@keboola/api-client 36.0.0 → 40.0.0

package/dist/{syncActions-QeBhIVhG.js → syncActions-BmmoqZO_.js}

@@ -1,26 +1,20 @@
-import { c as defaultValidateStatus } from "./createFetchClient-U-ZrwPl2.js";
+import { c as defaultValidateStatus } from "./createFetchClient-DXHQK63w.js";
 import { t as SyncActionError } from "./SyncActionError-CoZFsdUk.js";
-import { i as parseOrThrow } from "./ValidationError-BekhphAq.js";
-import { t as createGenericFetchClient } from "./createGenericFetchClient-rxvUUbap.js";
-import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-BVSc9ibR.js";
-import { t as createAuthHeaders } from "./auth-aItmDu45.js";
-import { t as ComponentId } from "./componentId-vJz-kWs6.js";
+import { i as parseOrThrow } from "./ValidationError-DjhtNMfZ.js";
+import { t as createGenericFetchClient } from "./createGenericFetchClient-Dg1rgzmG.js";
+import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-DZUOVupy.js";
+import { t as createAuthHeaders } from "./auth-DworfoPy.js";
+import { t as ComponentId } from "./componentId-C6WZa_R1.js";
 import * as z$1 from "zod";
 //#region src/clients/syncActions/utils/response.ts
 const asErrorBody = (data) => typeof data === "object" && data !== null ? data : null;
 const asString = (value) => typeof value === "string" && value ? value : void 0;
 const asNumber = (value) => typeof value === "number" ? value : void 0;
 /**
-* A component reports failure two ways: a non-2xx response, and a **2xx** whose body carries
-* `status: 'error'` (the component ran, and said no). Both are recognised here so every sync action
-* fails as one `SyncActionError` — `validateStatus` is the only hook that sees the parsed body of a
-* successful response, which is what the second case needs.
+* Fails a sync action on a non-2xx, or on a 2xx whose body has `status: 'error'`.
 *
-* Throwing rather than returning the error is deliberate. `coreFetch` only rethrows a returned value
-* that is an `ApiError`, and `SyncActionError` is a peer of `ApiError`, not a subclass: a component
-* answering `status: 'error'` on a **200** gave a business answer, not a transport failure, so it
-* must not satisfy `isApiError` / `isFetchClientError` — those drive retry and "network problem"
-* handling, and `err.response.status` would read 200 and mislead every status-based branch.
+* - Throws: `coreFetch` only rethrows a returned `ApiError`.
+* - `SyncActionError` is not an `ApiError`, so retry / network-error handling skips it.
 */
 const syncActionValidateStatus = (apiResponse) => {
 	const body = asErrorBody(apiResponse.data);
@@ -40,39 +34,24 @@ const SyncAction = {
 	DBT_RUN_RESULTS: "dbtRunResults",
 	GIT_REPOSITORY: "gitRepository",
 	ENROLL_MFA: "enrollMFA",
+	FLOW_MIGRATION_PREVIEW: "preview",
+	FLOW_MIGRATION_VALIDATE: "validate",
 	LIST_ACTORS: "listActors",
 	LIST_TASKS: "listTasks",
-	TEST_LOOKER_CREDENTIALS: "testLookerCredentials"
+	TEST_LOOKER_CREDENTIALS: "testLookerCredentials",
+	SSH_KEYS_GENERATE: "generate"
 };
 //#endregion
 //#region src/clients/syncActions/schemas.ts
-/**
-* The Keboola-side context every sync action carries, whichever action it is. Namespaces extend it
-* with the fields their own action needs, so a caller never assembles the rest of the body.
-*/
+/** The Keboola-side context every sync action carries; namespaces extend it with their own fields. */
 const syncActionContextSchema = z$1.object({
-	/**
-	* Required, because omitting it changes nothing: the service normalises a missing, empty or
-	* `null` value to `"default"` and resolves that to the default branch's numeric id — the same id,
-	* branch type and downstream context an explicit value resolves to, with no extra lookup either
-	* way. Requiring it keeps every request self-describing. Both a numeric id and the literal
-	* `"default"` are accepted (`keboola/runner-sync-api`: `ExecuteActionRequestProcessor` →
-	* `BranchTypeResolver`).
-	*/
+	/** A numeric id or `"default"`; required so requests are self-describing. */
 	branchId: z$1.string().min(1, "Required"),
-	/**
-	* Leave undefined. The service then runs the component's registered tag from the Developer
-	* Portal / Storage component definition — the currently published version, not Docker's
-	* `latest`. Set it only to deliberately pin a specific or branch build.
-	*/
+	/** Leave undefined to run the published version (not Docker `latest`); set only to pin a build. */
 	tag: z$1.string().optional(),
 	mode: z$1.enum(["run", "debug"]).optional()
 });
-/**
-* The `/actions` request body. `configData` is whatever the component's action expects, so it is
-* only asserted to be an object here — each namespace validates the shape its own action needs
-* before handing it over.
-*/
+/** The `/actions` body; each namespace validates its own `configData` shape. */
 const syncActionBodySchema = syncActionContextSchema.extend({
 	componentId: z$1.string().min(1, "Required"),
 	action: z$1.string().min(1, "Required"),
@@ -126,45 +105,31 @@ const createApify = (sendSyncAction) => {
 };
 //#endregion
 //#region src/clients/syncActions/dbt/schemas.ts
-/**
-* `componentId` is a plain string here, unlike the git actions' closed enum. Every dbt transformation
-* answers `dbtCompile` and `dbtRunResults` under the same action name and the same payload, so the id
-* selects nothing — it only names the component to run, and rejecting an unlisted one would cost the
-* caller a cast for no guarantee. The component itself refuses an action it does not serve.
-*/
+/** `componentId` is a plain string: every dbt transformation serves the same actions, so it selects nothing. */
 const dbtActionInputSchema = syncActionContextSchema.extend({
 	componentId: z$1.string().min(1, "Required"),
 	configId: z$1.string().min(1, "Required"),
 	artifacts: z$1.record(z$1.string(), z$1.unknown()).optional()
 });
 /**
-* `compiled` maps a model's file name (`orders.sql`) to its compiled SQL. Key order is the
-* component's own and is preserved, so the caller can render the models in it.
+* Model file name (`orders.sql`) → compiled SQL, in the component's key order.
 *
-* A configuration that has never run does **not** answer with an empty payload — the component
-* raises a user exception telling you to run it first, which arrives as a `SyncActionError` carrying
-* that sentence. The empty default here is only for a payload that omits the key anyway: rendering
-* "nothing to show" beats failing on a validation error no caller can act on. A key that is
-* *present* with the wrong shape still fails — that is a contract change, and reading it as "no
-* models" would hide it.
+* - A never-run configuration fails with a `SyncActionError`, not an empty payload.
+* - A missing key defaults to empty; a present key of the wrong shape still fails.
 */
 const dbtCompiledSchema = z$1.object({ compiled: z$1.record(z$1.string(), z$1.string()).default({}) }).transform(({ compiled }) => compiled);
-/**
-* dbt reports the worker as `"Thread-1"`; the number alone is what a consumer positions a row by, so
-* the prefix is stripped here rather than in every consumer. An unparseable value falls back to `0`
-* — one odd worker label must not cost the caller the whole timeline.
-*/
+/** `"Thread-1"` → `1`; an unparseable value falls back to `0` rather than failing the timeline. */
 const dbtThreadSchema = z$1.string().transform((thread) => Number.parseInt(thread.replace(/^Thread-/, ""), 10)).pipe(z$1.number().int().nonnegative()).catch(0);
-/** Each entry also carries `status` and `dependsOn`, dropped here until a consumer needs them. */
+/** Omits `status` and `dependsOn`. */
 const dbtModelTimingSchema = z$1.object({
 	id: z$1.string(),
 	name: z$1.string(),
 	thread: dbtThreadSchema,
-	/** ISO timestamps, left as strings — the consumer decides what to parse them into. */
+	/** ISO timestamps, left unparsed. */
 	timeStarted: z$1.string(),
 	timeCompleted: z$1.string()
 });
-/** Defaults to empty for the same reason as `compiled` above — and with the same caveat. */
+/** A missing key defaults to empty, as in `dbtCompiledSchema`. */
 const dbtRunResultsSchema = z$1.object({ modelTiming: z$1.array(dbtModelTimingSchema).default([]) }).transform(({ modelTiming }) => modelTiming);
 //#endregion
 //#region src/clients/syncActions/dbt/utils.ts
@@ -210,6 +175,75 @@ const createDbt = (sendSyncAction) => {
 	};
 };
 //#endregion
+//#region src/clients/syncActions/flowMigration/schemas.ts
+const flowMigrationInputSchema = syncActionContextSchema.extend({ orchestrationIds: z$1.array(z$1.string().min(1, "Required")) });
+const flowMigrationValidationResultSchema = z$1.object({
+	orchestrationId: z$1.string(),
+	orchestrationName: z$1.string(),
+	valid: z$1.boolean(),
+	issues: z$1.array(z$1.string())
+});
+/** The orchestration's configuration as the flow it would become; extra keys pass through. */
+const flowMigrationMigratedConfigurationSchema = z$1.looseObject({
+	phases: z$1.array(z$1.unknown()).optional(),
+	tasks: z$1.array(z$1.unknown()).optional(),
+	parameters: z$1.unknown().optional()
+});
+/**
+* One orchestration's dry-run outcome.
