@krovacloud/sdk 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -4,6 +4,40 @@ All notable changes to `@krovacloud/sdk` are documented here. This project adher
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html) and the
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format.
 
+## 0.1.3
+
+### Security
+
+- **Prevent API-key leakage via HTTP redirects.** The client now sets
+  `redirect: "manual"` on every request, so a `3xx` response is never
+  auto-followed. Previously the SDK relied on `fetch`'s default
+  (`redirect: "follow"`), and because the Fetch spec only strips
+  `Authorization` / `Cookie` / `Proxy-Authorization` — **not** a custom header
+  like `X-API-KEY` — on a cross-origin redirect, a redirect from the API host to
+  another origin (via a compromised/misconfigured proxy, an open-redirect, or a
+  MITM) would silently resend the API key to the redirect target. The Krova
+  Cloud API is a plain JSON API that never legitimately redirects a data call;
+  with `"manual"`, a redirect now surfaces as a `KrovaError` instead of leaking
+  the key. Regression-tested in `tests/redirect.test.ts`.
+
+## 0.1.2
+
+### Changed
+
+- **Documentation & packaging polish** — no runtime behavior change.
+  - Rewrote the README to a complete public reference: npm/license/types
+    badges, a runnable Quickstart traced against the shipped API, a per-export
+    reference for `KrovaClient`, every `client.cubes.*` and `client.catalog.*`
+    helper, `client.raw`, and `KrovaError` (with its full field table), plus
+    Auth, Error-handling, Configuration, TypeScript, Requirements, and a
+    **Related packages** section linking `@krovacloud/cli`,
+    `@krovacloud/webhook`, `@krovacloud/mcp`, and `n8n-nodes-krova`.
+  - Sharpened the `package.json` `description`, expanded `keywords`
+    (added `api`, `api-client`, `cubes`, `openapi`), and pointed `homepage`
+    at [krova.cloud](https://krova.cloud).
+  - Added a top-level `"types"` fallback and a `"./package.json"` entry to the
+    `exports` map for broader tooling compatibility.
+
 ## 0.1.1
 
 ### Fixed

package/README.md

@@ -1,23 +1,29 @@
 # @krovacloud/sdk
 
-The official TypeScript SDK for the [Krova Cloud](https://krova.cloud) API — a fully typed client generated directly from the Krova Cloud OpenAPI specification.
+[![npm version](https://img.shields.io/npm/v/@krovacloud/sdk?color=cb3837&logo=npm)](https://www.npmjs.com/package/@krovacloud/sdk)
+[![npm downloads](https://img.shields.io/npm/dm/@krovacloud/sdk?color=cb3837&logo=npm)](https://www.npmjs.com/package/@krovacloud/sdk)
+[![license: MIT](https://img.shields.io/npm/l/@krovacloud/sdk?color=blue)](./LICENSE)
+[![types: included](https://img.shields.io/npm/types/@krovacloud/sdk?logo=typescript)](https://www.typescriptlang.org/)
 
-Krova Cloud is a self-service platform for lightweight **Cubes** (Firecracker microVMs) on dedicated bare-metal servers. This SDK gives you typed access to every endpoint plus ergonomic helpers for the common Cube and catalog operations.
+The official TypeScript SDK for the [Krova Cloud](https://krova.cloud) API — a fully typed client for provisioning and managing **Cubes** (Firecracker microVMs) on dedicated bare-metal servers.
 
