@keboola/api-client 36.0.0 → 40.0.0

package/dist/domain/permissions/index.d.cts

@@ -1,21 +1,11 @@
-import { l as StorageToken } from "../../types-DPS8nwkV.cjs";
-import { n as hasAdminFeature, r as hasFeature } from "../../project-hePfzUY0.cjs";
+import { l as StorageToken } from "../../types-DDOa07rU.cjs";
+import { n as hasAdminFeature, r as hasFeature } from "../../project-cHKuGvqJ.cjs";
 //#region src/domain/permissions/errors.d.ts
 /**
  * @module domain/permissions/errors
  *
- * Stable error contract for permission denials.
- *
- * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The
- * three public fields are part of the SDK's published contract — consumers
- * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`
- * and surface `reason` in UI, so renames here are breaking changes.
- *
- * PII boundary on `subject`:
- *   `subject` is optional and intended for debugging hints only — admin id,
- *   role name, configuration id, branch id, etc. It MUST NOT carry the full
- *   `StorageToken`, raw tokens, secrets, or any value that could be logged or
- *   surfaced to a user without further redaction.
+ * - What every `assertCan*` throws; its public fields are SDK contract — renames break consumers.
+ * - `subject` is a debugging hint only — never a `StorageToken`, raw token or secret.
  */
 declare class PermissionDeniedError extends Error {
   readonly action: string;
@@ -35,57 +25,34 @@ declare const isProductionManager: (token: StorageToken) => boolean;
 declare const isDeveloperOrReviewer: (token: StorageToken) => boolean;
 declare const isReadOnlyRole: (token: StorageToken) => boolean;
 /**
- * Whether a role string is a member of `AdminRole` at all — distinct from
- * whether it may do any particular thing. A role failing this check is not
- * "denied", it's *unrecognized*: either Storage started returning a role this
- * client has never heard of, or something upstream is sending garbage. Callers
- * that deny-by-default on every predicate here (the common case) still want to
- * know about this distinction, because it never shows up as a failed request —
- * a caller should log it loudly rather than treat it as routine.
+ * Whether a role string is a member of `AdminRole` at all.
+ *
+ * - Failing it means *unrecognized*, not denied — log it loudly.
  */
 declare const isKnownAdminRole: (adminRole: string | null | undefined) => boolean;
 /**
- * Whether an admin role may write Kai's **project-wide** settings (custom
- * instructions injected into every project member's system prompt).
- *
- * `admin` and `share` only. The value is a shared prompt-injection surface, so
- * changing it counts as project administration rather than project work:
- * `productionManager` and `guest` are read-only for project management in kbc-ui,
- * and `developer`/`reviewer` are denied because `agent_settings` is keyed by
- * `project_id` alone — editing it "inside a dev branch" writes production-visible
- * global config.
- *
- * An allowlist, deliberately: `AdminRole` gains members upstream, and a denylist
- * would admit each new one silently with no test failing. Takes the raw role
- * string so a caller holding an unparsed `tokens.verify()` response can use it
- * without fabricating a `StorageToken`. AI-3671.
+ * Whether an admin role may write Kai's project-wide settings.
  *
- * @see ./organization#canWriteKaiSpendCaps — spend caps (AI-3738) are
- * organization-admin only and use that predicate; do not widen this one to
- * cover them.
+ * - `admin` and `share` only: a shared prompt-injection surface is project administration.
+ * - `developer`/`reviewer` are denied: `agent_settings` is keyed by `project_id` alone, so a dev-branch edit hits production.
+ * - An allowlist, so new upstream `AdminRole` members are denied by default.
+ * - Spend caps use `./organization#canWriteKaiSpendCaps`; don't widen this for them.
  */
 declare const isKaiSettingsWriterRole: (adminRole: string | null | undefined) => boolean;
 /**
- * Whether this token may write Kai's project-wide settings. A limited
- * (non-master) token never may: it carries no project role at all, and its
- * `admin` block is absent despite the hand-authored type declaring it required
- * (AI-3593) — hence the optional chain.
+ * Whether this token may write Kai's project-wide settings.
+ *
+ * - A limited (non-master) token never may; its `admin` block is absent despite the type.
  */
 declare const canWriteKaiSettings: (token: StorageToken) => boolean;
 declare const assertCanWriteKaiSettings: (token: StorageToken) => void;
 /**
- * Whether this token may write the project's semantic layer — models and their
- * datasets, metrics, relationships, glossary terms and constraints in the
- * metastore.
+ * Whether this token may write the project's semantic layer in the metastore.
  *
- * - A denylist, unlike `isKaiSettingsWriterRole` above: the metastore's
- *   project-level ACL admits ordinary project work, so every role that can edit
- *   configurations can edit the model. Only `readOnly` is refused.
- * - A limited (non-master) token carries no project role and its `admin` block is
- *   absent (AI-3593) — hence the optional chain. It is not denied here: the
- *   metastore, not this client, decides what such a token may do.
- * - Organization-scope promotion is a separate, narrower right the metastore
- *   answers with a 403; surface that error rather than pre-empting it here.
+ * - Mirrors the metastore's role mapping (go-monorepo `services/metastore/internal/authz`):
+ *   only a master token with the `admin` or `productionManager` role gets `project-admin`.
+ * - Every other role, and a limited token (no `admin` block), gets a 403.
+ * - Organization-scope promotion is left to the metastore's 403.
  */
 declare const canWriteSemanticLayer: (token: StorageToken) => boolean;
 declare const assertCanAdmin: (token: StorageToken) => void;
@@ -95,45 +62,24 @@ declare const assertCanDevelopOrReview: (token: StorageToken) => void;
 //#endregion
 //#region src/domain/permissions/organization.d.ts
 /**
- * The raw signal: is this token's admin a member of the organization owning
- * the project?
+ * Whether this token's admin is a member of the organization owning the project.
  *
- * A limited (non-master) token never is — it carries no `admin` block at all
- * despite the hand-authored type declaring it required (AI-3593), hence the
- * optional chain and the `isMasterToken` requirement. Prefer
- * `isOrganizationAdmin` for authorization decisions; this bare signal exists
- * because a few kbc-ui call sites use it with no role conjunction (e.g.
- * `privileges.ts`'s `canManageUsers`/`canUnlinkBucket`), and porting those must
- * not change behaviour.
+ * - A limited token has no `admin` block despite the type saying required.
+ * - Prefer `isOrganizationAdmin` for authorization decisions.
  */
 declare const isOrganizationMember: (token: StorageToken) => boolean;
 /**
- * May this token administer organization-owned settings on this project?
+ * `isOrganizationMember` AND `admin`/`share`.
  *
- * `isOrganizationMember` AND `admin`/`share`. The conjunction — not the bare
- * flag — is the shape kbc-ui already uses wherever org authority gates a
- * project-level *write* (e.g. `privileges.ts`'s `canChangeUserRole` for the
- * SHARE target). Keeping the conjunction means an org member holding a
- * `readOnly` or `guest` token on this particular project still cannot write,
- * matching every existing write-shaped call site.
+ * - An org member with a `readOnly` or `guest` role on this project still cannot write.
  */
 declare const isOrganizationAdmin: (token: StorageToken) => boolean;
 declare const assertCanAdministerOrganization: (token: StorageToken) => void;
 /**
- * Whether this token may write Kai's **spend caps** — the project cap, the
- * default per-user limit, and per-user overrides (AI-3738).
- *
- * Strictly stricter than `canWriteKaiSettings` (`./admin`), and deliberately a
- * distinct predicate rather than a widening of it. `canWriteKaiSettings` is
- * `admin`/`share` — the authority to rewrite shared project *config* (a
- * prompt-injection surface). Spend caps commit the organization's money across
- * every project it owns, so per AI-3738 they are organization-admin only: a
- * project admin sees which caps apply and cannot change them. A project whose
- * own admin could raise its own cap has no cap.
+ * Whether this token may write Kai's spend caps: project cap, default and per-user limits.
  *
- * Lives here rather than beside `canWriteKaiSettings` in `admin.ts` because its
- * rule is org-scoped and `admin.ts` is documented as depending purely on the
- * project role string.
+ * - Org-admin only, stricter than `canWriteKaiSettings`: caps commit the org's money.
+ * - A project whose own admin could raise its cap has no cap.
  */
 declare const canWriteKaiSpendCaps: (token: StorageToken) => boolean;
 declare const assertCanWriteKaiSpendCaps: (token: StorageToken) => void;
@@ -142,26 +88,7 @@ declare const assertCanWriteKaiSpendCaps: (token: StorageToken) => void;
 /**
  * Caller-supplied context for configuration predicates.
  *
- * @property isDevModeActive — `true` when the user is operating inside a
- *   development branch (any storage branch other than the protected default /
- *   production branch); `false` when operating on the default branch in
- *   production.
- *
- *   How the caller determines this:
- *   - The active branch comes from the caller's own routing / app state
- *     (e.g. `/branch/:branchId` in kbc-ui).
- *   - A branch is "dev mode" when it is **not** the default branch returned by
- *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).
- *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`
- *     compared against the default branch id; the api-client itself stays
- *     isomorphic and never reads that state directly.
- *
- *   Why it changes the rule:
- *   - In dev branches Keboola allows broader write access — `developer` and
- *     `reviewer` roles may create / copy / migrate configurations because the
- *     branch is sandboxed from production.
- *   - On the default branch only `productionManager` (or `admin`) may perform
- *     the same writes, since changes ship live to production.
+ * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.
  */
 type ConfigurationCtx = {
   isDevModeActive: boolean;

