@keboola/api-client 45.0.0 → 47.0.0

package/dist/microsoftGraph/types.d.cts

@@ -1,5 +1,5 @@
-import { c as OpenapiReturnType } from "../index-BVhHt5lx.cjs";
-import { n as paths } from "../schema-DJa9WBjR.cjs";
+import { l as OpenapiReturnType } from "../index-XaPb6unB.cjs";
+import { n as paths } from "../schema-BUyMwQnM.cjs";
 //#region src/clients/microsoftGraph/types.d.ts
 type User = OpenapiReturnType<paths['/me']['get']>;
 type Drive = OpenapiReturnType<paths['/me/drive']['get']>;

package/dist/microsoftGraph/types.d.ts

@@ -1,5 +1,5 @@
-import { c as OpenapiReturnType } from "../index-BgR5zcjJ.js";
-import { n as paths } from "../schema-DJa9WBjR.js";
+import { l as OpenapiReturnType } from "../index-r6YSe8B-.js";
+import { n as paths } from "../schema-BUyMwQnM.js";
 //#region src/clients/microsoftGraph/types.d.ts
 type User = OpenapiReturnType<paths['/me']['get']>;
 type Drive = OpenapiReturnType<paths['/me/drive']['get']>;

package/dist/{middleware-DmR6OhTY.js → middleware-CWaLMlG1.js}

@@ -1,4 +1,4 @@
-import { g as HttpStatus, p as ApiError, s as HttpHeader } from "./createFetchClient-DITkTV2k.js";
+import { g as HttpStatus, p as ApiError, s as HttpHeader } from "./createFetchClient-CkHdS_IG.js";
 //#region src/keboola/bearer/credentials/middleware.ts
 const isUnauthorized = (error) => error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;
 /**
@@ -31,4 +31,4 @@ const createBearerAuthMiddleware = (credential) => {
 //#endregion
 export { isUnauthorized as n, createBearerAuthMiddleware as t };
 
-//# sourceMappingURL=middleware-DmR6OhTY.js.map
+//# sourceMappingURL=middleware-CWaLMlG1.js.map

package/dist/{middleware-DmR6OhTY.js.map → middleware-CWaLMlG1.js.map}

@@ -1 +1 @@
-{"version":3,"file":"middleware-DmR6OhTY.js","names":[],"sources":["../src/keboola/bearer/credentials/middleware.ts"],"sourcesContent":["import { ApiError } from '../../../errors';\nimport { HttpHeader, type MiddlewareFn } from '../../../fetchClient';\nimport { HttpStatus } from '../../../internal';\n\nexport const isUnauthorized = (error: unknown): boolean =>\n  error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;\n\n/** What this middleware needs of a credential; whether it is dead is the credential's call. */\nexport type BearerCredential = {\n  /** `null` while anonymous — nothing to stamp. */\n  getAccessToken: (options?: { forceRefresh?: boolean }) => Promise<string | null>;\n};\n\n/**\n * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.\n *\n * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.\n * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.\n * - A `forceRefresh` answering `null` stops the replay.\n */\nexport const createBearerAuthMiddleware = (credential: BearerCredential): MiddlewareFn => {\n  return (next) => async (request) => {\n    const token = await credential.getAccessToken({ forceRefresh: false });\n    if (token === null) return next(request);\n\n    // Cloned for the replay: the first attempt may consume the body.\n    const retryRequest = request.request.clone();\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${token}`);\n\n    try {\n      return await next(request);\n    } catch (error) {\n      if (!isUnauthorized(error)) throw error;\n\n      const refreshed = await credential.getAccessToken({ forceRefresh: true });\n      // Went anonymous mid-flight — surface the original 401.\n      if (refreshed === null) throw error;\n      retryRequest.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${refreshed}`);\n\n      return await next({ ...request, request: retryRequest });\n    }\n  };\n};\n"],"mappings":";;AAIA,MAAa,kBAAkB,UAC7B,iBAAiB,YAAY,MAAM,SAAS,WAAW,WAAW;;;;;;;;AAepE,MAAa,8BAA8B,eAA+C;CACxF,QAAQ,SAAS,OAAO,YAAY;EAClC,MAAM,QAAQ,MAAM,WAAW,eAAe,EAAE,cAAc,MAAM,CAAC;EACrE,IAAI,UAAU,MAAM,OAAO,KAAK,OAAO;EAGvC,MAAM,eAAe,QAAQ,QAAQ,MAAM;EAC3C,QAAQ,QAAQ,QAAQ,IAAI,WAAW,eAAe,UAAU,OAAO;EAEvE,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,CAAC,eAAe,KAAK,GAAG,MAAM;GAElC,MAAM,YAAY,MAAM,WAAW,eAAe,EAAE,cAAc,KAAK,CAAC;GAExE,IAAI,cAAc,MAAM,MAAM;GAC9B,aAAa,QAAQ,IAAI,WAAW,eAAe,UAAU,WAAW;GAExE,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS;GAAa,CAAC;EACzD;CACF;AACF"}
+{"version":3,"file":"middleware-CWaLMlG1.js","names":[],"sources":["../src/keboola/bearer/credentials/middleware.ts"],"sourcesContent":["import { ApiError } from '../../../errors';\nimport { HttpHeader, type MiddlewareFn } from '../../../fetchClient';\nimport { HttpStatus } from '../../../internal';\n\nexport const isUnauthorized = (error: unknown): boolean =>\n  error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;\n\n/** What this middleware needs of a credential; whether it is dead is the credential's call. */\nexport type BearerCredential = {\n  /** `null` while anonymous — nothing to stamp. */\n  getAccessToken: (options?: { forceRefresh?: boolean }) => Promise<string | null>;\n};\n\n/**\n * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.\n *\n * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.\n * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.\n * - A `forceRefresh` answering `null` stops the replay.\n */\nexport const createBearerAuthMiddleware = (credential: BearerCredential): MiddlewareFn => {\n  return (next) => async (request) => {\n    const token = await credential.getAccessToken({ forceRefresh: false });\n    if (token === null) return next(request);\n\n    // Cloned for the replay: the first attempt may consume the body.\n    const retryRequest = request.request.clone();\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${token}`);\n\n    try {\n      return await next(request);\n    } catch (error) {\n      if (!isUnauthorized(error)) throw error;\n\n      const refreshed = await credential.getAccessToken({ forceRefresh: true });\n      // Went anonymous mid-flight — surface the original 401.\n      if (refreshed === null) throw error;\n      retryRequest.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${refreshed}`);\n\n      return await next({ ...request, request: retryRequest });\n    }\n  };\n};\n"],"mappings":";;AAIA,MAAa,kBAAkB,UAC7B,iBAAiB,YAAY,MAAM,SAAS,WAAW,WAAW;;;;;;;;AAepE,MAAa,8BAA8B,eAA+C;CACxF,QAAQ,SAAS,OAAO,YAAY;EAClC,MAAM,QAAQ,MAAM,WAAW,eAAe,EAAE,cAAc,MAAM,CAAC;EACrE,IAAI,UAAU,MAAM,OAAO,KAAK,OAAO;EAGvC,MAAM,eAAe,QAAQ,QAAQ,MAAM;EAC3C,QAAQ,QAAQ,QAAQ,IAAI,WAAW,eAAe,UAAU,OAAO;EAEvE,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,CAAC,eAAe,KAAK,GAAG,MAAM;GAElC,MAAM,YAAY,MAAM,WAAW,eAAe,EAAE,cAAc,KAAK,CAAC;GAExE,IAAI,cAAc,MAAM,MAAM;GAC9B,aAAa,QAAQ,IAAI,WAAW,eAAe,UAAU,WAAW;GAExE,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS;GAAa,CAAC;EACzD;CACF;AACF"}