-- **Fully typed** — request bodies, responses, and path params are typed from the OpenAPI spec via [`openapi-typescript`](https://github.com/openapi-ts/openapi-typescript) + [`openapi-fetch`](https://github.com/openapi-ts/openapi-typescript/tree/main/packages/openapi-fetch).
-- **ESM + CJS** — ships both, with `.d.ts` types.
-- **Ergonomic helpers** — `client.cubes.*` and `client.catalog.*` unwrap the response and throw on errors.
-- **Escape hatch** — `client.raw` exposes the underlying typed client for every operation in the spec (31 operations across 22 resource paths).
+## Highlights
+
+- **Fully typed** — request bodies, responses, and path params are generated from the Krova Cloud OpenAPI spec via [`openapi-typescript`](https://github.com/openapi-ts/openapi-typescript) + [`openapi-fetch`](https://github.com/openapi-ts/openapi-typescript/tree/main/packages/openapi-fetch).
+- **Ergonomic helpers** — `client.cubes.*` and `client.catalog.*` unwrap the response body and throw a typed `KrovaError` on failure.
+- **Full escape hatch** — `client.raw` exposes the underlying typed client for *every* operation in the spec (31 operations across 22 resource paths).
+- **Zero-config resilience** — automatic retries on `429` / `503`, honoring `Retry-After`.
+- **ESM + CJS** — ships both, with bundled `.d.ts` declarations. No runtime dependencies beyond `openapi-fetch`.
 
 ## Install
 
 ```sh
-pnpm add @krovacloud/sdk
-# or: npm install @krovacloud/sdk
+npm i @krovacloud/sdk
+# or: pnpm add @krovacloud/sdk
 # or: yarn add @krovacloud/sdk
 ```
 
-Requires Node.js 18+ (uses the global `fetch`).
+Requires **Node.js ≥ 18** (uses the global `fetch`).
 
 ## Quickstart
 
@@ -32,13 +38,14 @@ const krova = new KrovaClient({
 const cubes = await krova.cubes.list("space_123");
 console.log(cubes);
 
-// Create a Cube
+// Create a Cube (sshPublicKey is required)
 const cube = await krova.cubes.create("space_123", {
   name: "web-server",
   image: "ubuntu-24.04",
   resources: { vcpu: 2, ramGb: 4, diskGb: 40 },
   sshPublicKey: "ssh-ed25519 AAAA...your-key... you@host",
 });
+
 console.log(`Created cube ${cube.id} (${cube.state})`);
 console.log(`  ${cube.resources.vcpu} vCPU / ${cube.resources.ramGb} GB RAM, image ${cube.image}`);
 
@@ -47,60 +54,139 @@ await krova.cubes.sleep("space_123", cube.id);
 await krova.cubes.wake("space_123", cube.id);
 ```
 
-### Public catalog
+## Authentication
+
+Get an API key at **[krova.cloud](https://krova.cloud)** → your Space settings. Keys are **scoped per Space**, inherit the permissions of the membership that created them, and look like `kro_...`.
 
-The catalog endpoints do not require authentication, but the client sends your key harmlessly:
+By default the client sends the key as the `X-API-KEY` header (the API's security scheme). If your gateway expects a bearer token instead, pass `authScheme: "bearer"`:
 
 ```ts
-const regions = await krova.catalog.regions();
-const images = await krova.catalog.images();
-const pricing = await krova.catalog.pricing();
+const krova = new KrovaClient({ apiKey: "kro_...", authScheme: "bearer" });
+```
+
+> **Keep keys secret.** Never commit a key or embed it in a browser bundle. Load it from an environment variable or a secrets manager.
+
+## API reference
+
+Every public export, with its real signature and a short example.
+
+### `new KrovaClient(options)`
+
+```ts
+new KrovaClient({
+  apiKey: string,               // required — your "kro_..." token
+  baseUrl?: string,             // default: "https://krova.cloud/api/v1"
+  authScheme?: "x-api-key" | "bearer", // default: "x-api-key"
+  maxRetries?: number,          // default: 2 — retries 429/503 (honors Retry-After); 0 disables
+  fetch?: typeof fetch,         // optional fetch override (proxy, tests)
+});
 ```
 
-### The raw client (every endpoint)
+Throws if `apiKey` is missing. Exposes `client.baseUrl` (the resolved base URL), `client.cubes`, `client.catalog`, and `client.raw`.
 
-The ergonomic helpers cover Cubes and the catalog. For everything else — Domains, TCP mappings, Snapshots, Backups, Imports, Webhooks — use `krova.raw`, the fully typed [`openapi-fetch`](https://github.com/openapi-ts/openapi-typescript/tree/main/packages/openapi-fetch) client. It returns `{ data, error, response }` and never throws:
+### `client.cubes`
+
+Ergonomic helpers for the Cube lifecycle. Each unwraps the response body and throws `KrovaError` on a non-2xx status.
+
+| Method | Signature | Returns |
+| --- | --- | --- |
+| `list` | `(spaceId: string)` | the Cube list body |
+| `create` | `(spaceId, body, opts?)` | the created `Cube` |
+| `get` | `(spaceId, cubeId)` | the Cube body |
+| `update` | `(spaceId, cubeId, body)` | updates the Cube's SSH port |
+| `delete` | `(spaceId, cubeId)` | enqueues deletion |
+| `sleep` | `(spaceId, cubeId)` | enqueues sleep |
+| `wake` | `(spaceId, cubeId)` | enqueues wake |
 
