@keboola/api-client 55.0.0 → 57.0.0

package/dist/apps-DDcguJ1i.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apps-DDcguJ1i.js","names":["z","record"],"sources":["../src/domain/appLogs.ts","../src/clients/apps/appsClient.ts"],"sourcesContent":["import dayjs from 'dayjs';\nimport utc from 'dayjs/plugin/utc.js';\nimport * as z from 'zod';\n\nimport {\n  type ApiResponse,\n  HttpHeader,\n  isApiError,\n  parseContentDispositionHeader,\n} from '../fetchClient';\nimport { HttpStatus } from '../internal';\nimport { isPlainObject } from '../utils/isPlainObject';\n\n/**\n * Reading a data app's container output, as the `apps` client serves it.\n *\n * - The tail contract lives here: how a line is parsed, where the next poll resumes, and that an\n *   idle app is not an error.\n */\n\ndayjs.extend(utc);\n\nexport type LogEntry = {\n  timestamp: string | null;\n  message: string;\n};\n\nconst DEFAULT_LOGS_FILE_NAME = 'logs.txt';\n\nconst ISO_TIMESTAMP_REGEX = /\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z/;\nconst LEADING_ISO_TIMESTAMP_REGEX = /^(\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(?:\\.\\d+)?Z)\\s?/;\n\n/** The error envelope sandboxes-service returns; the tail branches on its `code`. */\nconst TailError = z.object({\n  context: z.object({\n    code: z.string(),\n  }),\n});\n\n/**\n * There is nothing to read right now, reported per scope: an app whose serving member is asleep\n * answers `apps.appNotRunning`, a deployment that isn't running answers `apps.deploymentNotRunning` —\n * the normal state of a staged or retired one, since a deployment only runs while it is production.\n */\nconst NOTHING_RUNNING_CODES = new Set(['apps.appNotRunning', 'apps.deploymentNotRunning']);\n\nconst tryParseJsonl = (line: string): LogEntry | null => {\n  if (!line.startsWith('{')) return null;\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(line);\n  } catch {\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null) return null;\n\n  const record = parsed as Record<string, unknown>;\n  const { timestamp, message } = record;\n\n  if (typeof timestamp !== 'string' || typeof message !== 'string') return null;\n\n  return {\n    timestamp,\n    message,\n  };\n};\n\nconst parsePlainTextLine = (line: string): LogEntry => {\n  const match = line.match(LEADING_ISO_TIMESTAMP_REGEX);\n  if (match) {\n    return { timestamp: match[1]!, message: line.slice(match[0].length) };\n  }\n  return { timestamp: null, message: line };\n};\n\nexport const parseLogLine = (line: string): LogEntry =>\n  tryParseJsonl(line) ?? parsePlainTextLine(line);\n\nconst toLogEntryFromObject = (raw: Record<string, unknown>): LogEntry | null => {\n  if (typeof raw.message !== 'string') return null;\n  return {\n    timestamp: typeof raw.timestamp === 'string' ? raw.timestamp : null,\n    message: raw.message,\n  };\n};\n\nexport const parseLogLines = (raw: unknown): LogEntry[] => {\n  if (raw === null || raw === undefined || raw === '') return [];\n\n  if (Array.isArray(raw)) {\n    return raw.flatMap((item) => {\n      if (typeof item === 'string') return item === '' ? [] : [parseLogLine(item)];\n      if (isPlainObject(item)) {\n        const entry = toLogEntryFromObject(item);\n        return entry ? [entry] : [];\n      }\n      return [];\n    });\n  }\n\n  if (isPlainObject(raw)) {\n    const entry = toLogEntryFromObject(raw);\n    return entry ? [entry] : [];\n  }\n\n  if (typeof raw !== 'string') return [];\n\n  const lines = raw.split('\\n');\n  const entries: LogEntry[] = [];\n  for (const line of lines) {\n    if (line === '') continue;\n    entries.push(parseLogLine(line));\n  }\n  return entries;\n};\n\nexport const lastLogTimestamp = (entries: LogEntry[]) => {\n  for (let i = entries.length - 1; i >= 0; i--) {\n    const entry = entries[i];\n    if (!entry) continue;\n    if (entry.timestamp) return entry.timestamp;\n\n    // A plain-text line may carry a timestamp embedded mid-line (legacy format).\n    const match = entry.message.match(ISO_TIMESTAMP_REGEX);\n    if (match) return match[0];\n  }\n  return null;\n};\n\nconst calculateNextLogTimestamp = (timestamp: string | null) => {\n  if (timestamp === null) return null;\n  return dayjs(timestamp).utc().add(1, 'second').utc().format();\n};\n\n/**\n * The tail plus the timestamp a follow-up poll resumes from. A {@link NOTHING_RUNNING_CODES} `400`\n * reads as an empty tail rather than an error — an idle app between visits, or a deployment that is\n * not the one currently serving, has no logs to stream and that is its normal condition.\n */\nexport const readAppLogsTail = async (fetchTail: () => Promise<ApiResponse<string>>) => {\n  try {\n    const { data } = await fetchTail();\n    const entries = parseLogLines(data);\n\n    return {\n      entries,\n      nextLogTimestamp: calculateNextLogTimestamp(lastLogTimestamp(entries)),\n    };\n  } catch (error) {\n    if (isApiError(error) && error.response.status === HttpStatus.BAD_REQUEST) {\n      const code = TailError.safeParse(error.data).data?.context?.code;\n      if (code !== undefined && NOTHING_RUNNING_CODES.has(code)) {\n        return { entries: [], nextLogTimestamp: null };\n      }\n    }\n    throw error;\n  }\n};\n\n/** The whole log as a file download, named by the service's `Content-Disposition` where it sets one. */\nexport const readAppLogsDownload = async (fetchLogs: () => Promise<ApiResponse<string>>) => {\n  const { data, response } = await fetchLogs();\n  const contentDisposition = parseContentDispositionHeader(\n    response.headers.get(HttpHeader.CONTENT_DISPOSITION),\n  );\n\n  return {\n    logs: data,\n    fileName: contentDisposition.filename ?? DEFAULT_LOGS_FILE_NAME,\n  };\n};\n","import { readAppLogsDownload, readAppLogsTail } from '../../domain/appLogs';\nimport { createOpenapiFetchClient } from '../../fetchClient';\nimport { createAuthHeaders } from '../auth';\nimport type { ClientInitOptions } from '../types';\n\nimport type { paths } from './__generated__/schema';\nimport type {\n  App,\n  AppId,\n  CreateAppBody,\n  CreateCredentialBody,\n  CreateDeploymentBody,\n  CreateDraftBody,\n  CredentialId,\n  DeploymentId,\n  DraftId,\n  GetAppGitEntrypointsQuery,\n  GetAppRunsQuery,\n  GetAppsQuery,\n  GetDeploymentsQuery,\n  GetDraftsQuery,\n  GetLogsTailQuery,\n  RunId,\n} from './types';\n\n/**\n * Options every write takes.\n *\n * - No `idempotencyKey`: the service ignores it, so a retried create may duplicate.\n */\ntype WriteOptions = {\n  signal?: AbortSignal;\n};\n\ntype LogsTailOptions = {\n  query?: GetLogsTailQuery;\n  signal?: AbortSignal;\n};\n\n/**\n * `/v2` App Deployments — data apps and their immutable deployment history.\n *\n * - `/v1` of the same service is the `dataScience` client.\n * - `baseUrl` must already end in `/v2`; `createServiceClients` composes it.\n * - `POST /apps/{appId}/activity` is absent: it needs a Manage token with `apps:proxy` scope.\n */\nexport const createAppsClient = ({ baseUrl, middlewares, auth }: ClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    headers: createAuthHeaders(auth),\n  });\n\n  const writeOptions = ({ signal }: WriteOptions) => ({ signal });\n\n  /** Service metadata — the `/v2` surface has no `/health-check`. */\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/', {}, { signal });\n\n    return data;\n  };\n\n  const getApps = async (query: GetAppsQuery = {}, signal?: AbortSignal) => {\n    const { data } = await client.get('/apps', { query }, { signal });\n\n    return data;\n  };\n\n  const getApp = async (appId: AppId, signal?: AbortSignal) => {\n    const { data } = await client.get('/apps/{appId}', { path: { appId } }, { signal });\n\n    return data;\n  };\n\n  /**\n   * Reserves the app and its Storage configuration only.\n   *\n   * - `parameters` and `authorization.app_proxy` are written afterwards via the Storage API.\n   */\n  const createApp = async (body: CreateAppBody, options: WriteOptions = {}) => {\n    const { data } = await client.post('/apps', { body }, writeOptions(options));\n\n    return data;\n  };\n\n  const deleteApp = async (appId: AppId, signal?: AbortSignal) => {\n    await client.delete('/apps/{appId}', { path: { appId } }, { signal });\n  };\n\n  /** Drops production routing (URL 404s). A no-op returns the app unchanged, not an error. */\n  const unpublishApp = async (appId: AppId, signal?: AbortSignal): Promise<App> => {\n    const { data } = await client.post('/apps/{appId}/unpublish', { path: { appId } }, { signal });\n\n    return data;\n  };\n\n  /** Sleeps the app now; the next visitor wakes it, as after an idle auto-suspend. */\n  const suspendApp = async (appId: AppId, signal?: AbortSignal): Promise<App> => {\n    const { data } = await client.post('/apps/{appId}/suspend', { path: { appId } }, { signal });\n\n    return data;\n  };\n\n  /** Wakes the app now and clears a failure stop (`disabled`). A stopped app comes back `starting`. */\n  const resumeApp = async (appId: AppId, signal?: AbortSignal): Promise<App> => {\n    const { data } = await client.post('/apps/{appId}/resume', { path: { appId } }, { signal });\n\n    return data;\n  };\n\n  /** `null` until the first deployment or {@link resetAppPassword} mints one. */\n  const getAppPassword = async (appId: AppId, signal?: AbortSignal) => {\n    const { data } = await client.get('/apps/{appId}/password', { path: { appId } }, { signal });\n\n    return data;\n  };\n\n  /** Replaces any existing password. Read it back with {@link getAppPassword}. */\n  const resetAppPassword = async (appId: AppId, signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/apps/{appId}/password/reset',\n      { path: { appId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /** App-wide runs, newest first — where a failed deployment's `failureReason` lives. */\n  const getAppRuns = async (appId: AppId, query: GetAppRunsQuery = {}, signal?: AbortSignal) => {\n    const { data } = await client.get('/apps/{appId}/runs', { path: { appId }, query }, { signal });\n\n    return data;\n  };\n\n  const getAppRun = async (appId: AppId, runId: RunId, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/apps/{appId}/runs/{runId}',\n      { path: { appId, runId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /**\n   * Deploys the current config version as a new immutable deployment.\n   *\n   * - Promotes it unless `body.promote` is `false`; a staged release never runs until promoted.\n   * - Returns synchronously; readiness does not.\n   */\n  const createDeployment = async (\n    appId: AppId,\n    body?: CreateDeploymentBody,\n    options: WriteOptions = {},\n  ) => {\n    const { data } = await client.post(\n      '/apps/{appId}/deployments',\n      { path: { appId }, body },\n      writeOptions(options),\n    );\n\n    return data;\n  };\n\n  /** Live deployment history, newest first; `query.archived: true` lists the deleted ones instead. */\n  const getDeployments = async (\n    appId: AppId,\n    query: GetDeploymentsQuery = {},\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/apps/{appId}/deployments',\n      { path: { appId }, query },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const getDeployment = async (appId: AppId, deploymentId: DeploymentId, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/apps/{appId}/deployments/{deploymentId}',\n      { path: { appId, deploymentId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /** Deletes the deployment, keeping its row as `archived`. `409` while it is production. */\n  const deleteDeployment = async (\n    appId: AppId,\n    deploymentId: DeploymentId,\n    signal?: AbortSignal,\n  ) => {\n    await client.delete(\n      '/apps/{appId}/deployments/{deploymentId}',\n      { path: { appId, deploymentId } },\n      { signal },\n    );\n  };\n\n  /**\n   * Makes this deployment production; also the rollback.\n   *\n   * - Routing switches once it serves; `desired`/`actualDeploymentId` differ until then.\n   */\n  const promoteDeployment = async (\n    appId: AppId,\n    deploymentId: DeploymentId,\n    signal?: AbortSignal,\n  ): Promise<App> => {\n    const { data } = await client.post(\n      '/apps/{appId}/deployments/{deploymentId}/promote',\n      { path: { appId, deploymentId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /**\n   * Starts a draft that live-syncs an existing branch of the app's Git repository on its own host.\n   *\n   * - `400` when `body.gitBranch` does not exist; a draft never creates a branch.\n   * - `409` until the app has been deployed once.\n   * - Not idempotent: a retried request starts a second draft.\n   */\n  const createDraft = async (appId: AppId, body: CreateDraftBody, options: WriteOptions = {}) => {\n    const { data } = await client.post(\n      '/apps/{appId}/drafts',\n      { path: { appId }, body },\n      writeOptions(options),\n    );\n\n    return data;\n  };\n\n  /** Live drafts, newest first. */\n  const getDrafts = async (appId: AppId, query: GetDraftsQuery = {}, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/apps/{appId}/drafts',\n      { path: { appId }, query },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const getDraft = async (appId: AppId, draftId: DraftId, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/apps/{appId}/drafts/{draftId}',\n      { path: { appId, draftId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /** Stops and removes the draft; its Git branch is untouched. */\n  const deleteDraft = async (appId: AppId, draftId: DraftId, signal?: AbortSignal) => {\n    await client.delete('/apps/{appId}/drafts/{draftId}', { path: { appId, draftId } }, { signal });\n  };\n\n  /**\n   * A 60-second link that opens the draft's own `url` without the app's authentication.\n   *\n   * - `400` while the draft has no `url` yet; retry once it reports one.\n   * - `503` on a stack without preview links.\n   */\n  const createDraftPreviewLink = async (appId: AppId, draftId: DraftId, signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/apps/{appId}/drafts/{draftId}/preview-link',\n      { path: { appId, draftId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /** Serving container's log. `query.since` and `query.lines` are mutually exclusive. */\n  const getAppLogsTail = (appId: AppId, { query, signal }: LogsTailOptions = {}) =>\n    readAppLogsTail(() =>\n      client.get('/apps/{appId}/logs/tail', { path: { appId }, query }, { signal }),\n    );\n\n  const getAppLogsDownload = (appId: AppId, signal?: AbortSignal) =>\n    readAppLogsDownload(() =>\n      client.get('/apps/{appId}/logs/download', { path: { appId } }, { signal }),\n    );\n\n  const getDeploymentLogsTail = (\n    appId: AppId,\n    deploymentId: DeploymentId,\n    { query, signal }: LogsTailOptions = {},\n  ) =>\n    readAppLogsTail(() =>\n      client.get(\n        '/apps/{appId}/deployments/{deploymentId}/logs/tail',\n        { path: { appId, deploymentId }, query },\n        { signal },\n      ),\n    );\n\n  const getDeploymentLogsDownload = (\n    appId: AppId,\n    deploymentId: DeploymentId,\n    signal?: AbortSignal,\n  ) =>\n    readAppLogsDownload(() =>\n      client.get(\n        '/apps/{appId}/deployments/{deploymentId}/logs/download',\n        { path: { appId, deploymentId } },\n        { signal },\n      ),\n    );\n\n  /** `409` when the app has no Git repository configured. */\n  const getAppGitRepo = async (appId: AppId, signal?: AbortSignal) => {\n    const { data } = await client.get('/apps/{appId}/git-repo', { path: { appId } }, { signal });\n\n    return data;\n  };\n\n  /**\n   * The branches of the app's repository, read with the credentials in its saved configuration.\n   *\n   * - The request carries no credentials: changes to the Git settings count only once saved.\n   * - `409` when the app has no Git repository, or the saved credentials cannot read it.\n   */\n  const getAppGitRepoBranches = async (appId: AppId, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/apps/{appId}/git-repo/branches',\n      { path: { appId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /**\n   * The Streamlit entrypoint candidates in the repository root, read like `getAppGitRepoBranches`.\n   *\n   * - `query.ref` omitted means the saved branch, then the repository default.\n   */\n  const getAppGitRepoEntrypoints = async (\n    appId: AppId,\n    query: GetAppGitEntrypointsQuery = {},\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/apps/{appId}/git-repo/entrypoints',\n      { path: { appId }, query },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /** Per app, not per deployment. */\n  const getAppGitRepoCredentials = async (appId: AppId, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/apps/{appId}/git-repo/credentials',\n      { path: { appId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  const getAppGitRepoCredential = async (\n    appId: AppId,\n    credentialId: CredentialId,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.get(\n      '/apps/{appId}/git-repo/credentials/{credentialId}',\n      { path: { appId, credentialId } },\n      { signal },\n    );\n\n    return data;\n  };\n\n  /** An `http_token` credential's `secret` is returned only here. */\n  const createAppGitRepoCredential = async (\n    appId: AppId,\n    body: CreateCredentialBody,\n    options: WriteOptions = {},\n  ) => {\n    const { data } = await client.post(\n      '/apps/{appId}/git-repo/credentials',\n      { path: { appId }, body },\n      writeOptions(options),\n    );\n\n    return data;\n  };\n\n  const deleteAppGitRepoCredential = async (\n    appId: AppId,\n    credentialId: CredentialId,\n    signal?: AbortSignal,\n  ) => {\n    await client.delete(\n      '/apps/{appId}/git-repo/credentials/{credentialId}',\n      { path: { appId, credentialId } },\n      { signal },\n    );\n  };\n\n  return {\n    healthCheck,\n    getApps,\n    getApp,\n    createApp,\n    deleteApp,\n    unpublishApp,\n    suspendApp,\n    resumeApp,\n    getAppPassword,\n    resetAppPassword,\n    getAppRuns,\n    getAppRun,\n    createDeployment,\n    getDeployments,\n    getDeployment,\n    deleteDeployment,\n    promoteDeployment,\n    createDraft,\n    getDrafts,\n    getDraft,\n    deleteDraft,\n    createDraftPreviewLink,\n    getAppLogsTail,\n    getAppLogsDownload,\n    getDeploymentLogsTail,\n    getDeploymentLogsDownload,\n    getAppGitRepo,\n    getAppGitRepoBranches,\n    getAppGitRepoEntrypoints,\n    getAppGitRepoCredentials,\n    getAppGitRepoCredential,\n    createAppGitRepoCredential,\n    deleteAppGitRepoCredential,\n  };\n};\n"],"mappings":";;;;;;;;;;;;;;AAoBA,MAAM,OAAO,GAAG;AAOhB,MAAM,yBAAyB;AAE/B,MAAM,sBAAsB;AAC5B,MAAM,8BAA8B;;AAGpC,MAAM,YAAYA,IAAE,OAAO,EACzB,SAASA,IAAE,OAAO,EAChB,MAAMA,IAAE,OAAO,EACjB,CAAC,EACH,CAAC;;;;;;AAOD,MAAM,wCAAwB,IAAI,IAAI,CAAC,sBAAsB,2BAA2B,CAAC;AAEzF,MAAM,iBAAiB,SAAkC;CACvD,IAAI,CAAC,KAAK,WAAW,GAAG,GAAG,OAAO;CAElC,IAAI;CACJ,IAAI;EACF,SAAS,KAAK,MAAM,IAAI;CAC1B,QAAQ;EACN,OAAO;CACT;CAEA,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO;CAG1D,MAAM,EAAE,WAAW,YAAYC;CAE/B,IAAI,OAAO,cAAc,YAAY,OAAO,YAAY,UAAU,OAAO;CAEzE,OAAO;EACL;EACA;CACF;AACF;AAEA,MAAM,sBAAsB,SAA2B;CACrD,MAAM,QAAQ,KAAK,MAAM,2BAA2B;CACpD,IAAI,OACF,OAAO;EAAE,WAAW,MAAM;EAAK,SAAS,KAAK,MAAM,MAAM,EAAE,CAAC,MAAM;CAAE;CAEtE,OAAO;EAAE,WAAW;EAAM,SAAS;CAAK;AAC1C;AAEA,MAAa,gBAAgB,SAC3B,cAAc,IAAI,KAAK,mBAAmB,IAAI;AAEhD,MAAM,wBAAwB,QAAkD;CAC9E,IAAI,OAAO,IAAI,YAAY,UAAU,OAAO;CAC5C,OAAO;EACL,WAAW,OAAO,IAAI,cAAc,WAAW,IAAI,YAAY;EAC/D,SAAS,IAAI;CACf;AACF;AAEA,MAAa,iBAAiB,QAA6B;CACzD,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,IAAI,OAAO,CAAC;CAE7D,IAAI,MAAM,QAAQ,GAAG,GACnB,OAAO,IAAI,SAAS,SAAS;EAC3B,IAAI,OAAO,SAAS,UAAU,OAAO,SAAS,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC;EAC3E,IAAI,cAAc,IAAI,GAAG;GACvB,MAAM,QAAQ,qBAAqB,IAAI;GACvC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;EAC5B;EACA,OAAO,CAAC;CACV,CAAC;CAGH,IAAI,cAAc,GAAG,GAAG;EACtB,MAAM,QAAQ,qBAAqB,GAAG;EACtC,OAAO,QAAQ,CAAC,KAAK,IAAI,CAAC;CAC5B;CAEA,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CAErC,MAAM,QAAQ,IAAI,MAAM,IAAI;CAC5B,MAAM,UAAsB,CAAC;CAC7B,KAAK,MAAM,QAAQ,OAAO;EACxB,IAAI,SAAS,IAAI;EACjB,QAAQ,KAAK,aAAa,IAAI,CAAC;CACjC;CACA,OAAO;AACT;AAEA,MAAa,oBAAoB,YAAwB;CACvD,KAAK,IAAI,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;EAC5C,MAAM,QAAQ,QAAQ;EACtB,IAAI,CAAC,OAAO;EACZ,IAAI,MAAM,WAAW,OAAO,MAAM;EAGlC,MAAM,QAAQ,MAAM,QAAQ,MAAM,mBAAmB;EACrD,IAAI,OAAO,OAAO,MAAM;CAC1B;CACA,OAAO;AACT;AAEA,MAAM,6BAA6B,cAA6B;CAC9D,IAAI,cAAc,MAAM,OAAO;CAC/B,OAAO,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;AAC9D;;;;;;AAOA,MAAa,kBAAkB,OAAO,cAAkD;CACtF,IAAI;EACF,MAAM,EAAE,SAAS,MAAM,UAAU;EACjC,MAAM,UAAU,cAAc,IAAI;EAElC,OAAO;GACL;GACA,kBAAkB,0BAA0B,iBAAiB,OAAO,CAAC;EACvE;CACF,SAAS,OAAO;EACd,IAAI,WAAW,KAAK,KAAK,MAAM,SAAS,WAAW,WAAW,aAAa;GACzE,MAAM,OAAO,UAAU,UAAU,MAAM,IAAI,CAAC,CAAC,MAAM,SAAS;GAC5D,IAAI,SAAS,KAAA,KAAa,sBAAsB,IAAI,IAAI,GACtD,OAAO;IAAE,SAAS,CAAC;IAAG,kBAAkB;GAAK;EAEjD;EACA,MAAM;CACR;AACF;;AAGA,MAAa,sBAAsB,OAAO,cAAkD;CAC1F,MAAM,EAAE,MAAM,aAAa,MAAM,UAAU;CAK3C,OAAO;EACL,MAAM;EACN,UANyB,8BACzB,SAAS,QAAQ,IAAI,WAAW,mBAAmB,CAKxB,CAAC,CAAC,YAAY;CAC3C;AACF;;;;;;;;;AC9HA,MAAa,oBAAoB,EAAE,SAAS,aAAa,WAA8B;CACrF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,SAAS,kBAAkB,IAAI;CACjC,CAAC;CAED,MAAM,gBAAgB,EAAE,cAA4B,EAAE,OAAO;;CAG7D,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;EAErD,OAAO;CACT;CAEA,MAAM,UAAU,OAAO,QAAsB,CAAC,GAAG,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,SAAS,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAEhE,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,OAAc,WAAyB;EAC3D,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;EAElF,OAAO;CACT;;;;;;CAOA,MAAM,YAAY,OAAO,MAAqB,UAAwB,CAAC,MAAM;EAC3E,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,SAAS,EAAE,KAAK,GAAG,aAAa,OAAO,CAAC;EAE3E,OAAO;CACT;CAEA,MAAM,YAAY,OAAO,OAAc,WAAyB;EAC9D,MAAM,OAAO,OAAO,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;CACtE;;CAGA,MAAM,eAAe,OAAO,OAAc,WAAuC;EAC/E,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;EAE7F,OAAO;CACT;;CAGA,MAAM,aAAa,OAAO,OAAc,WAAuC;EAC7E,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,yBAAyB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;EAE3F,OAAO;CACT;;CAGA,MAAM,YAAY,OAAO,OAAc,WAAuC;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;EAE1F,OAAO;CACT;;CAGA,MAAM,iBAAiB,OAAO,OAAc,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;EAE3F,OAAO;CACT;;CAGA,MAAM,mBAAmB,OAAO,OAAc,WAAyB;EACrE,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,gCACA,EAAE,MAAM,EAAE,MAAM,EAAE,GAClB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;CAGA,MAAM,aAAa,OAAO,OAAc,QAAyB,CAAC,GAAG,WAAyB;EAC5F,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,sBAAsB;GAAE,MAAM,EAAE,MAAM;GAAG;EAAM,GAAG,EAAE,OAAO,CAAC;EAE9F,OAAO;CACT;CAEA,MAAM,YAAY,OAAO,OAAc,OAAc,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,8BACA,EAAE,MAAM;GAAE;GAAO;EAAM,EAAE,GACzB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;;;;;;CAQA,MAAM,mBAAmB,OACvB,OACA,MACA,UAAwB,CAAC,MACtB;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,6BACA;GAAE,MAAM,EAAE,MAAM;GAAG;EAAK,GACxB,aAAa,OAAO,CACtB;EAEA,OAAO;CACT;;CAGA,MAAM,iBAAiB,OACrB,OACA,QAA6B,CAAC,GAC9B,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA;GAAE,MAAM,EAAE,MAAM;GAAG;EAAM,GACzB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,gBAAgB,OAAO,OAAc,cAA4B,WAAyB;EAC9F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,4CACA,EAAE,MAAM;GAAE;GAAO;EAAa,EAAE,GAChC,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;CAGA,MAAM,mBAAmB,OACvB,OACA,cACA,WACG;EACH,MAAM,OAAO,OACX,4CACA,EAAE,MAAM;GAAE;GAAO;EAAa,EAAE,GAChC,EAAE,OAAO,CACX;CACF;;;;;;CAOA,MAAM,oBAAoB,OACxB,OACA,cACA,WACiB;EACjB,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,oDACA,EAAE,MAAM;GAAE;GAAO;EAAa,EAAE,GAChC,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;;;;;;;CASA,MAAM,cAAc,OAAO,OAAc,MAAuB,UAAwB,CAAC,MAAM;EAC7F,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,wBACA;GAAE,MAAM,EAAE,MAAM;GAAG;EAAK,GACxB,aAAa,OAAO,CACtB;EAEA,OAAO;CACT;;CAGA,MAAM,YAAY,OAAO,OAAc,QAAwB,CAAC,GAAG,WAAyB;EAC1F,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,wBACA;GAAE,MAAM,EAAE,MAAM;GAAG;EAAM,GACzB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,WAAW,OAAO,OAAc,SAAkB,WAAyB;EAC/E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,kCACA,EAAE,MAAM;GAAE;GAAO;EAAQ,EAAE,GAC3B,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;CAGA,MAAM,cAAc,OAAO,OAAc,SAAkB,WAAyB;EAClF,MAAM,OAAO,OAAO,kCAAkC,EAAE,MAAM;GAAE;GAAO;EAAQ,EAAE,GAAG,EAAE,OAAO,CAAC;CAChG;;;;;;;CAQA,MAAM,yBAAyB,OAAO,OAAc,SAAkB,WAAyB;EAC7F,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,+CACA,EAAE,MAAM;GAAE;GAAO;EAAQ,EAAE,GAC3B,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;CAGA,MAAM,kBAAkB,OAAc,EAAE,OAAO,WAA4B,CAAC,MAC1E,sBACE,OAAO,IAAI,2BAA2B;EAAE,MAAM,EAAE,MAAM;EAAG;CAAM,GAAG,EAAE,OAAO,CAAC,CAC9E;CAEF,MAAM,sBAAsB,OAAc,WACxC,0BACE,OAAO,IAAI,+BAA+B,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAC3E;CAEF,MAAM,yBACJ,OACA,cACA,EAAE,OAAO,WAA4B,CAAC,MAEtC,sBACE,OAAO,IACL,sDACA;EAAE,MAAM;GAAE;GAAO;EAAa;EAAG;CAAM,GACvC,EAAE,OAAO,CACX,CACF;CAEF,MAAM,6BACJ,OACA,cACA,WAEA,0BACE,OAAO,IACL,0DACA,EAAE,MAAM;EAAE;EAAO;CAAa,EAAE,GAChC,EAAE,OAAO,CACX,CACF;;CAGF,MAAM,gBAAgB,OAAO,OAAc,WAAyB;EAClE,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;EAE3F,OAAO;CACT;;;;;;;CAQA,MAAM,wBAAwB,OAAO,OAAc,WAAyB;EAC1E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,mCACA,EAAE,MAAM,EAAE,MAAM,EAAE,GAClB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;;;;;CAOA,MAAM,2BAA2B,OAC/B,OACA,QAAmC,CAAC,GACpC,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,sCACA;GAAE,MAAM,EAAE,MAAM;GAAG;EAAM,GACzB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;CAGA,MAAM,2BAA2B,OAAO,OAAc,WAAyB;EAC7E,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,sCACA,EAAE,MAAM,EAAE,MAAM,EAAE,GAClB,EAAE,OAAO,CACX;EAEA,OAAO;CACT;CAEA,MAAM,0BAA0B,OAC9B,OACA,cACA,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,qDACA,EAAE,MAAM;GAAE;GAAO;EAAa,EAAE,GAChC,EAAE,OAAO,CACX;EAEA,OAAO;CACT;;CAGA,MAAM,6BAA6B,OACjC,OACA,MACA,UAAwB,CAAC,MACtB;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,sCACA;GAAE,MAAM,EAAE,MAAM;GAAG;EAAK,GACxB,aAAa,OAAO,CACtB;EAEA,OAAO;CACT;CAEA,MAAM,6BAA6B,OACjC,OACA,cACA,WACG;EACH,MAAM,OAAO,OACX,qDACA,EAAE,MAAM;GAAE;GAAO;EAAa,EAAE,GAChC,EAAE,OAAO,CACX;CACF;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/assets/index.d.cts