package/dist/{middleware-D_p5TctO.cjs → middleware-DU_5pFDW.cjs}

@@ -1,4 +1,4 @@
-const require_createFetchClient = require("./createFetchClient-ClWD4ua3.cjs");
+const require_createFetchClient = require("./createFetchClient-lZ_93Yrb.cjs");
 //#region src/keboola/bearer/credentials/middleware.ts
 const isUnauthorized = (error) => error instanceof require_createFetchClient.ApiError && error.response.status === require_createFetchClient.HttpStatus.UNAUTHORIZED;
 /**
@@ -42,4 +42,4 @@ Object.defineProperty(exports, "isUnauthorized", {
 	}
 });
 
-//# sourceMappingURL=middleware-D_p5TctO.cjs.map
+//# sourceMappingURL=middleware-DU_5pFDW.cjs.map

package/dist/{middleware-D_p5TctO.cjs.map → middleware-DU_5pFDW.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"middleware-D_p5TctO.cjs","names":["ApiError","HttpStatus","HttpHeader"],"sources":["../src/keboola/bearer/credentials/middleware.ts"],"sourcesContent":["import { ApiError } from '../../../errors';\nimport { HttpHeader, type MiddlewareFn } from '../../../fetchClient';\nimport { HttpStatus } from '../../../internal';\n\nexport const isUnauthorized = (error: unknown): boolean =>\n  error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;\n\n/** What this middleware needs of a credential; whether it is dead is the credential's call. */\nexport type BearerCredential = {\n  /** `null` while anonymous — nothing to stamp. */\n  getAccessToken: (options?: { forceRefresh?: boolean }) => Promise<string | null>;\n};\n\n/**\n * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.\n *\n * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.\n * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.\n * - A `forceRefresh` answering `null` stops the replay.\n */\nexport const createBearerAuthMiddleware = (credential: BearerCredential): MiddlewareFn => {\n  return (next) => async (request) => {\n    const token = await credential.getAccessToken({ forceRefresh: false });\n    if (token === null) return next(request);\n\n    // Cloned for the replay: the first attempt may consume the body.\n    const retryRequest = request.request.clone();\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${token}`);\n\n    try {\n      return await next(request);\n    } catch (error) {\n      if (!isUnauthorized(error)) throw error;\n\n      const refreshed = await credential.getAccessToken({ forceRefresh: true });\n      // Went anonymous mid-flight — surface the original 401.\n      if (refreshed === null) throw error;\n      retryRequest.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${refreshed}`);\n\n      return await next({ ...request, request: retryRequest });\n    }\n  };\n};\n"],"mappings":";;AAIA,MAAa,kBAAkB,UAC7B,iBAAiBA,0BAAAA,YAAY,MAAM,SAAS,WAAWC,0BAAAA,WAAW;;;;;;;;AAepE,MAAa,8BAA8B,eAA+C;CACxF,QAAQ,SAAS,OAAO,YAAY;EAClC,MAAM,QAAQ,MAAM,WAAW,eAAe,EAAE,cAAc,MAAM,CAAC;EACrE,IAAI,UAAU,MAAM,OAAO,KAAK,OAAO;EAGvC,MAAM,eAAe,QAAQ,QAAQ,MAAM;EAC3C,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,WAAW,eAAe,UAAU,OAAO;EAEvE,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,CAAC,eAAe,KAAK,GAAG,MAAM;GAElC,MAAM,YAAY,MAAM,WAAW,eAAe,EAAE,cAAc,KAAK,CAAC;GAExE,IAAI,cAAc,MAAM,MAAM;GAC9B,aAAa,QAAQ,IAAIA,0BAAAA,WAAW,eAAe,UAAU,WAAW;GAExE,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS;GAAa,CAAC;EACzD;CACF;AACF"}
+{"version":3,"file":"middleware-DU_5pFDW.cjs","names":["ApiError","HttpStatus","HttpHeader"],"sources":["../src/keboola/bearer/credentials/middleware.ts"],"sourcesContent":["import { ApiError } from '../../../errors';\nimport { HttpHeader, type MiddlewareFn } from '../../../fetchClient';\nimport { HttpStatus } from '../../../internal';\n\nexport const isUnauthorized = (error: unknown): boolean =>\n  error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;\n\n/** What this middleware needs of a credential; whether it is dead is the credential's call. */\nexport type BearerCredential = {\n  /** `null` while anonymous — nothing to stamp. */\n  getAccessToken: (options?: { forceRefresh?: boolean }) => Promise<string | null>;\n};\n\n/**\n * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.\n *\n * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.\n * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.\n * - A `forceRefresh` answering `null` stops the replay.