@keboola/api-client 36.0.0 → 40.0.0

package/CHANGELOG.md

@@ -1,5 +1,199 @@
 # @keboola/api-client
 
+## 40.0.0
+
+### Major Changes
+
+- Cookie (browser-mode) credentials on the bearer client.
+  - `createKeboola({ credentials: 'cookie' })` renews its credential through `auth.token.refreshWithSession`. The refresh token stays server-side, bound to the session cookie. A refused session signs the stack out, the same way a refused refresh token does. The default stays `'token'`.
+  - **Breaking:** a `cookie` credential carries `sessionId`, and `session.auth.authenticate` requires it.
+  - `authenticate` refuses a rotating credential of the kind the client was not built for, with `KeboolaErrorType.CredentialKindMismatch`. A restore reads a stored one of that kind as nothing stored.
+  - A cookie credential persists its session id, so a reload restores it through the session cookie.
+  - `CredentialMode` is exported.
+
+- Remove `removeBranchFromUrl` from `@keboola/api-client/sdk/storage`
+
+  It stripped the `/branch/{id}/` segment from a project URL. Project URLs now always name a branch — production is the default branch, not the absence of one — so a URL with the segment removed is not a production URL, it is an old link that gets rewritten back on arrival. Its last caller is gone.
+
+  Replace a call with the branch you actually want: build the URL at the default branch id rather than stripping the segment.
+
+- Browser/cookie mode on the auth client.
+  - `auth.login.withPassword` / `withOidc` take `browserMode` (default `false`), which also mints a browser session cookie for the issued session. The backend requires an `Origin` matching the stack app URL for it. The result type follows the flag: browser mode carries no `refreshToken`, API mode guarantees one.
+  - **Breaking:** `auth.token.refresh` is replaced by `refreshWithToken({ refreshToken })` (API mode) and `refreshWithSession({ sessionId })` (browser mode, sending `X-KBC-CSRF`).
+  - **Breaking:** the bearer credential kinds are renamed for what renews them — `browser` → `token`, `mediated` → `cookie`. A session stored under the old names is not read, so it signs in again.
+  - **Breaking:** `LoginSuccess` / `LoginResult` / `loginSuccessSchema` / `loginResultSchema` are replaced by `Api*` and `Browser*` pairs; `loginInputSchema` is no longer exported (use `passwordInputSchema`).
+  - **Breaking:** `saml.assert` takes the regenerated body, which now carries `browserMode`.
+
+- replace MANAGE_TOKEN_SCOPES with management.applicationTokens.getApplicationTokenScopes
+
+  The constant mirrored the stack's scope list by hand and had to be edited in lockstep with the
+  backend; the Manage API now publishes the list, so the copy is gone.
+
+- The bearer client always has an active stack, and restores only when asked.
+  - `createKeboola({ defaultBaseUrl })` is required. That stack is active from construction until `session.resume()` or `stack.select` moves it; `baseUrl` is gone.
+  - `session.stack.getActive()` returns `Stack`, never `null`. `stack.close` refuses the active stack (`KeboolaErrorType.StackActive`); `stack.deactivate()` is removed.
+  - `session.restored` is replaced by `session.resume()`, called once on startup and resolving with the same `RestoreStatus`. It rebuilds the stored stacks, credentials and projects and makes the stored stack and project active again; with nothing stored, or on a failed restore, the default stays active. A caller that selected a stack or project, or signed in or out, first keeps its scope, and a stack it signed in or out of keeps that sign-in. Persistence starts only after it settles.
+  - `session.auth.isAuthenticated()` reports whether the active stack holds a credential; `isAuthenticatedAsync()` answers once the stored session has resumed.
+  - `session.auth.replace(credential)` signs the active stack out and in with `credential`, winning over a restore still in flight.
+  - `session.auth.adoptInjected(credential)` (deprecated on arrival) adopts a server-injected `token` credential even in cookie mode. Temporary, for the agent-project claim page, until Connection stops injecting `UiConfig.programmaticAuth`.
+  - `createLegacyKeboola` keeps `baseUrl` (`LegacyKeboolaOptions`).
+
+- rework management.uiApps around the application's `stringId`
+  - **New:** `getUiApp(stringId)` returns the application with every registered version.
+  - **New:** `renameUiApp({ stringId, name })`.
+  - **New:** `getUiApps({ includeInactive })` also lists applications with no active version.
+  - **Breaking:** `activateUiAppVersion` and `deleteUiApp` take the `stringId` instead of `id`.
+  - **Breaking:** `UiApp` carries `stringId`, and its version fields are nullable; `ActivateUiAppVersionPath` is no longer exported.
+
+- Rebuild the bearer (OAuth) flow around a session-state table addressed by stack and project.
+  - **`createKeboola` is the factory's only public name.** The `createSessionClient` alias and the `SessionClient` type are gone — import `createKeboola`, and type a session as `BearerSession`.
+  - **It returns `{ session, getActiveApi, getApi }`, not `{ api, session }`.** `getActiveApi()` follows `session.project.select`; `getApi(projectId)` opens that project and stays pinned to it, so one signed-in client reaches several projects at once. Close a pinned project with `session.project.close(projectId)`.
+  - **The bearer `session` is regrouped** into `stack.*`, `project.*` and `auth.*`, plus `getState()` / `subscribe()` over the stack-and-project table and a `restored` promise resolving `RestoreStatus` (`'restored' | 'expired' | 'unreachable' | 'empty'`, where `expired` means the server refused the refresh token and `unreachable` means the exchange never got an answer — retry, never a login). Every verb is synchronous — a product namespace throws `NotReady` until that entry's context fetch lands, and `stack.getContextAsync` / `project.getContextAsync` await it.