@@ -1,4 +1,4 @@
-import { n as ClientInitOptions } from "../types-B4ezB18r.cjs";
+import { n as ClientInitOptions } from "../types-CbM2MApW.cjs";
 declare const createAssetsClient: ({ baseUrl, middlewares }: Omit<ClientInitOptions, 'auth'>) => {
   getPublishedChangelogPosts: (signal?: AbortSignal) => Promise<{
     title: string;

package/dist/assets/index.d.ts

@@ -1,4 +1,4 @@
-import { n as ClientInitOptions } from "../types-Tg3euEN_.js";
+import { n as ClientInitOptions } from "../types-CP8-CssY.js";
 declare const createAssetsClient: ({ baseUrl, middlewares }: Omit<ClientInitOptions, 'auth'>) => {
   getPublishedChangelogPosts: (signal?: AbortSignal) => Promise<{
     title: string;

package/dist/auth/index.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_authClient = require("../authClient-DspK50e7.cjs");
+const require_authClient = require("../authClient-C3KG9hXw.cjs");
 exports.MFA_METHOD = require_authClient.MFA_METHOD;
 exports.apiLoginResultSchema = require_authClient.apiLoginResultSchema;
 exports.apiLoginSuccessSchema = require_authClient.apiLoginSuccessSchema;

package/dist/auth/index.d.cts

@@ -1,2 +1,2 @@
-import { A as PasswordInput, C as ApiLoginSuccess, D as LoginUser, E as LoginResultFor, F as mfaChallengeSchema, I as oidcInputSchema, L as passwordInputSchema, M as apiLoginSuccessSchema, N as browserLoginResultSchema, O as MfaChallenge, P as browserLoginSuccessSchema, S as ApiLoginResult, T as BrowserLoginSuccess, _ as MfaWebauthnInput, a as RefreshTokenInput, b as mfaWebauthnInputSchema, c as ChangePasswordInput, d as changeInputSchema, f as resetInputSchema, g as MfaMethod, h as MfaCodeInput, i as RefreshSessionInput, j as apiLoginResultSchema, k as OidcInput, l as ResetInput, m as MFA_METHOD, n as AuthOpenApiFetchClient, o as refreshSessionInputSchema, p as resetRequestInputSchema, r as createAuthClient, s as refreshTokenInputSchema, t as AuthClientInitOptions, u as ResetRequestInput, v as TotpVerifyInput, w as BrowserLoginResult, x as totpVerifyInputSchema, y as mfaCodeInputSchema } from "../authClient-NBi0pqD5.cjs";
+import { A as PasswordInput, C as ApiLoginSuccess, D as LoginUser, E as LoginResultFor, F as mfaChallengeSchema, I as oidcInputSchema, L as passwordInputSchema, M as apiLoginSuccessSchema, N as browserLoginResultSchema, O as MfaChallenge, P as browserLoginSuccessSchema, S as ApiLoginResult, T as BrowserLoginSuccess, _ as MfaWebauthnInput, a as RefreshTokenInput, b as mfaWebauthnInputSchema, c as ChangePasswordInput, d as changeInputSchema, f as resetInputSchema, g as MfaMethod, h as MfaCodeInput, i as RefreshSessionInput, j as apiLoginResultSchema, k as OidcInput, l as ResetInput, m as MFA_METHOD, n as AuthOpenApiFetchClient, o as refreshSessionInputSchema, p as resetRequestInputSchema, r as createAuthClient, s as refreshTokenInputSchema, t as AuthClientInitOptions, u as ResetRequestInput, v as TotpVerifyInput, w as BrowserLoginResult, x as totpVerifyInputSchema, y as mfaCodeInputSchema } from "../authClient-UKeopxZZ.cjs";
 export { ApiLoginResult, ApiLoginSuccess, AuthClientInitOptions, AuthOpenApiFetchClient, BrowserLoginResult, BrowserLoginSuccess, ChangePasswordInput, LoginResultFor, LoginUser, MFA_METHOD, MfaChallenge, MfaCodeInput, MfaMethod, MfaWebauthnInput, OidcInput, PasswordInput, RefreshSessionInput, RefreshTokenInput, ResetInput, ResetRequestInput, TotpVerifyInput, apiLoginResultSchema, apiLoginSuccessSchema, browserLoginResultSchema, browserLoginSuccessSchema, changeInputSchema, createAuthClient, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema, passwordInputSchema, refreshSessionInputSchema, refreshTokenInputSchema, resetInputSchema, resetRequestInputSchema, totpVerifyInputSchema };

package/dist/auth/index.d.ts

@@ -1,2 +1,2 @@
-import { A as PasswordInput, C as ApiLoginSuccess, D as LoginUser, E as LoginResultFor, F as mfaChallengeSchema, I as oidcInputSchema, L as passwordInputSchema, M as apiLoginSuccessSchema, N as browserLoginResultSchema, O as MfaChallenge, P as browserLoginSuccessSchema, S as ApiLoginResult, T as BrowserLoginSuccess, _ as MfaWebauthnInput, a as RefreshTokenInput, b as mfaWebauthnInputSchema, c as ChangePasswordInput, d as changeInputSchema, f as resetInputSchema, g as MfaMethod, h as MfaCodeInput, i as RefreshSessionInput, j as apiLoginResultSchema, k as OidcInput, l as ResetInput, m as MFA_METHOD, n as AuthOpenApiFetchClient, o as refreshSessionInputSchema, p as resetRequestInputSchema, r as createAuthClient, s as refreshTokenInputSchema, t as AuthClientInitOptions, u as ResetRequestInput, v as TotpVerifyInput, w as BrowserLoginResult, x as totpVerifyInputSchema, y as mfaCodeInputSchema } from "../authClient-ij_Rm2Yn.js";
+import { A as PasswordInput, C as ApiLoginSuccess, D as LoginUser, E as LoginResultFor, F as mfaChallengeSchema, I as oidcInputSchema, L as passwordInputSchema, M as apiLoginSuccessSchema, N as browserLoginResultSchema, O as MfaChallenge, P as browserLoginSuccessSchema, S as ApiLoginResult, T as BrowserLoginSuccess, _ as MfaWebauthnInput, a as RefreshTokenInput, b as mfaWebauthnInputSchema, c as ChangePasswordInput, d as changeInputSchema, f as resetInputSchema, g as MfaMethod, h as MfaCodeInput, i as RefreshSessionInput, j as apiLoginResultSchema, k as OidcInput, l as ResetInput, m as MFA_METHOD, n as AuthOpenApiFetchClient, o as refreshSessionInputSchema, p as resetRequestInputSchema, r as createAuthClient, s as refreshTokenInputSchema, t as AuthClientInitOptions, u as ResetRequestInput, v as TotpVerifyInput, w as BrowserLoginResult, x as totpVerifyInputSchema, y as mfaCodeInputSchema } from "../authClient-CbWpMmdX.js";
 export { ApiLoginResult, ApiLoginSuccess, AuthClientInitOptions, AuthOpenApiFetchClient, BrowserLoginResult, BrowserLoginSuccess, ChangePasswordInput, LoginResultFor, LoginUser, MFA_METHOD, MfaChallenge, MfaCodeInput, MfaMethod, MfaWebauthnInput, OidcInput, PasswordInput, RefreshSessionInput, RefreshTokenInput, ResetInput, ResetRequestInput, TotpVerifyInput, apiLoginResultSchema, apiLoginSuccessSchema, browserLoginResultSchema, browserLoginSuccessSchema, changeInputSchema, createAuthClient, mfaChallengeSchema, mfaCodeInputSchema, mfaWebauthnInputSchema, oidcInputSchema, passwordInputSchema, refreshSessionInputSchema, refreshTokenInputSchema, resetInputSchema, resetRequestInputSchema, totpVerifyInputSchema };

package/dist/auth/index.js

@@ -1 +1 @@
-export { s as MFA_METHOD, p as apiLoginResultSchema, m as apiLoginSuccessSchema, h as browserLoginResultSchema, g as browserLoginSuccessSchema, i as changeInputSchema, t as createAuthClient, _ as mfaChallengeSchema, c as mfaCodeInputSchema, l as mfaWebauthnInputSchema, v as oidcInputSchema, y as passwordInputSchema, n as refreshSessionInputSchema, r as refreshTokenInputSchema, a as resetInputSchema, o as resetRequestInputSchema, u as totpVerifyInputSchema } from "../authClient-BM4L8XEN.js";
+export { s as MFA_METHOD, d as apiLoginResultSchema, f as apiLoginSuccessSchema, p as browserLoginResultSchema, m as browserLoginSuccessSchema, i as changeInputSchema, t as createAuthClient, h as mfaChallengeSchema, c as mfaCodeInputSchema, l as mfaWebauthnInputSchema, g as oidcInputSchema, _ as passwordInputSchema, n as refreshSessionInputSchema, r as refreshTokenInputSchema, a as resetInputSchema, o as resetRequestInputSchema, u as totpVerifyInputSchema } from "../authClient-BKGpJI5L.js";