+*
+* - `skipped`: it failed validation; `issues` says why.
+* - `failed`: building the flow threw; `error` carries the message.
+*/
+const flowMigrationPreviewResultSchema = z$1.object({
+	orchestrationId: z$1.string(),
+	orchestrationName: z$1.string(),
+	status: z$1.enum([
+		"dry-run",
+		"skipped",
+		"failed"
+	]),
+	issues: z$1.array(z$1.string()),
+	changes: z$1.array(z$1.string()),
+	error: z$1.string().optional(),
+	migratedConfiguration: flowMigrationMigratedConfigurationSchema.optional()
+});
+const flowMigrationValidationResultsSchema = z$1.array(flowMigrationValidationResultSchema);
+const flowMigrationPreviewResultsSchema = z$1.array(flowMigrationPreviewResultSchema);
+//#endregion
+//#region src/clients/syncActions/flowMigration/flowMigration.ts
+/** Orchestration → flow migration checks; one result per requested orchestration. */
+const createFlowMigration = (sendSyncAction) => {
+	const validate = async (input, signal) => {
+		const { orchestrationIds, ...context } = parseOrThrow(flowMigrationInputSchema, input);
+		const data = await sendSyncAction({
+			...context,
+			action: SyncAction.FLOW_MIGRATION_VALIDATE,
+			componentId: ComponentId.FLOW_MIGRATION_TOOL,
+			configData: { parameters: { orchestrationIds } }
+		}, { signal });
+		return parseOrThrow(flowMigrationValidationResultsSchema, data);
+	};
+	/** A dry run: nothing is written, and invalid orchestrations come back `skipped`. */
+	const preview = async (input, signal) => {
+		const { orchestrationIds, ...context } = parseOrThrow(flowMigrationInputSchema, input);
+		const data = await sendSyncAction({
+			...context,
+			action: SyncAction.FLOW_MIGRATION_PREVIEW,
+			componentId: ComponentId.FLOW_MIGRATION_TOOL,
+			configData: { parameters: {
+				mode: "config",
+				orchestrationIds
+			} }
+		}, { signal });
+		return parseOrThrow(flowMigrationPreviewResultsSchema, data);
+	};
+	return {
+		validate,
+		preview
+	};
+};
+//#endregion
 //#region src/clients/syncActions/git/constants.ts
 /**
 * Components whose git repository lives under `parameters.dataApp.git.repository` and that answer to
@@ -251,14 +285,7 @@ const gitAuthSchema = z$1.discriminatedUnion("type", [
 	}),
 	z$1.object({
 		type: z$1.literal("sshKey"),
-		/**
-		* Optional, unlike the password variant's — the key is the whole credential.
-		*
-		* - The component rewrites the URL to `git@host:path` and clones over SSH, where the user is
-		*   always `git` (`keboola/sandboxes`: `GitRepository::resolveRepositoryUrl`).
-		* - It never reads `username` on that path, so a deploy key has none to be stored with.
-		* - Accept one when the caller has it anyway; it reaches the component and is ignored there.
-		*/
+		/** Ignored by the component: over SSH the user is always `git`. */
 		username: z$1.string().min(1, "Required").optional(),
 		"#sshKey": z$1.string().min(1, "Required")
 	})
@@ -268,14 +295,8 @@ const gitInputSchema = syncActionContextSchema.extend({
 	auth: gitAuthSchema.default({ type: "public" })
 });
 /**
-* Accepts only the components that serve a git repository action — the action name and the
-* `configData` path are resolved from the id, so one from neither family has nowhere to go. The
-* enum rejects an unsupported id when parsing, before any request is sent.
-*
-* **Takes no `branch`, deliberately — do not add one.** It is a run-config field the component
-* feeds to `git clone -b <branch>`, so a stale or renamed value fails the clone and breaks the very
-* call you make to find out which branches exist. Accepting it optionally would let a caller
-* reintroduce that by spreading in an existing config; zod strips it instead.
+* **Takes no `branch` — do not add one.** The component clones with `-b <branch>`, so a stale one
+* would fail the branch listing. Zod strips it.
 */
 const getBranchesInputSchema = gitInputSchema.extend({ componentId: z$1.enum(GIT_FAMILY) }).check((ctx) => {
 	const { componentId, auth } = ctx.value;
@@ -287,26 +308,13 @@ const getBranchesInputSchema = gitInputSchema.extend({ componentId: z$1.enum(GIT
 		message: `Component "${componentId}" authenticates with a password, not an SSH key.`
 	});
 });
-/** Only the data-app family serves `data-app-entrypoints`; the enum rejects anything else. */
+/** Only the data-app family serves `data-app-entrypoints`. */
 const getEntrypointsInputSchema = gitInputSchema.extend({
 	componentId: z$1.enum(DATA_APP_FAMILY),
-	/**
-	* Unlike `getBranches`, the branch is a real input here — it selects whose revision's files get
-	* enumerated. The *git* branch, not the dev branch (`branchId`) every sync action carries.
-	* Omit it for the repository's default branch; don't resolve one client-side.
-	*
-	* An empty string normalises to omitted rather than being rejected: a config written outside the
-	* UI can carry `branch: ""`, and the form this replaces deleted a falsy branch before sending, so
-	* refusing it would fail a call that has always meant "the default branch".
-	*/
+	/** The *git* branch (not `branchId`); omit for the repository default. `""` normalises to omitted. */
 	branch: z$1.string().optional().transform((branch) => branch || void 0)
 });
-/**
-* Only `branch` is load-bearing — it is the value the caller selects and stores. The rest is
-* decoration the UI renders beside it, so each field falls back to an empty string rather than
-* failing: one commit with no message must not cost the caller the whole branch list. They stay
-* `string` rather than becoming optional, so a consumer needs no new undefined handling.
-*/
+/** Only `branch` is load-bearing; the rest falls back to `''` so one bad field can't fail the list. */
 const gitBranchSchema = z$1.object({
 	branch: z$1.string(),
 	sha: z$1.string().catch(""),
@@ -320,24 +328,12 @@ const gitBranchSchema = z$1.object({
 		email: ""
 	})
 });
+/** An array, or an index-keyed object with gaps (a server-filtered PHP array). */
+const gitBranchListSchema = z$1.union([z$1.array(gitBranchSchema), z$1.record(z$1.string(), gitBranchSchema)]).transform((branches) => Array.isArray(branches) ? branches : Object.values(branches));
 /**
-* Only `repository.branches` is confirmed — it is what the UI read before these actions were typed.
-* The top-level position is accepted too because the schema this replaces declared it there, and
-* nothing ever exercised that schema to settle which is right; the two families are separate
-* implementations, so both may well be real.
-*
-* A list in neither position is a different thing from an empty one, though, and is rejected rather
-* than read as none: an empty array is a real answer (a repository with no branches yet), while an
-* envelope carrying no list at all is one we do not understand, and rendering that as "no branches"
-* would hide the failure behind an ordinary empty state.
-*/
-/**
-* Either a JSON array or an object keyed by stringified indices, gaps included:
-* `{ "0": …, "1": …, "3": … }`. The component filters the list server-side, and a PHP array whose
-* integer keys are no longer contiguous serializes as an object. `Object.values` reads those keys
-* back in ascending numeric order, so the branch order survives either shape.
+* - `repository.branches` is confirmed; the top-level position is accepted but unverified.
