@keboola/api-client 32.0.0 → 33.0.0

package/AGENTS.md

@@ -77,7 +77,7 @@ Two flow-specific factories back the SDK, and **both return `{ api, session }`**
 `subscribe(cb)` (fires on config **and** storage-build transitions), and `debug()`. Then:
 
 - bearer: `authenticate(token)` → `setProject(projectId)` / `setProjectAsync(projectId)` (awaits the
-  build) / `reset()`.
+  build) / `forProject(projectId)` (a second project alongside the first) / `reset()`.
 - legacy: `authenticateStorage(sapiToken)` / `authenticateStorageAsync(sapiToken)` (awaits the build),
   `authenticateManagement(manageToken)`.
 
@@ -98,6 +98,83 @@ session.setProject(otherId); // runtime re-scope (rebuilds against the new proje
 session.debug(); // { baseUrl, authReady, managementReady, storage, config }
 ```
 
+### Several projects at once (bearer)
+
+One session can address any number of projects. The credential is a **user** token — project scope is
+one header, `X-KBC-ProjectId` — so `session.forProject(projectId)` builds a `ProjectClients` set for
+any project the user can reach, off the session already in hand:
+
+```ts
+const { api, session } = createKeboola({ baseUrl });
+const result = await api.auth.login.withPassword({ email, password });
+if (!result.mfaRequired) session.authenticate(result); // a TokenSet, not a token string
+await session.setProjectAsync(42); // the session's scope — this is what `api.*` addresses
+
+const other = await session.forProject(7); // a second project, alongside the first
+const [mine, theirs] = await Promise.all([
+  api.storage.buckets.getBuckets({ branchId: 'default' }), // project 42
+  other.storage.buckets.getBuckets({ branchId: 'default' }), // project 7
+]);
+```
+
+`setProjectAsync` **moves** the session (and `api`) to another project; `forProject` **adds** one. Use
+`setProjectAsync` for the project the app is centred on, and `forProject` for every other project it
+reads alongside — the returned clients are yours to hold and never appear on `api`.
+
+- **One credential, one refresh loop.** Every set shares the session's auth middleware, so a token
+  rotation happens once and serves all of them.
+- **Repeat calls are cheap** — a project is bootstrapped once and concurrent callers share that one
+  build. A failed build is retryable.
+- **A project you cannot reach fails the build, not the session.** Connection answers a denied or
+  nonexistent project with the same `invalid_token` 401 as a revoked token — bearer failures are
+  collapsed deliberately, so scope cannot be probed. `forProject` is the only surface taking a
+  caller-supplied id, so it reads a 401 that survives a token rotation as being about the project:
+  the build rejects with the underlying `ApiError` and the session stays signed in. A credential that
+  really is dead still signs you out — the refresh itself 401s, which is unambiguous.
+- **Independent of the scope**, in both directions: re-scoping the session never redirects a set
+  someone holds, and `forProject(scopedProject)` builds a _second_ set rather than reusing `api`'s.
+  For the project the app is centred on, use `api.*`.
+- **Nothing extra is persisted.** Storage still holds one entry, `{ baseUrl, projectId, refreshToken }`
+  — and that `projectId` is the _scope_. The extra projects are runtime state; re-add them on startup.
+- **`reset()` really is a teardown.** Every set is pinned to the sign-in that built it, so one held
+  across a sign-out throws `KeboolaError` (`NotAuthenticated`) on its next request instead of quietly
+  acting as whoever signed in after. Ask again for a fresh one. `clearProject()` drops the scope, not
+  the credential, so it leaves the extra projects alone.
+
+The pin is not specific to `forProject`: **anything that emits this session's credential is bound to
+the sign-in it was built on** — `api.storage`, `api.context`, `api.management`,
+`session.getAuthHeaders()` and `session.restore()` included. The auth middleware holds no token, it
+reads the credential live, so rebuilding a store on sign-out only stops new reads; a request already
+in flight would otherwise complete as the next user, still stamped with the previous project.
+`api.auth` is built once per stack and serves every session, so it pins each _request_ to the sign-in
+that started it rather than to its build — enough to stop a 401 recovery from replaying as the next
+user, and the next session's `login` runs unstamped either way. The guard wraps the **credential**,
+not just the outgoing request: the 401 path rotates the token by calling the credential directly, and
+a straggler from a dead session would otherwise spend the live session's single-use refresh token —
+and sign that session out if the rotation itself came back 401. Anything new that takes the auth
+middleware, or hands the credential to a transport we don't own, needs the same pin — see
+`createPinnedAuthMiddleware` / `pinToSession` in `bearer/keboola.ts`.
+
+**The pin has to cover the failure branches, not only the happy path** — that is where it keeps being
+missed. Two shapes:
+
+- **Anything that re-invokes `next` goes _inside_ the pin**, via `createPinnedAuthMiddleware`'s
+  `inner`, never beside it in the middleware array. The array's first element is the outermost one,
+  so a retry placed there re-enters the pin per attempt — and where the epoch is read per request
+  (`api.auth`) every attempt re-pins to whoever is signed in by then. A 503 backoff is long enough
+  for a sign-out to land in.
+- **A rotation or a restore that _fails_ after its session ended must be re-labelled before the
+  error travels on.** A raw 401 is read as "this credential is dead" by `credential.ts` and as "the
+  stored token is dead" by `restore()`, and both then act on the session that replaced it — signing
+  it out, or clearing the storage entry it just wrote. Compare the epoch in the `catch` as well as
+  after the `await`.
+
+⚠️ **A second `createKeboola()` is not the way to reach a second project — it signs you out of both.**
+Both instances hold the same single-use refresh token, and refresh _rotates_ it, with two-phase
+rotation and replay detection on the server. Whichever instance rotates first invalidates the other's
+token, whose next refresh 401s and signs it out. This is a functional break, not a style preference,
+and it does not depend on a `storage` adapter being configured.
+
 In React, `useApiClient()` returns `api`; `AuthProvider` (bearer) / `LegacyAuthProvider` (legacy) own
 driving the `session` to ready and gate on a `fallback`. See
 [`@keboola/api-client-react`](../api-client-react/AGENTS.md).
@@ -112,7 +189,8 @@ const { api, session } = createKeboola({ baseUrl, storage: createLocalStorage()
 // On startup, call `session.restore()` to rehydrate: it exchanges the persisted refresh token for a
 // fresh credential eagerly (before any request), then re-scopes to the stored project. It resolves
 // `{ status: 'restored' | 'empty' | 'expired' }` — `expired` means the refresh token was dead and the
-// stored session was cleared; route to login. `session.reset()` clears the stored session.
+// stored session was cleared; route to login. `session.reset()` clears the stored session — and one
+// landing mid-restore wins: the restore resolves `empty` rather than signing the user back in.
 const result = await session.restore();
 ```
 