package/dist/domain/permissions/index.d.ts

@@ -1,21 +1,11 @@
-import { l as StorageToken } from "../../types-DBOSvWtD.js";
-import { n as hasAdminFeature, r as hasFeature } from "../../project-C2wvX0xZ.js";
+import { l as StorageToken } from "../../types-BS4jwuMi.js";
+import { n as hasAdminFeature, r as hasFeature } from "../../project-B15gStbM.js";
 //#region src/domain/permissions/errors.d.ts
 /**
  * @module domain/permissions/errors
  *
- * Stable error contract for permission denials.
- *
- * `PermissionDeniedError` is what every `assertCan*` pair throws on denial. The
- * three public fields are part of the SDK's published contract — consumers
- * (kbc-ui, kai-agent, third-party TS callers) may pattern-match on `action`
- * and surface `reason` in UI, so renames here are breaking changes.
- *
- * PII boundary on `subject`:
- *   `subject` is optional and intended for debugging hints only — admin id,
- *   role name, configuration id, branch id, etc. It MUST NOT carry the full
- *   `StorageToken`, raw tokens, secrets, or any value that could be logged or
- *   surfaced to a user without further redaction.
+ * - What every `assertCan*` throws; its public fields are SDK contract — renames break consumers.
+ * - `subject` is a debugging hint only — never a `StorageToken`, raw token or secret.
  */
 declare class PermissionDeniedError extends Error {
   readonly action: string;
@@ -35,57 +25,34 @@ declare const isProductionManager: (token: StorageToken) => boolean;
 declare const isDeveloperOrReviewer: (token: StorageToken) => boolean;
 declare const isReadOnlyRole: (token: StorageToken) => boolean;
 /**
- * Whether a role string is a member of `AdminRole` at all — distinct from
- * whether it may do any particular thing. A role failing this check is not
- * "denied", it's *unrecognized*: either Storage started returning a role this
- * client has never heard of, or something upstream is sending garbage. Callers
- * that deny-by-default on every predicate here (the common case) still want to
- * know about this distinction, because it never shows up as a failed request —
- * a caller should log it loudly rather than treat it as routine.
+ * Whether a role string is a member of `AdminRole` at all.
+ *
+ * - Failing it means *unrecognized*, not denied — log it loudly.
  */
 declare const isKnownAdminRole: (adminRole: string | null | undefined) => boolean;
 /**
- * Whether an admin role may write Kai's **project-wide** settings (custom
- * instructions injected into every project member's system prompt).
- *
- * `admin` and `share` only. The value is a shared prompt-injection surface, so
- * changing it counts as project administration rather than project work:
- * `productionManager` and `guest` are read-only for project management in kbc-ui,
- * and `developer`/`reviewer` are denied because `agent_settings` is keyed by
- * `project_id` alone — editing it "inside a dev branch" writes production-visible
- * global config.
- *
- * An allowlist, deliberately: `AdminRole` gains members upstream, and a denylist
- * would admit each new one silently with no test failing. Takes the raw role
- * string so a caller holding an unparsed `tokens.verify()` response can use it
- * without fabricating a `StorageToken`. AI-3671.
+ * Whether an admin role may write Kai's project-wide settings.
  *
- * @see ./organization#canWriteKaiSpendCaps — spend caps (AI-3738) are
- * organization-admin only and use that predicate; do not widen this one to
- * cover them.
+ * - `admin` and `share` only: a shared prompt-injection surface is project administration.
+ * - `developer`/`reviewer` are denied: `agent_settings` is keyed by `project_id` alone, so a dev-branch edit hits production.
+ * - An allowlist, so new upstream `AdminRole` members are denied by default.
+ * - Spend caps use `./organization#canWriteKaiSpendCaps`; don't widen this for them.
  */
 declare const isKaiSettingsWriterRole: (adminRole: string | null | undefined) => boolean;
 /**
- * Whether this token may write Kai's project-wide settings. A limited
- * (non-master) token never may: it carries no project role at all, and its
- * `admin` block is absent despite the hand-authored type declaring it required
- * (AI-3593) — hence the optional chain.
+ * Whether this token may write Kai's project-wide settings.
+ *
+ * - A limited (non-master) token never may; its `admin` block is absent despite the type.
  */
 declare const canWriteKaiSettings: (token: StorageToken) => boolean;
 declare const assertCanWriteKaiSettings: (token: StorageToken) => void;
 /**
- * Whether this token may write the project's semantic layer — models and their
- * datasets, metrics, relationships, glossary terms and constraints in the
- * metastore.
+ * Whether this token may write the project's semantic layer in the metastore.
  *
- * - A denylist, unlike `isKaiSettingsWriterRole` above: the metastore's
- *   project-level ACL admits ordinary project work, so every role that can edit
- *   configurations can edit the model. Only `readOnly` is refused.
- * - A limited (non-master) token carries no project role and its `admin` block is
- *   absent (AI-3593) — hence the optional chain. It is not denied here: the
- *   metastore, not this client, decides what such a token may do.
- * - Organization-scope promotion is a separate, narrower right the metastore
- *   answers with a 403; surface that error rather than pre-empting it here.
+ * - Mirrors the metastore's role mapping (go-monorepo `services/metastore/internal/authz`):
+ *   only a master token with the `admin` or `productionManager` role gets `project-admin`.
+ * - Every other role, and a limited token (no `admin` block), gets a 403.
+ * - Organization-scope promotion is left to the metastore's 403.
  */
 declare const canWriteSemanticLayer: (token: StorageToken) => boolean;
 declare const assertCanAdmin: (token: StorageToken) => void;
@@ -95,45 +62,24 @@ declare const assertCanDevelopOrReview: (token: StorageToken) => void;
 //#endregion
 //#region src/domain/permissions/organization.d.ts
 /**
- * The raw signal: is this token's admin a member of the organization owning
- * the project?
+ * Whether this token's admin is a member of the organization owning the project.
  *
- * A limited (non-master) token never is — it carries no `admin` block at all
- * despite the hand-authored type declaring it required (AI-3593), hence the
- * optional chain and the `isMasterToken` requirement. Prefer
- * `isOrganizationAdmin` for authorization decisions; this bare signal exists
- * because a few kbc-ui call sites use it with no role conjunction (e.g.
- * `privileges.ts`'s `canManageUsers`/`canUnlinkBucket`), and porting those must
- * not change behaviour.
+ * - A limited token has no `admin` block despite the type saying required.
+ * - Prefer `isOrganizationAdmin` for authorization decisions.
  */
 declare const isOrganizationMember: (token: StorageToken) => boolean;
 /**
- * May this token administer organization-owned settings on this project?
+ * `isOrganizationMember` AND `admin`/`share`.
  *
- * `isOrganizationMember` AND `admin`/`share`. The conjunction — not the bare
- * flag — is the shape kbc-ui already uses wherever org authority gates a
- * project-level *write* (e.g. `privileges.ts`'s `canChangeUserRole` for the
- * SHARE target). Keeping the conjunction means an org member holding a
- * `readOnly` or `guest` token on this particular project still cannot write,
- * matching every existing write-shaped call site.
+ * - An org member with a `readOnly` or `guest` role on this project still cannot write.
  */
 declare const isOrganizationAdmin: (token: StorageToken) => boolean;
 declare const assertCanAdministerOrganization: (token: StorageToken) => void;
 /**
- * Whether this token may write Kai's **spend caps** — the project cap, the
- * default per-user limit, and per-user overrides (AI-3738).
- *
- * Strictly stricter than `canWriteKaiSettings` (`./admin`), and deliberately a
- * distinct predicate rather than a widening of it. `canWriteKaiSettings` is
- * `admin`/`share` — the authority to rewrite shared project *config* (a
- * prompt-injection surface). Spend caps commit the organization's money across
- * every project it owns, so per AI-3738 they are organization-admin only: a
- * project admin sees which caps apply and cannot change them. A project whose
- * own admin could raise its own cap has no cap.
+ * Whether this token may write Kai's spend caps: project cap, default and per-user limits.
  *
- * Lives here rather than beside `canWriteKaiSettings` in `admin.ts` because its
- * rule is org-scoped and `admin.ts` is documented as depending purely on the
- * project role string.
+ * - Org-admin only, stricter than `canWriteKaiSettings`: caps commit the org's money.
+ * - A project whose own admin could raise its cap has no cap.
  */
 declare const canWriteKaiSpendCaps: (token: StorageToken) => boolean;
 declare const assertCanWriteKaiSpendCaps: (token: StorageToken) => void;
@@ -142,26 +88,7 @@ declare const assertCanWriteKaiSpendCaps: (token: StorageToken) => void;
 /**
  * Caller-supplied context for configuration predicates.
  *
- * @property isDevModeActive — `true` when the user is operating inside a
- *   development branch (any storage branch other than the protected default /
- *   production branch); `false` when operating on the default branch in
- *   production.
- *
- *   How the caller determines this:
- *   - The active branch comes from the caller's own routing / app state
- *     (e.g. `/branch/:branchId` in kbc-ui).
- *   - A branch is "dev mode" when it is **not** the default branch returned by
- *     `apiClient.storage.devBranches.list()` (where `isDefault === true`).
- *   - kbc-ui exposes this through its `RoutesStore.getCurrentRouteParam('branchId')`
- *     compared against the default branch id; the api-client itself stays
- *     isomorphic and never reads that state directly.
- *
- *   Why it changes the rule:
- *   - In dev branches Keboola allows broader write access — `developer` and
- *     `reviewer` roles may create / copy / migrate configurations because the
- *     branch is sandboxed from production.
- *   - On the default branch only `productionManager` (or `admin`) may perform
- *     the same writes, since changes ship live to production.
+ * @property isDevModeActive — `true` on any branch other than the default (`isDefault`) one.
  */
 type ConfigurationCtx = {
   isDevModeActive: boolean;