+* - A response with neither list is rejected, not read as no branches.
 */
-const gitBranchListSchema = z$1.union([z$1.array(gitBranchSchema), z$1.record(z$1.string(), gitBranchSchema)]).transform((branches) => Array.isArray(branches) ? branches : Object.values(branches));
 const gitBranchesSchema = z$1.object({
 	repository: z$1.object({ branches: gitBranchListSchema.optional() }).optional(),
 	branches: gitBranchListSchema.optional()
@@ -357,7 +353,6 @@ const toCredentials = (auth) => {
 	const { type: _type, ...credentials } = auth;
 	return credentials;
 };
-/** The default is the absence of a branch — the component's own `git clone` decides it. */
 const toRevision = (rev) => rev.revision === "branch" ? { branch: rev.branch } : {};
 /** Data apps nest their repository a level deeper, and call the URL `repository`. */
 const buildDataAppConfigData = ({ repositoryUrl, auth, ...rev }) => ({ parameters: { dataApp: { git: {
@@ -451,6 +446,28 @@ const createLooker = (sendSyncAction) => {
 	return { testCredentials };
 };
 //#endregion
+//#region src/clients/syncActions/sshKeys/schemas.ts
+const sshKeyPairSchema = z$1.object({
+	status: z$1.literal("success"),
+	public: z$1.string(),
+	private: z$1.string()
+});
+//#endregion
+//#region src/clients/syncActions/sshKeys/sshKeys.ts
+const createSshKeys = (sendSyncAction) => {
+	/** Generates a new 4096-bit RSA key pair; the component keeps no copy. */
+	const generate = async (input, signal) => {
+		const data = await sendSyncAction({
+			...parseOrThrow(syncActionContextSchema, input),
+			action: SyncAction.SSH_KEYS_GENERATE,
+			componentId: ComponentId.SSH_KEYGEN_V2,
+			configData: {}
+		}, { signal });
+		return parseOrThrow(sshKeyPairSchema, data);
+	};
+	return { generate };
+};
+//#endregion
 //#region src/clients/syncActions/syncActionsClient.ts
 const createSendSyncAction = (client) => {
 	return async (body, options = {}) => {
@@ -487,11 +504,13 @@ const createSyncActionsClient = ({ baseUrl, middlewares, auth }) => {
 		enrollMFA,
 		apify: createApify(sendSyncAction),
 		dbt: createDbt(sendSyncAction),
+		flowMigration: createFlowMigration(sendSyncAction),
 		git: createGit(sendSyncAction),
-		looker: createLooker(sendSyncAction)
+		looker: createLooker(sendSyncAction),
+		sshKeys: createSshKeys(sendSyncAction)
 	};
 };
 //#endregion
 export { createSyncActionsClient as t };
 
-//# sourceMappingURL=syncActions-QeBhIVhG.js.map
+//# sourceMappingURL=syncActions-BmmoqZO_.js.map

package/dist/syncActions-BmmoqZO_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncActions-BmmoqZO_.js","names":["z","z","z","z","z","z","z"],"sources":["../src/clients/syncActions/utils/response.ts","../src/clients/syncActions/constants.ts","../src/clients/syncActions/schemas.ts","../src/clients/syncActions/apify/schemas.ts","../src/clients/syncActions/apify/utils.ts","../src/clients/syncActions/apify/apify.ts","../src/clients/syncActions/dbt/schemas.ts","../src/clients/syncActions/dbt/utils.ts","../src/clients/syncActions/dbt/dbt.ts","../src/clients/syncActions/flowMigration/schemas.ts","../src/clients/syncActions/flowMigration/flowMigration.ts","../src/clients/syncActions/git/constants.ts","../src/clients/syncActions/git/schemas.ts","../src/clients/syncActions/git/utils.ts","../src/clients/syncActions/git/git.ts","../src/clients/syncActions/looker/schemas.ts","../src/clients/syncActions/looker/looker.ts","../src/clients/syncActions/sshKeys/schemas.ts","../src/clients/syncActions/sshKeys/sshKeys.ts","../src/clients/syncActions/syncActionsClient.ts"],"sourcesContent":["import { SyncActionError } from '../../../errors';\nimport type { ValidateStatusFn } from '../../../fetchClient';\nimport { defaultValidateStatus } from '../../../fetchClient';\n\ntype SyncActionErrorBody = {\n  status?: unknown;\n  message?: unknown;\n  error?: unknown;\n  exceptionId?: unknown;\n  code?: unknown;\n};\n\nconst asErrorBody = (data: unknown): SyncActionErrorBody | null =>\n  typeof data === 'object' && data !== null ? (data as SyncActionErrorBody) : null;\n\nconst asString = (value: unknown) => (typeof value === 'string' && value ? value : undefined);\nconst asNumber = (value: unknown) => (typeof value === 'number' ? value : undefined);\n\n/**\n * Fails a sync action on a non-2xx, or on a 2xx whose body has `status: 'error'`.\n *\n * - Throws: `coreFetch` only rethrows a returned `ApiError`.\n * - `SyncActionError` is not an `ApiError`, so retry / network-error handling skips it.\n */\nexport const syncActionValidateStatus: ValidateStatusFn = (apiResponse) => {\n  const body = asErrorBody(apiResponse.data);\n\n  if (body?.status === 'error') {\n    throw new SyncActionError(\n      asString(body.message) ?? asString(body.error) ?? apiResponse.response.statusText,\n      {\n        exceptionId: asString(body.exceptionId),\n        code: asNumber(body.code),\n        data: apiResponse.data,\n      },\n    );\n  }\n\n  return defaultValidateStatus(apiResponse);\n};\n","export const SyncAction = {\n  DATA_APP_GIT_REPOSITORY: 'git-repository',\n  DATA_APP_ENTRYPOINTS: 'data-app-entrypoints',\n  DBT_COMPILE: 'dbtCompile',\n  DBT_RUN_RESULTS: 'dbtRunResults',\n  GIT_REPOSITORY: 'gitRepository',\n  ENROLL_MFA: 'enrollMFA',\n  FLOW_MIGRATION_PREVIEW: 'preview',\n  FLOW_MIGRATION_VALIDATE: 'validate',\n  LIST_ACTORS: 'listActors',\n  LIST_TASKS: 'listTasks',\n  TEST_LOOKER_CREDENTIALS: 'testLookerCredentials',\n  SSH_KEYS_GENERATE: 'generate',\n};\n","import * as z from 'zod';\n\n/** The Keboola-side context every sync action carries; namespaces extend it with their own fields. */\nexport const syncActionContextSchema = z.object({\n  /** A numeric id or `\"default\"`; required so requests are self-describing. */\n  branchId: z.string().min(1, 'Required'),\n  /** Leave undefined to run the published version (not Docker `latest`); set only to pin a build. */\n  tag: z.string().optional(),\n  mode: z.enum(['run', 'debug']).optional(),\n});\n\n/** The `/actions` body; each namespace validates its own `configData` shape. */\nexport const syncActionBodySchema = syncActionContextSchema.extend({\n  componentId: z.string().min(1, 'Required'),\n  action: z.string().min(1, 'Required'),\n  configData: z.record(z.string(), z.unknown()),\n});\n\nexport type SyncActionContext = z.infer<typeof syncActionContextSchema>;\nexport type SyncActionBody = z.infer<typeof syncActionBodySchema>;\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nexport const apifyObjectsInputSchema = syncActionContextSchema.extend({\n  '#token': z.string().min(1, 'Required'),\n});\n\nexport const apifyObjectsSchema = z.array(\n  z.object({\n    id: z.string(),\n    name: z.string(),\n  }),\n);\n\nexport type ApifyObjectsInput = z.infer<typeof apifyObjectsInputSchema>;\n\nexport type ApifyObject = z.infer<typeof apifyObjectsSchema>[number];\n","import { SyncActionError } from '../../../errors';\nimport type { ValidateStatusFn } from '../../../fetchClient';\nimport { syncActionValidateStatus } from '../utils/response';\n\n/**\n * A slow Apify account makes the component answer `{ timeout: true }` on a 200 instead of the list —\n * a failure only this action knows how to spot, so it is checked before deferring to the shared\n * validation.