@krovacloud/sdk 0.4.1 → 0.4.3

package/CHANGELOG.md

@@ -5,6 +5,35 @@ All notable changes to `@krovacloud/sdk` are documented here. This project adher
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) format.
 
 
+## Unreleased
+
+### Changed
+
+- **BREAKING** — `KrovaErrorBody` no longer has an open `[key: string]: unknown`
+  index signature; only `error?: string` is part of the public shape. The
+  documented API contract (`components.schemas.Error` in the bundled OpenAPI
+  spec) is the strict `{ error: string }`, and no internal consumer reads any
+  field other than `body?.error`. Callers that were treating the body as an
+  arbitrary record should narrow to `body?.error` (or cast the body to a
+  concrete shape they actually expect).
+
+## 0.4.2
+
+### Changed
+
+- Docs-only republish: the `domains.create()` example now destructures the
+  `{ domain, records }` result (the 0.4.0 shape), and `domains.records()` plus
+  the `DnsRecord`/`DnsRecordStatus` types are documented in the README. No code
+  change.
+
+## 0.4.1
+
+### Changed
+
+- Automated patch republish (2026-08-27, PR #46): the package is now built with
+  **tsdown** (replacing the unmaintained tsup) and formatted with **oxfmt**
+  (replacing Prettier). No API change.
+
 ## 0.4.0
 
 ### Changed

package/README.md

@@ -181,12 +181,15 @@ const pricing = await krova.catalog.pricing(); // per-resource hourly rates + vo
 Typed helpers for a Cube's attached resources — each unwraps the response and throws `KrovaError` on failure.
 
 ```ts
-// Custom domains
+// Custom domains — create() resolves to { domain, records } (BREAKING in 0.4.0).
+// The records are the DNS entries you must publish for the domain to work, so
+// you can create them in the same run: a wildcard needs three, an exact host one.
 const domains = await krova.domains.list("space_123", "cube_123");
-const domain = await krova.domains.create("space_123", "cube_123", {
+const { domain, records } = await krova.domains.create("space_123", "cube_123", {
   domain: "app.example.com",
   port: 8080,
 });
+for (const r of records) console.log(`${r.type} ${r.host} → ${r.value}`);
 await krova.domains.update("space_123", "cube_123", domain.id, { responseCompression: true });
 await krova.domains.delete("space_123", "cube_123", domain.id);
 
@@ -207,6 +210,31 @@ await krova.tcpMappings.delete("space_123", "cube_123", mapping.id);
 
 `Domain`, `Snapshot`, and `TcpMapping` are exported for your own signatures.
 
+### `domains.records` — the DNS records a domain needs
+
+The same records `domains.create()` returns, but each one **checked against live
+DNS**. Poll it after publishing them — `summary.complete` turns true only once
+every record is `found`. Each call performs real DNS lookups and is rate
+limited, so poll on an interval rather than in a tight loop.
+
+```ts
+const status = await krova.domains.records("space_123", "cube_123", domain.id);
+// { domain, isWildcard, records: DnsRecordStatus[], summary: { found, total, complete }, checkedAt }
+for (const r of status.records) console.log(`${r.host}: ${r.state}`); // found | missing | mismatch | unknown
+if (status.summary.complete) console.log("all records resolve — the domain can go live");
+```
+
+Two record states are worth knowing before you alert on them: `missing` means
+NOT PUBLISHED YET — the expected state before the records are created, never an
+error — and `unknown` means the lookup itself could not complete, which says
+nothing about your DNS. Each record also carries `mustBeGrey` and `proxyOk`:
+the routing record may sit behind Cloudflare's proxy, the `_acme-challenge`
+record must not — automation needs both flags, one alone would let you
+orange-cloud the single record that has to stay grey.
+
+`DnsRecord` (what `create` returns) and `DnsRecordStatus` (the checked variant,
+adding `state`, `detail`, `observed`) are exported for your own signatures.
+
 ### Imports & backups
 
 Move `.cube` archives in and out. `imports.create` returns a multipart upload target; upload the archive to the presigned parts, then call `imports.complete`.

