@keboola/api-client 49.0.0 → 51.0.0

package/dist/microsoftGraph/index.d.cts

@@ -1,7 +1,6 @@
-import { li as MiddlewareFn } from "../index-CL4iKFic.cjs";
-import { n as ClientInitOptions } from "../types-O6XM48J8.cjs";
-import { t as components } from "../schema-BUyMwQnM.cjs";
-//#region src/clients/microsoftGraph/microsoftGraphClient.d.ts
+import { li as MiddlewareFn } from "../index-D1mduJne.cjs";
+import { n as ClientInitOptions } from "../types-Dryq2GGE.cjs";
+import { t as components } from "../schema-DLmBEgPM.cjs";
 /**
  * Auth arrives as a middleware, never as a token: a client here holds no credential. Pair it with
  * `createMicrosoftGraphAuthMiddleware`, which the consumer builds from the token its OAuth flow
@@ -290,8 +289,6 @@ declare const createMicrosoftGraphClient: ({ baseUrl, middlewares }?: MicrosoftG
     '@odata.type': string;
   }>;
 };
-//#endregion
-//#region src/clients/microsoftGraph/middleware.d.ts
 /**
  * Stamps a Graph access token as `Authorization: Bearer …`.
  *
@@ -301,6 +298,5 @@ declare const createMicrosoftGraphClient: ({ baseUrl, middlewares }?: MicrosoftG
  * `MiddlewareFn` rather than a credential, without every consumer restating the header.
  */
 declare const createMicrosoftGraphAuthMiddleware: (accessToken: string) => MiddlewareFn;
-//#endregion
 export { createMicrosoftGraphAuthMiddleware, createMicrosoftGraphClient };
 //# sourceMappingURL=index.d.cts.map

package/dist/microsoftGraph/index.d.ts

@@ -1,7 +1,6 @@
-import { li as MiddlewareFn } from "../index-BPMr8PQJ.js";
-import { n as ClientInitOptions } from "../types-CeqZuOEC.js";
-import { t as components } from "../schema-BUyMwQnM.js";
-//#region src/clients/microsoftGraph/microsoftGraphClient.d.ts
+import { li as MiddlewareFn } from "../index-D1mduJne.js";
+import { n as ClientInitOptions } from "../types-DUpVIuk7.js";
+import { t as components } from "../schema-DLmBEgPM.js";
 /**
  * Auth arrives as a middleware, never as a token: a client here holds no credential. Pair it with
  * `createMicrosoftGraphAuthMiddleware`, which the consumer builds from the token its OAuth flow
@@ -290,8 +289,6 @@ declare const createMicrosoftGraphClient: ({ baseUrl, middlewares }?: MicrosoftG
     '@odata.type': string;
   }>;
 };
-//#endregion
-//#region src/clients/microsoftGraph/middleware.d.ts
 /**
  * Stamps a Graph access token as `Authorization: Bearer …`.
  *
@@ -301,6 +298,5 @@ declare const createMicrosoftGraphClient: ({ baseUrl, middlewares }?: MicrosoftG
  * `MiddlewareFn` rather than a credential, without every consumer restating the header.
  */
 declare const createMicrosoftGraphAuthMiddleware: (accessToken: string) => MiddlewareFn;
-//#endregion
 export { createMicrosoftGraphAuthMiddleware, createMicrosoftGraphClient };
 //# sourceMappingURL=index.d.ts.map

package/dist/microsoftGraph/index.js

@@ -1,12 +1,11 @@
-import { s as HttpHeader } from "../createFetchClient-CkHdS_IG.js";
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DXiMv9WL.js";
-//#region src/clients/microsoftGraph/utils.ts
+import { s as HttpHeader } from "../createFetchClient-DlGCbltR.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-Bhz62MUE.js";
+// src/clients/microsoftGraph/utils.ts
 const encodeSharingUrl = (sharingUrl) => {
 	const binary = String.fromCharCode(...new TextEncoder().encode(sharingUrl));
 	return `u!${btoa(binary).replace(/=+$/, "").replace(/\//g, "_").replace(/\+/g, "-")}`;
 };
-//#endregion
-//#region src/clients/microsoftGraph/microsoftGraphClient.ts
+// src/clients/microsoftGraph/microsoftGraphClient.ts
 const MICROSOFT_GRAPH_BASE_URL = "https://graph.microsoft.com/v1.0";
 const DRIVE_ITEM_SELECT = [
 	"id",
@@ -68,8 +67,7 @@ const createMicrosoftGraphClient = ({ baseUrl = MICROSOFT_GRAPH_BASE_URL, middle
 		getDriveItemBySharingUrl
 	};
 };
-//#endregion
-//#region src/clients/microsoftGraph/middleware.ts
+// src/clients/microsoftGraph/middleware.ts
 /**
 * Stamps a Graph access token as `Authorization: Bearer …`.
 *
@@ -84,7 +82,6 @@ const createMicrosoftGraphAuthMiddleware = (accessToken) => {
 		return next(request);
 	};
 };
-//#endregion
 export { createMicrosoftGraphAuthMiddleware, createMicrosoftGraphClient };
 