 ```ts
-const { data, error } = await krova.raw.POST(
-  "/spaces/{spaceId}/webhooks",
+// create — sshPublicKey is required; region + userData (cloud-init) are optional.
+// opts.idempotencyKey (≤255 chars, per-space) makes retries safe.
+const cube = await krova.cubes.create(
+  "space_123",
   {
-    params: { path: { spaceId: "space_123" } },
-    body: { url: "https://example.com/hook", events: ["cube.running"] },
+    name: "web-server",
+    image: "ubuntu-24.04",
+    resources: { vcpu: 2, ramGb: 4, diskGb: 40 },
+    sshPublicKey: "ssh-ed25519 AAAA... you@host",
+    region: "us-east",           // optional — slug from catalog.regions()
+    userData: "#cloud-config\n",  // optional — cloud-init (max 16 KB)
   },
+  { idempotencyKey: "deploy-2026-07-01" },
 );
-if (error) {
-  console.error("Webhook create failed:", error.error);
-} else {
-  console.log(data);
-}
+
+// get / list
+const one = await krova.cubes.get("space_123", cube.id);
+const all = await krova.cubes.list("space_123");
+
+// update — the only mutable Cube field over the public API is the SSH port
+await krova.cubes.update("space_123", cube.id, { cubePort: 2222 });
+
+// lifecycle — sleep, wake, delete are asynchronous (enqueued)
+await krova.cubes.sleep("space_123", cube.id);
+await krova.cubes.wake("space_123", cube.id);
+await krova.cubes.delete("space_123", cube.id);
 ```
 
-## Authentication
+The `Cube` type is exported for your own signatures:
 
-Create an API key from your Space settings in the [Krova Cloud dashboard](https://krova.cloud). Keys are **scoped per Space** and inherit the permissions of the membership that created them; they look like `kro_...`.
+```ts
+import type { Cube } from "@krovacloud/sdk";
+// {
+//   id: string; name: string;
+//   state: "pending" | "booting" | "running" | "sleeping" | "stopping" | "error" | "deleted";
+//   publicIpv4: string | null;
+//   resources: { vcpu: number; ramGb: number; diskGb: number };
+//   image: string; costPerHour: number;
+//   createdAt: string; updatedAt: string;
+// }
+```
 
-By default the client sends the key as the `X-API-KEY` header, matching the API's security scheme. If your gateway expects a bearer token instead, pass `authScheme: "bearer"`:
+### `client.catalog`
+
+Public catalog endpoints (no auth required by the API; the client sends your key harmlessly).
 