+
+    | Was                              | Now                                        |
+    | -------------------------------- | ------------------------------------------ |
+    | `setBaseUrl(url)`                | `stack.select(url)`                        |
+    | `authenticate(tokens)`           | `auth.authenticate(credential)`            |
+    | `setProject(id)`                 | `project.select(id)`                       |
+    | `clearProject()`                 | `project.deactivate()`                     |
+    | `reset()`                        | `auth.signOut()`                           |
+    | `getAuthHeaders(projectId?)`     | `auth.getHeaders(projectId?)`              |
+    | `api` (the scoped surface)       | `getActiveApi()`                           |
+    | `forProject(id)`                 | `getApi(id)`                               |
+    | `restore()`                      | the `restored` promise                     |
+    | `subscribe(cb)` (debug snapshot) | `subscribe(cb)` + `getState()` (the table) |
+
+    Removed with no replacement: `setProjectAsync`, `isStorageReady`, `hasPersistedValue`, `debug`, `debugForceRefresh`.
+
+  - **`baseUrl` is now the stack to start on, not the stack to talk to.** The bearer factory scopes it once `restored` settles, and only if the restore scoped nothing — so a stored session keeps its own stack. Any stack still enters the table through `session.stack.select(baseUrl)`.
+  - **The bearer engine no longer carries the legacy SAPI flow.** Use `createLegacyKeboola` for SAPI tokens.
+  - New type exports: `RestoreStatus`, `SessionState`, `AuthPhase`, `FetchStatus`, `ActiveLocation`, `StackEntry`, `ProjectEntry`, `BearerCredentialEntry`.
+
+### Minor Changes
+
+- Project-level Kai tool policy: `kaiAgent.updateProjectToolPolicy`, `toolPermissions`/`canWriteToolPolicy` on agent settings and `projectToolPermissions` on user agent settings; org-admin Tool permissions card in Project Settings.
+
+- AI-3943: `kaiAgent.getUsage` exposes the organization's one-time free Kai allowance (`freeAllowance.grantedPpu`/`remainingPpu`); kbc-ui shows a one-time dismissible info notice in the Kai chat surfaces until dismissed or spent.
+
+- Deprecate `createModelTree` in the semantic layer SDK (`@keboola/api-client/sdk/semanticLayer`); it is removed in the next major
+
+  It creates a model, then its children, one request each, and rejects on the first failed child, leaving behind whatever it had already written. Nothing in this repository calls it.
+
+  Create the model with `createModel`, then its children with `createObject` or `createObjects`. To delete a model that failed partway through, use `deleteModel`.
+
+- `api.syncActions.flowMigration.validate` and `.preview` run `keboola.flow-migration-tool`'s sync
+  actions for a list of orchestrations and return one parsed result per orchestration. `preview` is a
+  dry run: its results carry the status (`dry-run`, `skipped` or `failed`), the structural changes,
+  and the flow configuration the orchestration would become.
+
+- `api.syncActions.sshKeys.generate` generates an SSH key pair via `keboola.ssh-keygen-v2` and
+  returns its `public` and `private` keys.
+
+- Deleted project detail exposes storage backend `backends` (like project detail) so the UI can show the backend ID as a link to `/control/storage-backends/<id>`; control-ui renders ID + type badge, gated by `canReadStorageBackends`.
+
+- Support per-chat model tier selection and optional Fast preparation context. Chat detail responses include requested and effective tier labels plus the fixed effort. Existing callers may omit the additive request fields.
+
+- Adds the `kaiMemory` SDK (`api.sdk.kaiMemory`) over the metastore client for Kai's org-wide knowledge-base notes, and a `canManageKaiMemory` permission predicate.
+
+- add management.applicationTokens service, including the stack-published scope list
+
+- `createManagementClient` takes `mintSessionToken` on a `management-token` auth strategy.
+  - The client authenticates every call with a session token minted from `token` (`POST /manage/current-user/session-token`), not with `token` itself.
+  - When that session token expires, the next one is minted from `token` again.
+  - Without `mintSessionToken`, an invalid token is replaced from the browser's login session (`POST /admin/account/session-token`) in every environment.
+
+### Patch Changes
+
+- `canWriteSemanticLayer` now mirrors the metastore's role rule: only the `admin` and `productionManager` project roles may write the semantic layer, and the metastore answers every other role (and a limited token) with a 403. kbc-ui's semantic-layer editor stops offering write actions to those callers, and Kai hides its semantic-layer write tools from them. Tool Permissions lists those tools for every caller, a project block hides them from Kai, and Kai reports a metastore 403 in the metastore's own words (AI-3742).
+
+- Messages the UI sends on its own (data-app preview error forwards, job-finished nudges) are tagged `autoForwarded` and no longer count toward the monthly Kai message limit; the burst limiter still counts them. kai-agent honors the flag only when the text matches one of the UI's fixed auto-forward templates and strips it otherwise (AI-3887)
+
+- Accept an optional `AbortSignal` in `chat.getHistory` and `kaiAgent.getHistory`, matching the other read methods on both clients. Callers that cancel a query now abort the request it started.
+
+- Add `auth.manageTokens` — list, create and revoke Manage API tokens. The list keeps hand-made tokens and session tokens in separate arrays, and creating one needs an active sudo window.
