@keboola/api-client 42.0.0 → 44.0.0

package/dist/{types-q-1r_9d1.d.ts → types-DzV6LaZq.d.ts}

@@ -1116,7 +1116,29 @@ type paths = {
     put?: never;
     /**
      * Create app
-     * @description Create a new app under the vendor. After creation, the app id is prefixed by the vendor id (e.g. `keboola.ex-adwords`).
+     * @description Create a new app under the vendor. After creation, the app id is
+     *     prefixed by the vendor id (e.g. `keboola.ex-adwords`).
+     *
+     *     The body is open on purpose: alongside the properties below it takes every
+     *     other writable app field — the same set `PATCH /vendors/{vendor}/apps/{app}`
+     *     takes, with `id` additionally required — so an app can be registered fully
+     *     configured in one request. The properties below are the ones a registration
+     *     typically sets, not the limit.
+     *
+     *     Two things the open schema cannot express:
+     *
+     *     - These keys are **rejected with `422`**, not merely ignored — sending one
+     *       fails the whole request. Set by the service itself: `version`,
+     *       `isPublished`, `createdOn`, `createdBy`, `updatedOn`, `updatedBy`,
+     *       `icon32`, `icon64`, `icon128`, `publishRequestOn`, `publishRequestBy`,
+     *       `publishRequestRejectionReason`. Reserved to an admin, over
+     *       `PATCH /admin/apps/{id}`: `vendor`, `isPublic`, `legacyUri`,
+     *       `repository.digest`, `category`, `categories`, `complexity`, `features`,
+     *       `forwardToken`, `forwardTokenDetails`, `injectEnvironment`,
+     *       `processTimeout`, `requiredMemory`.
+     *
+     *     - Any other unrecognised key is **accepted and then dropped** — validation
+     *       lets it through, the insert filters it out, so it is never stored.
      */
     post: {
       parameters: {
@@ -1133,7 +1155,16 @@ type paths = {
            * @example {
            *       "id": "ex-adwords",
            *       "name": "AdWords Reports",
-           *       "shortDescription": "Reads reports defined by awql queries"
+           *       "type": "extractor",
+           *       "shortDescription": "Reads reports defined by awql queries",
+           *       "uiOptions": [
+           *         "genericDockerUI"
+           *       ],
+           *       "defaultBucket": true,
+           *       "defaultBucketStage": "in",
+           *       "repository": {
+           *         "type": "ecr"
+           *       }
            *     }
            */
           'application/json': {
@@ -1144,6 +1175,13 @@ type paths = {
             type: 'extractor' | 'application' | 'writer' | 'processor' | 'code-pattern' | 'other' | 'transformation' | 'data-app';
             shortDescription?: string;
             longDescription?: string;
+            /** @description Null clears the list, and reads back as `[]`. */
+            uiOptions?: string[] | null;
+            /** @description Null clears the list, and reads back as `[]`. */
+            actions?: string[] | null;
+            defaultBucket?: boolean;
+            /** @enum {string} */
+            defaultBucketStage?: 'in' | 'out';
             repository?: {
               /** @enum {string} */
               type?: 'dockerhub' | 'quay' | 'builder' | 'ecr';
@@ -1152,6 +1190,8 @@ type paths = {
             } & {
               [key: string]: unknown;
             };
+          } & {
+            [key: string]: unknown;
           };
         };
       };
@@ -2283,13 +2323,25 @@ type paths = {
           };
           content: {
             'application/json': ({
-              id?: string;
+              /** @description The app id the change belongs to. */
+              id: string;
               /** Format: date-time */
-              createdOn?: string;
-              createdBy?: string;
-              changes?: {
+              createdOn: string;
+              /** @description Who made the change. Null for a version stored without an author. */
+              createdBy: string | null;
+              /** @description One entry per attribute that differs from the previous version. Empty for a write that changed nothing — a save with no edits still produces a version. */
+              changes: ({
+                /** @description The `App` property that changed. */
+                attribute: string;
+                /** @description The value in the previous version, of whatever type that property has. Null when the attribute was added. */
+                oldValue: unknown;
+                /** @description The value in this version. Null when the attribute was deleted. */
+                newValue: unknown;
+                /** @description A ready-to-render sentence — `Attribute <name> added/changed/deleted`, or `App <id> created` for the synthetic first-version entry. */
+                description: string;
+              } & {
                 [key: string]: unknown;
-              }[];
+              })[];
             } & {
               [key: string]: unknown;
             })[];
@@ -2832,4 +2884,4 @@ type RefreshTokensResult = OpenapiReturnType<paths['/auth/token']['get']>;
 type MfaSetupResult = OpenapiReturnType<paths['/auth/mfa']['post']>;
 //#endregion
 export { ResetPasswordConfirmInput as A, UserRequest as B, MfaConfirmInput as C, Profile as D, PaginationQuery as E, UpdateAppAsAdminInput as F, paths as G, VendorListItem as H, UpdateAppInput as I, UpdateVendorAsAdminInput as L, ServiceIndex as M, SignUpInput as N, RefreshTokensResult as O, Stack as P, UpdateVendorInput as R, LoginSuccess as S, MfaSetupResult as T, Version as U, Vendor as V, components as W, GetVendorUsersQuery as _, AppRepository as a, LoginInput as b, ConfirmAccountInput as c, CreateVendorAsAdminInput as d, CreateVendorInput as f, GetChangesQuery as g, GetAppsQuery as h, AppChange as i, ServiceAccount as j, RejectAppInput as k, CreateAppInput as l, DeveloperPortalError as m, AdminVendor as n, AppVendor as o, DeprecateAppInput as p, App as r, ApproveVendorInput as s, AdminPaginationQuery as t, CreateServiceAccountInput as u, IconUploadLink as v, MfaSetupInput as w, LoginResult as x, LoginChallenge as y, User as z };
-//# sourceMappingURL=types-q-1r_9d1.d.ts.map
+//# sourceMappingURL=types-DzV6LaZq.d.ts.map