package/API-SURFACE.md

@@ -4,7 +4,7 @@
 
 Every namespace and method reachable from a ready `KeboolaApi` — the `api` half of a keboola client (`createKeboola(...).api` / `createLegacyKeboola(...).api`, or `useApiClient()`). Generated from the TypeScript type checker — see `scripts/gen-surface.mjs`.
 
-24 top-level namespaces, 621 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
+24 top-level namespaces, 624 methods. This index lists method **names** only — full signatures live per namespace under [`surface/`](./surface). Open `surface/<namespace>.md` for the one you need.
 
 ## [`api.ai`](./surface/ai.md)
 
@@ -184,6 +184,7 @@ Every namespace and method reachable from a ready `KeboolaApi` — the `api` hal
 - `getHistory`
 - `getSandboxGitBranch`
 - `getSkillsList`
+- `getSpendCaps`
 - `getSuggestions`
 - `getToolsList`
 - `getUsage`
@@ -192,10 +193,12 @@ Every namespace and method reachable from a ready `KeboolaApi` — the `api` hal
 - `healthCheck`
 - `listSandboxFiles`
 - `readSandboxFile`
+- `setUserSpendLimit`
 - `stopChat`
 - `submitToolOutput`
 - `submitVote`
 - `updateAgentSettings`
+- `updateSpendCaps`
 - `updateUserAgentSettings`
 
