@knowledge-stack/ksapi 1.72.3 → 1.77.1

package/dist/apis/ChunksApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { ChunkBulkResponse, ChunkNeighborsResponse, ChunkResponse, ChunkSearchRequest, CreateChunkRequest, ScoredChunkResponse, UpdateChunkContentRequest, UpdateChunkMetadataRequest, VersionChunkIdsResponse } from '../models/index';
+import type { ChunkBulkResponse, ChunkNeighborsResponse, ChunkResponse, ChunkSearchRequest, CreateChunkRequest, PartType, ScoredChunkResponse, UpdateChunkContentRequest, UpdateChunkMetadataRequest, VersionChunkIdsResponse } from '../models/index';
 export interface CreateChunkOperationRequest {
     createChunkRequest: CreateChunkRequest;
     authorization?: string | null;
@@ -31,7 +31,8 @@ export interface GetChunkNeighborsRequest {
     chunkId: string;
     prev?: number;
     next?: number;
-    chunksOnly?: boolean;
+    contentType?: PartType;
+    withinSection?: boolean;
     authorization?: string | null;
     ksUat?: string | null;
 }
@@ -149,9 +150,10 @@ export interface ChunksApiInterface {
     /**
      * Creates request options for getChunkNeighbors without sending the request
      * @param {string} chunkId
-     * @param {number} [prev] Number of preceding siblings to include
-     * @param {number} [next] Number of succeeding siblings to include
-     * @param {boolean} [chunksOnly] When true, stop traversal at non-CHUNK siblings (default: false)
+     * @param {number} [prev] Number of preceding items to include (max 50).
+     * @param {number} [next] Number of succeeding items to include (max 50).
+     * @param {PartType} [contentType] Filter by content type: SECTION or CHUNK. Omit to return both. SECTION is rejected when the anchor is a chunk (always).
+     * @param {boolean} [withinSection] When true (default), traverse only the anchor\'s sibling chain under the same parent. When false, traverse the entire document version in DFS order, crossing section boundaries.
      * @param {string} [authorization]
      * @param {string} [ksUat]
      * @throws {RequiredError}
@@ -159,12 +161,13 @@ export interface ChunksApiInterface {
      */
     getChunkNeighborsRequestOpts(requestParameters: GetChunkNeighborsRequest): Promise<runtime.RequestOpts>;
     /**
-     * Get neighboring siblings by traversing the sibling linked list.  Walks the sibling chain backward (prev) and forward (next) from the anchor chunk. Returns sections and chunks in sibling order within the same parent.  When ``chunks_only=true``, the traversal stops at the first non-CHUNK sibling in each direction, returning only chunk neighbors.
+     * Return a window of items around an anchor chunk.  Two traversal modes:  - ``within_section=true`` (default): walks the sibling linked-list under   the anchor\'s parent. Stops at items outside ``content_type`` when set.   Authorized by the anchor\'s path read permission alone.  - ``within_section=false``: walks the full document version in   depth-first order and slices a window around the anchor. Crosses   section boundaries. Additionally requires read permission on the   enclosing document version\'s path (matching the   ``/v1/document_versions/{id}/contents`` endpoint). USERs whose path   permissions are scoped to a sub-section of the version will get   ``403`` and should use ``within_section=true``.  ``content_type=SECTION`` is rejected with ``400``: the anchor is always a chunk, so a SECTION-only filter would exclude it.
      * @summary Get Chunk Neighbors Handler
      * @param {string} chunkId
-     * @param {number} [prev] Number of preceding siblings to include
-     * @param {number} [next] Number of succeeding siblings to include
-     * @param {boolean} [chunksOnly] When true, stop traversal at non-CHUNK siblings (default: false)
+     * @param {number} [prev] Number of preceding items to include (max 50).
+     * @param {number} [next] Number of succeeding items to include (max 50).
+     * @param {PartType} [contentType] Filter by content type: SECTION or CHUNK. Omit to return both. SECTION is rejected when the anchor is a chunk (always).