+
+- Add the optional `continueOnFailure` boolean to the `keboola.ex-google-ads` configuration schema, alongside the existing `onlyEnabledCustomers` flag.
+
+- The generated Manage API types match the live document.
+  - A deleted project's `backends` entries are `{ id }`, the only field the endpoint returns for each backend.
+  - The schema carries `PATCH` and `DELETE /manage/file-storage/{fileStorageId}`.
+
+- Accept an optional `query` filter on `metastore.repository.getMetaObjects` and `getMetaObjectRevisions` (AI-3975). The metastore already filters these list endpoints server-side on any object field (`{ status: 'pending' }`, `{ 'field[in]': 'a|b' }`, ...) — the SDK just wasn't forwarding it. Callers no longer have to page every object of a type and filter client-side.
+
+## 39.0.0
+
+### Minor Changes
+
+- Add `management.programmaticProjects` namespace with `confirm({ claimToken? }, signal?)` — redeems an agent project's claim token, making the bearer's account its owner. `claimToken` is optional: Connection also accepts the claim from the `HttpOnly` cookie its confirmation page sets, which is the only copy left after a sign-up or SSO round trip.
+
+- Add `businessWorkspaceApi` service client (`@keboola/api-client/businessWorkspaceApi`) for the Business Workspace dashboards backend.
+
+- `api.kaiAgent.getArtifacts(chatId)` and `api.kaiAgent.getArtifact(id)`: the two read routes kai-agent now serves for the artifacts it derives at the end of a turn. Both are typed off the regenerated kai-agent schema, and the chat is the authorization — a chat the caller cannot read has no artifacts. There is no write pair, because nothing but the agent creates an artifact.
+
+  `spec` and `recipe` come back as open maps. The routes document them as passthrough objects, so the generated types carry no shape for either; `ArtifactSpec` / `ArtifactRecipe` in `@keboola/kai-chat/artifacts` are the shapes behind them, and the narrowing belongs in that package — it already depends on this one, and the reverse edge would close a workspace cycle.
+
+### Patch Changes
+
+- `readableReason` keeps the message an `ApiError` subclass authored for a reader.
+
+  It discarded the message of every error matching `isApiError`, but `HtmlResponseError` and `ManagementClientAuthError` overwrite theirs with wording written for exactly this spot — so an expired session surfaced as "Unknown error" rather than saying the session had expired. Only the base class builds its message from the response status, so only the base class is read as carrying a status line.
+
+## 38.0.0
+
+### Minor Changes
+
+- Expose the optional organization creation timestamp in Storage token verification responses.
+  The ISO-8601 `organization.created` field is nullable when the creation time is unavailable.
+
+## 37.0.0
+
+### Major Changes
+
+- **Breaking:** `ApiError.message` is a status line rather than the HTTP reason phrase, and every error class now reports its own `name`.
+
+  `message` was `response.statusText`, which HTTP/2 leaves empty — so over every production response an error reached a reporter as `Error:` with no message and no status. It is now `"404 Not Found"`, or `"404"` where no reason phrase was sent.
+
+  **What breaks.** A status line is never empty, so the two ways consumers detected "no reason was reported" both stop working:
+
+  ```ts
+  // Before: `message` was '' over HTTP/2, so the written wording always won.
+  // After: `message` is '502', so the written wording never wins.
+  toast.error(err.message || "Saving the token failed.");
+  if (err.message === "") return "No reason was reported.";
+  ```
+
+  Use `readableReason(err)`, new in this release. It returns the service's own sentence from the parsed response body, and `undefined` when the failure carries none — the cue to render your own wording. It never returns the status line:
+
+  ```ts
+  toast.error(readableReason(err) ?? "Saving the token failed.");
+  ```
+
+  `HtmlResponseError` and `ManagementClientAuthError` previously inherited `ApiError`'s constructor without setting `name`, so they reported as plain `Error`; each now names itself. Anything grouping errors by `name` — Sentry's exception type included — will see the new values.
+
+  `deleteModel` counts a child object a concurrent cascade already deleted (`404`) as deleted rather than as a failure that keeps the model alive. The model's own delete is tolerant of a `404` only once a child has actually been deleted, so deleting a model that never existed still rejects.
+
+### Minor Changes
+
+- `kaiAgentClient` gains `prepareChat(chatId, signal?)`, for the engine's new `POST /api/chat/{id}/prepare`.
+
+  It asks the engine to build a chat's sandbox — container, workspace, agent process and its MCP connects — before a turn needs one, on a signal from the host's UI that a message is coming. The work continues after the response resolves, and a deployment whose host does not implement the pre-warm port answers `404`, which callers should read as "not supported here" rather than as an error.
+
+### Patch Changes
+
+- Refresh an expired management session token when token verification responds with HTTP 401.
+
+- `kaiAgentClient.prepareChat` folds a `404` into `{ started: false }` rather than throwing.
+
+  404 is the documented "this deployment does not pre-warm", so every caller had to remember to catch it to tell that apart from a real failure.
+
+## 36.0.1
+
+### Patch Changes
+
+- `approveToolCall` accepts an optional `dismissed` flag on the approval body. The Kai plan card sends
+  it when the user dismisses a plan, so the backend can tell that apart from Request Changes without
+  inspecting the user's own text. Additive and optional — existing callers are unaffected.
+
 ## 36.0.0
 
