAQ,CAAE,OAAA,CAAQ,IAAI;AAC1C,CAAC;AAEM,IAAM,oBAAsBA,CAAA,CAAA,MAAA,CAAO;AAAA,EACxC,eAAA,EAAmBA,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA,EAC7C,WAAA,EAAeA,CAAA,CAAA,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAIzC,mBAAA,EAAuBA,CAAA,CAAA,OAAA,EAAQ,CAAE,OAAA,CAAQ,IAAI;AAC/C,CAAC;;;ACdM,IAAM,YAAA,GAAe,CAAC,MAAA,KAAmC;AAC9D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAqC,MAAA,KAAyB;AAClF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,iBAAA,EAAmB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC1E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAsC,MAAA,KAAyB;AACpF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,yBAAA,EAA2B,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAClF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAuC,MAAA,KAAyB;AACtF,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,uBAAA,EAAyB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAS;AACrC,CAAA;;;ACnBO,IAAM,WAAA,GAAc,CAAC,MAAA,KAAmC;AAC7D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAiB,MAAA,KAAyB;AAC9D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,gBAAA,EAAkB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACzE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe,OAAO,KAAA,EAAmB,MAAA,KAAyB;AACtE,IAAA,MAAM,EAAE,KAAA,EAAAC,MAAAA,EAAO,UAAS,GAAI,gBAAA,CAAiB,MAAM,KAAK,CAAA;AAExD,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,EAAE,SAAA,EAAW,YAAY,KAAA,EAAAA,MAAAA,EAAO,QAAA,EAAS,EAAgB,MAAM,CAAA;AAGzF,IAAA,OAAO,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAAA,EACrC,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,KAAA,EAAkB,MAAA,KAAyB;AACjE,IAAA,MAAM,EAAE,SAAA,EAAW,OAAA,EAAQ,GAAI,eAAA,CAAgB,MAAM,KAAK,CAAA;AAE1D,IAAA,MAAM,OAAO,MAAM,MAAA,CAAO,EAAE,SAAA,EAAW,OAAA,IAAwB,MAAM,CAAA;AACrE,IAAA,OAAO,iBAAA,CAAkB,MAAM,IAAI,CAAA;AAAA,EACrC,CAAA;AAGA,EAAA,MAAM,OAAA,GAAU,OAAO,MAAA,KAAyB;AAC9C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,kBAAA,EAAoB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AACpE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,YAAA,EAAc,QAAA,EAAU,OAAA,EAAQ;AAC3C,CAAA;;;AC7BO,IAAM,SAAA,GAAY,CAAC,MAAA,KAAmC;AAC3D,EAAA,MAAM,OAAA,GAAU,OAAO,IAAA,EAAqB,MAAA,KAAyB;AACnE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,cAAA,EAAgB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,cAAA,GAAiB,OAAO,KAAA,EAAqB,MAAA,KAAyB;AAC1E,IAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,MAAK,GAAI,kBAAA,CAAmB,MAAM,KAAK,CAAA;AAE/D,IAAA,OAAO,QAAQ,EAAE,QAAA,EAAU,IAAA,EAAM,IAAA,IAAyB,MAAM,CAAA;AAAA,EAClE,CAAA;AAEA,EAAA,MAAM,kBAAA,GAAqB,OAAO,KAAA,EAAyB,MAAA,KAAyB;AAClF,IAAA,MAAM,EAAE,QAAA,EAAU,SAAA,EAAU,GAAI,sBAAA,CAAuB,MAAM,KAAK,CAAA;AAElE,IAAA,OAAO,QAAQ,EAAE,QAAA,EAAU,MAAM,UAAA,EAAY,SAAA,IAA8B,MAAM,CAAA;AAAA,EACnF,CAAA;AAEA,EAAA,MAAM,uBAAA,GAA0B,OAAO,MAAA,KAAyB;AAC9D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,6BAAA,EAA+B,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAKA,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,KAAA,EAAO,OAAO,MAAA,KAAyB;AACrC,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,mBAAA,EAAqB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AACtE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,MAAA,EAAQ,OAAO,KAAA,EAAwB,MAAA,KAAyB;AAC9D,MAAA,MAAM,IAAA,GAAO,qBAAA,CAAsB,KAAA,CAAM,KAAK,CAAA;AAC9C,MAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,0BAAA,EAA4B,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACnF,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA,IACA,OAAA,EAAS,OAAO,EAAA,EAA2B,MAAA,KAAyB;AAClE,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,wBAAA,EAA0B,EAAE,IAAA,EAAM,EAAE,EAAA,EAAG,EAAE,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,IAC5E;AAAA,GACF;AAEA,EAAA,OAAO,EAAE,cAAA,EAAgB,kBAAA,EAAoB,uBAAA,EAAyB,IAAA,EAAK;AAC7E,CAAA;;;AC3CO,IAAM,cAAA,GAAiB,CAAC