\n */\nexport const createBearerAuthMiddleware = (credential: BearerCredential): MiddlewareFn => {\n  return (next) => async (request) => {\n    const token = await credential.getAccessToken({ forceRefresh: false });\n    if (token === null) return next(request);\n\n    // Cloned for the replay: the first attempt may consume the body.\n    const retryRequest = request.request.clone();\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${token}`);\n\n    try {\n      return await next(request);\n    } catch (error) {\n      if (!isUnauthorized(error)) throw error;\n\n      const refreshed = await credential.getAccessToken({ forceRefresh: true });\n      // Went anonymous mid-flight — surface the original 401.\n      if (refreshed === null) throw error;\n      retryRequest.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${refreshed}`);\n\n      return await next({ ...request, request: retryRequest });\n    }\n  };\n};\n"],"mappings":";;AAIA,MAAa,kBAAkB,UAC7B,iBAAiBA,0BAAAA,YAAY,MAAM,SAAS,WAAWC,0BAAAA,WAAW;;;;;;;;AAepE,MAAa,8BAA8B,eAA+C;CACxF,QAAQ,SAAS,OAAO,YAAY;EAClC,MAAM,QAAQ,MAAM,WAAW,eAAe,EAAE,cAAc,MAAM,CAAC;EACrE,IAAI,UAAU,MAAM,OAAO,KAAK,OAAO;EAGvC,MAAM,eAAe,QAAQ,QAAQ,MAAM;EAC3C,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,WAAW,eAAe,UAAU,OAAO;EAEvE,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,CAAC,eAAe,KAAK,GAAG,MAAM;GAElC,MAAM,YAAY,MAAM,WAAW,eAAe,EAAE,cAAc,KAAK,CAAC;GAExE,IAAI,cAAc,MAAM,MAAM;GAC9B,aAAa,QAAQ,IAAIA,0BAAAA,WAAW,eAAe,UAAU,WAAW;GAExE,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS;GAAa,CAAC;EACzD;CACF;AACF"}

package/dist/notifications/index.cjs

@@ -1,8 +1,8 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_concurrent = require("../concurrent-CdVfR1N5.cjs");
-const require_createGenericFetchClient = require("../createGenericFetchClient-B81Iezpb.cjs");
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-CioTX11-.cjs");
-const require_auth = require("../auth-C9o_0bft.cjs");
+const require_createGenericFetchClient = require("../createGenericFetchClient-MOx97wi-.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DHYo_k3t.cjs");
+const require_auth = require("../auth-C8Pjl0Mu.cjs");
 //#region src/clients/notifications/notificationsClient.ts
 const createNotificationsClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({

package/dist/notifications/index.d.cts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-DoZtE9tz.cjs";
-import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-Dd31Lw4S.cjs";
+import { n as ClientInitOptions } from "../types-OkQWmonU.cjs";
+import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-DBJ8c3hN.cjs";
 //#region src/clients/notifications/notificationsClient.d.ts
 declare const createNotificationsClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;

package/dist/notifications/index.d.ts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-B2w2TtSA.js";
-import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-D3wcs4tp.js";
+import { n as ClientInitOptions } from "../types-Cw9UISvM.js";
+import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-DWJVbskE.js";
 //#region src/clients/notifications/notificationsClient.d.ts
 declare const createNotificationsClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;

package/dist/notifications/index.js

@@ -1,7 +1,7 @@
 import { t as concurrent } from "../concurrent-BacWxPwi.js";
-import { t as createGenericFetchClient } from "../createGenericFetchClient-KqiJhw8G.js";
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-wq8iGLZM.js";
-import { t as createAuthHeaders } from "../auth-C6cHWIWx.js";
+import { t as createGenericFetchClient } from "../createGenericFetchClient-CQdNcPC3.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DXiMv9WL.js";
+import { t as createAuthHeaders } from "../auth-4coY1uwo.js";
 //#region src/clients/notifications/notificationsClient.ts
 const createNotificationsClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({

package/dist/notifications/types.d.cts

@@ -1,2 +1,2 @@
-import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-Dd31Lw4S.cjs";
+import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-DBJ8c3hN.cjs";
 export { CreateSubscriptionBody, ListSubscriptionsQuery, ProjectSubscription, SubscriptionFilter, SubscriptionId, SubscriptionRecipient };