 ## [`api.management`](./surface/management.md)

package/CHANGELOG.md

@@ -1,5 +1,227 @@
 # @keboola/api-client
 
+## 33.0.0
+
+### Minor Changes
+
+- `createEmitter` delivers events in emission order, never nested, and `Store` gains `asReadable()`.
+  - An `emit` from inside a listener is queued until the current pass has reached every listener, so
+    no listener hears event N+1 before event N. For a store this means a subscriber that writes back
+    can no longer leave a later subscriber on stale state — the last notification is always the
+    latest value.
+  - A listener's own emit is handled after it returns; a throwing listener is logged and does not
+    stall the queue behind it. Nothing is coalesced: every event is delivered.
+  - A pass reaches the listeners present when it began. Subscribing from inside a listener no longer
+    delivers the event in flight to the new listener — it hears the next one, as it would have had it
+    subscribed a moment earlier. Unsubscribing (or `clear()`) from inside a listener still takes
+    effect immediately for the rest of that pass.
+  - `store.asReadable()` returns the same store without `set` — the read-only view consumers were
+    building by hand from `get` / `subscribe` / `dispose`.
+
+- `auth.pat.create` / `auth.pat.exchange` take a `CreatePatInput` / `ExchangePatInput` whose optional
+  fields may be left out, and drop the keys a caller passes as `null` instead of putting them on the
+  wire. The spec documents every optional PAT field as "omit, do not send `null`", but the generated
+  bodies demand each of them, so a caller holding a nullable — an empty expiry picker, an untouched
+  read-only switch — had no way to express the default. `scope` gains the same treatment: a
+  `{ projects, readOnly }` that narrows nothing is sent as no `scope` at all.
+
+  Existing calls keep compiling and keep their behaviour, since the previously required
+  `expiresIn: null` / `scope: null` is what the normaliser now drops.
+
+- The semantic layer's closed value sets ship as runtime lists, so an authoring surface no longer
+  writes them out by hand. `FIELD_ROLES`, `CONSTRAINT_SEVERITIES`, `CONSTRAINT_SCOPES`,
+  `RULE_OPERATORS` and `RELATIONSHIP_JOIN_TYPES` join `SQL_DIALECTS` and `CONSTRAINT_TYPES`, which
+  move to the same module and keep their existing import paths.
+
+  ```ts
+  import {
+    CONSTRAINT_SCOPES,
+    metastoreErrorMessage,
+  } from "@keboola/api-client/sdk/semanticLayer";
+  import type { SemanticConstraintScope } from "@keboola/api-client/sdk/semanticLayer/types";
+
+  // a total label map, so a scope the metastore adds is a compile error rather than a missing option
+  const SCOPE_LABELS: Record<SemanticConstraintScope, string> = {
+    global: "Global" /* … */,
+  };
+  const options = CONSTRAINT_SCOPES.map((value) => ({
+    value,
+    label: SCOPE_LABELS[value],
+  }));
+  ```
+
+  - Each union in `./types` is now derived from its list rather than spelled out again, so the type
+    and the list a validator or a dropdown is built from cannot disagree. `SemanticConstraintSeverity`
+    and `SemanticRelationshipJoinType` are named for the first time; they were inline unions on
+    `SemanticConstraintData.severity` and `SemanticRelationshipData.type`.
+  - The `./sdk/semanticLayer/types` entry point stays free of runtime code — the derivation reads the
+    lists through an `import type`.
+  - `metastoreErrorMessage(body)` reads the one field that says what is actually wrong with a
+    rejected write (`errors[0].message`, e.g. `missing property 'fqn'`). The status and the
+    response's own message say no more than "Validation failed". Any other shape returns `undefined`,
+    so a caller keeps its own fallback.
+
+- Reach several projects from one bearer session with `session.forProject(projectId)`
+
+  A bearer access token is a user token — project scope is a single `X-KBC-ProjectId` header — so one
+  session can legitimately address many projects. Until now only the scoped project had clients, and
+  the obvious workaround was a second `createKeboola()`, which signs both instances out: they hold the
+  same single-use refresh token, and the first to rotate invalidates the other's.
+
+  `session.forProject(projectId)` returns that project's `ProjectClients` off the session in hand,
+  reusing its credential and auth middleware, so a token rotation happens once for every project rather
+  than once each. `setProjectAsync` moves the session (and `api`); `forProject` adds a project alongside