,MAAA,KAAmC;AAGhE,EAAA,MAAM,YAAA,GAAe,OAAO,KAAA,EAA0B,MAAA,KAAyB;AAC7E,IAAA,MAAM,IAAA,GAAO,uBAAA,CAAwB,KAAA,CAAM,KAAK,CAAA;AAChD,IAAA,MAAM,MAAA,CAAO,KAAK,iCAAA,EAAmC,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EAC3E,CAAA;AAIA,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAA,EAAmB,MAAA,KAAyB;AAG/D,IAAA,MAAM,IAAA,GAAO,gBAAA,CAAiB,KAAA,CAAM,KAAK,CAAA;AACzC,IAAA,MAAM,MAAA,CAAO,KAAK,yBAAA,EAA2B,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EACnE,CAAA;AAKA,EAAA,MAAM,MAAA,GAAS,OAAO,KAAA,EAA4B,MAAA,KAAyB;AACzE,IAAA,MAAM,IAAA,GAAO,iBAAA,CAAkB,KAAA,CAAM,KAAK,CAAA;AAC1C,IAAA,MAAM,MAAA,CAAO,KAAK,0BAAA,EAA4B,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EACpE,CAAA;AAEA,EAAA,OAAO,EAAE,YAAA,EAAc,KAAA,EAAO,MAAA,EAAO;AACvC,CAAA;;;AC3BO,IAAM,SAAA,GAAY,CAAC,MAAA,KAAmC;AAC3D,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAyB;AAC7C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,cAAA,EAAgB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAqB,MAAA,KAAyB;AAClE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,cAAA,EAAgB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAwB,MAAA,KAAyB;AACvE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,uBAAA,EAAyB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAChF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,EAAA,EAAyB,MAAA,KAAyB;AACtE,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,mBAAA,EAAqB,EAAE,IAAA,EAAM,EAAE,EAAA,EAAG,EAAE,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,EACvE,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,MAAA,EAAQ,MAAA,EAAO;AAC5C,CAAA;;;ACrBO,IAAM,UAAA,GAAa,CAAC,MAAA,KAAmC;AAC5D,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAwB,MAAA,KAAyB;AACvE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,qBAAA,EAAuB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC9E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,QAAA,EAAS;AACpB,CAAA;;;ACPO,IAAM,UAAA,GAAa,CAAC,MAAA,KAAmC;AAC5D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAsB,MAAA,KAAyB;AACnE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,sBAAA,EAAwB,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC/E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,EAAyB,MAAA,KAAyB;AACxE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,wBAAA,EAA0B,EAAE,IAAA,EAAK,EAAG,EAAE,MAAA,EAAQ,CAAA;AACjF,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,QAAQ,QAAA,EAAS;AAC5B,CAAA;;;ACZO,IAAM,aAAA,GAAgB,CAAC,MAAA,KAAmC;AAC/D,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAyB;AAC7C,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,mBAAA,EAAqB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AACrE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,SAAA,EAA2C,MAAA,KAAyB;AACxF,IAAA,MAAM,MAAA,CAAO,MAAA,CAAO,+BAAA,EAAiC,EAAE,IAAA,EAAM,EAAE,SAAA,EAAU,EAAE,EAAG,EAAE,MAAA,EAAQ,CAAA;AAAA,EAC1F,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,MAAA,KAAyB;AAChD,IAAA,MAAM,OAAO,MAAA,CAAO,mBAAA,EAAqB,EAAC,EAAG,EAAE,QAAQ,CAAA;AAAA,EACzD,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,SAAA,EAAU;AACrC,CAAA;;;ACfO,IAAM,UAAA,GAAa,CAAC,MAAA,KAAmC;AAC5D,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAgB,MAAA,KAAyB;AAK7D,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,eAAA;AAAA,MACA,EAAE,IAAA,EAAqC;AAAA,MACvC,EAAE,MAAA;AAAO,KACX;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,MAAA,KAAyB;AAChD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA,CAAK,yBAAA,EAA2B,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAC5E,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAC7B,CAAA;;;ACnBO,IAAM,WAAA,GAAc,CAAC,MAAA,KAAmC;AAC7D,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,EAAsB,MAAA,KAAyB;AACpE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,wBAAA;AAAA,MACA,EAAE,IAAA,EAAM,EAAE,YAAA,EAAa,EAAE;AAAA,MACzB,EAAE,MAAA;AAAO,KACX;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAOA,EAAA,MAAM,UAAA,GAAa,OAAO,KAAA,EAAgB,MAAA,KAAyB;AACjE,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA;AAAA,MAC5B,2BAAA;AAAA,MACA,EAAC;AAAA,MACD,EAAE,MAAA,EAAQ,OAAA,EAAS,KAAA,GAAQ,EAAE,CAAC,UAAA,CAAW,aAAa,GAAG,CAAA,OAAA,EAAU,KAAK,CAAA,CAAA,KAAO,MAAA;AAAU,KAC3F;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,MAAA,GAAS,OAAO,IAAA,EAAuB,MAAA,KAAyB;AACpE,IAAA,MAAM,MAAA,CAAO,KAAK,uBAAA,EAAyB,EAAE,MAAK,EAAG,EAAE,QAAQ,CAAA;AAAA,EACjE,CAAA;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,UAAA,EAAY,MAAA,EAAO;AACvC,CAAA;;;AChBO,IAAM,gBAAA,GAAmB,CAAC,EAAE,OAAA,EAAS,aAAY,KAA6B;AACnF,EAAA,MAAM,MAAA,GAAS,wBAAA,CAAgC,EAAE,OAAA,EAAS,aAAa,CAAA;AACvE,EAAA,MAAM,aAAA,GAAgB,wBAAA,CAAyB,EAAE,OAAA,EAAS,aAAa,CAAA;AAKvE,EAAA,MAAM,WAAA,GAAc,OAAO,MAAA,KAAyB;AAClD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,aAAA,CAAc,GAAA,CAAI,eAAA,EAAiB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAExE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,KAAA,EAAO,YAAY,MAAM,CAAA;AAAA,IACzB,GAAA,EAAK,UAAU,MAAM,CAAA;AAAA,IACrB,QAAA,EAAU,eAAe,MAAM,CAAA;AAAA,IAC/B,IAAA,EAAM,WAAW,MAAM,CAAA;AAAA,IACvB,GAAA,EAAK,UAAU,MAAM,CAAA;AAAA,IACrB,MAAA,EAAQ,aAAa,MAAM,CAAA;AAAA,IAC3B,IAAA,EAAM,WAAW,MAAM,CAAA;AAAA,IACvB,IAAA,EAAM,WAAW,MAAM,CAAA;AAAA,IACvB,OAAA,EAAS,cAAc,MAAM,CAAA;AAAA,IAC7B,KAAA,EAAO,YAAY,MAAM;AAAA,GAC3B;AACF","file":"chunk-62LG5KPI.js","sourcesContent":["import * as z from 'zod';\n\nexport const loginInputSchema = z.object({\n  email: z.email(),\n  password: z.string().min(1, 'Required'),\n});\n\nexport const oidcInputSchema = z.object({\n  grantType: z.enum(['google', 'microsoft']),\n  idToken: z.string().min(1, 'Required'),\n});\n\nexport type LoginInput = z.infer<typeof loginInputSchema>;\nexport type OidcInput = z.infer<typeof oidcInputSchema>;\n\nconst userSchema = z.object({\n  id: z.number(),\n  email: z.string(),\n  name: z.string(),\n});\n\n// Success shape. The backend omits `mfaRequired` here, so we inject a `false`\n// literal to make the outcome a discriminated union on `mfaRequired`.\nexport const loginSuccessSchema = z.object({\n  mfaRequired: z.literal(false).default(false),\n  accessToken: z.string(),\n  refreshToken: z.string(),\n  tokenType: z.string(),\n  expiresIn: z.number(),\n  sessionId: z.string(),\n  user: userSchema,\n});\n\n// MFA-challenge shape. `mfaRequired` is always true here — it is the discriminant.\nexport const mfaChallengeSchema = z.object({\n  mfaRequired: z.literal(true),\n  mfaType: z.string(),\n  mfaToken: z.string(),\n  expiresIn: z.number(),\n  allowedMethods: z.array(z.string()),\n});\n\nexport const loginResultSchema = z.union([loginSuccessSchema, mfaChallengeSchema]);\n\nexport type LoginUser = z.infer<typeof userSchema>;\nexport type LoginSuccess = z.infer<typeof loginSuccessSchema>;\nexport type LoginResult = z.infer<typeof loginResultSchema>;\n","import * as z from 'zod';\n\nexport const mfaCodeInputSchema = z.object({\n  mfaToken: z.string(),\n  type: z.enum(['totp', 'recovery_code']),\n  code: z.string().min(1, 'Required'),\n});\n\nexport const mfaWebauthnInputSchema = z.object({\n  mfaToken: z.string(),\n  assertion: z.string(),\n});\n\nexport const totpVerifyInputSchema = z.object({\n  code: z.string().min(1, 'Required'),\n  // Optional in the spec, but `openapi-typescript` emits every `default`-bearing property as\n  // required — the schema fills in the backend's own default so callers may still omit it. Set true\n  // to sign the admin out everywhere else as part of enrolling.\n  revokeOtherSessions: z.boolean().default(false),\n});\n\nexport type MfaCodeInput = z.infer<typeof mfaCodeInputSchema>;\nexport type MfaWebauthnInput = z.infer<typeof mfaWebauthnInputSchema>;\n// `z.input`: callers may omit `revokeOtherSessions` (the default fills it in on parse).