@keboola/api-client 27.0.0 → 31.0.0

package/dist/syncActions-AgFiMjRS.js

@@ -0,0 +1,497 @@
+import { s as defaultValidateStatus } from "./createFetchClient-B1h3-p65.js";
+import { t as SyncActionError } from "./SyncActionError-CoZFsdUk.js";
+import { r as parseOrThrow } from "./ValidationError-CzPWydEb.js";
+import { t as createGenericFetchClient } from "./createGenericFetchClient-DhpvUSlX.js";
+import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-0_oqhdPv.js";
+import { t as createAuthHeaders } from "./auth-CE6Hlc9W.js";
+import { t as ComponentId } from "./componentId-vJz-kWs6.js";
+import * as z$1 from "zod";
+//#region src/clients/syncActions/utils/response.ts
+const asErrorBody = (data) => typeof data === "object" && data !== null ? data : null;
+const asString = (value) => typeof value === "string" && value ? value : void 0;
+const asNumber = (value) => typeof value === "number" ? value : void 0;
+/**
+* A component reports failure two ways: a non-2xx response, and a **2xx** whose body carries
+* `status: 'error'` (the component ran, and said no). Both are recognised here so every sync action
+* fails as one `SyncActionError` — `validateStatus` is the only hook that sees the parsed body of a
+* successful response, which is what the second case needs.
+*
+* Throwing rather than returning the error is deliberate. `coreFetch` only rethrows a returned value
+* that is an `ApiError`, and `SyncActionError` is a peer of `ApiError`, not a subclass: a component
+* answering `status: 'error'` on a **200** gave a business answer, not a transport failure, so it
+* must not satisfy `isApiError` / `isFetchClientError` — those drive retry and "network problem"
+* handling, and `err.response.status` would read 200 and mislead every status-based branch.
+*/
+const syncActionValidateStatus = (apiResponse) => {
+	const body = asErrorBody(apiResponse.data);
+	if (body?.status === "error") throw new SyncActionError(asString(body.message) ?? asString(body.error) ?? apiResponse.response.statusText, {
+		exceptionId: asString(body.exceptionId),
+		code: asNumber(body.code),
+		data: apiResponse.data
+	});
+	return defaultValidateStatus(apiResponse);
+};
+//#endregion
+//#region src/clients/syncActions/constants.ts
+const SyncAction = {
+	DATA_APP_GIT_REPOSITORY: "git-repository",
+	DATA_APP_ENTRYPOINTS: "data-app-entrypoints",
+	DBT_COMPILE: "dbtCompile",
+	DBT_RUN_RESULTS: "dbtRunResults",
+	GIT_REPOSITORY: "gitRepository",
+	ENROLL_MFA: "enrollMFA",
+	LIST_ACTORS: "listActors",
+	LIST_TASKS: "listTasks",
+	TEST_LOOKER_CREDENTIALS: "testLookerCredentials"
+};
+//#endregion
+//#region src/clients/syncActions/schemas.ts
+/**
+* The Keboola-side context every sync action carries, whichever action it is. Namespaces extend it
+* with the fields their own action needs, so a caller never assembles the rest of the body.
+*/
+const syncActionContextSchema = z$1.object({
+	/**
+	* Required, because omitting it changes nothing: the service normalises a missing, empty or
+	* `null` value to `"default"` and resolves that to the default branch's numeric id — the same id,
+	* branch type and downstream context an explicit value resolves to, with no extra lookup either
+	* way. Requiring it keeps every request self-describing. Both a numeric id and the literal
+	* `"default"` are accepted (`keboola/runner-sync-api`: `ExecuteActionRequestProcessor` →
+	* `BranchTypeResolver`).
+	*/
+	branchId: z$1.string().min(1, "Required"),
+	/**
+	* Leave undefined. The service then runs the component's registered tag from the Developer
+	* Portal / Storage component definition — the currently published version, not Docker's
+	* `latest`. Set it only to deliberately pin a specific or branch build.
+	*/
+	tag: z$1.string().optional(),
+	mode: z$1.enum(["run", "debug"]).optional()
+});
+/**
+* The `/actions` request body. `configData` is whatever the component's action expects, so it is
+* only asserted to be an object here — each namespace validates the shape its own action needs
+* before handing it over.
+*/
+const syncActionBodySchema = syncActionContextSchema.extend({
+	componentId: z$1.string().min(1, "Required"),
+	action: z$1.string().min(1, "Required"),
+	configData: z$1.record(z$1.string(), z$1.unknown())
+});
+//#endregion
+//#region src/clients/syncActions/apify/schemas.ts
+const apifyObjectsInputSchema = syncActionContextSchema.extend({ "#token": z$1.string().min(1, "Required") });
+const apifyObjectsSchema = z$1.array(z$1.object({
+	id: z$1.string(),
+	name: z$1.string()
+}));
+//#endregion
+//#region src/clients/syncActions/apify/utils.ts
+/**
+* A slow Apify account makes the component answer `{ timeout: true }` on a 200 instead of the list —
+* a failure only this action knows how to spot, so it is checked before deferring to the shared
+* validation.
+*/
+const apifyValidateStatus = (apiResponse) => {
+	const data = apiResponse.data;
+	if (typeof data === "object" && data !== null && "timeout" in data && data.timeout) throw new SyncActionError("Timed out while loading data from Apify.", { data });
+	return syncActionValidateStatus(apiResponse);
+};
+//#endregion
+//#region src/clients/syncActions/apify/apify.ts
+const createApify = (sendSyncAction) => {
+	const _getObjects = async (action, input, signal) => {
+		const { "#token": token, ...context } = parseOrThrow(apifyObjectsInputSchema, input);
+		const data = await sendSyncAction({
+			...context,
+			action,
+			componentId: ComponentId.APIFY,
+			configData: { parameters: { "#token": token } }
+		}, {
+			signal,
+			validateStatus: apifyValidateStatus
+		});
+		return parseOrThrow(apifyObjectsSchema, data);
+	};
+	const getActors = (input, signal) => {
+		return _getObjects(SyncAction.LIST_ACTORS, input, signal);
+	};
+	const getTasks = (input, signal) => {
+		return _getObjects(SyncAction.LIST_TASKS, input, signal);
+	};
+	return {
+		getActors,
+		getTasks
+	};
+};
+//#endregion
+//#region src/clients/syncActions/dbt/schemas.ts
+/**
+* `componentId` is a plain string here, unlike the git actions' closed enum. Every dbt transformation
+* answers `dbtCompile` and `dbtRunResults` under the same action name and the same payload, so the id
+* selects nothing — it only names the component to run, and rejecting an unlisted one would cost the
+* caller a cast for no guarantee. The component itself refuses an action it does not serve.
+*/
+const dbtActionInputSchema = syncActionContextSchema.extend({
+	componentId: z$1.string().min(1, "Required"),
+	configId: z$1.string().min(1, "Required"),
+	artifacts: z$1.record(z$1.string(), z$1.unknown()).optional()
+});
+/**
+* `compiled` maps a model's file name (`orders.sql`) to its compiled SQL. Key order is the
+* component's own and is preserved, so the caller can render the models in it.
+*
+* A configuration that has never run does **not** answer with an empty payload — the component
+* raises a user exception telling you to run it first, which arrives as a `SyncActionError` carrying
+* that sentence. The empty default here is only for a payload that omits the key anyway: rendering
+* "nothing to show" beats failing on a validation error no caller can act on. A key that is
+* *present* with the wrong shape still fails — that is a contract change, and reading it as "no
+* models" would hide it.
+*/
+const dbtCompiledSchema = z$1.object({ compiled: z$1.record(z$1.string(), z$1.string()).default({}) }).transform(({ compiled }) => compiled);
+/**
+* dbt reports the worker as `"Thread-1"`; the number alone is what a consumer positions a row by, so
+* the prefix is stripped here rather than in every consumer. An unparseable value falls back to `0`
+* — one odd worker label must not cost the caller the whole timeline.
