@krovacloud/sdk 0.1.5 → 0.2.0

package/CHANGELOG.md

@@ -4,6 +4,32 @@ All notable changes to `@krovacloud/sdk` are documented here. This project adher
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html) and the
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format.
 
+## 0.2.0
+
+### Added
+
+- `client.getSpace()` — resolve the `Space` your API key is scoped to, so you no
+  longer have to hardcode a `spaceId`.
+- `client.cubes.ssh(spaceId, cubeId)` — fetch a Cube's SSH connection info
+  (`host`, `port`, `user`, and pinned `hostKeys`).
+- Exported `Space` and `CubeSshInfo` types.
+
+### Changed
+
+- Refreshed the bundled OpenAPI spec to the current API (26 paths / 35
+  operations). `client.raw` can now reach `GET /space`, the cube SSH-info
+  endpoint, and the CLI device-auth endpoints, which the stale bundle omitted.
+
+## 0.1.6
+
+### Fixed
+
+- Auto-retry no longer throws `TypeError: unusable` on requests with a body
+  (POST/PUT/DELETE) — a pristine copy of the request is captured before its body
+  is consumed, so retries of the mutating, rate-limited endpoints work.
+- A hostile or misconfigured `Retry-After` is now capped at the maximum backoff
+  (10s), so the client can't be parked for minutes/hours.
+
 ## 0.1.5
 
 ### Changed

package/README.md

@@ -11,7 +11,7 @@ The official TypeScript SDK for the [Krova Cloud](https://krova.cloud) API — a
 
 - **Fully typed** — request bodies, responses, and path params are generated from the Krova Cloud OpenAPI spec via [`openapi-typescript`](https://github.com/openapi-ts/openapi-typescript) + [`openapi-fetch`](https://github.com/openapi-ts/openapi-typescript/tree/main/packages/openapi-fetch).
 - **Ergonomic helpers** — `client.cubes.*` and `client.catalog.*` unwrap the response body and throw a typed `KrovaError` on failure.
-- **Full escape hatch** — `client.raw` exposes the underlying typed client for *every* operation in the spec (31 operations across 22 resource paths).
+- **Full escape hatch** — `client.raw` exposes the underlying typed client for every operation in the bundled OpenAPI spec (Domains, TCP mappings, Snapshots, Backups, Imports, Webhooks, and more).
 - **Zero-config resilience** — automatic retries on `429` / `503`, honoring `Retry-After`.
 - **ESM + CJS** — ships both, with bundled `.d.ts` declarations. No runtime dependencies beyond `openapi-fetch`.
 
@@ -82,7 +82,16 @@ new KrovaClient({
 });
 ```
 
-Throws if `apiKey` is missing. Exposes `client.baseUrl` (the resolved base URL), `client.cubes`, `client.catalog`, and `client.raw`.
+Throws if `apiKey` is missing. Exposes `client.baseUrl` (the resolved base URL), `client.getSpace()`, `client.cubes`, `client.catalog`, and `client.raw`.
+
+### `client.getSpace()`
+
+Resolve the `Space` your API key is scoped to — so you don't have to hardcode a `spaceId`:
+
+```ts
+const space = await krova.getSpace(); // { id, name, tier, createdAt }
+const cubes = await krova.cubes.list(space.id);
+```
 
 ### `client.cubes`
 
@@ -97,6 +106,7 @@ Ergonomic helpers for the Cube lifecycle. Each unwraps the response body and thr
 | `delete` | `(spaceId, cubeId)` | enqueues deletion |
 | `sleep` | `(spaceId, cubeId)` | enqueues sleep |
 | `wake` | `(spaceId, cubeId)` | enqueues wake |
+| `ssh` | `(spaceId, cubeId)` | the Cube's SSH connection info (`host`, `port`, `user`, `hostKeys`) |
 
 ```ts
 // create — sshPublicKey is required; region + userData (cloud-init) are optional.