+  it. A project is bootstrapped once and concurrent callers share that build; a failed build is
+  retryable.
+
+  Every client set is pinned to the sign-in that built it, so `reset()` is a teardown rather than a
+  cache eviction — a set held across a sign-out throws `NotAuthenticated` on its next request, the 401
+  replay included, instead of quietly acting as whoever signed in after. `clearProject()` drops the
+  scope, not the credential, and leaves the extra projects alone. Nothing extra is persisted.
+
+  The same pin covers every other surface that emits this session's credential.
+  `api.storage`/`api.context` and `api.management` rebuild on sign-out, but that could not stop a
+  request already in flight from completing as the next user, with the previous project's
+  `X-KBC-ProjectId` still on it. `session.getAuthHeaders()` resolved to the dead session's token and
+  project, because the proactive rotation swallows its own refusal. A token rotation is pinned to the
+  sign-in that spent the refresh token, so one resolving after its own session ended is dropped rather
+  than written over the credential of whoever signed in since, and a sign-out abandons the in-flight
+  rotation so the next session starts its own. `api.auth` is built once per stack and serves every
+  session, so it pins each _request_ to the sign-in that started it: a 401 recovery no longer replays
+  as the next user, while `login` still goes out unstamped. `session.restore()` is pinned too — a
+  sign-out landing while the stored token is being exchanged resolves `empty` instead of signing the
+  user back in.
+
+  The guard wraps the **credential**, not only the outgoing request, because the 401 path rotates the
+  token by calling the credential directly: a straggler from a dead session would otherwise spend the
+  live session's single-use refresh token, and sign that session out if the rotation itself came back 401.
+
+  The pin covers the failure branches too, which is where it was missed. A retry re-invokes `next`,
+  so `retryContention` is composed _inside_ the pin rather than beside it in the auth client's
+  middleware array — outside it, an `api.auth` request that hit a 503 re-pinned per attempt and the
+  retry went out as whoever signed in during the backoff. And a rotation or a restore that _fails_
+  after its session ended is re-labelled `NotAuthenticated` before the error travels on: a raw 401
+  reads as "this credential is dead" to the credential and as "the stored token is dead" to
+  `restore()`, so a straggler used to sign out the session that replaced it, and a losing concurrent
+  restore used to clear the winner's stored session — leaving it alive in memory and gone on the next
+  reload.
+
+  A project the session cannot reach now fails its own build and nothing else. Connection answers a
+  denied or nonexistent project with the same `invalid_token` 401 as a revoked token, so `forProject`
+  reads a 401 that survives a token rotation as being about the project rather than the credential —
+  a mistyped project id used to sign the whole session out.
+
+  `ProjectClients` is now exported as a type.
+
+### Patch Changes
+
+- `kaiAgent`'s spend-caps response gains `defaultProjectCapPpu` — the bare platform default project
+  cap, independent of what's persisted. Previously only `effectiveProjectCapPpu` (the server's
+  resolution of the _persisted_ cap) was exposed, which a consumer could not use to validate a
+  cleared-but-unsaved project-cap field against the true default.
+
+- `kaiAgent`'s generated schema is regenerated against the deployed spec, so `getUsage` reports the
+  spend-cap scope and the one project-level figure a plain member is shown.
+  - `getUsage` gains `ppuLimitScope: 'user' | 'project' | null` — which ceiling stops the caller next.
+    A label, never a figure: the project's absolute budget stays admin-only.
+  - `getUsage` gains `projectPpuPercentage: number | null` — how much of the project's cap is spent.
+    It is the fallback a caller with no personal `ppuLimit` is measured against, and `null` only
+    where no project cap applies at all.
+  - `getChat` gains `ppuPercentage: number | null`, the same figure alongside a conversation.
+  - The `rate_limit` error `subtype` splits `monthly_credits` into `monthly_credits_user` and
+    `monthly_credits_project`.
+  - Additive drift the same regeneration picked up: the `/api/settings/spend-caps` pair, the
+    `/api/chat/{id}/sandbox/file/download` path, and a `payload_too_large` error type with its 413.
+
+- `Result` gains constructors, guards and combinators, so code that returns a `Result` of its own no