+*/
+const dbtThreadSchema = z$1.string().transform((thread) => Number.parseInt(thread.replace(/^Thread-/, ""), 10)).pipe(z$1.number().int().nonnegative()).catch(0);
+/** Each entry also carries `status` and `dependsOn`, dropped here until a consumer needs them. */
+const dbtModelTimingSchema = z$1.object({
+	id: z$1.string(),
+	name: z$1.string(),
+	thread: dbtThreadSchema,
+	/** ISO timestamps, left as strings — the consumer decides what to parse them into. */
+	timeStarted: z$1.string(),
+	timeCompleted: z$1.string()
+});
+/** Defaults to empty for the same reason as `compiled` above — and with the same caveat. */
+const dbtRunResultsSchema = z$1.object({ modelTiming: z$1.array(dbtModelTimingSchema).default([]) }).transform(({ modelTiming }) => modelTiming);
+//#endregion
+//#region src/clients/syncActions/dbt/utils.ts
+/**
+* Both dbt artifact actions read the *stored* configuration — `configId` is what they resolve it by,
+* so the payload carries no settings of its own. `artifacts` is the configuration's own artifacts
+* section, passed through untouched: it selects which run's artifacts the component picks up, and
+* omitting it leaves the component on its default (the latest run).
+*/
+const buildDbtActionConfigData = ({ configId, artifacts }) => ({
+	parameters: { configId },
+	...artifacts && { artifacts }
+});
+//#endregion
+//#region src/clients/syncActions/dbt/dbt.ts
+/** The dbt transformations' artifact actions — both read what the *last run* left behind. */
+const createDbt = (sendSyncAction) => {
+	const sendDbtAction = (action, input, signal) => {
+		const { componentId, configId, artifacts, ...context } = parseOrThrow(dbtActionInputSchema, input);
+		return sendSyncAction({
+			...context,
+			componentId,
+			action,
+			configData: buildDbtActionConfigData({
+				configId,
+				artifacts
+			})
+		}, { signal });
+	};
+	/** The compiled SQL of every model in the configuration. */
+	const compile = async (input, signal) => {
+		const data = await sendDbtAction(SyncAction.DBT_COMPILE, input, signal);
+		return parseOrThrow(dbtCompiledSchema, data);
+	};
+	/** When each model of the last run started and finished, and on which worker. */
+	const runResults = async (input, signal) => {
+		const data = await sendDbtAction(SyncAction.DBT_RUN_RESULTS, input, signal);
+		return parseOrThrow(dbtRunResultsSchema, data);
+	};
+	return {
+		compile,
+		runResults
+	};
+};
+//#endregion
+//#region src/clients/syncActions/git/constants.ts
+/**
+* Components whose git repository lives under `parameters.dataApp.git.repository` and that answer to
+* the `git-repository` action. They are the only ones serving `data-app-entrypoints`, and the only
+* ones accepting an SSH key.
+*/
+const DATA_APP_FAMILY = [ComponentId.DATA_APPS, ComponentId.SANDBOXES];
+/**
+* Components whose git repository lives under `parameters.git.repo` and that answer to the
+* `gitRepository` action. They authenticate over HTTPS with a username and password only.
+*
+* Deliberately a list rather than "everything else": `listBranches` / `list_branches` /
+* `checkBranches` also exist on unrelated third-party components (`kds-team.app-custom-python`,
+* `keboola.app-transformation-migration`, `kds-team.app-sox-migration-checker`) under a different
+* contract. Those stay on the generic `sendSyncAction` escape hatch.
+*/
+const DBT_FAMILY = [
+	ComponentId.DBT_TEST_CORE_KEY_PAIR,
+	ComponentId.DBT_TEST_REMOTE_SNOWFLAKE,
+	ComponentId.DBT_TRANSFORMATION,
+	ComponentId.DBT_TRANSFORMATION_LOCAL_BIGQUERY,
+	ComponentId.DBT_TRANSFORMATION_REMOTE_BIGQUERY,
+	ComponentId.DBT_TRANSFORMATION_REMOTE_MSSQL,
+	ComponentId.DBT_TRANSFORMATION_REMOTE_POSTGRESQL,
+	ComponentId.DBT_TRANSFORMATION_REMOTE_REDSHIFT,
+	ComponentId.DBT_TRANSFORMATION_REMOTE_SNOWFLAKE
+];
+const GIT_FAMILY = [...DATA_APP_FAMILY, ...DBT_FAMILY];
+const dataAppIds = new Set(DATA_APP_FAMILY);
+const isDataAppFamily = (componentId) => dataAppIds.has(componentId);
+//#endregion
+//#region src/clients/syncActions/git/schemas.ts
+const gitAuthSchema = z$1.discriminatedUnion("type", [
+	z$1.object({ type: z$1.literal("public") }),
+	z$1.object({
+		type: z$1.literal("password"),
+		username: z$1.string().min(1, "Required"),
+		"#password": z$1.string().min(1, "Required")
+	}),
+	z$1.object({
+		type: z$1.literal("sshKey"),
+		/**
+		* Optional, unlike the password variant's — the key is the whole credential.
+		*
+		* - The component rewrites the URL to `git@host:path` and clones over SSH, where the user is
+		*   always `git` (`keboola/sandboxes`: `GitRepository::resolveRepositoryUrl`).
+		* - It never reads `username` on that path, so a deploy key has none to be stored with.
+		* - Accept one when the caller has it anyway; it reaches the component and is ignored there.
+		*/
+		username: z$1.string().min(1, "Required").optional(),
+		"#sshKey": z$1.string().min(1, "Required")
+	})
+]);
+const gitInputSchema = syncActionContextSchema.extend({
+	repositoryUrl: z$1.string().min(1, "Required"),
+	auth: gitAuthSchema.default({ type: "public" })
+});
+/**
+* Accepts only the components that serve a git repository action — the action name and the
+* `configData` path are resolved from the id, so one from neither family has nowhere to go. The
+* enum rejects an unsupported id when parsing, before any request is sent.
+*
+* **Takes no `branch`, deliberately — do not add one.** It is a run-config field the component
+* feeds to `git clone -b <branch>`, so a stale or renamed value fails the clone and breaks the very
+* call you make to find out which branches exist. Accepting it optionally would let a caller
+* reintroduce that by spreading in an existing config; zod strips it instead.
+*/
+const getBranchesInputSchema = gitInputSchema.extend({ componentId: z$1.enum(GIT_FAMILY) }).check((ctx) => {
+	const { componentId, auth } = ctx.value;
+	if (auth.type !== "sshKey" || isDataAppFamily(componentId)) return;
+	ctx.issues.push({
+		code: "custom",
+		input: auth,
+		path: ["auth"],
+		message: `Component "${componentId}" authenticates with a password, not an SSH key.`
+	});
+});
+/** Only the data-app family serves `data-app-entrypoints`; the enum rejects anything else. */
+const getEntrypointsInputSchema = gitInputSchema.extend({
+	componentId: z$1.enum(DATA_APP_FAMILY),
+	/**
+	* Unlike `getBranches`, the branch is a real input here — it selects whose revision's files get
+	* enumerated. The *git* branch, not the dev branch (`branchId`) every sync action carries.
+	* Omit it for the repository's default branch; don't resolve one client-side.
+	*
+	* An empty string normalises to omitted rather than being rejected: a config written outside the
+	* UI can carry `branch: ""`, and the form this replaces deleted a falsy branch before sending, so
+	* refusing it would fail a call that has always meant "the default branch".
+	*/
+	branch: z$1.string().optional().transform((branch) => branch || void 0)
+});
+/**
+* Only `branch` is load-bearing — it is the value the caller selects and stores. The rest is
+* decoration the UI renders beside it, so each field falls back to an empty string rather than
+* failing: one commit with no message must not cost the caller the whole branch list. They stay
+* `string` rather than becoming optional, so a consumer needs no new undefined handling.
+*/
+const gitBranchSchema = z$1.object({
+	branch: z$1.string(),
+	sha: z$1.string().catch(""),
+	date: z$1.string().catch(""),
+	comment: z$1.string().catch(""),
+	author: z$1.object({
+		name: z$1.string().catch(""),
+		email: z$1.string().catch("")
+	}).catch({
+		name: "",
+		email: ""
+	})
+});
+/**
+* Only `repository.branches` is confirmed — it is what the UI read before these actions were typed.
+* The top-level position is accepted too because the schema this replaces declared it there, and
+* nothing ever exercised that schema to settle which is right; the two families are separate
+* implementations, so both may well be real.