package/dist/index.cjs

@@ -76,8 +76,18 @@ function authMiddleware(apiKey, scheme) {
   };
 }
 function retryMiddleware(maxRetries, doFetch) {
+  const pristine = /* @__PURE__ */ new Map();
   return {
-    async onResponse({ request, response }) {
+    onRequest({ request, id }) {
+      pristine.set(id, request.clone());
+      return request;
+    },
+    onError({ id }) {
+      pristine.delete(id);
+    },
+    async onResponse({ request, response, id }) {
+      const original = pristine.get(id) ?? request;
+      pristine.delete(id);
       if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {
         return response;
       }
@@ -86,8 +96,8 @@ function retryMiddleware(maxRetries, doFetch) {
         if (!RETRYABLE_STATUSES.has(current.status)) break;
         const retryAfterMs = parseRetryAfterMs(current.headers.get("retry-after"));
         const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);
-        await sleep(retryAfterMs ?? backoff);
-        current = await doFetch(request.clone());
+        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));
+        current = await doFetch(original.clone());
       }
       return current;
     }
@@ -228,8 +238,39 @@ var KrovaClient = class {
       );
       if (error !== void 0 || !response.ok) throw krovaErrorFrom(response, error);
       return data;
+    },
+    /**
+     * Get a Cube's SSH connection info — host, port, login user, and (when
+     * available) the pinned host public keys for strict host-key verification.
+     */
+    ssh: async (spaceId, cubeId) => {
+      const { data, error, response } = await this.raw.GET(
+        "/spaces/{spaceId}/cubes/{cubeId}/ssh",
+        { params: { path: { spaceId, cubeId } } }
+      );
+      if (error !== void 0 || !response.ok) throw krovaErrorFrom(response, error);
+      if (data === void 0)
+        throw krovaErrorFrom(response, { error: "Cube SSH-info response was empty." });
+      return data;
     }
   };
+  /**
+   * Resolve the {@link Space} this API key is scoped to — so you don't have to
+   * hardcode a `spaceId`. Handy right after constructing the client:
+   *
+   * @example
+   * ```ts
+   * const space = await krova.getSpace();
+   * const cubes = await krova.cubes.list(space.id);
+   * ```
+   */
+  async getSpace() {
+    const { data, error, response } = await this.raw.GET("/space");
+    if (error !== void 0 || !response.ok) throw krovaErrorFrom(response, error);
+    if (data === void 0)
+      throw krovaErrorFrom(response, { error: "Space response was empty." });
+    return data;
+  }
   // ---------------------------------------------------------------------------
   // Public catalog (no auth required by the API, but the key is harmless)
   // ---------------------------------------------------------------------------

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":["createClient"],"mappings":";;;;;;;;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;AC/DO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAOA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,UAAS,EAAG;AACtC,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAC7E,QAAA,MAAM,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACnC,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAMA,6BAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUd,QAAA,EAAU,QAAA;AAAA,MACV,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAoB;AAC/B,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,kCAAkC,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAkC;AAC7D,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAmB;AACjD,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,mCAAmC,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAAY;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,8BAA8B,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request. openapi-fetch\n * clones the request per attempt, so re-fetching here is safe.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  return {\n    async onResponse({ request, response }) {\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        await sleep(retryAfterMs ?? backoff);\n        current = await doFetch(request.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":["createClient"],"mappings":";;;;;;;;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;ACzDO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAaA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAC1C,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAS,EAAA,EAAG,EAAG;AACzB,MAAA,QAAA,CAAS,GAAA,CAAI,EAAA,EAAI,OAAA,CAAQ,KAAA,EAAO,CAAA;AAChC,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IACA,OAAA,CAAQ,EAAE,EAAA,EAAG,EAAG;AAEd,MAAA,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,IACpB,CAAA;AAAA,IACA,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,QAAA,EAAU,IAAG,EAAG;AAC1C,MAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA,IAAK,OAAA;AACrC,MAAA,QAAA,CAAS,OAAO,EAAE,CAAA;AAClB,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAG7E,QAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,YAAA,IAAgB,OAAA,EAAS,cAAc,CAAC,CAAA;AAG7D,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,MAC1C;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAMA,6BAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUd,QAAA,EAAU,QAAA;AAAA,MACV,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAoB;AAC/B,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,kCAAkC,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAkC;AAC7D,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAmB;AACjD,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,mCAAmC,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAyC;AACpE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,sCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,qCAAqC,CAAA;AAC/E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,QAAA,GAA2B;AAC/B,IAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAA;AAC7D,IAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,IAAA,IAAI,IAAA,KAAS,MAAA;AACX,MAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,6BAA6B,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAAY;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,8BAA8B,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** A Space — the tenancy an API key is scoped to. */\nexport type Space = components[\"schemas\"][\"Space\"];\n\n/** A Cube's SSH connection info (host, port, user, and pinned host keys). */\nexport type CubeSshInfo = components[\"schemas\"][\"CubeSshInfo\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request.\n *\n * A retried request may have a body (POST/PUT/DELETE — exactly the mutating,\n * rate-limited endpoints). By the time `onResponse` runs, the request that was\n * handed to `fetch` has had its body stream consumed, so `request.clone()` here\n * throws `TypeError: unusable`. To re-issue it we stash a *pristine* clone in\n * `onRequest` — captured before the body is read — keyed by openapi-fetch's\n * per-request `id`, and clone from that pristine copy on each attempt.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  const pristine = new Map<string, Request>();\n  return {\n    onRequest({ request, id }) {\n      pristine.set(id, request.clone());\n      return request;\n    },\n    onError({ id }) {\n      // fetch rejected (network error) — no onResponse will fire; don't leak.\n      pristine.delete(id);\n    },\n    async onResponse({ request, response, id }) {\n      const original = pristine.get(id) ?? request;\n      pristine.delete(id);\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        // Cap the wait — including a server-supplied `Retry-After` — so a hostile\n        // or misconfigured server can't park the client for minutes/hours.\n        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));\n        // Re-issue from the pristine clone; `.clone()` keeps it reusable across\n        // multiple attempts.\n        current = await doFetch(original.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Get a Cube's SSH connection info — host, port, login user, and (when\n     * available) the pinned host public keys for strict host-key verification.\n     */\n    ssh: async (spaceId: string, cubeId: string): Promise<CubeSshInfo> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Cube SSH-info response was empty.\" });\n      return data;\n    },\n  };\n\n  /**\n   * Resolve the {@link Space} this API key is scoped to — so you don't have to\n   * hardcode a `spaceId`. Handy right after constructing the client:\n   *\n   * @example\n   * ```ts\n   * const space = await krova.getSpace();\n   * const cubes = await krova.cubes.list(space.id);\n   * ```\n   */\n  async getSpace(): Promise<Space> {\n    const { data, error, response } = await this.raw.GET(\"/space\");\n    if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n    if (data === undefined)\n      throw krovaErrorFrom(response, { error: \"Space response was empty.\" });\n    return data;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"]}