 ### Major Changes

package/README.md

@@ -78,9 +78,9 @@ Interactive login, then scope to a project:
 ```typescript
 import { createKeboola } from '@keboola/api-client';
 
-const { api, session } = createKeboola({ baseUrl });
+const { api, session } = createKeboola({ defaultBaseUrl: baseUrl });
 
-// api.auth is live as soon as baseUrl is configured
+// api.auth is live from construction: a stack is always active
 const result = await api.auth.login.withPassword({ email, password });
 if (result.mfaRequired) {
   // result is an MFA challenge — verify via api.auth.mfa.* to obtain the LoginSuccess
@@ -103,7 +103,7 @@ credential, hand a `LoginSuccess`-shaped object straight to `session.authenticat
 ```typescript
 import { createKeboola } from '@keboola/api-client';
 
-const { api, session } = createKeboola({ baseUrl: process.env.KEBOOLA_STACK_URL! });
+const { api, session } = createKeboola({ defaultBaseUrl: process.env.KEBOOLA_STACK_URL! });
 
 session.authenticate({
   mfaRequired: false,
@@ -176,6 +176,7 @@ src/
     oauth/                      # OAuth credentials
     chat/                       # Kai Assistant chat
     kaiAgent/                   # Kai Agent (agentic assistant)
+    businessWorkspaceApi/       # Business Workspace dashboards
     ai/                         # AI describe/explain/suggest
     queue/                      # Job Queue
     queryService/               # SQL query service
@@ -211,23 +212,24 @@ src/
 On the `api` object returned by `createKeboola()` / `createLegacyKeboola()` — once the session reaches `ready` — the following clients are available.
 Clients backed by OpenAPI specs are marked with (OpenAPI); the rest use the generic fetch client.
 
-| Accessor           | Service                 | Key methods                                                                                                                                                                                                         |
-| ------------------ | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `api.storage`      | Storage API             | `buckets.*`, `tables.*`, `files.*`, `branches.*`, `workspaces.*`, `mergeRequests.*`, `jobs.*`, `components.*`, `configurations.*`, `configurationRows.*`, `configurationWorkspaces.*`, `tokens.*`, `getStackInfo()` |
-| `api.management`   | Management API          | `projects.*`, `features.*`, `users.*`                                                                                                                                                                               |
-| `api.vault`        | Vault (OpenAPI)         | `getVariables()`, `createVariable()`, `deleteVariable()`, `getVariablesByBranchId()`, `getProjectWideVariables()`                                                                                                   |
-| `api.oauth`        | OAuth                   | `getCredentials()`, `getCredential()`, `createCredential()`, `deleteCredential()`                                                                                                                                   |
-| `api.dataScience`  | Data Science (OpenAPI)  | `getApps()`, `getApp()`, `createApp()`, `patchApp()`, `deleteApp()`, `getAppRuns()`, `getAppRun()`, `getAppLogsTail()`, `getAppLogsDownload()`, `getRuntimes()`, `getSandbox()`                                     |
-| `api.editor`       | SQL Editor (OpenAPI)    | `createSession()`, `getSession()`, `getSessions()`, `getSessionSchema()`, `createQueryJob()`, `tablePreview()`, `tableDefinition()`, `load()`, `unload()`                                                           |
-| `api.encryption`   | Encryption              | `encrypt()`, `encryptSecrets()`                                                                                                                                                                                     |
-| `api.chat`         | Kai Assistant (OpenAPI) | `getHistory()`, `getChat()`, `createChat()`, `deleteChat()`, `getVotes()`, `submitVote()`, `getUsage()`, `getSuggestions()`, `getAgentSettings()`, `getToolsList()`                                                 |
-| `api.kaiAgent`     | Kai Agent (OpenAPI)     | `getHistory()`, `getChat()`, `createChat()`, `deleteChat()`, `approveToolCall()`, `submitToolOutput()`, `getSuggestions()`, `getAgentSettings()`                                                                    |
-| `api.ai`           | AI Service (OpenAPI)    | `describeConfiguration()`, `describeConfigurationVersion()`, `describeConfigurationMerge()`, `explainError()`, `suggestComponent()`, `feedback()`                                                                   |
-| `api.queue`        | Job Queue (OpenAPI)     | `getJob()`, `searchJobs()`                                                                                                                                                                                          |
-| `api.queryService` | Query Service (OpenAPI) | `createQueryJob()`, `cancelQueryJob()`, `getQueryJob()`, `getQueryResults()`, `getQueryHistory()`, `exportResults()`                                                                                                |
-| `api.syncActions`  | Sync Actions (OpenAPI)  | `enrollMFA()`, `gitRepository.*`                                                                                                                                                                                    |
-| `api.telemetry`    | Telemetry               | `provisioning.*`                                                                                                                                                                                                    |
-| `api.import`       | Import (OpenAPI)        | `uploadFile()`, `writeTable()`                                                                                                                                                                                      |
+| Accessor                   | Service                      | Key methods                                                                                                                                                                                                         |
+| -------------------------- | ---------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `api.storage`              | Storage API                  | `buckets.*`, `tables.*`, `files.*`, `branches.*`, `workspaces.*`, `mergeRequests.*`, `jobs.*`, `components.*`, `configurations.*`, `configurationRows.*`, `configurationWorkspaces.*`, `tokens.*`, `getStackInfo()` |
+| `api.management`           | Management API               | `projects.*`, `features.*`, `users.*`                                                                                                                                                                               |
+| `api.vault`                | Vault (OpenAPI)              | `getVariables()`, `createVariable()`, `deleteVariable()`, `getVariablesByBranchId()`, `getProjectWideVariables()`                                                                                                   |
+| `api.oauth`                | OAuth                        | `getCredentials()`, `getCredential()`, `createCredential()`, `deleteCredential()`                                                                                                                                   |
+| `api.dataScience`          | Data Science (OpenAPI)       | `getApps()`, `getApp()`, `createApp()`, `patchApp()`, `deleteApp()`, `getAppRuns()`, `getAppRun()`, `getAppLogsTail()`, `getAppLogsDownload()`, `getRuntimes()`, `getSandbox()`                                     |
+| `api.editor`               | SQL Editor (OpenAPI)         | `createSession()`, `getSession()`, `getSessions()`, `getSessionSchema()`, `createQueryJob()`, `tablePreview()`, `tableDefinition()`, `load()`, `unload()`                                                           |
+| `api.encryption`           | Encryption                   | `encrypt()`, `encryptSecrets()`                                                                                                                                                                                     |
+| `api.chat`                 | Kai Assistant (OpenAPI)      | `getHistory()`, `getChat()`, `createChat()`, `deleteChat()`, `getVotes()`, `submitVote()`, `getUsage()`, `getSuggestions()`, `getAgentSettings()`, `getToolsList()`                                                 |
+| `api.kaiAgent`             | Kai Agent (OpenAPI)          | `getHistory()`, `getChat()`, `createChat()`, `deleteChat()`, `approveToolCall()`, `submitToolOutput()`, `getSuggestions()`, `getAgentSettings()`                                                                    |
+| `api.businessWorkspaceApi` | Business Workspace (OpenAPI) | `healthCheck()`, `getDashboards()`, `getDashboard()`, `createDashboard()`, `updateDashboard()`, `deleteDashboard()`                                                                                                 |
+| `api.ai`                   | AI Service (OpenAPI)         | `describeConfiguration()`, `describeConfigurationVersion()`, `describeConfigurationMerge()`, `explainError()`, `suggestComponent()`, `feedback()`                                                                   |
+| `api.queue`                | Job Queue (OpenAPI)          | `getJob()`, `searchJobs()`                                                                                                                                                                                          |
+| `api.queryService`         | Query Service (OpenAPI)      | `createQueryJob()`, `cancelQueryJob()`, `getQueryJob()`, `getQueryResults()`, `getQueryHistory()`, `exportResults()`                                                                                                |
+| `api.syncActions`          | Sync Actions (OpenAPI)       | `enrollMFA()`, `gitRepository.*`                                                                                                                                                                                    |
+| `api.telemetry`            | Telemetry                    | `provisioning.*`                                                                                                                                                                                                    |
+| `api.import`               | Import (OpenAPI)             | `uploadFile()`, `writeTable()`                                                                                                                                                                                      |
 