+     * @param {boolean} [withinSection] When true (default), traverse only the anchor\&#39;s sibling chain under the same parent. When false, traverse the entire document version in DFS order, crossing section boundaries.
      * @param {string} [authorization]
      * @param {string} [ksUat]
      * @param {*} [options] Override http request option.
@@ -173,7 +176,7 @@ export interface ChunksApiInterface {
      */
     getChunkNeighborsRaw(requestParameters: GetChunkNeighborsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ChunkNeighborsResponse>>;
     /**
-     * Get neighboring siblings by traversing the sibling linked list.  Walks the sibling chain backward (prev) and forward (next) from the anchor chunk. Returns sections and chunks in sibling order within the same parent.  When ``chunks_only=true``, the traversal stops at the first non-CHUNK sibling in each direction, returning only chunk neighbors.
+     * Return a window of items around an anchor chunk.  Two traversal modes:  - ``within_section=true`` (default): walks the sibling linked-list under   the anchor\'s parent. Stops at items outside ``content_type`` when set.   Authorized by the anchor\'s path read permission alone.  - ``within_section=false``: walks the full document version in   depth-first order and slices a window around the anchor. Crosses   section boundaries. Additionally requires read permission on the   enclosing document version\'s path (matching the   ``/v1/document_versions/{id}/contents`` endpoint). USERs whose path   permissions are scoped to a sub-section of the version will get   ``403`` and should use ``within_section=true``.  ``content_type=SECTION`` is rejected with ``400``: the anchor is always a chunk, so a SECTION-only filter would exclude it.
      * Get Chunk Neighbors Handler
      */
     getChunkNeighbors(requestParameters: GetChunkNeighborsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ChunkNeighborsResponse>;
@@ -237,7 +240,7 @@ export interface ChunksApiInterface {
      */
     searchChunksRequestOpts(requestParameters: SearchChunksRequest): Promise<runtime.RequestOpts>;
     /**
-     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.
+     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.  **Billing note.** SEARCH consume runs *before* path-permission resolution. A request that resolves to an empty permission set (caller has read access to nothing in the requested scope) returns ``[]`` cleanly — without raising — so it is **not** refunded. This is intentional: differential billing for a no-results case would leak access shape to the caller. Callers concerned about charged no-op searches should validate path access client-side first.
      * @summary Search Chunks Handler
      * @param {ChunkSearchRequest} chunkSearchRequest
      * @param {string} [authorization]
@@ -248,7 +251,7 @@ export interface ChunksApiInterface {
      */
     searchChunksRaw(requestParameters: SearchChunksRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ScoredChunkResponse>>>;
     /**
-     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.
+     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.  **Billing note.** SEARCH consume runs *before* path-permission resolution. A request that resolves to an empty permission set (caller has read access to nothing in the requested scope) returns ``[]`` cleanly — without raising — so it is **not** refunded. This is intentional: differential billing for a no-results case would leak access shape to the caller. Callers concerned about charged no-op searches should validate path access client-side first.
      * Search Chunks Handler
      */
     searchChunks(requestParameters: SearchChunksRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ScoredChunkResponse>>;
@@ -358,12 +361,12 @@ export declare class ChunksApi extends runtime.BaseAPI implements ChunksApiInter
      */
     getChunkNeighborsRequestOpts(requestParameters: GetChunkNeighborsRequest): Promise<runtime.RequestOpts>;
     /**
-     * Get neighboring siblings by traversing the sibling linked list.  Walks the sibling chain backward (prev) and forward (next) from the anchor chunk. Returns sections and chunks in sibling order within the same parent.  When ``chunks_only=true``, the traversal stops at the first non-CHUNK sibling in each direction, returning only chunk neighbors.