 //# sourceMappingURL=index.js.map

package/dist/microsoftGraph/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../src/clients/microsoftGraph/utils.ts","../../src/clients/microsoftGraph/microsoftGraphClient.ts","../../src/clients/microsoftGraph/middleware.ts"],"sourcesContent":["// Encode a sharing URL into a Graph sharing token: base64 of the UTF-8 bytes, converted to\n// unpadded base64url, prefixed with `u!`. TextEncoder keeps non-ASCII file names (e.g. ä, č) valid.\n// https://learn.microsoft.com/en-us/graph/api/shares-get#encoding-sharing-urls\nexport const encodeSharingUrl = (sharingUrl: string) => {\n  const binary = String.fromCharCode(...new TextEncoder().encode(sharingUrl));\n  const base64 = btoa(binary).replace(/=+$/, '').replace(/\\//g, '_').replace(/\\+/g, '-');\n  return `u!${base64}`;\n};\n","import { createOpenapiFetchClient } from '../../fetchClient';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport { encodeSharingUrl } from './utils';\n\n// Microsoft Graph is not a Keboola service, so unlike a stack client this base URL is not\n// discovered — the version prefix is part of Graph's own API contract. Overridable for tests.\nconst MICROSOFT_GRAPH_BASE_URL = 'https://graph.microsoft.com/v1.0';\n\nconst DRIVE_ITEM_SELECT = ['id', 'name', 'parentReference'];\n\n// OData wants `$select=id,name` — the default array format would send `$select[0]=id`.\nconst ODATA_QUERY = { queryArrayFormat: 'comma' } as const;\n\n/**\n * Auth arrives as a middleware, never as a token: a client here holds no credential. Pair it with\n * `createMicrosoftGraphAuthMiddleware`, which the consumer builds from the token its OAuth flow\n * just minted — Graph tokens are per user interaction and scoped to one account, so a client is\n * built per interaction rather than shared.\n */\ntype MicrosoftGraphClientOptions = Partial<Omit<ClientInitOptions, 'auth'>>;\n\nexport const createMicrosoftGraphClient = ({\n  baseUrl = MICROSOFT_GRAPH_BASE_URL,\n  middlewares = [],\n}: MicrosoftGraphClientOptions = {}) => {\n  const client = createOpenapiFetchClient<paths>({ baseUrl, middlewares });\n\n  const getMySite = async (signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/me',\n      { query: { $select: ['mySite'] } },\n      { signal, ...ODATA_QUERY },\n    );\n\n    return data;\n  };\n\n  const getMyDrive = async (signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/me/drive',\n      { query: { $select: ['webUrl'] } },\n      { signal, ...ODATA_QUERY },\n    );\n\n    return data;\n  };\n\n  const getFile = async (driveId: string, fileId: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/drives/{drive-id}/items/{driveItem-id}',\n      {\n        path: { 'drive-id': driveId, 'driveItem-id': fileId },\n        query: { $select: DRIVE_ITEM_SELECT },\n      },\n      { signal, ...ODATA_QUERY },\n    );\n\n    return data;\n  };\n\n  /**\n   * Resolves the real DriveItem (id + parentReference.driveId) for a shared item a file picker\n   * returned with empty ids (e.g. \"Shared with me\" SharePoint files).\n   */\n  const getDriveItemBySharingUrl = async (sharingUrl: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/shares/{sharedDriveItem-id}/driveItem',\n      {\n        path: { 'sharedDriveItem-id': encodeSharingUrl(sharingUrl) },\n        query: { $select: DRIVE_ITEM_SELECT },\n      },\n      // Graph only redeems a sharing link into a DriveItem when asked to.\n      { signal, ...ODATA_QUERY, headers: { Prefer: 'redeemSharingLinkIfNecessary' } },\n    );\n\n    return data;\n  };\n\n  return {\n    getMySite,\n    getMyDrive,\n    getFile,\n    getDriveItemBySharingUrl,\n  };\n};\n","import { HttpHeader, type MiddlewareFn } from '../../fetchClient';\n\n/**\n * Stamps a Graph access token as `Authorization: Bearer …`.\n *\n * There is deliberately no refresh-and-replay here, and no `sdks/microsoftGraph/` to own one: the\n * consumer's OAuth library (MSAL in the browser) mints and refreshes these tokens per user\n * interaction, so this package holds no token state to manage. It exists so the client can take a\n * `MiddlewareFn` rather than a credential, without every consumer restating the header.\n */\nexport const createMicrosoftGraphAuthMiddleware = (accessToken: string): MiddlewareFn => {\n  return (next) => async (request) => {\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${accessToken}`);\n    return next(request);\n  };\n};\n"],"mappings":";;;AAGA,MAAa,oBAAoB,eAAuB;CACtD,MAAM,SAAS,OAAO,aAAa,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,CAAC;CAE1E,OAAO,KADQ,KAAK,MAAM,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GACjE;AACnB;;;ACCA,MAAM,2BAA2B;AAEjC,MAAM,oBAAoB;CAAC;CAAM;CAAQ;AAAiB;AAG1D,MAAM,cAAc,EAAE,kBAAkB,QAAQ;AAUhD,MAAa,8BAA8B,EACzC,UAAU,0BACV,cAAc,CAAC,MACgB,CAAC,MAAM;CACtC,MAAM,SAAS,yBAAgC;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,YAAY,OAAO,WAAyB;EAChD,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,OACA,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,GACjC;GAAE;GAAQ,GAAG;EAAY,CAC3B;EAEA,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,WAAyB;EACjD,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,aACA,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,GACjC;GAAE;GAAQ,GAAG;EAAY,CAC3B;EAEA,OAAO;CACT;CAEA,MAAM,UAAU,OAAO,SAAiB,QAAgB,WAAyB;EAC/E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,2CACA;GACE,MAAM;IAAE,YAAY;IAAS,gBAAgB;GAAO;GACpD,OAAO,EAAE,SAAS,kBAAkB;EACtC,GACA;GAAE;GAAQ,GAAG;EAAY,CAC3B;EAEA,OAAO;CACT;;;;;CAMA,MAAM,2BAA2B,OAAO,YAAoB,WAAyB;EACnF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,0CACA;GACE,MAAM,EAAE,sBAAsB,iBAAiB,UAAU,EAAE;GAC3D,OAAO,EAAE,SAAS,kBAAkB;EACtC,GAEA;GAAE;GAAQ,GAAG;GAAa,SAAS,EAAE,QAAQ,+BAA+B;EAAE,CAChF;EAEA,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;CACF;AACF;;;;;;;;;;;AC5EA,MAAa,sCAAsC,gBAAsC;CACvF,QAAQ,SAAS,OAAO,YAAY;EAClC,QAAQ,QAAQ,QAAQ,IAAI,WAAW,eAAe,UAAU,aAAa;EAC7E,OAAO,KAAK,OAAO;CACrB;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../src/clients/microsoftGraph/utils.ts","../../src/clients/microsoftGraph/microsoftGraphClient.ts","../../src/clients/microsoftGraph/middleware.ts"],"sourcesContent":["// Encode a sharing URL into a Graph sharing token: base64 of the UTF-8 bytes, converted to\n// unpadded base64url, prefixed with `u!`. TextEncoder keeps non-ASCII file names (e.g. ä, č) valid.\n// https://learn.microsoft.com/en-us/graph/api/shares-get#encoding-sharing-urls\nexport const encodeSharingUrl = (sharingUrl: string) => {\n  const binary = String.fromCharCode(...new TextEncoder().encode(sharingUrl));\n  const base64 = btoa(binary).replace(/=+$/, '').replace(/\\//g, '_').replace(/\\+/g, '-');\n  return `u!${base64}`;\n};\n","import { createOpenapiFetchClient } from '../../fetchClient';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport { encodeSharingUrl } from './utils';\n\n// Microsoft Graph is not a Keboola service, so unlike a stack client this base URL is not\n// discovered — the version prefix is part of Graph's own API contract. Overridable for tests.\nconst MICROSOFT_GRAPH_BASE_URL = 'https://graph.microsoft.com/v1.0';\n\nconst DRIVE_ITEM_SELECT = ['id', 'name', 'parentReference'];\n\n// OData wants `$select=id,name` — the default array format would send `$select[0]=id`.\nconst ODATA_QUERY = { queryArrayFormat: 'comma' } as const;\n\n/**\n * Auth arrives as a middleware, never as a token: a client here holds no credential. Pair it with\n * `createMicrosoftGraphAuthMiddleware`, which the consumer builds from the token its OAuth flow\n * just minted — Graph tokens are per user interaction and scoped to one account, so a client is\n * built per interaction rather than shared.\n */\ntype MicrosoftGraphClientOptions = Partial<Omit<ClientInitOptions, 'auth'>>;\n\nexport const createMicrosoftGraphClient = ({\n  baseUrl = MICROSOFT_GRAPH_BASE_URL,\n  middlewares = [],\n}: MicrosoftGraphClientOptions = {}) => {\n  const client = createOpenapiFetchClient<paths>({ baseUrl, middlewares });\n\n  const getMySite = async (signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/me',\n      { query: { $select: ['mySite'] } },\n      { signal, ...ODATA_QUERY },\n    );\n\n    return data;\n  };\n\n  const getMyDrive = async (signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/me/drive',\n      { query: { $select: ['webUrl'] } },\n      { signal, ...ODATA_QUERY },\n    );\n\n    return data;\n  };\n\n  const getFile = async (driveId: string, fileId: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/drives/{drive-id}/items/{driveItem-id}',\n      {\n        path: { 'drive-id': driveId, 'driveItem-id': fileId },\n        query: { $select: DRIVE_ITEM_SELECT },\n      },\n      { signal, ...ODATA_QUERY },\n    );\n\n    return data;\n  };\n\n  /**\n   * Resolves the real DriveItem (id + parentReference.driveId) for a shared item a file picker\n   * returned with empty ids (e.g. \"Shared with me\" SharePoint files).\n   */\n  const getDriveItemBySharingUrl = async (sharingUrl: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/shares/{sharedDriveItem-id}/driveItem',\n      {\n        path: { 'sharedDriveItem-id': encodeSharingUrl(sharingUrl) },\n        query: { $select: DRIVE_ITEM_SELECT },\n      },\n      // Graph only redeems a sharing link into a DriveItem when asked to.\n      { signal, ...ODATA_QUERY, headers: { Prefer: 'redeemSharingLinkIfNecessary' } },\n    );\n\n    return data;\n  };\n\n  return {\n    getMySite,\n    getMyDrive,\n    getFile,\n    getDriveItemBySharingUrl,\n  };\n};\n","import { HttpHeader, type MiddlewareFn } from '../../fetchClient';\n\n/**\n * Stamps a Graph access token as `Authorization: Bearer …`.\n *\n * There is deliberately no refresh-and-replay here, and no `sdks/microsoftGraph/` to own one: the\n * consumer's OAuth library (MSAL in the browser) mints and refreshes these tokens per user\n * interaction, so this package holds no token state to manage. It exists so the client can take a\n * `MiddlewareFn` rather than a credential, without every consumer restating the header.\n */\nexport const createMicrosoftGraphAuthMiddleware = (accessToken: string): MiddlewareFn => {\n  return (next) => async (request) => {\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${accessToken}`);\n    return next(request);\n  };\n};\n"],"mappings":";;;AAGA,MAAa,oBAAoB,eAAuB;CACtD,MAAM,SAAS,OAAO,aAAa,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,UAAU,CAAC;CAE1E,OAAO,KADQ,KAAK,MAAM,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,QAAQ,OAAO,GAAG,CAAC,CAAC,QAAQ,OAAO,GACjE;AACnB;;ACCA,MAAM,2BAA2B;AAEjC,MAAM,oBAAoB;CAAC;CAAM;CAAQ;AAAiB;AAG1D,MAAM,cAAc,EAAE,kBAAkB,QAAQ;AAUhD,MAAa,8BAA8B,EACzC,UAAU,0BACV,cAAc,CAAC,MACgB,CAAC,MAAM;CACtC,MAAM,SAAS,yBAAgC;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,YAAY,OAAO,WAAyB;EAChD,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,OACA,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,GACjC;GAAE;GAAQ,GAAG;EAAY,CAC3B;EAEA,OAAO;CACT;CAEA,MAAM,aAAa,OAAO,WAAyB;EACjD,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,aACA,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,GACjC;GAAE;GAAQ,GAAG;EAAY,CAC3B;EAEA,OAAO;CACT;CAEA,MAAM,UAAU,OAAO,SAAiB,QAAgB,WAAyB;EAC/E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,2CACA;GACE,MAAM;IAAE,YAAY;IAAS,gBAAgB;GAAO;GACpD,OAAO,EAAE,SAAS,kBAAkB;EACtC,GACA;GAAE;GAAQ,GAAG;EAAY,CAC3B;EAEA,OAAO;CACT;;;;;CAMA,MAAM,2BAA2B,OAAO,YAAoB,WAAyB;EACnF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,0CACA;GACE,MAAM,EAAE,sBAAsB,iBAAiB,UAAU,EAAE;GAC3D,OAAO,EAAE,SAAS,kBAAkB;EACtC,GAEA;GAAE;GAAQ,GAAG;GAAa,SAAS,EAAE,QAAQ,+BAA+B;EAAE,CAChF;EAEA,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;CACF;AACF;;;;;;;;;;AC5EA,MAAa,sCAAsC,gBAAsC;CACvF,QAAQ,SAAS,OAAO,YAAY;EAClC,QAAQ,QAAQ,QAAQ,IAAI,WAAW,eAAe,UAAU,aAAa;EAC7E,OAAO,KAAK,OAAO;CACrB;AACF"}