package/dist/auth/types.d.cts

@@ -1,2 +1,2 @@
-import { $ as CreateDeviceAuthorizationBody, A as PatScopeInput, B as GetMeMaintainersResult, C as GetPkceTokenResult, D as ExchangePatBodyRaw, E as CreatePatResult, F as TotpVerifyResult, G as MeMaintainer, H as GetMeOrganizationsResult, I as VerifyMfaBody, J as MeResult, K as MeOrganization, L as VerifyMfaResult, M as DisableTotpPath, N as RegenerateRecoveryCodesResult, O as ExchangePatInput, P as TotpSetupResult, Q as ApproveDeviceAuthorizationResult, R as VerifyMfaType, S as GetPkceTokenBody, T as CreatePatInput, U as GetMeProjectsQuery, V as GetMeOrganizationsQuery, W as GetMeProjectsResult, X as LoginBody, Y as MeUser, Z as ApproveDeviceAuthorizationBody, _ as RevokeSessionPath, a as RemoveWebauthnInput, b as InitiateSamlBody, c as IntrospectTokenResult, d as RefreshTokenResult, et as CreateDeviceAuthorizationResult, f as RevokeTokenBody, g as SudoResult, h as SudoChallengeResult, i as RegisterWebauthnResult, j as RevokePatPath, k as ListPatsResult, l as RefreshTokenBody, m as SudoBodyRaw, n as RegisterWebauthnInput, nt as GetDeviceAuthorizationTokenResult, o as RemoveWebauthnPath, p as SudoBody, q as MeProject, r as RegisterWebauthnOptionsResult, s as RemoveWebauthnQuery, t as ListWebauthnCredentialsResult, tt as GetDeviceAuthorizationTokenBody, u as RefreshTokenPartialBody, v as AssertSamlBody, w as CreatePatBodyRaw, x as InitiateSamlResult, y as AssertSamlResult, z as GetMeMaintainersQuery } from "../types-C5B3Pfob.cjs";
-export { ApproveDeviceAuthorizationBody, ApproveDeviceAuthorizationResult, AssertSamlBody, AssertSamlResult, CreateDeviceAuthorizationBody, CreateDeviceAuthorizationResult, CreatePatBodyRaw, CreatePatInput, CreatePatResult, DisableTotpPath, ExchangePatBodyRaw, ExchangePatInput, GetDeviceAuthorizationTokenBody, GetDeviceAuthorizationTokenResult, GetMeMaintainersQuery, GetMeMaintainersResult, GetMeOrganizationsQuery, GetMeOrganizationsResult, GetMeProjectsQuery, GetMeProjectsResult, GetPkceTokenBody, GetPkceTokenResult, InitiateSamlBody, InitiateSamlResult, IntrospectTokenResult, ListPatsResult, ListWebauthnCredentialsResult, LoginBody, MeMaintainer, MeOrganization, MeProject, MeResult, MeUser, PatScopeInput, RefreshTokenBody, RefreshTokenPartialBody, RefreshTokenResult, RegenerateRecoveryCodesResult, RegisterWebauthnInput, RegisterWebauthnOptionsResult, RegisterWebauthnResult, RemoveWebauthnInput, RemoveWebauthnPath, RemoveWebauthnQuery, RevokePatPath, RevokeSessionPath, RevokeTokenBody, SudoBody, SudoBodyRaw, SudoChallengeResult, SudoResult, TotpSetupResult, TotpVerifyResult, VerifyMfaBody, VerifyMfaResult, VerifyMfaType };
+import { $ as ApproveDeviceAuthorizationBody, A as PatScopeInput, B as GetMeMaintainersResult, C as GetPkceTokenResult, D as ExchangePatBodyRaw, E as CreatePatResult, F as TotpVerifyResult, G as MeMaintainer, H as GetMeOrganizationsResult, I as VerifyMfaBody, J as MeResult, K as MeOrganization, L as VerifyMfaResult, M as DisableTotpPath, N as RegenerateRecoveryCodesResult, O as ExchangePatInput, P as TotpSetupResult, Q as LoginBody, R as VerifyMfaType, S as GetPkceTokenBody, T as CreatePatInput, U as GetMeProjectsQuery, V as GetMeOrganizationsQuery, W as GetMeProjectsResult, X as UpdateMeInput, Y as MeUser, Z as UpdateMeResult, _ as RevokeSessionPath, a as RemoveWebauthnInput, b as InitiateSamlBody, c as IntrospectTokenResult, d as RefreshTokenResult, et as ApproveDeviceAuthorizationResult, f as RevokeTokenBody, g as SudoResult, h as SudoChallengeResult, i as RegisterWebauthnResult, it as GetDeviceAuthorizationTokenResult, j as RevokePatPath, k as ListPatsResult, l as RefreshTokenBody, m as SudoBodyRaw, n as RegisterWebauthnInput, nt as CreateDeviceAuthorizationResult, o as RemoveWebauthnPath, p as SudoBody, q as MeProject, r as RegisterWebauthnOptionsResult, rt as GetDeviceAuthorizationTokenBody, s as RemoveWebauthnQuery, t as ListWebauthnCredentialsResult, tt as CreateDeviceAuthorizationBody, u as RefreshTokenPartialBody, v as AssertSamlBody, w as CreatePatBodyRaw, x as InitiateSamlResult, y as AssertSamlResult, z as GetMeMaintainersQuery } from "../types-D3L3CqKl.cjs";
+export { ApproveDeviceAuthorizationBody, ApproveDeviceAuthorizationResult, AssertSamlBody, AssertSamlResult, CreateDeviceAuthorizationBody, CreateDeviceAuthorizationResult, CreatePatBodyRaw, CreatePatInput, CreatePatResult, DisableTotpPath, ExchangePatBodyRaw, ExchangePatInput, GetDeviceAuthorizationTokenBody, GetDeviceAuthorizationTokenResult, GetMeMaintainersQuery, GetMeMaintainersResult, GetMeOrganizationsQuery, GetMeOrganizationsResult, GetMeProjectsQuery, GetMeProjectsResult, GetPkceTokenBody, GetPkceTokenResult, InitiateSamlBody, InitiateSamlResult, IntrospectTokenResult, ListPatsResult, ListWebauthnCredentialsResult, LoginBody, MeMaintainer, MeOrganization, MeProject, MeResult, MeUser, PatScopeInput, RefreshTokenBody, RefreshTokenPartialBody, RefreshTokenResult, RegenerateRecoveryCodesResult, RegisterWebauthnInput, RegisterWebauthnOptionsResult, RegisterWebauthnResult, RemoveWebauthnInput, RemoveWebauthnPath, RemoveWebauthnQuery, RevokePatPath, RevokeSessionPath, RevokeTokenBody, SudoBody, SudoBodyRaw, SudoChallengeResult, SudoResult, TotpSetupResult, TotpVerifyResult, UpdateMeInput, UpdateMeResult, VerifyMfaBody, VerifyMfaResult, VerifyMfaType };

package/dist/auth/types.d.ts

@@ -1,2 +1,2 @@
-import { $ as CreateDeviceAuthorizationBody, A as PatScopeInput, B as GetMeMaintainersResult, C as GetPkceTokenResult, D as ExchangePatBodyRaw, E as CreatePatResult, F as TotpVerifyResult, G as MeMaintainer, H as GetMeOrganizationsResult, I as VerifyMfaBody, J as MeResult, K as MeOrganization, L as VerifyMfaResult, M as DisableTotpPath, N as RegenerateRecoveryCodesResult, O as ExchangePatInput, P as TotpSetupResult, Q as ApproveDeviceAuthorizationResult, R as VerifyMfaType, S as GetPkceTokenBody, T as CreatePatInput, U as GetMeProjectsQuery, V as GetMeOrganizationsQuery, W as GetMeProjectsResult, X as LoginBody, Y as MeUser, Z as ApproveDeviceAuthorizationBody, _ as RevokeSessionPath, a as RemoveWebauthnInput, b as InitiateSamlBody, c as IntrospectTokenResult, d as RefreshTokenResult, et as CreateDeviceAuthorizationResult, f as RevokeTokenBody, g as SudoResult, h as SudoChallengeResult, i as RegisterWebauthnResult, j as RevokePatPath, k as ListPatsResult, l as RefreshTokenBody, m as SudoBodyRaw, n as RegisterWebauthnInput, nt as GetDeviceAuthorizationTokenResult, o as RemoveWebauthnPath, p as SudoBody, q as MeProject, r as RegisterWebauthnOptionsResult, s as RemoveWebauthnQuery, t as ListWebauthnCredentialsResult, tt as GetDeviceAuthorizationTokenBody, u as RefreshTokenPartialBody, v as AssertSamlBody, w as CreatePatBodyRaw, x as InitiateSamlResult, y as AssertSamlResult, z as GetMeMaintainersQuery } from "../types-DjSjUKUl.js";
-export { ApproveDeviceAuthorizationBody, ApproveDeviceAuthorizationResult, AssertSamlBody, AssertSamlResult, CreateDeviceAuthorizationBody, CreateDeviceAuthorizationResult, CreatePatBodyRaw, CreatePatInput, CreatePatResult, DisableTotpPath, ExchangePatBodyRaw, ExchangePatInput, GetDeviceAuthorizationTokenBody, GetDeviceAuthorizationTokenResult, GetMeMaintainersQuery, GetMeMaintainersResult, GetMeOrganizationsQuery, GetMeOrganizationsResult, GetMeProjectsQuery, GetMeProjectsResult, GetPkceTokenBody, GetPkceTokenResult, InitiateSamlBody, InitiateSamlResult, IntrospectTokenResult, ListPatsResult, ListWebauthnCredentialsResult, LoginBody, MeMaintainer, MeOrganization, MeProject, MeResult, MeUser, PatScopeInput, RefreshTokenBody, RefreshTokenPartialBody, RefreshTokenResult, RegenerateRecoveryCodesResult, RegisterWebauthnInput, RegisterWebauthnOptionsResult, RegisterWebauthnResult, RemoveWebauthnInput, RemoveWebauthnPath, RemoveWebauthnQuery, RevokePatPath, RevokeSessionPath, RevokeTokenBody, SudoBody, SudoBodyRaw, SudoChallengeResult, SudoResult, TotpSetupResult, TotpVerifyResult, VerifyMfaBody, VerifyMfaResult, VerifyMfaType };
+import { $ as ApproveDeviceAuthorizationBody, A as PatScopeInput, B as GetMeMaintainersResult, C as GetPkceTokenResult, D as ExchangePatBodyRaw, E as CreatePatResult, F as TotpVerifyResult, G as MeMaintainer, H as GetMeOrganizationsResult, I as VerifyMfaBody, J as MeResult, K as MeOrganization, L as VerifyMfaResult, M as DisableTotpPath, N as RegenerateRecoveryCodesResult, O as ExchangePatInput, P as TotpSetupResult, Q as LoginBody, R as VerifyMfaType, S as GetPkceTokenBody, T as CreatePatInput, U as GetMeProjectsQuery, V as GetMeOrganizationsQuery, W as GetMeProjectsResult, X as UpdateMeInput, Y as MeUser, Z as UpdateMeResult, _ as RevokeSessionPath, a as RemoveWebauthnInput, b as InitiateSamlBody, c as IntrospectTokenResult, d as RefreshTokenResult, et as ApproveDeviceAuthorizationResult, f as RevokeTokenBody, g as SudoResult, h as SudoChallengeResult, i as RegisterWebauthnResult, it as GetDeviceAuthorizationTokenResult, j as RevokePatPath, k as ListPatsResult, l as RefreshTokenBody, m as SudoBodyRaw, n as RegisterWebauthnInput, nt as CreateDeviceAuthorizationResult, o as RemoveWebauthnPath, p as SudoBody, q as MeProject, r as RegisterWebauthnOptionsResult, rt as GetDeviceAuthorizationTokenBody, s as RemoveWebauthnQuery, t as ListWebauthnCredentialsResult, tt as CreateDeviceAuthorizationBody, u as RefreshTokenPartialBody, v as AssertSamlBody, w as CreatePatBodyRaw, x as InitiateSamlResult, y as AssertSamlResult, z as GetMeMaintainersQuery } from "../types-BBmS7-IS.js";
+export { ApproveDeviceAuthorizationBody, ApproveDeviceAuthorizationResult, AssertSamlBody, AssertSamlResult, CreateDeviceAuthorizationBody, CreateDeviceAuthorizationResult, CreatePatBodyRaw, CreatePatInput, CreatePatResult, DisableTotpPath, ExchangePatBodyRaw, ExchangePatInput, GetDeviceAuthorizationTokenBody, GetDeviceAuthorizationTokenResult, GetMeMaintainersQuery, GetMeMaintainersResult, GetMeOrganizationsQuery, GetMeOrganizationsResult, GetMeProjectsQuery, GetMeProjectsResult, GetPkceTokenBody, GetPkceTokenResult, InitiateSamlBody, InitiateSamlResult, IntrospectTokenResult, ListPatsResult, ListWebauthnCredentialsResult, LoginBody, MeMaintainer, MeOrganization, MeProject, MeResult, MeUser, PatScopeInput, RefreshTokenBody, RefreshTokenPartialBody, RefreshTokenResult, RegenerateRecoveryCodesResult, RegisterWebauthnInput, RegisterWebauthnOptionsResult, RegisterWebauthnResult, RemoveWebauthnInput, RemoveWebauthnPath, RemoveWebauthnQuery, RevokePatPath, RevokeSessionPath, RevokeTokenBody, SudoBody, SudoBodyRaw, SudoChallengeResult, SudoResult, TotpSetupResult, TotpVerifyResult, UpdateMeInput, UpdateMeResult, VerifyMfaBody, VerifyMfaResult, VerifyMfaType };

package/dist/{authClient-BM4L8XEN.js → authClient-BKGpJI5L.js}

@@ -1,8 +1,7 @@
 import { s as HttpHeader, v as KeboolaHttpHeader } from "./createFetchClient-Dc_ZMuq7.js";
-import { t as validateConnectionStatus } from "./validateConnectionStatus-DV00sDmu.js";
+import { n as collectByCursor, t as validateConnectionStatus } from "./validateConnectionStatus-DgJwuEy9.js";
 import { t as createGenericFetchClient } from "./createGenericFetchClient-Ba4E4T-Y.js";
 import { t as createOpenapiFetchClient } from "./createOpenapiFetchClient-DSk29o_s.js";
-import { t as createAbortError } from "./createAbortError-c6ekCpRy.js";
 import * as z$1 from "zod";
 // src/clients/auth/device/device.ts
 const createDevice = (client) => {
@@ -144,47 +143,6 @@ const createManageTokens = (client) => {
 		revoke
 	};
 };
-// src/utils/async/collectByCursor.ts
-/**
-* The `page[after]` cursor `links.next` carries; `undefined` on the last page.
-*
-* - Read from the link, not rebuilt from the last row, so the encoding stays the server's.
-* - Only the query is parsed, so a relative link works too.
-*/
-const nextCursorOf = (next) => {
-	if (next === null) return void 0;
-	const queryStart = next.indexOf("?");
-	if (queryStart === -1) return void 0;
-	const query = next.slice(queryStart + 1).split("#")[0];
-	return new URLSearchParams(query).get("page[after]") ?? void 0;
-};
-/**
-* Collects items from a cursor-paginated endpoint — up to `limit`, or all when it is omitted.
-*
-* - Calls `fetchFrom` sequentially with the cursor each `links.next` carries, and hands it `pageSize`.
-* - Ends on a `null` `links.next`, or on a link without a `page[after]`.
-* - A cursor seen before means the server is looping; the walk throws rather than spin.
-*/
-const collectByCursor = async ({ fetchFrom, pageSize, limit, signal }) => {
-	if (signal?.aborted) throw createAbortError(signal.reason);
-	if (limit !== void 0 && limit < 0) throw new Error("Invalid collectByCursor limit");
-	if (pageSize !== void 0 && pageSize < 1) throw new Error("Invalid collectByCursor pageSize");
-	const items = [];
-	if (limit === 0) return items;
-	let after;
-	const seen = /* @__PURE__ */ new Set();
-	do {
-		const page = await fetchFrom(after, pageSize, signal);
-		items.push(...page.data);
-		if (limit !== void 0 && items.length >= limit) return items.slice(0, limit);
-		after = nextCursorOf(page.links.next);
-		if (after !== void 0) {
-			if (seen.has(after)) throw new Error(`collectByCursor: links.next repeats the cursor ${after}`);
-			seen.add(after);
-		}
-	} while (after !== void 0);
-	return items;
-};
 // src/clients/auth/me/me.ts
 const PAGE_LIMIT = 200;
 /**
@@ -199,6 +157,16 @@ const createMe = (client) => {
 		const { data } = await client.get("/v1/auth/me", {}, { signal });
 		return data;
 	};
+	/**
+	* Renames the caller: `name` is the only field, trimmed by Connection (1-255 characters).
+	*
+	* - Resolves the updated `user`, the same shape as `get`'s; an unchanged name is a no-op.
+	* - `400 validation.failed` for an empty or too long name.
+	*/
+	const update = async (input, signal) => {
+		const { data } = await client.patch("/v1/auth/me", { body: input }, { signal });
+		return data;
+	};
 	const getOrganizations = async (query, signal) => {
 		const { data } = await client.get("/v1/auth/me/organizations", { query }, { signal });
 		return data;
@@ -231,6 +199,7 @@ const createMe = (client) => {
 	});
 	return {
 		get,
+		update,
 		getOrganizations,
 		getMaintainers,
 		getProjects,
@@ -574,6 +543,6 @@ const createAuthClient = ({ baseUrl, middlewares }) => {
 		webauthn: createWebauthn(client)
 	};
 };
-export { mfaChallengeSchema as _, resetInputSchema as a, mfaCodeInputSchema as c, collectByCursor as d, nextCursorOf as f, browserLoginSuccessSchema as g, browserLoginResultSchema as h, changeInputSchema as i, mfaWebauthnInputSchema as l, apiLoginSuccessSchema as m, refreshSessionInputSchema as n, resetRequestInputSchema as o, apiLoginResultSchema as p, refreshTokenInputSchema as r, MFA_METHOD as s, createAuthClient as t, totpVerifyInputSchema as u, oidcInputSchema as v, passwordInputSchema as y };
+export { passwordInputSchema as _, resetInputSchema as a, mfaCodeInputSchema as c, apiLoginResultSchema as d, apiLoginSuccessSchema as f, oidcInputSchema as g, mfaChallengeSchema as h, changeInputSchema as i, mfaWebauthnInputSchema as l, browserLoginSuccessSchema as m, refreshSessionInputSchema as n, resetRequestInputSchema as o, browserLoginResultSchema as p, refreshTokenInputSchema as r, MFA_METHOD as s, createAuthClient as t, totpVerifyInputSchema as u };
 