package/dist/{types-DIiOMV-t.d.ts → types-Fs4a3mVs.d.ts}

@@ -47,6 +47,28 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/.well-known/jwks.json': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    /**
+     * App preview link signing keys
+     * @description Public keys (JWKS, RFC 7517) that verify app preview link tokens. Lists every configured
+     *     key, active and inactive. Returns an empty set when preview links are not configured.
+     *     No authentication required.
+     */
+    get: operations['getJwks'];
+    put?: never;
+    post?: never;
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/git/repository': {
     parameters: {
       query?: never;
@@ -201,6 +223,28 @@ type paths = {
     patch?: never;
     trace?: never;
   };
+  '/apps/{appId}/preview-link': {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    get?: never;
+    put?: never;
+    /**
+     * Create an app preview link
+     * @description Mints a short-lived link that opens a dev-mode app in a browser without the app's own
+     *     authentication. The token is in the URL fragment and is valid for 60 seconds; opening the
+     *     link starts a preview session on the app host. Only apps in `dev` mode are supported.
+     */
+    post: operations['createAppPreviewLink'];
+    delete?: never;
+    options?: never;
+    head?: never;
+    patch?: never;
+    trace?: never;
+  };
   '/apps/{appId}/git-repo': {
     parameters: {
       query?: never;
@@ -752,8 +796,12 @@ type components = {
       startupLogs?: string | null;
       /** @description Runtime size used for this app run (e.g., small, medium, large) */
       runtimeSize?: string | null;
+      /** @description Backend type the app run executed on */
+      runtimeBackendType?: string | null;
       /** @description Configuration version used for this app run */
       configVersion?: string | null;
+      /** @description Version of the image the app run executed */
+      imageVersion?: string | null;
       /** @description User-facing cause of a failed run. Set only when state is "failed". */
       failureReason?: {
         /** @description Short, stable, machine-readable identifier (UI i18n key) */
@@ -832,6 +880,59 @@ interface operations {
       };
     };
   };
+  getJwks: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path?: never;
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description JSON Web Key Set */
+      200: {
+        headers: {
+          /** @example max-age=300, public */
+          'Cache-Control'?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          /**
+           * @example {
+           *       "keys": [
+           *         {
+           *           "kty": "EC",
+           *           "crv": "P-256",
+           *           "use": "sig",
+           *           "alg": "ES256",
+           *           "kid": "2026-09",
+           *           "x": "f83OJ3D2xF1Bg8vub9tLe1gHMzV76e8Tus9uPHvRVEU",
+           *           "y": "x_FEzRu9m36HLN_tue659LNpXW6pCyStikYjKIWI5a0"
+           *         }
+           *       ]
+           *     }
+           */
+          'application/json': {
+            keys: {
+              /** @enum {string} */
+              kty: 'EC';
+              /** @enum {string} */
+              crv: 'P-256';
+              /** @enum {string} */
+              use: 'sig';
+              /** @enum {string} */
+              alg: 'ES256';
+              kid: string;
+              /** @description base64url P-256 x coordinate */
+              x: string;
+              /** @description base64url P-256 y coordinate */
+              y: string;
+            }[];
+          };
+        };
+      };
+    };
+  };
   gitRepository: {
     parameters: {
       query?: never;
@@ -1396,6 +1497,82 @@ interface operations {
       };
     };
   };
+  createAppPreviewLink: {
+    parameters: {
+      query?: never;
+      header?: never;
+      path: {
+        appId: string;
+      };
+      cookie?: never;
+    };
+    requestBody?: never;
+    responses: {
+      /** @description OK */
+      200: {
+        headers: {
+          /** @example no-store, private */
+          'Cache-Control'?: string;
+          [name: string]: unknown;
+        };
+        content: {
+          /**
+           * @example {
+           *       "url": "https://my-app-123.hub.keboola.com/_proxy/preview#t=eyJhbGciOiJFUzI1NiIs...",
+           *       "linkExpiresAt": "2026-09-27T10:01:00+00:00"
+           *     }
+           */
+          'application/json': {
+            /**
+             * Format: url
+             * @description App origin + `/_proxy/preview#t=<token>`.
+             */
+            url: string;
+            /** Format: date-time */
+            linkExpiresAt: string;
+          };
+        };
+      };
+      /**
+       * @description Token of another project (400 today; 403 in a future release), app not in dev mode (`App "<id>" is not in dev mode.`),
+       *     or app without a public URL (`App "<id>" has no URL yet.`).
+       */
+      400: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Unauthorized */
+      401: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Reserved for a future release; a token of another project returns 400 today. */
+      403: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Not Found */
+      404: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+      /** @description Preview links are not configured on this stack (`App preview links are not configured.`). */
+      503: {
+        headers: {
+          [name: string]: unknown;
+        };
+        content?: never;
+      };
+    };
+  };
   getAppGitRepo: {
     parameters: {
       query?: never;
@@ -1832,8 +2009,11 @@ interface operations {
     requestBody: {
       content: {
         'application/json': {
-          /** @description Keboola component ID (e.g. keboola.sandboxes) */
-          componentId: string;
+          /**
+           * @description Keboola component ID. The `streamlit` and `python-js` types require `keboola.data-apps`. Any other combination is rejected with 422.
+           * @enum {string}
+           */
+          componentId: 'keboola.sandboxes' | 'keboola.data-apps';
           /** @description Keboola configuration ID */
           configurationId: string;
           /** @description Configuration version to use. If omitted, the latest version is resolved automatically. */
@@ -1888,7 +2068,7 @@ interface operations {
         };
         content?: never;
       };
-      /** @description Unprocessable Entity */
+      /** @description Unprocessable Entity. Returned also when the componentId is not `keboola.sandboxes` or `keboola.data-apps`, or when a `streamlit` or `python-js` sandbox is requested with a componentId other than `keboola.data-apps`. */
       422: {
         headers: {
           [name: string]: unknown;
@@ -2133,6 +2313,8 @@ type GetDataAppPath = OpenapiPathType<paths['/apps/{appId}']['get']>;
 type DeleteDataAppPath = OpenapiPathType<paths['/apps/{appId}']['delete']>;
 type GetDataAppPasswordPath = OpenapiPathType<paths['/apps/{appId}/password']['get']>;
 type ResetDataAppPasswordPath = OpenapiPathType<paths['/apps/{appId}/reset-password']['post']>;
+type CreateDataAppPreviewLinkPath = OpenapiPathType<paths['/apps/{appId}/preview-link']['post']>;
+type DataAppPreviewLink = OpenapiReturnType<paths['/apps/{appId}/preview-link']['post']>;
 type GetDataAppRunsPath = OpenapiPathType<paths['/apps/{appId}/runs']['get']>;
 type GetDataAppRunsQuery = OpenapiQueryType<paths['/apps/{appId}/runs']['get']>;
 type GetDataAppRunPath = OpenapiPathType<paths['/apps/{appId}/runs/{runId}']['get']>;
@@ -2158,5 +2340,5 @@ type PatchDataAppBodyStopped = {
 };
 type PatchDataAppBody = PatchDataAppBodyRunning | PatchDataAppBodyStopped;
 //#endregion
-export { Sandbox as S, PatchDataAppPath as _, DeleteSandboxPath as a, Runtime as b, GetDataAppLogsTailPath as c, GetDataAppPath as d, GetDataAppRunPath as f, PatchDataAppBody as g, GetSandboxPath as h, DeleteDataAppPath as i, GetDataAppLogsTailQuery as l, GetDataAppRunsQuery as m, DataApp as n, GetAppsQuery as o, GetDataAppRunsPath as p, DataAppRun as r, GetDataAppLogsDownloadPath as s, CreateDataAppBody as t, GetDataAppPasswordPath as u, RawAppRun as v, RuntimeImageKey as x, ResetDataAppPasswordPath as y };
-//# sourceMappingURL=types-DIiOMV-t.d.ts.map
+export { RuntimeImageKey as C, Runtime as S, GetSandboxPath as _, DataAppRun as a, RawAppRun as b, GetAppsQuery as c, GetDataAppLogsTailQuery as d, GetDataAppPasswordPath as f, GetDataAppRunsQuery as g, GetDataAppRunsPath as h, DataAppPreviewLink as i, GetDataAppLogsDownloadPath as l, GetDataAppRunPath as m, CreateDataAppPreviewLinkPath as n, DeleteDataAppPath as o, GetDataAppPath as p, DataApp as r, DeleteSandboxPath as s, CreateDataAppBody as t, GetDataAppLogsTailPath as u, PatchDataAppBody as v, Sandbox as w, ResetDataAppPasswordPath as x, PatchDataAppPath as y };
+//# sourceMappingURL=types-Fs4a3mVs.d.ts.map