+*
+* A list in neither position is a different thing from an empty one, though, and is rejected rather
+* than read as none: an empty array is a real answer (a repository with no branches yet), while an
+* envelope carrying no list at all is one we do not understand, and rendering that as "no branches"
+* would hide the failure behind an ordinary empty state.
+*/
+/**
+* Either a JSON array or an object keyed by stringified indices, gaps included:
+* `{ "0": …, "1": …, "3": … }`. The component filters the list server-side, and a PHP array whose
+* integer keys are no longer contiguous serializes as an object. `Object.values` reads those keys
+* back in ascending numeric order, so the branch order survives either shape.
+*/
+const gitBranchListSchema = z$1.union([z$1.array(gitBranchSchema), z$1.record(z$1.string(), gitBranchSchema)]).transform((branches) => Array.isArray(branches) ? branches : Object.values(branches));
+const gitBranchesSchema = z$1.object({
+	repository: z$1.object({ branches: gitBranchListSchema.optional() }).optional(),
+	branches: gitBranchListSchema.optional()
+}).check((ctx) => {
+	if (ctx.value.branches ?? ctx.value.repository?.branches) return;
+	ctx.issues.push({
+		code: "custom",
+		input: ctx.value,
+		message: "The response carried no branch list."
+	});
+}).transform(({ repository, branches }) => branches ?? repository?.branches ?? []);
+const gitEntrypointsSchema = z$1.object({ entrypoints: z$1.array(z$1.string()) });
+//#endregion
+//#region src/clients/syncActions/git/utils.ts
+/** Every variant is already the shape the components read, minus the discriminator. */
+const toCredentials = (auth) => {
+	const { type: _type, ...credentials } = auth;
+	return credentials;
+};
+/** The default is the absence of a branch — the component's own `git clone` decides it. */
+const toRevision = (rev) => rev.revision === "branch" ? { branch: rev.branch } : {};
+/** Data apps nest their repository a level deeper, and call the URL `repository`. */
+const buildDataAppConfigData = ({ repositoryUrl, auth, ...rev }) => ({ parameters: { dataApp: { git: {
+	repository: repositoryUrl,
+	...toCredentials(auth),
+	...toRevision(rev)
+} } } });
+/** dbt transformations keep the same settings at the top of `parameters`, under `repo`. */
+const buildDbtConfigData = ({ repositoryUrl, auth, ...rev }) => ({ parameters: { git: {
+	repo: repositoryUrl,
+	...toCredentials(auth),
+	...toRevision(rev)
+} } });
+//#endregion
+//#region src/clients/syncActions/git/git.ts
+/**
+* Git repository actions, across both component families that serve them — the data apps
+* (`git-repository`) and the dbt transformations (`gitRepository`). Which action name and which
+* `configData` shape a call uses is resolved from `componentId`; see `./constants`.
+*/
+const createGit = (sendSyncAction) => {
+	const getBranches = async (input, signal) => {
+		const { componentId, repositoryUrl, auth, ...context } = parseOrThrow(getBranchesInputSchema, input);
+		const isDataApp = isDataAppFamily(componentId);
+		const action = isDataApp ? SyncAction.DATA_APP_GIT_REPOSITORY : SyncAction.GIT_REPOSITORY;
+		const buildConfigData = isDataApp ? buildDataAppConfigData : buildDbtConfigData;
+		const data = await sendSyncAction({
+			...context,
+			componentId,
+			action,
+			configData: buildConfigData({
+				repositoryUrl,
+				auth,
+				revision: "default"
+			})
+		}, { signal });
+		return parseOrThrow(gitBranchesSchema, data);
+	};
+	const getEntrypoints = async (input, signal) => {
+		const { componentId, repositoryUrl, auth, branch, ...context } = parseOrThrow(getEntrypointsInputSchema, input);
+		const data = await sendSyncAction({
+			...context,
+			componentId,
+			action: SyncAction.DATA_APP_ENTRYPOINTS,
+			configData: buildDataAppConfigData({
+				repositoryUrl,
+				auth,
+				...branch ? {
+					revision: "branch",
+					branch
+				} : { revision: "default" }
+			})
+		}, { signal });
+		return parseOrThrow(gitEntrypointsSchema, data);
+	};
+	return {
+		getBranches,
+		getEntrypoints
+	};
+};
+//#endregion
+//#region src/clients/syncActions/looker/schemas.ts
+const testLookerCredentialsInputSchema = syncActionContextSchema.extend({
+	credentialsId: z$1.string().min(1, "Required"),
+	"#token": z$1.string().min(1, "Required"),
+	host: z$1.string().min(1, "Required")
+});
+/** The component answers with a status envelope only — there is no payload to model. */
+const lookerCredentialsResultSchema = z$1.object({
+	status: z$1.string().optional(),
+	message: z$1.string().optional()
+});
+//#endregion
+//#region src/clients/syncActions/looker/looker.ts
+const createLooker = (sendSyncAction) => {
+	/** Registers the project's Looker credentials; throws `SyncActionError` when Looker rejects them. */
+	const testCredentials = async (input, signal) => {
+		const { credentialsId, "#token": token, host, ...context } = parseOrThrow(testLookerCredentialsInputSchema, input);
+		const data = await sendSyncAction({
+			...context,
+			action: SyncAction.TEST_LOOKER_CREDENTIALS,
+			componentId: ComponentId.WR_LOOKER_V2,
+			configData: { parameters: { looker: {
+				credentialsId,
+				"#token": token,
+				host
+			} } }
+		}, { signal });
+		return parseOrThrow(lookerCredentialsResultSchema, data);
+	};
+	return { testCredentials };
+};
+//#endregion
+//#region src/clients/syncActions/syncActionsClient.ts
+const createSendSyncAction = (client) => {
+	return async (body, options = {}) => {
+		const { data } = await client.post("/actions", { body: parseOrThrow(syncActionBodySchema, body) }, options);
+		return data;
+	};
+};
+const createSyncActionsClient = ({ baseUrl, middlewares, auth }) => {
+	const client = createOpenapiFetchClient({
+		baseUrl,
+		middlewares,
+		headers: createAuthHeaders(auth),
+		validateStatus: syncActionValidateStatus
+	});
+	const genericClient = createGenericFetchClient({
+		baseUrl,
+		middlewares
+	});
+	const sendSyncAction = createSendSyncAction(client);
+	const enrollMFA = ({ email, ...rest }, signal) => {
+		return sendSyncAction({
+			...rest,
+			action: SyncAction.ENROLL_MFA,
+			configData: { parameters: { user: { email } } }
+		}, { signal });
+	};
+	const healthCheck = async (signal) => {
+		const { data } = await genericClient.get("/health-check", {}, { signal });
+		return data;
+	};
+	return {
+		healthCheck,
+		sendSyncAction,
+		enrollMFA,
+		apify: createApify(sendSyncAction),
+		dbt: createDbt(sendSyncAction),
+		git: createGit(sendSyncAction),
+		looker: createLooker(sendSyncAction)
+	};
+};
+//#endregion
+export { createSyncActionsClient as t };
+
+//# sourceMappingURL=syncActions-AgFiMjRS.js.map