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["createClient"],"sources":["../src/error.ts","../src/client.ts"],"sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** A Space — the tenancy an API key is scoped to. */\nexport type Space = components[\"schemas\"][\"Space\"];\n\n/** A Cube's SSH connection info (host, port, user, and pinned host keys). */\nexport type CubeSshInfo = components[\"schemas\"][\"CubeSshInfo\"];\n\n/** A custom domain attached to a Cube. */\nexport type Domain = components[\"schemas\"][\"Domain\"];\n\n/**\n * One DNS record you must publish for a domain to work.\n *\n * An ordinary subdomain needs one CNAME. A wildcard needs three: an ownership\n * TXT, the routing CNAME, and an `_acme-challenge` CNAME that lets Krova issue\n * and renew its certificate.\n *\n * ⛔ `mustBeGrey` and `proxyOk` are deliberate OPPOSITES, and automation needs\n * both. The routing record may sit behind Cloudflare's proxy (orange); the\n * `_acme-challenge` record must not, because a proxied one answers with\n * Cloudflare's addresses and the certificate authority finds nothing there.\n */\nexport type DnsRecord = components[\"schemas\"][\"DnsRecord\"];\n\n/**\n * A {@link DnsRecord} plus what Krova can currently see in public DNS.\n *\n * ⛔ `state: \"missing\"` means NOT PUBLISHED YET — the expected state before you\n * create the record, never an error. `state: \"unknown\"` means Krova could not\n * complete the lookup, which is never a statement about your DNS. Surfacing\n * either to your own users as a failure would be wrong.\n */\nexport type DnsRecordStatus = components[\"schemas\"][\"DnsRecordStatus\"];\n\n/** A snapshot of a Cube's disk. */\nexport type Snapshot = components[\"schemas\"][\"Snapshot\"];\n\n/** A TCP port mapping exposing a Cube port on the host. */\nexport type TcpMapping = components[\"schemas\"][\"TcpMapping\"];\n\n/** Request body for attaching a custom domain to a Cube. */\nexport type CreateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for updating a custom domain's proxy settings. */\nexport type UpdateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\"][\"patch\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for creating a TCP port mapping. */\nexport type CreateTcpMappingInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request.\n *\n * A retried request may have a body (POST/PUT/DELETE — exactly the mutating,\n * rate-limited endpoints). By the time `onResponse` runs, the request that was\n * handed to `fetch` has had its body stream consumed, so `request.clone()` here\n * throws `TypeError: unusable`. To re-issue it we stash a *pristine* clone in\n * `onRequest` — captured before the body is read — keyed by openapi-fetch's\n * per-request `id`, and clone from that pristine copy on each attempt.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  const pristine = new Map<string, Request>();\n  return {\n    onRequest({ request, id }) {\n      pristine.set(id, request.clone());\n      return request;\n    },\n    onError({ id }) {\n      // fetch rejected (network error) — no onResponse will fire; don't leak.\n      pristine.delete(id);\n    },\n    async onResponse({ request, response, id }) {\n      const original = pristine.get(id) ?? request;\n      pristine.delete(id);\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        // Cap the wait — including a server-supplied `Retry-After` — so a hostile\n        // or misconfigured server can't park the client for minutes/hours.\n        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));\n        // Re-issue from the pristine clone; `.clone()` keeps it reusable across\n        // multiple attempts.\n        current = await doFetch(original.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update the IN-CUBE port that SSH is forwarded to.\n     *\n     * `cubePort` is the port **inside** the Cube that sshd listens on — NOT the\n     * host port you connect to. The host port is allocated by Krova and is not\n     * changed by this call. Pointing this at a port nothing is listening on\n     * inside the Cube will silently make SSH unreachable; the default is 22.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is this port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Power off a running Cube (asynchronous — power-off is enqueued). The Cube\n     *  becomes `stopped` (its host RAM is freed); start it again with `wake`. */\n    powerOff: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/power-off\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Start a stopped Cube (asynchronous — start is enqueued). */\n    /**\n     * Restart a Cube (COLD restart).\n     *\n     * The hypervisor process is stopped and relaunched, so the Cube boots\n     * against the host's current kernel. This is the only way a Cube picks up a\n     * refreshed guest kernel after a platform image update — a `reboot` issued\n     * INSIDE the Cube cannot do it, because Firecracker treats a guest reboot as\n     * a shutdown and the kernel is supplied externally by the host.\n     *\n     * Disk state is preserved; only the kernel changes. The Cube must be\n     * `running`. Concurrent restarts of the same Cube are rejected (409) rather\n     * than queued twice.\n     */\n    restart: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restart\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Get a Cube's SSH connection info — host, port, login user, and (when\n     * available) the pinned host public keys for strict host-key verification.