package/dist/{types-6kuMW4JW.d.cts → types-c_bsDkV6.d.cts}

@@ -389,7 +389,7 @@ type components = {
   headers: never;
   pathItems: never;
 };
-type operations = {
+interface operations {
   _get_root_get: {
     parameters: {
       query?: never;
@@ -558,7 +558,7 @@ type operations = {
       };
     };
   };
-};
+}
 //#endregion
 //#region src/clients/omnisearch/types.d.ts
 type GetProjectsLineageQuery = OpenapiQueryType<paths['/v1/lineage/projects']['get']>;
@@ -599,4 +599,4 @@ type LineageTable = components['schemas']['TableNode'] & {
 };
 //#endregion
 export { LineageMetadata as a, LineageTable as c, ProjectsLineageResponse as d, TableLineageRelation as f, components as h, LineageConfiguration as i, ProjectLineageRelation as l, TablesLineageResponse as m, GetTablesLineageQuery as n, LineageProject as o, TablesLineage as p, LineageBucket as r, LineageSource as s, GetProjectsLineageQuery as t, ProjectsLineage as u };
-//# sourceMappingURL=types-6kuMW4JW.d.cts.map
+//# sourceMappingURL=types-c_bsDkV6.d.cts.map

package/dist/{types-DgJeO9Nd.d.ts → types-gcAb6olM.d.ts}

@@ -199,6 +199,28 @@ type components = {
       status: 'error';
       context?: Record<string, never>;
     };
+    /** @description Returned when a request payload fails validation. The top-level `error` stays a short human-readable string; `context` lists every failing field exactly once. */
+    ValidationError: {
+      /** @example Request contents is not valid */
+      error: string;
+      /** @example 422 */
+      code: number;
+      exceptionId: string;
+      /** @enum {unknown} */
+      status: 'error';
+      /** @description One entry per payload field that failed mapping or validation, keyed by index ("0", "1", …). Each failing field appears exactly once. */
+      context: {
+        [key: string]: {
+          /**
+           * @description Name of the payload field that failed, as sent by the client — encrypted fields are reported under their `#`-prefixed key (e.g. `#data`).
+           * @example authorizedFor
+           */
+          path: string;
+          /** @example Value '' is not a valid non-empty string. */
+          message: string;
+        };
+      };
+    };
     Consumer: {
       componentId: string;
       friendlyName: string;
@@ -237,13 +259,13 @@ type components = {
         'application/json': components['schemas']['Error'];
       };
     };
-    /** @description Unprocessable entity */
+    /** @description Validation failed - see `context` for the list of failing fields */
     '422_UnprocessableEntity': {
       headers: {
         [name: string]: unknown;
       };
       content: {
-        'application/json': components['schemas']['Error'];
+        'application/json': components['schemas']['ValidationError'];
       };
     };
     /** @description Unauthorized */
@@ -385,6 +407,7 @@ interface operations {
           'application/json': components['schemas']['Credentials'][];
         };
       };
+      400: components['responses']['400_BadRequest'];
       401: components['responses']['401_Unauthorized'];
       403: components['responses']['403_Forbidden'];
     };
@@ -723,4 +746,4 @@ type CreateCredentialInput = ComponentPath & Omit<CreateCredentialBody, '#data'>
 };
 //#endregion
 export { CredentialInput as a, Credential as i, CreateCredentialBody as n, CredentialPath as o, CreateCredentialInput as r, GetCredentialsInput as s, ComponentPath as t };
-//# sourceMappingURL=types-DgJeO9Nd.d.ts.map
+//# sourceMappingURL=types-gcAb6olM.d.ts.map

package/dist/{validateConnectionStatus-gFsBi5FV.js → validateConnectionStatus-CdTV3gsP.js}

@@ -1,5 +1,5 @@
-import { c as defaultValidateStatus, g as ApiError } from "./createFetchClient-cgWkwgAQ.js";
-import { t as isLoginPageRedirect } from "./isLoginPageRedirect-CsjF95_P.js";
+import { c as defaultValidateStatus, p as ApiError } from "./createFetchClient-DITkTV2k.js";
+import { t as isLoginPageRedirect } from "./isLoginPageRedirect-CsyRa3_v.js";
 //#region src/errors/HtmlResponseError.ts
 /**
 * A successful response that carried an HTML page instead of the endpoint's payload.
@@ -33,4 +33,4 @@ const validateConnectionStatus = (apiResponse) => {
 //#endregion
 export { HtmlResponseError as n, isHtmlResponseError as r, validateConnectionStatus as t };
 