-//# sourceMappingURL=authClient-BM4L8XEN.js.map
+//# sourceMappingURL=authClient-BKGpJI5L.js.map

package/dist/authClient-BKGpJI5L.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authClient-BKGpJI5L.js","names":["z","z","z","z"],"sources":["../src/clients/auth/device/device.ts","../src/clients/auth/login/schemas.ts","../src/clients/auth/login/login.ts","../src/clients/auth/manageTokens/manageTokens.ts","../src/clients/auth/me/me.ts","../src/clients/auth/mfa/schemas.ts","../src/clients/auth/mfa/mfa.ts","../src/clients/auth/password/schemas.ts","../src/clients/auth/password/password.ts","../src/clients/auth/pat/pat.ts","../src/clients/auth/pkce/pkce.ts","../src/clients/auth/saml/saml.ts","../src/clients/auth/session/session.ts","../src/clients/auth/sudo/sudo.ts","../src/clients/auth/token/schemas.ts","../src/clients/auth/token/token.ts","../src/clients/auth/webauthn/webauthn.ts","../src/clients/auth/authClient.ts"],"sourcesContent":["import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  ApproveDeviceAuthorizationBody,\n  CreateDeviceAuthorizationBody,\n  GetDeviceAuthorizationTokenBody,\n} from './types';\n\nexport const createDevice = (client: AuthOpenApiFetchClient) => {\n  const create = async (body: CreateDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device', { body }, { signal });\n    return data;\n  };\n\n  const approve = async (body: ApproveDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/approve', { body }, { signal });\n    return data;\n  };\n\n  const getToken = async (body: GetDeviceAuthorizationTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/token', { body }, { signal });\n    return data;\n  };\n\n  return { create, approve, getToken };\n};\n","import * as z from 'zod';\n\nconst loginInputSchema = z.object({\n  /** Also mints a session cookie; `Origin` must be the stack app URL, else 403. */\n  browserMode: z.boolean().default(false),\n});\n\nexport const passwordInputSchema = loginInputSchema.extend({\n  email: z.email(),\n  password: z.string().min(1, 'Required'),\n});\n\nexport const oidcInputSchema = loginInputSchema.extend({\n  grantType: z.enum(['google', 'microsoft']),\n  idToken: z.string().min(1, 'Required'),\n});\n\n// No `browserMode`: as `boolean` it would widen the result; the method signature keeps the literal.\nexport type PasswordInput = Omit<z.input<typeof passwordInputSchema>, 'browserMode'>;\nexport type OidcInput = Omit<z.input<typeof oidcInputSchema>, 'browserMode'>;\n\nconst userSchema = z.object({\n  id: z.number(),\n  email: z.string(),\n  name: z.string(),\n});\n\n// The backend omits `mfaRequired` on success; the `false` default makes it the union discriminant.\nconst loginSuccessBaseSchema = z.object({\n  mfaRequired: z.literal(false).default(false),\n  accessToken: z.string(),\n  tokenType: z.string(),\n  expiresIn: z.number(),\n  user: userSchema,\n  sessionId: z.string(),\n});\n\nexport const apiLoginSuccessSchema = loginSuccessBaseSchema.extend({\n  refreshToken: z.string(),\n});\n\nexport const browserLoginSuccessSchema = loginSuccessBaseSchema.extend({\n  refreshToken: z.null().optional(),\n});\n\n/**\n * MFA-challenge shape.\n *\n * - `mfaType` / `allowedMethods` stay `string` so a new method still parses.\n * - `webauthn` is `PublicKeyCredentialRequestOptionsJSON`: present, `null` or absent (TOTP).\n * - `unknown`: a stricter shape failing would block every MFA sign-in; the ceremony validates.\n */\nexport const mfaChallengeSchema = z.object({\n  mfaRequired: z.literal(true),\n  mfaType: z.string(),\n  mfaToken: z.string(),\n  expiresIn: z.number(),\n  allowedMethods: z.array(z.string()),\n  // zod 4 `z.unknown()` is not implicitly optional; TOTP challenges omit the key.\n  webauthn: z.unknown().optional(),\n});\n\nexport const apiLoginResultSchema = z.union([apiLoginSuccessSchema, mfaChallengeSchema]);\nexport const browserLoginResultSchema = z.union([browserLoginSuccessSchema, mfaChallengeSchema]);\n\nexport type LoginUser = z.infer<typeof userSchema>;\nexport type MfaChallenge = z.infer<typeof mfaChallengeSchema>;\nexport type ApiLoginSuccess = z.infer<typeof apiLoginSuccessSchema>;\nexport type BrowserLoginSuccess = z.infer<typeof browserLoginSuccessSchema>;\nexport type ApiLoginResult = z.infer<typeof apiLoginResultSchema>;\nexport type BrowserLoginResult = z.infer<typeof browserLoginResultSchema>;\n\nexport type LoginResultFor<Browser extends boolean> = Browser extends true\n  ? BrowserLoginResult\n  : ApiLoginResult;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { LoginResultFor, OidcInput, PasswordInput } from './schemas';\nimport {\n  apiLoginResultSchema,\n  browserLoginResultSchema,\n  oidcInputSchema,\n  passwordInputSchema,\n} from './schemas';\nimport type { LoginBody } from './types';\n\nexport const createLogin = (client: AuthOpenApiFetchClient) => {\n  const _login = async (body: LoginBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/login', { body }, { signal });\n    return data;\n  };\n\n  /**\n   * Grants parse with our own schemas — the generated response type is unreliable.\n   *\n   * - `browserMode` picks the schema: only API mode carries a refresh token.\n   * - `const Browser` keeps the literal; a `boolean` flag widens the result to the union.\n   */\n  const withPassword = async <const Browser extends boolean = false>(\n    input: Omit<PasswordInput, 'browserMode'> & { browserMode?: Browser },\n    signal?: AbortSignal,\n  ) => {\n    const { email, password, browserMode } = passwordInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login(\n      { grantType: 'password', email, password, browserMode } as LoginBody,\n      signal,\n    );\n    const schema = browserMode ? browserLoginResultSchema : apiLoginResultSchema;\n    return schema.parse(data) as LoginResultFor<Browser>;\n  };\n\n  const withOidc = async <const Browser extends boolean = false>(\n    input: Omit<OidcInput, 'browserMode'> & { browserMode?: Browser },\n    signal?: AbortSignal,\n  ) => {\n    const { grantType, idToken, browserMode } = oidcInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login({ grantType, idToken, browserMode } as LoginBody, signal);\n    const schema = browserMode ? browserLoginResultSchema : apiLoginResultSchema;\n    return schema.parse(data) as LoginResultFor<Browser>;\n  };\n\n  // Unauthenticated. Carries the public OAuth client ids `withOidc` callers mint an id token with.\n  const methods = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/methods', {}, { signal });\n    return data;\n  };\n\n  return { withPassword, withOidc, methods };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { CreateManageTokenInput, RevokeManageTokenPath } from './types';\n\nexport const createManageTokens = (client: AuthOpenApiFetchClient) => {\n  /**\n   * Every Manage API token the caller owns, in two lists.\n   *\n   * - `tokens` — the ones the caller created by hand, newest first.\n   * - `sessionTokens` — the ones a browser sign-in minted, newest first.\n   * - A token carries `scopes: []` when it merely inherits the caller's own permissions.\n   */\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/manage-tokens', {}, { signal });\n    return data;\n  };\n\n  /**\n   * Mint a token and read its secret.\n   *\n   * - `token` in the response is returned this once and is unreadable afterwards.\n   * - `manageToken` is the same row the list endpoint returns.\n   * - Needs an active sudo window; without one the endpoint answers `403`.\n   * - Rate-limited per caller, answering `429` with `Retry-After`.\n   */\n  const create = async (input: CreateManageTokenInput, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/manage-tokens', { body: input }, { signal });\n    return data;\n  };\n\n  /** Deleting an id that is already gone answers `404` — the call is not idempotent. */\n  const revoke = async (id: RevokeManageTokenPath['id'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/manage-tokens/{id}', { path: { id } }, { signal });\n  };\n\n  return { getAll, create, revoke };\n};\n","import { collectByCursor } from '../../../utils';\nimport type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  GetMeMaintainersQuery,\n  GetMeOrganizationsQuery,\n  GetMeProjectsQuery,\n  UpdateMeInput,\n} from './types';\n\n// Connection's `app.auth.me.page.max_limit` (`config/packages/auth_me.yaml`); above it the request is a 400.\nconst PAGE_LIMIT = 200;\n\n/**\n * The signed-in user and the organizations, maintainers and projects they reach.\n *\n * - Session-only: a PAT bearer answers `403`.\n * - `404` while the stack's `programmatic-auth` feature is off.\n */\nexport const createMe = (client: AuthOpenApiFetchClient) => {\n  /** Each collection is a counted preview — its first page; the rest is behind the paged methods. */\n  const get = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me', {}, { signal });\n    return data;\n  };\n\n  /**\n   * Renames the caller: `name` is the only field, trimmed by Connection (1-255 characters).\n   *\n   * - Resolves the updated `user`, the same shape as `get`'s; an unchanged name is a no-op.\n   * - `400 validation.failed` for an empty or too long name.\n   */\n  const update = async (input: UpdateMeInput, signal?: AbortSignal) => {\n    const { data } = await client.patch('/v1/auth/me', { body: input }, { signal });\n    return data;\n  };\n\n  const getOrganizations = async (query?: GetMeOrganizationsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me/organizations', { query }, { signal });\n    return data;\n  };\n\n  const getMaintainers = async (query?: GetMeMaintainersQuery, signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me/maintainers', { query }, { signal });\n    return data;\n  };\n\n  const getProjects = async (query?: GetMeProjectsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me/projects', { query }, { signal });\n    return data;\n  };\n\n  /** Every organization the caller reaches, across all pages. */\n  const getAllOrganizations = (signal?: AbortSignal) =>\n    collectByCursor({\n      pageSize: PAGE_LIMIT,\n      signal,\n      fetchFrom: (after, limit, pageSignal) =>\n        getOrganizations({ page: { limit, after } }, pageSignal),\n    });\n\n  /** Every project the caller can open, across all pages. */\n  const getAllProjects = (signal?: AbortSignal) =>\n    collectByCursor({\n      pageSize: PAGE_LIMIT,\n      signal,\n      fetchFrom: (after, limit, pageSignal) => getProjects({ page: { limit, after } }, pageSignal),\n    });\n\n  return {\n    get,\n    update,\n    getOrganizations,\n    getMaintainers,\n    getProjects,\n    getAllOrganizations,\n    getAllProjects,\n  };\n};\n","import * as z from 'zod';\n\nimport type { VerifyMfaType } from './types';\n\n/**\n * Methods `POST /v1/auth/mfa` accepts, also reported in a challenge's `mfaType` / `allowedMethods`.\n *\n * - `satisfies` fails the build if the generated spec renames or drops one.\n * - A challenge may name a method not listed here, so the wire fields stay `string`.\n */\nexport const MFA_METHOD = {\n  totp: 'totp',\n  webauthn: 'webauthn',\n  recoveryCode: 'recovery_code',\n} as const satisfies Record<string, VerifyMfaType>;\n\nexport type MfaMethod = (typeof MFA_METHOD)[keyof typeof MFA_METHOD];\n\nexport const mfaCodeInputSchema = z.object({\n  mfaToken: z.string(),\n  type: z.enum([MFA_METHOD.totp, MFA_METHOD.recoveryCode]),\n  code: z.string().min(1, 'Required'),\n});\n\nexport const mfaWebauthnInputSchema = z.object({\n  mfaToken: z.string(),\n  assertion: z.string(),\n});\n\nexport const totpVerifyInputSchema = z.object({\n  code: z.string().min(1, 'Required'),\n  // Mirrors the backend default; the generated type wrongly marks it required.\n  revokeOtherSessions: z.boolean().default(false),\n});\n\nexport type MfaCodeInput = z.infer<typeof mfaCodeInputSchema>;\nexport type MfaWebauthnInput = z.infer<typeof mfaWebauthnInputSchema>;\nexport type TotpVerifyInput = z.input<typeof totpVerifyInputSchema>;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { MfaCodeInput, MfaWebauthnInput, TotpVerifyInput } from './schemas';\nimport {\n  MFA_METHOD,\n  mfaCodeInputSchema,\n  mfaWebauthnInputSchema,\n  totpVerifyInputSchema,\n} from './schemas';\nimport type { DisableTotpPath, VerifyMfaBody } from './types';\n\nexport const createMfa = (client: AuthOpenApiFetchClient) => {\n  const _verify = async (body: VerifyMfaBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa', { body }, { signal });\n    return data;\n  };\n\n  const verifyWithCode = async (input: MfaCodeInput, signal?: AbortSignal) => {\n    const { mfaToken, type, code } = mfaCodeInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type, code } as VerifyMfaBody, signal);\n  };\n\n  const verifyWithWebauthn = async (input: MfaWebauthnInput, signal?: AbortSignal) => {\n    const { mfaToken, assertion } = mfaWebauthnInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type: MFA_METHOD.webauthn, assertion } as VerifyMfaBody, signal);\n  };\n\n  const regenerateRecoveryCodes = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa/recovery-codes', {}, { signal });\n    return data;\n  };\n\n  // TOTP enrollment for the signed-in user (account MFA management). `setup` returns the shared\n  // secret + `otpauthUri` to render as a QR; `verify` confirms the first code and hands back the\n  // one-time recovery codes plus the new factor `id`; `disable` removes a factor by that `id`.\n  const totp = {\n    setup: async (signal?: AbortSignal) => {\n      const { data } = await client.post('/v1/auth/mfa/totp', {}, { signal });\n      return data;\n    },\n    verify: async (input: TotpVerifyInput, signal?: AbortSignal) => {\n      const body = totpVerifyInputSchema.parse(input);\n      const { data } = await client.post('/v1/auth/mfa/totp/verify', { body }, { signal });\n      return data;\n    },\n    disable: async (id: DisableTotpPath['id'], signal?: AbortSignal) => {\n      await client.delete('/v1/auth/mfa/totp/{id}', { path: { id } }, { signal });\n    },\n  };\n\n  return { verifyWithCode, verifyWithWebauthn, regenerateRecoveryCodes, totp };\n};\n","import * as z from 'zod';\n\nexport const resetRequestInputSchema = z.object({\n  email: z.email(),\n});\n\nexport const resetInputSchema = z.object({\n  // The single-use reset token (`kbc_pr_…`) delivered by e-mail.\n  token: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Defaults to true, matching the backend. Password policy is backend-enforced.\n  revokeSessions: z.boolean().default(true),\n});\n\nexport const changeInputSchema = z.object({\n  currentPassword: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Defaults to true on parse, so the SDK always sends it (matches the backend default).\n  revokeOtherSessions: z.boolean().default(true),\n});\n\nexport type ResetRequestInput = z.infer<typeof resetRequestInputSchema>;\n// `z.input`, not `z.infer`: callers may omit `revokeSessions`.\nexport type ResetInput = z.input<typeof resetInputSchema>;\n// `z.input`: callers may omit `revokeOtherSessions`.\nexport type ChangePasswordInput = z.input<typeof changeInputSchema>;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { ChangePasswordInput, ResetInput, ResetRequestInput } from './schemas';\nimport { changeInputSchema, resetInputSchema, resetRequestInputSchema } from './schemas';\n\nexport const createPassword = (client: AuthOpenApiFetchClient) => {\n  // Fire-and-forget from the caller's view: the backend always answers 202 and reveals nothing about\n  // whether the account exists. Resolves on 202; rejects on 429 (rate limited) or 400.\n  const resetRequest = async (input: ResetRequestInput, signal?: AbortSignal) => {\n    const body = resetRequestInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset-request', { body }, { signal });\n  };\n\n  // Applies the new password for the given reset token. Resolves on 204; rejects on 400 (invalid or\n  // expired token, or a password that violates the policy).\n  const reset = async (input: ResetInput, signal?: AbortSignal) => {\n    // `revokeSessions` is defaulted by the schema, so the parsed body always carries all three\n    // fields the endpoint requires — no field omission, no type assertion.\n    const body = resetInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset', { body }, { signal });\n  };\n\n  // Changes the password for the signed-in user (bearer session). Resolves on 204; rejects on 400\n  // (wrong current password, or a new password that violates the policy). Password policy is\n  // backend-enforced.\n  const change = async (input: ChangePasswordInput, signal?: AbortSignal) => {\n    const body = changeInputSchema.parse(input);\n    await client.post('/v1/auth/password/change', { body }, { signal });\n  };\n\n  return { resetRequest, reset, change };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  CreatePatBodyRaw,\n  CreatePatInput,\n  ExchangePatBodyRaw,\n  ExchangePatInput,\n  PatScopeInput,\n  RevokePatPath,\n} from './types';\n\n/**\n * Drop the keys whose value is `null` or `undefined`, and only those — an empty array or string is\n * a value the caller meant.\n *\n * The spec documents each optional PAT field as \"Omit (do not send `null`)\". Callers hold nullables\n * either way — an empty expiry picker, an untouched switch — so the rule lives here rather than at\n * every call site, where one of them would forget it.\n */\nconst withoutNullish = (entries: Record<string, unknown>): Record<string, unknown> =>\n  Object.fromEntries(Object.entries(entries).filter(([, value]) => value != null));\n\n/** `undefined` for a scope that narrows nothing — which is what an absent `scope` already asks for. */\nconst toScope = (scope: PatScopeInput | null | undefined): Record<string, unknown> | undefined => {\n  if (scope == null) return undefined;\n\n  const payload = withoutNullish({ projects: scope.projects, readOnly: scope.readOnly });\n  return Object.keys(payload).length > 0 ? payload : undefined;\n};\n\n// `as unknown as` at these two boundaries: `CreatePatBodyRaw` and `ExchangePatBodyRaw` both demand\n// the keys the endpoint documents as omittable, so the honest body is not expressible in either.\nconst toCreateBody = ({ name, expiresIn, scope }: CreatePatInput): CreatePatBodyRaw =>\n  ({\n    name,\n    ...withoutNullish({ expiresIn, scope: toScope(scope) }),\n  }) as unknown as CreatePatBodyRaw;\n\nconst toExchangeBody = ({ expiresIn, scope }: ExchangePatInput): ExchangePatBodyRaw =>\n  withoutNullish({ expiresIn, scope: toScope(scope) }) as unknown as ExchangePatBodyRaw;\n\nexport const createPat = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/pat', {}, { signal });\n    return data;\n  };\n\n  const create = async (input: CreatePatInput, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pat', { body: toCreateBody(input) }, { signal });\n    return data;\n  };\n\n  /**\n   * Issue a child token from the one this request is authorized with.\n   *\n   * A child only ever attenuates its parent, so an empty input is a full-inheritance copy.\n   */\n  const exchange = async (input: ExchangePatInput = {}, signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/v1/auth/pat/exchange',\n      { body: toExchangeBody(input) },\n      { signal },\n    );\n    return data;\n  };\n\n  const revoke = async (id: RevokePatPath['id'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/pat/{id}', { path: { id } }, { signal });\n  };\n\n  return { create, exchange, revoke, getAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { GetPkceTokenBody } from './types';\n\nexport const createPkce = (client: AuthOpenApiFetchClient) => {\n  const getToken = async (body: GetPkceTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pkce/token', { body }, { signal });\n    return data;\n  };\n\n  return { getToken };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { AssertSamlBody, InitiateSamlBody } from './types';\n\nexport const createSaml = (client: AuthOpenApiFetchClient) => {\n  const assert = async (body: AssertSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/assert', { body }, { signal });\n    return data;\n  };\n\n  const initiate = async (body?: InitiateSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/initiate', { body }, { signal });\n    return data;\n  };\n\n  return { assert, initiate };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RevokeSessionPath } from './types';\n\nexport const createSession = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/sessions', {}, { signal });\n    return data;\n  };\n\n  const revoke = async (sessionId: RevokeSessionPath['sessionId'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions/{sessionId}', { path: { sessionId } }, { signal });\n  };\n\n  const revokeAll = async (signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions', {}, { signal });\n  };\n\n  return { getAll, revoke, revokeAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { SudoBody, SudoBodyRaw } from './types';\n\nexport const createSudo = (client: AuthOpenApiFetchClient) => {\n  const verify = async (body: SudoBody, signal?: AbortSignal) => {\n    // The generated request body (`SudoBodyRaw`) describes a payload the endpoint rejects — see the\n    // `SudoBody` docs. Assert at this one boundary rather than making every caller send the invalid\n    // shape; the real fix is the `#[OA\\Schema]`-vs-object mismatch on the backend, upstream of the\n    // generated schema. Same pattern as `syncActionsClient`'s `PostActionsBodyRaw`.\n    const { data } = await client.post(\n      '/v1/auth/sudo',\n      { body: body as unknown as SudoBodyRaw },\n      { signal },\n    );\n    return data;\n  };\n\n  const challenge = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/sudo/challenge', {}, { signal });\n    return data;\n  };\n\n  return { verify, challenge };\n};\n","import * as z from 'zod';\n\nexport const refreshTokenInputSchema = z.object({\n  refreshToken: z.string().min(1, 'Required'),\n});\n\nexport const refreshSessionInputSchema = z.object({\n  // The session id the login response carried. The refresh token itself stays in a server-side\n  // channel bound to the session cookie, so the client never holds it.\n  sessionId: z.string().min(1, 'Required'),\n});\n\nexport type RefreshTokenInput = z.infer<typeof refreshTokenInputSchema>;\nexport type RefreshSessionInput = z.infer<typeof refreshSessionInputSchema>;\n","import { HttpHeader } from '../../../fetchClient';\nimport { KeboolaHttpHeader } from '../../../internal';\nimport type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RefreshSessionInput, RefreshTokenInput } from './schemas';\nimport { refreshSessionInputSchema, refreshTokenInputSchema } from './schemas';\nimport type { RefreshTokenBody, RefreshTokenPartialBody, RevokeTokenBody } from './types';\n\nexport const createToken = (client: AuthOpenApiFetchClient) => {\n  const _refresh = async (\n    body: RefreshTokenPartialBody,\n    { signal, headers }: { signal?: AbortSignal; headers?: Record<string, string> } = {},\n  ) => {\n    const { data } = await client.post(\n      '/v1/auth/token/refresh',\n      { body: body as RefreshTokenBody },\n      { signal, headers },\n    );\n\n    return data;\n  };\n\n  /** API mode: rotates the pair. The response carries the next refresh token. */\n  const refreshWithToken = async (input: RefreshTokenInput, signal?: AbortSignal) => {\n    const { refreshToken } = refreshTokenInputSchema.parse(input);\n    return _refresh({ refreshToken }, { signal });\n  };\n\n  /**\n   * Browser/cookie mode: renews the access token off the session cookie.\n   *\n   * - The `X-KBC-CSRF` header opts in; without it the request is API mode.\n   * - Its value is a constant: its presence is the CSRF proof (custom headers need a preflight).\n   * - No refresh token in the response; it stays server-side, bound to the cookie.\n   * - Works only from the stack's own origin (fetch's default `same-origin` credentials).\n   * - An `Authorization` header rejects the request — use a client with no auth middleware.\n   */\n  const refreshWithSession = async (input: RefreshSessionInput, signal?: AbortSignal) => {\n    const { sessionId } = refreshSessionInputSchema.parse(input);\n    return _refresh({ sessionId }, { signal, headers: { [KeboolaHttpHeader.CSRF]: '1' } });\n  };\n\n  /**\n   * Introspects an authenticated session token.\n   *\n   * @param token - Optional token to introspect (`Authorization: Bearer`); a middleware-set header wins.\n   */\n  const introspect = async (token?: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/v1/auth/token/introspect',\n      {},\n      { signal, headers: token ? { [HttpHeader.AUTHORIZATION]: `Bearer ${token}` } : undefined },\n    );\n    return data;\n  };\n\n  const revoke = async (body: RevokeTokenBody, signal?: AbortSignal) => {\n    await client.post('/v1/auth/token/revoke', { body }, { signal });\n  };\n\n  return { refreshWithToken, refreshWithSession, introspect, revoke };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  RegisterWebauthnInput,\n  RegisterWebauthnOptionsResult,\n  RemoveWebauthnInput,\n} from './types';\n\nexport const createWebauthn = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/webauthn', {}, { signal });\n    return data;\n  };\n\n  const registerOptions = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/webauthn/register/options', {}, { signal });\n    // Cast: the spec types the free-form `options` object as `Record<string, never>`.\n    return data as RegisterWebauthnOptionsResult;\n  };\n\n  const register = async (\n    { credential, deviceName = null, revokeOtherSessions = false }: RegisterWebauthnInput,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.post(\n      '/v1/auth/webauthn/register',\n      { body: { credential, deviceName, revokeOtherSessions } },\n      { signal },\n    );\n    return data;\n  };\n\n  // `revokeOtherSessions` signs every other session out along with the credential — the calling\n  // session and personal access tokens survive. Omitted means the backend's own `false`.\n  const remove = async ({ id, ...query }: RemoveWebauthnInput, signal?: AbortSignal) => {\n    await client.delete('/v1/auth/webauthn/{id}', { path: { id }, query }, { signal });\n  };\n\n  return { getAll, registerOptions, register, remove };\n};\n","import { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport type { ClientInitOptions } from '../types';\nimport { validateConnectionStatus } from '../validateConnectionStatus';\n\nimport type { paths } from './__generated__/schema';\nimport { createDevice } from './device';\nimport { createLogin } from './login';\nimport { createManageTokens } from './manageTokens';\nimport { createMe } from './me';\nimport { createMfa } from './mfa';\nimport { createPassword } from './password';\nimport { createPat } from './pat';\nimport { createPkce } from './pkce';\nimport { createSaml } from './saml';\nimport { createSession } from './session';\nimport { createSudo } from './sudo';\nimport { createToken } from './token';\nimport { createWebauthn } from './webauthn';\n\nexport type AuthClientInitOptions = Omit<ClientInitOptions, 'auth'>;\n\nexport type AuthOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;\n\nexport const createAuthClient = ({ baseUrl, middlewares }: AuthClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    validateStatus: validateConnectionStatus,\n  });\n  const genericClient = createGenericFetchClient({\n    baseUrl,\n    middlewares,\n    validateStatus: validateConnectionStatus,\n  });\n\n  // Host-level: Connection serves the storage, management and auth APIs off one baseUrl, so this\n  // probes the host, not this API's prefix — `/v2/storage/health-check`, `/manage/health-check`\n  // and `/v1/auth/health-check` all 404.\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    login: createLogin(client),\n    mfa: createMfa(client),\n    password: createPassword(client),\n    saml: createSaml(client),\n    pat: createPat(client),\n    manageTokens: createManageTokens(client),\n    me: createMe(client),\n    device: createDevice(client),\n    sudo: createSudo(client),\n    pkce: createPkce(client),\n    session: createSession(client),\n    token: createToken(client),\n    webauthn: createWebauthn(client),\n  };\n};\n"],"mappings":";;;;;;AAQA,MAAa,gBAAgB,WAAmC;CAC9D,MAAM,SAAS,OAAO,MAAqC,WAAyB;EAClF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,mBAAmB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAC1E,OAAO;CACT;CAEA,MAAM,UAAU,OAAO,MAAsC,WAAyB;EACpF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAClF,OAAO;CACT;CAEA,MAAM,WAAW,OAAO,MAAuC,WAAyB;EACtF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,yBAAyB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAChF,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;EAAS;CAAS;AACrC;;ACvBA,MAAM,mBAAmBA,IAAE,OAAO;;AAEhC,aAAaA,IAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK,EACxC,CAAC;AAED,MAAa,sBAAsB,iBAAiB,OAAO;CACzD,OAAOA,IAAE,MAAM;CACf,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACxC,CAAC;AAED,MAAa,kBAAkB,iBAAiB,OAAO;CACrD,WAAWA,IAAE,KAAK,CAAC,UAAU,WAAW,CAAC;CACzC,SAASA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACvC,CAAC;AAMD,MAAM,aAAaA,IAAE,OAAO;CAC1B,IAAIA,IAAE,OAAO;CACb,OAAOA,IAAE,OAAO;CAChB,MAAMA,IAAE,OAAO;AACjB,CAAC;AAGD,MAAM,yBAAyBA,IAAE,OAAO;CACtC,aAAaA,IAAE,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK;CAC3C,aAAaA,IAAE,OAAO;CACtB,WAAWA,IAAE,OAAO;CACpB,WAAWA,IAAE,OAAO;CACpB,MAAM;CACN,WAAWA,IAAE,OAAO;AACtB,CAAC;AAED,MAAa,wBAAwB,uBAAuB,OAAO,EACjE,cAAcA,IAAE,OAAO,EACzB,CAAC;AAED,MAAa,4BAA4B,uBAAuB,OAAO,EACrE,cAAcA,IAAE,KAAK,CAAC,CAAC,SAAS,EAClC,CAAC;;;;;;;;AASD,MAAa,qBAAqBA,IAAE,OAAO;CACzC,aAAaA,IAAE,QAAQ,IAAI;CAC3B,SAASA,IAAE,OAAO;CAClB,UAAUA,IAAE,OAAO;CACnB,WAAWA,IAAE,OAAO;CACpB,gBAAgBA,IAAE,MAAMA,IAAE,OAAO,CAAC;CAElC,UAAUA,IAAE,QAAQ,CAAC,CAAC,SAAS;AACjC,CAAC;AAED,MAAa,uBAAuBA,IAAE,MAAM,CAAC,uBAAuB,kBAAkB,CAAC;AACvF,MAAa,2BAA2BA,IAAE,MAAM,CAAC,2BAA2B,kBAAkB,CAAC;;ACpD/F,MAAa,eAAe,WAAmC;CAC7D,MAAM,SAAS,OAAO,MAAiB,WAAyB;EAC9D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,kBAAkB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACzE,OAAO;CACT;;;;;;;CAQA,MAAM,eAAe,OACnB,OACA,WACG;EACH,MAAM,EAAE,OAAO,UAAU,gBAAgB,oBAAoB,MAAM,KAAK;EAExE,MAAM,OAAO,MAAM,OACjB;GAAE,WAAW;GAAY;GAAO;GAAU;EAAY,GACtD,MACF;EAEA,QADe,cAAc,2BAA2B,qBAAA,CAC1C,MAAM,IAAI;CAC1B;CAEA,MAAM,WAAW,OACf,OACA,WACG;EACH,MAAM,EAAE,WAAW,SAAS,gBAAgB,gBAAgB,MAAM,KAAK;EAEvE,MAAM,OAAO,MAAM,OAAO;GAAE;GAAW;GAAS;EAAY,GAAgB,MAAM;EAElF,QADe,cAAc,2BAA2B,qBAAA,CAC1C,MAAM,IAAI;CAC1B;CAGA,MAAM,UAAU,OAAO,WAAyB;EAC9C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC;EACpE,OAAO;CACT;CAEA,OAAO;EAAE;EAAc;EAAU;CAAQ;AAC3C;;ACnDA,MAAa,sBAAsB,WAAmC;;;;;;;;CAQpE,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC;EAC1E,OAAO;CACT;;;;;;;;;CAUA,MAAM,SAAS,OAAO,OAA+B,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,0BAA0B,EAAE,MAAM,MAAM,GAAG,EAAE,OAAO,CAAC;EACxF,OAAO;CACT;;CAGA,MAAM,SAAS,OAAO,IAAiC,WAAyB;EAC9E,MAAM,OAAO,OAAO,+BAA+B,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;CACjF;CAEA,OAAO;EAAE;EAAQ;EAAQ;CAAO;AAClC;;ACzBA,MAAM,aAAa;;;;;;;AAQnB,MAAa,YAAY,WAAmC;;CAE1D,MAAM,MAAM,OAAO,WAAyB;EAC1C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC;EAC/D,OAAO;CACT;;;;;;;CAQA,MAAM,SAAS,OAAO,OAAsB,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,MAAM,eAAe,EAAE,MAAM,MAAM,GAAG,EAAE,OAAO,CAAC;EAC9E,OAAO;CACT;CAEA,MAAM,mBAAmB,OAAO,OAAiC,WAAyB;EACxF,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,6BAA6B,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EACpF,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,OAA+B,WAAyB;EACpF,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,2BAA2B,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAClF,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,OAA4B,WAAyB;EAC9E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,wBAAwB,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAC/E,OAAO;CACT;;CAGA,MAAM,uBAAuB,WAC3B,gBAAgB;EACd,UAAU;EACV;EACA,YAAY,OAAO,OAAO,eACxB,iBAAiB,EAAE,MAAM;GAAE;GAAO;EAAM,EAAE,GAAG,UAAU;CAC3D,CAAC;;CAGH,MAAM,kBAAkB,WACtB,gBAAgB;EACd,UAAU;EACV;EACA,YAAY,OAAO,OAAO,eAAe,YAAY,EAAE,MAAM;GAAE;GAAO;EAAM,EAAE,GAAG,UAAU;CAC7F,CAAC;CAEH,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;;ACpEA,MAAa,aAAa;CACxB,MAAM;CACN,UAAU;CACV,cAAc;AAChB;AAIA,MAAa,qBAAqBC,IAAE,OAAO;CACzC,UAAUA,IAAE,OAAO;CACnB,MAAMA,IAAE,KAAK,CAAC,WAAW,MAAM,WAAW,YAAY,CAAC;CACvD,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACpC,CAAC;AAED,MAAa,yBAAyBA,IAAE,OAAO;CAC7C,UAAUA,IAAE,OAAO;CACnB,WAAWA,IAAE,OAAO;AACtB,CAAC;AAED,MAAa,wBAAwBA,IAAE,OAAO;CAC5C,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAElC,qBAAqBA,IAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK;AAChD,CAAC;;ACtBD,MAAa,aAAa,WAAmC;CAC3D,MAAM,UAAU,OAAO,MAAqB,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gBAAgB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACvE,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,OAAqB,WAAyB;EAC1E,MAAM,EAAE,UAAU,MAAM,SAAS,mBAAmB,MAAM,KAAK;EAE/D,OAAO,QAAQ;GAAE;GAAU;GAAM;EAAK,GAAoB,MAAM;CAClE;CAEA,MAAM,qBAAqB,OAAO,OAAyB,WAAyB;EAClF,MAAM,EAAE,UAAU,cAAc,uBAAuB,MAAM,KAAK;EAElE,OAAO,QAAQ;GAAE;GAAU,MAAM,WAAW;GAAU;EAAU,GAAoB,MAAM;CAC5F;CAEA,MAAM,0BAA0B,OAAO,WAAyB;EAC9D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,+BAA+B,CAAC,GAAG,EAAE,OAAO,CAAC;EAChF,OAAO;CACT;CAoBA,OAAO;EAAE;EAAgB;EAAoB;EAAyB,MAAA;GAdpE,OAAO,OAAO,WAAyB;IACrC,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;IACtE,OAAO;GACT;GACA,QAAQ,OAAO,OAAwB,WAAyB;IAC9D,MAAM,OAAO,sBAAsB,MAAM,KAAK;IAC9C,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,4BAA4B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;IACnF,OAAO;GACT;GACA,SAAS,OAAO,IAA2B,WAAyB;IAClE,MAAM,OAAO,OAAO,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;GAC5E;EAGuE;CAAE;AAC7E;;ACnDA,MAAa,0BAA0BC,IAAE,OAAO,EAC9C,OAAOA,IAAE,MAAM,EACjB,CAAC;AAED,MAAa,mBAAmBA,IAAE,OAAO;CAEvC,OAAOA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACnC,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAEzC,gBAAgBA,IAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;AAC1C,CAAC;AAED,MAAa,oBAAoBA,IAAE,OAAO;CACxC,iBAAiBA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC7C,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAEzC,qBAAqBA,IAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;AAC/C,CAAC;;ACdD,MAAa,kBAAkB,WAAmC;CAGhE,MAAM,eAAe,OAAO,OAA0B,WAAyB;EAC7E,MAAM,OAAO,wBAAwB,MAAM,KAAK;EAChD,MAAM,OAAO,KAAK,mCAAmC,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CAC3E;CAIA,MAAM,QAAQ,OAAO,OAAmB,WAAyB;EAG/D,MAAM,OAAO,iBAAiB,MAAM,KAAK;EACzC,MAAM,OAAO,KAAK,2BAA2B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CACnE;CAKA,MAAM,SAAS,OAAO,OAA4B,WAAyB;EACzE,MAAM,OAAO,kBAAkB,MAAM,KAAK;EAC1C,MAAM,OAAO,KAAK,4BAA4B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CACpE;CAEA,OAAO;EAAE;EAAc;EAAO;CAAO;AACvC;;;;;;;;;;ACZA,MAAM,kBAAkB,YACtB,OAAO,YAAY,OAAO,QAAQ,OAAO,CAAC,CAAC,QAAQ,GAAG,WAAW,SAAS,IAAI,CAAC;;AAGjF,MAAM,WAAW,UAAiF;CAChG,IAAI,SAAS,MAAM,OAAO,KAAA;CAE1B,MAAM,UAAU,eAAe;EAAE,UAAU,MAAM;EAAU,UAAU,MAAM;CAAS,CAAC;CACrF,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI,UAAU,KAAA;AACrD;AAIA,MAAM,gBAAgB,EAAE,MAAM,WAAW,aACtC;CACC;CACA,GAAG,eAAe;EAAE;EAAW,OAAO,QAAQ,KAAK;CAAE,CAAC;AACxD;AAEF,MAAM,kBAAkB,EAAE,WAAW,YACnC,eAAe;CAAE;CAAW,OAAO,QAAQ,KAAK;AAAE,CAAC;AAErD,MAAa,aAAa,WAAmC;CAC3D,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC;EAChE,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,OAAuB,WAAyB;EACpE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gBAAgB,EAAE,MAAM,aAAa,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC;EAC5F,OAAO;CACT;;;;;;CAOA,MAAM,WAAW,OAAO,QAA0B,CAAC,GAAG,WAAyB;EAC7E,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,yBACA,EAAE,MAAM,eAAe,KAAK,EAAE,GAC9B,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,IAAyB,WAAyB;EACtE,MAAM,OAAO,OAAO,qBAAqB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;CACvE;CAEA,OAAO;EAAE;EAAQ;EAAU;EAAQ;CAAO;AAC5C;;ACnEA,MAAa,cAAc,WAAmC;CAC5D,MAAM,WAAW,OAAO,MAAwB,WAAyB;EACvE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,uBAAuB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAC9E,OAAO;CACT;CAEA,OAAO,EAAE,SAAS;AACpB;;ACPA,MAAa,cAAc,WAAmC;CAC5D,MAAM,SAAS,OAAO,MAAsB,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,wBAAwB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAC/E,OAAO;CACT;CAEA,MAAM,WAAW,OAAO,MAAyB,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,0BAA0B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACjF,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;ACZA,MAAa,iBAAiB,WAAmC;CAC/D,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,WAA2C,WAAyB;EACxF,MAAM,OAAO,OAAO,iCAAiC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC;CAC1F;CAEA,MAAM,YAAY,OAAO,WAAyB;EAChD,MAAM,OAAO,OAAO,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;CACzD;CAEA,OAAO;EAAE;EAAQ;EAAQ;CAAU;AACrC;;ACfA,MAAa,cAAc,WAAmC;CAC5D,MAAM,SAAS,OAAO,MAAgB,WAAyB;EAK7D,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,iBACA,EAAQ,KAA+B,GACvC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,YAAY,OAAO,WAAyB;EAChD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC;EAC5E,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAU;AAC7B;;ACtBA,MAAa,0BAA0BC,IAAE,OAAO,EAC9C,cAAcA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,EAC5C,CAAC;AAED,MAAa,4BAA4BA,IAAE,OAAO,EAGhD,WAAWA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,EACzC,CAAC;;ACFD,MAAa,eAAe,WAAmC;CAC7D,MAAM,WAAW,OACf,MACA,EAAE,QAAQ,YAAwE,CAAC,MAChF;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,0BACA,EAAQ,KAAyB,GACjC;GAAE;GAAQ;EAAQ,CACpB;EAEA,OAAO;CACT;;CAGA,MAAM,mBAAmB,OAAO,OAA0B,WAAyB;EACjF,MAAM,EAAE,iBAAiB,wBAAwB,MAAM,KAAK;EAC5D,OAAO,SAAS,EAAE,aAAa,GAAG,EAAE,OAAO,CAAC;CAC9C;;;;;;;;;;CAWA,MAAM,qBAAqB,OAAO,OAA4B,WAAyB;EACrF,MAAM,EAAE,cAAc,0BAA0B,MAAM,KAAK;EAC3D,OAAO,SAAS,EAAE,UAAU,GAAG;GAAE;GAAQ,SAAS,GAAG,kBAAkB,OAAO,IAAI;EAAE,CAAC;CACvF;;;;;;CAOA,MAAM,aAAa,OAAO,OAAgB,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA,CAAC,GACD;GAAE;GAAQ,SAAS,QAAQ,GAAG,WAAW,gBAAgB,UAAU,QAAQ,IAAI,KAAA;EAAU,CAC3F;EACA,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,MAAuB,WAAyB;EACpE,MAAM,OAAO,KAAK,yBAAyB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CACjE;CAEA,OAAO;EAAE;EAAkB;EAAoB;EAAY;CAAO;AACpE;;ACrDA,MAAa,kBAAkB,WAAmC;CAChE,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,kBAAkB,OAAO,WAAyB;EACtD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,sCAAsC,CAAC,GAAG,EAAE,OAAO,CAAC;EAEvF,OAAO;CACT;CAEA,MAAM,WAAW,OACf,EAAE,YAAY,aAAa,MAAM,sBAAsB,SACvD,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,8BACA,EAAE,MAAM;GAAE;GAAY;GAAY;EAAoB,EAAE,GACxD,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAIA,MAAM,SAAS,OAAO,EAAE,IAAI,GAAG,SAA8B,WAAyB;EACpF,MAAM,OAAO,OAAO,0BAA0B;GAAE,MAAM,EAAE,GAAG;GAAG;EAAM,GAAG,EAAE,OAAO,CAAC;CACnF;CAEA,OAAO;EAAE;EAAQ;EAAiB;EAAU;CAAO;AACrD;;AChBA,MAAa,oBAAoB,EAAE,SAAS,kBAAyC;CACnF,MAAM,SAAS,yBAAgC;EAC7C;EACA;EACA,gBAAgB;CAClB,CAAC;CACD,MAAM,gBAAgB,yBAAyB;EAC7C;EACA;EACA,gBAAgB;CAClB,CAAC;CAKD,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA,OAAO,YAAY,MAAM;EACzB,KAAK,UAAU,MAAM;EACrB,UAAU,eAAe,MAAM;EAC/B,MAAM,WAAW,MAAM;EACvB,KAAK,UAAU,MAAM;EACrB,cAAc,mBAAmB,MAAM;EACvC,IAAI,SAAS,MAAM;EACnB,QAAQ,aAAa,MAAM;EAC3B,MAAM,WAAW,MAAM;EACvB,MAAM,WAAW,MAAM;EACvB,SAAS,cAAc,MAAM;EAC7B,OAAO,YAAY,MAAM;EACzB,UAAU,eAAe,MAAM;CACjC;AACF"}