package/dist/index.d.cts

@@ -126,6 +126,187 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/auth/cli/start": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Begin a CLI device-authorization login (RFC 8628)
+         * @description Public, unauthenticated. Mints a device code (returned once) and a short human user code, and returns the verification URIs the user opens in a browser to approve. The CLI then polls /auth/cli/poll. Rate-limited per client IP.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Device-authorization request created */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description High-entropy code the CLI keeps secret and presents on each poll. Only its hash is stored server-side. */
+                            deviceCode: string;
+                            /** @description Short human-readable code (KROVA-XXXX-XXXX) the user confirms in the browser. */
+                            userCode: string;
+                            /**
+                             * Format: uri
+                             * @description Browser URL where the user approves.
+                             */
+                            verificationUri: string;
+                            /**
+                             * Format: uri
+                             * @description verificationUri with the user code pre-filled.
+                             */
+                            verificationUriComplete: string;
+                            /** @description Seconds to wait between polls. */
+                            interval: number;
+                            /** @description Seconds until the device code expires (~600). */
+                            expiresIn: number;
+                        };
+                    };
+                };
+                429: components["responses"]["RateLimited"];
+                /** @description Could not allocate a login code; retry */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/auth/cli/poll": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Poll for CLI device-authorization approval (RFC 8628)
+         * @description Public, unauthenticated. The CLI submits its deviceCode until the user approves or denies. On approval a real API key is minted ONCE, scoped to the approved Space and the approving user's membership, and returned a single time. Rate-limited per client IP.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        /** @description The device code from /auth/cli/start. */
+                        deviceCode: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description Approved — API key minted (returned once) */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description The full API key. Shown once and never returned again — store it securely. */
+                            apiKey: string;
+                            /** @description The Space the key is scoped to. */
+                            spaceId: string;
+                        };
+                    };
+                };
+                400: components["responses"]["BadRequest"];
+                /** @description The user denied the login request */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description The device code expired, was already consumed, or is unknown */
+                410: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authorization still pending — keep polling at the given interval */
+                428: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                429: components["responses"]["RateLimited"];
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/space": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Resolve the space this API key is scoped to
+         * @description Returns the single space the API key belongs to. Lets a client auto-resolve the space id from the key alone (no spaceId in the URL).
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description The key's space */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Space"];
+                    };
+                };
+                401: components["responses"]["Unauthorized"];
+                404: components["responses"]["NotFound"];
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/spaces/{spaceId}/cubes": {
         parameters: {
             query?: never;
@@ -415,6 +596,49 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/spaces/{spaceId}/cubes/{cubeId}/ssh": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a Cube's SSH connection info
+         * @description Host (server public IPv4), host SSH port, login user, and any captured SSH host public keys. `hostKeys` is empty until Krova captures cube host keys — clients fall back to trust-on-first-use until then.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    spaceId: string;
+                    cubeId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description SSH connection info */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["CubeSshInfo"];
+                    };
+                };
+                404: components["responses"]["NotFound"];
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/spaces/{spaceId}/cubes/{cubeId}/domains": {
         parameters: {
             query?: never;
@@ -1377,6 +1601,22 @@ interface paths {
 }
 interface components {
     schemas: {
+        Space: {
+            id: string;
+            name: string;
+            tier: string;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        CubeSshInfo: {
+            host: string | null;
+            port: number;
+            user: string;
+            hostKeys: {
+                type: string;
+                key: string;
+            }[];
+        };
         Cube: {
             id: string;
             name: string;
@@ -1571,6 +1811,10 @@ type Image = components["schemas"]["Image"];
 type PricingTier = components["schemas"]["PricingTier"];
 /** Pagination envelope returned alongside a Cube list. */
 type Pagination = components["schemas"]["Pagination"];
+/** A Space — the tenancy an API key is scoped to. */
+type Space = components["schemas"]["Space"];
+/** A Cube's SSH connection info (host, port, user, and pinned host keys). */
+type CubeSshInfo = components["schemas"]["CubeSshInfo"];
 /** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */
 declare const DEFAULT_BASE_URL = "https://krova.cloud/api/v1";
 /**
@@ -1685,7 +1929,23 @@ declare class KrovaClient {
         sleep: (spaceId: string, cubeId: string) => Promise<unknown>;
         /** Wake a sleeping Cube (asynchronous — wake is enqueued). */
         wake: (spaceId: string, cubeId: string) => Promise<unknown>;
+        /**
+         * Get a Cube's SSH connection info — host, port, login user, and (when
+         * available) the pinned host public keys for strict host-key verification.
+         */
+        ssh: (spaceId: string, cubeId: string) => Promise<CubeSshInfo>;
     };
+    /**
+     * Resolve the {@link Space} this API key is scoped to — so you don't have to
+     * hardcode a `spaceId`. Handy right after constructing the client:
+     *
+     * @example
+     * ```ts
+     * const space = await krova.getSpace();
+     * const cubes = await krova.cubes.list(space.id);
+     * ```
+     */
+    getSpace(): Promise<Space>;
     readonly catalog: {
         /** List regions with available capacity. */
         regions: () => Promise<{
@@ -1773,4 +2033,4 @@ declare class KrovaError extends Error {
  */
 declare function krovaErrorFrom(response: Response, body: KrovaErrorBody | undefined): KrovaError;
 