package/dist/microsoftGraph/types.d.cts

@@ -1,10 +1,8 @@
-import { l as OpenapiReturnType } from "../index-CL4iKFic.cjs";
-import { n as paths } from "../schema-BUyMwQnM.cjs";
-//#region src/clients/microsoftGraph/types.d.ts
+import { l as OpenapiReturnType } from "../index-D1mduJne.cjs";
+import { n as paths } from "../schema-DLmBEgPM.cjs";
 type User = OpenapiReturnType<paths['/me']['get']>;
 type Drive = OpenapiReturnType<paths['/me/drive']['get']>;
 type DriveItem = OpenapiReturnType<paths['/drives/{drive-id}/items/{driveItem-id}']['get']>;
 type SharedDriveItem = OpenapiReturnType<paths['/shares/{sharedDriveItem-id}/driveItem']['get']>;
-//#endregion
 export { Drive, DriveItem, SharedDriveItem, User };
 //# sourceMappingURL=types.d.cts.map

package/dist/microsoftGraph/types.d.ts

@@ -1,10 +1,8 @@
-import { l as OpenapiReturnType } from "../index-BPMr8PQJ.js";
-import { n as paths } from "../schema-BUyMwQnM.js";
-//#region src/clients/microsoftGraph/types.d.ts
+import { l as OpenapiReturnType } from "../index-D1mduJne.js";
+import { n as paths } from "../schema-DLmBEgPM.js";
 type User = OpenapiReturnType<paths['/me']['get']>;
 type Drive = OpenapiReturnType<paths['/me/drive']['get']>;
 type DriveItem = OpenapiReturnType<paths['/drives/{drive-id}/items/{driveItem-id}']['get']>;
 type SharedDriveItem = OpenapiReturnType<paths['/shares/{sharedDriveItem-id}/driveItem']['get']>;
-//#endregion
 export { Drive, DriveItem, SharedDriveItem, User };
 //# sourceMappingURL=types.d.ts.map