\n     */\n    ssh: async (spaceId: string, cubeId: string): Promise<CubeSshInfo> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Cube SSH-info response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Restore a Cube's disk from one of its {@link Snapshot}s (asynchronous —\n     * the restore is enqueued). The Cube's current disk is replaced.\n     */\n    restore: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restore\",\n        { params: { path: { spaceId, cubeId } }, body: { snapshotId } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  /**\n   * Resolve the {@link Space} this API key is scoped to — so you don't have to\n   * hardcode a `spaceId`. Handy right after constructing the client:\n   *\n   * @example\n   * ```ts\n   * const space = await krova.getSpace();\n   * const cubes = await krova.cubes.list(space.id);\n   * ```\n   */\n  async getSpace(): Promise<Space> {\n    const { data, error, response } = await this.raw.GET(\"/space\");\n    if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n    if (data === undefined)\n      throw krovaErrorFrom(response, { error: \"Space response was empty.\" });\n    return data;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Custom domains\n  // ---------------------------------------------------------------------------\n\n  readonly domains = {\n    /** List the custom domains attached to a Cube. */\n    list: async (spaceId: string, cubeId: string): Promise<Domain[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.domains ?? [];\n    },\n\n    /**\n     * Attach a custom domain to a Cube. `domain` + `port` are required.\n     *\n     * Returns the domain AND the DNS records you must publish for it to work —\n     * so you can create them in the same run, without a second call and without\n     * hard-coding record shapes. A wildcard needs three; an exact host needs one.\n     *\n     * ⛔ BREAKING in 0.4.0: this used to resolve to `Domain`. It now resolves to\n     * `{ domain, records }`, because for a wildcard two of the three records\n     * (the ownership TXT and the `_acme-challenge` delegation) were not\n     * derivable from anything the SDK returned — an integration had to read\n     * them out of the docs and hope they still matched the server.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateDomainInput,\n    ): Promise<{ domain: Domain; records: DnsRecord[] }> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Create domain response had no `domain`.\" });\n      return { domain: data.domain, records: data.records ?? [] };\n    },\n\n    /**\n     * The DNS records a domain needs, each checked against live DNS.\n     *\n     * Poll this after publishing them: `summary.complete` turns true only once\n     * every record is `found`. Each call performs real DNS lookups and is rate\n     * limited, so poll on an interval rather than in a tight loop.\n     */\n    records: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n    ): Promise<{\n      domain: string;\n      isWildcard: boolean;\n      records: DnsRecordStatus[];\n      summary: { found: number; total: number; complete: boolean };\n      checkedAt: string;\n    }> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}/records\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data)\n        throw krovaErrorFrom(response, { error: \"Domain records response was empty.\" });\n      return data;\n    },\n\n    /** Update a domain's per-domain proxy settings. */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n      body: UpdateDomainInput,\n    ): Promise<Domain> => {\n      const { data, error, response } = await this.raw.PATCH(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Update domain response had no `domain`.\" });\n      return data.domain;\n    },\n\n    /** Detach a custom domain from a Cube. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Snapshots\n  // ---------------------------------------------------------------------------\n\n  readonly snapshots = {\n    /** List a Cube's snapshots. */\n    list: async (spaceId: string, cubeId: string): Promise<Snapshot[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.snapshots ?? [];\n    },\n\n    /** Create a snapshot of a Cube's disk (asynchronous — enqueued). */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body?: { name?: string },\n    ): Promise<Snapshot> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } }, body: body ?? {} },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.snapshot)\n        throw krovaErrorFrom(response, { error: \"Create snapshot response had no `snapshot`.\" });\n      return data.snapshot;\n    },\n\n    /** Delete a snapshot. */\n    delete: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots/{snapshotId}\",\n        { params: { path: { spaceId, cubeId, snapshotId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // TCP port mappings\n  // ---------------------------------------------------------------------------\n\n  readonly tcpMappings = {\n    /** List a Cube's TCP port mappings. */\n    list: async (spaceId: string, cubeId: string): Promise<TcpMapping[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.tcpMappings ?? [];\n    },\n\n    /**\n     * Create a TCP port mapping exposing a Cube port on the host. `cubePort` is\n     * required; `whitelistIps` optionally restricts who can reach it.