\n */\nexport const apifyValidateStatus: ValidateStatusFn = (apiResponse) => {\n  const data = apiResponse.data;\n\n  if (typeof data === 'object' && data !== null && 'timeout' in data && data.timeout)\n    throw new SyncActionError('Timed out while loading data from Apify.', { data });\n\n  return syncActionValidateStatus(apiResponse);\n};\n","import { ComponentId } from '../../../constants';\nimport { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport { type ApifyObjectsInput, apifyObjectsInputSchema, apifyObjectsSchema } from './schemas';\nimport { apifyValidateStatus } from './utils';\n\nexport const createApify = (sendSyncAction: SendSyncAction) => {\n  const _getObjects = async (action: string, input: ApifyObjectsInput, signal?: AbortSignal) => {\n    const { '#token': token, ...context } = parseOrThrow(apifyObjectsInputSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action,\n        componentId: ComponentId.APIFY,\n        configData: { parameters: { '#token': token } },\n      },\n      { signal, validateStatus: apifyValidateStatus },\n    );\n\n    return parseOrThrow(apifyObjectsSchema, data);\n  };\n\n  const getActors = (input: ApifyObjectsInput, signal?: AbortSignal) => {\n    return _getObjects(SyncAction.LIST_ACTORS, input, signal);\n  };\n\n  const getTasks = (input: ApifyObjectsInput, signal?: AbortSignal) => {\n    return _getObjects(SyncAction.LIST_TASKS, input, signal);\n  };\n\n  return { getActors, getTasks };\n};\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\n/** `componentId` is a plain string: every dbt transformation serves the same actions, so it selects nothing. */\nexport const dbtActionInputSchema = syncActionContextSchema.extend({\n  componentId: z.string().min(1, 'Required'),\n  configId: z.string().min(1, 'Required'),\n  artifacts: z.record(z.string(), z.unknown()).optional(),\n});\n\n/**\n * Model file name (`orders.sql`) → compiled SQL, in the component's key order.\n *\n * - A never-run configuration fails with a `SyncActionError`, not an empty payload.\n * - A missing key defaults to empty; a present key of the wrong shape still fails.\n */\nexport const dbtCompiledSchema = z\n  .object({ compiled: z.record(z.string(), z.string()).default({}) })\n  .transform(({ compiled }) => compiled);\n\n/** `\"Thread-1\"` → `1`; an unparseable value falls back to `0` rather than failing the timeline. */\nconst dbtThreadSchema = z\n  .string()\n  .transform((thread) => Number.parseInt(thread.replace(/^Thread-/, ''), 10))\n  .pipe(z.number().int().nonnegative())\n  .catch(0);\n\n/** Omits `status` and `dependsOn`. */\nexport const dbtModelTimingSchema = z.object({\n  id: z.string(),\n  name: z.string(),\n  thread: dbtThreadSchema,\n  /** ISO timestamps, left unparsed. */\n  timeStarted: z.string(),\n  timeCompleted: z.string(),\n});\n\n/** A missing key defaults to empty, as in `dbtCompiledSchema`. */\nexport const dbtRunResultsSchema = z\n  .object({ modelTiming: z.array(dbtModelTimingSchema).default([]) })\n  .transform(({ modelTiming }) => modelTiming);\n\nexport type DbtActionInput = z.infer<typeof dbtActionInputSchema>;\nexport type DbtCompiled = z.infer<typeof dbtCompiledSchema>;\nexport type DbtModelTiming = z.infer<typeof dbtModelTimingSchema>;\n","export type DbtActionConfigDataInput = {\n  configId: string;\n  artifacts?: Record<string, unknown>;\n};\n\n/**\n * Both dbt artifact actions read the *stored* configuration — `configId` is what they resolve it by,\n * so the payload carries no settings of its own. `artifacts` is the configuration's own artifacts\n * section, passed through untouched: it selects which run's artifacts the component picks up, and\n * omitting it leaves the component on its default (the latest run).\n */\nexport const buildDbtActionConfigData = ({ configId, artifacts }: DbtActionConfigDataInput) => ({\n  parameters: { configId },\n  ...(artifacts && { artifacts }),\n});\n","import { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport {\n  type DbtActionInput,\n  dbtActionInputSchema,\n  dbtCompiledSchema,\n  dbtRunResultsSchema,\n} from './schemas';\nimport { buildDbtActionConfigData } from './utils';\n\n/** The dbt transformations' artifact actions — both read what the *last run* left behind. */\nexport const createDbt = (sendSyncAction: SendSyncAction) => {\n  const sendDbtAction = (action: string, input: DbtActionInput, signal?: AbortSignal) => {\n    const { componentId, configId, artifacts, ...context } = parseOrThrow(\n      dbtActionInputSchema,\n      input,\n    );\n\n    return sendSyncAction(\n      {\n        ...context,\n        componentId,\n        action,\n        configData: buildDbtActionConfigData({ configId, artifacts }),\n      },\n      { signal },\n    );\n  };\n\n  /** The compiled SQL of every model in the configuration. */\n  const compile = async (input: DbtActionInput, signal?: AbortSignal) => {\n    const data = await sendDbtAction(SyncAction.DBT_COMPILE, input, signal);\n\n    return parseOrThrow(dbtCompiledSchema, data);\n  };\n\n  /** When each model of the last run started and finished, and on which worker. */\n  const runResults = async (input: DbtActionInput, signal?: AbortSignal) => {\n    const data = await sendDbtAction(SyncAction.DBT_RUN_RESULTS, input, signal);\n\n    return parseOrThrow(dbtRunResultsSchema, data);\n  };\n\n  return { compile, runResults };\n};\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nexport const flowMigrationInputSchema = syncActionContextSchema.extend({\n  orchestrationIds: z.array(z.string().min(1, 'Required')),\n});\n\nexport const flowMigrationValidationResultSchema = z.object({\n  orchestrationId: z.string(),\n  orchestrationName: z.string(),\n  valid: z.boolean(),\n  issues: z.array(z.string()),\n});\n\n/** The orchestration's configuration as the flow it would become; extra keys pass through. */\nconst flowMigrationMigratedConfigurationSchema = z.looseObject({\n  phases: z.array(z.unknown()).optional(),\n  tasks: z.array(z.unknown()).optional(),\n  parameters: z.unknown().optional(),\n});\n\n/**\n * One orchestration's dry-run outcome.\n *\n * - `skipped`: it failed validation; `issues` says why.\n * - `failed`: building the flow threw; `error` carries the message.