\nexport type TotpVerifyInput = z.input<typeof totpVerifyInputSchema>;\n","import * as z from 'zod';\n\nexport const resetRequestInputSchema = z.object({\n  email: z.email(),\n});\n\nexport const resetInputSchema = z.object({\n  // The single-use reset token (`kbc_pr_…`) delivered by e-mail.\n  token: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Revoke every session after the reset. Defaults to true (the backend's own default), so callers\n  // may omit it; set false only to keep existing sessions alive. Password policy is backend-enforced.\n  revokeSessions: z.boolean().default(true),\n});\n\nexport const changeInputSchema = z.object({\n  currentPassword: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Revoke every other session once the password changes. The schema fills in `true` on parse, so\n  // the SDK always sends the field (matching the backend's own default); callers may omit it. Set\n  // false only to keep the other sessions alive.\n  revokeOtherSessions: z.boolean().default(true),\n});\n\nexport type ResetRequestInput = z.infer<typeof resetRequestInputSchema>;\n// `z.input`, not `z.infer`: callers may omit `revokeSessions` (the default fills it in on parse).\nexport type ResetInput = z.input<typeof resetInputSchema>;\n// `z.input`: callers may omit `revokeOtherSessions` (the default fills it in on parse).\nexport type ChangePasswordInput = z.input<typeof changeInputSchema>;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  ApproveDeviceAuthorizationBody,\n  CreateDeviceAuthorizationBody,\n  GetDeviceAuthorizationTokenBody,\n} from './types';\n\nexport const createDevice = (client: AuthOpenApiFetchClient) => {\n  const create = async (body: CreateDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device', { body }, { signal });\n    return data;\n  };\n\n  const approve = async (body: ApproveDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/approve', { body }, { signal });\n    return data;\n  };\n\n  const getToken = async (body: GetDeviceAuthorizationTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/token', { body }, { signal });\n    return data;\n  };\n\n  return { create, approve, getToken };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { LoginInput, OidcInput } from './schemas';\nimport { loginInputSchema, loginResultSchema, oidcInputSchema } from './schemas';\nimport type { LoginBody } from './types';\n\nexport const createLogin = (client: AuthOpenApiFetchClient) => {\n  const _login = async (body: LoginBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/login', { body }, { signal });\n    return data;\n  };\n\n  const withPassword = async (input: LoginInput, signal?: AbortSignal) => {\n    const { email, password } = loginInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login({ grantType: 'password', email, password } as LoginBody, signal);\n    // Validate against our own schema — the generated response type is unreliable,\n    // and this narrows the outcome to a discriminated union on `mfaRequired`.\n    return loginResultSchema.parse(data);\n  };\n\n  const withOidc = async (input: OidcInput, signal?: AbortSignal) => {\n    const { grantType, idToken } = oidcInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login({ grantType, idToken } as LoginBody, signal);\n    return loginResultSchema.parse(data);\n  };\n\n  // Unauthenticated. Carries the public OAuth client ids `withOidc` callers mint an id token with.