package/dist/notifications/types.d.ts

@@ -1,2 +1,2 @@
-import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-D3wcs4tp.js";
+import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-DWJVbskE.js";
 export { CreateSubscriptionBody, ListSubscriptionsQuery, ProjectSubscription, SubscriptionFilter, SubscriptionId, SubscriptionRecipient };

package/dist/oauth/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_oauth = require("../oauth-DyUwTqHJ.cjs");
+const require_oauth = require("../oauth-DKZPuUlt.cjs");
 exports.createOauthClient = require_oauth.createOauthClient;

package/dist/oauth/index.d.cts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-DoZtE9tz.cjs";
-import { a as CredentialInput, r as CreateCredentialInput, s as GetCredentialsInput } from "../types-BhOUS9j1.cjs";
+import { n as ClientInitOptions } from "../types-OkQWmonU.cjs";
+import { a as CredentialInput, c as GetCredentialsInput, r as CreateCredentialInput } from "../types-4CjbcUdD.cjs";
 //#region src/clients/oauth/oauthClient.d.ts
 declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;
@@ -46,6 +46,10 @@ declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOpti
     '#data': string;
   }>;
   deleteCredential: ({ componentId, id }: CredentialInput, signal?: AbortSignal) => Promise<void>;
+  getOrganizationConnections: (signal?: AbortSignal) => Promise<{
+    accountLogin: string;
+    host: string;
+  }[]>;
 };
 //#endregion
 export { createOauthClient };

package/dist/oauth/index.d.ts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-B2w2TtSA.js";
-import { a as CredentialInput, r as CreateCredentialInput, s as GetCredentialsInput } from "../types-gcAb6olM.js";
+import { n as ClientInitOptions } from "../types-Cw9UISvM.js";
+import { a as CredentialInput, c as GetCredentialsInput, r as CreateCredentialInput } from "../types-B2ZLjagf.js";
 //#region src/clients/oauth/oauthClient.d.ts
 declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;
@@ -46,6 +46,10 @@ declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOpti
     '#data': string;
   }>;
   deleteCredential: ({ componentId, id }: CredentialInput, signal?: AbortSignal) => Promise<void>;
+  getOrganizationConnections: (signal?: AbortSignal) => Promise<{
+    accountLogin: string;
+    host: string;
+  }[]>;
 };
 //#endregion
 export { createOauthClient };

package/dist/oauth/index.js

@@ -1,2 +1,2 @@
-import { t as createOauthClient } from "../oauth-Ck_Fe14o.js";
+import { t as createOauthClient } from "../oauth-GXmZ9agP.js";
 export { createOauthClient };

package/dist/oauth/types.d.cts

@@ -1,2 +1,2 @@
-import { a as CredentialInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as GetCredentialsInput, t as ComponentPath } from "../types-BhOUS9j1.cjs";
-export { ComponentPath, CreateCredentialBody, CreateCredentialInput, Credential, CredentialInput, CredentialPath, type GetCredentialsInput };
+import { a as CredentialInput, c as GetCredentialsInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as OrganizationConnection, t as ComponentPath } from "../types-4CjbcUdD.cjs";
+export { ComponentPath, CreateCredentialBody, CreateCredentialInput, Credential, CredentialInput, CredentialPath, type GetCredentialsInput, OrganizationConnection };

package/dist/oauth/types.d.ts

@@ -1,2 +1,2 @@
-import { a as CredentialInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as GetCredentialsInput, t as ComponentPath } from "../types-gcAb6olM.js";
-export { ComponentPath, CreateCredentialBody, CreateCredentialInput, Credential, CredentialInput, CredentialPath, type GetCredentialsInput };
+import { a as CredentialInput, c as GetCredentialsInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as OrganizationConnection, t as ComponentPath } from "../types-B2ZLjagf.js";
+export { ComponentPath, CreateCredentialBody, CreateCredentialInput, Credential, CredentialInput, CredentialPath, type GetCredentialsInput, OrganizationConnection };

package/dist/{oauth-DyUwTqHJ.cjs → oauth-DKZPuUlt.cjs}

@@ -1,7 +1,7 @@
-const require_createFetchClient = require("./createFetchClient-ClWD4ua3.cjs");
-const require_createGenericFetchClient = require("./createGenericFetchClient-B81Iezpb.cjs");
-const require_createOpenapiFetchClient = require("./createOpenapiFetchClient-CioTX11-.cjs");
-const require_auth = require("./auth-C9o_0bft.cjs");
+const require_createFetchClient = require("./createFetchClient-lZ_93Yrb.cjs");
+const require_createGenericFetchClient = require("./createGenericFetchClient-MOx97wi-.cjs");
+const require_createOpenapiFetchClient = require("./createOpenapiFetchClient-DHYo_k3t.cjs");
+const require_auth = require("./auth-C8Pjl0Mu.cjs");
 //#region src/clients/oauth/utils.ts
 /**
 * The credentials payload rides one of two fields, and only one of them is in the current spec:
@@ -65,6 +65,16 @@ const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 			name: id
 		} }, { signal });
 	};
+	/**
+	* The GitHub connections of the project's organization; any project member's token may read them.
+	*
+	* - Empty when the organization has none.
+	* - A listed connection does not guarantee a repository: the App installation must cover it.
+	*/
+	const getOrganizationConnections = async (signal) => {
+		const { data } = await client.get("/organization-credentials/connections", {}, { signal });
+		return data.connections;
+	};
 	const healthCheck = async (signal) => {
 		const { data } = await genericClient.get("/health-check", {}, { signal });
 		return data;
@@ -74,7 +84,8 @@ const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 		getCredentials,
 		getCredential,
 		createCredential,
-		deleteCredential
+		deleteCredential,
+		getOrganizationConnections
 	};
 };
 //#endregion
@@ -85,4 +96,4 @@ Object.defineProperty(exports, "createOauthClient", {
 	}
 });
 