+     * Return a window of items around an anchor chunk.  Two traversal modes:  - ``within_section=true`` (default): walks the sibling linked-list under   the anchor\'s parent. Stops at items outside ``content_type`` when set.   Authorized by the anchor\'s path read permission alone.  - ``within_section=false``: walks the full document version in   depth-first order and slices a window around the anchor. Crosses   section boundaries. Additionally requires read permission on the   enclosing document version\'s path (matching the   ``/v1/document_versions/{id}/contents`` endpoint). USERs whose path   permissions are scoped to a sub-section of the version will get   ``403`` and should use ``within_section=true``.  ``content_type=SECTION`` is rejected with ``400``: the anchor is always a chunk, so a SECTION-only filter would exclude it.
      * Get Chunk Neighbors Handler
      */
     getChunkNeighborsRaw(requestParameters: GetChunkNeighborsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ChunkNeighborsResponse>>;
     /**
-     * Get neighboring siblings by traversing the sibling linked list.  Walks the sibling chain backward (prev) and forward (next) from the anchor chunk. Returns sections and chunks in sibling order within the same parent.  When ``chunks_only=true``, the traversal stops at the first non-CHUNK sibling in each direction, returning only chunk neighbors.
+     * Return a window of items around an anchor chunk.  Two traversal modes:  - ``within_section=true`` (default): walks the sibling linked-list under   the anchor\'s parent. Stops at items outside ``content_type`` when set.   Authorized by the anchor\'s path read permission alone.  - ``within_section=false``: walks the full document version in   depth-first order and slices a window around the anchor. Crosses   section boundaries. Additionally requires read permission on the   enclosing document version\'s path (matching the   ``/v1/document_versions/{id}/contents`` endpoint). USERs whose path   permissions are scoped to a sub-section of the version will get   ``403`` and should use ``within_section=true``.  ``content_type=SECTION`` is rejected with ``400``: the anchor is always a chunk, so a SECTION-only filter would exclude it.
      * Get Chunk Neighbors Handler
      */
     getChunkNeighbors(requestParameters: GetChunkNeighborsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ChunkNeighborsResponse>;
@@ -400,12 +403,12 @@ export declare class ChunksApi extends runtime.BaseAPI implements ChunksApiInter
      */
     searchChunksRequestOpts(requestParameters: SearchChunksRequest): Promise<runtime.RequestOpts>;
     /**
-     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.
+     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.  **Billing note.** SEARCH consume runs *before* path-permission resolution. A request that resolves to an empty permission set (caller has read access to nothing in the requested scope) returns ``[]`` cleanly — without raising — so it is **not** refunded. This is intentional: differential billing for a no-results case would leak access shape to the caller. Callers concerned about charged no-op searches should validate path access client-side first.
      * Search Chunks Handler
      */
     searchChunksRaw(requestParameters: SearchChunksRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<ScoredChunkResponse>>>;
     /**
-     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.
+     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.  **Billing note.** SEARCH consume runs *before* path-permission resolution. A request that resolves to an empty permission set (caller has read access to nothing in the requested scope) returns ``[]`` cleanly — without raising — so it is **not** refunded. This is intentional: differential billing for a no-results case would leak access shape to the caller. Callers concerned about charged no-op searches should validate path access client-side first.
      * Search Chunks Handler
      */
     searchChunks(requestParameters: SearchChunksRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<ScoredChunkResponse>>;