package/dist/{authClient-DspK50e7.cjs → authClient-C3KG9hXw.cjs}

@@ -1,9 +1,8 @@
 const require_rolldown_runtime = require("./rolldown-runtime-CmQyd0Gu.cjs");
 const require_createFetchClient = require("./createFetchClient-CDKSkd7i.cjs");
-const require_validateConnectionStatus = require("./validateConnectionStatus-ckaHcRx8.cjs");
+const require_validateConnectionStatus = require("./validateConnectionStatus-DpYRsU-e.cjs");
 const require_createGenericFetchClient = require("./createGenericFetchClient-BuYzzV_D.cjs");
 const require_createOpenapiFetchClient = require("./createOpenapiFetchClient-dkssExkU.cjs");
-const require_createAbortError = require("./createAbortError-Dzc9yObN.cjs");
 let zod = require("zod");
 zod = require_rolldown_runtime.__toESM(zod, 1);
 // src/clients/auth/device/device.ts
@@ -146,47 +145,6 @@ const createManageTokens = (client) => {
 		revoke
 	};
 };
-// src/utils/async/collectByCursor.ts
-/**
-* The `page[after]` cursor `links.next` carries; `undefined` on the last page.
-*
-* - Read from the link, not rebuilt from the last row, so the encoding stays the server's.
-* - Only the query is parsed, so a relative link works too.
-*/
-const nextCursorOf = (next) => {
-	if (next === null) return void 0;
-	const queryStart = next.indexOf("?");
-	if (queryStart === -1) return void 0;
-	const query = next.slice(queryStart + 1).split("#")[0];
-	return new URLSearchParams(query).get("page[after]") ?? void 0;
-};
-/**
-* Collects items from a cursor-paginated endpoint — up to `limit`, or all when it is omitted.
-*
-* - Calls `fetchFrom` sequentially with the cursor each `links.next` carries, and hands it `pageSize`.
-* - Ends on a `null` `links.next`, or on a link without a `page[after]`.
-* - A cursor seen before means the server is looping; the walk throws rather than spin.
-*/
-const collectByCursor = async ({ fetchFrom, pageSize, limit, signal }) => {
-	if (signal?.aborted) throw require_createAbortError.createAbortError(signal.reason);
-	if (limit !== void 0 && limit < 0) throw new Error("Invalid collectByCursor limit");
-	if (pageSize !== void 0 && pageSize < 1) throw new Error("Invalid collectByCursor pageSize");
-	const items = [];
-	if (limit === 0) return items;
-	let after;
-	const seen = /* @__PURE__ */ new Set();
-	do {
-		const page = await fetchFrom(after, pageSize, signal);
-		items.push(...page.data);
-		if (limit !== void 0 && items.length >= limit) return items.slice(0, limit);
-		after = nextCursorOf(page.links.next);
-		if (after !== void 0) {
-			if (seen.has(after)) throw new Error(`collectByCursor: links.next repeats the cursor ${after}`);
-			seen.add(after);
-		}
-	} while (after !== void 0);
-	return items;
-};
 // src/clients/auth/me/me.ts
 const PAGE_LIMIT = 200;
 /**
@@ -201,6 +159,16 @@ const createMe = (client) => {
 		const { data } = await client.get("/v1/auth/me", {}, { signal });
 		return data;
 	};
+	/**
+	* Renames the caller: `name` is the only field, trimmed by Connection (1-255 characters).
+	*
+	* - Resolves the updated `user`, the same shape as `get`'s; an unchanged name is a no-op.
+	* - `400 validation.failed` for an empty or too long name.
+	*/
+	const update = async (input, signal) => {
+		const { data } = await client.patch("/v1/auth/me", { body: input }, { signal });
+		return data;
+	};
 	const getOrganizations = async (query, signal) => {
 		const { data } = await client.get("/v1/auth/me/organizations", { query }, { signal });
 		return data;
@@ -214,7 +182,7 @@ const createMe = (client) => {
 		return data;
 	};
 	/** Every organization the caller reaches, across all pages. */
-	const getAllOrganizations = (signal) => collectByCursor({
+	const getAllOrganizations = (signal) => require_validateConnectionStatus.collectByCursor({
 		pageSize: PAGE_LIMIT,
 		signal,
 		fetchFrom: (after, limit, pageSignal) => getOrganizations({ page: {
@@ -223,7 +191,7 @@ const createMe = (client) => {
 		} }, pageSignal)
 	});
 	/** Every project the caller can open, across all pages. */
-	const getAllProjects = (signal) => collectByCursor({
+	const getAllProjects = (signal) => require_validateConnectionStatus.collectByCursor({
 		pageSize: PAGE_LIMIT,
 		signal,
 		fetchFrom: (after, limit, pageSignal) => getProjects({ page: {
@@ -233,6 +201,7 @@ const createMe = (client) => {
 	});
 	return {
 		get,
+		update,
 		getOrganizations,
 		getMaintainers,
 		getProjects,
@@ -612,12 +581,6 @@ Object.defineProperty(exports, "changeInputSchema", {
 		return changeInputSchema;
 	}
 });
-Object.defineProperty(exports, "collectByCursor", {
-	enumerable: true,
-	get: function() {
-		return collectByCursor;
-	}
-});
 Object.defineProperty(exports, "createAuthClient", {
 	enumerable: true,
 	get: function() {
@@ -642,12 +605,6 @@ Object.defineProperty(exports, "mfaWebauthnInputSchema", {
 		return mfaWebauthnInputSchema;
 	}
 });
-Object.defineProperty(exports, "nextCursorOf", {
-	enumerable: true,
-	get: function() {
-		return nextCursorOf;
-	}
-});
 Object.defineProperty(exports, "oidcInputSchema", {
 	enumerable: true,
 	get: function() {
@@ -691,4 +648,4 @@ Object.defineProperty(exports, "totpVerifyInputSchema", {
 	}
 });
 
-//# sourceMappingURL=authClient-DspK50e7.cjs.map
+//# sourceMappingURL=authClient-C3KG9hXw.cjs.map

