@knowzai/api-client 0.1.0 → 0.3.0

package/dist/contracts.d.ts

@@ -5,8 +5,12 @@ export interface RequestSpec<T> {
     query?: Record<string, unknown>;
     body?: unknown;
     schema: z.ZodType<T, z.ZodTypeDef, any>;
+    /** Extra request headers merged over the defaults (e.g. an integrity hash). */
+    headers?: Record<string, string>;
     anonymous?: boolean;
     timeoutMs?: number;
+    /** Override the client's retry count for this request (use 0 for non-idempotent writes). */
+    retries?: number;
 }
 export interface StreamSpec {
     method: string;
@@ -16,9 +20,107 @@ export interface StreamSpec {
     anonymous?: boolean;
     signal?: AbortSignal;
 }
+/**
+ * A request whose body is raw bytes rather than JSON (CLI_KnowledgeAttachUpload R7).
+ * Unlike `RequestSpec` the body is sent untouched as `application/octet-stream`, and
+ * the caller may add request headers (the chunk-upload protocol is header-driven).
+ * There is no automatic retry — chunk retry policy belongs to the caller (R8).
+ */
+export interface RawRequestSpec<T> {
+    method: string;
+    path: string;
+    query?: Record<string, unknown>;
+    body: Uint8Array;
+    headers?: Record<string, string>;
+    schema: z.ZodType<T, z.ZodTypeDef, any>;
+    anonymous?: boolean;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
 /** Minimal core surface the resource modules depend on. */
 export interface CoreClient {
     request<T>(spec: RequestSpec<T>): Promise<T>;
     stream(spec: StreamSpec): Promise<Response>;
 }
+/** `CoreClient` plus the raw-body leg. Required by resources that upload bytes. */
+export interface RawCoreClient extends CoreClient {
+    rawRequest<T>(spec: RawRequestSpec<T>): Promise<T>;
+}
+/**
+ * Envelope-tolerant JSON request (CLI_PortabilityTransfer R2). Unlike
+ * `RequestSpec`, the response body may be a bare (non-envelope) document —
+ * the selfhosted dialect and the Light export package — and statuses listed in
+ * `acceptStatuses` are parsed as payload-bearing answers instead of thrown
+ * (central 400 validation results, selfhosted 422s). Never retried: the
+ * surfaces this serves (import) are not idempotent.
+ */
+export interface FlexRequestSpec<T> {
+    method: string;
+    path: string;
+    query?: Record<string, unknown>;
+    body?: unknown;
+    schema: z.ZodType<T, z.ZodTypeDef, any>;
+    /** Statuses whose bodies are parsed as payloads instead of thrown (e.g. [400, 422]). */
+    acceptStatuses?: number[];
+    anonymous?: boolean;
+    timeoutMs?: number;
+}
+/**
+ * ADDITIVE sibling of `FlexRequestSpec` — NOT part of the frozen N1 contract.
+ * `PortabilityApi.getSchema` needs to know whether the schema preflight body
+ * was an ApiResponse envelope (⇒ platform dialect) or bare (⇒ selfhosted, R6),
+ * and the frozen spec surface has no channel for that; this hook keeps the
+ * dialect probe to a single HTTP request without altering the frozen types.
+ */
+export interface FlexProbeRequestSpec<T> extends FlexRequestSpec<T> {
+    /** Called once with whether the (parsed-as-answer) body was an ApiResponse envelope. */
+    onEnvelope?: (wasEnvelope: boolean) => void;
+}
+/**
+ * Redirect-safe streaming download (CLI_PortabilityTransfer R3 + R4).
+ * The API request carries auth with `redirect:'manual'`; a 3xx `Location` must
+ * be an absolute https URL (or http to localhost) and is fetched exactly once
+ * with NO credentials and `redirect:'error'`. Bytes stream to
+ * `${outPath}.partial` and are renamed on success; any failure deletes the
+ * partial.
+ */
+export interface DownloadSpec {
+    method: 'GET' | 'POST';
+    path: string;
+    query?: Record<string, unknown>;
+    body?: unknown;
+    outPath: string;
+    onProgress?: (bytesReceived: number, totalBytes?: number) => void;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
+export interface DownloadResult {
+    path: string;
+    bytes: number;
+    contentType?: string;
+    fileName?: string;
+    redirected: boolean;
+}
+/**
+ * Multipart file upload (CLI_PortabilityTransfer R6). The file streams from
+ * disk via `fs.openAsBlob` (never buffered in memory) under the field name
+ * `file` — central takes the first file regardless of name, selfhosted
+ * requires `file`, so one name serves both. Never retried.
+ */
+export interface MultipartSpec<T> {
+    path: string;
+    query?: Record<string, unknown>;
+    filePath: string;
+    fileField: string;
+    fields?: Record<string, string>;
+    schema: z.ZodType<T, z.ZodTypeDef, any>;
+    acceptStatuses?: number[];
+    timeoutMs?: number;
+}
+/** CoreClient extension consumed by PortabilityApi (and N2's FederationApi where noted). */
+export interface PortabilityCoreClient extends CoreClient {
+    flexRequest<T>(spec: FlexRequestSpec<T>): Promise<T>;
+    download(spec: DownloadSpec): Promise<DownloadResult>;
+    uploadMultipart<T>(spec: MultipartSpec<T>): Promise<T>;
+}
 //# sourceMappingURL=contracts.d.ts.map