package/dist/{middleware-GOfx8Apu.js → middleware-8zaJWcyU.js}

@@ -1,12 +1,11 @@
-import { g as HttpStatus, p as ApiError, s as HttpHeader } from "./createFetchClient-CkHdS_IG.js";
-//#region src/keboola/bearer/credentials/middleware.ts
+import { g as HttpStatus, p as ApiError, s as HttpHeader } from "./createFetchClient-DlGCbltR.js";
+// src/keboola/bearer/credentials/middleware.ts
 const isUnauthorized = (error) => error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;
 /**
 * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.
 *
 * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.
 * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.
-* - A `forceRefresh` answering `null` stops the replay.
 */
 const createBearerAuthMiddleware = (source) => {
 	return (next) => async (request) => {
@@ -28,7 +27,6 @@ const createBearerAuthMiddleware = (source) => {
 		}
 	};
 };
-//#endregion
 export { isUnauthorized as n, createBearerAuthMiddleware as t };
 
-//# sourceMappingURL=middleware-GOfx8Apu.js.map
+//# sourceMappingURL=middleware-8zaJWcyU.js.map

package/dist/middleware-8zaJWcyU.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-8zaJWcyU.js","names":[],"sources":["../src/keboola/bearer/credentials/middleware.ts"],"sourcesContent":["import { ApiError } from '../../../errors';\nimport { HttpHeader, type MiddlewareFn } from '../../../fetchClient';\nimport { HttpStatus } from '../../../internal';\n\nexport const isUnauthorized = (error: unknown): boolean =>\n  error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;\n\nexport type AccessTokenSource = {\n  /** `null` while anonymous — nothing to stamp. */\n  getAccessToken: (options?: { forceRefresh?: boolean }) => Promise<string | null>;\n};\n\n/**\n * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.\n *\n * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.\n * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.\n */\nexport const createBearerAuthMiddleware = (source: AccessTokenSource): MiddlewareFn => {\n  return (next) => async (request) => {\n    const token = await source.getAccessToken({ forceRefresh: false });\n    if (token === null) return next(request);\n\n    // Cloned for the replay: the first attempt may consume the body.\n    const retryRequest = request.request.clone();\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${token}`);\n\n    try {\n      return await next(request);\n    } catch (error) {\n      if (!isUnauthorized(error)) throw error;\n\n      const refreshed = await source.getAccessToken({ forceRefresh: true });\n      // Went anonymous mid-flight — surface the original 401.\n      if (refreshed === null) throw error;\n      retryRequest.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${refreshed}`);\n\n      return await next({ ...request, request: retryRequest });\n    }\n  };\n};\n"],"mappings":";;AAIA,MAAa,kBAAkB,UAC7B,iBAAiB,YAAY,MAAM,SAAS,WAAW,WAAW;;;;;;;AAapE,MAAa,8BAA8B,WAA4C;CACrF,QAAQ,SAAS,OAAO,YAAY;EAClC,MAAM,QAAQ,MAAM,OAAO,eAAe,EAAE,cAAc,MAAM,CAAC;EACjE,IAAI,UAAU,MAAM,OAAO,KAAK,OAAO;EAGvC,MAAM,eAAe,QAAQ,QAAQ,MAAM;EAC3C,QAAQ,QAAQ,QAAQ,IAAI,WAAW,eAAe,UAAU,OAAO;EAEvE,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,CAAC,eAAe,KAAK,GAAG,MAAM;GAElC,MAAM,YAAY,MAAM,OAAO,eAAe,EAAE,cAAc,KAAK,CAAC;GAEpE,IAAI,cAAc,MAAM,MAAM;GAC9B,aAAa,QAAQ,IAAI,WAAW,eAAe,UAAU,WAAW;GAExE,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS;GAAa,CAAC;EACzD;CACF;AACF"}

package/dist/{middleware-CEP6uu_D.cjs → middleware-B9RNuLfD.cjs}

@@ -1,12 +1,11 @@
-const require_createFetchClient = require("./createFetchClient-lZ_93Yrb.cjs");
-//#region src/keboola/bearer/credentials/middleware.ts
+const require_createFetchClient = require("./createFetchClient-DEkUH662.cjs");
+// src/keboola/bearer/credentials/middleware.ts
 const isUnauthorized = (error) => error instanceof require_createFetchClient.ApiError && error.response.status === require_createFetchClient.HttpStatus.UNAUTHORIZED;
 /**
 * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.
 *
 * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.
 * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.
-* - A `forceRefresh` answering `null` stops the replay.
 */
 const createBearerAuthMiddleware = (source) => {
 	return (next) => async (request) => {
@@ -28,7 +27,6 @@ const createBearerAuthMiddleware = (source) => {
 		}
 	};
 };
-//#endregion
 Object.defineProperty(exports, "createBearerAuthMiddleware", {
 	enumerable: true,
 	get: function() {
@@ -42,4 +40,4 @@ Object.defineProperty(exports, "isUnauthorized", {
 	}
 });
 
-//# sourceMappingURL=middleware-CEP6uu_D.cjs.map
+//# sourceMappingURL=middleware-B9RNuLfD.cjs.map

package/dist/middleware-B9RNuLfD.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware-B9RNuLfD.cjs","names":["ApiError","HttpStatus","HttpHeader"],"sources":["../src/keboola/bearer/credentials/middleware.ts"],"sourcesContent":["import { ApiError } from '../../../errors';\nimport { HttpHeader, type MiddlewareFn } from '../../../fetchClient';\nimport { HttpStatus } from '../../../internal';\n\nexport const isUnauthorized = (error: unknown): boolean =>\n  error instanceof ApiError && error.response.status === HttpStatus.UNAUTHORIZED;\n\nexport type AccessTokenSource = {\n  /** `null` while anonymous — nothing to stamp. */\n  getAccessToken: (options?: { forceRefresh?: boolean }) => Promise<string | null>;\n};\n\n/**\n * Bearer auth: stamps the access token; on a 401, force-refreshes and replays once.\n *\n * - A replay that still 401s passes on, not as expiry: an unreachable project gets the same 401.\n * - Anonymous (`null` token): passes through untouched, so `login` / `refresh` work.\n */\nexport const createBearerAuthMiddleware = (source: AccessTokenSource): MiddlewareFn => {\n  return (next) => async (request) => {\n    const token = await source.getAccessToken({ forceRefresh: false });\n    if (token === null) return next(request);\n\n    // Cloned for the replay: the first attempt may consume the body.\n    const retryRequest = request.request.clone();\n    request.request.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${token}`);\n\n    try {\n      return await next(request);\n    } catch (error) {\n      if (!isUnauthorized(error)) throw error;\n\n      const refreshed = await source.getAccessToken({ forceRefresh: true });\n      // Went anonymous mid-flight — surface the original 401.\n      if (refreshed === null) throw error;\n      retryRequest.headers.set(HttpHeader.AUTHORIZATION, `Bearer ${refreshed}`);\n\n      return await next({ ...request, request: retryRequest });\n    }\n  };\n};\n"],"mappings":";;AAIA,MAAa,kBAAkB,UAC7B,iBAAiBA,0BAAAA,YAAY,MAAM,SAAS,WAAWC,0BAAAA,WAAW;;;;;;;AAapE,MAAa,8BAA8B,WAA4C;CACrF,QAAQ,SAAS,OAAO,YAAY;EAClC,MAAM,QAAQ,MAAM,OAAO,eAAe,EAAE,cAAc,MAAM,CAAC;EACjE,IAAI,UAAU,MAAM,OAAO,KAAK,OAAO;EAGvC,MAAM,eAAe,QAAQ,QAAQ,MAAM;EAC3C,QAAQ,QAAQ,QAAQ,IAAIC,0BAAAA,WAAW,eAAe,UAAU,OAAO;EAEvE,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,CAAC,eAAe,KAAK,GAAG,MAAM;GAElC,MAAM,YAAY,MAAM,OAAO,eAAe,EAAE,cAAc,KAAK,CAAC;GAEpE,IAAI,cAAc,MAAM,MAAM;GAC9B,aAAa,QAAQ,IAAIA,0BAAAA,WAAW,eAAe,UAAU,WAAW;GAExE,OAAO,MAAM,KAAK;IAAE,GAAG;IAAS,SAAS;GAAa,CAAC;EACzD;CACF;AACF"}