package/dist/domain/permissions/index.js

@@ -1,28 +1,17 @@
 import { n as hasAdminFeature, r as hasFeature } from "../../project-DWwZv66D.js";
-import { C as isKaiSettingsWriterRole, D as PermissionDeniedError, E as isReadOnlyRole, S as isDeveloperOrReviewer, T as isProductionManager, _ as assertCanWriteKaiSettings, a as assertCanPurgeConfiguration, b as isAdmin, c as canCopyConfiguration, d as canPurgeConfiguration, f as canUpdateConfiguration, g as assertCanProductionManage, h as assertCanDevelopOrReview, i as assertCanMigrateFromTemplate, l as canCreateConfiguration, m as assertCanAdminOrShare, n as assertCanCopyConfiguration, o as assertCanUpdateConfiguration, p as assertCanAdmin, r as assertCanCreateConfiguration, s as canAssignFolder, t as assertCanAssignFolder, u as canMigrateFromTemplate, v as canWriteKaiSettings, w as isKnownAdminRole, x as isAdminOrShare, y as canWriteSemanticLayer } from "../../configurations-BVvcimzo.js";
+import { C as isKaiSettingsWriterRole, D as PermissionDeniedError, E as isReadOnlyRole, S as isDeveloperOrReviewer, T as isProductionManager, _ as assertCanWriteKaiSettings, a as assertCanPurgeConfiguration, b as isAdmin, c as canCopyConfiguration, d as canPurgeConfiguration, f as canUpdateConfiguration, g as assertCanProductionManage, h as assertCanDevelopOrReview, i as assertCanMigrateFromTemplate, l as canCreateConfiguration, m as assertCanAdminOrShare, n as assertCanCopyConfiguration, o as assertCanUpdateConfiguration, p as assertCanAdmin, r as assertCanCreateConfiguration, s as canAssignFolder, t as assertCanAssignFolder, u as canMigrateFromTemplate, v as canWriteKaiSettings, w as isKnownAdminRole, x as isAdminOrShare, y as canWriteSemanticLayer } from "../../configurations-Chg_JwJ1.js";
 //#region src/domain/permissions/organization.ts
 /**
-* The raw signal: is this token's admin a member of the organization owning
-* the project?
+* Whether this token's admin is a member of the organization owning the project.
 *
-* A limited (non-master) token never is — it carries no `admin` block at all
-* despite the hand-authored type declaring it required (AI-3593), hence the
-* optional chain and the `isMasterToken` requirement. Prefer
-* `isOrganizationAdmin` for authorization decisions; this bare signal exists
-* because a few kbc-ui call sites use it with no role conjunction (e.g.
-* `privileges.ts`'s `canManageUsers`/`canUnlinkBucket`), and porting those must
-* not change behaviour.
+* - A limited token has no `admin` block despite the type saying required.
+* - Prefer `isOrganizationAdmin` for authorization decisions.
 */
 const isOrganizationMember = (token) => token.isMasterToken && (token.admin?.isOrganizationMember ?? false);
 /**
-* May this token administer organization-owned settings on this project?
+* `isOrganizationMember` AND `admin`/`share`.
 *
-* `isOrganizationMember` AND `admin`/`share`. The conjunction — not the bare
-* flag — is the shape kbc-ui already uses wherever org authority gates a
-* project-level *write* (e.g. `privileges.ts`'s `canChangeUserRole` for the
-* SHARE target). Keeping the conjunction means an org member holding a
-* `readOnly` or `guest` token on this particular project still cannot write,
-* matching every existing write-shaped call site.
+* - An org member with a `readOnly` or `guest` role on this project still cannot write.
 */
 const isOrganizationAdmin = (token) => isOrganizationMember(token) && isAdminOrShare(token);
 const assertCanAdministerOrganization = (token) => {
@@ -32,20 +21,10 @@ const assertCanAdministerOrganization = (token) => {
 	});
 };
 /**
-* Whether this token may write Kai's **spend caps** — the project cap, the
-* default per-user limit, and per-user overrides (AI-3738).
+* Whether this token may write Kai's spend caps: project cap, default and per-user limits.
 *
-* Strictly stricter than `canWriteKaiSettings` (`./admin`), and deliberately a
-* distinct predicate rather than a widening of it. `canWriteKaiSettings` is
-* `admin`/`share` — the authority to rewrite shared project *config* (a
-* prompt-injection surface). Spend caps commit the organization's money across
-* every project it owns, so per AI-3738 they are organization-admin only: a
-* project admin sees which caps apply and cannot change them. A project whose
-* own admin could raise its own cap has no cap.
-*
-* Lives here rather than beside `canWriteKaiSettings` in `admin.ts` because its
-* rule is org-scoped and `admin.ts` is documented as depending purely on the
-* project role string.
+* - Org-admin only, stricter than `canWriteKaiSettings`: caps commit the org's money.
+* - A project whose own admin could raise its cap has no cap.
 */
 const canWriteKaiSpendCaps = (token) => isOrganizationAdmin(token);
 const assertCanWriteKaiSpendCaps = (token) => {