-//# sourceMappingURL=validateConnectionStatus-gFsBi5FV.js.map
+//# sourceMappingURL=validateConnectionStatus-CdTV3gsP.js.map

package/dist/{validateConnectionStatus-gFsBi5FV.js.map → validateConnectionStatus-CdTV3gsP.js.map}

@@ -1 +1 @@
-{"version":3,"file":"validateConnectionStatus-gFsBi5FV.js","names":[],"sources":["../src/errors/HtmlResponseError.ts","../src/clients/validateConnectionStatus.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\n/**\n * A successful response that carried an HTML page instead of the endpoint's payload.\n *\n * - An expired session 302s to the login page; `fetch` follows it to `200 text/html`.\n * - Constant message so Sentry groups it; `request`/`response` carry the detail.\n * - Opt-in per client: some APIs serve HTML from a 200 on purpose.\n */\nexport class HtmlResponseError extends ApiError {\n  constructor(res: ApiResponse) {\n    super(res);\n    this.name = 'HtmlResponseError';\n    this.message = 'Expected data, got an HTML page. The session has most likely expired.';\n  }\n}\n\nexport const isHtmlResponseError = (error: unknown): error is HtmlResponseError =>\n  error instanceof HtmlResponseError;\n","import { HtmlResponseError } from '../errors';\nimport { defaultValidateStatus, type ValidateStatusFn } from '../fetchClient';\n\nimport { isLoginPageRedirect } from './isLoginPageRedirect';\n\n/**\n * Status validation for the APIs Connection serves off its own host — storage and auth.\n *\n * - Rejects a successful login page; `HtmlResponseError` says why.\n * - HTML on a *failed* response is a real error page and stays an `ApiError`.\n * - Management answers the same condition with its own session-expiry error instead.\n */\nexport const validateConnectionStatus: ValidateStatusFn = (apiResponse) => {\n  const isValid = defaultValidateStatus(apiResponse);\n\n  if (isValid && isLoginPageRedirect(apiResponse)) {\n    return new HtmlResponseError(apiResponse);\n  }\n\n  return isValid;\n};\n"],"mappings":";;;;;;;;;;AAWA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,YAAY,KAAkB;EAC5B,MAAM,GAAG;EACT,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;AAEA,MAAa,uBAAuB,UAClC,iBAAiB;;;;;;;;;;ACRnB,MAAa,4BAA8C,gBAAgB;CACzE,MAAM,UAAU,sBAAsB,WAAW;CAEjD,IAAI,WAAW,oBAAoB,WAAW,GAC5C,OAAO,IAAI,kBAAkB,WAAW;CAG1C,OAAO;AACT"}
+{"version":3,"file":"validateConnectionStatus-CdTV3gsP.js","names":[],"sources":["../src/errors/HtmlResponseError.ts","../src/clients/validateConnectionStatus.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\n/**\n * A successful response that carried an HTML page instead of the endpoint's payload.\n *\n * - An expired session 302s to the login page; `fetch` follows it to `200 text/html`.\n * - Constant message so Sentry groups it; `request`/`response` carry the detail.\n * - Opt-in per client: some APIs serve HTML from a 200 on purpose.\n */\nexport class HtmlResponseError extends ApiError {\n  constructor(res: ApiResponse) {\n    super(res);\n    this.name = 'HtmlResponseError';\n    this.message = 'Expected data, got an HTML page. The session has most likely expired.';\n  }\n}\n\nexport const isHtmlResponseError = (error: unknown): error is HtmlResponseError =>\n  error instanceof HtmlResponseError;\n","import { HtmlResponseError } from '../errors';\nimport { defaultValidateStatus, type ValidateStatusFn } from '../fetchClient';\n\nimport { isLoginPageRedirect } from './isLoginPageRedirect';\n\n/**\n * Status validation for the APIs Connection serves off its own host — storage and auth.\n *\n * - Rejects a successful login page; `HtmlResponseError` says why.\n * - HTML on a *failed* response is a real error page and stays an `ApiError`.\n * - Management answers the same condition with its own session-expiry error instead.\n */\nexport const validateConnectionStatus: ValidateStatusFn = (apiResponse) => {\n  const isValid = defaultValidateStatus(apiResponse);\n\n  if (isValid && isLoginPageRedirect(apiResponse)) {\n    return new HtmlResponseError(apiResponse);\n  }\n\n  return isValid;\n};\n"],"mappings":";;;;;;;;;;AAWA,IAAa,oBAAb,cAAuC,SAAS;CAC9C,YAAY,KAAkB;EAC5B,MAAM,GAAG;EACT,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;AAEA,MAAa,uBAAuB,UAClC,iBAAiB;;;;;;;;;;ACRnB,MAAa,4BAA8C,gBAAgB;CACzE,MAAM,UAAU,sBAAsB,WAAW;CAEjD,IAAI,WAAW,oBAAoB,WAAW,GAC5C,OAAO,IAAI,kBAAkB,WAAW;CAG1C,OAAO;AACT"}