package/dist/apis/ChunksApi.js

@@ -212,8 +212,11 @@ class ChunksApi extends runtime.BaseAPI {
             if (requestParameters['next'] != null) {
                 queryParameters['next'] = requestParameters['next'];
             }
-            if (requestParameters['chunksOnly'] != null) {
-                queryParameters['chunks_only'] = requestParameters['chunksOnly'];
+            if (requestParameters['contentType'] != null) {
+                queryParameters['content_type'] = requestParameters['contentType'];
+            }
+            if (requestParameters['withinSection'] != null) {
+                queryParameters['within_section'] = requestParameters['withinSection'];
             }
             const headerParameters = {};
             if (requestParameters['authorization'] != null) {
@@ -230,7 +233,7 @@ class ChunksApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Get neighboring siblings by traversing the sibling linked list.  Walks the sibling chain backward (prev) and forward (next) from the anchor chunk. Returns sections and chunks in sibling order within the same parent.  When ``chunks_only=true``, the traversal stops at the first non-CHUNK sibling in each direction, returning only chunk neighbors.
+     * Return a window of items around an anchor chunk.  Two traversal modes:  - ``within_section=true`` (default): walks the sibling linked-list under   the anchor\'s parent. Stops at items outside ``content_type`` when set.   Authorized by the anchor\'s path read permission alone.  - ``within_section=false``: walks the full document version in   depth-first order and slices a window around the anchor. Crosses   section boundaries. Additionally requires read permission on the   enclosing document version\'s path (matching the   ``/v1/document_versions/{id}/contents`` endpoint). USERs whose path   permissions are scoped to a sub-section of the version will get   ``403`` and should use ``within_section=true``.  ``content_type=SECTION`` is rejected with ``400``: the anchor is always a chunk, so a SECTION-only filter would exclude it.
      * Get Chunk Neighbors Handler
      */
     getChunkNeighborsRaw(requestParameters, initOverrides) {
@@ -241,7 +244,7 @@ class ChunksApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Get neighboring siblings by traversing the sibling linked list.  Walks the sibling chain backward (prev) and forward (next) from the anchor chunk. Returns sections and chunks in sibling order within the same parent.  When ``chunks_only=true``, the traversal stops at the first non-CHUNK sibling in each direction, returning only chunk neighbors.
+     * Return a window of items around an anchor chunk.  Two traversal modes:  - ``within_section=true`` (default): walks the sibling linked-list under   the anchor\'s parent. Stops at items outside ``content_type`` when set.   Authorized by the anchor\'s path read permission alone.  - ``within_section=false``: walks the full document version in   depth-first order and slices a window around the anchor. Crosses   section boundaries. Additionally requires read permission on the   enclosing document version\'s path (matching the   ``/v1/document_versions/{id}/contents`` endpoint). USERs whose path   permissions are scoped to a sub-section of the version will get   ``403`` and should use ``within_section=true``.  ``content_type=SECTION`` is rejected with ``400``: the anchor is always a chunk, so a SECTION-only filter would exclude it.
      * Get Chunk Neighbors Handler
      */
     getChunkNeighbors(requestParameters, initOverrides) {
@@ -364,7 +367,7 @@ class ChunksApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.
+     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.  **Billing note.** SEARCH consume runs *before* path-permission resolution. A request that resolves to an empty permission set (caller has read access to nothing in the requested scope) returns ``[]`` cleanly — without raising — so it is **not** refunded. This is intentional: differential billing for a no-results case would leak access shape to the caller. Callers concerned about charged no-op searches should validate path access client-side first.
      * Search Chunks Handler
      */
     searchChunksRaw(requestParameters, initOverrides) {
@@ -375,7 +378,7 @@ class ChunksApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.
+     * Search over chunks using dense vector, BM25 full-text, or hybrid retrieval.  Combines search with path-based authorization and optional metadata filters. Uses Qdrant for retrieval and hydrates the matched chunks from Postgres.  **Billing note.** SEARCH consume runs *before* path-permission resolution. A request that resolves to an empty permission set (caller has read access to nothing in the requested scope) returns ``[]`` cleanly — without raising — so it is **not** refunded. This is intentional: differential billing for a no-results case would leak access shape to the caller. Callers concerned about charged no-op searches should validate path access client-side first.
      * Search Chunks Handler
      */
     searchChunks(requestParameters, initOverrides) {

package/dist/apis/DocumentsApi.d.ts

@@ -263,7 +263,7 @@ export interface DocumentsApiInterface {
      */
     updateDocumentRequestOpts(requestParameters: UpdateDocumentOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a document (rename, move, and/or change active version).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. All can be done in a single request.
+     * Update a document (rename, move, change active version, Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. To toggle Qdrant exclusion: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * @summary Update Document Handler
      * @param {string} documentId
      * @param {UpdateDocumentRequest} updateDocumentRequest
@@ -275,7 +275,7 @@ export interface DocumentsApiInterface {
      */
     updateDocumentRaw(requestParameters: UpdateDocumentOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DocumentResponse>>;
     /**
-     * Update a document (rename, move, and/or change active version).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. All can be done in a single request.
+     * Update a document (rename, move, change active version, Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. To toggle Qdrant exclusion: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Document Handler
      */
     updateDocument(requestParameters: UpdateDocumentOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DocumentResponse>;
@@ -373,12 +373,12 @@ export declare class DocumentsApi extends runtime.BaseAPI implements DocumentsAp
      */
     updateDocumentRequestOpts(requestParameters: UpdateDocumentOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a document (rename, move, and/or change active version).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. All can be done in a single request.
+     * Update a document (rename, move, change active version, Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. To toggle Qdrant exclusion: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Document Handler
      */
     updateDocumentRaw(requestParameters: UpdateDocumentOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DocumentResponse>>;
     /**
-     * Update a document (rename, move, and/or change active version).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. All can be done in a single request.
+     * Update a document (rename, move, change active version, Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. To toggle Qdrant exclusion: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Document Handler
      */
     updateDocument(requestParameters: UpdateDocumentOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DocumentResponse>;