package/dist/domain/permissions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/domain/permissions/organization.ts"],"sourcesContent":["/**\n * @module domain/permissions/organization\n *\n * Organization-scope predicates. Token-only, like `admin.ts`, but these read\n * `StorageToken.admin.isOrganizationMember` rather than the project role\n * string — the two answer different questions and neither implies the other.\n *\n * The upstream field is named `isOrganizationMember`, but in Keboola\n * organization membership *is* organization administration — an org member\n * administers every project the organization owns. kbc-ui already reads it\n * under that meaning (e.g. `BranchProtectionTab.tsx`, `ActivateChatContent.tsx`\n * both assign it to a local `isOrgAdmin`), so `isOrganizationAdmin` below is a\n * rename of the existing reading, not a new semantic.\n *\n * `isOrganizationAdmin` and `canWriteKaiSpendCaps` each have an `assertCan*`\n * pair (`assertCanAdministerOrganization`, `assertCanWriteKaiSpendCaps`)\n * throwing `PermissionDeniedError` with a stable kebab-case `action`, per the\n * conventions in `packages/api-client/AGENTS.md`. `isOrganizationMember` is a\n * raw signal only — nothing asserts on bare membership.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdminOrShare } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * The raw signal: is this token's admin a member of the organization owning\n * the project?\n *\n * A limited (non-master) token never is — it carries no `admin` block at all\n * despite the hand-authored type declaring it required (AI-3593), hence the\n * optional chain and the `isMasterToken` requirement. Prefer\n * `isOrganizationAdmin` for authorization decisions; this bare signal exists\n * because a few kbc-ui call sites use it with no role conjunction (e.g.\n * `privileges.ts`'s `canManageUsers`/`canUnlinkBucket`), and porting those must\n * not change behaviour.\n */\nexport const isOrganizationMember = (token: StorageToken): boolean =>\n  token.isMasterToken && (token.admin?.isOrganizationMember ?? false);\n\n/**\n * May this token administer organization-owned settings on this project?\n *\n * `isOrganizationMember` AND `admin`/`share`. The conjunction — not the bare\n * flag — is the shape kbc-ui already uses wherever org authority gates a\n * project-level *write* (e.g. `privileges.ts`'s `canChangeUserRole` for the\n * SHARE target). Keeping the conjunction means an org member holding a\n * `readOnly` or `guest` token on this particular project still cannot write,\n * matching every existing write-shaped call site.\n */\nexport const isOrganizationAdmin = (token: StorageToken): boolean =>\n  isOrganizationMember(token) && isAdminOrShare(token);\n\nexport const assertCanAdministerOrganization = (token: StorageToken): void => {\n  if (!isOrganizationAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'administer-organization',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' with isOrganizationMember=${token.admin?.isOrganizationMember ?? false} may not administer organization settings`\n        : 'a limited (non-master) token may not administer organization settings',\n    });\n  }\n};\n\n/**\n * Whether this token may write Kai's **spend caps** — the project cap, the\n * default per-user limit, and per-user overrides (AI-3738).\n *\n * Strictly stricter than `canWriteKaiSettings` (`./admin`), and deliberately a\n * distinct predicate rather than a widening of it. `canWriteKaiSettings` is\n * `admin`/`share` — the authority to rewrite shared project *config* (a\n * prompt-injection surface). Spend caps commit the organization's money across\n * every project it owns, so per AI-3738 they are organization-admin only: a\n * project admin sees which caps apply and cannot change them. A project whose\n * own admin could raise its own cap has no cap.\n *\n * Lives here rather than beside `canWriteKaiSettings` in `admin.ts` because its\n * rule is org-scoped and `admin.ts` is documented as depending purely on the\n * project role string.\n */\nexport const canWriteKaiSpendCaps = (token: StorageToken): boolean => isOrganizationAdmin(token);\n\nexport const assertCanWriteKaiSpendCaps = (token: StorageToken): void => {\n  if (!canWriteKaiSpendCaps(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-spend-caps',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' with isOrganizationMember=${token.admin?.isOrganizationMember ?? false} may not change Kai spend caps`\n        : 'a limited (non-master) token may not change Kai spend caps',\n    });\n  }\n};\n"],"mappings":";;;;;;;;;;;;;;;AAqCA,MAAa,wBAAwB,UACnC,MAAM,kBAAkB,MAAM,OAAO,wBAAwB;;;;;;;;;;;AAY/D,MAAa,uBAAuB,UAClC,qBAAqB,KAAK,KAAK,eAAe,KAAK;AAErD,MAAa,mCAAmC,UAA8B;CAC5E,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,8BAA8B,MAAM,OAAO,wBAAwB,MAAM,6CAC9G;CACN,CAAC;AAEL;;;;;;;;;;;;;;;;;AAkBA,MAAa,wBAAwB,UAAiC,oBAAoB,KAAK;AAE/F,MAAa,8BAA8B,UAA8B;CACvE,IAAI,CAAC,qBAAqB,KAAK,GAC7B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,8BAA8B,MAAM,OAAO,wBAAwB,MAAM,kCAC9G;CACN,CAAC;AAEL"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/domain/permissions/organization.ts"],"sourcesContent":["/**\n * @module domain/permissions/organization\n *\n * Organization-scope predicates, read from `admin.isOrganizationMember`, not the project role.\n * - In Keboola, org membership is org administration of every project the org owns.\n * - `isOrganizationMember` is a raw signal; nothing asserts on bare membership.\n */\nimport type { StorageToken } from '../../clients/storage/tokens/types';\n\nimport { isAdminOrShare } from './admin';\nimport { PermissionDeniedError } from './errors';\n\n/**\n * Whether this token's admin is a member of the organization owning the project.\n *\n * - A limited token has no `admin` block despite the type saying required.\n * - Prefer `isOrganizationAdmin` for authorization decisions.\n */\nexport const isOrganizationMember = (token: StorageToken): boolean =>\n  token.isMasterToken && (token.admin?.isOrganizationMember ?? false);\n\n/**\n * `isOrganizationMember` AND `admin`/`share`.\n *\n * - An org member with a `readOnly` or `guest` role on this project still cannot write.\n */\nexport const isOrganizationAdmin = (token: StorageToken): boolean =>\n  isOrganizationMember(token) && isAdminOrShare(token);\n\nexport const assertCanAdministerOrganization = (token: StorageToken): void => {\n  if (!isOrganizationAdmin(token)) {\n    throw new PermissionDeniedError({\n      action: 'administer-organization',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' with isOrganizationMember=${token.admin?.isOrganizationMember ?? false} may not administer organization settings`\n        : 'a limited (non-master) token may not administer organization settings',\n    });\n  }\n};\n\n/**\n * Whether this token may write Kai's spend caps: project cap, default and per-user limits.\n *\n * - Org-admin only, stricter than `canWriteKaiSettings`: caps commit the org's money.\n * - A project whose own admin could raise its cap has no cap.\n */\nexport const canWriteKaiSpendCaps = (token: StorageToken): boolean => isOrganizationAdmin(token);\n\nexport const assertCanWriteKaiSpendCaps = (token: StorageToken): void => {\n  if (!canWriteKaiSpendCaps(token)) {\n    throw new PermissionDeniedError({\n      action: 'write-kai-spend-caps',\n      reason: token.isMasterToken\n        ? `role '${token.admin?.role ?? 'none'}' with isOrganizationMember=${token.admin?.isOrganizationMember ?? false} may not change Kai spend caps`\n        : 'a limited (non-master) token may not change Kai spend caps',\n    });\n  }\n};\n"],"mappings":";;;;;;;;;AAkBA,MAAa,wBAAwB,UACnC,MAAM,kBAAkB,MAAM,OAAO,wBAAwB;;;;;;AAO/D,MAAa,uBAAuB,UAClC,qBAAqB,KAAK,KAAK,eAAe,KAAK;AAErD,MAAa,mCAAmC,UAA8B;CAC5E,IAAI,CAAC,oBAAoB,KAAK,GAC5B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,8BAA8B,MAAM,OAAO,wBAAwB,MAAM,6CAC9G;CACN,CAAC;AAEL;;;;;;;AAQA,MAAa,wBAAwB,UAAiC,oBAAoB,KAAK;AAE/F,MAAa,8BAA8B,UAA8B;CACvE,IAAI,CAAC,qBAAqB,KAAK,GAC7B,MAAM,IAAI,sBAAsB;EAC9B,QAAQ;EACR,QAAQ,MAAM,gBACV,SAAS,MAAM,OAAO,QAAQ,OAAO,8BAA8B,MAAM,OAAO,wBAAwB,MAAM,kCAC9G;CACN,CAAC;AAEL"}