 Additional accessors on the ready client:
 

package/dist/{ManagementClientAuthError-DD4u0EU7.cjs → ManagementClientAuthError-DE7lNGZQ.cjs}

@@ -1,10 +1,11 @@
-const require_createFetchClient = require("./createFetchClient-DgMiqTJ8.cjs");
+const require_createFetchClient = require("./createFetchClient-Cwp8max9.cjs");
 //#region src/errors/ManagementClientAuthError.ts
 var ManagementClientAuthError = class extends require_createFetchClient.ApiError {
 	title;
 	message;
 	constructor(title, message, res) {
 		super(res);
+		this.name = "ManagementClientAuthError";
 		this.title = title;
 		this.message = message;
 	}
@@ -17,4 +18,4 @@ Object.defineProperty(exports, "ManagementClientAuthError", {
 	}
 });
 
-//# sourceMappingURL=ManagementClientAuthError-DD4u0EU7.cjs.map
+//# sourceMappingURL=ManagementClientAuthError-DE7lNGZQ.cjs.map

package/dist/{ManagementClientAuthError-DD4u0EU7.cjs.map → ManagementClientAuthError-DE7lNGZQ.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"ManagementClientAuthError-DD4u0EU7.cjs","names":["ApiError"],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+CA,0BAAAA,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}
+{"version":3,"file":"ManagementClientAuthError-DE7lNGZQ.cjs","names":["ApiError"],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.name = 'ManagementClientAuthError';\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+CA,0BAAAA,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,OAAO;EACZ,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}

package/dist/{ManagementClientAuthError-ey-f03vy.js → ManagementClientAuthError-H30lti_Q.js}

@@ -1,10 +1,11 @@
-import { g as ApiError } from "./createFetchClient-U-ZrwPl2.js";
+import { g as ApiError } from "./createFetchClient-DXHQK63w.js";
 //#region src/errors/ManagementClientAuthError.ts
 var ManagementClientAuthError = class extends ApiError {
 	title;
 	message;
 	constructor(title, message, res) {
 		super(res);
+		this.name = "ManagementClientAuthError";
 		this.title = title;
 		this.message = message;
 	}
@@ -12,4 +13,4 @@ var ManagementClientAuthError = class extends ApiError {
 //#endregion
 export { ManagementClientAuthError as t };
 
-//# sourceMappingURL=ManagementClientAuthError-ey-f03vy.js.map
+//# sourceMappingURL=ManagementClientAuthError-H30lti_Q.js.map

package/dist/{ManagementClientAuthError-ey-f03vy.js.map → ManagementClientAuthError-H30lti_Q.js.map}

@@ -1 +1 @@
-{"version":3,"file":"ManagementClientAuthError-ey-f03vy.js","names":[],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+C,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}
+{"version":3,"file":"ManagementClientAuthError-H30lti_Q.js","names":[],"sources":["../src/errors/ManagementClientAuthError.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\nexport class ManagementClientAuthError extends ApiError {\n  title: string;\n  message: string;\n  constructor(title: string, message: string, res: ApiResponse) {\n    super(res);\n    this.name = 'ManagementClientAuthError';\n    this.title = title;\n    this.message = message;\n  }\n}\n"],"mappings":";;AAIA,IAAa,4BAAb,cAA+C,SAAS;CACtD;CACA;CACA,YAAY,OAAe,SAAiB,KAAkB;EAC5D,MAAM,GAAG;EACT,KAAK,OAAO;EACZ,KAAK,QAAQ;EACb,KAAK,UAAU;CACjB;AACF"}