\n  const methods = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/methods', {}, { signal });\n    return data;\n  };\n\n  return { withPassword, withOidc, methods };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { MfaCodeInput, MfaWebauthnInput, TotpVerifyInput } from './schemas';\nimport { mfaCodeInputSchema, mfaWebauthnInputSchema, totpVerifyInputSchema } from './schemas';\nimport type { DisableTotpPath, VerifyMfaBody } from './types';\n\nexport const createMfa = (client: AuthOpenApiFetchClient) => {\n  const _verify = async (body: VerifyMfaBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa', { body }, { signal });\n    return data;\n  };\n\n  const verifyWithCode = async (input: MfaCodeInput, signal?: AbortSignal) => {\n    const { mfaToken, type, code } = mfaCodeInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type, code } as VerifyMfaBody, signal);\n  };\n\n  const verifyWithWebauthn = async (input: MfaWebauthnInput, signal?: AbortSignal) => {\n    const { mfaToken, assertion } = mfaWebauthnInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type: 'webauthn', assertion } as VerifyMfaBody, signal);\n  };\n\n  const regenerateRecoveryCodes = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa/recovery-codes', {}, { signal });\n    return data;\n  };\n\n  // TOTP enrollment for the signed-in user (account MFA management). `setup` returns the shared\n  // secret + `otpauthUri` to render as a QR; `verify` confirms the first code and hands back the\n  // one-time recovery codes plus the new factor `id`; `disable` removes a factor by that `id`.\n  const totp = {\n    setup: async (signal?: AbortSignal) => {\n      const { data } = await client.post('/v1/auth/mfa/totp', {}, { signal });\n      return data;\n    },\n    verify: async (input: TotpVerifyInput, signal?: AbortSignal) => {\n      const body = totpVerifyInputSchema.parse(input);\n      const { data } = await client.post('/v1/auth/mfa/totp/verify', { body }, { signal });\n      return data;\n    },\n    disable: async (id: DisableTotpPath['id'], signal?: AbortSignal) => {\n      await client.delete('/v1/auth/mfa/totp/{id}', { path: { id } }, { signal });\n    },\n  };\n\n  return { verifyWithCode, verifyWithWebauthn, regenerateRecoveryCodes, totp };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { ChangePasswordInput, ResetInput, ResetRequestInput } from './schemas';\nimport { changeInputSchema, resetInputSchema, resetRequestInputSchema } from './schemas';\n\nexport const createPassword = (client: AuthOpenApiFetchClient) => {\n  // Fire-and-forget from the caller's view: the backend always answers 202 and reveals nothing about\n  // whether the account exists. Resolves on 202; rejects on 429 (rate limited) or 400.\n  const resetRequest = async (input: ResetRequestInput, signal?: AbortSignal) => {\n    const body = resetRequestInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset-request', { body }, { signal });\n  };\n\n  // Applies the new password for the given reset token. Resolves on 204; rejects on 400 (invalid or\n  // expired token, or a password that violates the policy).\n  const reset = async (input: ResetInput, signal?: AbortSignal) => {\n    // `revokeSessions` is defaulted by the schema, so the parsed body always carries all three\n    // fields the endpoint requires — no field omission, no type assertion.\n    const body = resetInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset', { body }, { signal });\n  };\n\n  // Changes the password for the signed-in user (bearer session). Resolves on 204; rejects on 400\n  // (wrong current password, or a new password that violates the policy). Password policy is\n  // backend-enforced.