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateTcpMappingInput,\n    ): Promise<TcpMapping> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.tcpMapping)\n        throw krovaErrorFrom(response, { error: \"Create TCP mapping response had no `tcpMapping`.\" });\n      return data.tcpMapping;\n    },\n\n    /** Delete a TCP port mapping. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Imports & backups (.cube archive import / export)\n  // ---------------------------------------------------------------------------\n\n  readonly imports = {\n    /**\n     * Start importing a `.cube` archive into a new Cube. Returns the multipart\n     * upload target (`importId`, `uploadId`, presigned `parts`, …). Upload the\n     * archive to those URLs, then call {@link imports.complete}.\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes/imports\", {\n        params: { path: { spaceId } },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Get an in-progress or completed import by id. */\n    get: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Finish an import after the archive has been uploaded — provisions the\n     * Cube. Pass the uploaded `parts` (partNumber + etag) and the resolved\n     * `config`.\n     */\n    complete: async (\n      spaceId: string,\n      importId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports/{importId}/complete\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/imports/{importId}/complete\",\n        { params: { path: { spaceId, importId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Cancel an in-progress import. */\n    cancel: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  readonly backups = {\n    /** Get a time-limited download URL for a backup `.cube` archive. */\n    download: async (spaceId: string, backupId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/backups/{backupId}/download\",\n        { params: { path: { spaceId, backupId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,IAAa,aAAb,MAAa,mBAAmB,MAAM;;CAEpC;;;;;;CAOA;;;;;CAMA;;CAGA;;CAGA;CAEA,YACE,SACA,MAOA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,SAAS,KAAK;EACnB,KAAK,OAAO,KAAK;EACjB,KAAK,YAAY,KAAK;EACtB,KAAK,OAAO,KAAK;EACjB,KAAK,WAAW,KAAK;EAErB,OAAO,eAAe,MAAM,WAAW,SAAS;CAClD;AACF;;;;AAKA,SAAgB,eACd,UACA,MACY;CAKZ,OAAO,IAAI,WAHR,OAAO,MAAM,UAAU,YAAY,KAAK,SACzC,SAAS,cACT,8BAA8B,SAAS,UACV;EAC7B,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EAC9C,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EACnD;EACA;CACF,CAAC;AACH;;;;ACTA,MAAa,mBAAmB;;AAqChC,MAAM,qCAAqB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;;AAE7C,MAAM,kBAAkB;;AAExB,MAAM,iBAAiB;AAEvB,MAAM,SAAS,OACb,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;;;;;AAMlD,SAAS,kBAAkB,aAA2C;CACpE,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,OAAO,SAAS,OAAO,GAAG,OAAO,KAAK,IAAI,GAAG,UAAU,GAAI;CAC/D,MAAM,SAAS,KAAK,MAAM,WAAW;CACrC,IAAI,OAAO,SAAS,MAAM,GAAG,OAAO,KAAK,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;CACnE,OAAO;AACT;AAEA,SAAS,eAAe,QAAgB,QAAgC;CACtE,OAAO,EACL,UAAU,EAAE,WAAW;EACrB,IAAI,WAAW,UACb,QAAQ,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;OAEvD,QAAQ,QAAQ,IAAI,aAAa,MAAM;EAEzC,OAAO;CACT,EACF;AACF;;;;;;;;;;;;AAaA,SAAS,gBAAgB,YAAoB,SAAmC;CAC9E,MAAM,2BAAW,IAAI,IAAqB;CAC1C,OAAO;EACL,UAAU,EAAE,SAAS,MAAM;GACzB,SAAS,IAAI,IAAI,QAAQ,MAAM,CAAC;GAChC,OAAO;EACT;EACA,QAAQ,EAAE,MAAM;GAEd,SAAS,OAAO,EAAE;EACpB;EACA,MAAM,WAAW,EAAE,SAAS,UAAU,MAAM;GAC1C,MAAM,WAAW,SAAS,IAAI,EAAE,KAAK;GACrC,SAAS,OAAO,EAAE;GAClB,IAAI,cAAc,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,GAC5D,OAAO;GAET,IAAI,UAAU;GACd,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAAW;IACtD,IAAI,CAAC,mBAAmB,IAAI,QAAQ,MAAM,GAAG;IAC7C,MAAM,eAAe,kBAAkB,QAAQ,QAAQ,IAAI,aAAa,CAAC;IACzE,MAAM,UAAU,KAAK,IAAI,kBAAkB,MAAM,UAAU,IAAI,cAAc;IAG7E,MAAM,MAAM,KAAK,IAAI,gBAAgB,SAAS,cAAc,CAAC;IAG7D,UAAU,MAAM,QAAQ,SAAS,MAAM,CAAC;GAC1C;GACA,OAAO;EACT;CACF;AACF;;;;;;;;;;AAWA,IAAa,cAAb,MAAyB;;;;;;;;;;;;;CAavB;;CAGA;CAEA,YAAY,SAA6B;EACvC,IAAI,CAAC,SAAS,QACZ,MAAM,IAAI,MAAM,oCAAoC;EAEtD,KAAK,UAAU,QAAQ,WAAA;EACvB,MAAM,UAAU,QAAQ,SAAS,WAAW;EAC5C,MAAM,aAAa,QAAQ,cAAc;EAEzC,KAAK,OAAA,GAAMA,cAAAA,QAAAA,CAAoB;GAC7B,SAAS,KAAK;GAUd,UAAU;GACV,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAClD,CAAC;EACD,KAAK,IAAI,IAAI,eAAe,QAAQ,QAAQ,QAAQ,cAAc,WAAW,CAAC;EAC9E,IAAI,aAAa,GACf,KAAK,IAAI,IAAI,gBAAgB,YAAY,OAAO,CAAC;CAErD;CAMA,QAAiB;;EAEf,MAAM,OAAO,YAAoB;GAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,2BAA2B,EAC9E,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC9B,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,iCAAiC,CAAC;GAC5E,OAAO;EACT;;;;;;;;EASA,QAAQ,OACN,SACA,MAGA,SACkB;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,2BAA2B;IAC/E,QAAQ;KACN,MAAM,EAAE,QAAQ;KAChB,GAAI,MAAM,iBACN,EAAE,QAAQ,EAAE,mBAAmB,KAAK,eAAe,EAAE,IACrD,CAAC;IACP;IACA;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,sCAAsC,CAAC;GAEjF,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,WAAkC;GAC7D,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,mCAAmC,CAAC;GAE9E,OAAO;EACT;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SAGqB;GACrB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,6CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,WAAmB;GACjD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,kCAAkC,CAAC;GAC7E,OAAO;EACT;;;EAIA,UAAU,OAAO,SAAiB,WAAqC;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;;;;;;;;;;EAgBA,SAAS,OAAO,SAAiB,WAAqC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