 ```ts
-const krova = new KrovaClient({ apiKey: "kro_...", authScheme: "bearer" });
+const regions = await krova.catalog.regions(); // regions with available capacity
+const images = await krova.catalog.images();   // available OS images
+const pricing = await krova.catalog.pricing(); // per-resource hourly rates + volume tiers
 ```
 
-### Options
+### `client.raw` — every endpoint
+
+The helpers cover Cubes and the catalog. For everything else — Domains, TCP mappings, Snapshots, Backups, Imports, Webhooks — use `client.raw`, the fully typed [`openapi-fetch`](https://github.com/openapi-ts/openapi-typescript/tree/main/packages/openapi-fetch) client. It returns `{ data, error, response }` and **never throws**:
 
 ```ts
-new KrovaClient({
-  apiKey: "kro_...",           // required
-  baseUrl: "https://krova.cloud/api/v1", // default
-  authScheme: "x-api-key",     // "x-api-key" (default) | "bearer"
-  maxRetries: 2,               // retries on 429/503 (honors Retry-After); 0 disables
-  fetch: customFetch,          // optional fetch override
+const { data, error } = await krova.raw.POST("/spaces/{spaceId}/webhooks", {
+  params: { path: { spaceId: "space_123" } },
+  body: { url: "https://example.com/hook", events: ["cube.running"] },
 });
+
+if (error) {
+  console.error("Webhook create failed:", error.error);
+} else {
+  console.log(data);
+}
 ```
 
-## Error handling
+Path, method, params, and body are all type-checked against the spec. The generated `paths` and `components` types are also exported for advanced use:
+
+```ts
+import type { paths, components } from "@krovacloud/sdk";
+type Domain = components["schemas"]["Domain"];
+```
+
+### `KrovaError`
+
+Thrown by the `cubes.*` / `catalog.*` helpers on any non-2xx response. (`client.raw` never throws — it returns the error in `{ error }`.)
 
-The ergonomic helpers throw a `KrovaError` on any non-2xx response. It carries the HTTP `status`, the API's error `message`, and — when the API sends them — a `code` (`X-Error-Code`), a `requestId` (`X-Request-Id`), and the parsed `body`:
+| Field | Type | Source |
+| --- | --- | --- |
+| `status` | `number` | HTTP status code |
+| `message` | `string` | the API's `error` string, else `statusText` |
+| `code` | `string \| undefined` | `X-Error-Code` response header |
+| `requestId` | `string \| undefined` | `X-Request-Id` response header |
+| `body` | `object \| undefined` | the parsed JSON error body |
+| `response` | `Response \| undefined` | the raw `Response` |
 
 ```ts
 import { KrovaError } from "@krovacloud/sdk";
@@ -110,29 +196,49 @@ try {
 } catch (err) {
   if (err instanceof KrovaError) {
     console.error(`[${err.status}] ${err.message}`);
-    if (err.requestId) console.error("request id:", err.requestId);
+    if (err.code) console.error("code:", err.code);
+    if (err.requestId) console.error("request id:", err.requestId); // quote this to support
   } else {
     throw err;
   }
 }
 ```
 
-Mutating `POST` / `DELETE` endpoints are rate-limited (10 requests / 60s per client IP). The client automatically retries `429` and `503` responses (up to `maxRetries`, honoring the `Retry-After` header).
+Mutating `POST` / `DELETE` endpoints are rate-limited (10 requests / 60s per client IP). The client automatically retries `429` and `503` up to `maxRetries` times, honoring the `Retry-After` header.
 
-## API reference
-
-The full Krova Cloud API is documented in the OpenAPI spec vendored in this repo ([`openapi.json`](./openapi.json)). See [krova.cloud](https://krova.cloud) for the hosted docs and to obtain a key.
+## Configuration
 
-## Development
+Point the client at a different base URL (self-hosted gateway, staging, a proxy):
 
-```sh
-pnpm install
-pnpm gen        # regenerate src/generated/types.ts from openapi.json
-pnpm typecheck
-pnpm build      # ESM + CJS + d.ts into dist/
-pnpm test       # node:test via tsx (no network)
+```ts
+const krova = new KrovaClient({
+  apiKey: "kro_...",
+  baseUrl: "https://gateway.internal/krova/api/v1",
+});
 ```
 