package/dist/authClient-C3KG9hXw.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authClient-C3KG9hXw.cjs","names":["z","collectByCursor","z","z","z","KeboolaHttpHeader","HttpHeader","createOpenapiFetchClient","validateConnectionStatus","createGenericFetchClient"],"sources":["../src/clients/auth/device/device.ts","../src/clients/auth/login/schemas.ts","../src/clients/auth/login/login.ts","../src/clients/auth/manageTokens/manageTokens.ts","../src/clients/auth/me/me.ts","../src/clients/auth/mfa/schemas.ts","../src/clients/auth/mfa/mfa.ts","../src/clients/auth/password/schemas.ts","../src/clients/auth/password/password.ts","../src/clients/auth/pat/pat.ts","../src/clients/auth/pkce/pkce.ts","../src/clients/auth/saml/saml.ts","../src/clients/auth/session/session.ts","../src/clients/auth/sudo/sudo.ts","../src/clients/auth/token/schemas.ts","../src/clients/auth/token/token.ts","../src/clients/auth/webauthn/webauthn.ts","../src/clients/auth/authClient.ts"],"sourcesContent":["import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  ApproveDeviceAuthorizationBody,\n  CreateDeviceAuthorizationBody,\n  GetDeviceAuthorizationTokenBody,\n} from './types';\n\nexport const createDevice = (client: AuthOpenApiFetchClient) => {\n  const create = async (body: CreateDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device', { body }, { signal });\n    return data;\n  };\n\n  const approve = async (body: ApproveDeviceAuthorizationBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/approve', { body }, { signal });\n    return data;\n  };\n\n  const getToken = async (body: GetDeviceAuthorizationTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/device/token', { body }, { signal });\n    return data;\n  };\n\n  return { create, approve, getToken };\n};\n","import * as z from 'zod';\n\nconst loginInputSchema = z.object({\n  /** Also mints a session cookie; `Origin` must be the stack app URL, else 403. */\n  browserMode: z.boolean().default(false),\n});\n\nexport const passwordInputSchema = loginInputSchema.extend({\n  email: z.email(),\n  password: z.string().min(1, 'Required'),\n});\n\nexport const oidcInputSchema = loginInputSchema.extend({\n  grantType: z.enum(['google', 'microsoft']),\n  idToken: z.string().min(1, 'Required'),\n});\n\n// No `browserMode`: as `boolean` it would widen the result; the method signature keeps the literal.\nexport type PasswordInput = Omit<z.input<typeof passwordInputSchema>, 'browserMode'>;\nexport type OidcInput = Omit<z.input<typeof oidcInputSchema>, 'browserMode'>;\n\nconst userSchema = z.object({\n  id: z.number(),\n  email: z.string(),\n  name: z.string(),\n});\n\n// The backend omits `mfaRequired` on success; the `false` default makes it the union discriminant.\nconst loginSuccessBaseSchema = z.object({\n  mfaRequired: z.literal(false).default(false),\n  accessToken: z.string(),\n  tokenType: z.string(),\n  expiresIn: z.number(),\n  user: userSchema,\n  sessionId: z.string(),\n});\n\nexport const apiLoginSuccessSchema = loginSuccessBaseSchema.extend({\n  refreshToken: z.string(),\n});\n\nexport const browserLoginSuccessSchema = loginSuccessBaseSchema.extend({\n  refreshToken: z.null().optional(),\n});\n\n/**\n * MFA-challenge shape.\n *\n * - `mfaType` / `allowedMethods` stay `string` so a new method still parses.\n * - `webauthn` is `PublicKeyCredentialRequestOptionsJSON`: present, `null` or absent (TOTP).\n * - `unknown`: a stricter shape failing would block every MFA sign-in; the ceremony validates.\n */\nexport const mfaChallengeSchema = z.object({\n  mfaRequired: z.literal(true),\n  mfaType: z.string(),\n  mfaToken: z.string(),\n  expiresIn: z.number(),\n  allowedMethods: z.array(z.string()),\n  // zod 4 `z.unknown()` is not implicitly optional; TOTP challenges omit the key.\n  webauthn: z.unknown().optional(),\n});\n\nexport const apiLoginResultSchema = z.union([apiLoginSuccessSchema, mfaChallengeSchema]);\nexport const browserLoginResultSchema = z.union([browserLoginSuccessSchema, mfaChallengeSchema]);\n\nexport type LoginUser = z.infer<typeof userSchema>;\nexport type MfaChallenge = z.infer<typeof mfaChallengeSchema>;\nexport type ApiLoginSuccess = z.infer<typeof apiLoginSuccessSchema>;\nexport type BrowserLoginSuccess = z.infer<typeof browserLoginSuccessSchema>;\nexport type ApiLoginResult = z.infer<typeof apiLoginResultSchema>;\nexport type BrowserLoginResult = z.infer<typeof browserLoginResultSchema>;\n\nexport type LoginResultFor<Browser extends boolean> = Browser extends true\n  ? BrowserLoginResult\n  : ApiLoginResult;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { LoginResultFor, OidcInput, PasswordInput } from './schemas';\nimport {\n  apiLoginResultSchema,\n  browserLoginResultSchema,\n  oidcInputSchema,\n  passwordInputSchema,\n} from './schemas';\nimport type { LoginBody } from './types';\n\nexport const createLogin = (client: AuthOpenApiFetchClient) => {\n  const _login = async (body: LoginBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/login', { body }, { signal });\n    return data;\n  };\n\n  /**\n   * Grants parse with our own schemas — the generated response type is unreliable.\n   *\n   * - `browserMode` picks the schema: only API mode carries a refresh token.\n   * - `const Browser` keeps the literal; a `boolean` flag widens the result to the union.\n   */\n  const withPassword = async <const Browser extends boolean = false>(\n    input: Omit<PasswordInput, 'browserMode'> & { browserMode?: Browser },\n    signal?: AbortSignal,\n  ) => {\n    const { email, password, browserMode } = passwordInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login(\n      { grantType: 'password', email, password, browserMode } as LoginBody,\n      signal,\n    );\n    const schema = browserMode ? browserLoginResultSchema : apiLoginResultSchema;\n    return schema.parse(data) as LoginResultFor<Browser>;\n  };\n\n  const withOidc = async <const Browser extends boolean = false>(\n    input: Omit<OidcInput, 'browserMode'> & { browserMode?: Browser },\n    signal?: AbortSignal,\n  ) => {\n    const { grantType, idToken, browserMode } = oidcInputSchema.parse(input);\n    // Cast: omit fields outside the grant — the backend rejects null.\n    const data = await _login({ grantType, idToken, browserMode } as LoginBody, signal);\n    const schema = browserMode ? browserLoginResultSchema : apiLoginResultSchema;\n    return schema.parse(data) as LoginResultFor<Browser>;\n  };\n\n  // Unauthenticated. Carries the public OAuth client ids `withOidc` callers mint an id token with.\n  const methods = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/methods', {}, { signal });\n    return data;\n  };\n\n  return { withPassword, withOidc, methods };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { CreateManageTokenInput, RevokeManageTokenPath } from './types';\n\nexport const createManageTokens = (client: AuthOpenApiFetchClient) => {\n  /**\n   * Every Manage API token the caller owns, in two lists.\n   *\n   * - `tokens` — the ones the caller created by hand, newest first.\n   * - `sessionTokens` — the ones a browser sign-in minted, newest first.\n   * - A token carries `scopes: []` when it merely inherits the caller's own permissions.\n   */\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/manage-tokens', {}, { signal });\n    return data;\n  };\n\n  /**\n   * Mint a token and read its secret.\n   *\n   * - `token` in the response is returned this once and is unreadable afterwards.\n   * - `manageToken` is the same row the list endpoint returns.\n   * - Needs an active sudo window; without one the endpoint answers `403`.\n   * - Rate-limited per caller, answering `429` with `Retry-After`.\n   */\n  const create = async (input: CreateManageTokenInput, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/manage-tokens', { body: input }, { signal });\n    return data;\n  };\n\n  /** Deleting an id that is already gone answers `404` — the call is not idempotent. */\n  const revoke = async (id: RevokeManageTokenPath['id'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/manage-tokens/{id}', { path: { id } }, { signal });\n  };\n\n  return { getAll, create, revoke };\n};\n","import { collectByCursor } from '../../../utils';\nimport type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  GetMeMaintainersQuery,\n  GetMeOrganizationsQuery,\n  GetMeProjectsQuery,\n  UpdateMeInput,\n} from './types';\n\n// Connection's `app.auth.me.page.max_limit` (`config/packages/auth_me.yaml`); above it the request is a 400.\nconst PAGE_LIMIT = 200;\n\n/**\n * The signed-in user and the organizations, maintainers and projects they reach.\n *\n * - Session-only: a PAT bearer answers `403`.\n * - `404` while the stack's `programmatic-auth` feature is off.\n */\nexport const createMe = (client: AuthOpenApiFetchClient) => {\n  /** Each collection is a counted preview — its first page; the rest is behind the paged methods. */\n  const get = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me', {}, { signal });\n    return data;\n  };\n\n  /**\n   * Renames the caller: `name` is the only field, trimmed by Connection (1-255 characters).\n   *\n   * - Resolves the updated `user`, the same shape as `get`'s; an unchanged name is a no-op.\n   * - `400 validation.failed` for an empty or too long name.\n   */\n  const update = async (input: UpdateMeInput, signal?: AbortSignal) => {\n    const { data } = await client.patch('/v1/auth/me', { body: input }, { signal });\n    return data;\n  };\n\n  const getOrganizations = async (query?: GetMeOrganizationsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me/organizations', { query }, { signal });\n    return data;\n  };\n\n  const getMaintainers = async (query?: GetMeMaintainersQuery, signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me/maintainers', { query }, { signal });\n    return data;\n  };\n\n  const getProjects = async (query?: GetMeProjectsQuery, signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/me/projects', { query }, { signal });\n    return data;\n  };\n\n  /** Every organization the caller reaches, across all pages. */\n  const getAllOrganizations = (signal?: AbortSignal) =>\n    collectByCursor({\n      pageSize: PAGE_LIMIT,\n      signal,\n      fetchFrom: (after, limit, pageSignal) =>\n        getOrganizations({ page: { limit, after } }, pageSignal),\n    });\n\n  /** Every project the caller can open, across all pages. */\n  const getAllProjects = (signal?: AbortSignal) =>\n    collectByCursor({\n      pageSize: PAGE_LIMIT,\n      signal,\n      fetchFrom: (after, limit, pageSignal) => getProjects({ page: { limit, after } }, pageSignal),\n    });\n\n  return {\n    get,\n    update,\n    getOrganizations,\n    getMaintainers,\n    getProjects,\n    getAllOrganizations,\n    getAllProjects,\n  };\n};\n","import * as z from 'zod';\n\nimport type { VerifyMfaType } from './types';\n\n/**\n * Methods `POST /v1/auth/mfa` accepts, also reported in a challenge's `mfaType` / `allowedMethods`.\n *\n * - `satisfies` fails the build if the generated spec renames or drops one.\n * - A challenge may name a method not listed here, so the wire fields stay `string`.\n */\nexport const MFA_METHOD = {\n  totp: 'totp',\n  webauthn: 'webauthn',\n  recoveryCode: 'recovery_code',\n} as const satisfies Record<string, VerifyMfaType>;\n\nexport type MfaMethod = (typeof MFA_METHOD)[keyof typeof MFA_METHOD];\n\nexport const mfaCodeInputSchema = z.object({\n  mfaToken: z.string(),\n  type: z.enum([MFA_METHOD.totp, MFA_METHOD.recoveryCode]),\n  code: z.string().min(1, 'Required'),\n});\n\nexport const mfaWebauthnInputSchema = z.object({\n  mfaToken: z.string(),\n  assertion: z.string(),\n});\n\nexport const totpVerifyInputSchema = z.object({\n  code: z.string().min(1, 'Required'),\n  // Mirrors the backend default; the generated type wrongly marks it required.\n  revokeOtherSessions: z.boolean().default(false),\n});\n\nexport type MfaCodeInput = z.infer<typeof mfaCodeInputSchema>;\nexport type MfaWebauthnInput = z.infer<typeof mfaWebauthnInputSchema>;\nexport type TotpVerifyInput = z.input<typeof totpVerifyInputSchema>;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { MfaCodeInput, MfaWebauthnInput, TotpVerifyInput } from './schemas';\nimport {\n  MFA_METHOD,\n  mfaCodeInputSchema,\n  mfaWebauthnInputSchema,\n  totpVerifyInputSchema,\n} from './schemas';\nimport type { DisableTotpPath, VerifyMfaBody } from './types';\n\nexport const createMfa = (client: AuthOpenApiFetchClient) => {\n  const _verify = async (body: VerifyMfaBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa', { body }, { signal });\n    return data;\n  };\n\n  const verifyWithCode = async (input: MfaCodeInput, signal?: AbortSignal) => {\n    const { mfaToken, type, code } = mfaCodeInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type, code } as VerifyMfaBody, signal);\n  };\n\n  const verifyWithWebauthn = async (input: MfaWebauthnInput, signal?: AbortSignal) => {\n    const { mfaToken, assertion } = mfaWebauthnInputSchema.parse(input);\n    // Cast: omit fields outside the type — the backend rejects null.\n    return _verify({ mfaToken, type: MFA_METHOD.webauthn, assertion } as VerifyMfaBody, signal);\n  };\n\n  const regenerateRecoveryCodes = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/mfa/recovery-codes', {}, { signal });\n    return data;\n  };\n\n  // TOTP enrollment for the signed-in user (account MFA management). `setup` returns the shared\n  // secret + `otpauthUri` to render as a QR; `verify` confirms the first code and hands back the\n  // one-time recovery codes plus the new factor `id`; `disable` removes a factor by that `id`.\n  const totp = {\n    setup: async (signal?: AbortSignal) => {\n      const { data } = await client.post('/v1/auth/mfa/totp', {}, { signal });\n      return data;\n    },\n    verify: async (input: TotpVerifyInput, signal?: AbortSignal) => {\n      const body = totpVerifyInputSchema.parse(input);\n      const { data } = await client.post('/v1/auth/mfa/totp/verify', { body }, { signal });\n      return data;\n    },\n    disable: async (id: DisableTotpPath['id'], signal?: AbortSignal) => {\n      await client.delete('/v1/auth/mfa/totp/{id}', { path: { id } }, { signal });\n    },\n  };\n\n  return { verifyWithCode, verifyWithWebauthn, regenerateRecoveryCodes, totp };\n};\n","import * as z from 'zod';\n\nexport const resetRequestInputSchema = z.object({\n  email: z.email(),\n});\n\nexport const resetInputSchema = z.object({\n  // The single-use reset token (`kbc_pr_…`) delivered by e-mail.\n  token: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Defaults to true, matching the backend. Password policy is backend-enforced.\n  revokeSessions: z.boolean().default(true),\n});\n\nexport const changeInputSchema = z.object({\n  currentPassword: z.string().min(1, 'Required'),\n  newPassword: z.string().min(1, 'Required'),\n  // Defaults to true on parse, so the SDK always sends it (matches the backend default).\n  revokeOtherSessions: z.boolean().default(true),\n});\n\nexport type ResetRequestInput = z.infer<typeof resetRequestInputSchema>;\n// `z.input`, not `z.infer`: callers may omit `revokeSessions`.\nexport type ResetInput = z.input<typeof resetInputSchema>;\n// `z.input`: callers may omit `revokeOtherSessions`.\nexport type ChangePasswordInput = z.input<typeof changeInputSchema>;\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { ChangePasswordInput, ResetInput, ResetRequestInput } from './schemas';\nimport { changeInputSchema, resetInputSchema, resetRequestInputSchema } from './schemas';\n\nexport const createPassword = (client: AuthOpenApiFetchClient) => {\n  // Fire-and-forget from the caller's view: the backend always answers 202 and reveals nothing about\n  // whether the account exists. Resolves on 202; rejects on 429 (rate limited) or 400.\n  const resetRequest = async (input: ResetRequestInput, signal?: AbortSignal) => {\n    const body = resetRequestInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset-request', { body }, { signal });\n  };\n\n  // Applies the new password for the given reset token. Resolves on 204; rejects on 400 (invalid or\n  // expired token, or a password that violates the policy).\n  const reset = async (input: ResetInput, signal?: AbortSignal) => {\n    // `revokeSessions` is defaulted by the schema, so the parsed body always carries all three\n    // fields the endpoint requires — no field omission, no type assertion.\n    const body = resetInputSchema.parse(input);\n    await client.post('/v1/auth/password/reset', { body }, { signal });\n  };\n\n  // Changes the password for the signed-in user (bearer session). Resolves on 204; rejects on 400\n  // (wrong current password, or a new password that violates the policy). Password policy is\n  // backend-enforced.\n  const change = async (input: ChangePasswordInput, signal?: AbortSignal) => {\n    const body = changeInputSchema.parse(input);\n    await client.post('/v1/auth/password/change', { body }, { signal });\n  };\n\n  return { resetRequest, reset, change };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  CreatePatBodyRaw,\n  CreatePatInput,\n  ExchangePatBodyRaw,\n  ExchangePatInput,\n  PatScopeInput,\n  RevokePatPath,\n} from './types';\n\n/**\n * Drop the keys whose value is `null` or `undefined`, and only those — an empty array or string is\n * a value the caller meant.\n *\n * The spec documents each optional PAT field as \"Omit (do not send `null`)\". Callers hold nullables\n * either way — an empty expiry picker, an untouched switch — so the rule lives here rather than at\n * every call site, where one of them would forget it.\n */\nconst withoutNullish = (entries: Record<string, unknown>): Record<string, unknown> =>\n  Object.fromEntries(Object.entries(entries).filter(([, value]) => value != null));\n\n/** `undefined` for a scope that narrows nothing — which is what an absent `scope` already asks for. */\nconst toScope = (scope: PatScopeInput | null | undefined): Record<string, unknown> | undefined => {\n  if (scope == null) return undefined;\n\n  const payload = withoutNullish({ projects: scope.projects, readOnly: scope.readOnly });\n  return Object.keys(payload).length > 0 ? payload : undefined;\n};\n\n// `as unknown as` at these two boundaries: `CreatePatBodyRaw` and `ExchangePatBodyRaw` both demand\n// the keys the endpoint documents as omittable, so the honest body is not expressible in either.\nconst toCreateBody = ({ name, expiresIn, scope }: CreatePatInput): CreatePatBodyRaw =>\n  ({\n    name,\n    ...withoutNullish({ expiresIn, scope: toScope(scope) }),\n  }) as unknown as CreatePatBodyRaw;\n\nconst toExchangeBody = ({ expiresIn, scope }: ExchangePatInput): ExchangePatBodyRaw =>\n  withoutNullish({ expiresIn, scope: toScope(scope) }) as unknown as ExchangePatBodyRaw;\n\nexport const createPat = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/pat', {}, { signal });\n    return data;\n  };\n\n  const create = async (input: CreatePatInput, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pat', { body: toCreateBody(input) }, { signal });\n    return data;\n  };\n\n  /**\n   * Issue a child token from the one this request is authorized with.\n   *\n   * A child only ever attenuates its parent, so an empty input is a full-inheritance copy.