@knowledge-stack/ksapi 2.14.3 → 2.15.0

package/dist/esm/models/ExportSkillsRequest.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Skills to pack into one ZIP, each under a top-level folder named after it.
+ * @export
+ * @interface ExportSkillsRequest
+ */
+export interface ExportSkillsRequest {
+    /**
+     * Skills whose frozen active versions are packed together; duplicates are ignored. Every skill must exist and be readable.
+     * @type {Array<string>}
+     * @memberof ExportSkillsRequest
+     */
+    skillIds: Array<string>;
+}
+export declare const ExportSkillsRequestPropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number;
+        minLength?: number;
+        pattern?: string;
+        maximum?: number;
+        exclusiveMaximum?: boolean;
+        minimum?: number;
+        exclusiveMinimum?: boolean;
+        multipleOf?: number;
+        maxItems?: number;
+        minItems?: number;
+        uniqueItems?: boolean;
+    };
+};
+/**
+ * Check if a given object implements the ExportSkillsRequest interface.
+ */
+export declare function instanceOfExportSkillsRequest(value: object): value is ExportSkillsRequest;
+export declare function ExportSkillsRequestFromJSON(json: any): ExportSkillsRequest;
+export declare function ExportSkillsRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): ExportSkillsRequest;
+export declare function ExportSkillsRequestToJSON(json: any): ExportSkillsRequest;
+export declare function ExportSkillsRequestToJSONTyped(value?: ExportSkillsRequest | null, ignoreDiscriminator?: boolean): any;

package/dist/esm/models/ExportSkillsRequest.js

@@ -0,0 +1,50 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+export const ExportSkillsRequestPropertyValidationAttributesMap = {
+    skillIds: {
+        maxItems: 50,
+        minItems: 1,
+        uniqueItems: false,
+    },
+};
+/**
+ * Check if a given object implements the ExportSkillsRequest interface.
+ */
+export function instanceOfExportSkillsRequest(value) {
+    if (!('skillIds' in value) || value['skillIds'] === undefined)
+        return false;
+    return true;
+}
+export function ExportSkillsRequestFromJSON(json) {
+    return ExportSkillsRequestFromJSONTyped(json, false);
+}
+export function ExportSkillsRequestFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'skillIds': json['skill_ids'],
+    };
+}
+export function ExportSkillsRequestToJSON(json) {
+    return ExportSkillsRequestToJSONTyped(json, false);
+}
+export function ExportSkillsRequestToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'skill_ids': value['skillIds'],
+    };
+}

package/dist/esm/models/index.d.ts

@@ -136,6 +136,7 @@ export * from './EnrichedThreadMessageContent';
 export * from './ErrorResponse';
 export * from './EventResponse';
 export * from './ExcludedCommonFile';
+export * from './ExportSkillsRequest';
 export * from './ExtractRequest';
 export * from './ExtractResponse';
 export * from './FeaturesResponse';

package/dist/esm/models/index.js

@@ -138,6 +138,7 @@ export * from './EnrichedThreadMessageContent';
 export * from './ErrorResponse';
 export * from './EventResponse';
 export * from './ExcludedCommonFile';
+export * from './ExportSkillsRequest';
 export * from './ExtractRequest';
 export * from './ExtractResponse';
 export * from './FeaturesResponse';

package/dist/models/ExportSkillsRequest.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Skills to pack into one ZIP, each under a top-level folder named after it.
+ * @export
+ * @interface ExportSkillsRequest
+ */
+export interface ExportSkillsRequest {
+    /**
+     * Skills whose frozen active versions are packed together; duplicates are ignored. Every skill must exist and be readable.
+     * @type {Array<string>}
+     * @memberof ExportSkillsRequest
+     */
+    skillIds: Array<string>;
+}
+export declare const ExportSkillsRequestPropertyValidationAttributesMap: {
+    [property: string]: {
+        maxLength?: number;
+        minLength?: number;
+        pattern?: string;
+        maximum?: number;
+        exclusiveMaximum?: boolean;
+        minimum?: number;
+        exclusiveMinimum?: boolean;
+        multipleOf?: number;
+        maxItems?: number;
+        minItems?: number;
+        uniqueItems?: boolean;
+    };
+};
+/**
+ * Check if a given object implements the ExportSkillsRequest interface.
+ */
+export declare function instanceOfExportSkillsRequest(value: object): value is ExportSkillsRequest;
+export declare function ExportSkillsRequestFromJSON(json: any): ExportSkillsRequest;
+export declare function ExportSkillsRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): ExportSkillsRequest;
+export declare function ExportSkillsRequestToJSON(json: any): ExportSkillsRequest;
+export declare function ExportSkillsRequestToJSONTyped(value?: ExportSkillsRequest | null, ignoreDiscriminator?: boolean): any;