-//# sourceMappingURL=oauth-DyUwTqHJ.cjs.map
+//# sourceMappingURL=oauth-DKZPuUlt.cjs.map

package/dist/{oauth-DyUwTqHJ.cjs.map → oauth-DKZPuUlt.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"oauth-DyUwTqHJ.cjs","names":["createOpenapiFetchClient","createAuthHeaders","createGenericFetchClient","isApiError","HttpStatus"],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"oauth-DKZPuUlt.cjs","names":["createOpenapiFetchClient","createAuthHeaders","createGenericFetchClient","isApiError","HttpStatus"],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  /**\n   * The GitHub connections of the project's organization; any project member's token may read them.\n   *\n   * - Empty when the organization has none.\n   * - A listed connection does not guarantee a repository: the App installation must cover it.\n   */\n  const getOrganizationConnections = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/organization-credentials/connections', {}, { signal });\n    return data.connections;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n    getOrganizationConnections,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;;;;;;;CAQA,MAAM,6BAA6B,OAAO,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,yCAAyC,CAAC,GAAG,EAAE,OAAO,CAAC;EACzF,OAAO,KAAK;CACd;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/{oauth-Ck_Fe14o.js → oauth-GXmZ9agP.js}

@@ -1,7 +1,7 @@
-import { g as HttpStatus, r as isApiError } from "./createFetchClient-DITkTV2k.js";
-import { t as createGenericFetchClient } from "./createGenericFetchClient-KqiJhw8G.js";
-import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-wq8iGLZM.js";
-import { t as createAuthHeaders } from "./auth-C6cHWIWx.js";
+import { g as HttpStatus, r as isApiError } from "./createFetchClient-CkHdS_IG.js";
+import { t as createGenericFetchClient } from "./createGenericFetchClient-CQdNcPC3.js";
+import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-DXiMv9WL.js";
+import { t as createAuthHeaders } from "./auth-4coY1uwo.js";
 //#region src/clients/oauth/utils.ts
 /**
 * The credentials payload rides one of two fields, and only one of them is in the current spec:
@@ -65,6 +65,16 @@ const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 			name: id
 		} }, { signal });
 	};
+	/**
+	* The GitHub connections of the project's organization; any project member's token may read them.
+	*
+	* - Empty when the organization has none.
+	* - A listed connection does not guarantee a repository: the App installation must cover it.
+	*/
+	const getOrganizationConnections = async (signal) => {
+		const { data } = await client.get("/organization-credentials/connections", {}, { signal });
+		return data.connections;
+	};
 	const healthCheck = async (signal) => {
 		const { data } = await genericClient.get("/health-check", {}, { signal });
 		return data;
@@ -74,10 +84,11 @@ const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 		getCredentials,
 		getCredential,
 		createCredential,
-		deleteCredential
+		deleteCredential,
+		getOrganizationConnections
 	};
 };
 //#endregion
 export { createOauthClient as t };
 
-//# sourceMappingURL=oauth-Ck_Fe14o.js.map
+//# sourceMappingURL=oauth-GXmZ9agP.js.map

package/dist/{oauth-Ck_Fe14o.js.map → oauth-GXmZ9agP.js.map}

@@ -1 +1 @@
-{"version":3,"file":"oauth-Ck_Fe14o.js","names":[],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"oauth-GXmZ9agP.js","names":[],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  /**\n   * The GitHub connections of the project's organization; any project member's token may read them.\n   *\n   * - Empty when the organization has none.\n   * - A listed connection does not guarantee a repository: the App installation must cover it.\n   */\n  const getOrganizationConnections = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/organization-credentials/connections', {}, { signal });\n    return data.connections;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n    getOrganizationConnections,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;;;;;;;CAQA,MAAM,6BAA6B,OAAO,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,yCAAyC,CAAC,GAAG,EAAE,OAAO,CAAC;EACzF,OAAO,KAAK;CACd;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/omnisearch/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-CioTX11-.cjs");
-const require_auth = require("../auth-C9o_0bft.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DHYo_k3t.cjs");
+const require_auth = require("../auth-C8Pjl0Mu.cjs");
 //#region src/clients/omnisearch/omnisearchClient.ts
 /**
 * Omnisearch — data lineage.

package/dist/omnisearch/index.d.cts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-DoZtE9tz.cjs";
-import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-c_bsDkV6.cjs";
+import { n as ClientInitOptions } from "../types-OkQWmonU.cjs";
+import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-DPDq8C4q.cjs";
 //#region src/clients/omnisearch/omnisearchClient.d.ts
 /**
  * Omnisearch — data lineage.

package/dist/omnisearch/index.d.ts

@@ -1,5 +1,5 @@
-import { n as ClientInitOptions } from "../types-B2w2TtSA.js";
-import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-CAp1VexS.js";
+import { n as ClientInitOptions } from "../types-Cw9UISvM.js";
+import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-Dg8a7m7f.js";
 //#region src/clients/omnisearch/omnisearchClient.d.ts
 /**
  * Omnisearch — data lineage.