package/dist/domain/storageTable/index.d.cts

@@ -1,2 +1,2 @@
-import { _ as TableId, a as CreateTableFn, c as Bucket, d as BucketStage, f as LegacyBucket, g as Table, h as StorageBranchBucket, i as CreateBucketFn, l as BucketId, m as ParsedBucket, n as StorageTableInstance, o as TableModel, p as ModelOptions, r as createStorageTable, s as createTableModel, t as StorageTable, u as BucketName, v as TableIdParts, y as TableName } from "../../index-BMqLPS6S.cjs";
+import { _ as TableId, a as CreateTableFn, c as Bucket, d as BucketStage, f as LegacyBucket, g as Table, h as StorageBranchBucket, i as CreateBucketFn, l as BucketId, m as ParsedBucket, n as StorageTableInstance, o as TableModel, p as ModelOptions, r as createStorageTable, s as createTableModel, t as StorageTable, u as BucketName, v as TableIdParts, y as TableName } from "../../index-CXcWpZQ2.cjs";
 export { Bucket, BucketId, BucketName, BucketStage, CreateBucketFn, CreateTableFn, LegacyBucket, ModelOptions, ParsedBucket, StorageBranchBucket, type StorageTableInstance as StorageTable, type StorageTable as StorageTableScope, Table, TableId, TableIdParts, TableModel, TableName, createStorageTable, createTableModel };

package/dist/domain/storageTable/index.d.ts

@@ -1,2 +1,2 @@
-import { _ as TableId, a as CreateTableFn, c as Bucket, d as BucketStage, f as LegacyBucket, g as Table, h as StorageBranchBucket, i as CreateBucketFn, l as BucketId, m as ParsedBucket, n as StorageTableInstance, o as TableModel, p as ModelOptions, r as createStorageTable, s as createTableModel, t as StorageTable, u as BucketName, v as TableIdParts, y as TableName } from "../../index-BMqLPS6S.js";
+import { _ as TableId, a as CreateTableFn, c as Bucket, d as BucketStage, f as LegacyBucket, g as Table, h as StorageBranchBucket, i as CreateBucketFn, l as BucketId, m as ParsedBucket, n as StorageTableInstance, o as TableModel, p as ModelOptions, r as createStorageTable, s as createTableModel, t as StorageTable, u as BucketName, v as TableIdParts, y as TableName } from "../../index-CXcWpZQ2.js";
 export { Bucket, BucketId, BucketName, BucketStage, CreateBucketFn, CreateTableFn, LegacyBucket, ModelOptions, ParsedBucket, StorageBranchBucket, type StorageTableInstance as StorageTable, type StorageTable as StorageTableScope, Table, TableId, TableIdParts, TableModel, TableName, createStorageTable, createTableModel };

package/dist/editor/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DhUU3M1W.cjs");
-const require_auth = require("../auth-JQ33o3nU.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-BYqW-9tm.cjs");
+const require_auth = require("../auth-Dm0F2rOh.cjs");
 //#region src/clients/editor/editorClient.ts
 const createEditorClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({