package/dist/syncActions-AgFiMjRS.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncActions-AgFiMjRS.js","names":["z","z","z","z","z"],"sources":["../src/clients/syncActions/utils/response.ts","../src/clients/syncActions/constants.ts","../src/clients/syncActions/schemas.ts","../src/clients/syncActions/apify/schemas.ts","../src/clients/syncActions/apify/utils.ts","../src/clients/syncActions/apify/apify.ts","../src/clients/syncActions/dbt/schemas.ts","../src/clients/syncActions/dbt/utils.ts","../src/clients/syncActions/dbt/dbt.ts","../src/clients/syncActions/git/constants.ts","../src/clients/syncActions/git/schemas.ts","../src/clients/syncActions/git/utils.ts","../src/clients/syncActions/git/git.ts","../src/clients/syncActions/looker/schemas.ts","../src/clients/syncActions/looker/looker.ts","../src/clients/syncActions/syncActionsClient.ts"],"sourcesContent":["import { SyncActionError } from '../../../errors';\nimport type { ValidateStatusFn } from '../../../fetchClient';\nimport { defaultValidateStatus } from '../../../fetchClient';\n\ntype SyncActionErrorBody = {\n  status?: unknown;\n  message?: unknown;\n  error?: unknown;\n  exceptionId?: unknown;\n  code?: unknown;\n};\n\nconst asErrorBody = (data: unknown): SyncActionErrorBody | null =>\n  typeof data === 'object' && data !== null ? (data as SyncActionErrorBody) : null;\n\nconst asString = (value: unknown) => (typeof value === 'string' && value ? value : undefined);\nconst asNumber = (value: unknown) => (typeof value === 'number' ? value : undefined);\n\n/**\n * A component reports failure two ways: a non-2xx response, and a **2xx** whose body carries\n * `status: 'error'` (the component ran, and said no). Both are recognised here so every sync action\n * fails as one `SyncActionError` — `validateStatus` is the only hook that sees the parsed body of a\n * successful response, which is what the second case needs.\n *\n * Throwing rather than returning the error is deliberate. `coreFetch` only rethrows a returned value\n * that is an `ApiError`, and `SyncActionError` is a peer of `ApiError`, not a subclass: a component\n * answering `status: 'error'` on a **200** gave a business answer, not a transport failure, so it\n * must not satisfy `isApiError` / `isFetchClientError` — those drive retry and \"network problem\"\n * handling, and `err.response.status` would read 200 and mislead every status-based branch.\n */\nexport const syncActionValidateStatus: ValidateStatusFn = (apiResponse) => {\n  const body = asErrorBody(apiResponse.data);\n\n  if (body?.status === 'error') {\n    throw new SyncActionError(\n      asString(body.message) ?? asString(body.error) ?? apiResponse.response.statusText,\n      {\n        exceptionId: asString(body.exceptionId),\n        code: asNumber(body.code),\n        data: apiResponse.data,\n      },\n    );\n  }\n\n  return defaultValidateStatus(apiResponse);\n};\n","export const SyncAction = {\n  DATA_APP_GIT_REPOSITORY: 'git-repository',\n  DATA_APP_ENTRYPOINTS: 'data-app-entrypoints',\n  DBT_COMPILE: 'dbtCompile',\n  DBT_RUN_RESULTS: 'dbtRunResults',\n  GIT_REPOSITORY: 'gitRepository',\n  ENROLL_MFA: 'enrollMFA',\n  LIST_ACTORS: 'listActors',\n  LIST_TASKS: 'listTasks',\n  TEST_LOOKER_CREDENTIALS: 'testLookerCredentials',\n};\n","import * as z from 'zod';\n\n/**\n * The Keboola-side context every sync action carries, whichever action it is. Namespaces extend it\n * with the fields their own action needs, so a caller never assembles the rest of the body.\n */\nexport const syncActionContextSchema = z.object({\n  /**\n   * Required, because omitting it changes nothing: the service normalises a missing, empty or\n   * `null` value to `\"default\"` and resolves that to the default branch's numeric id — the same id,\n   * branch type and downstream context an explicit value resolves to, with no extra lookup either\n   * way. Requiring it keeps every request self-describing. Both a numeric id and the literal\n   * `\"default\"` are accepted (`keboola/runner-sync-api`: `ExecuteActionRequestProcessor` →\n   * `BranchTypeResolver`).\n   */\n  branchId: z.string().min(1, 'Required'),\n  /**\n   * Leave undefined. The service then runs the component's registered tag from the Developer\n   * Portal / Storage component definition — the currently published version, not Docker's\n   * `latest`. Set it only to deliberately pin a specific or branch build.\n   */\n  tag: z.string().optional(),\n  mode: z.enum(['run', 'debug']).optional(),\n});\n\n/**\n * The `/actions` request body. `configData` is whatever the component's action expects, so it is\n * only asserted to be an object here — each namespace validates the shape its own action needs\n * before handing it over.\n */\nexport const syncActionBodySchema = syncActionContextSchema.extend({\n  componentId: z.string().min(1, 'Required'),\n  action: z.string().min(1, 'Required'),\n  configData: z.record(z.string(), z.unknown()),\n});\n\nexport type SyncActionContext = z.infer<typeof syncActionContextSchema>;\nexport type SyncActionBody = z.infer<typeof syncActionBodySchema>;\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nexport const apifyObjectsInputSchema = syncActionContextSchema.extend({\n  '#token': z.string().min(1, 'Required'),\n});\n\nexport const apifyObjectsSchema = z.array(\n  z.object({\n    id: z.string(),\n    name: z.string(),\n  }),\n);\n\nexport type ApifyObjectsInput = z.infer<typeof apifyObjectsInputSchema>;\n\nexport type ApifyObject = z.infer<typeof apifyObjectsSchema>[number];\n","import { SyncActionError } from '../../../errors';\nimport type { ValidateStatusFn } from '../../../fetchClient';\nimport { syncActionValidateStatus } from '../utils/response';\n\n/**\n * A slow Apify account makes the component answer `{ timeout: true }` on a 200 instead of the list —\n * a failure only this action knows how to spot, so it is checked before deferring to the shared\n * validation.\n */\nexport const apifyValidateStatus: ValidateStatusFn = (apiResponse) => {\n  const data = apiResponse.data;\n\n  if (typeof data === 'object' && data !== null && 'timeout' in data && data.timeout)\n    throw new SyncActionError('Timed out while loading data from Apify.', { data });\n\n  return syncActionValidateStatus(apiResponse);\n};\n","import { ComponentId } from '../../../constants';\nimport { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport { type ApifyObjectsInput, apifyObjectsInputSchema, apifyObjectsSchema } from './schemas';\nimport { apifyValidateStatus } from './utils';\n\nexport const createApify = (sendSyncAction: SendSyncAction) => {\n  const _getObjects = async (action: string, input: ApifyObjectsInput, signal?: AbortSignal) => {\n    const { '#token': token, ...context } = parseOrThrow(apifyObjectsInputSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action,\n        componentId: ComponentId.APIFY,\n        configData: { parameters: { '#token': token } },\n      },\n      { signal, validateStatus: apifyValidateStatus },\n    );\n\n    return parseOrThrow(apifyObjectsSchema, data);\n  };\n\n  const getActors = (input: ApifyObjectsInput, signal?: AbortSignal) => {\n    return _getObjects(SyncAction.LIST_ACTORS, input, signal);\n  };\n\n  const getTasks = (input: ApifyObjectsInput, signal?: AbortSignal) => {\n    return _getObjects(SyncAction.LIST_TASKS, input, signal);\n  };\n\n  return { getActors, getTasks };\n};\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\n/**\n * `componentId` is a plain string here, unlike the git actions' closed enum. Every dbt transformation\n * answers `dbtCompile` and `dbtRunResults` under the same action name and the same payload, so the id\n * selects nothing — it only names the component to run, and rejecting an unlisted one would cost the\n * caller a cast for no guarantee. The component itself refuses an action it does not serve.