package/dist/omnisearch/index.js

@@ -1,5 +1,5 @@
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-wq8iGLZM.js";
-import { t as createAuthHeaders } from "../auth-C6cHWIWx.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DXiMv9WL.js";
+import { t as createAuthHeaders } from "../auth-4coY1uwo.js";
 //#region src/clients/omnisearch/omnisearchClient.ts
 /**
 * Omnisearch — data lineage.

package/dist/omnisearch/types.d.cts

@@ -1,2 +1,2 @@
-import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-c_bsDkV6.cjs";
+import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-DPDq8C4q.cjs";
 export { GetProjectsLineageQuery, GetTablesLineageQuery, LineageBucket, LineageConfiguration, LineageMetadata, LineageProject, LineageSource, LineageTable, ProjectLineageRelation, ProjectsLineage, ProjectsLineageResponse, TableLineageRelation, TablesLineage, TablesLineageResponse };

package/dist/omnisearch/types.d.ts

@@ -1,2 +1,2 @@
-import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-CAp1VexS.js";
+import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-Dg8a7m7f.js";
 export { GetProjectsLineageQuery, GetTablesLineageQuery, LineageBucket, LineageConfiguration, LineageMetadata, LineageProject, LineageSource, LineageTable, ProjectLineageRelation, ProjectsLineage, ProjectsLineageResponse, TableLineageRelation, TablesLineage, TablesLineageResponse };

package/dist/project-BMmfPhXg.d.ts

@@ -0,0 +1,74 @@
+import { Lr as paths, c as OpenapiQueryType, l as OpenapiReturnType, r as OpenapiBodyType, s as OpenapiPathType } from "./index-r6YSe8B-.js";
+import "./adminRoles-CvdIUkiC.js";
+import { t as Backend } from "./backends-DKBz5OxE.js";
+//#region src/clients/storage/tokens/types.d.ts
+type ProjectId = number;
+type CreateTokenSchemaBody = OpenapiBodyType<paths['/v2/storage/tokens']['post']>;
+type UpdateTokenSchemaBody = OpenapiBodyType<paths['/v2/storage/tokens/{id}']['put']>;
+type TokenListItem = OpenapiReturnType<paths['/v2/storage/tokens']['get']>[number];
+type GetTokenEventsPath = OpenapiPathType<paths['/v2/storage/tokens/{id}/events']['get']>;
+type GetTokenEventsInput = GetTokenEventsPath & NonNullable<OpenapiQueryType<paths['/v2/storage/tokens/{id}/events']['get']>>;
+/**
+ * The create payload with `token` required.
+ *
+ * - The spec shares the schema with update, where `token` is omitted; create always returns it.
+ */
+type CreateTokenResponse = Omit<OpenapiReturnType<paths['/v2/storage/tokens']['post']>, 'token'> & {
+  token: string;
+};
+/** The verify payload as the spec declares it — `StorageToken` is the corrected shape. */
+type StorageTokenRaw = OpenapiReturnType<paths['/v2/storage/tokens/verify']['get']>;
+/**
+ * `StorageTokenRaw` tightened to what an admin session always gets.
+ *
+ * - `admin` and `adminOwner` are optional in the spec (a token without an admin); every token the
+ *   SDK verifies belongs to one, and `domain/permissions` narrows on `admin.role`.
+ * - `admin.role` stays the spec's enum and nullable: Connection stores memberships without a role.
+ * - `owner.assignedBackends` narrows to the backends the SDK knows; the spec types them `string`.
+ */
+type StorageToken = Omit<StorageTokenRaw, 'owner' | 'admin' | 'adminOwner'> & {
+  owner: Omit<StorageTokenRaw['owner'], 'assignedBackends'> & {
+    assignedBackends: Backend[];
+  };
+  admin: NonNullable<StorageTokenRaw['admin']>;
+  adminOwner: NonNullable<StorageTokenRaw['adminOwner']>;
+};
+/**
+ * The create body with every field optional.
+ * - Connection defaults each boolean (`?? false`) and declares no `required` list; the generator
+ *   marks a property with a `default` as required (`--default-non-nullable`), hence the `Partial`.
+ * - `canManageBuckets` only picks the full arm of the spec's union; the limited arm is a subset.
+ */
+type CreateTokenBody = Partial<Extract<CreateTokenSchemaBody, {
+  canManageBuckets: boolean;
+}>>;
+/** Update takes these five fields and ignores the rest (`allowExtraFields`); `canManageBuckets` is set at creation only. */
+type UpdateTokenBody = UpdateTokenSchemaBody;
+type UpdateTokenPath = OpenapiPathType<paths['/v2/storage/tokens/{id}']['put']>;
+type UpdateTokenInput = UpdateTokenPath & UpdateTokenBody;
+type ShareTokenBody = OpenapiBodyType<paths['/v2/storage/tokens/{id}/share']['post']>;
+type ShareTokenPath = OpenapiPathType<paths['/v2/storage/tokens/{id}/share']['post']>;
+type ShareTokenInput = ShareTokenPath & ShareTokenBody;
+//#endregion
+//#region src/domain/project.d.ts
+type Options = {
+  sapiToken: StorageToken;
+};
+declare const hasFeature: (token: StorageToken, ...feature: string[]) => boolean;
+/**
+ * The admin's features as the Storage token carries them.
+ *
+ * - The same list `createAdminAccount` reads from the Manage token: Connection serialises both
+ *   from the admin row, so prefer the account where one is at hand — it also knows `isSuperAdmin`.
+ */
+declare const hasAdminFeature: (token: StorageToken, ...feature: string[]) => boolean;
+declare const createProject: ({ sapiToken }: Options) => {
+  hasFeature: (...feature: string[]) => boolean;
+  hasAdminFeature: (...feature: string[]) => boolean;
+  hasBackend: (backend: Backend) => boolean;
+  sapiToken: StorageToken;
+};
+type Project = ReturnType<typeof createProject>;
+//#endregion
+export { UpdateTokenInput as _, CreateTokenResponse as a, GetTokenEventsPath as c, ShareTokenInput as d, ShareTokenPath as f, UpdateTokenBody as g, TokenListItem as h, CreateTokenBody as i, ProjectId as l, StorageTokenRaw as m, hasAdminFeature as n, CreateTokenSchemaBody as o, StorageToken as p, hasFeature as r, GetTokenEventsInput as s, Project as t, ShareTokenBody as u, UpdateTokenPath as v, UpdateTokenSchemaBody as y };
+//# sourceMappingURL=project-BMmfPhXg.d.ts.map