+  longer writes the object literal, and code that consumes one no longer branches on `success` by
+  hand.
+
+  ```ts
+  import { Result } from "@keboola/api-client";
+
+  const getStack = (id: string): Result<Stack> =>
+    stacks.has(id)
+      ? Result.success(stacks.get(id))
+      : Result.failure(new Error(`No stack "${id}"`));
+
+  // handle both branches in one expression, Rust-match style
+  const label = Result.match(
+    getStack(id),
+    (stack) => stack.name,
+    (error) => error.message,
+  );
+
+  // at a layer boundary, relabel the failure as the error this layer speaks, then throw it
+  const stack = Result.unwrap(
+    Result.mapError(
+      getStack(id),
+      () => new KeboolaError(KeboolaErrorType.Unconfigured),
+    ),
+  );
+  ```
+
+  - `success` is `Result<T, never>` and `failure` is `Result<never, E>`, so either widens into any
+    `Result<T, E>` without an annotation. `Success<T>` and `Failure<E>` name the two branches.
+  - `isSuccess` / `isFailure` are type guards; `map`, `mapError` and `andThen` rewrite one branch
+    and pass the other through untouched.
+  - `match(result, onSuccess, onFailure)` returns whichever callback ran, so the two must agree on a
+    type; `void` works. `unwrap` throws the error as-is; `unwrapOr` returns a fallback instead.
+  - `tryCatch` and `fromThrowable` reject a task that returns a promise at the type level, since they
+    would report success before it settles. Use `tryCatchAsync` / `fromThrowableAsync` for those.
+
+- `TableDetail` declares the three freshness fields the detail response carries: `lastImportDate`,
+  `lastChangeDate` and `rowsCount`.
+
+  ```ts
+  const table = await api.storage.tables.getTable({ branchId, id });
+  // `null` is the table's own answer — nothing has ever been written into it.
+  if (table.lastImportDate === null) return "Nothing loaded yet";
+  ```
+
+  - Declared required, where `TableDetailResponse` in the generated schema marks them optional. That
+    node marks `?` on every nullable field it has, so the marker conflates "nullable" with
+    "optional"; `TableCreateResponse` — which the table list reuses — and `AliasFilterSetResponse`
+    declare the same fields required-and-nullable. `Table` and `TableDetail` now agree on all three.
+  - `null` means different things per field, and each one says so: never written into
+    (`lastImportDate`), and Storage declining to count rather than a count of zero (`rowsCount`).
+
+- `isTimeoutError` joins `isAbortError` in the fetch-client error taxonomy, exported from both
+  `@keboola/api-client` and `@keboola/api-client/fetchClient`.
+
+  ```ts
+  import { isTimeoutError } from "@keboola/api-client";
+
+  // `DOMException('signal timed out', 'TimeoutError')` — what an `AbortSignal.timeout` rejects with.
+  if (isTimeoutError(error)) return null;
+  ```
+
+  - Matches on `DOMException.name`, since the message is a browser string rather than a contract.
+  - Distinct from `isAbortError`: a timeout is the deadline expiring, an abort is someone cancelling.
+  - `xhrFetch` is not covered — its `handleAbort` builds an `AbortError` without reading
+    `signal.reason`, so a timeout on that transport reports as a cancel.
+
+  `@keboola/sentry`'s shared `beforeSend` is the first caller: a request that never got a response
+  measures the network, not the code, and reports with no stacktrace.
+
+- Security patches for transitive dependencies: qs 6.16.0 in api-client, mermaid 11.17.2 and dompurify
+  3.4.14 in design.
+
+  No API or behaviour change in either package.
+
+- Interpret the org-admin `kai-assistant.monthlyCreditsLimitPerUser` Storage key as PPU (the same
+  unit an admin sees and sets everywhere else, per AI-3628), converting it to the internal
+  Kai-credits ceiling at the read boundary. `@keboola/api-client`'s kai-agent schema regenerated to
+  pick up `ppuUsed`/`ppuLimit` on `GET /api/usage`; `@keboola/kai-fake-agent`'s stub updated to match.
+  `@keboola/kai-agent` and `@keboola/kbc-ui` are private, nothing to release for them — acknowledged
+  so `changeset status` doesn't choke on them alongside the real `@keboola/api-client` release.
+
+- Show Kai spend caps in project settings and scope-aware chat copy (AI-3738).
+
+  `@keboola/api-client`'s kai-agent client/surface-docs regenerated for the spend-caps endpoints;
+  `@keboola/constants`, `@keboola/kai-fake-agent`, `@keboola/kai-agent` and `@keboola/kbc-ui` are
+  private, nothing to release for them — acknowledged so `changeset status` doesn't choke on them.
+
 ## 32.0.0
 