package/dist/models/ExportSkillsRequest.js

@@ -0,0 +1,58 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * Knowledge Stack API
+ * Knowledge Stack backend API for authentication and knowledge management.  ## Integrating (RPA / machine clients)  **Base URL.** Knowledge Stack is self-hosted — point at your own deployment host (see `servers`). The `localhost` entry is for local development only.  **Authentication.** Send `Authorization: Bearer <api-key>` on every request. Mint an API key once via `POST /v1/api-keys` from a signed-in browser session; the raw `sk-user-...` secret is returned **only** at creation, so store it then. A key inherits its owning user\'s live tenant role and path permissions — create RPA keys from a least-privilege user, and set `expires_at` for rotation. The `ks_uat` cookie scheme is browser-only and cannot be used by headless clients.  **Async work is polled, not pushed.** There are no outbound webhooks. - `POST /v1/documents/ingest` returns `201` immediately with a `workflow_id`;   poll `GET /v1/system-jobs/document_versions/{workflow_id}` until `status` is   terminal (anything other than `pending`/`processing`). The `Location` response   header points at this poll resource. - `POST /v1/workflow-runs/{run_id}/start` returns `202`; poll   `GET /v1/workflow-runs/{run_id}` until `execution_state` is `COMPLETED` or   `FAILED`. The `Location` header points at the run resource. - `POST /v1/agent/ask` is **synchronous** — it blocks until the agent finishes   and returns the answer inline. Use a generous HTTP timeout.  **Pagination.** List endpoints accept `limit`/`offset` and return `{items, total, limit, offset}`.  **Errors.** Every non-2xx body is `{detail, code, request_id}`. `code` is a stable value from a closed set (see the `ErrorResponse` schema\'s `code` enum) — branch on it rather than parsing `detail`. Quota rejections return `429` with a `Retry-After` header; transient lock contention returns a retryable `503`. Quote `request_id` (also the `x-request-id` response header) to support.  **Idempotency.** `POST /v1/workflow-runs` accepts an `idempotency_key` to dedupe retried run creation. `agent/ask` charges one message *before* running and does not refund a client-cancelled call.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExportSkillsRequestPropertyValidationAttributesMap = void 0;
+exports.instanceOfExportSkillsRequest = instanceOfExportSkillsRequest;
+exports.ExportSkillsRequestFromJSON = ExportSkillsRequestFromJSON;
+exports.ExportSkillsRequestFromJSONTyped = ExportSkillsRequestFromJSONTyped;
+exports.ExportSkillsRequestToJSON = ExportSkillsRequestToJSON;
+exports.ExportSkillsRequestToJSONTyped = ExportSkillsRequestToJSONTyped;
+exports.ExportSkillsRequestPropertyValidationAttributesMap = {
+    skillIds: {
+        maxItems: 50,
+        minItems: 1,
+        uniqueItems: false,
+    },
+};
+/**
+ * Check if a given object implements the ExportSkillsRequest interface.
+ */
+function instanceOfExportSkillsRequest(value) {
+    if (!('skillIds' in value) || value['skillIds'] === undefined)
+        return false;
+    return true;
+}
+function ExportSkillsRequestFromJSON(json) {
+    return ExportSkillsRequestFromJSONTyped(json, false);
+}
+function ExportSkillsRequestFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'skillIds': json['skill_ids'],
+    };
+}
+function ExportSkillsRequestToJSON(json) {
+    return ExportSkillsRequestToJSONTyped(json, false);
+}
+function ExportSkillsRequestToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'skill_ids': value['skillIds'],
+    };
+}

package/dist/models/index.d.ts

@@ -136,6 +136,7 @@ export * from './EnrichedThreadMessageContent';
 export * from './ErrorResponse';
 export * from './EventResponse';
 export * from './ExcludedCommonFile';
+export * from './ExportSkillsRequest';
 export * from './ExtractRequest';
 export * from './ExtractResponse';
 export * from './FeaturesResponse';