-export { type AuthScheme, type Cube, DEFAULT_BASE_URL, type Image, KrovaClient, type KrovaClientOptions, KrovaError, type KrovaErrorBody, type Pagination, type PricingTier, type Region, type components, krovaErrorFrom, type paths };
+export { type AuthScheme, type Cube, type CubeSshInfo, DEFAULT_BASE_URL, type Image, KrovaClient, type KrovaClientOptions, KrovaError, type KrovaErrorBody, type Pagination, type PricingTier, type Region, type Space, type components, krovaErrorFrom, type paths };

package/dist/index.d.ts

@@ -126,6 +126,187 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/auth/cli/start": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Begin a CLI device-authorization login (RFC 8628)
+         * @description Public, unauthenticated. Mints a device code (returned once) and a short human user code, and returns the verification URIs the user opens in a browser to approve. The CLI then polls /auth/cli/poll. Rate-limited per client IP.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Device-authorization request created */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description High-entropy code the CLI keeps secret and presents on each poll. Only its hash is stored server-side. */
+                            deviceCode: string;
+                            /** @description Short human-readable code (KROVA-XXXX-XXXX) the user confirms in the browser. */
+                            userCode: string;
+                            /**
+                             * Format: uri
+                             * @description Browser URL where the user approves.
+                             */
+                            verificationUri: string;
+                            /**
+                             * Format: uri
+                             * @description verificationUri with the user code pre-filled.
+                             */
+                            verificationUriComplete: string;
+                            /** @description Seconds to wait between polls. */
+                            interval: number;
+                            /** @description Seconds until the device code expires (~600). */
+                            expiresIn: number;
+                        };
+                    };
+                };
+                429: components["responses"]["RateLimited"];
+                /** @description Could not allocate a login code; retry */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/auth/cli/poll": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Poll for CLI device-authorization approval (RFC 8628)
+         * @description Public, unauthenticated. The CLI submits its deviceCode until the user approves or denies. On approval a real API key is minted ONCE, scoped to the approved Space and the approving user's membership, and returned a single time. Rate-limited per client IP.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        /** @description The device code from /auth/cli/start. */
+                        deviceCode: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description Approved — API key minted (returned once) */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description The full API key. Shown once and never returned again — store it securely. */
+                            apiKey: string;
+                            /** @description The Space the key is scoped to. */
+                            spaceId: string;
+                        };
+                    };
+                };
+                400: components["responses"]["BadRequest"];
+                /** @description The user denied the login request */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description The device code expired, was already consumed, or is unknown */
+                410: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Authorization still pending — keep polling at the given interval */
+                428: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                429: components["responses"]["RateLimited"];
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/space": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Resolve the space this API key is scoped to
+         * @description Returns the single space the API key belongs to. Lets a client auto-resolve the space id from the key alone (no spaceId in the URL).
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description The key's space */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Space"];
+                    };
+                };
+                401: components["responses"]["Unauthorized"];
+                404: components["responses"]["NotFound"];
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/spaces/{spaceId}/cubes": {
         parameters: {
             query?: never;
@@ -415,6 +596,49 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/spaces/{spaceId}/cubes/{cubeId}/ssh": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a Cube's SSH connection info
+         * @description Host (server public IPv4), host SSH port, login user, and any captured SSH host public keys. `hostKeys` is empty until Krova captures cube host keys — clients fall back to trust-on-first-use until then.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    spaceId: string;
+                    cubeId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description SSH connection info */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["CubeSshInfo"];
+                    };
+                };
+                404: components["responses"]["NotFound"];
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/spaces/{spaceId}/cubes/{cubeId}/domains": {
         parameters: {
             query?: never;
@@ -1377,6 +1601,22 @@ interface paths {
 }
 interface components {
     schemas: {
+        Space: {
+            id: string;
+            name: string;
+            tier: string;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        CubeSshInfo: {
+            host: string | null;
+            port: number;
+            user: string;
+            hostKeys: {
+                type: string;
+                key: string;
+            }[];
+        };
         Cube: {
             id: string;
             name: string;
@@ -1571,6 +1811,10 @@ type Image = components["schemas"]["Image"];
 type PricingTier = components["schemas"]["PricingTier"];
 /** Pagination envelope returned alongside a Cube list. */
 type Pagination = components["schemas"]["Pagination"];
+/** A Space — the tenancy an API key is scoped to. */
+type Space = components["schemas"]["Space"];
+/** A Cube's SSH connection info (host, port, user, and pinned host keys). */
+type CubeSshInfo = components["schemas"]["CubeSshInfo"];
 /** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */
 declare const DEFAULT_BASE_URL = "https://krova.cloud/api/v1";
 /**
@@ -1685,7 +1929,23 @@ declare class KrovaClient {
         sleep: (spaceId: string, cubeId: string) => Promise<unknown>;
         /** Wake a sleeping Cube (asynchronous — wake is enqueued). */
         wake: (spaceId: string, cubeId: string) => Promise<unknown>;
+        /**
+         * Get a Cube's SSH connection info — host, port, login user, and (when
+         * available) the pinned host public keys for strict host-key verification.
+         */
+        ssh: (spaceId: string, cubeId: string) => Promise<CubeSshInfo>;
     };
+    /**
+     * Resolve the {@link Space} this API key is scoped to — so you don't have to
+     * hardcode a `spaceId`. Handy right after constructing the client:
+     *
+     * @example
+     * ```ts
+     * const space = await krova.getSpace();
+     * const cubes = await krova.cubes.list(space.id);
+     * ```
+     */
+    getSpace(): Promise<Space>;
     readonly catalog: {
         /** List regions with available capacity. */
         regions: () => Promise<{
@@ -1773,4 +2033,4 @@ declare class KrovaError extends Error {
  */
 declare function krovaErrorFrom(response: Response, body: KrovaErrorBody | undefined): KrovaError;
 