\n  const change = async (input: ChangePasswordInput, signal?: AbortSignal) => {\n    const body = changeInputSchema.parse(input);\n    await client.post('/v1/auth/password/change', { body }, { signal });\n  };\n\n  return { resetRequest, reset, change };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { CreatePatBody, ExchangePatBody, RevokePatPath } from './types';\n\nexport const createPat = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/pat', {}, { signal });\n    return data;\n  };\n\n  const create = async (body: CreatePatBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pat', { body }, { signal });\n    return data;\n  };\n\n  const exchange = async (body?: ExchangePatBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pat/exchange', { body }, { signal });\n    return data;\n  };\n\n  const revoke = async (id: RevokePatPath['id'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/pat/{id}', { path: { id } }, { signal });\n  };\n\n  return { create, exchange, revoke, getAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { GetPkceTokenBody } from './types';\n\nexport const createPkce = (client: AuthOpenApiFetchClient) => {\n  const getToken = async (body: GetPkceTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pkce/token', { body }, { signal });\n    return data;\n  };\n\n  return { getToken };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { AssertSamlBody, InitiateSamlBody } from './types';\n\nexport const createSaml = (client: AuthOpenApiFetchClient) => {\n  const assert = async (body: AssertSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/assert', { body }, { signal });\n    return data;\n  };\n\n  const initiate = async (body?: InitiateSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/initiate', { body }, { signal });\n    return data;\n  };\n\n  return { assert, initiate };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RevokeSessionPath } from './types';\n\nexport const createSession = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/sessions', {}, { signal });\n    return data;\n  };\n\n  const revoke = async (sessionId: RevokeSessionPath['sessionId'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions/{sessionId}', { path: { sessionId } }, { signal });\n  };\n\n  const revokeAll = async (signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions', {}, { signal });\n  };\n\n  return { getAll, revoke, revokeAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { SudoBody, SudoBodyRaw } from './types';\n\nexport const createSudo = (client: AuthOpenApiFetchClient) => {\n  const verify = async (body: SudoBody, signal?: AbortSignal) => {\n    // The generated request body (`SudoBodyRaw`) describes a payload the endpoint rejects — see the\n    // `SudoBody` docs. Assert at this one boundary rather than making every caller send the invalid\n    // shape; the real fix is the `#[OA\\Schema]`-vs-object mismatch on the backend, upstream of the\n    // generated schema. Same pattern as `syncActionsClient`'s `PostActionsBodyRaw`.\n    const { data } = await client.post(\n      '/v1/auth/sudo',\n      { body: body as unknown as SudoBodyRaw },\n      { signal },\n    );\n    return data;\n  };\n\n  const challenge = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/sudo/challenge', {}, { signal });\n    return data;\n  };\n\n  return { verify, challenge };\n};\n","import { HttpHeader } from '../../../fetchClient';\nimport type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RevokeTokenBody } from './types';\n\nexport const createToken = (client: AuthOpenApiFetchClient) => {\n  const refresh = async (refreshToken: string, signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/v1/auth/token/refresh',\n      { body: { refreshToken } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /**\n   * Introspects an authenticated session token.\n   *\n   * @param token - Optional token to introspect (`Authorization: Bearer`); a middleware-set header wins.