package/dist/models/index.js

@@ -154,6 +154,7 @@ __exportStar(require("./EnrichedThreadMessageContent"), exports);
 __exportStar(require("./ErrorResponse"), exports);
 __exportStar(require("./EventResponse"), exports);
 __exportStar(require("./ExcludedCommonFile"), exports);
+__exportStar(require("./ExportSkillsRequest"), exports);
 __exportStar(require("./ExtractRequest"), exports);
 __exportStar(require("./ExtractResponse"), exports);
 __exportStar(require("./FeaturesResponse"), exports);

package/docs/ApiConnectionsApi.md

@@ -172,7 +172,7 @@ example().catch(console.error);
 
 Delete Api Connection Handler
 
-Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+Move a connection to trash; requires ``can_delete``.
 
 ### Example
 
@@ -400,7 +400,7 @@ example().catch(console.error);
 
 Update Api Connection Handler
 
-Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+Update a connection; changing its egress envelope needs Admin/Owner.
 
 ### Example
 

package/docs/DataSourcesApi.md

@@ -1173,7 +1173,7 @@ example().catch(console.error);
 
 Update Data Source Handler
 
-Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
 
 ### Example
 

package/docs/ExportSkillsRequest.md

@@ -0,0 +1,35 @@
+
+# ExportSkillsRequest
+
+Skills to pack into one ZIP, each under a top-level folder named after it.
+
+## Properties
+
+Name | Type
+------------ | -------------
+`skillIds` | Array<string>
+
+## Example
+
+```typescript
+import type { ExportSkillsRequest } from '@knowledge-stack/ksapi'
+
+// TODO: Update the object below with actual values
+const example = {
+  "skillIds": null,
+} satisfies ExportSkillsRequest
+
+console.log(example)
+
+// Convert the instance to a JSON string
+const exampleJSON: string = JSON.stringify(example)
+console.log(exampleJSON)
+
+// Parse the JSON string back to an object
+const exampleParsed = JSON.parse(exampleJSON) as ExportSkillsRequest
+console.log(exampleParsed)
+```
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+

package/docs/SkillsApi.md

@@ -11,6 +11,7 @@ All URIs are relative to *http://localhost:8000*
 | [**deleteSkill**](SkillsApi.md#deleteskill) | **DELETE** /v1/skills/{skill_id} | Delete Skill Handler |
 | [**discardSkillDraft**](SkillsApi.md#discardskilldraft) | **POST** /v1/skills/{skill_id}/discard-draft | Discard Skill Draft Handler |
 | [**exportSkill**](SkillsApi.md#exportskill) | **GET** /v1/skills/{skill_id}/export | Export Skill Handler |
+| [**exportSkills**](SkillsApi.md#exportskillsoperation) | **POST** /v1/skills/export | Export Skills Handler |
 | [**getSkill**](SkillsApi.md#getskill) | **GET** /v1/skills/{skill_id} | Get Skill Handler |
 | [**importSkill**](SkillsApi.md#importskill) | **POST** /v1/skills/import | Import Skill Handler |
 | [**listSkillVersions**](SkillsApi.md#listskillversions) | **GET** /v1/skills/{skill_id}/versions | List Skill Versions Handler |
@@ -552,6 +553,81 @@ example().catch(console.error);
 [[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
 