package/dist/contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IAKf,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7C"}
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IAKf,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,2DAA2D;AAC3D,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC7C;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACpD;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IAEf,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB,CAAC,CAAC,CAAE,SAAQ,eAAe,CAAC,CAAC,CAAC;IACjE,wFAAwF;IACxF,UAAU,CAAC,EAAE,CAAC,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;CAC7C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,4FAA4F;AAC5F,MAAM,WAAW,qBAAsB,SAAQ,UAAU;IACvD,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACxD"}

package/dist/index.d.ts

@@ -1,12 +1,12 @@
 export declare const NODE_ID: "FEAT_KnowzApiClient";
 export { createApiClient, type ApiClientOptions, type KnowzApiClient } from './client.js';
-export type { RequestSpec, StreamSpec, CoreClient } from './contracts.js';
+export type { RequestSpec, StreamSpec, RawRequestSpec, CoreClient, RawCoreClient, FlexRequestSpec, FlexProbeRequestSpec, DownloadSpec, DownloadResult, MultipartSpec, PortabilityCoreClient, } from './contracts.js';
 export { ApiEnvelopeSchema } from './envelope.js';
 export { assertTlsAllowed } from './tls.js';
-export { AuthApi, KnowledgeApi, VaultsApi, SearchApi, AskApi, type SearchQuery, type AskRequest, } from './resources/index.js';
+export { AuthApi, ApiKeysApi, KnowledgeApi, VaultsApi, SearchApi, AskApi, FilesApi, contentTypeForFile, PortabilityApi, FederationApi, type SearchQuery, type AskRequest, type UploadInput, type UploadProgress, type UploadedFile, type PortabilityDialect, type ConflictStrategy, type ExportScopeType, type PortabilitySchema, type ExportScopeInput, type ExportToFileInput, type ExportToFileResult, type ExportJob, type ExportJobPart, type ExportJobStatus, type ImportValidation, type EntityCounts, type ImportOutcome, type FederationPeer, type FederationVaultLink, type FederationRunSummary, type FederationSyncOptionsInput, } from './resources/index.js';
 export { toPaged, toArray } from './resources/paging.js';
 export { ChatApi, parseSseStream } from './chat.js';
 export { EntitiesApi, TopicsApi, StatsApi, CommentsApi, VersionsApi, AmendApi, type Entity, type Topic, type Comment, type KnowledgeVersion, type AmendEnvelope, type AmendStatus, } from './resources/extras.js';
 export { ApiError } from '@knowzai/types';
-export type { ApiEnvelope, AuthHeader, AuthHeaderName, RegisterTenantRequest, RegisterResult, VerifyResult, ValidateKeyResult, } from '@knowzai/types';
+export type { ApiEnvelope, AuthHeader, AuthHeaderName, RegisterTenantRequest, RegisterResult, LoginTokenResult, CreateApiKeyRequest, CreatedApiKey, VerifyResult, ValidateKeyResult, } from '@knowzai/types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,EAAG,qBAA8B,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1F,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EACL,OAAO,EACP,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,EACN,KAAK,WAAW,EAChB,KAAK,UAAU,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,WAAW,EACX,SAAS,EACT,QAAQ,EACR,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,MAAM,EACX,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,iBAAiB,GAClB,