package/dist/editor/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["createOpenapiFetchClient","createAuthHeaders"],"sources":["../../src/clients/editor/editorClient.ts"],"sourcesContent":["import { createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateSqlSessionBody,\n  GetSqlSessionPath,\n  GetSqlSessionSchemaPath,\n  GetSqlSessionSchemaQuery,\n  GetSqlSessionsQuery,\n  GetSqlSessionTableDdlPath,\n  GetSqlSessionTableDdlQuery,\n  PostSqlRunQueryBody,\n  PostSqlRunQueryPath,\n  PostSqlSessionLoadBody,\n  PostSqlSessionLoadPath,\n  PostSqlSessionUnloadBody,\n  PostSqlSessionUnloadPath,\n  PostSqlTablePreviewBody,\n  PostSqlTablePreviewPath,\n} from './types';\n\nexport const createEditorClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const createSession = async (body: CreateSqlSessionBody) => {\n    const { data } = await client.post('/sql/sessions', {\n      body,\n    });\n    return data;\n  };\n\n  const getSession = async ({ id }: GetSqlSessionPath, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions/{id}`, { path: { id } }, { signal });\n    return data;\n  };\n\n  const getSessions = async (query: GetSqlSessionsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions`, { query }, { signal });\n\n    return data;\n  };\n\n  const getSessionSchema = async (\n    {\n      id,\n      onlyWorkspaceSchema = '1',\n      loadTables = '1',\n    }: GetSqlSessionSchemaPath & GetSqlSessionSchemaQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/schema`,\n      {\n        path: { id },\n        query: { onlyWorkspaceSchema, loadTables },\n      },\n      { signal },\n    );\n    return data;\n  };\n\n  const createQueryJob = async ({ id }: PostSqlRunQueryPath, body: PostSqlRunQueryBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/run-query`, {\n      path: { id },\n      body,\n    });\n    return data;\n  };\n\n  const tablePreview = async ({ id }: PostSqlTablePreviewPath, body: PostSqlTablePreviewBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/table-preview`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const tableDefinition = async (\n    { id, ...query }: GetSqlSessionTableDdlPath & GetSqlSessionTableDdlQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/table-ddl`,\n      { path: { id }, query },\n      { signal },\n    );\n    return data;\n  };\n\n  const load = async ({ id }: PostSqlSessionLoadPath, body: PostSqlSessionLoadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/load`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const unload = async ({ id }: PostSqlSessionUnloadPath, body?: PostSqlSessionUnloadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/unload`, {\n      path: { id },\n      // BE error: The body is optional; however, without it, the request will fail with the message \"Request content type must be application/json.\"\n      // This is expected, as our client cannot correctly determine the content type without the body.\n      // This issue should be addressed to indicate that the body is required in their Swagger schema.\n      body: body ?? { tableId: null },\n    });\n\n    return data;\n  };\n\n  const resetWorkspacePassword = async (id: string) => {\n    const { data } = await client.post(`/sql/sessions/{id}/reset-password`, {\n      path: { id },\n    });\n\n    return data;\n  };\n\n  const getSessionCredentials = async (id: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/credentials`,\n      { path: { id } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    createSession,\n    getSession,\n    getSessions,\n    getSessionSchema,\n    createQueryJob,\n    tablePreview,\n    tableDefinition,\n    load,\n    unload,\n    resetWorkspacePassword,\n    getSessionCredentials,\n  };\n};\n"],"mappings":";;;;AAuBA,MAAa,sBAAsB,EAAE,SAAS,aAAa,WAA8B;CACvF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CAED,MAAM,gBAAgB,OAAO,SAA+B;EAC1D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,iBAAiB,EAClD,KACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,EAAE,MAAyB,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;EACpF,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,OAA4B,WAAyB;EAC9E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EACE,IACA,sBAAsB,KACtB,aAAa,OAEf,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA;GACE,MAAM,EAAE,GAAG;GACX,OAAO;IAAE;IAAqB;GAAW;EAC3C,GACA,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,EAAE,MAA2B,SAA8B;EACvF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gCAAgC;GACjE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,eAAe,OAAO,EAAE,MAA+B,SAAkC;EAC7F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,oCAAoC;GACrE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,kBAAkB,OACtB,EAAE,IAAI,GAAG,SACT,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gCACA;GAAE,MAAM,EAAE,GAAG;GAAG;EAAM,GACtB,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,OAAO,OAAO,EAAE,MAA8B,SAAiC;EACnF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B;GAC5D,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,EAAE,MAAgC,SAAoC;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,6BAA6B;GAC9D,MAAM,EAAE,GAAG;GAIX,MAAM,QAAQ,EAAE,SAAS,KAAK;EAChC,CAAC;EAED,OAAO;CACT;CAEA,MAAM,yBAAyB,OAAO,OAAe;EACnD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,qCAAqC,EACtE,MAAM,EAAE,GAAG,EACb,CAAC;EAED,OAAO;CACT;CAEA,MAAM,wBAAwB,OAAO,IAAY,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,kCACA,EAAE,MAAM,EAAE,GAAG,EAAE,GACf,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAEjE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"index.cjs","names":["createOpenapiFetchClient","createAuthHeaders"],"sources":["../../src/clients/editor/editorClient.ts"],"sourcesContent":["import { createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateSqlSessionBody,\n  GetSqlSessionPath,\n  GetSqlSessionSchemaPath,\n  GetSqlSessionSchemaQuery,\n  GetSqlSessionsQuery,\n  GetSqlSessionTableDdlPath,\n  GetSqlSessionTableDdlQuery,\n  PostSqlRunQueryBody,\n  PostSqlRunQueryPath,\n  PostSqlSessionLoadBody,\n  PostSqlSessionLoadPath,\n  PostSqlSessionUnloadBody,\n  PostSqlSessionUnloadPath,\n  PostSqlTablePreviewBody,\n  PostSqlTablePreviewPath,\n} from './types';\n\nexport const createEditorClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const createSession = async (body: CreateSqlSessionBody) => {\n    const { data } = await client.post('/sql/sessions', {\n      body,\n    });\n    return data;\n  };\n\n  const getSession = async ({ id }: GetSqlSessionPath, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions/{id}`, { path: { id } }, { signal });\n    return data;\n  };\n\n  const getSessions = async (query: GetSqlSessionsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions`, { query }, { signal });\n\n    return data;\n  };\n\n  const getSessionSchema = async (\n    {\n      id,\n      onlyWorkspaceSchema = '1',\n      loadTables = '1',\n    }: GetSqlSessionSchemaPath & GetSqlSessionSchemaQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/schema`,\n      {\n        path: { id },\n        query: { onlyWorkspaceSchema, loadTables },\n      },\n      { signal },\n    );\n    return data;\n  };\n\n  const createQueryJob = async ({ id }: PostSqlRunQueryPath, body: PostSqlRunQueryBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/run-query`, {\n      path: { id },\n      body,\n    });\n    return data;\n  };\n\n  const tablePreview = async ({ id }: PostSqlTablePreviewPath, body: PostSqlTablePreviewBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/table-preview`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const tableDefinition = async (\n    { id, ...query }: GetSqlSessionTableDdlPath & GetSqlSessionTableDdlQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/table-ddl`,\n      { path: { id }, query },\n      { signal },\n    );\n    return data;\n  };\n\n  const load = async ({ id }: PostSqlSessionLoadPath, body: PostSqlSessionLoadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/load`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const unload = async ({ id }: PostSqlSessionUnloadPath, body?: PostSqlSessionUnloadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/unload`, {\n      path: { id },\n      // Spec marks the body optional, but without one the BE rejects the missing JSON content type.\n      body: body ?? { tableId: null },\n    });\n\n    return data;\n  };\n\n  const resetWorkspacePassword = async (id: string) => {\n    const { data } = await client.post(`/sql/sessions/{id}/reset-password`, {\n      path: { id },\n    });\n\n    return data;\n  };\n\n  const getSessionCredentials = async (id: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/credentials`,\n      { path: { id } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    createSession,\n    getSession,\n    getSessions,\n    getSessionSchema,\n    createQueryJob,\n    tablePreview,\n    tableDefinition,\n    load,\n    unload,\n    resetWorkspacePassword,\n    getSessionCredentials,\n  };\n};\n"],"mappings":";;;;AAuBA,MAAa,sBAAsB,EAAE,SAAS,aAAa,WAA8B;CACvF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CAED,MAAM,gBAAgB,OAAO,SAA+B;EAC1D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,iBAAiB,EAClD,KACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,EAAE,MAAyB,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;EACpF,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,OAA4B,WAAyB;EAC9E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EACE,IACA,sBAAsB,KACtB,aAAa,OAEf,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA;GACE,MAAM,EAAE,GAAG;GACX,OAAO;IAAE;IAAqB;GAAW;EAC3C,GACA,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,EAAE,MAA2B,SAA8B;EACvF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gCAAgC;GACjE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,eAAe,OAAO,EAAE,MAA+B,SAAkC;EAC7F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,oCAAoC;GACrE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,kBAAkB,OACtB,EAAE,IAAI,GAAG,SACT,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gCACA;GAAE,MAAM,EAAE,GAAG;GAAG;EAAM,GACtB,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,OAAO,OAAO,EAAE,MAA8B,SAAiC;EACnF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B;GAC5D,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,EAAE,MAAgC,SAAoC;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,6BAA6B;GAC9D,MAAM,EAAE,GAAG;GAEX,MAAM,QAAQ,EAAE,SAAS,KAAK;EAChC,CAAC;EAED,OAAO;CACT;CAEA,MAAM,yBAAyB,OAAO,OAAe;EACnD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,qCAAqC,EACtE,MAAM,EAAE,GAAG,EACb,CAAC;EAED,OAAO;CACT;CAEA,MAAM,wBAAwB,OAAO,IAAY,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,kCACA,EAAE,MAAM,EAAE,GAAG,EAAE,GACf,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAEjE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/editor/index.d.cts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-_RhBCj4_.cjs";
-import { C as components, a as GetSqlSessionTableDdlPath, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody } from "../types-COL1kVEB.cjs";
+import { n as ClientInitOptions } from "../types-DoZtE9tz.cjs";
+import { C as components, a as GetSqlSessionTableDdlPath, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody } from "../types-B8N_k79M.cjs";
 //#region src/clients/editor/editorClient.d.ts
 declare const createEditorClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<{