+## TypeScript
+
+The package ships its own type declarations — no `@types/*` install needed. `Cube`, `KrovaError`, `KrovaClientOptions`, `AuthScheme`, and the generated `paths` / `components` are all exported.
+
+## Related packages
+
+| Package | What it is |
+| --- | --- |
+| [`@krovacloud/cli`](https://www.npmjs.com/package/@krovacloud/cli) | Command-line interface for Krova Cloud |
+| [`@krovacloud/webhook`](https://www.npmjs.com/package/@krovacloud/webhook) | Verify and parse Krova Cloud webhook events |
+| [`@krovacloud/mcp`](https://www.npmjs.com/package/@krovacloud/mcp) | Model Context Protocol server for Krova Cloud |
+| [`n8n-nodes-krova`](https://www.npmjs.com/package/n8n-nodes-krova) | n8n community nodes for Krova Cloud |
+
+## Requirements
+
+- **Node.js ≥ 18** (global `fetch`).
+- Works in any modern runtime with a WHATWG `fetch` (Deno, Bun, edge). Pass a custom `fetch` if the global isn't available.
+
+## Contributing
+
+See [CONTRIBUTING.md](./CONTRIBUTING.md). Report security issues privately per [SECURITY.md](./SECURITY.md).
+
 ## License
 
 [MIT](./LICENSE) © 2026 Krova Inc.

package/dist/index.cjs

@@ -118,6 +118,16 @@ var KrovaClient = class {
     const maxRetries = options.maxRetries ?? 2;
     this.raw = createClient__default.default({
       baseUrl: this.baseUrl,
+      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain
+      // JSON API and never legitimately 3xx's a data call. Following a redirect
+      // would resend the `X-API-KEY` header to the redirect target — and unlike
+      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does
+      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect
+      // (verified against undici/Node fetch). A compromised/misconfigured proxy,
+      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key
+      // to an attacker's host. With `"manual"`, a redirect comes back as a
+      // non-ok response and the helpers throw `KrovaError` instead of leaking.
+      redirect: "manual",
       ...options.fetch ? { fetch: options.fetch } : {}
     });
     this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? "x-api-key"));

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":["createClient"],"mappings":";;;;;;;;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;AC3EO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAOA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,UAAS,EAAG;AACtC,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAC7E,QAAA,MAAM,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACnC,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAMA,6BAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAsC;AACjD,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAChE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACnE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAA8B;AACpC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request. openapi-fetch\n * clones the request per attempt, so re-fetching here is safe.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  return {\n    async onResponse({ request, response }) {\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        await sleep(retryAfterMs ?? backoff);\n        current = await doFetch(request.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space. Returns the raw (paginated) response body. */\n    list: async (spaceId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the raw response body. */\n    get: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":["createClient"],"mappings":";;;;;;;;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;AC3EO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAOA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,UAAS,EAAG;AACtC,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAC7E,QAAA,MAAM,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACnC,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAMA,6BAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUd,QAAA,EAAU,QAAA;AAAA,MACV,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAsC;AACjD,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAChE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACnE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAA8B;AACpC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request. openapi-fetch\n * clones the request per attempt, so re-fetching here is safe.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  return {\n    async onResponse({ request, response }) {\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        await sleep(retryAfterMs ?? backoff);\n        current = await doFetch(request.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space. Returns the raw (paginated) response body. */\n    list: async (spaceId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the raw response body. */\n    get: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n}\n"]}

package/dist/index.js

@@ -112,6 +112,16 @@ var KrovaClient = class {
     const maxRetries = options.maxRetries ?? 2;
     this.raw = createClient({
       baseUrl: this.baseUrl,
+      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain
+      // JSON API and never legitimately 3xx's a data call. Following a redirect
+      // would resend the `X-API-KEY` header to the redirect target — and unlike
+      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does
+      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect
+      // (verified against undici/Node fetch). A compromised/misconfigured proxy,
+      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key
+      // to an attacker's host. With `"manual"`, a redirect comes back as a
+      // non-ok response and the helpers throw `KrovaError` instead of leaking.
+      redirect: "manual",
       ...options.fetch ? { fetch: options.fetch } : {}
     });
     this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? "x-api-key"));