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,EAAG,qBAA8B,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC1F,YAAY,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,UAAU,EACV,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EACL,OAAO,EACP,UAAU,EACV,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,EACN,QAAQ,EACR,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,GAChC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,WAAW,EACX,SAAS,EACT,QAAQ,EACR,WAAW,EACX,WAAW,EACX,QAAQ,EACR,KAAK,MAAM,EACX,KAAK,KAAK,EACV,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,WAAW,GACjB,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,YAAY,EACZ,iBAAiB,GAClB,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -2,7 +2,7 @@ export const NODE_ID = 'FEAT_KnowzApiClient';
 export { createApiClient } from './client.js';
 export { ApiEnvelopeSchema } from './envelope.js';
 export { assertTlsAllowed } from './tls.js';
-export { AuthApi, KnowledgeApi, VaultsApi, SearchApi, AskApi, } from './resources/index.js';
+export { AuthApi, ApiKeysApi, KnowledgeApi, VaultsApi, SearchApi, AskApi, FilesApi, contentTypeForFile, PortabilityApi, FederationApi, } from './resources/index.js';
 export { toPaged, toArray } from './resources/paging.js';
 export { ChatApi, parseSseStream } from './chat.js';
 export { EntitiesApi, TopicsApi, StatsApi, CommentsApi, VersionsApi, AmendApi, } from './resources/extras.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,qBAA8B,CAAC;AAEtD,OAAO,EAAE,eAAe,EAA8C,MAAM,aAAa,CAAC;AAE1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EACL,OAAO,EACP,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,GAGP,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,WAAW,EACX,SAAS,EACT,QAAQ,EACR,WAAW,EACX,WAAW,EACX,QAAQ,GAOT,MAAM,uBAAuB,CAAC;AAE/B,gEAAgE;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,qBAA8B,CAAC;AAEtD,OAAO,EAAE,eAAe,EAA8C,MAAM,aAAa,CAAC;AAc1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EACL,OAAO,EACP,UAAU,EACV,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,EACN,QAAQ,EACR,kBAAkB,EAClB,cAAc,EACd,aAAa,GAuBd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EACL,WAAW,EACX,SAAS,EACT,QAAQ,EACR,WAAW,EACX,WAAW,EACX,QAAQ,GAOT,MAAM,uBAAuB,CAAC;AAE/B,gEAAgE;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/resources/api-keys.d.ts

@@ -0,0 +1,19 @@
+import type { CoreClient } from '../contracts.js';
+import type { CreateApiKeyRequest, CreatedApiKey } from '@knowzai/types';
+/**
+ * Explicit API-key management (`/api/v1/api-keys`). Registration does not mint
+ * keys — this is the supported way to obtain one (#661).
+ */
+export declare class ApiKeysApi {
+    private readonly core;
+    constructor(core: CoreClient);
+    /**
+     * Create a key and return it once. Pass `token` (a JWT from sign-in/registration)
+     * to authenticate with a bearer token instead of the client's ambient API key —
+     * that is the post-register case, where no key exists yet.
+     */
+    create(req: CreateApiKeyRequest, opts?: {
+        token?: string;
+    }): Promise<CreatedApiKey>;
+}
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/resources/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/resources/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGzE;;;GAGG;AACH,qBAAa,UAAU;IACT,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,aAAa,CAAC;CAmBxF"}