package/dist/editor/index.d.ts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-Ct0YPy2w.js";
-import { C as components, a as GetSqlSessionTableDdlPath, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody } from "../types-DfvdbRPL.js";
+import { n as ClientInitOptions } from "../types-B2w2TtSA.js";
+import { C as components, a as GetSqlSessionTableDdlPath, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody } from "../types-WZBztugL.js";
 //#region src/clients/editor/editorClient.d.ts
 declare const createEditorClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<{

package/dist/editor/index.js

@@ -1,5 +1,5 @@
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-BVSc9ibR.js";
-import { t as createAuthHeaders } from "../auth-aItmDu45.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DZUOVupy.js";
+import { t as createAuthHeaders } from "../auth-DworfoPy.js";
 //#region src/clients/editor/editorClient.ts
 const createEditorClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({

package/dist/editor/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/clients/editor/editorClient.ts"],"sourcesContent":["import { createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateSqlSessionBody,\n  GetSqlSessionPath,\n  GetSqlSessionSchemaPath,\n  GetSqlSessionSchemaQuery,\n  GetSqlSessionsQuery,\n  GetSqlSessionTableDdlPath,\n  GetSqlSessionTableDdlQuery,\n  PostSqlRunQueryBody,\n  PostSqlRunQueryPath,\n  PostSqlSessionLoadBody,\n  PostSqlSessionLoadPath,\n  PostSqlSessionUnloadBody,\n  PostSqlSessionUnloadPath,\n  PostSqlTablePreviewBody,\n  PostSqlTablePreviewPath,\n} from './types';\n\nexport const createEditorClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const createSession = async (body: CreateSqlSessionBody) => {\n    const { data } = await client.post('/sql/sessions', {\n      body,\n    });\n    return data;\n  };\n\n  const getSession = async ({ id }: GetSqlSessionPath, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions/{id}`, { path: { id } }, { signal });\n    return data;\n  };\n\n  const getSessions = async (query: GetSqlSessionsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions`, { query }, { signal });\n\n    return data;\n  };\n\n  const getSessionSchema = async (\n    {\n      id,\n      onlyWorkspaceSchema = '1',\n      loadTables = '1',\n    }: GetSqlSessionSchemaPath & GetSqlSessionSchemaQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/schema`,\n      {\n        path: { id },\n        query: { onlyWorkspaceSchema, loadTables },\n      },\n      { signal },\n    );\n    return data;\n  };\n\n  const createQueryJob = async ({ id }: PostSqlRunQueryPath, body: PostSqlRunQueryBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/run-query`, {\n      path: { id },\n      body,\n    });\n    return data;\n  };\n\n  const tablePreview = async ({ id }: PostSqlTablePreviewPath, body: PostSqlTablePreviewBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/table-preview`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const tableDefinition = async (\n    { id, ...query }: GetSqlSessionTableDdlPath & GetSqlSessionTableDdlQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/table-ddl`,\n      { path: { id }, query },\n      { signal },\n    );\n    return data;\n  };\n\n  const load = async ({ id }: PostSqlSessionLoadPath, body: PostSqlSessionLoadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/load`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const unload = async ({ id }: PostSqlSessionUnloadPath, body?: PostSqlSessionUnloadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/unload`, {\n      path: { id },\n      // BE error: The body is optional; however, without it, the request will fail with the message \"Request content type must be application/json.\"\n      // This is expected, as our client cannot correctly determine the content type without the body.\n      // This issue should be addressed to indicate that the body is required in their Swagger schema.\n      body: body ?? { tableId: null },\n    });\n\n    return data;\n  };\n\n  const resetWorkspacePassword = async (id: string) => {\n    const { data } = await client.post(`/sql/sessions/{id}/reset-password`, {\n      path: { id },\n    });\n\n    return data;\n  };\n\n  const getSessionCredentials = async (id: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/credentials`,\n      { path: { id } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    createSession,\n    getSession,\n    getSessions,\n    getSessionSchema,\n    createQueryJob,\n    tablePreview,\n    tableDefinition,\n    load,\n    unload,\n    resetWorkspacePassword,\n    getSessionCredentials,\n  };\n};\n"],"mappings":";;;AAuBA,MAAa,sBAAsB,EAAE,SAAS,aAAa,WAA8B;CACvF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CAED,MAAM,gBAAgB,OAAO,SAA+B;EAC1D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,iBAAiB,EAClD,KACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,EAAE,MAAyB,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;EACpF,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,OAA4B,WAAyB;EAC9E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EACE,IACA,sBAAsB,KACtB,aAAa,OAEf,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA;GACE,MAAM,EAAE,GAAG;GACX,OAAO;IAAE;IAAqB;GAAW;EAC3C,GACA,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,EAAE,MAA2B,SAA8B;EACvF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gCAAgC;GACjE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,eAAe,OAAO,EAAE,MAA+B,SAAkC;EAC7F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,oCAAoC;GACrE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,kBAAkB,OACtB,EAAE,IAAI,GAAG,SACT,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gCACA;GAAE,MAAM,EAAE,GAAG;GAAG;EAAM,GACtB,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,OAAO,OAAO,EAAE,MAA8B,SAAiC;EACnF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B;GAC5D,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,EAAE,MAAgC,SAAoC;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,6BAA6B;GAC9D,MAAM,EAAE,GAAG;GAIX,MAAM,QAAQ,EAAE,SAAS,KAAK;EAChC,CAAC;EAED,OAAO;CACT;CAEA,MAAM,yBAAyB,OAAO,OAAe;EACnD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,qCAAqC,EACtE,MAAM,EAAE,GAAG,EACb,CAAC;EAED,OAAO;CACT;CAEA,MAAM,wBAAwB,OAAO,IAAY,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,kCACA,EAAE,MAAM,EAAE,GAAG,EAAE,GACf,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAEjE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/clients/editor/editorClient.ts"],"sourcesContent":["import { createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateSqlSessionBody,\n  GetSqlSessionPath,\n  GetSqlSessionSchemaPath,\n  GetSqlSessionSchemaQuery,\n  GetSqlSessionsQuery,\n  GetSqlSessionTableDdlPath,\n  GetSqlSessionTableDdlQuery,\n  PostSqlRunQueryBody,\n  PostSqlRunQueryPath,\n  PostSqlSessionLoadBody,\n  PostSqlSessionLoadPath,\n  PostSqlSessionUnloadBody,\n  PostSqlSessionUnloadPath,\n  PostSqlTablePreviewBody,\n  PostSqlTablePreviewPath,\n} from './types';\n\nexport const createEditorClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const createSession = async (body: CreateSqlSessionBody) => {\n    const { data } = await client.post('/sql/sessions', {\n      body,\n    });\n    return data;\n  };\n\n  const getSession = async ({ id }: GetSqlSessionPath, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions/{id}`, { path: { id } }, { signal });\n    return data;\n  };\n\n  const getSessions = async (query: GetSqlSessionsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(`/sql/sessions`, { query }, { signal });\n\n    return data;\n  };\n\n  const getSessionSchema = async (\n    {\n      id,\n      onlyWorkspaceSchema = '1',\n      loadTables = '1',\n    }: GetSqlSessionSchemaPath & GetSqlSessionSchemaQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/schema`,\n      {\n        path: { id },\n        query: { onlyWorkspaceSchema, loadTables },\n      },\n      { signal },\n    );\n    return data;\n  };\n\n  const createQueryJob = async ({ id }: PostSqlRunQueryPath, body: PostSqlRunQueryBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/run-query`, {\n      path: { id },\n      body,\n    });\n    return data;\n  };\n\n  const tablePreview = async ({ id }: PostSqlTablePreviewPath, body: PostSqlTablePreviewBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/table-preview`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const tableDefinition = async (\n    { id, ...query }: GetSqlSessionTableDdlPath & GetSqlSessionTableDdlQuery,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/table-ddl`,\n      { path: { id }, query },\n      { signal },\n    );\n    return data;\n  };\n\n  const load = async ({ id }: PostSqlSessionLoadPath, body: PostSqlSessionLoadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/load`, {\n      path: { id },\n      body,\n    });\n\n    return data;\n  };\n\n  const unload = async ({ id }: PostSqlSessionUnloadPath, body?: PostSqlSessionUnloadBody) => {\n    const { data } = await client.post(`/sql/sessions/{id}/unload`, {\n      path: { id },\n      // Spec marks the body optional, but without one the BE rejects the missing JSON content type.\n      body: body ?? { tableId: null },\n    });\n\n    return data;\n  };\n\n  const resetWorkspacePassword = async (id: string) => {\n    const { data } = await client.post(`/sql/sessions/{id}/reset-password`, {\n      path: { id },\n    });\n\n    return data;\n  };\n\n  const getSessionCredentials = async (id: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      `/sql/sessions/{id}/credentials`,\n      { path: { id } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    createSession,\n    getSession,\n    getSessions,\n    getSessionSchema,\n    createQueryJob,\n    tablePreview,\n    tableDefinition,\n    load,\n    unload,\n    resetWorkspacePassword,\n    getSessionCredentials,\n  };\n};\n"],"mappings":";;;AAuBA,MAAa,sBAAsB,EAAE,SAAS,aAAa,WAA8B;CACvF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CAED,MAAM,gBAAgB,OAAO,SAA+B;EAC1D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,iBAAiB,EAClD,KACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,EAAE,MAAyB,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;EACpF,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,OAA4B,WAAyB;EAC9E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EACE,IACA,sBAAsB,KACtB,aAAa,OAEf,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA;GACE,MAAM,EAAE,GAAG;GACX,OAAO;IAAE;IAAqB;GAAW;EAC3C,GACA,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,EAAE,MAA2B,SAA8B;EACvF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gCAAgC;GACjE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EACD,OAAO;CACT;CAEA,MAAM,eAAe,OAAO,EAAE,MAA+B,SAAkC;EAC7F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,oCAAoC;GACrE,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,kBAAkB,OACtB,EAAE,IAAI,GAAG,SACT,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gCACA;GAAE,MAAM,EAAE,GAAG;GAAG;EAAM,GACtB,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,OAAO,OAAO,EAAE,MAA8B,SAAiC;EACnF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B;GAC5D,MAAM,EAAE,GAAG;GACX;EACF,CAAC;EAED,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,EAAE,MAAgC,SAAoC;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,6BAA6B;GAC9D,MAAM,EAAE,GAAG;GAEX,MAAM,QAAQ,EAAE,SAAS,KAAK;EAChC,CAAC;EAED,OAAO;CACT;CAEA,MAAM,yBAAyB,OAAO,OAAe;EACnD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,qCAAqC,EACtE,MAAM,EAAE,GAAG,EACb,CAAC;EAED,OAAO;CACT;CAEA,MAAM,wBAAwB,OAAO,IAAY,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,kCACA,EAAE,MAAM,EAAE,GAAG,EAAE,GACf,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAEjE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/editor/types.d.cts