;EAEA,MAAM,OAAO,SAAiB,WAAqC;GACjE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,yCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;EAMA,KAAK,OAAO,SAAiB,WAAyC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,wCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,oCAAoC,CAAC;GAC/E,OAAO;EACT;;;;;EAMA,SAAS,OAAO,SAAiB,QAAgB,eAAuB;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,EAAE,WAAW;GAAE,CAChE;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;;;;;;;;;;;CAYA,MAAM,WAA2B;EAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,QAAQ;EAC7D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,4BAA4B,CAAC;EACvE,OAAO;CACT;CAMA,UAAmB;;EAEjB,MAAM,OAAO,SAAiB,WAAsC;GAClE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,WAAW,CAAC;EAC3B;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SACsD;GACtD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO;IAAE,QAAQ,KAAK;IAAQ,SAAS,KAAK,WAAW,CAAC;GAAE;EAC5D;;;;;;;;EASA,SAAS,OACP,SACA,QACA,cAOI;GACJ,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,gEACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,qCAAqC,CAAC;GAChF,OAAO;EACT;;EAGA,QAAQ,OACN,SACA,QACA,WACA,SACoB;GACpB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,MAC/C,wDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;KAAQ;IAAU,EAAE;IAAG;GAAK,CAC3D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,wDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,YAAqB;;EAEnB,MAAM,OAAO,SAAiB,WAAwC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,aAAa,CAAC;EAC7B;;EAGA,QAAQ,OACN,SACA,QACA,SACsB;GACtB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,QAAQ,CAAC;GAAE,CAC5D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,UACT,MAAM,eAAe,UAAU,EAAE,OAAO,8CAA8C,CAAC;GACzF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,eAAuB;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,2DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAW,EAAE,EAAE,CACtD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,cAAuB;;EAErB,MAAM,OAAO,SAAiB,WAA0C;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,eAAe,CAAC;EAC/B;;;;;EAMA,QAAQ,OACN,SACA,QACA,SACwB;GACxB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,iDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,YACT,MAAM,eAAe,UAAU,EAAE,OAAO,mDAAmD,CAAC;GAC9F,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,6DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,UAAmB;;;;;;EAMjB,QAAQ,OACN,SACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,mCAAmC;IACvF,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5B;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,aAAqB;GAChD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;EAOA,UAAU,OACR,SACA,UACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,uDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAS,EAAE;IAAG;GAAK,CAClD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,aAAqB;GACnD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAEA,UAAmB;;AAEjB,UAAU,OAAO,SAAiB,aAAqB;EACrD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;GAAE;GAAS;EAAS,EAAE,EAAE,CAC5C;EACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,OAAO;CACT,EACF;CAMA,UAAmB;;EAEjB,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;;EAGA,QAAQ,YAAY;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,SAAS;GAC9D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,6BAA6B,CAAC;GACxE,OAAO;EACT;;EAGA,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;CACF;AACF"}
+{"version":3,"file":"index.cjs","names":["createClient"],"sources":["../src/error.ts","../src/client.ts"],"sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** A Space — the tenancy an API key is scoped to. */\nexport type Space = components[\"schemas\"][\"Space\"];\n\n/** A Cube's SSH connection info (host, port, user, and pinned host keys). */\nexport type CubeSshInfo = components[\"schemas\"][\"CubeSshInfo\"];\n\n/** A custom domain attached to a Cube. */\nexport type Domain = components[\"schemas\"][\"Domain\"];\n\n/**\n * One DNS record you must publish for a domain to work.\n *\n * An ordinary subdomain needs one CNAME. A wildcard needs three: an ownership\n * TXT, the routing CNAME, and an `_acme-challenge` CNAME that lets Krova issue\n * and renew its certificate.\n *\n * ⛔ `mustBeGrey` and `proxyOk` are deliberate OPPOSITES, and automation needs\n * both. The routing record may sit behind Cloudflare's proxy (orange); the\n * `_acme-challenge` record must not, because a proxied one answers with\n * Cloudflare's addresses and the certificate authority finds nothing there.\n */\nexport type DnsRecord = components[\"schemas\"][\"DnsRecord\"];\n\n/**\n * A {@link DnsRecord} plus what Krova can currently see in public DNS.\n *\n * ⛔ `state: \"missing\"` means NOT PUBLISHED YET — the expected state before you\n * create the record, never an error. `state: \"unknown\"` means Krova could not\n * complete the lookup, which is never a statement about your DNS. Surfacing\n * either to your own users as a failure would be wrong.\n */\nexport type DnsRecordStatus = components[\"schemas\"][\"DnsRecordStatus\"];\n\n/** A snapshot of a Cube's disk. */\nexport type Snapshot = components[\"schemas\"][\"Snapshot\"];\n\n/** A TCP port mapping exposing a Cube port on the host. */\nexport type TcpMapping = components[\"schemas\"][\"TcpMapping\"];\n\n/** Request body for attaching a custom domain to a Cube. */\nexport type CreateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for updating a custom domain's proxy settings. */\nexport type UpdateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\"][\"patch\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for creating a TCP port mapping. */\nexport type CreateTcpMappingInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request.