package/dist/resources/api-keys.js

@@ -0,0 +1,36 @@
+import { CreatedApiKeySchema } from './schemas.js';
+/**
+ * Explicit API-key management (`/api/v1/api-keys`). Registration does not mint
+ * keys — this is the supported way to obtain one (#661).
+ */
+export class ApiKeysApi {
+    core;
+    constructor(core) {
+        this.core = core;
+    }
+    /**
+     * Create a key and return it once. Pass `token` (a JWT from sign-in/registration)
+     * to authenticate with a bearer token instead of the client's ambient API key —
+     * that is the post-register case, where no key exists yet.
+     */
+    create(req, opts = {}) {
+        return this.core.request({
+            method: 'POST',
+            path: '/api/v1/api-keys',
+            body: {
+                name: req.name,
+                keyType: req.keyType ?? 'user',
+                ...(req.description === undefined ? {} : { description: req.description }),
+                ...(req.expirationDays === undefined ? {} : { expirationDays: req.expirationDays }),
+            },
+            schema: CreatedApiKeySchema,
+            // A lost response after the server commits would otherwise mint a second live key.
+            retries: 0,
+            // An explicit bearer token replaces the ambient auth header entirely.
+            ...(opts.token
+                ? { headers: { Authorization: `Bearer ${opts.token}` }, anonymous: true }
+                : {}),
+        });
+    }
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/resources/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/resources/api-keys.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD;;;;OAIG;IACH,MAAM,CAAC,GAAwB,EAAE,OAA2B,EAAE;QAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE;gBACJ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,MAAM;gBAC9B,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC1E,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;aACpF;YACD,MAAM,EAAE,mBAAmB;YAC3B,mFAAmF;YACnF,OAAO,EAAE,CAAC;YACV,sEAAsE;YACtE,GAAG,CAAC,IAAI,CAAC,KAAK;gBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;gBACzE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/resources/auth.d.ts

@@ -1,9 +1,18 @@
 import type { CoreClient } from '../contracts.js';
-import type { RegisterTenantRequest, RegisterResult, VerifyResult, ValidateKeyResult } from '@knowzai/types';
+import type { RegisterTenantRequest, RegisterResult, LoginTokenResult, VerifyResult, ValidateKeyResult } from '@knowzai/types';
 export declare class AuthApi {
     private readonly core;
     constructor(core: CoreClient);
+    /**
+     * Create a tenant + owner. The response is NOT assumed to carry an API key —
+     * keys are minted explicitly through `POST /api/v1/api-keys` (#661).
+     */
     register(req: RegisterTenantRequest): Promise<RegisterResult>;
+    /** Email/password sign-in — returns the bearer token used to create an API key. */
+    login(req: {
+        usernameOrEmail: string;
+        password: string;
+    }): Promise<LoginTokenResult>;
     verify(req: {
         tenantId: string;
         apiKey: string;

package/dist/resources/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/resources/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAGxB,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,QAAQ,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAU7D,MAAM,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAUxE,WAAW,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;CASjE"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/resources/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAGxB,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAU7D,mFAAmF;IACnF,KAAK,CAAC,GAAG,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAUpF,MAAM,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAUxE,WAAW,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;CASjE"}

package/dist/resources/auth.js

@@ -1,9 +1,13 @@
-import { RegisterResultSchema, VerifyResultSchema } from './schemas.js';
+import { RegisterResultSchema, LoginTokenResultSchema, VerifyResultSchema } from './schemas.js';
 export class AuthApi {
     core;
     constructor(core) {
         this.core = core;
     }
+    /**
+     * Create a tenant + owner. The response is NOT assumed to carry an API key —
+     * keys are minted explicitly through `POST /api/v1/api-keys` (#661).
+     */
     register(req) {
         return this.core.request({
             method: 'POST',
@@ -13,6 +17,16 @@ export class AuthApi {
             anonymous: true,
         });
     }
+    /** Email/password sign-in — returns the bearer token used to create an API key. */
+    login(req) {
+        return this.core.request({
+            method: 'POST',
+            path: '/api/v1/users/login',
+            body: req,
+            schema: LoginTokenResultSchema,
+            anonymous: true,
+        });
+    }
     verify(req) {
         return this.core.request({
             method: 'POST',

package/dist/resources/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/resources/auth.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAExE,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,QAAQ,CAAC,GAA0B;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,GAAyC;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,GAAuB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/resources/auth.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEhG,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD;;;OAGG;IACH,QAAQ,CAAC,GAA0B;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,uBAAuB;YAC7B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,oBAAoB;YAC5B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,GAAkD;QACtD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,sBAAsB;YAC9B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,GAAyC;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,GAAuB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,kBAAkB;YAC1B,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/resources/federation.d.ts