package/dist/{validateConnectionStatus-Ca1uEizv.cjs → validateConnectionStatus-DR-0h35y.cjs}

@@ -1,5 +1,5 @@
-const require_createFetchClient = require("./createFetchClient-BgihytBn.cjs");
-const require_isLoginPageRedirect = require("./isLoginPageRedirect-c451CoWW.cjs");
+const require_createFetchClient = require("./createFetchClient-ClWD4ua3.cjs");
+const require_isLoginPageRedirect = require("./isLoginPageRedirect-iNbwl3iz.cjs");
 //#region src/errors/HtmlResponseError.ts
 /**
 * A successful response that carried an HTML page instead of the endpoint's payload.
@@ -50,4 +50,4 @@ Object.defineProperty(exports, "validateConnectionStatus", {
 	}
 });
 
-//# sourceMappingURL=validateConnectionStatus-Ca1uEizv.cjs.map
+//# sourceMappingURL=validateConnectionStatus-DR-0h35y.cjs.map

package/dist/{validateConnectionStatus-Ca1uEizv.cjs.map → validateConnectionStatus-DR-0h35y.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"validateConnectionStatus-Ca1uEizv.cjs","names":["ApiError","defaultValidateStatus","isLoginPageRedirect"],"sources":["../src/errors/HtmlResponseError.ts","../src/clients/validateConnectionStatus.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\n/**\n * A successful response that carried an HTML page instead of the endpoint's payload.\n *\n * - An expired session 302s to the login page; `fetch` follows it to `200 text/html`.\n * - Constant message so Sentry groups it; `request`/`response` carry the detail.\n * - Opt-in per client: some APIs serve HTML from a 200 on purpose.\n */\nexport class HtmlResponseError extends ApiError {\n  constructor(res: ApiResponse) {\n    super(res);\n    this.name = 'HtmlResponseError';\n    this.message = 'Expected data, got an HTML page. The session has most likely expired.';\n  }\n}\n\nexport const isHtmlResponseError = (error: unknown): error is HtmlResponseError =>\n  error instanceof HtmlResponseError;\n","import { HtmlResponseError } from '../errors';\nimport { defaultValidateStatus, type ValidateStatusFn } from '../fetchClient';\n\nimport { isLoginPageRedirect } from './isLoginPageRedirect';\n\n/**\n * Status validation for the APIs Connection serves off its own host — storage and auth.\n *\n * - Rejects a successful login page; `HtmlResponseError` says why.\n * - HTML on a *failed* response is a real error page and stays an `ApiError`.\n * - Management answers the same condition with its own session-expiry error instead.\n */\nexport const validateConnectionStatus: ValidateStatusFn = (apiResponse) => {\n  const isValid = defaultValidateStatus(apiResponse);\n\n  if (isValid && isLoginPageRedirect(apiResponse)) {\n    return new HtmlResponseError(apiResponse);\n  }\n\n  return isValid;\n};\n"],"mappings":";;;;;;;;;;AAWA,IAAa,oBAAb,cAAuCA,0BAAAA,SAAS;CAC9C,YAAY,KAAkB;EAC5B,MAAM,GAAG;EACT,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;AAEA,MAAa,uBAAuB,UAClC,iBAAiB;;;;;;;;;;ACRnB,MAAa,4BAA8C,gBAAgB;CACzE,MAAM,UAAUC,0BAAAA,sBAAsB,WAAW;CAEjD,IAAI,WAAWC,4BAAAA,oBAAoB,WAAW,GAC5C,OAAO,IAAI,kBAAkB,WAAW;CAG1C,OAAO;AACT"}
+{"version":3,"file":"validateConnectionStatus-DR-0h35y.cjs","names":["ApiError","defaultValidateStatus","isLoginPageRedirect"],"sources":["../src/errors/HtmlResponseError.ts","../src/clients/validateConnectionStatus.ts"],"sourcesContent":["import type { ApiResponse } from '../fetchClient/createFetchClient/types';\n\nimport { ApiError } from './ApiError';\n\n/**\n * A successful response that carried an HTML page instead of the endpoint's payload.\n *\n * - An expired session 302s to the login page; `fetch` follows it to `200 text/html`.\n * - Constant message so Sentry groups it; `request`/`response` carry the detail.\n * - Opt-in per client: some APIs serve HTML from a 200 on purpose.