\n *\n * A retried request may have a body (POST/PUT/DELETE — exactly the mutating,\n * rate-limited endpoints). By the time `onResponse` runs, the request that was\n * handed to `fetch` has had its body stream consumed, so `request.clone()` here\n * throws `TypeError: unusable`. To re-issue it we stash a *pristine* clone in\n * `onRequest` — captured before the body is read — keyed by openapi-fetch's\n * per-request `id`, and clone from that pristine copy on each attempt.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  const pristine = new Map<string, Request>();\n  return {\n    onRequest({ request, id }) {\n      pristine.set(id, request.clone());\n      return request;\n    },\n    onError({ id }) {\n      // fetch rejected (network error) — no onResponse will fire; don't leak.\n      pristine.delete(id);\n    },\n    async onResponse({ request, response, id }) {\n      const original = pristine.get(id) ?? request;\n      pristine.delete(id);\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        // Cap the wait — including a server-supplied `Retry-After` — so a hostile\n        // or misconfigured server can't park the client for minutes/hours.\n        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));\n        // Re-issue from the pristine clone; `.clone()` keeps it reusable across\n        // multiple attempts.\n        current = await doFetch(original.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update the IN-CUBE port that SSH is forwarded to.\n     *\n     * `cubePort` is the port **inside** the Cube that sshd listens on — NOT the\n     * host port you connect to. The host port is allocated by Krova and is not\n     * changed by this call. Pointing this at a port nothing is listening on\n     * inside the Cube will silently make SSH unreachable; the default is 22.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is this port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Power off a running Cube (asynchronous — power-off is enqueued). The Cube\n     *  becomes `stopped` (its host RAM is freed); start it again with `wake`. */\n    powerOff: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/power-off\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Start a stopped Cube (asynchronous — start is enqueued). */\n    /**\n     * Restart a Cube (COLD restart).\n     *\n     * The hypervisor process is stopped and relaunched, so the Cube boots\n     * against the host's current kernel. This is the only way a Cube picks up a\n     * refreshed guest kernel after a platform image update — a `reboot` issued\n     * INSIDE the Cube cannot do it, because Firecracker treats a guest reboot as\n     * a shutdown and the kernel is supplied externally by the host.\n     *\n     * Disk state is preserved; only the kernel changes. The Cube must be\n     * `running`. Concurrent restarts of the same Cube are rejected (409) rather\n     * than queued twice.\n     */\n    restart: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restart\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Get a Cube's SSH connection info — host, port, login user, and (when\n     * available) the pinned host public keys for strict host-key verification.\n     */\n    ssh: async (spaceId: string, cubeId: string): Promise<CubeSshInfo> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Cube SSH-info response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Restore a Cube's disk from one of its {@link Snapshot}s (asynchronous —\n     * the restore is enqueued). The Cube's current disk is replaced.\n     */\n    restore: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restore\",\n        { params: { path: { spaceId, cubeId } }, body: { snapshotId } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  /**\n   * Resolve the {@link Space} this API key is scoped to — so you don't have to\n   * hardcode a `spaceId`. Handy right after constructing the client:\n   *\n   * @example\n   * ```ts\n   * const space = await krova.getSpace();\n   * const cubes = await krova.cubes.list(space.id);\n   * ```\n   */\n  async getSpace(): Promise<Space> {\n    const { data, error, response } = await this.raw.GET(\"/space\");\n    if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n    if (data === undefined)\n      throw krovaErrorFrom(response, { error: \"Space response was empty.\" });\n    return data;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Custom domains\n  // ---------------------------------------------------------------------------\n\n  readonly domains = {\n    /** List the custom domains attached to a Cube. */\n    list: async (spaceId: string, cubeId: string): Promise<Domain[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.domains ?? [];\n    },\n\n    /**\n     * Attach a custom domain to a Cube. `domain` + `port` are required.\n     *\n     * Returns the domain AND the DNS records you must publish for it to work —\n     * so you can create them in the same run, without a second call and without\n     * hard-coding record shapes. A wildcard needs three; an exact host needs one.