\n   */\n  const introspect = async (token?: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/v1/auth/token/introspect',\n      {},\n      { signal, headers: token ? { [HttpHeader.AUTHORIZATION]: `Bearer ${token}` } : undefined },\n    );\n    return data;\n  };\n\n  const revoke = async (body: RevokeTokenBody, signal?: AbortSignal) => {\n    await client.post('/v1/auth/token/revoke', { body }, { signal });\n  };\n\n  return { refresh, introspect, revoke };\n};\n","import { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport { createDevice } from './device';\nimport { createLogin } from './login';\nimport { createMfa } from './mfa';\nimport { createPassword } from './password';\nimport { createPat } from './pat';\nimport { createPkce } from './pkce';\nimport { createSaml } from './saml';\nimport { createSession } from './session';\nimport { createSudo } from './sudo';\nimport { createToken } from './token';\n\nexport type AuthClientInitOptions = Omit<ClientInitOptions, 'auth'>;\n\nexport type AuthOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;\n\nexport const createAuthClient = ({ baseUrl, middlewares }: AuthClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({ baseUrl, middlewares });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  // Host-level: Connection serves the storage, management and auth APIs off one baseUrl, so this\n  // probes the host, not this API's prefix — `/v2/storage/health-check`, `/manage/health-check`\n  // and `/v1/auth/health-check` all 404.\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    login: createLogin(client),\n    mfa: createMfa(client),\n    password: createPassword(client),\n    saml: createSaml(client),\n    pat: createPat(client),\n    device: createDevice(client),\n    sudo: createSudo(client),\n    pkce: createPkce(client),\n    session: createSession(client),\n    token: createToken(client),\n  };\n};\n"]}

package/dist/chunk-67P5UI6H.js

@@ -1,58 +0,0 @@
-import { createAuthHeaders } from './chunk-5A3AQIXR.js';
-import { createOpenapiFetchClient, xhrFetch } from './chunk-2BQBKU6E.js';
-
-// src/clients/import/utils.ts
-var createFormData = (fields) => {
-  const formData = new FormData();
-  for (const [name, value] of Object.entries(fields)) {
-    if (!value) {
-      continue;
-    }
-    if (Array.isArray(value)) {
-      for (const item of value) {
-        formData.append(`${name}[]`, item);
-      }
-    } else {
-      formData.append(name, value === true ? "1" : value);
-    }
-  }
-  return formData;
-};
-
-// src/clients/import/importClient.ts
-var createImportClient = ({ baseUrl, middlewares, auth }) => {
-  const client = createOpenapiFetchClient({
-    baseUrl,
-    middlewares,
-    headers: createAuthHeaders(auth)
-  });
-  const uploadFile = async ({ file, ...fields }, { signal, onProgress } = {}) => {
-    const { data } = await client.post(
-      "/upload-file",
-      { body: createFormData({ data: file, ...fields }) },
-      { signal, fetchFn: onProgress ? xhrFetch(onProgress) : void 0 }
-    );
-    return data;
-  };
-  const writeTable = async ({ file, ...fields }, { signal, onProgress } = {}) => {
-    const { data } = await client.post(
-      "/write-table",
-      { body: createFormData({ data: file, ...fields }) },
-      { signal, fetchFn: onProgress ? xhrFetch(onProgress) : void 0 }
-    );
-    return data;
-  };
-  const healthCheck = async (signal) => {
-    const { data } = await client.get("/health-check", {}, { signal });
-    return data;
-  };
-  return {
-    healthCheck,
-    uploadFile,
-    writeTable
-  };
-};
-
-export { createImportClient };
-//# sourceMappingURL=chunk-67P5UI6H.js.map
-//# sourceMappingURL=chunk-67P5UI6H.js.map