 ### Major Changes

package/dist/{ManagementClientAuthError-B-tyPlyG.cjs → ManagementClientAuthError-DqeXL8nv.cjs}

@@ -1,4 +1,4 @@
-const require_createFetchClient = require("./createFetchClient-BRfTjBLV.cjs");
+const require_createFetchClient = require("./createFetchClient-DvZvD31l.cjs");
 //#region src/errors/ManagementClientAuthError.ts
 var ManagementClientAuthError = class extends require_createFetchClient.ApiError {
 	title;
@@ -17,4 +17,4 @@ Object.defineProperty(exports, "ManagementClientAuthError", {
 	}
 });
 
-//# sourceMappingURL=ManagementClientAuthError-B-tyPlyG.cjs.map
+//# sourceMappingURL=ManagementClientAuthError-DqeXL8nv.cjs.map

package/dist/{ManagementClientAuthError-B-tyPlyG.cjs.map → ManagementClientAuthError-DqeXL8nv.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"ManagementClientAuthError-B-tyPlyG.cjs","names":["ApiError"],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+CA,0BAAAA,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}
+{"version":3,"file":"ManagementClientAuthError-DqeXL8nv.cjs","names":["ApiError"],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+CA,0BAAAA,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}

package/dist/{ManagementClientAuthError-BAFNvOdf.js → ManagementClientAuthError-iKbBugKC.js}

@@ -1,4 +1,4 @@
-import { m as ApiError } from "./createFetchClient-BbG46bL0.js";
+import { h as ApiError } from "./createFetchClient-DdyZMhxO.js";
 //#region src/errors/ManagementClientAuthError.ts
 var ManagementClientAuthError = class extends ApiError {
 	title;
@@ -12,4 +12,4 @@ var ManagementClientAuthError = class extends ApiError {
 //#endregion
 export { ManagementClientAuthError as t };
 
-//# sourceMappingURL=ManagementClientAuthError-BAFNvOdf.js.map
+//# sourceMappingURL=ManagementClientAuthError-iKbBugKC.js.map

package/dist/{ManagementClientAuthError-BAFNvOdf.js.map → ManagementClientAuthError-iKbBugKC.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ManagementClientAuthError-BAFNvOdf.js","names":[],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+C,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}
+{"version":3,"file":"ManagementClientAuthError-iKbBugKC.js","names":[],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+C,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}

package/dist/ai/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-CyDUFxHB.cjs");
-const require_auth = require("../auth-DP-6TFiM.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-C57Ljzi6.cjs");
+const require_auth = require("../auth-C2_JLisH.cjs");
 //#region src/clients/ai/aiClient.ts
 const createAiClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({

package/dist/ai/index.d.cts

@@ -1,5 +1,5 @@
-import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-CvkqEvhv.cjs";
-import { n as ClientInitOptions } from "../types-BREGN3qo.cjs";
+import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-bY6K3y0O.cjs";
+import { n as ClientInitOptions } from "../types-DHI0g51U.cjs";
 //#region src/clients/ai/aiClient.d.ts
 declare const createAiClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<{

package/dist/ai/index.d.ts

@@ -1,5 +1,5 @@
-import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-BnaAo7xn.js";
-import { n as ClientInitOptions } from "../types-DwpRt3e9.js";
+import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-ZGAWRIBW.js";
+import { n as ClientInitOptions } from "../types-D-98DirB.js";
 //#region src/clients/ai/aiClient.d.ts
 declare const createAiClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<{

package/dist/ai/index.js

@@ -1,5 +1,5 @@
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-Bn6_Pn0H.js";
-import { t as createAuthHeaders } from "../auth-DtbQaeDj.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-E7OIVkYv.js";
+import { t as createAuthHeaders } from "../auth-CE9rQV3-.js";
 //#region src/clients/ai/aiClient.ts
 const createAiClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({

package/dist/ai/types.d.cts

@@ -1,2 +1,2 @@
-import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-CvkqEvhv.cjs";
+import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-bY6K3y0O.cjs";
 export { ComponentDocsDetail, ComponentSuggestion, DescribeConfigurationBody, DescribeConfigurationMergeBody, DescribeConfigurationVersionBody, DocsAnswer, DocsQuestionBody, ErrorExplanation, ExplainErrorBody, FeedbackBody, ObjectDescription, SuggestComponentBody };