@@ -0,0 +1,98 @@
+import type { CoreClient } from '../contracts.js';
+export interface FederationPeer {
+    id: string;
+    slug: string;
+    displayName: string;
+    baseUrl: string;
+    transport: number | string;
+    isEnabled: boolean;
+    allowTombstoneOverride: boolean;
+    remoteInstanceFingerprint?: string | null;
+    lastTestedAt?: string | null;
+    lastTestStatus?: string | null;
+    rowVersionToken: string;
+    warnPreHotfixPeer: boolean;
+}
+export interface FederationVaultLink {
+    id: string;
+    peerId: string;
+    localVaultId: string;
+    remoteVaultId: string;
+    direction: number | string;
+    isActive: boolean;
+    lastCursor?: string | null;
+    lastSyncedAt?: string | null;
+}
+export interface FederationRunSummary {
+    id: string;
+    peerId: string;
+    direction: number | string;
+    vaultLinkId?: string | null;
+    startedAt: string;
+    completedAt?: string | null;
+    status: number | string;
+}
+export interface FederationSyncOptionsInput {
+    skipReEnrichment?: boolean;
+    maxFileMb?: number;
+    since?: string;
+}
+export declare class FederationApi {
+    private readonly core;
+    constructor(core: CoreClient);
+    create(req: {
+        slug: string;
+        displayName: string;
+        baseUrl: string;
+        transport: number;
+        apiKey: string;
+    }): Promise<FederationPeer>;
+    list(includeDisabled?: boolean): Promise<FederationPeer[]>;
+    get(id: string): Promise<FederationPeer>;
+    update(id: string, req: {
+        displayName?: string;
+        baseUrl?: string;
+        isEnabled?: boolean;
+        allowTombstoneOverride?: boolean;
+    }, ifMatch: string): Promise<FederationPeer>;
+    remove(id: string): Promise<void>;
+    rotateCredential(id: string, apiKey: string, ifMatch: string): Promise<FederationPeer>;
+    test(id: string): Promise<{
+        success: boolean;
+        [k: string]: unknown;
+    }>;
+    acceptNewFingerprint(id: string): Promise<FederationPeer>;
+    listVaultLinks(id: string): Promise<FederationVaultLink[]>;
+    createVaultLink(id: string, req: {
+        peerId: string;
+        localVaultId: string;
+        remoteVaultId: string;
+        direction: number;
+    }): Promise<FederationVaultLink>;
+    deleteVaultLink(id: string, linkId: string): Promise<void>;
+    pull(id: string, req: {
+        vaultLinkId: string;
+        options: FederationSyncOptionsInput;
+    }): Promise<{
+        runId: string;
+        status: number | string;
+    }>;
+    push(id: string, req: {
+        vaultLinkId: string;
+        options: FederationSyncOptionsInput;
+    }): Promise<{
+        runId: string;
+        status: number | string;
+    }>;
+    listRuns(id: string, opts?: {
+        cursor?: string;
+        limit?: number;
+        status?: string;
+    }): Promise<{
+        items: FederationRunSummary[];
+        nextCursor?: string | null;
+    }>;
+    getRun(id: string, runId: string): Promise<Record<string, unknown>>;
+    cancelRun(id: string, runId: string): Promise<void>;
+}
+//# sourceMappingURL=federation.d.ts.map

package/dist/resources/federation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.d.ts","sourceRoot":"","sources":["../../src/resources/federation.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAkBlD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,sBAAsB,EAAE,OAAO,CAAC;IAChC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AACD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AACD,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,0BAA0B;IACzC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAuDD,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAE7C,MAAM,CAAC,GAAG,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,cAAc,CAAC;IAI3B,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAS1D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAIxC,MAAM,CACJ,EAAE,EAAE,MAAM,EACV,GAAG,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,sBAAsB,CAAC,EAAE,OAAO,CAAA;KAAE,EACtG,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,CAAC;IAW1B,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAWtF,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IASrE,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IASzD,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAI1D,eAAe,CACb,EAAE,EAAE,MAAM,EACV,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GACtF,OAAO,CAAC,mBAAmB,CAAC;IAU/B,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1D,IAAI,CACF,EAAE,EAAE,MAAM,EACV,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,0BAA0B,CAAA;KAAE,GAChE,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAUtD,IAAI,CACF,EAAE,EAAE,MAAM,EACV,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,0BAA0B,CAAA;KAAE,GAChE,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IAUtD,QAAQ,CACN,EAAE,EAAE,MAAM,EACV,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC1D,OAAO,CAAC;QAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IASzE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAQ7D,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAS1D"}