-export { type AuthScheme, type Cube, DEFAULT_BASE_URL, type Image, KrovaClient, type KrovaClientOptions, KrovaError, type KrovaErrorBody, type Pagination, type PricingTier, type Region, type components, krovaErrorFrom, type paths };
+export { type AuthScheme, type Cube, type CubeSshInfo, DEFAULT_BASE_URL, type Image, KrovaClient, type KrovaClientOptions, KrovaError, type KrovaErrorBody, type Pagination, type PricingTier, type Region, type Space, type components, krovaErrorFrom, type paths };

package/dist/index.js

@@ -70,8 +70,18 @@ function authMiddleware(apiKey, scheme) {
   };
 }
 function retryMiddleware(maxRetries, doFetch) {
+  const pristine = /* @__PURE__ */ new Map();
   return {
-    async onResponse({ request, response }) {
+    onRequest({ request, id }) {
+      pristine.set(id, request.clone());
+      return request;
+    },
+    onError({ id }) {
+      pristine.delete(id);
+    },
+    async onResponse({ request, response, id }) {
+      const original = pristine.get(id) ?? request;
+      pristine.delete(id);
       if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {
         return response;
       }
@@ -80,8 +90,8 @@ function retryMiddleware(maxRetries, doFetch) {
         if (!RETRYABLE_STATUSES.has(current.status)) break;
         const retryAfterMs = parseRetryAfterMs(current.headers.get("retry-after"));
         const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);
-        await sleep(retryAfterMs ?? backoff);
-        current = await doFetch(request.clone());
+        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));
+        current = await doFetch(original.clone());
       }
       return current;
     }
@@ -222,8 +232,39 @@ var KrovaClient = class {
       );
       if (error !== void 0 || !response.ok) throw krovaErrorFrom(response, error);
       return data;
+    },
+    /**
+     * Get a Cube's SSH connection info — host, port, login user, and (when
+     * available) the pinned host public keys for strict host-key verification.
+     */
+    ssh: async (spaceId, cubeId) => {
+      const { data, error, response } = await this.raw.GET(
+        "/spaces/{spaceId}/cubes/{cubeId}/ssh",
+        { params: { path: { spaceId, cubeId } } }
+      );
+      if (error !== void 0 || !response.ok) throw krovaErrorFrom(response, error);
+      if (data === void 0)
+        throw krovaErrorFrom(response, { error: "Cube SSH-info response was empty." });
+      return data;
     }
   };
+  /**
+   * Resolve the {@link Space} this API key is scoped to — so you don't have to
+   * hardcode a `spaceId`. Handy right after constructing the client:
+   *
+   * @example
+   * ```ts
+   * const space = await krova.getSpace();
+   * const cubes = await krova.cubes.list(space.id);
+   * ```
+   */
+  async getSpace() {
+    const { data, error, response } = await this.raw.GET("/space");
+    if (error !== void 0 || !response.ok) throw krovaErrorFrom(response, error);
+    if (data === void 0)
+      throw krovaErrorFrom(response, { error: "Space response was empty." });
+    return data;
+  }
   // ---------------------------------------------------------------------------
   // Public catalog (no auth required by the API, but the key is harmless)
   // ---------------------------------------------------------------------------