\n   */\n  const exchange = async (input: ExchangePatInput = {}, signal?: AbortSignal) => {\n    const { data } = await client.post(\n      '/v1/auth/pat/exchange',\n      { body: toExchangeBody(input) },\n      { signal },\n    );\n    return data;\n  };\n\n  const revoke = async (id: RevokePatPath['id'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/pat/{id}', { path: { id } }, { signal });\n  };\n\n  return { create, exchange, revoke, getAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { GetPkceTokenBody } from './types';\n\nexport const createPkce = (client: AuthOpenApiFetchClient) => {\n  const getToken = async (body: GetPkceTokenBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/pkce/token', { body }, { signal });\n    return data;\n  };\n\n  return { getToken };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { AssertSamlBody, InitiateSamlBody } from './types';\n\nexport const createSaml = (client: AuthOpenApiFetchClient) => {\n  const assert = async (body: AssertSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/assert', { body }, { signal });\n    return data;\n  };\n\n  const initiate = async (body?: InitiateSamlBody, signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/saml/initiate', { body }, { signal });\n    return data;\n  };\n\n  return { assert, initiate };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RevokeSessionPath } from './types';\n\nexport const createSession = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/sessions', {}, { signal });\n    return data;\n  };\n\n  const revoke = async (sessionId: RevokeSessionPath['sessionId'], signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions/{sessionId}', { path: { sessionId } }, { signal });\n  };\n\n  const revokeAll = async (signal?: AbortSignal) => {\n    await client.delete('/v1/auth/sessions', {}, { signal });\n  };\n\n  return { getAll, revoke, revokeAll };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { SudoBody, SudoBodyRaw } from './types';\n\nexport const createSudo = (client: AuthOpenApiFetchClient) => {\n  const verify = async (body: SudoBody, signal?: AbortSignal) => {\n    // The generated request body (`SudoBodyRaw`) describes a payload the endpoint rejects — see the\n    // `SudoBody` docs. Assert at this one boundary rather than making every caller send the invalid\n    // shape; the real fix is the `#[OA\\Schema]`-vs-object mismatch on the backend, upstream of the\n    // generated schema. Same pattern as `syncActionsClient`'s `PostActionsBodyRaw`.\n    const { data } = await client.post(\n      '/v1/auth/sudo',\n      { body: body as unknown as SudoBodyRaw },\n      { signal },\n    );\n    return data;\n  };\n\n  const challenge = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/sudo/challenge', {}, { signal });\n    return data;\n  };\n\n  return { verify, challenge };\n};\n","import * as z from 'zod';\n\nexport const refreshTokenInputSchema = z.object({\n  refreshToken: z.string().min(1, 'Required'),\n});\n\nexport const refreshSessionInputSchema = z.object({\n  // The session id the login response carried. The refresh token itself stays in a server-side\n  // channel bound to the session cookie, so the client never holds it.\n  sessionId: z.string().min(1, 'Required'),\n});\n\nexport type RefreshTokenInput = z.infer<typeof refreshTokenInputSchema>;\nexport type RefreshSessionInput = z.infer<typeof refreshSessionInputSchema>;\n","import { HttpHeader } from '../../../fetchClient';\nimport { KeboolaHttpHeader } from '../../../internal';\nimport type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type { RefreshSessionInput, RefreshTokenInput } from './schemas';\nimport { refreshSessionInputSchema, refreshTokenInputSchema } from './schemas';\nimport type { RefreshTokenBody, RefreshTokenPartialBody, RevokeTokenBody } from './types';\n\nexport const createToken = (client: AuthOpenApiFetchClient) => {\n  const _refresh = async (\n    body: RefreshTokenPartialBody,\n    { signal, headers }: { signal?: AbortSignal; headers?: Record<string, string> } = {},\n  ) => {\n    const { data } = await client.post(\n      '/v1/auth/token/refresh',\n      { body: body as RefreshTokenBody },\n      { signal, headers },\n    );\n\n    return data;\n  };\n\n  /** API mode: rotates the pair. The response carries the next refresh token. */\n  const refreshWithToken = async (input: RefreshTokenInput, signal?: AbortSignal) => {\n    const { refreshToken } = refreshTokenInputSchema.parse(input);\n    return _refresh({ refreshToken }, { signal });\n  };\n\n  /**\n   * Browser/cookie mode: renews the access token off the session cookie.\n   *\n   * - The `X-KBC-CSRF` header opts in; without it the request is API mode.\n   * - Its value is a constant: its presence is the CSRF proof (custom headers need a preflight).\n   * - No refresh token in the response; it stays server-side, bound to the cookie.\n   * - Works only from the stack's own origin (fetch's default `same-origin` credentials).\n   * - An `Authorization` header rejects the request — use a client with no auth middleware.\n   */\n  const refreshWithSession = async (input: RefreshSessionInput, signal?: AbortSignal) => {\n    const { sessionId } = refreshSessionInputSchema.parse(input);\n    return _refresh({ sessionId }, { signal, headers: { [KeboolaHttpHeader.CSRF]: '1' } });\n  };\n\n  /**\n   * Introspects an authenticated session token.\n   *\n   * @param token - Optional token to introspect (`Authorization: Bearer`); a middleware-set header wins.\n   */\n  const introspect = async (token?: string, signal?: AbortSignal) => {\n    const { data } = await client.get(\n      '/v1/auth/token/introspect',\n      {},\n      { signal, headers: token ? { [HttpHeader.AUTHORIZATION]: `Bearer ${token}` } : undefined },\n    );\n    return data;\n  };\n\n  const revoke = async (body: RevokeTokenBody, signal?: AbortSignal) => {\n    await client.post('/v1/auth/token/revoke', { body }, { signal });\n  };\n\n  return { refreshWithToken, refreshWithSession, introspect, revoke };\n};\n","import type { AuthOpenApiFetchClient } from '../authClient';\n\nimport type {\n  RegisterWebauthnInput,\n  RegisterWebauthnOptionsResult,\n  RemoveWebauthnInput,\n} from './types';\n\nexport const createWebauthn = (client: AuthOpenApiFetchClient) => {\n  const getAll = async (signal?: AbortSignal) => {\n    const { data } = await client.get('/v1/auth/webauthn', {}, { signal });\n    return data;\n  };\n\n  const registerOptions = async (signal?: AbortSignal) => {\n    const { data } = await client.post('/v1/auth/webauthn/register/options', {}, { signal });\n    // Cast: the spec types the free-form `options` object as `Record<string, never>`.\n    return data as RegisterWebauthnOptionsResult;\n  };\n\n  const register = async (\n    { credential, deviceName = null, revokeOtherSessions = false }: RegisterWebauthnInput,\n    signal?: AbortSignal,\n  ) => {\n    const { data } = await client.post(\n      '/v1/auth/webauthn/register',\n      { body: { credential, deviceName, revokeOtherSessions } },\n      { signal },\n    );\n    return data;\n  };\n\n  // `revokeOtherSessions` signs every other session out along with the credential — the calling\n  // session and personal access tokens survive. Omitted means the backend's own `false`.\n  const remove = async ({ id, ...query }: RemoveWebauthnInput, signal?: AbortSignal) => {\n    await client.delete('/v1/auth/webauthn/{id}', { path: { id }, query }, { signal });\n  };\n\n  return { getAll, registerOptions, register, remove };\n};\n","import { createGenericFetchClient, createOpenapiFetchClient } from '../../fetchClient';\nimport type { ClientInitOptions } from '../types';\nimport { validateConnectionStatus } from '../validateConnectionStatus';\n\nimport type { paths } from './__generated__/schema';\nimport { createDevice } from './device';\nimport { createLogin } from './login';\nimport { createManageTokens } from './manageTokens';\nimport { createMe } from './me';\nimport { createMfa } from './mfa';\nimport { createPassword } from './password';\nimport { createPat } from './pat';\nimport { createPkce } from './pkce';\nimport { createSaml } from './saml';\nimport { createSession } from './session';\nimport { createSudo } from './sudo';\nimport { createToken } from './token';\nimport { createWebauthn } from './webauthn';\n\nexport type AuthClientInitOptions = Omit<ClientInitOptions, 'auth'>;\n\nexport type AuthOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;\n\nexport const createAuthClient = ({ baseUrl, middlewares }: AuthClientInitOptions) => {\n  const client = createOpenapiFetchClient<paths>({\n    baseUrl,\n    middlewares,\n    validateStatus: validateConnectionStatus,\n  });\n  const genericClient = createGenericFetchClient({\n    baseUrl,\n    middlewares,\n    validateStatus: validateConnectionStatus,\n  });\n\n  // Host-level: Connection serves the storage, management and auth APIs off one baseUrl, so this\n  // probes the host, not this API's prefix — `/v2/storage/health-check`, `/manage/health-check`\n  // and `/v1/auth/health-check` all 404.\n  const healthCheck = async (signal?: AbortSignal) => {\n    const { data } = await genericClient.get('/health-check', {}, { signal });\n\n    return data;\n  };\n\n  return {\n    healthCheck,\n    login: createLogin(client),\n    mfa: createMfa(client),\n    password: createPassword(client),\n    saml: createSaml(client),\n    pat: createPat(client),\n    manageTokens: createManageTokens(client),\n    me: createMe(client),\n    device: createDevice(client),\n    sudo: createSudo(client),\n    pkce: createPkce(client),\n    session: createSession(client),\n    token: createToken(client),\n    webauthn: createWebauthn(client),\n  };\n};\n"],"mappings":";;;;;;;;AAQA,MAAa,gBAAgB,WAAmC;CAC9D,MAAM,SAAS,OAAO,MAAqC,WAAyB;EAClF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,mBAAmB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAC1E,OAAO;CACT;CAEA,MAAM,UAAU,OAAO,MAAsC,WAAyB;EACpF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAClF,OAAO;CACT;CAEA,MAAM,WAAW,OAAO,MAAuC,WAAyB;EACtF,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,yBAAyB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAChF,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;EAAS;CAAS;AACrC;;ACvBA,MAAM,mBAAmBA,IAAE,OAAO;;AAEhC,aAAaA,IAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK,EACxC,CAAC;AAED,MAAa,sBAAsB,iBAAiB,OAAO;CACzD,OAAOA,IAAE,MAAM;CACf,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACxC,CAAC;AAED,MAAa,kBAAkB,iBAAiB,OAAO;CACrD,WAAWA,IAAE,KAAK,CAAC,UAAU,WAAW,CAAC;CACzC,SAASA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACvC,CAAC;AAMD,MAAM,aAAaA,IAAE,OAAO;CAC1B,IAAIA,IAAE,OAAO;CACb,OAAOA,IAAE,OAAO;CAChB,MAAMA,IAAE,OAAO;AACjB,CAAC;AAGD,MAAM,yBAAyBA,IAAE,OAAO;CACtC,aAAaA,IAAE,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK;CAC3C,aAAaA,IAAE,OAAO;CACtB,WAAWA,IAAE,OAAO;CACpB,WAAWA,IAAE,OAAO;CACpB,MAAM;CACN,WAAWA,IAAE,OAAO;AACtB,CAAC;AAED,MAAa,wBAAwB,uBAAuB,OAAO,EACjE,cAAcA,IAAE,OAAO,EACzB,CAAC;AAED,MAAa,4BAA4B,uBAAuB,OAAO,EACrE,cAAcA,IAAE,KAAK,CAAC,CAAC,SAAS,EAClC,CAAC;;;;;;;;AASD,MAAa,qBAAqBA,IAAE,OAAO;CACzC,aAAaA,IAAE,QAAQ,IAAI;CAC3B,SAASA,IAAE,OAAO;CAClB,UAAUA,IAAE,OAAO;CACnB,WAAWA,IAAE,OAAO;CACpB,gBAAgBA,IAAE,MAAMA,IAAE,OAAO,CAAC;CAElC,UAAUA,IAAE,QAAQ,CAAC,CAAC,SAAS;AACjC,CAAC;AAED,MAAa,uBAAuBA,IAAE,MAAM,CAAC,uBAAuB,kBAAkB,CAAC;AACvF,MAAa,2BAA2BA,IAAE,MAAM,CAAC,2BAA2B,kBAAkB,CAAC;;ACpD/F,MAAa,eAAe,WAAmC;CAC7D,MAAM,SAAS,OAAO,MAAiB,WAAyB;EAC9D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,kBAAkB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACzE,OAAO;CACT;;;;;;;CAQA,MAAM,eAAe,OACnB,OACA,WACG;EACH,MAAM,EAAE,OAAO,UAAU,gBAAgB,oBAAoB,MAAM,KAAK;EAExE,MAAM,OAAO,MAAM,OACjB;GAAE,WAAW;GAAY;GAAO;GAAU;EAAY,GACtD,MACF;EAEA,QADe,cAAc,2BAA2B,qBAAA,CAC1C,MAAM,IAAI;CAC1B;CAEA,MAAM,WAAW,OACf,OACA,WACG;EACH,MAAM,EAAE,WAAW,SAAS,gBAAgB,gBAAgB,MAAM,KAAK;EAEvE,MAAM,OAAO,MAAM,OAAO;GAAE;GAAW;GAAS;EAAY,GAAgB,MAAM;EAElF,QADe,cAAc,2BAA2B,qBAAA,CAC1C,MAAM,IAAI;CAC1B;CAGA,MAAM,UAAU,OAAO,WAAyB;EAC9C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC;EACpE,OAAO;CACT;CAEA,OAAO;EAAE;EAAc;EAAU;CAAQ;AAC3C;;ACnDA,MAAa,sBAAsB,WAAmC;;;;;;;;CAQpE,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC;EAC1E,OAAO;CACT;;;;;;;;;CAUA,MAAM,SAAS,OAAO,OAA+B,WAAyB;EAC5E,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,0BAA0B,EAAE,MAAM,MAAM,GAAG,EAAE,OAAO,CAAC;EACxF,OAAO;CACT;;CAGA,MAAM,SAAS,OAAO,IAAiC,WAAyB;EAC9E,MAAM,OAAO,OAAO,+BAA+B,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;CACjF;CAEA,OAAO;EAAE;EAAQ;EAAQ;CAAO;AAClC;;ACzBA,MAAM,aAAa;;;;;;;AAQnB,MAAa,YAAY,WAAmC;;CAE1D,MAAM,MAAM,OAAO,WAAyB;EAC1C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC;EAC/D,OAAO;CACT;;;;;;;CAQA,MAAM,SAAS,OAAO,OAAsB,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,MAAM,eAAe,EAAE,MAAM,MAAM,GAAG,EAAE,OAAO,CAAC;EAC9E,OAAO;CACT;CAEA,MAAM,mBAAmB,OAAO,OAAiC,WAAyB;EACxF,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,6BAA6B,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EACpF,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,OAA+B,WAAyB;EACpF,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,2BAA2B,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAClF,OAAO;CACT;CAEA,MAAM,cAAc,OAAO,OAA4B,WAAyB;EAC9E,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,wBAAwB,EAAE,MAAM,GAAG,EAAE,OAAO,CAAC;EAC/E,OAAO;CACT;;CAGA,MAAM,uBAAuB,WAC3BC,iCAAAA,gBAAgB;EACd,UAAU;EACV;EACA,YAAY,OAAO,OAAO,eACxB,iBAAiB,EAAE,MAAM;GAAE;GAAO;EAAM,EAAE,GAAG,UAAU;CAC3D,CAAC;;CAGH,MAAM,kBAAkB,WACtBA,iCAAAA,gBAAgB;EACd,UAAU;EACV;EACA,YAAY,OAAO,OAAO,eAAe,YAAY,EAAE,MAAM;GAAE;GAAO;EAAM,EAAE,GAAG,UAAU;CAC7F,CAAC;CAEH,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;;;;;;;;ACpEA,MAAa,aAAa;CACxB,MAAM;CACN,UAAU;CACV,cAAc;AAChB;AAIA,MAAa,qBAAqBC,IAAE,OAAO;CACzC,UAAUA,IAAE,OAAO;CACnB,MAAMA,IAAE,KAAK,CAAC,WAAW,MAAM,WAAW,YAAY,CAAC;CACvD,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;AACpC,CAAC;AAED,MAAa,yBAAyBA,IAAE,OAAO;CAC7C,UAAUA,IAAE,OAAO;CACnB,WAAWA,IAAE,OAAO;AACtB,CAAC;AAED,MAAa,wBAAwBA,IAAE,OAAO;CAC5C,MAAMA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAElC,qBAAqBA,IAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK;AAChD,CAAC;;ACtBD,MAAa,aAAa,WAAmC;CAC3D,MAAM,UAAU,OAAO,MAAqB,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gBAAgB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACvE,OAAO;CACT;CAEA,MAAM,iBAAiB,OAAO,OAAqB,WAAyB;EAC1E,MAAM,EAAE,UAAU,MAAM,SAAS,mBAAmB,MAAM,KAAK;EAE/D,OAAO,QAAQ;GAAE;GAAU;GAAM;EAAK,GAAoB,MAAM;CAClE;CAEA,MAAM,qBAAqB,OAAO,OAAyB,WAAyB;EAClF,MAAM,EAAE,UAAU,cAAc,uBAAuB,MAAM,KAAK;EAElE,OAAO,QAAQ;GAAE;GAAU,MAAM,WAAW;GAAU;EAAU,GAAoB,MAAM;CAC5F;CAEA,MAAM,0BAA0B,OAAO,WAAyB;EAC9D,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,+BAA+B,CAAC,GAAG,EAAE,OAAO,CAAC;EAChF,OAAO;CACT;CAoBA,OAAO;EAAE;EAAgB;EAAoB;EAAyB,MAAA;GAdpE,OAAO,OAAO,WAAyB;IACrC,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;IACtE,OAAO;GACT;GACA,QAAQ,OAAO,OAAwB,WAAyB;IAC9D,MAAM,OAAO,sBAAsB,MAAM,KAAK;IAC9C,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,4BAA4B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;IACnF,OAAO;GACT;GACA,SAAS,OAAO,IAA2B,WAAyB;IAClE,MAAM,OAAO,OAAO,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;GAC5E;EAGuE;CAAE;AAC7E;;ACnDA,MAAa,0BAA0BC,IAAE,OAAO,EAC9C,OAAOA,IAAE,MAAM,EACjB,CAAC;AAED,MAAa,mBAAmBA,IAAE,OAAO;CAEvC,OAAOA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CACnC,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAEzC,gBAAgBA,IAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;AAC1C,CAAC;AAED,MAAa,oBAAoBA,IAAE,OAAO;CACxC,iBAAiBA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAC7C,aAAaA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU;CAEzC,qBAAqBA,IAAE,QAAQ,CAAC,CAAC,QAAQ,IAAI;AAC/C,CAAC;;ACdD,MAAa,kBAAkB,WAAmC;CAGhE,MAAM,eAAe,OAAO,OAA0B,WAAyB;EAC7E,MAAM,OAAO,wBAAwB,MAAM,KAAK;EAChD,MAAM,OAAO,KAAK,mCAAmC,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CAC3E;CAIA,MAAM,QAAQ,OAAO,OAAmB,WAAyB;EAG/D,MAAM,OAAO,iBAAiB,MAAM,KAAK;EACzC,MAAM,OAAO,KAAK,2BAA2B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CACnE;CAKA,MAAM,SAAS,OAAO,OAA4B,WAAyB;EACzE,MAAM,OAAO,kBAAkB,MAAM,KAAK;EAC1C,MAAM,OAAO,KAAK,4BAA4B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CACpE;CAEA,OAAO;EAAE;EAAc;EAAO;CAAO;AACvC;;;;;;;;;;ACZA,MAAM,kBAAkB,YACtB,OAAO,YAAY,OAAO,QAAQ,OAAO,CAAC,CAAC,QAAQ,GAAG,WAAW,SAAS,IAAI,CAAC;;AAGjF,MAAM,WAAW,UAAiF;CAChG,IAAI,SAAS,MAAM,OAAO,KAAA;CAE1B,MAAM,UAAU,eAAe;EAAE,UAAU,MAAM;EAAU,UAAU,MAAM;CAAS,CAAC;CACrF,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,SAAS,IAAI,UAAU,KAAA;AACrD;AAIA,MAAM,gBAAgB,EAAE,MAAM,WAAW,aACtC;CACC;CACA,GAAG,eAAe;EAAE;EAAW,OAAO,QAAQ,KAAK;CAAE,CAAC;AACxD;AAEF,MAAM,kBAAkB,EAAE,WAAW,YACnC,eAAe;CAAE;CAAW,OAAO,QAAQ,KAAK;AAAE,CAAC;AAErD,MAAa,aAAa,WAAmC;CAC3D,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC;EAChE,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,OAAuB,WAAyB;EACpE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,gBAAgB,EAAE,MAAM,aAAa,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC;EAC5F,OAAO;CACT;;;;;;CAOA,MAAM,WAAW,OAAO,QAA0B,CAAC,GAAG,WAAyB;EAC7E,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,yBACA,EAAE,MAAM,eAAe,KAAK,EAAE,GAC9B,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,IAAyB,WAAyB;EACtE,MAAM,OAAO,OAAO,qBAAqB,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC;CACvE;CAEA,OAAO;EAAE;EAAQ;EAAU;EAAQ;CAAO;AAC5C;;ACnEA,MAAa,cAAc,WAAmC;CAC5D,MAAM,WAAW,OAAO,MAAwB,WAAyB;EACvE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,uBAAuB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAC9E,OAAO;CACT;CAEA,OAAO,EAAE,SAAS;AACpB;;ACPA,MAAa,cAAc,WAAmC;CAC5D,MAAM,SAAS,OAAO,MAAsB,WAAyB;EACnE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,wBAAwB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EAC/E,OAAO;CACT;CAEA,MAAM,WAAW,OAAO,MAAyB,WAAyB;EACxE,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,0BAA0B,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;EACjF,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAS;AAC5B;;ACZA,MAAa,iBAAiB,WAAmC;CAC/D,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,WAA2C,WAAyB;EACxF,MAAM,OAAO,OAAO,iCAAiC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC;CAC1F;CAEA,MAAM,YAAY,OAAO,WAAyB;EAChD,MAAM,OAAO,OAAO,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;CACzD;CAEA,OAAO;EAAE;EAAQ;EAAQ;CAAU;AACrC;;ACfA,MAAa,cAAc,WAAmC;CAC5D,MAAM,SAAS,OAAO,MAAgB,WAAyB;EAK7D,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,iBACA,EAAQ,KAA+B,GACvC,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAEA,MAAM,YAAY,OAAO,WAAyB;EAChD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC;EAC5E,OAAO;CACT;CAEA,OAAO;EAAE;EAAQ;CAAU;AAC7B;;ACtBA,MAAa,0BAA0BC,IAAE,OAAO,EAC9C,cAAcA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,EAC5C,CAAC;AAED,MAAa,4BAA4BA,IAAE,OAAO,EAGhD,WAAWA,IAAE,OAAO,CAAC,CAAC,IAAI,GAAG,UAAU,EACzC,CAAC;;ACFD,MAAa,eAAe,WAAmC;CAC7D,MAAM,WAAW,OACf,MACA,EAAE,QAAQ,YAAwE,CAAC,MAChF;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,0BACA,EAAQ,KAAyB,GACjC;GAAE;GAAQ;EAAQ,CACpB;EAEA,OAAO;CACT;;CAGA,MAAM,mBAAmB,OAAO,OAA0B,WAAyB;EACjF,MAAM,EAAE,iBAAiB,wBAAwB,MAAM,KAAK;EAC5D,OAAO,SAAS,EAAE,aAAa,GAAG,EAAE,OAAO,CAAC;CAC9C;;;;;;;;;;CAWA,MAAM,qBAAqB,OAAO,OAA4B,WAAyB;EACrF,MAAM,EAAE,cAAc,0BAA0B,MAAM,KAAK;EAC3D,OAAO,SAAS,EAAE,UAAU,GAAG;GAAE;GAAQ,SAAS,GAAGC,0BAAAA,kBAAkB,OAAO,IAAI;EAAE,CAAC;CACvF;;;;;;CAOA,MAAM,aAAa,OAAO,OAAgB,WAAyB;EACjE,MAAM,EAAE,SAAS,MAAM,OAAO,IAC5B,6BACA,CAAC,GACD;GAAE;GAAQ,SAAS,QAAQ,GAAGC,0BAAAA,WAAW,gBAAgB,UAAU,QAAQ,IAAI,KAAA;EAAU,CAC3F;EACA,OAAO;CACT;CAEA,MAAM,SAAS,OAAO,MAAuB,WAAyB;EACpE,MAAM,OAAO,KAAK,yBAAyB,EAAE,KAAK,GAAG,EAAE,OAAO,CAAC;CACjE;CAEA,OAAO;EAAE;EAAkB;EAAoB;EAAY;CAAO;AACpE;;ACrDA,MAAa,kBAAkB,WAAmC;CAChE,MAAM,SAAS,OAAO,WAAyB;EAC7C,MAAM,EAAE,SAAS,MAAM,OAAO,IAAI,qBAAqB,CAAC,GAAG,EAAE,OAAO,CAAC;EACrE,OAAO;CACT;CAEA,MAAM,kBAAkB,OAAO,WAAyB;EACtD,MAAM,EAAE,SAAS,MAAM,OAAO,KAAK,sCAAsC,CAAC,GAAG,EAAE,OAAO,CAAC;EAEvF,OAAO;CACT;CAEA,MAAM,WAAW,OACf,EAAE,YAAY,aAAa,MAAM,sBAAsB,SACvD,WACG;EACH,MAAM,EAAE,SAAS,MAAM,OAAO,KAC5B,8BACA,EAAE,MAAM;GAAE;GAAY;GAAY;EAAoB,EAAE,GACxD,EAAE,OAAO,CACX;EACA,OAAO;CACT;CAIA,MAAM,SAAS,OAAO,EAAE,IAAI,GAAG,SAA8B,WAAyB;EACpF,MAAM,OAAO,OAAO,0BAA0B;GAAE,MAAM,EAAE,GAAG;GAAG;EAAM,GAAG,EAAE,OAAO,CAAC;CACnF;CAEA,OAAO;EAAE;EAAQ;EAAiB;EAAU;CAAO;AACrD;;AChBA,MAAa,oBAAoB,EAAE,SAAS,kBAAyC;CACnF,MAAM,SAASC,iCAAAA,yBAAgC;EAC7C;EACA;EACA,gBAAgBC,iCAAAA;CAClB,CAAC;CACD,MAAM,gBAAgBC,iCAAAA,yBAAyB;EAC7C;EACA;EACA,gBAAgBD,iCAAAA;CAClB,CAAC;CAKD,MAAM,cAAc,OAAO,WAAyB;EAClD,MAAM,EAAE,SAAS,MAAM,cAAc,IAAI,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC;EAExE,OAAO;CACT;CAEA,OAAO;EACL;EACA,OAAO,YAAY,MAAM;EACzB,KAAK,UAAU,MAAM;EACrB,UAAU,eAAe,MAAM;EAC/B,MAAM,WAAW,MAAM;EACvB,KAAK,UAAU,MAAM;EACrB,cAAc,mBAAmB,MAAM;EACvC,IAAI,SAAS,MAAM;EACnB,QAAQ,aAAa,MAAM;EAC3B,MAAM,WAAW,MAAM;EACvB,MAAM,WAAW,MAAM;EACvB,SAAS,cAAc,MAAM;EAC7B,OAAO,YAAY,MAAM;EACzB,UAAU,eAAe,MAAM;CACjC;AACF"}