package/dist/{project-DWwZv66D.js → project-BXLFrWJ6.js}

@@ -4,6 +4,12 @@ const hasFeature = (token, ...feature) => {
 	const projectFeatureSet = new Set(token.owner.features);
 	return feature.every((x) => projectFeatureSet.has(x));
 };
+/**
+* The admin's features as the Storage token carries them.
+*
+* - The same list `createAdminAccount` reads from the Manage token: Connection serialises both
+*   from the admin row, so prefer the account where one is at hand — it also knows `isSuperAdmin`.
+*/
 const hasAdminFeature = (token, ...feature) => {
 	if (feature.length === 0) return false;
 	const adminFeatureSet = new Set(token.admin?.features ?? []);
@@ -36,4 +42,4 @@ const createProject = ({ sapiToken }) => {
 //#endregion
 export { hasAdminFeature as n, hasFeature as r, createProject as t };
 
-//# sourceMappingURL=project-DWwZv66D.js.map
+//# sourceMappingURL=project-BXLFrWJ6.js.map

package/dist/project-BXLFrWJ6.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-BXLFrWJ6.js","names":[],"sources":["../src/domain/project.ts"],"sourcesContent":["import type { Backend, StorageToken } from '../clients/storage/tokens/types';\n\ntype Options = {\n  sapiToken: StorageToken;\n};\n\nexport const hasFeature = (token: StorageToken, ...feature: string[]): boolean => {\n  if (feature.length === 0) return false;\n  const projectFeatureSet = new Set(token.owner.features);\n  return feature.every((x) => projectFeatureSet.has(x));\n};\n\n/**\n * The admin's features as the Storage token carries them.\n *\n * - The same list `createAdminAccount` reads from the Manage token: Connection serialises both\n *   from the admin row, so prefer the account where one is at hand — it also knows `isSuperAdmin`.\n */\nexport const hasAdminFeature = (token: StorageToken, ...feature: string[]): boolean => {\n  if (feature.length === 0) return false;\n  const adminFeatureSet = new Set(token.admin?.features ?? []);\n  return feature.every((x) => adminFeatureSet.has(x));\n};\n\nexport const createProject = ({ sapiToken }: Options) => {\n  const { owner, admin } = sapiToken;\n  const projectFeatureSet = new Set(owner.features);\n  // `verify` omits `admin` for a token created via `POST /v2/storage/tokens`, even though the type\n  // declares it: an admin-less token holds no admin features, rather than failing to build at all.\n  const adminFeatureSet = new Set(admin?.features ?? []);\n\n  const hasFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => projectFeatureSet.has(x));\n  };\n\n  // Same list as `createAdminAccount`'s; prefer the account where one is at hand.\n  const hasAdminFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => adminFeatureSet.has(x));\n  };\n\n  const hasBackend = (backend: Backend): boolean => {\n    if (backend === 'bigquery') return owner.hasBigquery;\n    if (backend === 'snowflake') return owner.hasSnowflake;\n    return false;\n  };\n\n  return {\n    hasFeature,\n    hasAdminFeature,\n    hasBackend,\n    sapiToken,\n  };\n};\n\nexport type Project = ReturnType<typeof createProject>;\n"],"mappings":";AAMA,MAAa,cAAc,OAAqB,GAAG,YAA+B;CAChF,IAAI,QAAQ,WAAW,GAAG,OAAO;CACjC,MAAM,oBAAoB,IAAI,IAAI,MAAM,MAAM,QAAQ;CACtD,OAAO,QAAQ,OAAO,MAAM,kBAAkB,IAAI,CAAC,CAAC;AACtD;;;;;;;AAQA,MAAa,mBAAmB,OAAqB,GAAG,YAA+B;CACrF,IAAI,QAAQ,WAAW,GAAG,OAAO;CACjC,MAAM,kBAAkB,IAAI,IAAI,MAAM,OAAO,YAAY,CAAC,CAAC;CAC3D,OAAO,QAAQ,OAAO,MAAM,gBAAgB,IAAI,CAAC,CAAC;AACpD;AAEA,MAAa,iBAAiB,EAAE,gBAAyB;CACvD,MAAM,EAAE,OAAO,UAAU;CACzB,MAAM,oBAAoB,IAAI,IAAI,MAAM,QAAQ;CAGhD,MAAM,kBAAkB,IAAI,IAAI,OAAO,YAAY,CAAC,CAAC;CAErD,MAAM,cAAc,GAAG,YAAsB;EAC3C,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,kBAAkB,IAAI,CAAC,CAAC;CACtD;CAGA,MAAM,mBAAmB,GAAG,YAAsB;EAChD,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,gBAAgB,IAAI,CAAC,CAAC;CACpD;CAEA,MAAM,cAAc,YAA8B;EAChD,IAAI,YAAY,YAAY,OAAO,MAAM;EACzC,IAAI,YAAY,aAAa,OAAO,MAAM;EAC1C,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;CACF;AACF"}