package/dist/{ValidationError-CLVJCCwH.cjs → ValidationError-D65QU0uq.cjs}

@@ -1,13 +1,9 @@
 //#region src/errors/ValidationError.ts
 /**
-* A payload the SDK refused to accept — an input a caller assembled wrongly, or a response that did
-* not match the shape the endpoint is documented to return.
+* A rejected SDK input or a response not matching its documented shape.
 *
-* It exists so a `ZodError` never leaves the package. `ZodError.message` is `JSON.stringify` of its
-* issue list — over a kilobyte for two problems — and a consumer that renders a caught error's
-* message puts that blob in front of a user. `message` here is a single line built for exactly that
-* rendering, while `issues` keeps the structured detail for anyone inspecting the failure rather
-* than displaying it.
+* - Replaces `ZodError`, whose `message` is a JSON blob; `message` here is one user-facing line.
+* - `issues` keeps the structured detail.
 */
 var ValidationError = class ValidationError extends Error {
 	issues;
@@ -22,20 +18,18 @@ const isValidationError = (error) => error instanceof ValidationError;
 /**
 * One line per issue, prefixed by the field it belongs to.
 *
-* - Not `z.prettifyError`, which formats for a terminal — its `✖`/`→` glyphs and newlines survive a
-*   log but collapse into one run-on line in HTML, where most of these end up.
-* - Exported for the boundaries that degrade instead of throwing: a read that drops one malformed
-*   element still owes a reason, and it needs the same one line without a `ValidationError`.
-* - Says which field and what is wrong with it, never the value — so it is safe to log.
+* - Not `z.prettifyError`: its terminal glyphs and newlines collapse in HTML.
+* - Exported for boundaries that drop malformed elements instead of throwing.
+* - Never includes the value, so it is safe to log.
 */
 const formatValidationIssues = (issues) => issues.map((issue) => {
 	const path = issue.path.join(".");
 	return path ? `${path}: ${issue.message}` : issue.message;
 }).join("; ");
 /**
-* Parses with `schema`, converting a `ZodError` into a {@link ValidationError}. Use it instead of a
-* bare `schema.parse()` anywhere the value crosses the package boundary — every client input and
-* every response body.
+* Parses with `schema`, throwing a {@link ValidationError} instead of a `ZodError`.
+*
+* - Use instead of `schema.parse()` for every client input and response body.
 */
 const parseOrThrow = (schema, value) => {
 	const result = schema.safeParse(value);
@@ -68,4 +62,4 @@ Object.defineProperty(exports, "parseOrThrow", {
 	}
 });
 
-//# sourceMappingURL=ValidationError-CLVJCCwH.cjs.map
+//# sourceMappingURL=ValidationError-D65QU0uq.cjs.map

package/dist/ValidationError-D65QU0uq.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidationError-D65QU0uq.cjs","names":[],"sources":["../src/errors/ValidationError.ts"],"sourcesContent":["import type * as z from 'zod';\n\n/**\n * A rejected SDK input or a response not matching its documented shape.\n *\n * - Replaces `ZodError`, whose `message` is a JSON blob; `message` here is one user-facing line.\n * - `issues` keeps the structured detail.\n */\nexport class ValidationError extends Error {\n  issues: z.core.$ZodIssue[];\n\n  constructor(message: string, issues: z.core.$ZodIssue[] = []) {\n    super(message);\n    this.name = 'ValidationError';\n    this.issues = issues;\n    Object.setPrototypeOf(this, ValidationError.prototype);\n  }\n}\n\nexport const isValidationError = (error: unknown): error is ValidationError =>\n  error instanceof ValidationError;\n\n/**\n * One line per issue, prefixed by the field it belongs to.\n *\n * - Not `z.prettifyError`: its terminal glyphs and newlines collapse in HTML.\n * - Exported for boundaries that drop malformed elements instead of throwing.\n * - Never includes the value, so it is safe to log.\n */\nexport const formatValidationIssues = (issues: readonly z.core.$ZodIssue[]) =>\n  issues\n    .map((issue) => {\n      const path = issue.path.join('.');\n\n      // A root-level issue's message already names the whole payload.\n      return path ? `${path}: ${issue.message}` : issue.message;\n    })\n    .join('; ');\n\n/**\n * Parses with `schema`, throwing a {@link ValidationError} instead of a `ZodError`.\n *\n * - Use instead of `schema.parse()` for every client input and response body.\n */\nexport const parseOrThrow = <T extends z.ZodType>(schema: T, value: unknown): z.output<T> => {\n  const result = schema.safeParse(value);\n\n  if (result.success) return result.data;\n\n  throw new ValidationError(formatValidationIssues(result.error.issues), result.error.issues);\n};\n"],"mappings":";;;;;;;AAQA,IAAa,kBAAb,MAAa,wBAAwB,MAAM;CACzC;CAEA,YAAY,SAAiB,SAA6B,CAAC,GAAG;EAC5D,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,OAAO,eAAe,MAAM,gBAAgB,SAAS;CACvD;AACF;AAEA,MAAa,qBAAqB,UAChC,iBAAiB;;;;;;;;AASnB,MAAa,0BAA0B,WACrC,OACG,KAAK,UAAU;CACd,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;CAGhC,OAAO,OAAO,GAAG,KAAK,IAAI,MAAM,YAAY,MAAM;AACpD,CAAC,CAAC,CACD,KAAK,IAAI;;;;;;AAOd,MAAa,gBAAqC,QAAW,UAAgC;CAC3F,MAAM,SAAS,OAAO,UAAU,KAAK;CAErC,IAAI,OAAO,SAAS,OAAO,OAAO;CAElC,MAAM,IAAI,gBAAgB,uBAAuB,OAAO,MAAM,MAAM,GAAG,OAAO,MAAM,MAAM;AAC5F"}