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":[],"mappings":";;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;AC/DO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAOA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,OAAO;AAAA,IACL,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,UAAS,EAAG;AACtC,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAC7E,QAAA,MAAM,KAAA,CAAM,gBAAgB,OAAO,CAAA;AACnC,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAA,EAAO,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAM,YAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUd,QAAA,EAAU,QAAA;AAAA,MACV,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAoB;AAC/B,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,kCAAkC,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAkC;AAC7D,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAmB;AACjD,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,mCAAmC,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAAY;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,8BAA8B,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request. openapi-fetch\n * clones the request per attempt, so re-fetching here is safe.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  return {\n    async onResponse({ request, response }) {\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        await sleep(retryAfterMs ?? backoff);\n        current = await doFetch(request.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/error.ts","../src/client.ts"],"names":[],"mappings":";;;;;AAoBO,IAAM,UAAA,GAAN,MAAM,WAAA,SAAmB,KAAA,CAAM;AAAA;AAAA,EAE3B,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,IAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA;AAAA;AAAA,EAGA,IAAA;AAAA;AAAA,EAGA,QAAA;AAAA,EAET,WAAA,CACE,SACA,IAAA,EAOA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AACZ,IAAA,IAAA,CAAK,SAAS,IAAA,CAAK,MAAA;AACnB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,YAAY,IAAA,CAAK,SAAA;AACtB,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACjB,IAAA,IAAA,CAAK,WAAW,IAAA,CAAK,QAAA;AAErB,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,WAAA,CAAW,SAAS,CAAA;AAAA,EAClD;AACF;AAKO,SAAS,cAAA,CACd,UACA,IAAA,EACY;AACZ,EAAA,MAAM,OAAA,GACH,OAAO,IAAA,EAAM,KAAA,KAAU,QAAA,IAAY,IAAA,CAAK,KAAA,IACzC,QAAA,CAAS,UAAA,IACT,CAAA,2BAAA,EAA8B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,EAAA,OAAO,IAAI,WAAW,OAAA,EAAS;AAAA,IAC7B,QAAQ,QAAA,CAAS,MAAA;AAAA,IACjB,IAAA,EAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IAC9C,SAAA,EAAW,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,IAAK,MAAA;AAAA,IACnD,IAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH;;;ACzDO,IAAM,gBAAA,GAAmB;AAqChC,IAAM,qCAAqB,IAAI,GAAA,CAAI,CAAC,GAAA,EAAK,GAAG,CAAC,CAAA;AAE7C,IAAM,eAAA,GAAkB,GAAA;AAExB,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,KAAA,GAAQ,CAAC,EAAA,KACb,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AAMlD,SAAS,kBAAkB,WAAA,EAA2C;AACpE,EAAA,IAAI,CAAC,aAAa,OAAO,IAAA;AACzB,EAAA,MAAM,OAAA,GAAU,OAAO,WAAW,CAAA;AAClC,EAAA,IAAI,MAAA,CAAO,SAAS,OAAO,CAAA,SAAU,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAA,GAAU,GAAI,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,WAAW,CAAA;AACrC,EAAA,IAAI,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,MAAA,GAAS,IAAA,CAAK,GAAA,EAAK,CAAA;AACnE,EAAA,OAAO,IAAA;AACT;AAEA,SAAS,cAAA,CAAe,QAAgB,MAAA,EAAgC;AACtE,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAQ,EAAG;AACrB,MAAA,IAAI,WAAW,QAAA,EAAU;AACvB,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,MAAM,CAAA,CAAE,CAAA;AAAA,MACzD,CAAA,MAAO;AACL,QAAA,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,MAAM,CAAA;AAAA,MACzC;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAaA,SAAS,eAAA,CAAgB,YAAoB,OAAA,EAAmC;AAC9E,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAqB;AAC1C,EAAA,OAAO;AAAA,IACL,SAAA,CAAU,EAAE,OAAA,EAAS,EAAA,EAAG,EAAG;AACzB,MAAA,QAAA,CAAS,GAAA,CAAI,EAAA,EAAI,OAAA,CAAQ,KAAA,EAAO,CAAA;AAChC,MAAA,OAAO,OAAA;AAAA,IACT,CAAA;AAAA,IACA,OAAA,CAAQ,EAAE,EAAA,EAAG,EAAG;AAEd,MAAA,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,IACpB,CAAA;AAAA,IACA,MAAM,UAAA,CAAW,EAAE,OAAA,EAAS,QAAA,EAAU,IAAG,EAAG;AAC1C,MAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA,IAAK,OAAA;AACrC,MAAA,QAAA,CAAS,OAAO,EAAE,CAAA;AAClB,MAAA,IAAI,cAAc,CAAA,IAAK,CAAC,mBAAmB,GAAA,CAAI,QAAA,CAAS,MAAM,CAAA,EAAG;AAC/D,QAAA,OAAO,QAAA;AAAA,MACT;AACA,MAAA,IAAI,OAAA,GAAU,QAAA;AACd,MAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,IAAW,UAAA,EAAY,OAAA,EAAA,EAAW;AACtD,QAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,OAAA,CAAQ,MAAM,CAAA,EAAG;AAC7C,QAAA,MAAM,eAAe,iBAAA,CAAkB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,CAAC,CAAA;AACzE,QAAA,MAAM,UAAU,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,KAAM,OAAA,GAAU,IAAI,cAAc,CAAA;AAG7E,QAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,YAAA,IAAgB,OAAA,EAAS,cAAc,CAAC,CAAA;AAG7D,QAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,QAAA,CAAS,KAAA,EAAO,CAAA;AAAA,MAC1C;AACA,MAAA,OAAO,OAAA;AAAA,IACT;AAAA,GACF;AACF;AAWO,IAAM,cAAN,MAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAad,GAAA;AAAA;AAAA,EAGA,OAAA;AAAA,EAET,YAAY,OAAA,EAA6B;AACvC,IAAA,IAAI,CAAC,SAAS,MAAA,EAAQ;AACpB,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,KAAA,IAAS,UAAA,CAAW,KAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,QAAQ,UAAA,IAAc,CAAA;AAEzC,IAAA,IAAA,CAAK,MAAM,YAAA,CAAoB;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAUd,QAAA,EAAU,QAAA;AAAA,MACV,GAAI,QAAQ,KAAA,GAAQ,EAAE,OAAO,OAAA,CAAQ,KAAA,KAAU;AAAC,KACjD,CAAA;AACD,IAAA,IAAA,CAAK,GAAA,CAAI,IAAI,cAAA,CAAe,OAAA,CAAQ,QAAQ,OAAA,CAAQ,UAAA,IAAc,WAAW,CAAC,CAAA;AAC9E,IAAA,IAAI,aAAa,CAAA,EAAG;AAClB,MAAA,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,eAAA,CAAgB,UAAA,EAAY,OAAO,CAAC,CAAA;AAAA,IACnD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMS,KAAA,GAAQ;AAAA;AAAA,IAEf,IAAA,EAAM,OAAO,OAAA,KAAoB;AAC/B,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,yBAAA,EAA2B;AAAA,QAC9E,MAAA,EAAQ,EAAE,IAAA,EAAM,EAAE,SAAQ;AAAE,OAC7B,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,kCAAkC,CAAA;AAC5E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASA,MAAA,EAAQ,OACN,OAAA,EACA,IAAA,EAGA,IAAA,KACkB;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,yBAAA,EAA2B;AAAA,QAC/E,MAAA,EAAQ;AAAA,UACN,IAAA,EAAM,EAAE,OAAA,EAAQ;AAAA,UAChB,GAAI,IAAA,EAAM,cAAA,GACN,EAAE,MAAA,EAAQ,EAAE,iBAAA,EAAmB,IAAA,CAAK,cAAA,EAAe,EAAE,GACrD;AAAC,SACP;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,uCAAuC,CAAA;AAAA,MACjF;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAkC;AAC7D,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,MAAM,OAAO,IAAA,EAAM,IAAA;AACnB,MAAA,IAAI,CAAC,IAAA,EAAM;AACT,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,oCAAoC,CAAA;AAAA,MAC9E;AACA,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUA,MAAA,EAAQ,OACN,OAAA,EACA,MAAA,EACA,IAAA,KAGqB;AACrB,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,2CAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,EAAO,EAAE,EAAG,IAAA;AAAK,OAChD;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,MAAA,EAAQ,OAAO,OAAA,EAAiB,MAAA,KAAmB;AACjD,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,MAAA;AAAA,QAC/C,kCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,mCAAmC,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,KAAA,EAAO,OAAO,OAAA,EAAiB,MAAA,KAAqC;AAClE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,wCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,IAAA,EAAM,OAAO,OAAA,EAAiB,MAAA,KAAqC;AACjE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,IAAA;AAAA,QAC/C,uCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA,GAAA,EAAK,OAAO,OAAA,EAAiB,MAAA,KAAyC;AACpE,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAO,UAAS,GAAI,MAAM,KAAK,GAAA,CAAI,GAAA;AAAA,QAC/C,sCAAA;AAAA,QACA,EAAE,QAAQ,EAAE,IAAA,EAAM,EAAE,OAAA,EAAS,MAAA,IAAS;AAAE,OAC1C;AACA,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,qCAAqC,CAAA;AAC/E,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,QAAA,GAA2B;AAC/B,IAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,QAAQ,CAAA;AAC7D,IAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,IAAA,IAAI,IAAA,KAAS,MAAA;AACX,MAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,6BAA6B,CAAA;AACvE,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMS,OAAA,GAAU;AAAA;AAAA,IAEjB,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,QAAQ,YAAY;AAClB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,SAAS,CAAA;AAC9D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,8BAA8B,CAAA;AACxE,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AAAA;AAAA,IAGA,SAAS,YAAY;AACnB,MAAA,MAAM,EAAE,MAAM,KAAA,EAAO,QAAA,KAAa,MAAM,IAAA,CAAK,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA;AAC/D,MAAA,IAAI,KAAA,KAAU,UAAa,CAAC,QAAA,CAAS,IAAI,MAAM,cAAA,CAAe,UAAU,KAAK,CAAA;AAC7E,MAAA,IAAI,IAAA,KAAS,MAAA;AACX,QAAA,MAAM,cAAA,CAAe,QAAA,EAAU,EAAE,KAAA,EAAO,+BAA+B,CAAA;AACzE,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,GACF;AACF","file":"index.js","sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** A