\n     *\n     * ⛔ BREAKING in 0.4.0: this used to resolve to `Domain`. It now resolves to\n     * `{ domain, records }`, because for a wildcard two of the three records\n     * (the ownership TXT and the `_acme-challenge` delegation) were not\n     * derivable from anything the SDK returned — an integration had to read\n     * them out of the docs and hope they still matched the server.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateDomainInput,\n    ): Promise<{ domain: Domain; records: DnsRecord[] }> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Create domain response had no `domain`.\" });\n      return { domain: data.domain, records: data.records ?? [] };\n    },\n\n    /**\n     * The DNS records a domain needs, each checked against live DNS.\n     *\n     * Poll this after publishing them: `summary.complete` turns true only once\n     * every record is `found`. Each call performs real DNS lookups and is rate\n     * limited, so poll on an interval rather than in a tight loop.\n     */\n    records: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n    ): Promise<{\n      domain: string;\n      isWildcard: boolean;\n      records: DnsRecordStatus[];\n      summary: { found: number; total: number; complete: boolean };\n      checkedAt: string;\n    }> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}/records\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data)\n        throw krovaErrorFrom(response, { error: \"Domain records response was empty.\" });\n      return data;\n    },\n\n    /** Update a domain's per-domain proxy settings. */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n      body: UpdateDomainInput,\n    ): Promise<Domain> => {\n      const { data, error, response } = await this.raw.PATCH(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Update domain response had no `domain`.\" });\n      return data.domain;\n    },\n\n    /** Detach a custom domain from a Cube. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Snapshots\n  // ---------------------------------------------------------------------------\n\n  readonly snapshots = {\n    /** List a Cube's snapshots. */\n    list: async (spaceId: string, cubeId: string): Promise<Snapshot[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.snapshots ?? [];\n    },\n\n    /** Create a snapshot of a Cube's disk (asynchronous — enqueued). */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body?: { name?: string },\n    ): Promise<Snapshot> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } }, body: body ?? {} },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.snapshot)\n        throw krovaErrorFrom(response, { error: \"Create snapshot response had no `snapshot`.\" });\n      return data.snapshot;\n    },\n\n    /** Delete a snapshot. */\n    delete: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots/{snapshotId}\",\n        { params: { path: { spaceId, cubeId, snapshotId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // TCP port mappings\n  // ---------------------------------------------------------------------------\n\n  readonly tcpMappings = {\n    /** List a Cube's TCP port mappings. */\n    list: async (spaceId: string, cubeId: string): Promise<TcpMapping[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.tcpMappings ?? [];\n    },\n\n    /**\n     * Create a TCP port mapping exposing a Cube port on the host. `cubePort` is\n     * required; `whitelistIps` optionally restricts who can reach it.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateTcpMappingInput,\n    ): Promise<TcpMapping> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.tcpMapping)\n        throw krovaErrorFrom(response, { error: \"Create TCP mapping response had no `tcpMapping`.\" });\n      return data.tcpMapping;\n    },\n\n    /** Delete a TCP port mapping. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Imports & backups (.cube archive import / export)\n  // ---------------------------------------------------------------------------\n\n  readonly imports = {\n    /**\n     * Start importing a `.cube` archive into a new Cube. Returns the multipart\n     * upload target (`importId`, `uploadId`, presigned `parts`, …). Upload the\n     * archive to those URLs, then call {@link imports.complete}.\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes/imports\", {\n        params: { path: { spaceId } },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Get an in-progress or completed import by id. */\n    get: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Finish an import after the archive has been uploaded — provisions the\n     * Cube. Pass the uploaded `parts` (partNumber + etag) and the resolved\n     * `config`.