package/dist/apis/DocumentsApi.js

@@ -442,7 +442,7 @@ class DocumentsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a document (rename, move, and/or change active version).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. All can be done in a single request.
+     * Update a document (rename, move, change active version, Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. To toggle Qdrant exclusion: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Document Handler
      */
     updateDocumentRaw(requestParameters, initOverrides) {
@@ -453,7 +453,7 @@ class DocumentsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a document (rename, move, and/or change active version).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. All can be done in a single request.
+     * Update a document (rename, move, change active version, Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To change active version: provide `active_version_id` field. To toggle Qdrant exclusion: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Document Handler
      */
     updateDocument(requestParameters, initOverrides) {

package/dist/apis/FoldersApi.d.ts

@@ -296,7 +296,7 @@ export interface FoldersApiInterface {
      */
     updateFolderRequestOpts(requestParameters: UpdateFolderOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a folder (rename and/or move).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. Both can be done in a single request.
+     * Update a folder (rename, move, and/or toggle Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To toggle Qdrant exclusion for this folder and its descendants: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * @summary Update Folder Handler
      * @param {string} folderId
      * @param {UpdateFolderRequest} updateFolderRequest
@@ -308,7 +308,7 @@ export interface FoldersApiInterface {
      */
     updateFolderRaw(requestParameters: UpdateFolderOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FolderResponse>>;
     /**
-     * Update a folder (rename and/or move).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. Both can be done in a single request.
+     * Update a folder (rename, move, and/or toggle Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To toggle Qdrant exclusion for this folder and its descendants: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Folder Handler
      */
     updateFolder(requestParameters: UpdateFolderOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FolderResponse>;
@@ -420,12 +420,12 @@ export declare class FoldersApi extends runtime.BaseAPI implements FoldersApiInt
      */
     updateFolderRequestOpts(requestParameters: UpdateFolderOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a folder (rename and/or move).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. Both can be done in a single request.
+     * Update a folder (rename, move, and/or toggle Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To toggle Qdrant exclusion for this folder and its descendants: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Folder Handler
      */
     updateFolderRaw(requestParameters: UpdateFolderOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<FolderResponse>>;
     /**
-     * Update a folder (rename and/or move).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. Both can be done in a single request.
+     * Update a folder (rename, move, and/or toggle Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To toggle Qdrant exclusion for this folder and its descendants: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Folder Handler
      */
     updateFolder(requestParameters: UpdateFolderOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<FolderResponse>;

package/dist/apis/FoldersApi.js

@@ -454,7 +454,7 @@ class FoldersApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a folder (rename and/or move).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. Both can be done in a single request.
+     * Update a folder (rename, move, and/or toggle Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To toggle Qdrant exclusion for this folder and its descendants: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Folder Handler
      */
     updateFolderRaw(requestParameters, initOverrides) {
@@ -465,7 +465,7 @@ class FoldersApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a folder (rename and/or move).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. Both can be done in a single request.
+     * Update a folder (rename, move, and/or toggle Qdrant exclusion).  To rename: provide `name` field. To move: provide `parent_path_part_id` field. To toggle Qdrant exclusion for this folder and its descendants: provide `exclude_from_qdrant` field. Any combination can be sent in a single request.
      * Update Folder Handler
      */
     updateFolder(requestParameters, initOverrides) {