package/dist/resources/federation.js

@@ -0,0 +1,184 @@
+import { z } from 'zod';
+/**
+ * CLI_InstanceTransfer — thin client for the server-to-server federation plane
+ * (`FederationController`, `/api/v1/federation/peers`). All responses are
+ * enveloped, so the standard `request` leg serves every route.
+ *
+ * AUTH: the controller is JWT-Bearer-only (Owner/Admin) — the resource itself
+ * is auth-agnostic and simply uses whatever header callback the client was
+ * built with; `knowz peer` builds a Bearer-token client per invocation (R8).
+ *
+ * WIRE (R13): JSON bodies use NUMERIC enum values (`transport: 0` KnowzApiKey,
+ * `direction: 0|1` Pull/Push — proven interop with the SPA's numeric enums);
+ * query params use enum NAMES; `If-Match` carries `rowVersionToken`.
+ */
+const BASE = '/api/v1/federation/peers';
+const enumValue = z.union([z.number(), z.string()]);
+const PeerSchema = z
+    .object({
+    id: z.string(),
+    slug: z.string(),
+    displayName: z.string().default(''),
+    baseUrl: z.string().default(''),
+    transport: enumValue.default(0),
+    isEnabled: z.boolean().default(true),
+    allowTombstoneOverride: z.boolean().default(false),
+    remoteInstanceFingerprint: z.string().nullish(),
+    lastTestedAt: z.string().nullish(),
+    lastTestStatus: z.string().nullish(),
+    rowVersionToken: z.string().default(''),
+    warnPreHotfixPeer: z.boolean().default(false),
+})
+    .passthrough();
+const VaultLinkSchema = z
+    .object({
+    id: z.string(),
+    peerId: z.string(),
+    localVaultId: z.string(),
+    remoteVaultId: z.string(),
+    direction: enumValue.default(0),
+    isActive: z.boolean().default(true),
+    lastCursor: z.string().nullish(),
+    lastSyncedAt: z.string().nullish(),
+})
+    .passthrough();
+const RunSummarySchema = z
+    .object({
+    id: z.string(),
+    peerId: z.string(),
+    direction: enumValue.default(0),
+    vaultLinkId: z.string().nullish(),
+    startedAt: z.string().default(''),
+    completedAt: z.string().nullish(),
+    status: enumValue.default(''),
+})
+    .passthrough();
+const TestResultSchema = z.object({ success: z.boolean() }).passthrough();
+const EnqueueSchema = z.object({ runId: z.string(), status: enumValue.default('') }).passthrough();
+const RunListSchema = z
+    .object({ items: z.array(RunSummarySchema).default([]), nextCursor: z.string().nullish() })
+    .passthrough();
+/** Mutations are never retried — creating a peer or enqueueing a run twice is a real side effect. */
+const NO_RETRY = 0;
+export class FederationApi {
+    core;
+    constructor(core) {
+        this.core = core;
+    }
+    create(req) {
+        return this.core.request({ method: 'POST', path: BASE, body: req, schema: PeerSchema, retries: NO_RETRY });
+    }
+    list(includeDisabled) {
+        return this.core.request({
+            method: 'GET',
+            path: BASE,
+            query: includeDisabled ? { includeDisabled: true } : undefined,
+            schema: z.array(PeerSchema),
+        });
+    }
+    get(id) {
+        return this.core.request({ method: 'GET', path: `${BASE}/${id}`, schema: PeerSchema });
+    }
+    update(id, req, ifMatch) {
+        return this.core.request({
+            method: 'PATCH',
+            path: `${BASE}/${id}`,
+            body: req,
+            headers: { 'If-Match': ifMatch },
+            schema: PeerSchema,
+            retries: NO_RETRY,
+        });
+    }
+    remove(id) {
+        return this.core.request({ method: 'DELETE', path: `${BASE}/${id}`, schema: z.void(), retries: NO_RETRY });
+    }
+    rotateCredential(id, apiKey, ifMatch) {
+        return this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/credential/rotate`,
+            body: { apiKey },
+            headers: { 'If-Match': ifMatch },
+            schema: PeerSchema,
+            retries: NO_RETRY,
+        });
+    }
+    test(id) {
+        return this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/test`,
+            schema: TestResultSchema,
+            retries: NO_RETRY,
+        });
+    }
+    acceptNewFingerprint(id) {
+        return this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/accept-new-fingerprint`,
+            schema: PeerSchema,
+            retries: NO_RETRY,
+        });
+    }
+    listVaultLinks(id) {
+        return this.core.request({ method: 'GET', path: `${BASE}/${id}/vault-links`, schema: z.array(VaultLinkSchema) });
+    }
+    createVaultLink(id, req) {
+        return this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/vault-links`,
+            body: req,
+            schema: VaultLinkSchema,
+            retries: NO_RETRY,
+        });
+    }
+    deleteVaultLink(id, linkId) {
+        return this.core.request({
+            method: 'DELETE',
+            path: `${BASE}/${id}/vault-links/${linkId}`,
+            schema: z.void(),
+            retries: NO_RETRY,
+        });
+    }
+    pull(id, req) {
+        return this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/pull`,
+            body: req,
+            schema: EnqueueSchema,
+            retries: NO_RETRY,
+        });
+    }
+    push(id, req) {
+        return this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/push`,
+            body: req,
+            schema: EnqueueSchema,
+            retries: NO_RETRY,
+        });
+    }
+    listRuns(id, opts) {
+        return this.core.request({
+            method: 'GET',
+            path: `${BASE}/${id}/runs`,
+            query: { cursor: opts?.cursor, limit: opts?.limit, status: opts?.status },
+            schema: RunListSchema,
+        });
+    }
+    getRun(id, runId) {
+        return this.core.request({
+            method: 'GET',
+            path: `${BASE}/${id}/runs/${runId}`,
+            schema: z.record(z.unknown()),
+        });
+    }
+    async cancelRun(id, runId) {
+        // 200 `ApiResponse.Ok("Run cancelled")` — data may be null; accept anything.
+        await this.core.request({
+            method: 'POST',
+            path: `${BASE}/${id}/runs/${runId}/cancel`,
+            schema: z.unknown(),
+            retries: NO_RETRY,
+        });
+    }
+}
+//# sourceMappingURL=federation.js.map