package/dist/notifications/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_concurrent = require("../concurrent-CdVfR1N5.cjs");
-const require_createGenericFetchClient = require("../createGenericFetchClient-MOx97wi-.cjs");
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DHYo_k3t.cjs");
-const require_auth = require("../auth-C8Pjl0Mu.cjs");
-//#region src/clients/notifications/notificationsClient.ts
+const require_createGenericFetchClient = require("../createGenericFetchClient-2oU-PXVo.cjs");
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DL9w7vU-.cjs");
+const require_concurrent = require("../concurrent-DnTV_ppY.cjs");
+const require_auth = require("../auth-CvB4MukT.cjs");
+// src/clients/notifications/notificationsClient.ts
 const createNotificationsClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({
 		baseUrl,
@@ -63,7 +63,6 @@ const createNotificationsClient = ({ baseUrl, middlewares, auth }) => {
 		deleteSubscriptions
 	};
 };
-//#endregion
 exports.createNotificationsClient = createNotificationsClient;
 
 //# sourceMappingURL=index.cjs.map

package/dist/notifications/index.d.cts

@@ -1,6 +1,5 @@
-import { n as ClientInitOptions } from "../types-O6XM48J8.cjs";
-import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-DmzSFOhK.cjs";
-//#region src/clients/notifications/notificationsClient.d.ts
+import { n as ClientInitOptions } from "../types-Dryq2GGE.cjs";
+import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-D-tJt0hQ.cjs";
 declare const createNotificationsClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;
   getSubscriptions: (query?: ListSubscriptionsQuery, signal?: AbortSignal) => Promise<({
@@ -54,6 +53,5 @@ declare const createNotificationsClient: ({ baseUrl, middlewares, auth }: Client
   deleteSubscription: (subscriptionId: SubscriptionId, signal?: AbortSignal) => Promise<void>;
   deleteSubscriptions: (subscriptionIds: SubscriptionId[], signal?: AbortSignal) => Promise<void>;
 };
-//#endregion
 export { createNotificationsClient };
 //# sourceMappingURL=index.d.cts.map

package/dist/notifications/index.d.ts

@@ -1,6 +1,5 @@
-import { n as ClientInitOptions } from "../types-CeqZuOEC.js";
-import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-DlhNay1n.js";
-//#region src/clients/notifications/notificationsClient.d.ts
+import { n as ClientInitOptions } from "../types-DUpVIuk7.js";
+import { a as SubscriptionId, n as ListSubscriptionsQuery, s as components, t as CreateSubscriptionBody } from "../types-CWcdaq-K.js";
 declare const createNotificationsClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;
   getSubscriptions: (query?: ListSubscriptionsQuery, signal?: AbortSignal) => Promise<({
@@ -54,6 +53,5 @@ declare const createNotificationsClient: ({ baseUrl, middlewares, auth }: Client
   deleteSubscription: (subscriptionId: SubscriptionId, signal?: AbortSignal) => Promise<void>;
   deleteSubscriptions: (subscriptionIds: SubscriptionId[], signal?: AbortSignal) => Promise<void>;
 };
-//#endregion
 export { createNotificationsClient };
 //# sourceMappingURL=index.d.ts.map

package/dist/notifications/index.js

@@ -1,8 +1,8 @@
-import { t as concurrent } from "../concurrent-BacWxPwi.js";
-import { t as createGenericFetchClient } from "../createGenericFetchClient-CQdNcPC3.js";
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DXiMv9WL.js";
-import { t as createAuthHeaders } from "../auth-4coY1uwo.js";
-//#region src/clients/notifications/notificationsClient.ts
+import { t as createGenericFetchClient } from "../createGenericFetchClient-wGxemBwR.js";
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-Bhz62MUE.js";
+import { t as concurrent } from "../concurrent-BtsT10Xe.js";
+import { t as createAuthHeaders } from "../auth-DYfQMQCs.js";
+// src/clients/notifications/notificationsClient.ts
 const createNotificationsClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({
 		baseUrl,
@@ -62,7 +62,6 @@ const createNotificationsClient = ({ baseUrl, middlewares, auth }) => {
 		deleteSubscriptions
 	};
 };
-//#endregion
 export { createNotificationsClient };
 
 //# sourceMappingURL=index.js.map

package/dist/notifications/types.d.cts

@@ -1,2 +1,2 @@
-import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-DmzSFOhK.cjs";
+import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-D-tJt0hQ.cjs";
 export { CreateSubscriptionBody, ListSubscriptionsQuery, ProjectSubscription, SubscriptionFilter, SubscriptionId, SubscriptionRecipient };

package/dist/notifications/types.d.ts

@@ -1,2 +1,2 @@
-import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-DlhNay1n.js";
+import { a as SubscriptionId, i as SubscriptionFilter, n as ListSubscriptionsQuery, o as SubscriptionRecipient, r as ProjectSubscription, t as CreateSubscriptionBody } from "../types-CWcdaq-K.js";
 export { CreateSubscriptionBody, ListSubscriptionsQuery, ProjectSubscription, SubscriptionFilter, SubscriptionId, SubscriptionRecipient };

package/dist/oauth/index.cjs

@@ -1,3 +1,3 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_oauth = require("../oauth-DKZPuUlt.cjs");
+const require_oauth = require("../oauth-B5Biqz21.cjs");
 exports.createOauthClient = require_oauth.createOauthClient;