package/dist/ai/types.d.ts

@@ -1,2 +1,2 @@
-import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-BnaAo7xn.js";
+import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-ZGAWRIBW.js";
 export { ComponentDocsDetail, ComponentSuggestion, DescribeConfigurationBody, DescribeConfigurationMergeBody, DescribeConfigurationVersionBody, DocsAnswer, DocsQuestionBody, ErrorExplanation, ExplainErrorBody, FeedbackBody, ObjectDescription, SuggestComponentBody };

package/dist/{appLogs-DTLE6HTy.js → appLogs-D72eD8vP.js}

@@ -1,5 +1,5 @@
 import { t as isPlainObject } from "./isPlainObject-LYW-03uB.js";
-import { f as HttpStatus, o as HttpHeader, r as isApiError, u as parseContentDispositionHeader } from "./createFetchClient-BbG46bL0.js";
+import { d as parseContentDispositionHeader, p as HttpStatus, r as isApiError, s as HttpHeader } from "./createFetchClient-DdyZMhxO.js";
 import * as z$1 from "zod";
 import dayjs from "dayjs";
 import utc from "dayjs/plugin/utc.js";
@@ -129,4 +129,4 @@ const readAppLogsDownload = async (fetchLogs) => {
 //#endregion
 export { readAppLogsDownload as n, readAppLogsTail as r, parseLogLines as t };
 
-//# sourceMappingURL=appLogs-DTLE6HTy.js.map
+//# sourceMappingURL=appLogs-D72eD8vP.js.map

package/dist/{appLogs-DTLE6HTy.js.map → appLogs-D72eD8vP.js.map}

@@ -1 +1 @@
-{"version":3,"file":"appLogs-DTLE6HTy.js","names":["z","record"],"sources":["../src/domain/appLogs.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output. Shared by the two clients wrapping sandboxes-service —\n * `dataScience` (`/v1`) and `apps` (`/v2`) — which serve the same logs under different paths, so the\n * tail contract (how a line is parsed, where the next poll resumes, and that an idle app is not an\n * error) is defined once here rather than per surface.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AAoBA,MAAM,OAAO,GAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYA,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAI,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAI,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,OAAO,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyB,8BACzB,SAAS,QAAQ,IAAI,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF"}
+{"version":3,"file":"appLogs-D72eD8vP.js","names":["z","record"],"sources":["../src/domain/appLogs.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output. Shared by the two clients wrapping sandboxes-service —\n * `dataScience` (`/v1`) and `apps` (`/v2`) — which serve the same logs under different paths, so the\n * tail contract (how a line is parsed, where the next poll resumes, and that an idle app is not an\n * error) is defined once here rather than per surface.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AAoBA,MAAM,OAAO,GAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYA,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAI,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAI,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,OAAO,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyB,8BACzB,SAAS,QAAQ,IAAI,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF"}

package/dist/{appLogs-NIEDTDHf.cjs → appLogs-D8K0VeNM.cjs}

@@ -1,6 +1,6 @@
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_isPlainObject = require("./isPlainObject-BB3iy87C.cjs");
-const require_createFetchClient = require("./createFetchClient-BRfTjBLV.cjs");
+const require_createFetchClient = require("./createFetchClient-DvZvD31l.cjs");
 let zod = require("zod");
 zod = require_rolldown_runtime.__toESM(zod, 1);
 let dayjs = require("dayjs");
@@ -150,4 +150,4 @@ Object.defineProperty(exports, "readAppLogsTail", {
 	}
 });
 
-//# sourceMappingURL=appLogs-NIEDTDHf.cjs.map
+//# sourceMappingURL=appLogs-D8K0VeNM.cjs.map