Space — the tenancy an API key is scoped to. */\nexport type Space = components[\"schemas\"][\"Space\"];\n\n/** A Cube's SSH connection info (host, port, user, and pinned host keys). */\nexport type CubeSshInfo = components[\"schemas\"][\"CubeSshInfo\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request.\n *\n * A retried request may have a body (POST/PUT/DELETE — exactly the mutating,\n * rate-limited endpoints). By the time `onResponse` runs, the request that was\n * handed to `fetch` has had its body stream consumed, so `request.clone()` here\n * throws `TypeError: unusable`. To re-issue it we stash a *pristine* clone in\n * `onRequest` — captured before the body is read — keyed by openapi-fetch's\n * per-request `id`, and clone from that pristine copy on each attempt.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  const pristine = new Map<string, Request>();\n  return {\n    onRequest({ request, id }) {\n      pristine.set(id, request.clone());\n      return request;\n    },\n    onError({ id }) {\n      // fetch rejected (network error) — no onResponse will fire; don't leak.\n      pristine.delete(id);\n    },\n    async onResponse({ request, response, id }) {\n      const original = pristine.get(id) ?? request;\n      pristine.delete(id);\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        // Cap the wait — including a server-supplied `Retry-After` — so a hostile\n        // or misconfigured server can't park the client for minutes/hours.\n        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));\n        // Re-issue from the pristine clone; `.clone()` keeps it reusable across\n        // multiple attempts.\n        current = await doFetch(original.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update a Cube's SSH port.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is its SSH port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Sleep a running Cube (asynchronous — sleep is enqueued). */\n    sleep: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/sleep\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Wake a sleeping Cube (asynchronous — wake is enqueued). */\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Get a Cube's SSH connection info — host, port, login user, and (when\n     * available) the pinned host public keys for strict host-key verification.\n     */\n    ssh: async (spaceId: string, cubeId: string): Promise<CubeSshInfo> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Cube SSH-info response was empty.\" });\n      return data;\n    },\n  };\n\n  /**\n   * Resolve the {@link Space} this API key is scoped to — so you don't have to\n   * hardcode a `spaceId`. Handy right after constructing the client:\n   *\n   * @example\n   * ```ts\n   * const space = await krova.getSpace();\n   * const cubes = await krova.cubes.list(space.id);\n   * ```\n   */\n  async getSpace(): Promise<Space> {\n    const { data, error, response } = await this.raw.GET(\"/space\");\n    if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n    if (data === undefined)\n      throw krovaErrorFrom(response, { error: \"Space response was empty.\" });\n    return data;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@krovacloud/sdk",
-  "version": "0.1.5",
+  "version": "0.2.0",
   "description": "Official TypeScript SDK for Krova Cloud — a typed client for provisioning and managing Cubes (Firecracker microVMs) on bare-metal.",
   "license": "MIT",
   "type": "module",
@@ -61,11 +61,11 @@
     "openapi-fetch": "^0.17.0"
   },
   "devDependencies": {
-    "@types/node": "^22.20.0",
+    "@types/node": "^26.1.0",
     "openapi-typescript": "^7.13.0",
     "tsup": "^8.5.1",
-    "tsx": "^4.22.4",
-    "typescript": "^5.9.3"
+    "tsx": "^4.23.0",
+    "typescript": "^6.0.3"
   },
   "scripts": {
     "gen": "openapi-typescript openapi.json -o src/generated/types.ts",