 
+## exportSkills
+
+> Blob exportSkills(exportSkillsRequest)
+
+Export Skills Handler
+
+Download several skills\' active versions as one ZIP; needs can_read on each.
+
+### Example
+
+```ts
+import {
+  Configuration,
+  SkillsApi,
+} from '@knowledge-stack/ksapi';
+import type { ExportSkillsOperationRequest } from '@knowledge-stack/ksapi';
+
+async function example() {
+  console.log("🚀 Testing @knowledge-stack/ksapi SDK...");
+  const config = new Configuration({ 
+    // To configure API key authorization: cookieAuth
+    apiKey: "YOUR API KEY",
+    // Configure HTTP bearer authorization: bearerAuth
+    accessToken: "YOUR BEARER TOKEN",
+  });
+  const api = new SkillsApi(config);
+
+  const body = {
+    // ExportSkillsRequest
+    exportSkillsRequest: ...,
+  } satisfies ExportSkillsOperationRequest;
+
+  try {
+    const data = await api.exportSkills(body);
+    console.log(data);
+  } catch (error) {
+    console.error(error);
+  }
+}
+
+// Run the test
+example().catch(console.error);
+```
+
+### Parameters
+
+
+| Name | Type | Description  | Notes |
+|------------- | ------------- | ------------- | -------------|
+| **exportSkillsRequest** | [ExportSkillsRequest](ExportSkillsRequest.md) |  | |
+
+### Return type
+
+**Blob**
+
+### Authorization
+
+[cookieAuth](../README.md#cookieAuth), [bearerAuth](../README.md#bearerAuth)
+
+### HTTP request headers
+
+- **Content-Type**: `application/json`
+- **Accept**: `application/zip`, `application/json`
+
+
+### HTTP response details
+| Status code | Description | Response headers |
+|-------------|-------------|------------------|
+| **200** | One ZIP with a top-level folder per skill. |  -  |
+| **422** | Validation Error |  -  |
+| **0** | Error response. |  -  |
+
+[[Back to top]](#) [[Back to API list]](../README.md#api-endpoints) [[Back to Model list]](../README.md#models) [[Back to README]](../README.md)
+
+
 ## getSkill
 
 > SkillResponse getSkill(skillId, includeFileContents)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knowledge-stack/ksapi",
-  "version": "2.14.3",
+  "version": "2.15.0",
   "description": "OpenAPI client for @knowledge-stack/ksapi",
   "author": "OpenAPI-Generator",
   "repository": {

package/src/apis/ApiConnectionsApi.ts

@@ -136,7 +136,7 @@ export interface ApiConnectionsApiInterface {
     deleteApiConnectionRequestOpts(requestParameters: DeleteApiConnectionRequest): Promise<runtime.RequestOpts>;
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * @summary Delete Api Connection Handler
      * @param {string} connectionId 
      * @param {*} [options] Override http request option.
@@ -146,7 +146,7 @@ export interface ApiConnectionsApiInterface {
     deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
@@ -211,7 +211,7 @@ export interface ApiConnectionsApiInterface {
     updateApiConnectionRequestOpts(requestParameters: UpdateApiConnectionOperationRequest): Promise<runtime.RequestOpts>;
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * @summary Update Api Connection Handler
      * @param {string} connectionId 
      * @param {UpdateApiConnectionRequest} updateApiConnectionRequest 
@@ -222,7 +222,7 @@ export interface ApiConnectionsApiInterface {
     updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>>;
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse>;
@@ -392,7 +392,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     async deleteApiConnectionRaw(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>> {
@@ -403,7 +403,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Move a connection to trash (Admin/Owner).  Soft-delete via the path_part subtree, mirroring create/update authz. A connection holds no Qdrant vectors, so there is no trash-sync workflow.
+     * Move a connection to trash; requires ``can_delete``.
      * Delete Api Connection Handler
      */
     async deleteApiConnection(requestParameters: DeleteApiConnectionRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void> {
@@ -576,7 +576,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     async updateApiConnectionRaw(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ApiConnectionResponse>> {
@@ -587,7 +587,7 @@ export class ApiConnectionsApi extends runtime.BaseAPI implements ApiConnections
     }
 
     /**
-     * Update a connection (Admin/Owner). A risk-up change re-arms the disclaimer.
+     * Update a connection; changing its egress envelope needs Admin/Owner.
      * Update Api Connection Handler
      */
     async updateApiConnection(requestParameters: UpdateApiConnectionOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ApiConnectionResponse> {

package/src/apis/DataSourcesApi.ts

@@ -548,7 +548,7 @@ export interface DataSourcesApiInterface {
     updateDataSourceRequestOpts(requestParameters: UpdateDataSourceOperationRequest): Promise<runtime.RequestOpts>;
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * @summary Update Data Source Handler
      * @param {string} dataSourceId 
      * @param {UpdateDataSourceRequest} updateDataSourceRequest 
@@ -559,7 +559,7 @@ export interface DataSourcesApiInterface {
     updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>>;
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse>;
@@ -1522,7 +1522,7 @@ export class DataSourcesApi extends runtime.BaseAPI implements DataSourcesApiInt
     }
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     async updateDataSourceRaw(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<DataSourceResponse>> {
@@ -1533,7 +1533,7 @@ export class DataSourcesApi extends runtime.BaseAPI implements DataSourcesApiInt
     }
 