package/dist/oauth/index.d.cts

@@ -1,6 +1,5 @@
-import { n as ClientInitOptions } from "../types-O6XM48J8.cjs";
-import { a as CredentialInput, c as GetCredentialsInput, r as CreateCredentialInput } from "../types-CTS2NSIb.cjs";
-//#region src/clients/oauth/oauthClient.d.ts
+import { n as ClientInitOptions } from "../types-Dryq2GGE.cjs";
+import { a as CredentialInput, c as GetCredentialsInput, r as CreateCredentialInput } from "../types-YpOm4yXE.cjs";
 declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;
   getCredentials: (scope: GetCredentialsInput, signal?: AbortSignal) => Promise<{
@@ -51,6 +50,5 @@ declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOpti
     host: string;
   }[]>;
 };
-//#endregion
 export { createOauthClient };
 //# sourceMappingURL=index.d.cts.map

package/dist/oauth/index.d.ts

@@ -1,6 +1,5 @@
-import { n as ClientInitOptions } from "../types-CeqZuOEC.js";
-import { a as CredentialInput, c as GetCredentialsInput, r as CreateCredentialInput } from "../types-BjwbzqJd.js";
-//#region src/clients/oauth/oauthClient.d.ts
+import { n as ClientInitOptions } from "../types-DUpVIuk7.js";
+import { a as CredentialInput, c as GetCredentialsInput, r as CreateCredentialInput } from "../types-D6lre27s.js";
 declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOptions) => {
   healthCheck: (signal?: AbortSignal) => Promise<unknown>;
   getCredentials: (scope: GetCredentialsInput, signal?: AbortSignal) => Promise<{
@@ -51,6 +50,5 @@ declare const createOauthClient: ({ baseUrl, middlewares, auth }: ClientInitOpti
     host: string;
   }[]>;
 };
-//#endregion
 export { createOauthClient };
 //# sourceMappingURL=index.d.ts.map

package/dist/oauth/index.js

@@ -1,2 +1 @@
-import { t as createOauthClient } from "../oauth-GXmZ9agP.js";
-export { createOauthClient };
+export { t as createOauthClient } from "../oauth-ByCdISsV.js";

package/dist/oauth/types.d.cts

@@ -1,2 +1,2 @@
-import { a as CredentialInput, c as GetCredentialsInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as OrganizationConnection, t as ComponentPath } from "../types-CTS2NSIb.cjs";
+import { a as CredentialInput, c as GetCredentialsInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as OrganizationConnection, t as ComponentPath } from "../types-YpOm4yXE.cjs";
 export { ComponentPath, CreateCredentialBody, CreateCredentialInput, Credential, CredentialInput, CredentialPath, type GetCredentialsInput, OrganizationConnection };

package/dist/oauth/types.d.ts

@@ -1,2 +1,2 @@
-import { a as CredentialInput, c as GetCredentialsInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as OrganizationConnection, t as ComponentPath } from "../types-BjwbzqJd.js";
+import { a as CredentialInput, c as GetCredentialsInput, i as Credential, n as CreateCredentialBody, o as CredentialPath, r as CreateCredentialInput, s as OrganizationConnection, t as ComponentPath } from "../types-D6lre27s.js";
 export { ComponentPath, CreateCredentialBody, CreateCredentialInput, Credential, CredentialInput, CredentialPath, type GetCredentialsInput, OrganizationConnection };

package/dist/{oauth-DKZPuUlt.cjs → oauth-B5Biqz21.cjs}

@@ -1,8 +1,8 @@
-const require_createFetchClient = require("./createFetchClient-lZ_93Yrb.cjs");
-const require_createGenericFetchClient = require("./createGenericFetchClient-MOx97wi-.cjs");
-const require_createOpenapiFetchClient = require("./createOpenapiFetchClient-DHYo_k3t.cjs");
-const require_auth = require("./auth-C8Pjl0Mu.cjs");
-//#region src/clients/oauth/utils.ts
+const require_createFetchClient = require("./createFetchClient-DEkUH662.cjs");
+const require_createGenericFetchClient = require("./createGenericFetchClient-2oU-PXVo.cjs");
+const require_createOpenapiFetchClient = require("./createOpenapiFetchClient-DL9w7vU-.cjs");
+const require_auth = require("./auth-CvB4MukT.cjs");
+// src/clients/oauth/utils.ts
 /**
 * The credentials payload rides one of two fields, and only one of them is in the current spec:
 *
@@ -18,8 +18,7 @@ const getScopedBranchId = (scope) => {
 		case "branched": return scope.branchId;
 	}
 };
-//#endregion
-//#region src/clients/oauth/oauthClient.ts
+// src/clients/oauth/oauthClient.ts
 const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 	const client = require_createOpenapiFetchClient.createOpenapiFetchClient({
 		baseUrl,
@@ -88,7 +87,6 @@ const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 		getOrganizationConnections
 	};
 };
-//#endregion
 Object.defineProperty(exports, "createOauthClient", {
 	enumerable: true,
 	get: function() {
@@ -96,4 +94,4 @@ Object.defineProperty(exports, "createOauthClient", {
 	}
 });
 
-//# sourceMappingURL=oauth-DKZPuUlt.cjs.map
+//# sourceMappingURL=oauth-B5Biqz21.cjs.map

package/dist/{oauth-DKZPuUlt.cjs.map → oauth-B5Biqz21.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"oauth-DKZPuUlt.cjs","names":["createOpenapiFetchClient","createAuthHeaders","createGenericFetchClient","isApiError","HttpStatus"],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  /**\n   * The GitHub connections of the project's organization; any project member's token may read them.\n   *\n   * - Empty when the organization has none.\n   * - A listed connection does not guarantee a repository: the App installation must cover it.\n   */\n  const getOrganizationConnections = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/organization-credentials/connections', {}, { signal });\n    return data.connections;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n    getOrganizationConnections,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;;;;;;;CAQA,MAAM,6BAA6B,OAAO,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,yCAAyC,CAAC,GAAG,EAAE,OAAO,CAAC;EACzF,OAAO,KAAK;CACd;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"oauth-B5Biqz21.cjs","names":["createOpenapiFetchClient","createAuthHeaders","createGenericFetchClient","isApiError","HttpStatus"],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  /**\n   * The GitHub connections of the project's organization; any project member's token may read them.\n   *\n   * - Empty when the organization has none.\n   * - A listed connection does not guarantee a repository: the App installation must cover it.\n   */\n  const getOrganizationConnections = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/organization-credentials/connections', {}, { signal });\n    return data.connections;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n    getOrganizationConnections,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAASA,iCAAAA,yBAAgC;EAC7C;EACA;EACA,SAASC,aAAAA,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAIC,0BAAAA,WAAW,KAAK,KAAK,MAAM,SAAS,WAAWC,0BAAAA,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;;;;;;;CAQA,MAAM,6BAA6B,OAAO,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,yCAAyC,CAAC,GAAG,EAAE,OAAO,CAAC;EACzF,OAAO,KAAK;CACd;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/{oauth-GXmZ9agP.js → oauth-ByCdISsV.js}