package/dist/ValidationError-DjhtNMfZ.js

@@ -0,0 +1,42 @@
+//#region src/errors/ValidationError.ts
+/**
+* A rejected SDK input or a response not matching its documented shape.
+*
+* - Replaces `ZodError`, whose `message` is a JSON blob; `message` here is one user-facing line.
+* - `issues` keeps the structured detail.
+*/
+var ValidationError = class ValidationError extends Error {
+	issues;
+	constructor(message, issues = []) {
+		super(message);
+		this.name = "ValidationError";
+		this.issues = issues;
+		Object.setPrototypeOf(this, ValidationError.prototype);
+	}
+};
+const isValidationError = (error) => error instanceof ValidationError;
+/**
+* One line per issue, prefixed by the field it belongs to.
+*
+* - Not `z.prettifyError`: its terminal glyphs and newlines collapse in HTML.
+* - Exported for boundaries that drop malformed elements instead of throwing.
+* - Never includes the value, so it is safe to log.
+*/
+const formatValidationIssues = (issues) => issues.map((issue) => {
+	const path = issue.path.join(".");
+	return path ? `${path}: ${issue.message}` : issue.message;
+}).join("; ");
+/**
+* Parses with `schema`, throwing a {@link ValidationError} instead of a `ZodError`.
+*
+* - Use instead of `schema.parse()` for every client input and response body.
+*/
+const parseOrThrow = (schema, value) => {
+	const result = schema.safeParse(value);
+	if (result.success) return result.data;
+	throw new ValidationError(formatValidationIssues(result.error.issues), result.error.issues);
+};
+//#endregion
+export { parseOrThrow as i, formatValidationIssues as n, isValidationError as r, ValidationError as t };
+
+//# sourceMappingURL=ValidationError-DjhtNMfZ.js.map

package/dist/ValidationError-DjhtNMfZ.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ValidationError-DjhtNMfZ.js","names":[],"sources":["../src/errors/ValidationError.ts"],"sourcesContent":["import type * as z from 'zod';\n\n/**\n * A rejected SDK input or a response not matching its documented shape.\n *\n * - Replaces `ZodError`, whose `message` is a JSON blob; `message` here is one user-facing line.\n * - `issues` keeps the structured detail.\n */\nexport class ValidationError extends Error {\n  issues: z.core.$ZodIssue[];\n\n  constructor(message: string, issues: z.core.$ZodIssue[] = []) {\n    super(message);\n    this.name = 'ValidationError';\n    this.issues = issues;\n    Object.setPrototypeOf(this, ValidationError.prototype);\n  }\n}\n\nexport const isValidationError = (error: unknown): error is ValidationError =>\n  error instanceof ValidationError;\n\n/**\n * One line per issue, prefixed by the field it belongs to.\n *\n * - Not `z.prettifyError`: its terminal glyphs and newlines collapse in HTML.\n * - Exported for boundaries that drop malformed elements instead of throwing.\n * - Never includes the value, so it is safe to log.\n */\nexport const formatValidationIssues = (issues: readonly z.core.$ZodIssue[]) =>\n  issues\n    .map((issue) => {\n      const path = issue.path.join('.');\n\n      // A root-level issue's message already names the whole payload.\n      return path ? `${path}: ${issue.message}` : issue.message;\n    })\n    .join('; ');\n\n/**\n * Parses with `schema`, throwing a {@link ValidationError} instead of a `ZodError`.\n *\n * - Use instead of `schema.parse()` for every client input and response body.\n */\nexport const parseOrThrow = <T extends z.ZodType>(schema: T, value: unknown): z.output<T> => {\n  const result = schema.safeParse(value);\n\n  if (result.success) return result.data;\n\n  throw new ValidationError(formatValidationIssues(result.error.issues), result.error.issues);\n};\n"],"mappings":";;;;;;;AAQA,IAAa,kBAAb,MAAa,wBAAwB,MAAM;CACzC;CAEA,YAAY,SAAiB,SAA6B,CAAC,GAAG;EAC5D,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,SAAS;EACd,OAAO,eAAe,MAAM,gBAAgB,SAAS;CACvD;AACF;AAEA,MAAa,qBAAqB,UAChC,iBAAiB;;;;;;;;AASnB,MAAa,0BAA0B,WACrC,OACG,KAAK,UAAU;CACd,MAAM,OAAO,MAAM,KAAK,KAAK,GAAG;CAGhC,OAAO,OAAO,GAAG,KAAK,IAAI,MAAM,YAAY,MAAM;AACpD,CAAC,CAAC,CACD,KAAK,IAAI;;;;;;AAOd,MAAa,gBAAqC,QAAW,UAAgC;CAC3F,MAAM,SAAS,OAAO,UAAU,KAAK;CAErC,IAAI,OAAO,SAAS,OAAO,OAAO;CAElC,MAAM,IAAI,gBAAgB,uBAAuB,OAAO,MAAM,MAAM,GAAG,OAAO,MAAM,MAAM;AAC5F"}

package/dist/ai/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DhUU3M1W.cjs");
-const require_auth = require("../auth-JQ33o3nU.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-BYqW-9tm.cjs");
+const require_auth = require("../auth-Dm0F2rOh.cjs");
 //#region src/clients/ai/aiClient.ts
 const createAiClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({

package/dist/ai/index.d.cts

@@ -1,5 +1,5 @@
-import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-52irAt99.cjs";
-import { n as ClientInitOptions } from "../types-_RhBCj4_.cjs";
+import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-YHUEArkR.cjs";
+import { n as ClientInitOptions } from "../types-DoZtE9tz.cjs";
 //#region src/clients/ai/aiClient.d.ts
 declare const createAiClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<{