     /**
-     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move). Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
+     * Rename, move, and/or re-credential a connector.  Requires ``can_write`` on the connector (and on the destination folder for a move); supplying ``connection_config`` additionally requires OWNER/ADMIN. Fresh ``connection_config`` is re-validated against the DB before persisting (bad creds → 400, consistent with create); creds are never echoed back. ``engine`` is immutable.
      * Update Data Source Handler
      */
     async updateDataSource(requestParameters: UpdateDataSourceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DataSourceResponse> {

package/src/apis/SkillsApi.ts

@@ -18,6 +18,7 @@ import type {
   ActivateSkillVersionRequest,
   CreateSkillRequest,
   ErrorResponse,
+  ExportSkillsRequest,
   HTTPValidationError,
   PaginatedResponseSkillResponse,
   SearchSkillsRequest,
@@ -35,6 +36,8 @@ import {
     CreateSkillRequestToJSON,
     ErrorResponseFromJSON,
     ErrorResponseToJSON,
+    ExportSkillsRequestFromJSON,
+    ExportSkillsRequestToJSON,
     HTTPValidationErrorFromJSON,
     HTTPValidationErrorToJSON,
     PaginatedResponseSkillResponseFromJSON,
@@ -85,6 +88,10 @@ export interface ExportSkillRequest {
     skillId: string;
 }
 
+export interface ExportSkillsOperationRequest {
+    exportSkillsRequest: ExportSkillsRequest;
+}
+
 export interface GetSkillRequest {
     skillId: string;
     includeFileContents?: boolean;
@@ -298,6 +305,30 @@ export interface SkillsApiInterface {
      */
     exportSkill(requestParameters: ExportSkillRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
 
+    /**
+     * Creates request options for exportSkills without sending the request
+     * @param {ExportSkillsRequest} exportSkillsRequest 
+     * @throws {RequiredError}
+     * @memberof SkillsApiInterface
+     */
+    exportSkillsRequestOpts(requestParameters: ExportSkillsOperationRequest): Promise<runtime.RequestOpts>;
+
+    /**
+     * Download several skills\' active versions as one ZIP; needs can_read on each.
+     * @summary Export Skills Handler
+     * @param {ExportSkillsRequest} exportSkillsRequest 
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SkillsApiInterface
+     */
+    exportSkillsRaw(requestParameters: ExportSkillsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Blob>>;
+
+    /**
+     * Download several skills\' active versions as one ZIP; needs can_read on each.
+     * Export Skills Handler
+     */
+    exportSkills(requestParameters: ExportSkillsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Blob>;
+
     /**
      * Creates request options for getSkill without sending the request
      * @param {string} skillId 
@@ -892,6 +923,63 @@ export class SkillsApi extends runtime.BaseAPI implements SkillsApiInterface {
         return await response.value();
     }
 
+    /**
+     * Creates request options for exportSkills without sending the request
+     */
+    async exportSkillsRequestOpts(requestParameters: ExportSkillsOperationRequest): Promise<runtime.RequestOpts> {
+        if (requestParameters['exportSkillsRequest'] == null) {
+            throw new runtime.RequiredError(
+                'exportSkillsRequest',
+                'Required parameter "exportSkillsRequest" was null or undefined when calling exportSkills().'
+            );
+        }
+
+        const queryParameters: any = {};
+
+        const headerParameters: runtime.HTTPHeaders = {};
+
+        headerParameters['Content-Type'] = 'application/json';
+
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearerAuth", []);
+
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+
+        let urlPath = `/v1/skills/export`;
+
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: ExportSkillsRequestToJSON(requestParameters['exportSkillsRequest']),
+        };
+    }
+
+    /**
+     * Download several skills\' active versions as one ZIP; needs can_read on each.
+     * Export Skills Handler
+     */
+    async exportSkillsRaw(requestParameters: ExportSkillsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Blob>> {
+        const requestOptions = await this.exportSkillsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+
+        return new runtime.BlobApiResponse(response);
+    }
+
+    /**
+     * Download several skills\' active versions as one ZIP; needs can_read on each.
+     * Export Skills Handler
+     */
+    async exportSkills(requestParameters: ExportSkillsOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Blob> {
+        const response = await this.exportSkillsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+
     /**
      * Creates request options for getSkill without sending the request
      */