\n */\nexport class HtmlResponseError extends ApiError {\n  constructor(res: ApiResponse) {\n    super(res);\n    this.name = 'HtmlResponseError';\n    this.message = 'Expected data, got an HTML page. The session has most likely expired.';\n  }\n}\n\nexport const isHtmlResponseError = (error: unknown): error is HtmlResponseError =>\n  error instanceof HtmlResponseError;\n","import { HtmlResponseError } from '../errors';\nimport { defaultValidateStatus, type ValidateStatusFn } from '../fetchClient';\n\nimport { isLoginPageRedirect } from './isLoginPageRedirect';\n\n/**\n * Status validation for the APIs Connection serves off its own host — storage and auth.\n *\n * - Rejects a successful login page; `HtmlResponseError` says why.\n * - HTML on a *failed* response is a real error page and stays an `ApiError`.\n * - Management answers the same condition with its own session-expiry error instead.\n */\nexport const validateConnectionStatus: ValidateStatusFn = (apiResponse) => {\n  const isValid = defaultValidateStatus(apiResponse);\n\n  if (isValid && isLoginPageRedirect(apiResponse)) {\n    return new HtmlResponseError(apiResponse);\n  }\n\n  return isValid;\n};\n"],"mappings":";;;;;;;;;;AAWA,IAAa,oBAAb,cAAuCA,0BAAAA,SAAS;CAC9C,YAAY,KAAkB;EAC5B,MAAM,GAAG;EACT,KAAK,OAAO;EACZ,KAAK,UAAU;CACjB;AACF;AAEA,MAAa,uBAAuB,UAClC,iBAAiB;;;;;;;;;;ACRnB,MAAa,4BAA8C,gBAAgB;CACzE,MAAM,UAAUC,0BAAAA,sBAAsB,WAAW;CAEjD,IAAI,WAAWC,4BAAAA,oBAAoB,WAAW,GAC5C,OAAO,IAAI,kBAAkB,WAAW;CAG1C,OAAO;AACT"}

package/dist/vault/index.cjs

@@ -1,10 +1,13 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_collect = require("../collect-B5TCNiT1.cjs");
 const require_UserError = require("../UserError-CSGO1qII.cjs");
-require("../createFetchClient-BgihytBn.cjs");
-const require_createGenericFetchClient = require("../createGenericFetchClient-C7Y0YVfc.cjs");
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DY5s-aH6.cjs");
-const require_auth = require("../auth-zfI04oj7.cjs");
+require("../createFetchClient-ClWD4ua3.cjs");
+const require_createGenericFetchClient = require("../createGenericFetchClient-B81Iezpb.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-CioTX11-.cjs");
+const require_auth = require("../auth-C9o_0bft.cjs");
 //#region src/clients/vault/vaultClient.ts
+/** The vault's maximum `limit` on `GET /variables`. */
+const VARIABLES_PAGE_SIZE = 100;
 const createVaultClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({
 		baseUrl,
@@ -27,11 +30,32 @@ const createVaultClient = ({ baseUrl, middlewares, auth }) => {
 		const { data } = await client.post("/variables", { body }, { signal });
 		return data;
 	};
+	/**
+	* Every variable of exactly one scope, across all pages.
+	*
+	* - `null` is the project-wide scope: variables with no `branchId`.
+	* - A branch id returns that branch's variables only — project-wide ones are not merged in.
+	*/
+	const getVariablesInScope = (branchId, signal) => require_collect.collect({
+		pageSize: VARIABLES_PAGE_SIZE,
+		signal,
+		fetchFrom: (offset, limit, pageSignal) => getVariables({
+			attributes: { branchId: branchId ?? "" },
+			offset,
+			limit
+		}, pageSignal)
+	});
+	/**
+	* What `vault.<key>` resolves to in a branch: its variables plus the project-wide ones.
+	*
+	* - One variable per key — a branch variable hides a project-wide one with the same key.
+	* - Unpaginated: the vault returns at most 100 of each half.
+	*/
 	const getVariablesByBranchId = async (branchId, signal) => {
 		const { data } = await client.get("/variables/scoped/branch/{branchId}", { path: { branchId } }, { signal });
 		return data;
 	};
-	const getProjectWideVariables = (signal) => getVariablesByBranchId("null", signal);
+	const getProjectWideVariables = (signal) => getVariablesInScope(null, signal);
 	const healthCheck = async (signal) => {
 		const { data } = await genericClient.get("/health-check", {}, { signal });
 		return data;
@@ -42,7 +66,8 @@ const createVaultClient = ({ baseUrl, middlewares, auth }) => {
 		deleteVariable,
 		getProjectWideVariables,
 		getVariables,
-		getVariablesByBranchId
+		getVariablesByBranchId,
+		getVariablesInScope
 	};
 };
 //#endregion