package/dist/ai/index.d.ts

@@ -1,5 +1,5 @@
-import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-BTWIPEiU.js";
-import { n as ClientInitOptions } from "../types-Ct0YPy2w.js";
+import { a as DescribeConfigurationVersionBody, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, p as components, r as DescribeConfigurationBody, s as DocsQuestionBody, u as FeedbackBody } from "../types-CfwqVkEA.js";
+import { n as ClientInitOptions } from "../types-B2w2TtSA.js";
 //#region src/clients/ai/aiClient.d.ts
 declare const createAiClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<{

package/dist/ai/index.js

@@ -1,5 +1,5 @@
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-BVSc9ibR.js";
-import { t as createAuthHeaders } from "../auth-aItmDu45.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DZUOVupy.js";
+import { t as createAuthHeaders } from "../auth-DworfoPy.js";
 //#region src/clients/ai/aiClient.ts
 const createAiClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({

package/dist/ai/types.d.cts

@@ -1,2 +1,2 @@
-import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-52irAt99.cjs";
+import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-YHUEArkR.cjs";
 export { ComponentDocsDetail, ComponentSuggestion, DescribeConfigurationBody, DescribeConfigurationMergeBody, DescribeConfigurationVersionBody, DocsAnswer, DocsQuestionBody, ErrorExplanation, ExplainErrorBody, FeedbackBody, ObjectDescription, SuggestComponentBody };

package/dist/ai/types.d.ts

@@ -1,2 +1,2 @@
-import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-BTWIPEiU.js";
+import { a as DescribeConfigurationVersionBody, c as ErrorExplanation, d as ObjectDescription, f as SuggestComponentBody, i as DescribeConfigurationMergeBody, l as ExplainErrorBody, n as ComponentSuggestion, o as DocsAnswer, r as DescribeConfigurationBody, s as DocsQuestionBody, t as ComponentDocsDetail, u as FeedbackBody } from "../types-CfwqVkEA.js";
 export { ComponentDocsDetail, ComponentSuggestion, DescribeConfigurationBody, DescribeConfigurationMergeBody, DescribeConfigurationVersionBody, DocsAnswer, DocsQuestionBody, ErrorExplanation, ExplainErrorBody, FeedbackBody, ObjectDescription, SuggestComponentBody };

package/dist/{appLogs-BjfUoWzs.cjs → appLogs-B9zFJIuy.cjs}

@@ -1,6 +1,6 @@
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_isPlainObject = require("./isPlainObject-BB3iy87C.cjs");
-const require_createFetchClient = require("./createFetchClient-DgMiqTJ8.cjs");
+const require_createFetchClient = require("./createFetchClient-Cwp8max9.cjs");
 let zod = require("zod");
 zod = require_rolldown_runtime.__toESM(zod, 1);
 let dayjs = require("dayjs");
@@ -150,4 +150,4 @@ Object.defineProperty(exports, "readAppLogsTail", {
 	}
 });
 
-//# sourceMappingURL=appLogs-BjfUoWzs.cjs.map
+//# sourceMappingURL=appLogs-B9zFJIuy.cjs.map

package/dist/{appLogs-BjfUoWzs.cjs.map → appLogs-B9zFJIuy.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"appLogs-BjfUoWzs.cjs","names":["utc","z","record","isPlainObject","isApiError","HttpStatus","parseContentDispositionHeader","HttpHeader"],"sources":["../src/domain/appLogs.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output. Shared by the two clients wrapping sandboxes-service —\n * `dataScience` (`/v1`) and `apps` (`/v2`) — which serve the same logs under different paths, so the\n * tail contract (how a line is parsed, where the next poll resumes, and that an idle app is not an\n * error) is defined once here rather than per surface.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAA,QAAM,OAAOA,oBAAAA,OAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYC,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAIC,sBAAAA,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAIA,sBAAAA,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,QAAA,GAAO,MAAA,QAAA,CAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyBC,0BAAAA,8BACzB,SAAS,QAAQ,IAAIC,0BAAAA,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF"}
+{"version":3,"file":"appLogs-B9zFJIuy.cjs","names":["utc","z","record","isPlainObject","isApiError","HttpStatus","parseContentDispositionHeader","HttpHeader"],"sources":["../src/domain/appLogs.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output. Shared by the two clients wrapping sandboxes-service —\n * `dataScience` (`/v1`) and `apps` (`/v2`) — which serve the same logs under different paths, so the\n * tail contract (how a line is parsed, where the next poll resumes, and that an idle app is not an\n * error) is defined once here rather than per surface.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;;;AAoBA,MAAA,QAAM,OAAOA,oBAAAA,OAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYC,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAIC,sBAAAA,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAIA,sBAAAA,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,QAAA,GAAO,MAAA,QAAA,CAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyBC,0BAAAA,8BACzB,SAAS,QAAQ,IAAIC,0BAAAA,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF"}

package/dist/{appLogs-xsVkTriU.js → appLogs-BBkkUOW1.js}

@@ -1,5 +1,5 @@
 import { t as isPlainObject } from "./isPlainObject-LYW-03uB.js";
-import { f as parseContentDispositionHeader, m as HttpStatus, r as isApiError, s as HttpHeader } from "./createFetchClient-U-ZrwPl2.js";
+import { f as parseContentDispositionHeader, m as HttpStatus, r as isApiError, s as HttpHeader } from "./createFetchClient-DXHQK63w.js";
 import * as z$1 from "zod";
 import dayjs from "dayjs";
 import utc from "dayjs/plugin/utc.js";
@@ -129,4 +129,4 @@ const readAppLogsDownload = async (fetchLogs) => {
 //#endregion
 export { readAppLogsDownload as n, readAppLogsTail as r, parseLogLines as t };
 
-//# sourceMappingURL=appLogs-xsVkTriU.js.map
+//# sourceMappingURL=appLogs-BBkkUOW1.js.map