\n */\nexport const dbtActionInputSchema = syncActionContextSchema.extend({\n  componentId: z.string().min(1, 'Required'),\n  configId: z.string().min(1, 'Required'),\n  artifacts: z.record(z.string(), z.unknown()).optional(),\n});\n\n/**\n * `compiled` maps a model's file name (`orders.sql`) to its compiled SQL. Key order is the\n * component's own and is preserved, so the caller can render the models in it.\n *\n * A configuration that has never run does **not** answer with an empty payload — the component\n * raises a user exception telling you to run it first, which arrives as a `SyncActionError` carrying\n * that sentence. The empty default here is only for a payload that omits the key anyway: rendering\n * \"nothing to show\" beats failing on a validation error no caller can act on. A key that is\n * *present* with the wrong shape still fails — that is a contract change, and reading it as \"no\n * models\" would hide it.\n */\nexport const dbtCompiledSchema = z\n  .object({ compiled: z.record(z.string(), z.string()).default({}) })\n  .transform(({ compiled }) => compiled);\n\n/**\n * dbt reports the worker as `\"Thread-1\"`; the number alone is what a consumer positions a row by, so\n * the prefix is stripped here rather than in every consumer. An unparseable value falls back to `0`\n * — one odd worker label must not cost the caller the whole timeline.\n */\nconst dbtThreadSchema = z\n  .string()\n  .transform((thread) => Number.parseInt(thread.replace(/^Thread-/, ''), 10))\n  .pipe(z.number().int().nonnegative())\n  .catch(0);\n\n/** Each entry also carries `status` and `dependsOn`, dropped here until a consumer needs them. */\nexport const dbtModelTimingSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  thread: dbtThreadSchema,\n  /** ISO timestamps, left as strings — the consumer decides what to parse them into. */\n  timeStarted: z.string(),\n  timeCompleted: z.string(),\n});\n\n/** Defaults to empty for the same reason as `compiled` above — and with the same caveat. */\nexport const dbtRunResultsSchema = z\n  .object({ modelTiming: z.array(dbtModelTimingSchema).default([]) })\n  .transform(({ modelTiming }) => modelTiming);\n\nexport type DbtActionInput = z.infer<typeof dbtActionInputSchema>;\nexport type DbtCompiled = z.infer<typeof dbtCompiledSchema>;\nexport type DbtModelTiming = z.infer<typeof dbtModelTimingSchema>;\n","export type DbtActionConfigDataInput = {\n  configId: string;\n  artifacts?: Record<string, unknown>;\n};\n\n/**\n * Both dbt artifact actions read the *stored* configuration — `configId` is what they resolve it by,\n * so the payload carries no settings of its own. `artifacts` is the configuration's own artifacts\n * section, passed through untouched: it selects which run's artifacts the component picks up, and\n * omitting it leaves the component on its default (the latest run).\n */\nexport const buildDbtActionConfigData = ({ configId, artifacts }: DbtActionConfigDataInput) => ({\n  parameters: { configId },\n  ...(artifacts && { artifacts }),\n});\n","import { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport {\n  type DbtActionInput,\n  dbtActionInputSchema,\n  dbtCompiledSchema,\n  dbtRunResultsSchema,\n} from './schemas';\nimport { buildDbtActionConfigData } from './utils';\n\n/** The dbt transformations' artifact actions — both read what the *last run* left behind. */\nexport const createDbt = (sendSyncAction: SendSyncAction) => {\n  const sendDbtAction = (action: string, input: DbtActionInput, signal?: AbortSignal) => {\n    const { componentId, configId, artifacts, ...context } = parseOrThrow(\n      dbtActionInputSchema,\n      input,\n    );\n\n    return sendSyncAction(\n      {\n        ...context,\n        componentId,\n        action,\n        configData: buildDbtActionConfigData({ configId, artifacts }),\n      },\n      { signal },\n    );\n  };\n\n  /** The compiled SQL of every model in the configuration. */\n  const compile = async (input: DbtActionInput, signal?: AbortSignal) => {\n    const data = await sendDbtAction(SyncAction.DBT_COMPILE, input, signal);\n\n    return parseOrThrow(dbtCompiledSchema, data);\n  };\n\n  /** When each model of the last run started and finished, and on which worker. */\n  const runResults = async (input: DbtActionInput, signal?: AbortSignal) => {\n    const data = await sendDbtAction(SyncAction.DBT_RUN_RESULTS, input, signal);\n\n    return parseOrThrow(dbtRunResultsSchema, data);\n  };\n\n  return { compile, runResults };\n};\n","import { ComponentId } from '../../../constants';\n\n/**\n * Components whose git repository lives under `parameters.dataApp.git.repository` and that answer to\n * the `git-repository` action. They are the only ones serving `data-app-entrypoints`, and the only\n * ones accepting an SSH key.\n */\nexport const DATA_APP_FAMILY = [ComponentId.DATA_APPS, ComponentId.SANDBOXES] as const;\n\n/**\n * Components whose git repository lives under `parameters.git.repo` and that answer to the\n * `gitRepository` action. They authenticate over HTTPS with a username and password only.\n *\n * Deliberately a list rather than \"everything else\": `listBranches` / `list_branches` /\n * `checkBranches` also exist on unrelated third-party components (`kds-team.app-custom-python`,\n * `keboola.app-transformation-migration`, `kds-team.app-sox-migration-checker`) under a different\n * contract. Those stay on the generic `sendSyncAction` escape hatch.\n */\nconst DBT_FAMILY = [\n  ComponentId.DBT_TEST_CORE_KEY_PAIR,\n  ComponentId.DBT_TEST_REMOTE_SNOWFLAKE,\n  ComponentId.DBT_TRANSFORMATION,\n  ComponentId.DBT_TRANSFORMATION_LOCAL_BIGQUERY,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_BIGQUERY,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_MSSQL,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_POSTGRESQL,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_REDSHIFT,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_SNOWFLAKE,\n] as const;\n\nexport const GIT_FAMILY = [...DATA_APP_FAMILY, ...DBT_FAMILY] as const;\n\n/** The ids the git actions accept — anything else has no action name or payload path to resolve. */\nexport type GitComponentId = (typeof GIT_FAMILY)[number];\nexport type DataAppComponentId = (typeof DATA_APP_FAMILY)[number];\n\nconst dataAppIds: ReadonlySet<string> = new Set(DATA_APP_FAMILY);\n\nexport const isDataAppFamily = (componentId: string): componentId is DataAppComponentId =>\n  dataAppIds.has(componentId);\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nimport { DATA_APP_FAMILY, GIT_FAMILY, isDataAppFamily } from './constants';\n\nexport const gitAuthSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('public') }),\n  z.object({\n    type: z.literal('password'),\n    username: z.string().min(1, 'Required'),\n    '#password': z.string().min(1, 'Required'),\n  }),\n  z.object({\n    type: z.literal('sshKey'),\n    /**\n     * Optional, unlike the password variant's — the key is the whole credential.\n     *\n     * - The component rewrites the URL to `git@host:path` and clones over SSH, where the user is\n     *   always `git` (`keboola/sandboxes`: `GitRepository::resolveRepositoryUrl`).\n     * - It never reads `username` on that path, so a deploy key has none to be stored with.\n     * - Accept one when the caller has it anyway; it reaches the component and is ignored there.