@@ -1,2 +1,2 @@
-import { S as SqlSession, _ as SessionSchema, a as GetSqlSessionTableDdlPath, b as SessionSchemaDatabase, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, g as Session, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody, v as SessionSchemaBucket, x as SessionSchemaTable, y as SessionSchemaColumn } from "../types-COL1kVEB.cjs";
+import { S as SqlSession, _ as SessionSchema, a as GetSqlSessionTableDdlPath, b as SessionSchemaDatabase, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, g as Session, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody, v as SessionSchemaBucket, x as SessionSchemaTable, y as SessionSchemaColumn } from "../types-B8N_k79M.cjs";
 export { CreateSqlSessionBody, GetSqlSessionPath, GetSqlSessionSchemaPath, GetSqlSessionSchemaQuery, GetSqlSessionTableDdlPath, GetSqlSessionTableDdlQuery, GetSqlSessionsQuery, PostSqlRunQueryBody, PostSqlRunQueryPath, PostSqlSessionLoadBody, PostSqlSessionLoadPath, PostSqlSessionUnloadBody, PostSqlSessionUnloadPath, PostSqlTablePreviewBody, PostSqlTablePreviewPath, Session, SessionSchema, SessionSchemaBucket, SessionSchemaColumn, SessionSchemaDatabase, SessionSchemaTable, SqlSession };

package/dist/editor/types.d.ts

@@ -1,2 +1,2 @@
-import { S as SqlSession, _ as SessionSchema, a as GetSqlSessionTableDdlPath, b as SessionSchemaDatabase, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, g as Session, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody, v as SessionSchemaBucket, x as SessionSchemaTable, y as SessionSchemaColumn } from "../types-DfvdbRPL.js";
+import { S as SqlSession, _ as SessionSchema, a as GetSqlSessionTableDdlPath, b as SessionSchemaDatabase, c as PostSqlRunQueryBody, d as PostSqlSessionLoadPath, f as PostSqlSessionUnloadBody, g as Session, h as PostSqlTablePreviewPath, i as GetSqlSessionSchemaQuery, l as PostSqlRunQueryPath, m as PostSqlTablePreviewBody, n as GetSqlSessionPath, o as GetSqlSessionTableDdlQuery, p as PostSqlSessionUnloadPath, r as GetSqlSessionSchemaPath, s as GetSqlSessionsQuery, t as CreateSqlSessionBody, u as PostSqlSessionLoadBody, v as SessionSchemaBucket, x as SessionSchemaTable, y as SessionSchemaColumn } from "../types-WZBztugL.js";
 export { CreateSqlSessionBody, GetSqlSessionPath, GetSqlSessionSchemaPath, GetSqlSessionSchemaQuery, GetSqlSessionTableDdlPath, GetSqlSessionTableDdlQuery, GetSqlSessionsQuery, PostSqlRunQueryBody, PostSqlRunQueryPath, PostSqlSessionLoadBody, PostSqlSessionLoadPath, PostSqlSessionUnloadBody, PostSqlSessionUnloadPath, PostSqlTablePreviewBody, PostSqlTablePreviewPath, Session, SessionSchema, SessionSchemaBucket, SessionSchemaColumn, SessionSchemaDatabase, SessionSchemaTable, SqlSession };