package/dist/vault/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["createOpenapiFetchClient","createAuthHeaders","createGenericFetchClient","UserError"],"sources":["../../src/clients/vault/vaultClient.ts"],"sourcesContent":["import { UserError } from '../../errors';\nimport { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport { ENCRYPTED_VALUE_PREFIX } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateVariableBody,\n  DeleteVariablePath,\n  GetVariablesByBranchId,\n  GetVariablesQuery,\n  VariableWithHash,\n} from './types';\n\nexport const createVaultClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getVariables = async (query: GetVariablesQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/variables',\n      { query },\n      {\n        signal,\n      },\n    );\n\n    return data as VariableWithHash[];\n  };\n\n  const deleteVariable = async (hash: DeleteVariablePath['hash'], signal?: AbortSignal) => {\n    await client.delete(\n      '/variables/{hash}',\n      {\n        path: { hash },\n      },\n      { signal },\n    );\n  };\n\n  const createVariable = async (body: CreateVariableBody, signal?: AbortSignal) => {\n    if (body.flags.includes('encrypted') && !body.value.startsWith(ENCRYPTED_VALUE_PREFIX)) {\n      throw new UserError('Encryption of a value failed. Please contact our support.');\n    }\n    const { data } = await client.post('/variables', { body }, { signal });\n    return data;\n  };\n\n  const getVariablesByBranchId = async (\n    branchId: GetVariablesByBranchId['branchId'],\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/variables/scoped/branch/{branchId}',\n      {\n        path: { branchId },\n      },\n      { signal },\n    );\n    return data as VariableWithHash[];\n  };\n\n  const getProjectWideVariables = (signal?: AbortSignal) => getVariablesByBranchId('null', signal);\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    createVariable,\n    deleteVariable,\n    getProjectWideVariables,\n    getVariables,\n    getVariablesByBranchId,\n  };\n};\n"],"mappings":";;;;;;;AAeA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,eAAe,OAAO,OAA0B,WAAyB;EAC7E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,cACA,EAAE,MAAM,GACR,EACE,OACF,CACF;EAEA,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,MAAkC,WAAyB;EACvF,MAAM,OAAO,OACX,qBACA,EACE,MAAM,EAAE,KAAK,EACf,GACA,EAAE,OAAO,CACX;CACF;CAEA,MAAM,iBAAiB,OAAO,MAA0B,WAAyB;EAC/E,IAAI,KAAK,MAAM,SAAS,WAAW,KAAK,CAAC,KAAK,MAAM,WAAA,OAAiC,GACnF,MAAM,IAAIC,kBAAAA,UAAU,2DAA2D;EAEjF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,cAAc,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,yBAAyB,OAC7B,UACA,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,uCACA,EACE,MAAM,EAAE,SAAS,EACnB,GACA,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,2BAA2B,WAAyB,uBAAuB,QAAQ,MAAM;CAE/F,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"index.cjs","names":["createOpenapiFetchClient","createAuthHeaders","createGenericFetchClient","UserError","collect"],"sources":["../../src/clients/vault/vaultClient.ts"],"sourcesContent":["import { UserError } from '../../errors';\nimport { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport { ENCRYPTED_VALUE_PREFIX } from '../../internal';\nimport { collect } from '../../utils';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  CreateVariableBody,\n  DeleteVariablePath,\n  GetVariablesByBranchId,\n  GetVariablesQuery,\n  VariableWithHash,\n} from './types';\n\n/** The vault's maximum `limit` on `GET /variables`. */\nconst VARIABLES_PAGE_SIZE = 100;\n\nexport const createVaultClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getVariables = async (query: GetVariablesQuery, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/variables',\n      { query },\n      {\n        signal,\n      },\n    );\n\n    return data as VariableWithHash[];\n  };\n\n  const deleteVariable = async (hash: DeleteVariablePath['hash'], signal?: AbortSignal) => {\n    await client.delete(\n      '/variables/{hash}',\n      {\n        path: { hash },\n      },\n      { signal },\n    );\n  };\n\n  const createVariable = async (body: CreateVariableBody, signal?: AbortSignal) => {\n    if (body.flags.includes('encrypted') && !body.value.startsWith(ENCRYPTED_VALUE_PREFIX)) {\n      throw new UserError('Encryption of a value failed. Please contact our support.');\n    }\n    const { data } = await client.post('/variables', { body }, { signal });\n    return data;\n  };\n\n  /**\n   * Every variable of exactly one scope, across all pages.\n   *\n   * - `null` is the project-wide scope: variables with no `branchId`.\n   * - A branch id returns that branch's variables only — project-wide ones are not merged in.\n   */\n  const getVariablesInScope = (branchId: string | null, signal?: AbortSignal) =>\n    collect({\n      pageSize: VARIABLES_PAGE_SIZE,\n      signal,\n      fetchFrom: (offset, limit, pageSignal) =>\n        getVariables({ attributes: { branchId: branchId ?? '' }, offset, limit }, pageSignal),\n    });\n\n  /**\n   * What `vault.<key>` resolves to in a branch: its variables plus the project-wide ones.\n   *\n   * - One variable per key — a branch variable hides a project-wide one with the same key.\n   * - Unpaginated: the vault returns at most 100 of each half.\n   */\n  const getVariablesByBranchId = async (\n    branchId: GetVariablesByBranchId['branchId'],\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/variables/scoped/branch/{branchId}',\n      {\n        path: { branchId },\n      },\n      { signal },\n    );\n    return data as VariableWithHash[];\n  };\n\n  const getProjectWideVariables = (signal?: AbortSignal) => getVariablesInScope(null, signal);\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    createVariable,\n    deleteVariable,\n    getProjectWideVariables,\n    getVariables,\n    getVariablesByBranchId,\n    getVariablesInScope,\n  };\n};\n"],"mappings":";;;;;;;;;AAiBA,MAAM,sBAAsB;AAE5B,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,eAAe,OAAO,OAA0B,WAAyB;EAC7E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,cACA,EAAE,MAAM,GACR,EACE,OACF,CACF;EAEA,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,MAAkC,WAAyB;EACvF,MAAM,OAAO,OACX,qBACA,EACE,MAAM,EAAE,KAAK,EACf,GACA,EAAE,OAAO,CACX;CACF;CAEA,MAAM,iBAAiB,OAAO,MAA0B,WAAyB;EAC/E,IAAI,KAAK,MAAM,SAAS,WAAW,KAAK,CAAC,KAAK,MAAM,WAAA,OAAiC,GACnF,MAAM,IAAIC,kBAAAA,UAAU,2DAA2D;EAEjF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,cAAc,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACrE,OAAO;CACT;;;;;;;CAQA,MAAM,uBAAuB,UAAyB,WACpDC,gBAAAA,QAAQ;EACN,UAAU;EACV;EACA,YAAY,QAAQ,OAAO,eACzB,aAAa;GAAE,YAAY,EAAE,UAAU,YAAY,GAAG;GAAG;GAAQ;EAAM,GAAG,UAAU;CACxF,CAAC;;;;;;;CAQH,MAAM,yBAAyB,OAC7B,UACA,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,uCACA,EACE,MAAM,EAAE,SAAS,EACnB,GACA,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,2BAA2B,WAAyB,oBAAoB,MAAM,MAAM;CAE1F,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/vault/index.d.cts