\n     */\n    username: z.string().min(1, 'Required').optional(),\n    '#sshKey': z.string().min(1, 'Required'),\n  }),\n]);\n\nconst gitInputSchema = syncActionContextSchema.extend({\n  repositoryUrl: z.string().min(1, 'Required'),\n  auth: gitAuthSchema.default({ type: 'public' }),\n});\n\n/**\n * Accepts only the components that serve a git repository action — the action name and the\n * `configData` path are resolved from the id, so one from neither family has nowhere to go. The\n * enum rejects an unsupported id when parsing, before any request is sent.\n *\n * **Takes no `branch`, deliberately — do not add one.** It is a run-config field the component\n * feeds to `git clone -b <branch>`, so a stale or renamed value fails the clone and breaks the very\n * call you make to find out which branches exist. Accepting it optionally would let a caller\n * reintroduce that by spreading in an existing config; zod strips it instead.\n */\nexport const getBranchesInputSchema = gitInputSchema\n  .extend({ componentId: z.enum(GIT_FAMILY) })\n  .check((ctx) => {\n    const { componentId, auth } = ctx.value;\n\n    // The one rule the types can't carry: a single method taking either family can't also vary its\n    // auth by family. dbt clones over HTTPS with a username and password, and has no SSH key field.\n    if (auth.type !== 'sshKey' || isDataAppFamily(componentId)) return;\n\n    ctx.issues.push({\n      code: 'custom',\n      input: auth,\n      path: ['auth'],\n      message: `Component \"${componentId}\" authenticates with a password, not an SSH key.`,\n    });\n  });\n\n/** Only the data-app family serves `data-app-entrypoints`; the enum rejects anything else. */\nexport const getEntrypointsInputSchema = gitInputSchema.extend({\n  componentId: z.enum(DATA_APP_FAMILY),\n  /**\n   * Unlike `getBranches`, the branch is a real input here — it selects whose revision's files get\n   * enumerated. The *git* branch, not the dev branch (`branchId`) every sync action carries.\n   * Omit it for the repository's default branch; don't resolve one client-side.\n   *\n   * An empty string normalises to omitted rather than being rejected: a config written outside the\n   * UI can carry `branch: \"\"`, and the form this replaces deleted a falsy branch before sending, so\n   * refusing it would fail a call that has always meant \"the default branch\".\n   */\n  branch: z\n    .string()\n    .optional()\n    .transform((branch) => branch || undefined),\n});\n\n/**\n * Only `branch` is load-bearing — it is the value the caller selects and stores. The rest is\n * decoration the UI renders beside it, so each field falls back to an empty string rather than\n * failing: one commit with no message must not cost the caller the whole branch list. They stay\n * `string` rather than becoming optional, so a consumer needs no new undefined handling.\n */\nconst gitBranchSchema = z.object({\n  branch: z.string(),\n  sha: z.string().catch(''),\n  date: z.string().catch(''),\n  comment: z.string().catch(''),\n  author: z\n    .object({\n      name: z.string().catch(''),\n      email: z.string().catch(''),\n    })\n    .catch({ name: '', email: '' }),\n});\n\n/**\n * Only `repository.branches` is confirmed — it is what the UI read before these actions were typed.\n * The top-level position is accepted too because the schema this replaces declared it there, and\n * nothing ever exercised that schema to settle which is right; the two families are separate\n * implementations, so both may well be real.\n *\n * A list in neither position is a different thing from an empty one, though, and is rejected rather\n * than read as none: an empty array is a real answer (a repository with no branches yet), while an\n * envelope carrying no list at all is one we do not understand, and rendering that as \"no branches\"\n * would hide the failure behind an ordinary empty state.\n */\n/**\n * Either a JSON array or an object keyed by stringified indices, gaps included:\n * `{ \"0\": …, \"1\": …, \"3\": … }`. The component filters the list server-side, and a PHP array whose\n * integer keys are no longer contiguous serializes as an object. `Object.values` reads those keys\n * back in ascending numeric order, so the branch order survives either shape.\n */\nconst gitBranchListSchema = z\n  .union([z.array(gitBranchSchema), z.record(z.string(), gitBranchSchema)])\n  .transform((branches) => (Array.isArray(branches) ? branches : Object.values(branches)));\n\nexport const gitBranchesSchema = z\n  .object({\n    repository: z.object({ branches: gitBranchListSchema.optional() }).optional(),\n    branches: gitBranchListSchema.optional(),\n  })\n  .check((ctx) => {\n    if (ctx.value.branches ?? ctx.value.repository?.branches) return;\n\n    ctx.issues.push({\n      code: 'custom',\n      input: ctx.value,\n      message: 'The response carried no branch list.',\n    });\n  })\n  .transform(({ repository, branches }) => branches ?? repository?.branches ?? []);\n\nexport const gitEntrypointsSchema = z.object({\n  entrypoints: z.array(z.string()),\n});\n\nexport type GitAuth = z.infer<typeof gitAuthSchema>;\nexport type GetBranchesInput = z.input<typeof getBranchesInputSchema>;\nexport type GetEntrypointsInput = z.input<typeof getEntrypointsInputSchema>;\nexport type GitBranch = z.infer<typeof gitBranchSchema>;\nexport type GitEntrypoints = z.infer<typeof gitEntrypointsSchema>;\n","import type { GitAuth } from './schemas';\n\n/** Every variant is already the shape the components read, minus the discriminator. */\nconst toCredentials = (auth: GitAuth) => {\n  const { type: _type, ...credentials } = auth;\n\n  return credentials;\n};\n\n/**\n * Which revision the component clones before it answers:\n *\n * - `default` — no `-b` flag, so the clone lands on the repository's own default branch. Branch\n *   listing must use this: it clones purely to enumerate the remote branches, so pinning one that\n *   is stale or renamed fails the very call made to discover the valid ones.\n *   `getBranchesInputSchema` accepts no `branch`, so that path has nothing to pin with.\n * - `branch` — pins the clone with `git clone -b <branch>`, deciding whose revision the action\n *   reads. Entrypoint listing uses it once the user has picked a branch.\n */\ntype GitRevision = { revision: 'default' } | { revision: 'branch'; branch: string };\n\n/** The default is the absence of a branch — the component's own `git clone` decides it. */\nconst toRevision = (rev: GitRevision) => (rev.revision === 'branch' ? { branch: rev.branch } : {});\n\nexport type GitConfigDataInput = {\n  repositoryUrl: string;\n  auth: GitAuth;\n} & GitRevision;\n\n/** Data apps nest their repository a level deeper, and call the URL `repository`. */\nexport const buildDataAppConfigData = ({ repositoryUrl, auth, ...rev }: GitConfigDataInput) => ({\n  parameters: {\n    dataApp: {\n      git: {\n        repository: repositoryUrl,\n        ...toCredentials(auth),\n        ...toRevision(rev),\n      },\n    },\n  },\n});\n\n/** dbt transformations keep the same settings at the top of `parameters`, under `repo`. */\nexport const buildDbtConfigData = ({ repositoryUrl, auth, ...rev }: GitConfigDataInput) => ({\n  parameters: {\n    git: {\n      repo: repositoryUrl,\n      ...toCredentials(auth),\n      ...toRevision(rev),\n    },\n  },\n});\n","import { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport { isDataAppFamily } from './constants';\nimport {\n  type GetBranchesInput,\n  getBranchesInputSchema,\n  type GetEntrypointsInput,\n  getEntrypointsInputSchema,\n  gitBranchesSchema,\n  gitEntrypointsSchema,\n} from './schemas';\nimport { buildDataAppConfigData, buildDbtConfigData } from './utils';\n\n/**\n * Git repository actions, across both component families that serve them — the data apps\n * (`git-repository`) and the dbt transformations (`gitRepository`). Which action name and which\n * `configData` shape a call uses is resolved from `componentId`; see `./constants`.