@knowledge-stack/ksapi 2.14.3 → 2.14.4

package/README.md

@@ -1,4 +1,4 @@
-# @knowledge-stack/ksapi@2.14.3
+# @knowledge-stack/ksapi@2.14.4
 
 A TypeScript SDK client for the localhost API.
 
@@ -725,7 +725,7 @@ and is automatically generated by the
 [OpenAPI Generator](https://openapi-generator.tech) project:
 
 - API version: `0.1.0`
-- Package version: `2.14.3`
+- Package version: `2.14.4`
 - Generator version: `7.21.0`
 - Build package: `org.openapitools.codegen.languages.TypeScriptFetchClientCodegen`
 

package/dist/apis/ApiConnectionsApi.d.ts

@@ -91,7 +91,7 @@ export interface ApiConnectionsApiInterface {
      */
     deleteApiConnectionRequestOpts(requestParameters: DeleteApiConnectionRequest): Promise<runtime.RequestOpts>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * @summary Delete Api Connection Handler
      * @param {string} connectionId
      * @param {*} [options] Override http request option.
@@ -100,7 +100,7 @@ export interface ApiConnectionsApiInterface {
      */
     deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -157,7 +157,7 @@ export interface ApiConnectionsApiInterface {
      */
     updateApiConnectionRequestOpts(requestParameters: UpdateApiConnectionOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * @summary Update Api Connection Handler
      * @param {string} connectionId
      * @param {UpdateApiConnectionRequest} updateApiConnectionRequest
@@ -167,7 +167,7 @@ export interface ApiConnectionsApiInterface {
      */
     updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse>;
@@ -209,12 +209,12 @@ export declare class ApiConnectionsApi extends runtime.BaseAPI implements ApiCon
      */
     deleteApiConnectionRequestOpts(requestParameters: DeleteApiConnectionRequest): Promise<runtime.RequestOpts>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -251,12 +251,12 @@ export declare class ApiConnectionsApi extends runtime.BaseAPI implements ApiCon
      */
     updateApiConnectionRequestOpts(requestParameters: UpdateApiConnectionOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse>;

package/dist/apis/ApiConnectionsApi.js

@@ -192,7 +192,7 @@ class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnectionRaw(requestParameters, initOverrides) {
@@ -203,7 +203,7 @@ class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters, initOverrides) {
@@ -345,7 +345,7 @@ class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnectionRaw(requestParameters, initOverrides) {
@@ -356,7 +356,7 @@ class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters, initOverrides) {

package/dist/apis/DataSourcesApi.d.ts

@@ -414,7 +414,7 @@ export interface DataSourcesApiInterface {
      */
     updateDataSourceRequestOpts(requestParameters: UpdateDataSourceOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * @summary Update Data Source Handler
      * @param {string} dataSourceId
      * @param {UpdateDataSourceRequest} updateDataSourceRequest
@@ -424,7 +424,7 @@ export interface DataSourcesApiInterface {
      */
     updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse>;
@@ -673,12 +673,12 @@ export declare class DataSourcesApi extends runtime.BaseAPI implements DataSourc
      */
     updateDataSourceRequestOpts(requestParameters: UpdateDataSourceOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse>;

package/dist/apis/DataSourcesApi.js

@@ -840,7 +840,7 @@ class DataSourcesApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSourceRaw(requestParameters, initOverrides) {
@@ -851,7 +851,7 @@ class DataSourcesApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters, initOverrides) {

package/dist/esm/apis/ApiConnectionsApi.d.ts

@@ -91,7 +91,7 @@ export interface ApiConnectionsApiInterface {
      */
     deleteApiConnectionRequestOpts(requestParameters: DeleteApiConnectionRequest): Promise<runtime.RequestOpts>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * @summary Delete Api Connection Handler
      * @param {string} connectionId
      * @param {*} [options] Override http request option.
@@ -100,7 +100,7 @@ export interface ApiConnectionsApiInterface {
      */
     deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -157,7 +157,7 @@ export interface ApiConnectionsApiInterface {
      */
     updateApiConnectionRequestOpts(requestParameters: UpdateApiConnectionOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * @summary Update Api Connection Handler
      * @param {string} connectionId
      * @param {UpdateApiConnectionRequest} updateApiConnectionRequest
@@ -167,7 +167,7 @@ export interface ApiConnectionsApiInterface {
      */
     updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse>;
@@ -209,12 +209,12 @@ export declare class ApiConnectionsApi extends runtime.BaseAPI implements ApiCon
      */
     deleteApiConnectionRequestOpts(requestParameters: DeleteApiConnectionRequest): Promise<runtime.RequestOpts>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -251,12 +251,12 @@ export declare class ApiConnectionsApi extends runtime.BaseAPI implements ApiCon
      */
     updateApiConnectionRequestOpts(requestParameters: UpdateApiConnectionOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>>;
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse>;