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":[],"mappings":";;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;AC3EO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAOA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,UAAS,EAAG;AACtC,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAC7E,QAAA,MAAM,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACnC,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAM,YAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAsC;AACjD,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAChE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACnE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAA8B;AACpC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request. openapi-fetch\n * clones the request per attempt, so re-fetching here is safe.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  return {\n    async onResponse({ request, response }) {\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        await sleep(retryAfterMs ?? backoff);\n        current = await doFetch(request.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space. Returns the raw (paginated) response body. */\n    list: async (spaceId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the raw response body. */\n    get: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":[],"mappings":";;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;AC3EO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAOA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,UAAS,EAAG;AACtC,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAC7E,QAAA,MAAM,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACnC,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAM,YAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUd,QAAA,EAAU,QAAA;AAAA,MACV,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAsC;AACjD,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAChE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACnE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAA8B;AACpC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAA8B;AACrC,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request. openapi-fetch\n * clones the request per attempt, so re-fetching here is safe.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  return {\n    async onResponse({ request, response }) {\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        await sleep(retryAfterMs ?? backoff);\n        current = await doFetch(request.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space. Returns the raw (paginated) response body. */\n    list: async (spaceId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the raw response body. */\n    get: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async (): Promise<unknown> => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n}\n"]}

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@krovacloud/sdk",
-  "version": "0.1.1",
-  "description": "Official TypeScript SDK for the Krova Cloud API — a typed client generated from the Krova Cloud OpenAPI spec.",
+  "version": "0.1.3",
+  "description": "Official TypeScript SDK for Krova Cloud — a typed client for provisioning and managing Cubes (Firecracker microVMs) on bare-metal.",
   "license": "MIT",
   "type": "module",
   "author": "Krova Inc.",
-  "homepage": "https://github.com/krovacloud/krova-js#readme",
+  "homepage": "https://krova.cloud",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/krovacloud/krova-js.git"
@@ -16,12 +16,16 @@
   "keywords": [
     "krova",
     "krova-cloud",
+    "sdk",
+    "api",
+    "api-client",
     "firecracker",
-    "cube",
     "microvm",
+    "cube",
+    "cubes",
     "cloud",
-    "sdk",
-    "typescript"
+    "typescript",
+    "openapi"
   ],
   "publishConfig": {
     "access": "public"
@@ -31,6 +35,7 @@
   "types": "./dist/index.d.ts",
   "exports": {
     ".": {
+      "types": "./dist/index.d.ts",
       "import": {
         "types": "./dist/index.d.ts",
         "default": "./dist/index.js"
@@ -39,7 +44,8 @@
         "types": "./dist/index.d.cts",
         "default": "./dist/index.cjs"
       }
-    }
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist",
@@ -50,6 +56,13 @@
   "engines": {
     "node": ">=18"
   },
+  "scripts": {
+    "gen": "openapi-typescript openapi.json -o src/generated/types.ts",
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "tsx --test tests/*.test.ts",
+    "prepublishOnly": "pnpm build"
+  },
   "dependencies": {
     "openapi-fetch": "^0.17.0"
   },
@@ -59,11 +72,5 @@
     "tsup": "^8.5.1",
     "tsx": "^4.22.4",
     "typescript": "^5.9.3"
-  },
-  "scripts": {
-    "gen": "openapi-typescript openapi.json -o src/generated/types.ts",
-    "build": "tsup",
-    "typecheck": "tsc --noEmit",
-    "test": "tsx --test tests/*.test.ts"
   }
-}
+}