\n */\nexport const flowMigrationPreviewResultSchema = z.object({\n  orchestrationId: z.string(),\n  orchestrationName: z.string(),\n  status: z.enum(['dry-run', 'skipped', 'failed']),\n  issues: z.array(z.string()),\n  changes: z.array(z.string()),\n  error: z.string().optional(),\n  migratedConfiguration: flowMigrationMigratedConfigurationSchema.optional(),\n});\n\nexport const flowMigrationValidationResultsSchema = z.array(flowMigrationValidationResultSchema);\nexport const flowMigrationPreviewResultsSchema = z.array(flowMigrationPreviewResultSchema);\n\nexport type FlowMigrationInput = z.infer<typeof flowMigrationInputSchema>;\nexport type FlowMigrationValidationResult = z.infer<typeof flowMigrationValidationResultSchema>;\nexport type FlowMigrationPreviewResult = z.infer<typeof flowMigrationPreviewResultSchema>;\n","import { ComponentId } from '../../../constants';\nimport { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport {\n  type FlowMigrationInput,\n  flowMigrationInputSchema,\n  flowMigrationPreviewResultsSchema,\n  flowMigrationValidationResultsSchema,\n} from './schemas';\n\n/** Orchestration → flow migration checks; one result per requested orchestration. */\nexport const createFlowMigration = (sendSyncAction: SendSyncAction) => {\n  const validate = async (input: FlowMigrationInput, signal?: AbortSignal) => {\n    const { orchestrationIds, ...context } = parseOrThrow(flowMigrationInputSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action: SyncAction.FLOW_MIGRATION_VALIDATE,\n        componentId: ComponentId.FLOW_MIGRATION_TOOL,\n        configData: { parameters: { orchestrationIds } },\n      },\n      { signal },\n    );\n\n    return parseOrThrow(flowMigrationValidationResultsSchema, data);\n  };\n\n  /** A dry run: nothing is written, and invalid orchestrations come back `skipped`. */\n  const preview = async (input: FlowMigrationInput, signal?: AbortSignal) => {\n    const { orchestrationIds, ...context } = parseOrThrow(flowMigrationInputSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action: SyncAction.FLOW_MIGRATION_PREVIEW,\n        componentId: ComponentId.FLOW_MIGRATION_TOOL,\n        configData: { parameters: { mode: 'config', orchestrationIds } },\n      },\n      { signal },\n    );\n\n    return parseOrThrow(flowMigrationPreviewResultsSchema, data);\n  };\n\n  return { validate, preview };\n};\n","import { ComponentId } from '../../../constants';\n\n/**\n * Components whose git repository lives under `parameters.dataApp.git.repository` and that answer to\n * the `git-repository` action. They are the only ones serving `data-app-entrypoints`, and the only\n * ones accepting an SSH key.\n */\nexport const DATA_APP_FAMILY = [ComponentId.DATA_APPS, ComponentId.SANDBOXES] as const;\n\n/**\n * Components whose git repository lives under `parameters.git.repo` and that answer to the\n * `gitRepository` action. They authenticate over HTTPS with a username and password only.\n *\n * Deliberately a list rather than \"everything else\": `listBranches` / `list_branches` /\n * `checkBranches` also exist on unrelated third-party components (`kds-team.app-custom-python`,\n * `keboola.app-transformation-migration`, `kds-team.app-sox-migration-checker`) under a different\n * contract. Those stay on the generic `sendSyncAction` escape hatch.\n */\nconst DBT_FAMILY = [\n  ComponentId.DBT_TEST_CORE_KEY_PAIR,\n  ComponentId.DBT_TEST_REMOTE_SNOWFLAKE,\n  ComponentId.DBT_TRANSFORMATION,\n  ComponentId.DBT_TRANSFORMATION_LOCAL_BIGQUERY,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_BIGQUERY,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_MSSQL,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_POSTGRESQL,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_REDSHIFT,\n  ComponentId.DBT_TRANSFORMATION_REMOTE_SNOWFLAKE,\n] as const;\n\nexport const GIT_FAMILY = [...DATA_APP_FAMILY, ...DBT_FAMILY] as const;\n\n/** The ids the git actions accept — anything else has no action name or payload path to resolve. */\nexport type GitComponentId = (typeof GIT_FAMILY)[number];\nexport type DataAppComponentId = (typeof DATA_APP_FAMILY)[number];\n\nconst dataAppIds: ReadonlySet<string> = new Set(DATA_APP_FAMILY);\n\nexport const isDataAppFamily = (componentId: string): componentId is DataAppComponentId =>\n  dataAppIds.has(componentId);\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nimport { DATA_APP_FAMILY, GIT_FAMILY, isDataAppFamily } from './constants';\n\nexport const gitAuthSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('public') }),\n  z.object({\n    type: z.literal('password'),\n    username: z.string().min(1, 'Required'),\n    '#password': z.string().min(1, 'Required'),\n  }),\n  z.object({\n    type: z.literal('sshKey'),\n    /** Ignored by the component: over SSH the user is always `git`. */\n    username: z.string().min(1, 'Required').optional(),\n    '#sshKey': z.string().min(1, 'Required'),\n  }),\n]);\n\nconst gitInputSchema = syncActionContextSchema.extend({\n  repositoryUrl: z.string().min(1, 'Required'),\n  auth: gitAuthSchema.default({ type: 'public' }),\n});\n\n/**\n * **Takes no `branch` — do not add one.** The component clones with `-b <branch>`, so a stale one\n * would fail the branch listing. Zod strips it.\n */\nexport const getBranchesInputSchema = gitInputSchema\n  .extend({ componentId: z.enum(GIT_FAMILY) })\n  .check((ctx) => {\n    const { componentId, auth } = ctx.value;\n\n    // The types can't vary auth by family: dbt clones over HTTPS with a password, no SSH key.\n    if (auth.type !== 'sshKey' || isDataAppFamily(componentId)) return;\n\n    ctx.issues.push({\n      code: 'custom',\n      input: auth,\n      path: ['auth'],\n      message: `Component \"${componentId}\" authenticates with a password, not an SSH key.`,\n    });\n  });\n\n/** Only the data-app family serves `data-app-entrypoints`. */\nexport const getEntrypointsInputSchema = gitInputSchema.extend({\n  componentId: z.enum(DATA_APP_FAMILY),\n  /** The *git* branch (not `branchId`); omit for the repository default. `\"\"` normalises to omitted. */\n  branch: z\n    .string()\n    .optional()\n    .transform((branch) => branch || undefined),\n});\n\n/** Only `branch` is load-bearing; the rest falls back to `''` so one bad field can't fail the list. */\nconst gitBranchSchema = z.object({\n  branch: z.string(),\n  sha: z.string().catch(''),\n  date: z.string().catch(''),\n  comment: z.string().catch(''),\n  author: z\n    .object({\n      name: z.string().catch(''),\n      email: z.string().catch(''),\n    })\n    .catch({ name: '', email: '' }),\n});\n\n/** An array, or an index-keyed object with gaps (a server-filtered PHP array). */\nconst gitBranchListSchema = z\n  .union([z.array(gitBranchSchema), z.record(z.string(), gitBranchSchema)])\n  .transform((branches) => (Array.isArray(branches) ? branches : Object.values(branches)));\n\n/**\n * - `repository.branches` is confirmed; the top-level position is accepted but unverified.