package/dist/apis/InvitesApi.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { AcceptInviteResponse, InviteResponse, InviteStatus, InviteUserRequest, PaginatedResponseInviteResponse } from '../models/index';
+import type { AcceptInviteResponse, InviteResponse, InviteStatus, InviteUserRequest, PaginatedResponseInviteResponse, UpdateInviteRequest } from '../models/index';
 export interface AcceptInviteRequest {
     inviteId: string;
     authorization?: string | null;
@@ -34,6 +34,12 @@ export interface ListInvitesRequest {
     authorization?: string | null;
     ksUat?: string | null;
 }
+export interface UpdateInviteOperationRequest {
+    inviteId: string;
+    updateInviteRequest: UpdateInviteRequest;
+    authorization?: string | null;
+    ksUat?: string | null;
+}
 /**
  * InvitesApi - interface
  *
@@ -43,7 +49,7 @@ export interface ListInvitesRequest {
 export interface InvitesApiInterface {
     /**
      * Creates request options for acceptInvite without sending the request
-     * @param {string} inviteId
+     * @param {string} inviteId Either an Invite ID (traditional per-email invite) OR a Tenant ID (when the tenant has ``invite_link.enabled``). Tenant lookup is tried first.
      * @param {string} [authorization]
      * @param {string} [ksUat]
      * @throws {RequiredError}
@@ -51,9 +57,9 @@ export interface InvitesApiInterface {
      */
     acceptInviteRequestOpts(requestParameters: AcceptInviteRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update an invite to accepted status and create tenant user.
+     * Accept an invite OR a tenant invite-link.  The path parameter ``invite_id`` may be either:   * a Tenant ID (when an admin has enabled ``invite_link`` on the tenant), OR   * an Invite ID (the traditional per-email invite flow).  Tenant lookup is tried first. If the row is found, the request is treated as an invite-link request — both 400 paths below have *distinct* messages so the frontend can branch on copy:   * \"does not have invite link enabled\" → admin hasn\'t turned it on   * \"does not support inviting users\"   → tenant kill-switch ``system_metadata.can_invite`` is honored on this path too — it\'s a hard kill switch for self-serve onboarding. Only when no tenant matches do we look up an Invite row.
      * @summary Accept Invite
-     * @param {string} inviteId
+     * @param {string} inviteId Either an Invite ID (traditional per-email invite) OR a Tenant ID (when the tenant has &#x60;&#x60;invite_link.enabled&#x60;&#x60;). Tenant lookup is tried first.
      * @param {string} [authorization]
      * @param {string} [ksUat]
      * @param {*} [options] Override http request option.
@@ -62,7 +68,7 @@ export interface InvitesApiInterface {
      */
     acceptInviteRaw(requestParameters: AcceptInviteRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AcceptInviteResponse>>;
     /**
-     * Update an invite to accepted status and create tenant user.
+     * Accept an invite OR a tenant invite-link.  The path parameter ``invite_id`` may be either:   * a Tenant ID (when an admin has enabled ``invite_link`` on the tenant), OR   * an Invite ID (the traditional per-email invite flow).  Tenant lookup is tried first. If the row is found, the request is treated as an invite-link request — both 400 paths below have *distinct* messages so the frontend can branch on copy:   * \"does not have invite link enabled\" → admin hasn\'t turned it on   * \"does not support inviting users\"   → tenant kill-switch ``system_metadata.can_invite`` is honored on this path too — it\'s a hard kill switch for self-serve onboarding. Only when no tenant matches do we look up an Invite row.
      * Accept Invite
      */
     acceptInvite(requestParameters: AcceptInviteRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AcceptInviteResponse>;
@@ -147,6 +153,33 @@ export interface InvitesApiInterface {
      * List Invites Handler
      */
     listInvites(requestParameters: ListInvitesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PaginatedResponseInviteResponse>;
+    /**
+     * Creates request options for updateInvite without sending the request
+     * @param {string} inviteId
+     * @param {UpdateInviteRequest} updateInviteRequest
+     * @param {string} [authorization]
+     * @param {string} [ksUat]
+     * @throws {RequiredError}
+     * @memberof InvitesApiInterface
+     */