package/dist/{appLogs-NIEDTDHf.cjs.map → appLogs-D8K0VeNM.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"appLogs-NIEDTDHf.cjs","names":["utc","z","record","isPlainObject","isApiError","HttpStatus","parseContentDispositionHeader","HttpHeader"],"sources":["../src/domain/appLogs.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output. Shared by the two clients wrapping sandboxes-service —\n * `dataScience` (`/v1`) and `apps` (`/v2`) — which serve the same logs under different paths, so the\n * tail contract (how a line is parsed, where the next poll resumes, and that an idle app is not an\n * error) is defined once here rather than per surface.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAA,QAAM,OAAOA,oBAAAA,OAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYC,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAIC,sBAAAA,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAIA,sBAAAA,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,QAAA,GAAO,MAAA,QAAA,CAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyBC,0BAAAA,8BACzB,SAAS,QAAQ,IAAIC,0BAAAA,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF"}
+{"version":3,"file":"appLogs-D8K0VeNM.cjs","names":["utc","z","record","isPlainObject","isApiError","HttpStatus","parseContentDispositionHeader","HttpHeader"],"sources":["../src/domain/appLogs.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output. Shared by the two clients wrapping sandboxes-service —\n * `dataScience` (`/v1`) and `apps` (`/v2`) — which serve the same logs under different paths, so the\n * tail contract (how a line is parsed, where the next poll resumes, and that an idle app is not an\n * error) is defined once here rather than per surface.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAA,QAAM,OAAOA,oBAAAA,OAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYC,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAIC,sBAAAA,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAIA,sBAAAA,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,QAAA,GAAO,MAAA,QAAA,CAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyBC,0BAAAA,8BACzB,SAAS,QAAQ,IAAIC,0BAAAA,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF"}

package/dist/{appLogs-BAaaGYKg.d.cts → appLogs-Q4A7A_Fc.d.cts}

@@ -1,4 +1,4 @@
-import "./index-CQrKS7PV.cjs";
+import "./index-DhVFuQDv.cjs";
 //#region src/domain/appLogs.d.ts
 type LogEntry = {
   timestamp: string | null;
@@ -7,4 +7,4 @@ type LogEntry = {
 declare const parseLogLines: (raw: unknown) => LogEntry[];
 //#endregion
 export { parseLogLines as n, LogEntry as t };
-//# sourceMappingURL=appLogs-BAaaGYKg.d.cts.map
+//# sourceMappingURL=appLogs-Q4A7A_Fc.d.cts.map

package/dist/{appLogs-DX_WTBCa.d.ts → appLogs-u0XMZLjS.d.ts}

@@ -1,4 +1,4 @@
-import "./index-CeJOmN-P.js";
+import "./index-DVhTNwvu.js";
 //#region src/domain/appLogs.d.ts
 type LogEntry = {
   timestamp: string | null;
@@ -7,4 +7,4 @@ type LogEntry = {
 declare const parseLogLines: (raw: unknown) => LogEntry[];
 //#endregion
 export { parseLogLines as n, LogEntry as t };
-//# sourceMappingURL=appLogs-DX_WTBCa.d.ts.map
+//# sourceMappingURL=appLogs-u0XMZLjS.d.ts.map

package/dist/apps/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-CyDUFxHB.cjs");
-const require_auth = require("../auth-DP-6TFiM.cjs");
-const require_appLogs = require("../appLogs-NIEDTDHf.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-C57Ljzi6.cjs");
+const require_auth = require("../auth-C2_JLisH.cjs");
+const require_appLogs = require("../appLogs-D8K0VeNM.cjs");
 //#region src/clients/apps/appsClient.ts
 /**
 * `/v2` App Deployments — data apps plus the immutable deployment history behind them. Sibling of

package/dist/apps/index.d.cts

@@ -1,6 +1,6 @@
-import { n as ClientInitOptions } from "../types-BREGN3qo.cjs";
-import { S as components, b as GetLogsTailQuery, c as CreateCredentialBody, f as CredentialId, g as DeploymentId, l as CreateDeploymentBody, r as AppId, s as CreateAppBody, t as App, v as GetAppRunsQuery, x as RunId, y as GetAppsQuery } from "../types-CyiRYRVq.cjs";
-import { t as LogEntry } from "../appLogs-BAaaGYKg.cjs";
+import { n as ClientInitOptions } from "../types-DHI0g51U.cjs";
+import { S as components, b as GetLogsTailQuery, c as CreateCredentialBody, f as CredentialId, g as DeploymentId, l as CreateDeploymentBody, r as AppId, s as CreateAppBody, t as App, v as GetAppRunsQuery, x as RunId, y as GetAppsQuery } from "../types-3p0adMdd.cjs";
+import { t as LogEntry } from "../appLogs-Q4A7A_Fc.cjs";
 //#region src/clients/apps/appsClient.d.ts
 /**
  * No `idempotencyKey`. The service accepted an `Idempotency-Key` that turned a replayed create