package/dist/{authClient-ij_Rm2Yn.d.ts → authClient-CbWpMmdX.d.ts}

@@ -1,6 +1,6 @@
-import { r as OpenapiBodyType, s as OpenapiPathType, t as createOpenapiFetchClient } from "./index-FrsEkDvX.js";
-import { n as ClientInitOptions } from "./types-Tg3euEN_.js";
-import { $ as CreateDeviceAuthorizationBody, M as DisableTotpPath, O as ExchangePatInput, S as GetPkceTokenBody, T as CreatePatInput, U as GetMeProjectsQuery, V as GetMeOrganizationsQuery, Z as ApproveDeviceAuthorizationBody, _ as RevokeSessionPath, a as RemoveWebauthnInput, b as InitiateSamlBody, f as RevokeTokenBody, it as paths, j as RevokePatPath, n as RegisterWebauthnInput, p as SudoBody, r as RegisterWebauthnOptionsResult, rt as components, tt as GetDeviceAuthorizationTokenBody, v as AssertSamlBody, z as GetMeMaintainersQuery } from "./types-DjSjUKUl.js";
+import { r as OpenapiBodyType, s as OpenapiPathType, t as createOpenapiFetchClient } from "./index-9p4O-clX.js";
+import { n as ClientInitOptions } from "./types-CP8-CssY.js";
+import { $ as ApproveDeviceAuthorizationBody, M as DisableTotpPath, O as ExchangePatInput, S as GetPkceTokenBody, T as CreatePatInput, U as GetMeProjectsQuery, V as GetMeOrganizationsQuery, X as UpdateMeInput, _ as RevokeSessionPath, a as RemoveWebauthnInput, at as components, b as InitiateSamlBody, f as RevokeTokenBody, j as RevokePatPath, n as RegisterWebauthnInput, ot as paths, p as SudoBody, r as RegisterWebauthnOptionsResult, rt as GetDeviceAuthorizationTokenBody, tt as CreateDeviceAuthorizationBody, v as AssertSamlBody, z as GetMeMaintainersQuery } from "./types-BBmS7-IS.js";
 import * as z$1 from "zod";
 declare const passwordInputSchema: z$1.ZodObject<{
   browserMode: z$1.ZodDefault<z$1.ZodBoolean>;
@@ -305,6 +305,9 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
         hasMore: boolean;
       };
     }>;
+    update: (input: UpdateMeInput, signal?: AbortSignal) => Promise<{
+      user: components['schemas']['MeUser'];
+    }>;
     getOrganizations: (query?: GetMeOrganizationsQuery, signal?: AbortSignal) => Promise<{
       data: Record<string, never>[];
       meta: components['schemas']['PaginationMeta'];
@@ -444,4 +447,4 @@ declare const createAuthClient: ({ baseUrl, middlewares }: AuthClientInitOptions
   };
 };
 export { PasswordInput as A, ApiLoginSuccess as C, LoginUser as D, LoginResultFor as E, mfaChallengeSchema as F, oidcInputSchema as I, passwordInputSchema as L, apiLoginSuccessSchema as M, browserLoginResultSchema as N, MfaChallenge as O, browserLoginSuccessSchema as P, ApiLoginResult as S, BrowserLoginSuccess as T, MfaWebauthnInput as _, RefreshTokenInput as a, mfaWebauthnInputSchema as b, ChangePasswordInput as c, changeInputSchema as d, resetInputSchema as f, MfaMethod as g, MfaCodeInput as h, RefreshSessionInput as i, apiLoginResultSchema as j, OidcInput as k, ResetInput as l, MFA_METHOD as m, AuthOpenApiFetchClient as n, refreshSessionInputSchema as o, resetRequestInputSchema as p, createAuthClient as r, refreshTokenInputSchema as s, AuthClientInitOptions as t, ResetRequestInput as u, TotpVerifyInput as v, BrowserLoginResult as w, totpVerifyInputSchema as x, mfaCodeInputSchema as y };
-//# sourceMappingURL=authClient-ij_Rm2Yn.d.ts.map
+//# sourceMappingURL=authClient-CbWpMmdX.d.ts.map