+    updateInviteRequestOpts(requestParameters: UpdateInviteOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Update an invite\'s expiry or groups (admin/owner only).  The invite must belong to the caller\'s current tenant. Any provided groups are validated to belong to the same tenant.
+     * @summary Update Invite Handler
+     * @param {string} inviteId
+     * @param {UpdateInviteRequest} updateInviteRequest
+     * @param {string} [authorization]
+     * @param {string} [ksUat]
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof InvitesApiInterface
+     */
+    updateInviteRaw(requestParameters: UpdateInviteOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<InviteResponse>>;
+    /**
+     * Update an invite\'s expiry or groups (admin/owner only).  The invite must belong to the caller\'s current tenant. Any provided groups are validated to belong to the same tenant.
+     * Update Invite Handler
+     */
+    updateInvite(requestParameters: UpdateInviteOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<InviteResponse>;
 }
 /**
  *
@@ -157,12 +190,12 @@ export declare class InvitesApi extends runtime.BaseAPI implements InvitesApiInt
      */
     acceptInviteRequestOpts(requestParameters: AcceptInviteRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update an invite to accepted status and create tenant user.
+     * Accept an invite OR a tenant invite-link.  The path parameter ``invite_id`` may be either:   * a Tenant ID (when an admin has enabled ``invite_link`` on the tenant), OR   * an Invite ID (the traditional per-email invite flow).  Tenant lookup is tried first. If the row is found, the request is treated as an invite-link request — both 400 paths below have *distinct* messages so the frontend can branch on copy:   * \"does not have invite link enabled\" → admin hasn\'t turned it on   * \"does not support inviting users\"   → tenant kill-switch ``system_metadata.can_invite`` is honored on this path too — it\'s a hard kill switch for self-serve onboarding. Only when no tenant matches do we look up an Invite row.
      * Accept Invite
      */
     acceptInviteRaw(requestParameters: AcceptInviteRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AcceptInviteResponse>>;
     /**
-     * Update an invite to accepted status and create tenant user.
+     * Accept an invite OR a tenant invite-link.  The path parameter ``invite_id`` may be either:   * a Tenant ID (when an admin has enabled ``invite_link`` on the tenant), OR   * an Invite ID (the traditional per-email invite flow).  Tenant lookup is tried first. If the row is found, the request is treated as an invite-link request — both 400 paths below have *distinct* messages so the frontend can branch on copy:   * \"does not have invite link enabled\" → admin hasn\'t turned it on   * \"does not support inviting users\"   → tenant kill-switch ``system_metadata.can_invite`` is honored on this path too — it\'s a hard kill switch for self-serve onboarding. Only when no tenant matches do we look up an Invite row.
      * Accept Invite
      */
     acceptInvite(requestParameters: AcceptInviteRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AcceptInviteResponse>;
@@ -208,4 +241,18 @@ export declare class InvitesApi extends runtime.BaseAPI implements InvitesApiInt
      * List Invites Handler
      */
     listInvites(requestParameters?: ListInvitesRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PaginatedResponseInviteResponse>;
+    /**
+     * Creates request options for updateInvite without sending the request
+     */
+    updateInviteRequestOpts(requestParameters: UpdateInviteOperationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Update an invite\'s expiry or groups (admin/owner only).  The invite must belong to the caller\'s current tenant. Any provided groups are validated to belong to the same tenant.
+     * Update Invite Handler
+     */
+    updateInviteRaw(requestParameters: UpdateInviteOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<InviteResponse>>;
+    /**
+     * Update an invite\'s expiry or groups (admin/owner only).  The invite must belong to the caller\'s current tenant. Any provided groups are validated to belong to the same tenant.
+     * Update Invite Handler
+     */
+    updateInvite(requestParameters: UpdateInviteOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<InviteResponse>;
 }