package/dist/resources/federation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation.js","sourceRoot":"","sources":["../../src/resources/federation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;;;;;;;GAYG;AAEH,MAAM,IAAI,GAAG,0BAA0B,CAAC;AAyCxC,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAEpD,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClD,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC9C,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9B,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1E,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACnG,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;KAC1F,WAAW,EAAE,CAAC;AAEjB,qGAAqG;AACrG,MAAM,QAAQ,GAAG,CAAC,CAAC;AAEnB,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,MAAM,CAAC,GAMN;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,IAAI,CAAC,eAAyB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAC9D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CACJ,EAAU,EACV,GAAsG,EACtG,OAAe;QAEf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE;YACrB,IAAI,EAAE,GAAG;YACT,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;YAChC,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,gBAAgB,CAAC,EAAU,EAAE,MAAc,EAAE,OAAe;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,oBAAoB;YACvC,IAAI,EAAE,EAAE,MAAM,EAAE;YAChB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;YAChC,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO;YAC1B,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,oBAAoB,CAAC,EAAU;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,yBAAyB;YAC5C,MAAM,EAAE,UAAU;YAClB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,eAAe,CACb,EAAU,EACV,GAAuF;QAEvF,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,cAAc;YACjC,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,EAAU,EAAE,MAAc;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,gBAAgB,MAAM,EAAE;YAC3C,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;YAChB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CACF,EAAU,EACV,GAAiE;QAEjE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO;YAC1B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CACF,EAAU,EACV,GAAiE;QAEjE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO;YAC1B,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CACN,EAAU,EACV,IAA2D;QAE3D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,OAAO;YAC1B,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;YACzE,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAAa;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,KAAK,EAAE;YACnC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,EAAU,EAAE,KAAa;QACvC,6EAA6E;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS;YAC1C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;YACnB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;CACF"}