@@ -1,8 +1,8 @@
-import { g as HttpStatus, r as isApiError } from "./createFetchClient-CkHdS_IG.js";
-import { t as createGenericFetchClient } from "./createGenericFetchClient-CQdNcPC3.js";
-import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-DXiMv9WL.js";
-import { t as createAuthHeaders } from "./auth-4coY1uwo.js";
-//#region src/clients/oauth/utils.ts
+import { g as HttpStatus, r as isApiError } from "./createFetchClient-DlGCbltR.js";
+import { t as createGenericFetchClient } from "./createGenericFetchClient-wGxemBwR.js";
+import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-Bhz62MUE.js";
+import { t as createAuthHeaders } from "./auth-DYfQMQCs.js";
+// src/clients/oauth/utils.ts
 /**
 * The credentials payload rides one of two fields, and only one of them is in the current spec:
 *
@@ -18,8 +18,7 @@ const getScopedBranchId = (scope) => {
 		case "branched": return scope.branchId;
 	}
 };
-//#endregion
-//#region src/clients/oauth/oauthClient.ts
+// src/clients/oauth/oauthClient.ts
 const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 	const client = createOpenapiFetchClient({
 		baseUrl,
@@ -88,7 +87,6 @@ const createOauthClient = ({ baseUrl, middlewares, auth }) => {
 		getOrganizationConnections
 	};
 };
-//#endregion
 export { createOauthClient as t };
 
-//# sourceMappingURL=oauth-GXmZ9agP.js.map
+//# sourceMappingURL=oauth-ByCdISsV.js.map

package/dist/{oauth-GXmZ9agP.js.map → oauth-ByCdISsV.js.map}

@@ -1 +1 @@
-{"version":3,"file":"oauth-GXmZ9agP.js","names":[],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  /**\n   * The GitHub connections of the project's organization; any project member's token may read them.\n   *\n   * - Empty when the organization has none.\n   * - A listed connection does not guarantee a repository: the App installation must cover it.\n   */\n  const getOrganizationConnections = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/organization-credentials/connections', {}, { signal });\n    return data.connections;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n    getOrganizationConnections,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;;;;;;;CAQA,MAAM,6BAA6B,OAAO,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,yCAAyC,CAAC,GAAG,EAAE,OAAO,CAAC;EACzF,OAAO,KAAK;CACd;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}
+{"version":3,"file":"oauth-ByCdISsV.js","names":[],"sources":["../src/clients/oauth/utils.ts","../src/clients/oauth/oauthClient.ts"],"sourcesContent":["/**\n * Which credentials to list:\n *\n * - `all` — the whole project: branch-scoped and branchless alike.\n * - `branchless` — only what is tied to no branch at all, not even the default one.\n * - `branched` — only the branch whose id it carries.\n *\n * Discriminated on `scope`, not on `branchId` being present: a `string | 'all' | 'branchless'` union\n * collapses to `string`, so a mistyped scope would silently become a branch-id filter.\n */\nexport type GetCredentialsInput =\n  | { scope: 'all'; componentId?: string }\n  | { scope: 'branchless'; componentId?: string }\n  | { scope: 'branched'; branchId: string; componentId?: string };\n\n/**\n * All three scopes ride the one `branchId` query parameter:\n *\n * - `all` → omitted, which the service reads as no filter.\n * - `branchless` → the literal string `'null'`, which it reads as `branchId IS NULL`.\n * - `branched` → the branch id itself.\n */\nexport type CredentialsDataFormat = 'encrypted' | 'plain';\n\n/**\n * The credentials payload rides one of two fields, and only one of them is in the current spec:\n *\n * - `encrypted` — `#data`, the payload serialized to a string. The `#` marks it for the service to\n *   encrypt at rest.\n * - `plain` — `data`, the payload as an object. Only services predating the spec accept it.\n */\nexport const encodeCredentialsData = (\n  data: Record<string, unknown>,\n  format: CredentialsDataFormat,\n) => (format === 'encrypted' ? { '#data': JSON.stringify(data) } : { data });\n\nexport const getScopedBranchId = (scope: GetCredentialsInput) => {\n  switch (scope.scope) {\n    case 'all':\n      return undefined;\n    case 'branchless':\n      return 'null';\n    case 'branched':\n      return scope.branchId;\n  }\n};\n","import { createGenericFetchClient, createOpenapiFetchClient, isApiError } from '../../fetchClient';\nimport { HttpStatus } from '../../internal';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type { CreateCredentialInput, CredentialInput } from './types';\nimport type { CredentialsDataFormat, GetCredentialsInput } from './utils';\nimport { encodeCredentialsData, getScopedBranchId } from './utils';\n\nexport const createOauthClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n  const genericClient = createGenericFetchClient({ baseUrl, middlewares });\n\n  const getCredentials = async (scope: GetCredentialsInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials',\n      { query: { branchId: getScopedBranchId(scope), componentId: scope.componentId } },\n      { signal },\n    );\n    return data;\n  };\n\n  const getCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n    return data;\n  };\n\n  const createCredential = async (\n    { componentId, data, ...rest }: CreateCredentialInput,\n    signal?: AbortSignal,\n  ) => {\n    const post = (format: CredentialsDataFormat) =>\n      client\n        .post(\n          '/credentials/{componentId}',\n          {\n            path: { componentId },\n            // The plain shape predates the spec, so no schema can describe it. It borrows the\n            // encrypted field's type to get past the generated body — the one assertion here.\n            body: { ...rest, ...(encodeCredentialsData(data, format) as { '#data': string }) },\n          },\n          { signal },\n        )\n        .then((response) => response.data);\n\n    try {\n      return await post('plain');\n    } catch (error) {\n      if (isApiError(error) && error.response.status === HttpStatus.UNPROCESSABLE_ENTITY) {\n        return post('encrypted');\n      }\n      throw error;\n    }\n  };\n\n  const deleteCredential = async ({ componentId, id }: CredentialInput, signal?: AbortSignal) => {\n    await client.delete(\n      '/credentials/{componentId}/{name}',\n      { path: { componentId, name: id } },\n      { signal },\n    );\n  };\n\n  /**\n   * The GitHub connections of the project's organization; any project member's token may read them.\n   *\n   * - Empty when the organization has none.\n   * - A listed connection does not guarantee a repository: the App installation must cover it.\n   */\n  const getOrganizationConnections = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/organization-credentials/connections', {}, { signal });\n    return data.connections;\n  };\n\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    getCredentials,\n    getCredential,\n    createCredential,\n    deleteCredential,\n    getOrganizationConnections,\n  };\n};\n"],"mappings":";;;;;;;;;;;;AA+BA,MAAa,yBACX,MACA,WACI,WAAW,cAAc,EAAE,SAAS,KAAK,UAAU,IAAI,EAAE,IAAI,EAAE,KAAK;AAE1E,MAAa,qBAAqB,UAA+B;CAC/D,QAAQ,MAAM,OAAd;EACE,KAAK,OACH;EACF,KAAK,cACH,OAAO;EACT,KAAK,YACH,OAAO,MAAM;CACjB;AACF;;ACnCA,MAAa,qBAAqB,EAAE,SAAS,aAAa,WAA8B;CACtF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAAE;EAAS;CAAY,CAAC;CAEvE,MAAM,iBAAiB,OAAO,OAA4B,WAAyB;EACjF,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,gBACA,EAAE,OAAO;GAAE,UAAU,kBAAkB,KAAK;GAAG,aAAa,MAAM;EAAY,EAAE,GAChF,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,mBAAmB,OACvB,EAAE,aAAa,MAAM,GAAG,QACxB,WACG;EACH,MAAM,QAAQ,WACZ,OACG,KACC,8BACA;GACE,MAAM,EAAE,YAAY;GAGpB,MAAM;IAAE,GAAG;IAAM,GAAI,sBAAsB,MAAM,MAAM;GAA0B;EACnF,GACA,EAAE,OAAO,CACX,CAAC,CACA,MAAM,aAAa,SAAS,IAAI;EAErC,IAAI;GACF,OAAO,MAAM,KAAK,OAAO;EAC3B,SAAS,OAAO;GACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,sBAC5D,OAAO,KAAK,WAAW;GAEzB,MAAM;EACR;CACF;CAEA,MAAM,mBAAmB,OAAO,EAAE,aAAa,MAAuB,WAAyB;EAC7F,MAAM,OAAO,OACX,qCACA,EAAE,MAAM;GAAE;GAAa,MAAM;EAAG,EAAE,GAClC,EAAE,OAAO,CACX;CACF;;;;;;;CAQA,MAAM,6BAA6B,OAAO,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,yCAAyC,CAAC,GAAG,EAAE,OAAO,CAAC;EACzF,OAAO,KAAK;CACd;CAEA,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/omnisearch/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DHYo_k3t.cjs");
-const require_auth = require("../auth-C8Pjl0Mu.cjs");
-//#region src/clients/omnisearch/omnisearchClient.ts
+const require_createOpenapiFetchClient = require("../createOpenapiFetchClient-DL9w7vU-.cjs");
+const require_auth = require("../auth-CvB4MukT.cjs");
+// src/clients/omnisearch/omnisearchClient.ts
 /**
 * Omnisearch — data lineage.
 *
@@ -35,7 +35,6 @@ const createOmnisearchClient = ({ baseUrl, middlewares, auth }) => {
 		getTablesLineage
 	};
 };
-//#endregion
 exports.createOmnisearchClient = createOmnisearchClient;
 