package/dist/esm/apis/ApiConnectionsApi.js

@@ -156,7 +156,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnectionRaw(requestParameters, initOverrides) {
@@ -167,7 +167,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters, initOverrides) {
@@ -309,7 +309,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnectionRaw(requestParameters, initOverrides) {
@@ -320,7 +320,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters, initOverrides) {

package/dist/esm/apis/DataSourcesApi.d.ts

@@ -414,7 +414,7 @@ export interface DataSourcesApiInterface {
      */
     updateDataSourceRequestOpts(requestParameters: UpdateDataSourceOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * @summary Update Data Source Handler
      * @param {string} dataSourceId
      * @param {UpdateDataSourceRequest} updateDataSourceRequest
@@ -424,7 +424,7 @@ export interface DataSourcesApiInterface {
      */
     updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse>;
@@ -673,12 +673,12 @@ export declare class DataSourcesApi extends runtime.BaseAPI implements DataSourc
      */
     updateDataSourceRequestOpts(requestParameters: UpdateDataSourceOperationRequest): Promise<runtime.RequestOpts>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>>;
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse>;

package/dist/esm/apis/DataSourcesApi.js

@@ -804,7 +804,7 @@ export class DataSourcesApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSourceRaw(requestParameters, initOverrides) {
@@ -815,7 +815,7 @@ export class DataSourcesApi extends runtime.BaseAPI {
         });
     }
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters, initOverrides) {

package/docs/ApiConnectionsApi.md

@@ -172,7 +172,7 @@ example().catch(console.error);
 
 Delete Api Connection Handler
 
-Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+Move a connection to trash; requires ``can_delete``.
 
 ### Example
 
@@ -400,7 +400,7 @@ example().catch(console.error);
 
 Update Api Connection Handler
 
-Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+Update a connection; changing its egress envelope needs Admin/Owner.
 
 ### Example
 

package/docs/DataSourcesApi.md

@@ -1173,7 +1173,7 @@ example().catch(console.error);
 
 Update Data Source Handler
 
-Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
 
 ### Example
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knowledge-stack/ksapi",
-  "version": "2.14.3",
+  "version": "2.14.4",
   "description": "OpenAPI client for @knowledge-stack/ksapi",
   "author": "OpenAPI-Generator",
   "repository": {

package/src/apis/ApiConnectionsApi.ts

@@ -136,7 +136,7 @@ export interface ApiConnectionsApiInterface {
     deleteApiConnectionRequestOpts(requestParameters: DeleteApiConnectionRequest): Promise<runtime.RequestOpts>;
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * @summary Delete Api Connection Handler
      * @param {string} connectionId 
      * @param {*} [options] Override http request option.
@@ -146,7 +146,7 @@ export interface ApiConnectionsApiInterface {
     deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -211,7 +211,7 @@ export interface ApiConnectionsApiInterface {
     updateApiConnectionRequestOpts(requestParameters: UpdateApiConnectionOperationRequest): Promise<runtime.RequestOpts>;
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * @summary Update Api Connection Handler
      * @param {string} connectionId 
      * @param {UpdateApiConnectionRequest} updateApiConnectionRequest 
@@ -222,7 +222,7 @@ export interface ApiConnectionsApiInterface {
     updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>>;
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse>;
@@ -392,7 +392,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     async deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -403,7 +403,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     async deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
@@ -576,7 +576,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     async updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>> {
@@ -587,7 +587,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     async updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse> {

package/src/apis/DataSourcesApi.ts

@@ -548,7 +548,7 @@ export interface DataSourcesApiInterface {
     updateDataSourceRequestOpts(requestParameters: UpdateDataSourceOperationRequest): Promise<runtime.RequestOpts>;
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * @summary Update Data Source Handler
      * @param {string} dataSourceId 
      * @param {UpdateDataSourceRequest} updateDataSourceRequest 
@@ -559,7 +559,7 @@ export interface DataSourcesApiInterface {
     updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>>;
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse>;
@@ -1522,7 +1522,7 @@ export class DataSourcesApi extends runtime.BaseAPI implements DataSourcesApiInt
     }
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     async updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>> {
@@ -1533,7 +1533,7 @@ export class DataSourcesApi extends runtime.BaseAPI implements DataSourcesApiInt
     }
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     async updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse> {