package/dist/{project-BvFi19K_.cjs → project-CpgplgCr.cjs}

@@ -4,6 +4,12 @@ const hasFeature = (token, ...feature) => {
 	const projectFeatureSet = new Set(token.owner.features);
 	return feature.every((x) => projectFeatureSet.has(x));
 };
+/**
+* The admin's features as the Storage token carries them.
+*
+* - The same list `createAdminAccount` reads from the Manage token: Connection serialises both
+*   from the admin row, so prefer the account where one is at hand — it also knows `isSuperAdmin`.
+*/
 const hasAdminFeature = (token, ...feature) => {
 	if (feature.length === 0) return false;
 	const adminFeatureSet = new Set(token.admin?.features ?? []);
@@ -53,4 +59,4 @@ Object.defineProperty(exports, "hasFeature", {
 	}
 });
 
-//# sourceMappingURL=project-BvFi19K_.cjs.map
+//# sourceMappingURL=project-CpgplgCr.cjs.map

package/dist/project-CpgplgCr.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-CpgplgCr.cjs","names":[],"sources":["../src/domain/project.ts"],"sourcesContent":["import type { Backend, StorageToken } from '../clients/storage/tokens/types';\n\ntype Options = {\n  sapiToken: StorageToken;\n};\n\nexport const hasFeature = (token: StorageToken, ...feature: string[]): boolean => {\n  if (feature.length === 0) return false;\n  const projectFeatureSet = new Set(token.owner.features);\n  return feature.every((x) => projectFeatureSet.has(x));\n};\n\n/**\n * The admin's features as the Storage token carries them.\n *\n * - The same list `createAdminAccount` reads from the Manage token: Connection serialises both\n *   from the admin row, so prefer the account where one is at hand — it also knows `isSuperAdmin`.\n */\nexport const hasAdminFeature = (token: StorageToken, ...feature: string[]): boolean => {\n  if (feature.length === 0) return false;\n  const adminFeatureSet = new Set(token.admin?.features ?? []);\n  return feature.every((x) => adminFeatureSet.has(x));\n};\n\nexport const createProject = ({ sapiToken }: Options) => {\n  const { owner, admin } = sapiToken;\n  const projectFeatureSet = new Set(owner.features);\n  // `verify` omits `admin` for a token created via `POST /v2/storage/tokens`, even though the type\n  // declares it: an admin-less token holds no admin features, rather than failing to build at all.\n  const adminFeatureSet = new Set(admin?.features ?? []);\n\n  const hasFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => projectFeatureSet.has(x));\n  };\n\n  // Same list as `createAdminAccount`'s; prefer the account where one is at hand.\n  const hasAdminFeature = (...feature: string[]) => {\n    if (feature.length === 0) return false;\n    return feature.every((x) => adminFeatureSet.has(x));\n  };\n\n  const hasBackend = (backend: Backend): boolean => {\n    if (backend === 'bigquery') return owner.hasBigquery;\n    if (backend === 'snowflake') return owner.hasSnowflake;\n    return false;\n  };\n\n  return {\n    hasFeature,\n    hasAdminFeature,\n    hasBackend,\n    sapiToken,\n  };\n};\n\nexport type Project = ReturnType<typeof createProject>;\n"],"mappings":";AAMA,MAAa,cAAc,OAAqB,GAAG,YAA+B;CAChF,IAAI,QAAQ,WAAW,GAAG,OAAO;CACjC,MAAM,oBAAoB,IAAI,IAAI,MAAM,MAAM,QAAQ;CACtD,OAAO,QAAQ,OAAO,MAAM,kBAAkB,IAAI,CAAC,CAAC;AACtD;;;;;;;AAQA,MAAa,mBAAmB,OAAqB,GAAG,YAA+B;CACrF,IAAI,QAAQ,WAAW,GAAG,OAAO;CACjC,MAAM,kBAAkB,IAAI,IAAI,MAAM,OAAO,YAAY,CAAC,CAAC;CAC3D,OAAO,QAAQ,OAAO,MAAM,gBAAgB,IAAI,CAAC,CAAC;AACpD;AAEA,MAAa,iBAAiB,EAAE,gBAAyB;CACvD,MAAM,EAAE,OAAO,UAAU;CACzB,MAAM,oBAAoB,IAAI,IAAI,MAAM,QAAQ;CAGhD,MAAM,kBAAkB,IAAI,IAAI,OAAO,YAAY,CAAC,CAAC;CAErD,MAAM,cAAc,GAAG,YAAsB;EAC3C,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,kBAAkB,IAAI,CAAC,CAAC;CACtD;CAGA,MAAM,mBAAmB,GAAG,YAAsB;EAChD,IAAI,QAAQ,WAAW,GAAG,OAAO;EACjC,OAAO,QAAQ,OAAO,MAAM,gBAAgB,IAAI,CAAC,CAAC;CACpD;CAEA,MAAM,cAAc,YAA8B;EAChD,IAAI,YAAY,YAAY,OAAO,MAAM;EACzC,IAAI,YAAY,aAAa,OAAO,MAAM;EAC1C,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;CACF;AACF"}