\n */\nexport const createGit = (sendSyncAction: SendSyncAction) => {\n  const getBranches = async (input: GetBranchesInput, signal?: AbortSignal) => {\n    const { componentId, repositoryUrl, auth, ...context } = parseOrThrow(\n      getBranchesInputSchema,\n      input,\n    );\n    const isDataApp = isDataAppFamily(componentId);\n    const action = isDataApp ? SyncAction.DATA_APP_GIT_REPOSITORY : SyncAction.GIT_REPOSITORY;\n    const buildConfigData = isDataApp ? buildDataAppConfigData : buildDbtConfigData;\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        componentId,\n        action,\n        configData: buildConfigData({ repositoryUrl, auth, revision: 'default' }),\n      },\n      { signal },\n    );\n\n    return parseOrThrow(gitBranchesSchema, data);\n  };\n\n  const getEntrypoints = async (input: GetEntrypointsInput, signal?: AbortSignal) => {\n    const { componentId, repositoryUrl, auth, branch, ...context } = parseOrThrow(\n      getEntrypointsInputSchema,\n      input,\n    );\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        componentId,\n        action: SyncAction.DATA_APP_ENTRYPOINTS,\n        // Data-app only — the input schema rejects every other component, so no family branch here.\n        configData: buildDataAppConfigData({\n          repositoryUrl,\n          auth,\n          ...(branch ? { revision: 'branch', branch } : { revision: 'default' }),\n        }),\n      },\n      { signal },\n    );\n\n    return parseOrThrow(gitEntrypointsSchema, data);\n  };\n\n  return { getBranches, getEntrypoints };\n};\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nexport const testLookerCredentialsInputSchema = syncActionContextSchema.extend({\n  credentialsId: z.string().min(1, 'Required'),\n  '#token': z.string().min(1, 'Required'),\n  host: z.string().min(1, 'Required'),\n});\n\n/** The component answers with a status envelope only — there is no payload to model. */\nexport const lookerCredentialsResultSchema = z.object({\n  status: z.string().optional(),\n  message: z.string().optional(),\n});\n\nexport type TestLookerCredentialsInput = z.infer<typeof testLookerCredentialsInputSchema>;\nexport type LookerCredentialsResult = z.infer<typeof lookerCredentialsResultSchema>;\n","import { ComponentId } from '../../../constants';\nimport { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport {\n  lookerCredentialsResultSchema,\n  type TestLookerCredentialsInput,\n  testLookerCredentialsInputSchema,\n} from './schemas';\n\nexport const createLooker = (sendSyncAction: SendSyncAction) => {\n  /** Registers the project's Looker credentials; throws `SyncActionError` when Looker rejects them. */\n  const testCredentials = async (input: TestLookerCredentialsInput, signal?: AbortSignal) => {\n    const {\n      credentialsId,\n      '#token': token,\n      host,\n      ...context\n    } = parseOrThrow(testLookerCredentialsInputSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action: SyncAction.TEST_LOOKER_CREDENTIALS,\n        componentId: ComponentId.WR_LOOKER_V2,\n        configData: { parameters: { looker: { credentialsId, '#token': token, host } } },\n      },\n      { signal },\n    );\n\n    return parseOrThrow(lookerCredentialsResultSchema, data);\n  };\n\n  return { testCredentials };\n};\n","import { parseOrThrow } from '../../errors';\nimport type { ValidateStatusFn } from '../../fetchClient';\nimport { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport { syncActionValidateStatus } from './utils/response';\nimport { createApify } from './apify';\nimport { SyncAction } from './constants';\nimport { createDbt } from './dbt';\nimport { createGit } from './git';\nimport { createLooker } from './looker';\nimport { type SyncActionBody, syncActionBodySchema } from './schemas';\nimport type { EnrollMFAInput, PostActionsBodyRaw } from './types';\n\nexport type SendSyncActionOptions = {\n  signal?: AbortSignal;\n  /**\n   * Replaces the client's `syncActionValidateStatus` for this one request. Use it where a component\n   * signals failure in a way only its own action knows about — delegate to the shared one for\n   * everything else.\n   */\n  validateStatus?: ValidateStatusFn;\n};\n\nconst createSendSyncAction = (client: SyncActionClient) => {\n  return async (body: SyncActionBody, options: SendSyncActionOptions = {}) => {\n    const { data } = await client.post(\n      '/actions',\n      // The generated body type has `configData: Record<string, never>`, which nothing can satisfy;\n      // `syncActionBodySchema` is the real contract and is what the request is validated against.\n      { body: parseOrThrow(syncActionBodySchema, body) as unknown as PostActionsBodyRaw },\n      options,\n    );\n\n    return data;\n  };\n};\n\nexport type SendSyncAction = ReturnType<typeof createSendSyncAction>;\ntype SyncActionClient = ReturnType<typeof createOpenapiFetchClient<paths>>;\n\nexport const createSyncActionsClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n    validateStatus: syncActionValidateStatus,\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const sendSyncAction = createSendSyncAction(client);\n\n  const enrollMFA = ({ email, ...rest }: EnrollMFAInput, signal?: AbortSignal) => {\n    return sendSyncAction(\n      {\n        ...rest,\n        action: SyncAction.ENROLL_MFA,\n        configData: {\n          parameters: {\n            user: {\n              email,\n            },\n          },\n        },\n      },\n      { signal },\n    );\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    sendSyncAction,\n    enrollMFA,\n    apify: createApify(sendSyncAction),\n    dbt: createDbt(sendSyncAction),\n    git: createGit(sendSyncAction),\n    looker: createLooker(sendSyncAction),\n  };\n};\n"],"mappings":";;;;;;;;;AAYA,MAAM,eAAe,SACnB,OAAO,SAAS,YAAY,SAAS,OAAQ,OAA+B;AAE9E,MAAM,YAAY,UAAoB,OAAO,UAAU,YAAY,QAAQ,QAAQ,KAAA;AACnF,MAAM,YAAY,UAAoB,OAAO,UAAU,WAAW,QAAQ,KAAA;;;;;;;;;;;;;AAc1E,MAAa,4BAA8C,gBAAgB;CACzE,MAAM,OAAO,YAAY,YAAY,IAAI;CAEzC,IAAI,MAAM,WAAW,SACnB,MAAM,IAAI,gBACR,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,KAAK,YAAY,SAAS,YACvE;EACE,aAAa,SAAS,KAAK,WAAW;EACtC,MAAM,SAAS,KAAK,IAAI;EACxB,MAAM,YAAY;CACpB,CACF;CAGF,OAAO,sBAAsB,WAAW;AAC1C;;;AC7CA,MAAa,aAAa;CACxB,yBAAyB;CACzB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,gBAAgB;CAChB,YAAY;CACZ,aAAa;CACb,YAAY;CACZ,yBAAyB;AAC3B;;;;;;;ACJA,MAAa,0BAA0BA,IAAE,OAAO;;;;;;;;;CAS9C,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;;;;;;CAMtC,KAAKA,IAAE,OAAO,CAAC,CAAC,SAAS;CACzB,MAAMA,IAAE,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;;;;;;AAOD,MAAa,uBAAuB,wBAAwB,OAAO;CACjE,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACzC,QAAQA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACpC,YAAYA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC;AAC9C,CAAC;;;AC9BD,MAAa,0BAA0B,wBAAwB,OAAO,EACpE,UAAUC,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,EACxC,CAAC;AAED,MAAa,qBAAqBA,IAAE,MAClCA,IAAE,OAAO;CACP,IAAIA,IAAE,OAAO;CACb,MAAMA,IAAE,OAAO;AACjB,CAAC,CACH;;;;;;;;ACJA,MAAa,uBAAyC,gBAAgB;CACpE,MAAM,OAAO,YAAY;CAEzB,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,aAAa,QAAQ,KAAK,SACzE,MAAM,IAAI,gBAAgB,4CAA4C,EAAE,KAAK,CAAC;CAEhF,OAAO,yBAAyB,WAAW;AAC7C;;;ACRA,MAAa,eAAe,mBAAmC;CAC7D,MAAM,cAAc,OAAO,QAAgB,OAA0B,WAAyB;EAC5F,MAAM,EAAE,UAAU,OAAO,GAAG,YAAY,aAAa,yBAAyB,KAAK;EAEnF,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH;GACA,aAAa,YAAY;GACzB,YAAY,EAAE,YAAY,EAAE,UAAU,MAAM,EAAE;EAChD,GACA;GAAE;GAAQ,gBAAgB;EAAoB,CAChD;EAEA,OAAO,aAAa,oBAAoB,IAAI;CAC9C;CAEA,MAAM,aAAa,OAA0B,WAAyB;EACpE,OAAO,YAAY,WAAW,aAAa,OAAO,MAAM;CAC1D;CAEA,MAAM,YAAY,OAA0B,WAAyB;EACnE,OAAO,YAAY,WAAW,YAAY,OAAO,MAAM;CACzD;CAEA,OAAO;EAAE;EAAW;CAAS;AAC/B;;;;;;;;;ACxBA,MAAa,uBAAuB,wBAAwB,OAAO;CACjE,aAAaC,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACzC,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACtC,WAAWA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;AACxD,CAAC;;;;;;;;;;;;AAaD,MAAa,oBAAoBA,IAC9B,OAAO,EAAE,UAAUA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAClE,WAAW,EAAE,eAAe,QAAQ;;;;;;AAOvC,MAAM,kBAAkBA,IACrB,OAAO,CAAC,CACR,WAAW,WAAW,OAAO,SAAS,OAAO,QAAQ,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAC1E,KAAKA,IAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CACpC,MAAM,CAAC;;AAGV,MAAa,uBAAuBA,IAAE,OAAO;CAC3C,IAAIA,IAAE,OAAO;CACb,MAAMA,IAAE,OAAO;CACf,QAAQ;;CAER,aAAaA,IAAE,OAAO;CACtB,eAAeA,IAAE,OAAO;AAC1B,CAAC;;AAGD,MAAa,sBAAsBA,IAChC,OAAO,EAAE,aAAaA,IAAE,MAAM,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAClE,WAAW,EAAE,kBAAkB,WAAW;;;;;;;;;AC5C7C,MAAa,4BAA4B,EAAE,UAAU,iBAA2C;CAC9F,YAAY,EAAE,SAAS;CACvB,GAAI,aAAa,EAAE,UAAU;AAC/B;;;;ACDA,MAAa,aAAa,mBAAmC;CAC3D,MAAM,iBAAiB,QAAgB,OAAuB,WAAyB;EACrF,MAAM,EAAE,aAAa,UAAU,WAAW,GAAG,YAAY,aACvD,sBACA,KACF;EAEA,OAAO,eACL;GACE,GAAG;GACH;GACA;GACA,YAAY,yBAAyB;IAAE;IAAU;GAAU,CAAC;EAC9D,GACA,EAAE,OAAO,CACX;CACF;;CAGA,MAAM,UAAU,OAAO,OAAuB,WAAyB;EACrE,MAAM,OAAO,MAAM,cAAc,WAAW,aAAa,OAAO,MAAM;EAEtE,OAAO,aAAa,mBAAmB,IAAI;CAC7C;;CAGA,MAAM,aAAa,OAAO,OAAuB,WAAyB;EACxE,MAAM,OAAO,MAAM,cAAc,WAAW,iBAAiB,OAAO,MAAM;EAE1E,OAAO,aAAa,qBAAqB,IAAI;CAC/C;CAEA,OAAO;EAAE;EAAS;CAAW;AAC/B;;;;;;;;ACvCA,MAAa,kBAAkB,CAAC,YAAY,WAAW,YAAY,SAAS;;;;;;;;;;AAW5E,MAAM,aAAa;CACjB,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;AACd;AAEA,MAAa,aAAa,CAAC,GAAG,iBAAiB,GAAG,UAAU;AAM5D,MAAM,aAAkC,IAAI,IAAI,eAAe;AAE/D,MAAa,mBAAmB,gBAC9B,WAAW,IAAI,WAAW;;;ACjC5B,MAAa,gBAAgBC,IAAE,mBAAmB,QAAQ;CACxDA,IAAE,OAAO,EAAE,MAAMA,IAAE,QAAQ,QAAQ,EAAE,CAAC;CACtCA,IAAE,OAAO;EACP,MAAMA,IAAE,QAAQ,UAAU;EAC1B,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;EACtC,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC3C,CAAC;CACDA,IAAE,OAAO;EACP,MAAMA,IAAE,QAAQ,QAAQ;;;;;;;;;EASxB,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC,SAAS;EACjD,WAAWA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACzC,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,wBAAwB,OAAO;CACpD,eAAeA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC3C,MAAM,cAAc,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,CAAC;;;;;;;;;;;AAYD,MAAa,yBAAyB,eACnC,OAAO,EAAE,aAAaA,IAAE,KAAK,UAAU,EAAE,CAAC,CAAC,CAC3C,OAAO,QAAQ;CACd,MAAM,EAAE,aAAa,SAAS,IAAI;CAIlC,IAAI,KAAK,SAAS,YAAY,gBAAgB,WAAW,GAAG;CAE5D,IAAI,OAAO,KAAK;EACd,MAAM;EACN,OAAO;EACP,MAAM,CAAC,MAAM;EACb,SAAS,cAAc,YAAY;CACrC,CAAC;AACH,CAAC;;AAGH,MAAa,4BAA4B,eAAe,OAAO;CAC7D,aAAaA,IAAE,KAAK,eAAe;;;;;;;;;;CAUnC,QAAQA,IACL,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,WAAW,UAAU,KAAA,CAAS;AAC9C,CAAC;;;;;;;AAQD,MAAM,kBAAkBA,IAAE,OAAO;CAC/B,QAAQA,IAAE,OAAO;CACjB,KAAKA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CACxB,MAAMA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CACzB,SAASA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CAC5B,QAAQA,IACL,OAAO;EACN,MAAMA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;EACzB,OAAOA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC,CAAC,CACD,MAAM;EAAE,MAAM;EAAI,OAAO;CAAG,CAAC;AAClC,CAAC;;;;;;;;;;;;;;;;;;AAmBD,MAAM,sBAAsBA,IACzB,MAAM,CAACA,IAAE,MAAM,eAAe,GAAGA,IAAE,OAAOA,IAAE,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CACxE,WAAW,aAAc,MAAM,QAAQ,QAAQ,IAAI,WAAW,OAAO,OAAO,QAAQ,CAAE;AAEzF,MAAa,oBAAoBA,IAC9B,OAAO;CACN,YAAYA,IAAE,OAAO,EAAE,UAAU,oBAAoB,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;CAC5E,UAAU,oBAAoB,SAAS;AACzC,CAAC,CAAC,CACD,OAAO,QAAQ;CACd,IAAI,IAAI,MAAM,YAAY,IAAI,MAAM,YAAY,UAAU;CAE1D,IAAI,OAAO,KAAK;EACd,MAAM;EACN,OAAO,IAAI;EACX,SAAS;CACX,CAAC;AACH,CAAC,CAAC,CACD,WAAW,EAAE,YAAY,eAAe,YAAY,YAAY,YAAY,CAAC,CAAC;AAEjF,MAAa,uBAAuBA,IAAE,OAAO,EAC3C,aAAaA,IAAE,MAAMA,IAAE,OAAO,CAAC,EACjC,CAAC;;;;ACrID,MAAM,iBAAiB,SAAkB;CACvC,MAAM,EAAE,MAAM,OAAO,GAAG,gBAAgB;CAExC,OAAO;AACT;;AAeA,MAAM,cAAc,QAAsB,IAAI,aAAa,WAAW,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;;AAQhG,MAAa,0BAA0B,EAAE,eAAe,MAAM,GAAG,WAA+B,EAC9F,YAAY,EACV,SAAS,EACP,KAAK;CACH,YAAY;CACZ,GAAG,cAAc,IAAI;CACrB,GAAG,WAAW,GAAG;AACnB,EACF,EACF,EACF;;AAGA,MAAa,sBAAsB,EAAE,eAAe,MAAM,GAAG,WAA+B,EAC1F,YAAY,EACV,KAAK;CACH,MAAM;CACN,GAAG,cAAc,IAAI;CACrB,GAAG,WAAW,GAAG;AACnB,EACF,EACF;;;;;;;;AC/BA,MAAa,aAAa,mBAAmC;CAC3D,MAAM,cAAc,OAAO,OAAyB,WAAyB;EAC3E,MAAM,EAAE,aAAa,eAAe,MAAM,GAAG,YAAY,aACvD,wBACA,KACF;EACA,MAAM,YAAY,gBAAgB,WAAW;EAC7C,MAAM,SAAS,YAAY,WAAW,0BAA0B,WAAW;EAC3E,MAAM,kBAAkB,YAAY,yBAAyB;EAE7D,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH;GACA;GACA,YAAY,gBAAgB;IAAE;IAAe;IAAM,UAAU;GAAU,CAAC;EAC1E,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,mBAAmB,IAAI;CAC7C;CAEA,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,aAAa,eAAe,MAAM,QAAQ,GAAG,YAAY,aAC/D,2BACA,KACF;EAEA,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH;GACA,QAAQ,WAAW;GAEnB,YAAY,uBAAuB;IACjC;IACA;IACA,GAAI,SAAS;KAAE,UAAU;KAAU;IAAO,IAAI,EAAE,UAAU,UAAU;GACtE,CAAC;EACH,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,sBAAsB,IAAI;CAChD;CAEA,OAAO;EAAE;EAAa;CAAe;AACvC;;;AChEA,MAAa,mCAAmC,wBAAwB,OAAO;CAC7E,eAAeC,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC3C,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACtC,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACpC,CAAC;;AAGD,MAAa,gCAAgCA,IAAE,OAAO;CACpD,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;;;ACHD,MAAa,gBAAgB,mBAAmC;;CAE9D,MAAM,kBAAkB,OAAO,OAAmC,WAAyB;EACzF,MAAM,EACJ,eACA,UAAU,OACV,MACA,GAAG,YACD,aAAa,kCAAkC,KAAK;EAExD,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH,QAAQ,WAAW;GACnB,aAAa,YAAY;GACzB,YAAY,EAAE,YAAY,EAAE,QAAQ;IAAE;IAAe,UAAU;IAAO;GAAK,EAAE,EAAE;EACjF,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,+BAA+B,IAAI;CACzD;CAEA,OAAO,EAAE,gBAAgB;AAC3B;;;ACTA,MAAM,wBAAwB,WAA6B;CACzD,OAAO,OAAO,MAAsB,UAAiC,CAAC,MAAM;EAC1E,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,YAGA,EAAE,MAAM,aAAa,sBAAsB,IAAI,EAAmC,GAClF,OACF;EAEA,OAAO;CACT;AACF;AAKA,MAAa,2BAA2B,EAAE,SAAS,aAAa,WAA8B;CAC5F,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;EAC/B,gBAAgB;CAClB,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,qBAAqB,MAAM;CAElD,MAAM,aAAa,EAAE,OAAO,GAAG,QAAwB,WAAyB;EAC9E,OAAO,eACL;GACE,GAAG;GACH,QAAQ,WAAW;GACnB,YAAY,EACV,YAAY,EACV,MAAM,EACJ,MACF,EACF,EACF;EACF,GACA,EAAE,OAAO,CACX;CACF;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA,OAAO,YAAY,cAAc;EACjC,KAAK,UAAU,cAAc;EAC7B,KAAK,UAAU,cAAc;EAC7B,QAAQ,aAAa,cAAc;CACrC;AACF"}