package/dist/chunk-67P5UI6H.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/clients/import/utils.ts","../src/clients/import/importClient.ts"],"names":[],"mappings":";;;;AAMO,IAAM,cAAA,GAAiB,CAC5B,MAAA,KACG;AACH,EAAA,MAAM,QAAA,GAAW,IAAI,QAAA,EAAS;AAE9B,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AAClD,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,QAAA,QAAA,CAAS,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,EAAA,CAAA,EAAM,IAAI,CAAA;AAAA,MACnC;AAAA,IACF,CAAA,MAAO;AACL,MAAA,QAAA,CAAS,MAAA,CAAO,IAAA,EAAM,KAAA,KAAU,IAAA,GAAO,MAAM,KAAK,CAAA;AAAA,IACpD;AAAA,EACF;AAEA,EAAA,OAAO,QAAA;AACT,CAAA;;;ACZO,IAAM,qBAAqB,CAAC,EAAE,OAAA,EAAS,WAAA,EAAa,MAAK,KAAyB;AACvF,EAAA,MAAM,SAAS,wBAAA,CAAgC;AAAA,IAC7C,OAAA;AAAA,IACA,WAAA;AAAA,IACA,OAAA,EAAS,kBAAkB,IAAI;AAAA,GAChC,CAAA;AAED,EAAA,MAAM,UAAA,GAAa,OACjB,EAAE,IAAA,EAAM,GAAG,MAAA,EAAO,EAClB,EAAE,MAAA,EAAQ,UAAA,EAAW,GAAa,EAAC,KAChC;AACH,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,cAAA;AAAA,MACA,EAAE,MAAM,cAAA,CAAe,EAAE,MAAM,IAAA,EAAM,GAAG,MAAA,EAAQ,CAAA,EAAE;AAAA,MAClD,EAAE,MAAA,EAAQ,OAAA,EAAS,aAAa,QAAA,CAAS,UAAU,IAAI,MAAA;AAAU,KACnE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,UAAA,GAAa,OACjB,EAAE,IAAA,EAAM,GAAG,MAAA,EAAO,EAClB,EAAE,MAAA,EAAQ,UAAA,EAAW,GAAa,EAAC,KAChC;AACH,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,IAAA;AAAA,MAC5B,cAAA;AAAA,MACA,EAAE,MAAM,cAAA,CAAe,EAAE,MAAM,IAAA,EAAM,GAAG,MAAA,EAAQ,CAAA,EAAE;AAAA,MAClD,EAAE,MAAA,EAAQ,OAAA,EAAS,aAAa,QAAA,CAAS,UAAU,IAAI,MAAA;AAAU,KACnE;AAEA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,WAAA,GAAc,OAAO,MAAA,KAAyB;AAClD,IAAA,MAAM,EAAE,IAAA,EAAK,GAAI,MAAM,MAAA,CAAO,GAAA,CAAI,eAAA,EAAiB,EAAC,EAAG,EAAE,MAAA,EAAQ,CAAA;AAEjE,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAEA,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,UAAA;AAAA,IACA;AAAA,GACF;AACF","file":"chunk-67P5UI6H.js","sourcesContent":["/**\n * Every field the importer takes is a form part, named exactly as the spec names it: flags go as\n * `1` when on and are left out when off (so the service applies its own default), and arrays repeat\n * under the `[]`-suffixed name. The payload rides along as the `data` part — `file` is the public\n * API's word for it, not the wire's.\n */\nexport const createFormData = (\n  fields: Record<string, string | boolean | string[] | File | null | undefined>,\n) => {\n  const formData = new FormData();\n\n  for (const [name, value] of Object.entries(fields)) {\n    if (!value) {\n      continue;\n    }\n\n    if (Array.isArray(value)) {\n      for (const item of value) {\n        formData.append(`${name}[]`, item);\n      }\n    } else {\n      formData.append(name, value === true ? '1' : value);\n    }\n  }\n\n  return formData;\n};\n","import type { UploadProgress } from '../../fetchClient';\nimport { createOpenapiFetchClient, xhrFetch } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { UploadFileInput, WriteTableInput } from './types';\nimport { createFormData } from './utils';\n\ntype Options = {\n  signal?: AbortSignal;\n  onProgress?: (progress: UploadProgress) => void;\n};\n\nexport const createImportClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const uploadFile = async (\n    { file, ...fields }: UploadFileInput,\n    { signal, onProgress }: Options = {},\n  ) => {\n    const { data } = await client.post(\n      '/upload-file',\n      { body: createFormData({ data: file, ...fields }) },\n      { signal, fetchFn: onProgress ? xhrFetch(onProgress) : undefined },\n    );\n\n    return data;\n  };\n\n  const writeTable = async (\n    { file, ...fields }: WriteTableInput,\n    { signal, onProgress }: Options = {},\n  ) => {\n    const { data } = await client.post(\n      '/write-table',\n      { body: createFormData({ data: file, ...fields }) },\n      { signal, fetchFn: onProgress ? xhrFetch(onProgress) : undefined },\n    );\n\n    return data;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    uploadFile,\n    writeTable,\n  };\n};\n"]}