 //# sourceMappingURL=index.cjs.map

package/dist/omnisearch/index.d.cts

@@ -1,6 +1,5 @@
-import { n as ClientInitOptions } from "../types-O6XM48J8.cjs";
-import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-vvw_H7wp.cjs";
-//#region src/clients/omnisearch/omnisearchClient.d.ts
+import { n as ClientInitOptions } from "../types-Dryq2GGE.cjs";
+import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-CcGp6O3B.cjs";
 /**
  * Omnisearch — data lineage.
  *
@@ -17,6 +16,5 @@ declare const createOmnisearchClient: ({ baseUrl, middlewares, auth }: ClientIni
   }>;
   getTablesLineage: (query: GetTablesLineageQuery, signal?: AbortSignal) => Promise<TablesLineageResponse>;
 };
-//#endregion
 export { createOmnisearchClient };
 //# sourceMappingURL=index.d.cts.map

package/dist/omnisearch/index.d.ts

@@ -1,6 +1,5 @@
-import { n as ClientInitOptions } from "../types-CeqZuOEC.js";
-import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-D9ZKJYZk.js";
-//#region src/clients/omnisearch/omnisearchClient.d.ts
+import { n as ClientInitOptions } from "../types-DUpVIuk7.js";
+import { h as components, m as TablesLineageResponse, n as GetTablesLineageQuery, t as GetProjectsLineageQuery } from "../types-wYrC2boT.js";
 /**
  * Omnisearch — data lineage.
  *
@@ -17,6 +16,5 @@ declare const createOmnisearchClient: ({ baseUrl, middlewares, auth }: ClientIni
   }>;
   getTablesLineage: (query: GetTablesLineageQuery, signal?: AbortSignal) => Promise<TablesLineageResponse>;
 };
-//#endregion
 export { createOmnisearchClient };
 //# sourceMappingURL=index.d.ts.map

package/dist/omnisearch/index.js

@@ -1,6 +1,6 @@
-import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-DXiMv9WL.js";
-import { t as createAuthHeaders } from "../auth-4coY1uwo.js";
-//#region src/clients/omnisearch/omnisearchClient.ts
+import { t as createOpenapiFetchClient } from "../createOpenapiFetchClient-Bhz62MUE.js";
+import { t as createAuthHeaders } from "../auth-DYfQMQCs.js";
+// src/clients/omnisearch/omnisearchClient.ts
 /**
 * Omnisearch — data lineage.
 *
@@ -34,7 +34,6 @@ const createOmnisearchClient = ({ baseUrl, middlewares, auth }) => {
 		getTablesLineage
 	};
 };
-//#endregion
 export { createOmnisearchClient };
 
 //# sourceMappingURL=index.js.map

package/dist/omnisearch/types.d.cts

@@ -1,2 +1,2 @@
-import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-vvw_H7wp.cjs";
+import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-CcGp6O3B.cjs";
 export { GetProjectsLineageQuery, GetTablesLineageQuery, LineageBucket, LineageConfiguration, LineageMetadata, LineageProject, LineageSource, LineageTable, ProjectLineageRelation, ProjectsLineage, ProjectsLineageResponse, TableLineageRelation, TablesLineage, TablesLineageResponse };

package/dist/omnisearch/types.d.ts

@@ -1,2 +1,2 @@
-import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-D9ZKJYZk.js";
+import { a as LineageMetadata, c as LineageTable, d as ProjectsLineageResponse, f as TableLineageRelation, i as LineageConfiguration, l as ProjectLineageRelation, m as TablesLineageResponse, n as GetTablesLineageQuery, o as LineageProject, p as TablesLineage, r as LineageBucket, s as LineageSource, t as GetProjectsLineageQuery, u as ProjectsLineage } from "../types-wYrC2boT.js";
 export { GetProjectsLineageQuery, GetTablesLineageQuery, LineageBucket, LineageConfiguration, LineageMetadata, LineageProject, LineageSource, LineageTable, ProjectLineageRelation, ProjectsLineage, ProjectsLineageResponse, TableLineageRelation, TablesLineage, TablesLineageResponse };