@@ -1,2 +1,2 @@
-import { t as createVaultClient } from "../index-CcMHJcuP.cjs";
+import { t as createVaultClient } from "../index-BHWTa4YN.cjs";
 export { createVaultClient };

package/dist/vault/index.d.ts

@@ -1,2 +1,2 @@
-import { t as createVaultClient } from "../index-D_-4uQF8.js";
+import { t as createVaultClient } from "../index-zyxZVJnd.js";
 export { createVaultClient };

package/dist/vault/index.js

@@ -1,9 +1,12 @@
+import { t as collect } from "../collect-97WhfEpt.js";
 import { t as UserError } from "../UserError-By_Zckmc.js";
-import "../createFetchClient-cgWkwgAQ.js";
-import { t as createGenericFetchClient } from "../createGenericFetchClient-CX9Hn3Aq.js";
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-BxcLLU_N.js";
-import { t as createAuthHeaders } from "../auth-DUHTJTwS.js";
+import "../createFetchClient-DITkTV2k.js";
+import { t as createGenericFetchClient } from "../createGenericFetchClient-KqiJhw8G.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-wq8iGLZM.js";
+import { t as createAuthHeaders } from "../auth-C6cHWIWx.js";
 //#region src/clients/vault/vaultClient.ts
+/** The vault's maximum `limit` on `GET /variables`. */
+const VARIABLES_PAGE_SIZE = 100;
 const createVaultClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({
 		baseUrl,
@@ -26,11 +29,32 @@ const createVaultClient = ({ baseUrl, middlewares, auth }) => {
 		const { data } = await client.post("/variables", { body }, { signal });
 		return data;
 	};
+	/**
+	* Every variable of exactly one scope, across all pages.
+	*
+	* - `null` is the project-wide scope: variables with no `branchId`.
+	* - A branch id returns that branch's variables only — project-wide ones are not merged in.
+	*/
+	const getVariablesInScope = (branchId, signal) => collect({
+		pageSize: VARIABLES_PAGE_SIZE,
+		signal,
+		fetchFrom: (offset, limit, pageSignal) => getVariables({
+			attributes: { branchId: branchId ?? "" },
+			offset,
+			limit
+		}, pageSignal)
+	});
+	/**
+	* What `vault.<key>` resolves to in a branch: its variables plus the project-wide ones.
+	*
+	* - One variable per key — a branch variable hides a project-wide one with the same key.
+	* - Unpaginated: the vault returns at most 100 of each half.
+	*/
 	const getVariablesByBranchId = async (branchId, signal) => {
 		const { data } = await client.get("/variables/scoped/branch/{branchId}", { path: { branchId } }, { signal });
 		return data;
 	};
-	const getProjectWideVariables = (signal) => getVariablesByBranchId("null", signal);
+	const getProjectWideVariables = (signal) => getVariablesInScope(null, signal);
 	const healthCheck = async (signal) => {
 		const { data } = await genericClient.get("/health-check", {}, { signal });
 		return data;
@@ -41,7 +65,8 @@ const createVaultClient = ({ baseUrl, middlewares, auth }) => {
 		deleteVariable,
 		getProjectWideVariables,
 		getVariables,
-		getVariablesByBranchId
+		getVariablesByBranchId,
+		getVariablesInScope
 	};
 };
 //#endregion