\n * - A response with neither list is rejected, not read as no branches.\n */\nexport const gitBranchesSchema = z\n  .object({\n    repository: z.object({ branches: gitBranchListSchema.optional() }).optional(),\n    branches: gitBranchListSchema.optional(),\n  })\n  .check((ctx) => {\n    if (ctx.value.branches ?? ctx.value.repository?.branches) return;\n\n    ctx.issues.push({\n      code: 'custom',\n      input: ctx.value,\n      message: 'The response carried no branch list.',\n    });\n  })\n  .transform(({ repository, branches }) => branches ?? repository?.branches ?? []);\n\nexport const gitEntrypointsSchema = z.object({\n  entrypoints: z.array(z.string()),\n});\n\nexport type GitAuth = z.infer<typeof gitAuthSchema>;\nexport type GetBranchesInput = z.input<typeof getBranchesInputSchema>;\nexport type GetEntrypointsInput = z.input<typeof getEntrypointsInputSchema>;\nexport type GitBranch = z.infer<typeof gitBranchSchema>;\nexport type GitEntrypoints = z.infer<typeof gitEntrypointsSchema>;\n","import type { GitAuth } from './schemas';\n\n/** Every variant is already the shape the components read, minus the discriminator. */\nconst toCredentials = (auth: GitAuth) => {\n  const { type: _type, ...credentials } = auth;\n\n  return credentials;\n};\n\n/**\n * Which revision the component clones.\n *\n * - `default` — no `-b`; branch listing must use it, as a stale pinned branch fails the listing.\n * - `branch` — `git clone -b <branch>`.\n */\ntype GitRevision = { revision: 'default' } | { revision: 'branch'; branch: string };\n\nconst toRevision = (rev: GitRevision) => (rev.revision === 'branch' ? { branch: rev.branch } : {});\n\nexport type GitConfigDataInput = {\n  repositoryUrl: string;\n  auth: GitAuth;\n} & GitRevision;\n\n/** Data apps nest their repository a level deeper, and call the URL `repository`. */\nexport const buildDataAppConfigData = ({ repositoryUrl, auth, ...rev }: GitConfigDataInput) => ({\n  parameters: {\n    dataApp: {\n      git: {\n        repository: repositoryUrl,\n        ...toCredentials(auth),\n        ...toRevision(rev),\n      },\n    },\n  },\n});\n\n/** dbt transformations keep the same settings at the top of `parameters`, under `repo`. */\nexport const buildDbtConfigData = ({ repositoryUrl, auth, ...rev }: GitConfigDataInput) => ({\n  parameters: {\n    git: {\n      repo: repositoryUrl,\n      ...toCredentials(auth),\n      ...toRevision(rev),\n    },\n  },\n});\n","import { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport { isDataAppFamily } from './constants';\nimport {\n  type GetBranchesInput,\n  getBranchesInputSchema,\n  type GetEntrypointsInput,\n  getEntrypointsInputSchema,\n  gitBranchesSchema,\n  gitEntrypointsSchema,\n} from './schemas';\nimport { buildDataAppConfigData, buildDbtConfigData } from './utils';\n\n/**\n * Git repository actions, across both component families that serve them — the data apps\n * (`git-repository`) and the dbt transformations (`gitRepository`). Which action name and which\n * `configData` shape a call uses is resolved from `componentId`; see `./constants`.\n */\nexport const createGit = (sendSyncAction: SendSyncAction) => {\n  const getBranches = async (input: GetBranchesInput, signal?: AbortSignal) => {\n    const { componentId, repositoryUrl, auth, ...context } = parseOrThrow(\n      getBranchesInputSchema,\n      input,\n    );\n    const isDataApp = isDataAppFamily(componentId);\n    const action = isDataApp ? SyncAction.DATA_APP_GIT_REPOSITORY : SyncAction.GIT_REPOSITORY;\n    const buildConfigData = isDataApp ? buildDataAppConfigData : buildDbtConfigData;\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        componentId,\n        action,\n        configData: buildConfigData({ repositoryUrl, auth, revision: 'default' }),\n      },\n      { signal },\n    );\n\n    return parseOrThrow(gitBranchesSchema, data);\n  };\n\n  const getEntrypoints = async (input: GetEntrypointsInput, signal?: AbortSignal) => {\n    const { componentId, repositoryUrl, auth, branch, ...context } = parseOrThrow(\n      getEntrypointsInputSchema,\n      input,\n    );\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        componentId,\n        action: SyncAction.DATA_APP_ENTRYPOINTS,\n        // Data-app only — the input schema rejects every other component, so no family branch here.\n        configData: buildDataAppConfigData({\n          repositoryUrl,\n          auth,\n          ...(branch ? { revision: 'branch', branch } : { revision: 'default' }),\n        }),\n      },\n      { signal },\n    );\n\n    return parseOrThrow(gitEntrypointsSchema, data);\n  };\n\n  return { getBranches, getEntrypoints };\n};\n","import * as z from 'zod';\n\nimport { syncActionContextSchema } from '../schemas';\n\nexport const testLookerCredentialsInputSchema = syncActionContextSchema.extend({\n  credentialsId: z.string().min(1, 'Required'),\n  '#token': z.string().min(1, 'Required'),\n  host: z.string().min(1, 'Required'),\n});\n\n/** The component answers with a status envelope only — there is no payload to model. */\nexport const lookerCredentialsResultSchema = z.object({\n  status: z.string().optional(),\n  message: z.string().optional(),\n});\n\nexport type TestLookerCredentialsInput = z.infer<typeof testLookerCredentialsInputSchema>;\nexport type LookerCredentialsResult = z.infer<typeof lookerCredentialsResultSchema>;\n","import { ComponentId } from '../../../constants';\nimport { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport {\n  lookerCredentialsResultSchema,\n  type TestLookerCredentialsInput,\n  testLookerCredentialsInputSchema,\n} from './schemas';\n\nexport const createLooker = (sendSyncAction: SendSyncAction) => {\n  /** Registers the project's Looker credentials; throws `SyncActionError` when Looker rejects them. */\n  const testCredentials = async (input: TestLookerCredentialsInput, signal?: AbortSignal) => {\n    const {\n      credentialsId,\n      '#token': token,\n      host,\n      ...context\n    } = parseOrThrow(testLookerCredentialsInputSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action: SyncAction.TEST_LOOKER_CREDENTIALS,\n        componentId: ComponentId.WR_LOOKER_V2,\n        configData: { parameters: { looker: { credentialsId, '#token': token, host } } },\n      },\n      { signal },\n    );\n\n    return parseOrThrow(lookerCredentialsResultSchema, data);\n  };\n\n  return { testCredentials };\n};\n","import * as z from 'zod';\n\nexport const sshKeyPairSchema = z.object({\n  status: z.literal('success'),\n  public: z.string(),\n  private: z.string(),\n});\n\nexport type SshKeyPair = z.infer<typeof sshKeyPairSchema>;\n","import { ComponentId } from '../../../constants';\nimport { parseOrThrow } from '../../../errors';\nimport { SyncAction } from '../constants';\nimport { type SyncActionContext, syncActionContextSchema } from '../schemas';\nimport type { SendSyncAction } from '../syncActionsClient';\n\nimport { sshKeyPairSchema } from './schemas';\n\nexport const createSshKeys = (sendSyncAction: SendSyncAction) => {\n  /** Generates a new 4096-bit RSA key pair; the component keeps no copy. */\n  const generate = async (input: SyncActionContext, signal?: AbortSignal) => {\n    const context = parseOrThrow(syncActionContextSchema, input);\n\n    const data = await sendSyncAction(\n      {\n        ...context,\n        action: SyncAction.SSH_KEYS_GENERATE,\n        componentId: ComponentId.SSH_KEYGEN_V2,\n        configData: {},\n      },\n      { signal },\n    );\n\n    return parseOrThrow(sshKeyPairSchema, data);\n  };\n\n  return { generate };\n};\n","import { parseOrThrow } from '../../errors';\nimport type { ValidateStatusFn } from '../../fetchClient';\nimport { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport { syncActionValidateStatus } from './utils/response';\nimport { createApify } from './apify';\nimport { SyncAction } from './constants';\nimport { createDbt } from './dbt';\nimport { createFlowMigration } from './flowMigration';\nimport { createGit } from './git';\nimport { createLooker } from './looker';\nimport { type SyncActionBody, syncActionBodySchema } from './schemas';\nimport { createSshKeys } from './sshKeys';\nimport type { EnrollMFAInput, PostActionsBodyRaw } from './types';\n\nexport type SendSyncActionOptions = {\n  signal?: AbortSignal;\n  /** Replaces `syncActionValidateStatus` for this request; delegate to it for anything else. */\n  validateStatus?: ValidateStatusFn;\n};\n\nconst createSendSyncAction = (client: SyncActionClient) => {\n  return async (body: SyncActionBody, options: SendSyncActionOptions = {}) => {\n    const { data } = await client.post(\n      '/actions',\n      // Generated `configData: Record<string, never>` is unsatisfiable; the schema is the contract.\n      { body: parseOrThrow(syncActionBodySchema, body) as unknown as PostActionsBodyRaw },\n      options,\n    );\n\n    return data;\n  };\n};\n\nexport type SendSyncAction = ReturnType<typeof createSendSyncAction>;\ntype SyncActionClient = ReturnType<typeof createOpenapiFetchClient<paths>>;\n\nexport const createSyncActionsClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n    validateStatus: syncActionValidateStatus,\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const sendSyncAction = createSendSyncAction(client);\n\n  const enrollMFA = ({ email, ...rest }: EnrollMFAInput, signal?: AbortSignal) => {\n    return sendSyncAction(\n      {\n        ...rest,\n        action: SyncAction.ENROLL_MFA,\n        configData: {\n          parameters: {\n            user: {\n              email,\n            },\n          },\n        },\n      },\n      { signal },\n    );\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    sendSyncAction,\n    enrollMFA,\n    apify: createApify(sendSyncAction),\n    dbt: createDbt(sendSyncAction),\n    flowMigration: createFlowMigration(sendSyncAction),\n    git: createGit(sendSyncAction),\n    looker: createLooker(sendSyncAction),\n    sshKeys: createSshKeys(sendSyncAction),\n  };\n};\n"],"mappings":";;;;;;;;;AAYA,MAAM,eAAe,SACnB,OAAO,SAAS,YAAY,SAAS,OAAQ,OAA+B;AAE9E,MAAM,YAAY,UAAoB,OAAO,UAAU,YAAY,QAAQ,QAAQ,KAAA;AACnF,MAAM,YAAY,UAAoB,OAAO,UAAU,WAAW,QAAQ,KAAA;;;;;;;AAQ1E,MAAa,4BAA8C,gBAAgB;CACzE,MAAM,OAAO,YAAY,YAAY,IAAI;CAEzC,IAAI,MAAM,WAAW,SACnB,MAAM,IAAI,gBACR,SAAS,KAAK,OAAO,KAAK,SAAS,KAAK,KAAK,KAAK,YAAY,SAAS,YACvE;EACE,aAAa,SAAS,KAAK,WAAW;EACtC,MAAM,SAAS,KAAK,IAAI;EACxB,MAAM,YAAY;CACpB,CACF;CAGF,OAAO,sBAAsB,WAAW;AAC1C;;;ACvCA,MAAa,aAAa;CACxB,yBAAyB;CACzB,sBAAsB;CACtB,aAAa;CACb,iBAAiB;CACjB,gBAAgB;CAChB,YAAY;CACZ,wBAAwB;CACxB,yBAAyB;CACzB,aAAa;CACb,YAAY;CACZ,yBAAyB;CACzB,mBAAmB;AACrB;;;;ACVA,MAAa,0BAA0BA,IAAE,OAAO;;CAE9C,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;;CAEtC,KAAKA,IAAE,OAAO,CAAC,CAAC,SAAS;CACzB,MAAMA,IAAE,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;;AAGD,MAAa,uBAAuB,wBAAwB,OAAO;CACjE,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACzC,QAAQA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACpC,YAAYA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC;AAC9C,CAAC;;;ACZD,MAAa,0BAA0B,wBAAwB,OAAO,EACpE,UAAUC,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,EACxC,CAAC;AAED,MAAa,qBAAqBA,IAAE,MAClCA,IAAE,OAAO;CACP,IAAIA,IAAE,OAAO;CACb,MAAMA,IAAE,OAAO;AACjB,CAAC,CACH;;;;;;;;ACJA,MAAa,uBAAyC,gBAAgB;CACpE,MAAM,OAAO,YAAY;CAEzB,IAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,aAAa,QAAQ,KAAK,SACzE,MAAM,IAAI,gBAAgB,4CAA4C,EAAE,KAAK,CAAC;CAEhF,OAAO,yBAAyB,WAAW;AAC7C;;;ACRA,MAAa,eAAe,mBAAmC;CAC7D,MAAM,cAAc,OAAO,QAAgB,OAA0B,WAAyB;EAC5F,MAAM,EAAE,UAAU,OAAO,GAAG,YAAY,aAAa,yBAAyB,KAAK;EAEnF,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH;GACA,aAAa,YAAY;GACzB,YAAY,EAAE,YAAY,EAAE,UAAU,MAAM,EAAE;EAChD,GACA;GAAE;GAAQ,gBAAgB;EAAoB,CAChD;EAEA,OAAO,aAAa,oBAAoB,IAAI;CAC9C;CAEA,MAAM,aAAa,OAA0B,WAAyB;EACpE,OAAO,YAAY,WAAW,aAAa,OAAO,MAAM;CAC1D;CAEA,MAAM,YAAY,OAA0B,WAAyB;EACnE,OAAO,YAAY,WAAW,YAAY,OAAO,MAAM;CACzD;CAEA,OAAO;EAAE;EAAW;CAAS;AAC/B;;;;AC7BA,MAAa,uBAAuB,wBAAwB,OAAO;CACjE,aAAaC,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACzC,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACtC,WAAWA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;AACxD,CAAC;;;;;;;AAQD,MAAa,oBAAoBA,IAC9B,OAAO,EAAE,UAAUA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAClE,WAAW,EAAE,eAAe,QAAQ;;AAGvC,MAAM,kBAAkBA,IACrB,OAAO,CAAC,CACR,WAAW,WAAW,OAAO,SAAS,OAAO,QAAQ,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAC1E,KAAKA,IAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CACpC,MAAM,CAAC;;AAGV,MAAa,uBAAuBA,IAAE,OAAO;CAC3C,IAAIA,IAAE,OAAO;CACb,MAAMA,IAAE,OAAO;CACf,QAAQ;;CAER,aAAaA,IAAE,OAAO;CACtB,eAAeA,IAAE,OAAO;AAC1B,CAAC;;AAGD,MAAa,sBAAsBA,IAChC,OAAO,EAAE,aAAaA,IAAE,MAAM,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAClE,WAAW,EAAE,kBAAkB,WAAW;;;;;;;;;AC9B7C,MAAa,4BAA4B,EAAE,UAAU,iBAA2C;CAC9F,YAAY,EAAE,SAAS;CACvB,GAAI,aAAa,EAAE,UAAU;AAC/B;;;;ACDA,MAAa,aAAa,mBAAmC;CAC3D,MAAM,iBAAiB,QAAgB,OAAuB,WAAyB;EACrF,MAAM,EAAE,aAAa,UAAU,WAAW,GAAG,YAAY,aACvD,sBACA,KACF;EAEA,OAAO,eACL;GACE,GAAG;GACH;GACA;GACA,YAAY,yBAAyB;IAAE;IAAU;GAAU,CAAC;EAC9D,GACA,EAAE,OAAO,CACX;CACF;;CAGA,MAAM,UAAU,OAAO,OAAuB,WAAyB;EACrE,MAAM,OAAO,MAAM,cAAc,WAAW,aAAa,OAAO,MAAM;EAEtE,OAAO,aAAa,mBAAmB,IAAI;CAC7C;;CAGA,MAAM,aAAa,OAAO,OAAuB,WAAyB;EACxE,MAAM,OAAO,MAAM,cAAc,WAAW,iBAAiB,OAAO,MAAM;EAE1E,OAAO,aAAa,qBAAqB,IAAI;CAC/C;CAEA,OAAO;EAAE;EAAS;CAAW;AAC/B;;;AC1CA,MAAa,2BAA2B,wBAAwB,OAAO,EACrE,kBAAkBC,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,EACzD,CAAC;AAED,MAAa,sCAAsCA,IAAE,OAAO;CAC1D,iBAAiBA,IAAE,OAAO;CAC1B,mBAAmBA,IAAE,OAAO;CAC5B,OAAOA,IAAE,QAAQ;CACjB,QAAQA,IAAE,MAAMA,IAAE,OAAO,CAAC;AAC5B,CAAC;;AAGD,MAAM,2CAA2CA,IAAE,YAAY;CAC7D,QAAQA,IAAE,MAAMA,IAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;CACtC,OAAOA,IAAE,MAAMA,IAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;CACrC,YAAYA,IAAE,QAAQ,CAAC,CAAC,SAAS;AACnC,CAAC;;;;;;;AAQD,MAAa,mCAAmCA,IAAE,OAAO;CACvD,iBAAiBA,IAAE,OAAO;CAC1B,mBAAmBA,IAAE,OAAO;CAC5B,QAAQA,IAAE,KAAK;EAAC;EAAW;EAAW;CAAQ,CAAC;CAC/C,QAAQA,IAAE,MAAMA,IAAE,OAAO,CAAC;CAC1B,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC;CAC3B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,uBAAuB,yCAAyC,SAAS;AAC3E,CAAC;AAED,MAAa,uCAAuCA,IAAE,MAAM,mCAAmC;AAC/F,MAAa,oCAAoCA,IAAE,MAAM,gCAAgC;;;;AC1BzF,MAAa,uBAAuB,mBAAmC;CACrE,MAAM,WAAW,OAAO,OAA2B,WAAyB;EAC1E,MAAM,EAAE,kBAAkB,GAAG,YAAY,aAAa,0BAA0B,KAAK;EAErF,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH,QAAQ,WAAW;GACnB,aAAa,YAAY;GACzB,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE;EACjD,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,sCAAsC,IAAI;CAChE;;CAGA,MAAM,UAAU,OAAO,OAA2B,WAAyB;EACzE,MAAM,EAAE,kBAAkB,GAAG,YAAY,aAAa,0BAA0B,KAAK;EAErF,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH,QAAQ,WAAW;GACnB,aAAa,YAAY;GACzB,YAAY,EAAE,YAAY;IAAE,MAAM;IAAU;GAAiB,EAAE;EACjE,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,mCAAmC,IAAI;CAC7D;CAEA,OAAO;EAAE;EAAU;CAAQ;AAC7B;;;;;;;;ACzCA,MAAa,kBAAkB,CAAC,YAAY,WAAW,YAAY,SAAS;;;;;;;;;;AAW5E,MAAM,aAAa;CACjB,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;AACd;AAEA,MAAa,aAAa,CAAC,GAAG,iBAAiB,GAAG,UAAU;AAM5D,MAAM,aAAkC,IAAI,IAAI,eAAe;AAE/D,MAAa,mBAAmB,gBAC9B,WAAW,IAAI,WAAW;;;ACjC5B,MAAa,gBAAgBC,IAAE,mBAAmB,QAAQ;CACxDA,IAAE,OAAO,EAAE,MAAMA,IAAE,QAAQ,QAAQ,EAAE,CAAC;CACtCA,IAAE,OAAO;EACP,MAAMA,IAAE,QAAQ,UAAU;EAC1B,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;EACtC,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC3C,CAAC;CACDA,IAAE,OAAO;EACP,MAAMA,IAAE,QAAQ,QAAQ;;EAExB,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC,SAAS;EACjD,WAAWA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACzC,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,wBAAwB,OAAO;CACpD,eAAeA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC3C,MAAM,cAAc,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChD,CAAC;;;;;AAMD,MAAa,yBAAyB,eACnC,OAAO,EAAE,aAAaA,IAAE,KAAK,UAAU,EAAE,CAAC,CAAC,CAC3C,OAAO,QAAQ;CACd,MAAM,EAAE,aAAa,SAAS,IAAI;CAGlC,IAAI,KAAK,SAAS,YAAY,gBAAgB,WAAW,GAAG;CAE5D,IAAI,OAAO,KAAK;EACd,MAAM;EACN,OAAO;EACP,MAAM,CAAC,MAAM;EACb,SAAS,cAAc,YAAY;CACrC,CAAC;AACH,CAAC;;AAGH,MAAa,4BAA4B,eAAe,OAAO;CAC7D,aAAaA,IAAE,KAAK,eAAe;;CAEnC,QAAQA,IACL,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,WAAW,UAAU,KAAA,CAAS;AAC9C,CAAC;;AAGD,MAAM,kBAAkBA,IAAE,OAAO;CAC/B,QAAQA,IAAE,OAAO;CACjB,KAAKA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CACxB,MAAMA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CACzB,SAASA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CAC5B,QAAQA,IACL,OAAO;EACN,MAAMA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;EACzB,OAAOA,IAAE,OAAO,CAAC,CAAC,MAAM,EAAE;CAC5B,CAAC,CAAC,CACD,MAAM;EAAE,MAAM;EAAI,OAAO;CAAG,CAAC;AAClC,CAAC;;AAGD,MAAM,sBAAsBA,IACzB,MAAM,CAACA,IAAE,MAAM,eAAe,GAAGA,IAAE,OAAOA,IAAE,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CACxE,WAAW,aAAc,MAAM,QAAQ,QAAQ,IAAI,WAAW,OAAO,OAAO,QAAQ,CAAE;;;;;AAMzF,MAAa,oBAAoBA,IAC9B,OAAO;CACN,YAAYA,IAAE,OAAO,EAAE,UAAU,oBAAoB,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;CAC5E,UAAU,oBAAoB,SAAS;AACzC,CAAC,CAAC,CACD,OAAO,QAAQ;CACd,IAAI,IAAI,MAAM,YAAY,IAAI,MAAM,YAAY,UAAU;CAE1D,IAAI,OAAO,KAAK;EACd,MAAM;EACN,OAAO,IAAI;EACX,SAAS;CACX,CAAC;AACH,CAAC,CAAC,CACD,WAAW,EAAE,YAAY,eAAe,YAAY,YAAY,YAAY,CAAC,CAAC;AAEjF,MAAa,uBAAuBA,IAAE,OAAO,EAC3C,aAAaA,IAAE,MAAMA,IAAE,OAAO,CAAC,EACjC,CAAC;;;;AC9FD,MAAM,iBAAiB,SAAkB;CACvC,MAAM,EAAE,MAAM,OAAO,GAAG,gBAAgB;CAExC,OAAO;AACT;AAUA,MAAM,cAAc,QAAsB,IAAI,aAAa,WAAW,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;;AAQhG,MAAa,0BAA0B,EAAE,eAAe,MAAM,GAAG,WAA+B,EAC9F,YAAY,EACV,SAAS,EACP,KAAK;CACH,YAAY;CACZ,GAAG,cAAc,IAAI;CACrB,GAAG,WAAW,GAAG;AACnB,EACF,EACF,EACF;;AAGA,MAAa,sBAAsB,EAAE,eAAe,MAAM,GAAG,WAA+B,EAC1F,YAAY,EACV,KAAK;CACH,MAAM;CACN,GAAG,cAAc,IAAI;CACrB,GAAG,WAAW,GAAG;AACnB,EACF,EACF;;;;;;;;AC1BA,MAAa,aAAa,mBAAmC;CAC3D,MAAM,cAAc,OAAO,OAAyB,WAAyB;EAC3E,MAAM,EAAE,aAAa,eAAe,MAAM,GAAG,YAAY,aACvD,wBACA,KACF;EACA,MAAM,YAAY,gBAAgB,WAAW;EAC7C,MAAM,SAAS,YAAY,WAAW,0BAA0B,WAAW;EAC3E,MAAM,kBAAkB,YAAY,yBAAyB;EAE7D,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH;GACA;GACA,YAAY,gBAAgB;IAAE;IAAe;IAAM,UAAU;GAAU,CAAC;EAC1E,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,mBAAmB,IAAI;CAC7C;CAEA,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,aAAa,eAAe,MAAM,QAAQ,GAAG,YAAY,aAC/D,2BACA,KACF;EAEA,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH;GACA,QAAQ,WAAW;GAEnB,YAAY,uBAAuB;IACjC;IACA;IACA,GAAI,SAAS;KAAE,UAAU;KAAU;IAAO,IAAI,EAAE,UAAU,UAAU;GACtE,CAAC;EACH,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,sBAAsB,IAAI;CAChD;CAEA,OAAO;EAAE;EAAa;CAAe;AACvC;;;AChEA,MAAa,mCAAmC,wBAAwB,OAAO;CAC7E,eAAeC,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC3C,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACtC,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACpC,CAAC;;AAGD,MAAa,gCAAgCA,IAAE,OAAO;CACpD,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;;;ACHD,MAAa,gBAAgB,mBAAmC;;CAE9D,MAAM,kBAAkB,OAAO,OAAmC,WAAyB;EACzF,MAAM,EACJ,eACA,UAAU,OACV,MACA,GAAG,YACD,aAAa,kCAAkC,KAAK;EAExD,MAAM,OAAO,MAAM,eACjB;GACE,GAAG;GACH,QAAQ,WAAW;GACnB,aAAa,YAAY;GACzB,YAAY,EAAE,YAAY,EAAE,QAAQ;IAAE;IAAe,UAAU;IAAO;GAAK,EAAE,EAAE;EACjF,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,+BAA+B,IAAI;CACzD;CAEA,OAAO,EAAE,gBAAgB;AAC3B;;;ACjCA,MAAa,mBAAmBC,IAAE,OAAO;CACvC,QAAQA,IAAE,QAAQ,SAAS;CAC3B,QAAQA,IAAE,OAAO;CACjB,SAASA,IAAE,OAAO;AACpB,CAAC;;;ACED,MAAa,iBAAiB,mBAAmC;;CAE/D,MAAM,WAAW,OAAO,OAA0B,WAAyB;EAGzE,MAAM,OAAO,MAAM,eACjB;GACE,GAJY,aAAa,yBAAyB,KAIzC;GACT,QAAQ,WAAW;GACnB,aAAa,YAAY;GACzB,YAAY,CAAC;EACf,GACA,EAAE,OAAO,CACX;EAEA,OAAO,aAAa,kBAAkB,IAAI;CAC5C;CAEA,OAAO,EAAE,SAAS;AACpB;;;ACHA,MAAM,wBAAwB,WAA6B;CACzD,OAAO,OAAO,MAAsB,UAAiC,CAAC,MAAM;EAC1E,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,YAEA,EAAE,MAAM,aAAa,sBAAsB,IAAI,EAAmC,GAClF,OACF;EAEA,OAAO;CACT;AACF;AAKA,MAAa,2BAA2B,EAAE,SAAS,aAAa,WAA8B;CAC5F,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;EAC/B,gBAAgB;CAClB,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,qBAAqB,MAAM;CAElD,MAAM,aAAa,EAAE,OAAO,GAAG,QAAwB,WAAyB;EAC9E,OAAO,eACL;GACE,GAAG;GACH,QAAQ,WAAW;GACnB,YAAY,EACV,YAAY,EACV,MAAM,EACJ,MACF,EACF,EACF;EACF,GACA,EAAE,OAAO,CACX;CACF;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA,OAAO,YAAY,cAAc;EACjC,KAAK,UAAU,cAAc;EAC7B,eAAe,oBAAoB,cAAc;EACjD,KAAK,UAAU,cAAc;EAC7B,QAAQ,aAAa,cAAc;EACnC,SAAS,cAAc,cAAc;CACvC;AACF"}