package/dist/apis/InvitesApi.js

@@ -86,7 +86,7 @@ class InvitesApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update an invite to accepted status and create tenant user.
+     * Accept an invite OR a tenant invite-link.  The path parameter ``invite_id`` may be either:   * a Tenant ID (when an admin has enabled ``invite_link`` on the tenant), OR   * an Invite ID (the traditional per-email invite flow).  Tenant lookup is tried first. If the row is found, the request is treated as an invite-link request — both 400 paths below have *distinct* messages so the frontend can branch on copy:   * \"does not have invite link enabled\" → admin hasn\'t turned it on   * \"does not support inviting users\"   → tenant kill-switch ``system_metadata.can_invite`` is honored on this path too — it\'s a hard kill switch for self-serve onboarding. Only when no tenant matches do we look up an Invite row.
      * Accept Invite
      */
     acceptInviteRaw(requestParameters, initOverrides) {
@@ -97,7 +97,7 @@ class InvitesApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update an invite to accepted status and create tenant user.
+     * Accept an invite OR a tenant invite-link.  The path parameter ``invite_id`` may be either:   * a Tenant ID (when an admin has enabled ``invite_link`` on the tenant), OR   * an Invite ID (the traditional per-email invite flow).  Tenant lookup is tried first. If the row is found, the request is treated as an invite-link request — both 400 paths below have *distinct* messages so the frontend can branch on copy:   * \"does not have invite link enabled\" → admin hasn\'t turned it on   * \"does not support inviting users\"   → tenant kill-switch ``system_metadata.can_invite`` is honored on this path too — it\'s a hard kill switch for self-serve onboarding. Only when no tenant matches do we look up an Invite row.
      * Accept Invite
      */
     acceptInvite(requestParameters, initOverrides) {
@@ -246,5 +246,54 @@ class InvitesApi extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for updateInvite without sending the request
+     */
+    updateInviteRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['inviteId'] == null) {
+                throw new runtime.RequiredError('inviteId', 'Required parameter "inviteId" was null or undefined when calling updateInvite().');
+            }
+            if (requestParameters['updateInviteRequest'] == null) {
+                throw new runtime.RequiredError('updateInviteRequest', 'Required parameter "updateInviteRequest" was null or undefined when calling updateInvite().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (requestParameters['authorization'] != null) {
+                headerParameters['authorization'] = String(requestParameters['authorization']);
+            }
+            let urlPath = `/v1/invites/{invite_id}`;
+            urlPath = urlPath.replace(`{${"invite_id"}}`, encodeURIComponent(String(requestParameters['inviteId'])));
+            return {
+                path: urlPath,
+                method: 'PATCH',
+                headers: headerParameters,
+                query: queryParameters,
+                body: (0, index_1.UpdateInviteRequestToJSON)(requestParameters['updateInviteRequest']),
+            };
+        });
+    }
+    /**
+     * Update an invite\'s expiry or groups (admin/owner only).  The invite must belong to the caller\'s current tenant. Any provided groups are validated to belong to the same tenant.
+     * Update Invite Handler
+     */
+    updateInviteRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.updateInviteRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response, (jsonValue) => (0, index_1.InviteResponseFromJSON)(jsonValue));
+        });
+    }
+    /**
+     * Update an invite\'s expiry or groups (admin/owner only).  The invite must belong to the caller\'s current tenant. Any provided groups are validated to belong to the same tenant.
+     * Update Invite Handler
+     */
+    updateInvite(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.updateInviteRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
 }
 exports.InvitesApi = InvitesApi;

package/dist/apis/PublicApi.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import * as runtime from '../runtime';
+import type { SubscriptionPlanResponse } from '../models/index';
+/**
+ * PublicApi - interface
+ *
+ * @export
+ * @interface PublicApiInterface
+ */
+export interface PublicApiInterface {
+    /**
+     * Creates request options for listPublicSubscriptions without sending the request
+     * @throws {RequiredError}
+     * @memberof PublicApiInterface
+     */
+    listPublicSubscriptionsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * List publicly-visible subscription plans (no authentication required).  Filters to ``subscription_plan.public = true`` — custom enterprise tiers (created with ``public=False`` via ``POST /system/subscriptions``) are excluded. Tenants on a private plan can still read it via ``GET /v1/tenants/{tenant_id}/subscriptions``.
+     * @summary List Public Subscriptions Handler
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof PublicApiInterface
+     */
+    listPublicSubscriptionsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<SubscriptionPlanResponse>>>;
+    /**
+     * List publicly-visible subscription plans (no authentication required).  Filters to ``subscription_plan.public = true`` — custom enterprise tiers (created with ``public=False`` via ``POST /system/subscriptions``) are excluded. Tenants on a private plan can still read it via ``GET /v1/tenants/{tenant_id}/subscriptions``.
+     * List Public Subscriptions Handler
+     */
+    listPublicSubscriptions(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<SubscriptionPlanResponse>>;
+}
+/**
+ *
+ */
+export declare class PublicApi extends runtime.BaseAPI implements PublicApiInterface {
+    /**
+     * Creates request options for listPublicSubscriptions without sending the request
+     */
+    listPublicSubscriptionsRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * List publicly-visible subscription plans (no authentication required).  Filters to ``subscription_plan.public = true`` — custom enterprise tiers (created with ``public=False`` via ``POST /system/subscriptions``) are excluded. Tenants on a private plan can still read it via ``GET /v1/tenants/{tenant_id}/subscriptions``.
+     * List Public Subscriptions Handler
+     */
+    listPublicSubscriptionsRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<SubscriptionPlanResponse>>>;
+    /**
+     * List publicly-visible subscription plans (no authentication required).  Filters to ``subscription_plan.public = true`` — custom enterprise tiers (created with ``public=False`` via ``POST /system/subscriptions``) are excluded. Tenants on a private plan can still read it via ``GET /v1/tenants/{tenant_id}/subscriptions``.
+     * List Public Subscriptions Handler
+     */
+    listPublicSubscriptions(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<SubscriptionPlanResponse>>;
+}