\n     */\n    complete: async (\n      spaceId: string,\n      importId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports/{importId}/complete\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/imports/{importId}/complete\",\n        { params: { path: { spaceId, importId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Cancel an in-progress import. */\n    cancel: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  readonly backups = {\n    /** Get a time-limited download URL for a backup `.cube` archive. */\n    download: async (spaceId: string, backupId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/backups/{backupId}/download\",\n        { params: { path: { spaceId, backupId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,IAAa,aAAb,MAAa,mBAAmB,MAAM;;CAEpC;;;;;;CAOA;;;;;CAMA;;CAGA;;CAGA;CAEA,YACE,SACA,MAOA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,SAAS,KAAK;EACnB,KAAK,OAAO,KAAK;EACjB,KAAK,YAAY,KAAK;EACtB,KAAK,OAAO,KAAK;EACjB,KAAK,WAAW,KAAK;EAErB,OAAO,eAAe,MAAM,WAAW,SAAS;CAClD;AACF;;;;AAKA,SAAgB,eACd,UACA,MACY;CAKZ,OAAO,IAAI,WAHR,OAAO,MAAM,UAAU,YAAY,KAAK,SACzC,SAAS,cACT,8BAA8B,SAAS,UACV;EAC7B,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EAC9C,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EACnD;EACA;CACF,CAAC;AACH;;;;ACPA,MAAa,mBAAmB;;AAqChC,MAAM,qCAAqB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;;AAE7C,MAAM,kBAAkB;;AAExB,MAAM,iBAAiB;AAEvB,MAAM,SAAS,OACb,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;;;;;AAMlD,SAAS,kBAAkB,aAA2C;CACpE,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,OAAO,SAAS,OAAO,GAAG,OAAO,KAAK,IAAI,GAAG,UAAU,GAAI;CAC/D,MAAM,SAAS,KAAK,MAAM,WAAW;CACrC,IAAI,OAAO,SAAS,MAAM,GAAG,OAAO,KAAK,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;CACnE,OAAO;AACT;AAEA,SAAS,eAAe,QAAgB,QAAgC;CACtE,OAAO,EACL,UAAU,EAAE,WAAW;EACrB,IAAI,WAAW,UACb,QAAQ,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;OAEvD,QAAQ,QAAQ,IAAI,aAAa,MAAM;EAEzC,OAAO;CACT,EACF;AACF;;;;;;;;;;;;AAaA,SAAS,gBAAgB,YAAoB,SAAmC;CAC9E,MAAM,2BAAW,IAAI,IAAqB;CAC1C,OAAO;EACL,UAAU,EAAE,SAAS,MAAM;GACzB,SAAS,IAAI,IAAI,QAAQ,MAAM,CAAC;GAChC,OAAO;EACT;EACA,QAAQ,EAAE,MAAM;GAEd,SAAS,OAAO,EAAE;EACpB;EACA,MAAM,WAAW,EAAE,SAAS,UAAU,MAAM;GAC1C,MAAM,WAAW,SAAS,IAAI,EAAE,KAAK;GACrC,SAAS,OAAO,EAAE;GAClB,IAAI,cAAc,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,GAC5D,OAAO;GAET,IAAI,UAAU;GACd,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAAW;IACtD,IAAI,CAAC,mBAAmB,IAAI,QAAQ,MAAM,GAAG;IAC7C,MAAM,eAAe,kBAAkB,QAAQ,QAAQ,IAAI,aAAa,CAAC;IACzE,MAAM,UAAU,KAAK,IAAI,kBAAkB,MAAM,UAAU,IAAI,cAAc;IAG7E,MAAM,MAAM,KAAK,IAAI,gBAAgB,SAAS,cAAc,CAAC;IAG7D,UAAU,MAAM,QAAQ,SAAS,MAAM,CAAC;GAC1C;GACA,OAAO;EACT;CACF;AACF;;;;;;;;;;AAWA,IAAa,cAAb,MAAyB;;;;;;;;;;;;;CAavB;;CAGA;CAEA,YAAY,SAA6B;EACvC,IAAI,CAAC,SAAS,QACZ,MAAM,IAAI,MAAM,oCAAoC;EAEtD,KAAK,UAAU,QAAQ,WAAA;EACvB,MAAM,UAAU,QAAQ,SAAS,WAAW;EAC5C,MAAM,aAAa,QAAQ,cAAc;EAEzC,KAAK,OAAA,GAAMA,cAAAA,QAAAA,CAAoB;GAC7B,SAAS,KAAK;GAUd,UAAU;GACV,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAClD,CAAC;EACD,KAAK,IAAI,IAAI,eAAe,QAAQ,QAAQ,QAAQ,cAAc,WAAW,CAAC;EAC9E,IAAI,aAAa,GACf,KAAK,IAAI,IAAI,gBAAgB,YAAY,OAAO,CAAC;CAErD;CAMA,QAAiB;;EAEf,MAAM,OAAO,YAAoB;GAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,2BAA2B,EAC9E,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC9B,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,iCAAiC,CAAC;GAC5E,OAAO;EACT;;;;;;;;EASA,QAAQ,OACN,SACA,MAGA,SACkB;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,2BAA2B;IAC/E,QAAQ;KACN,MAAM,EAAE,QAAQ;KAChB,GAAI,MAAM,iBACN,EAAE,QAAQ,EAAE,mBAAmB,KAAK,eAAe,EAAE,IACrD,CAAC;IACP;IACA;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,sCAAsC,CAAC;GAEjF,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,WAAkC;GAC7D,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,mCAAmC,CAAC;GAE9E,OAAO;EACT;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SAGqB;GACrB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,6CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,WAAmB;GACjD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,kCAAkC,CAAC;GAC7E,OAAO;EACT;;;EAIA,UAAU,OAAO,SAAiB,WAAqC;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;;;;;;;;;;EAgBA,SAAS,OAAO,SAAiB,WAAqC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;EAEA,MAAM,OAAO,SAAiB,WAAqC;GACjE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,yCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;EAMA,KAAK,OAAO,SAAiB,WAAyC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,wCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,oCAAoC,CAAC;GAC/E,OAAO;EACT;;;;;EAMA,SAAS,OAAO,SAAiB,QAAgB,eAAuB;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,EAAE,WAAW;GAAE,CAChE;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;;;;;;;;;;;CAYA,MAAM,WAA2B;EAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,QAAQ;EAC7D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,4BAA4B,CAAC;EACvE,OAAO;CACT;CAMA,UAAmB;;EAEjB,MAAM,OAAO,SAAiB,WAAsC;GAClE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,WAAW,CAAC;EAC3B;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SACsD;GACtD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO;IAAE,QAAQ,KAAK;IAAQ,SAAS,KAAK,WAAW,CAAC;GAAE;EAC5D;;;;;;;;EASA,SAAS,OACP,SACA,QACA,cAOI;GACJ,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,gEACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,qCAAqC,CAAC;GAChF,OAAO;EACT;;EAGA,QAAQ,OACN,SACA,QACA,WACA,SACoB;GACpB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,MAC/C,wDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;KAAQ;IAAU,EAAE;IAAG;GAAK,CAC3D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,wDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,YAAqB;;EAEnB,MAAM,OAAO,SAAiB,WAAwC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,aAAa,CAAC;EAC7B;;EAGA,QAAQ,OACN,SACA,QACA,SACsB;GACtB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,QAAQ,CAAC;GAAE,CAC5D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,UACT,MAAM,eAAe,UAAU,EAAE,OAAO,8CAA8C,CAAC;GACzF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,eAAuB;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,2DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAW,EAAE,EAAE,CACtD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,cAAuB;;EAErB,MAAM,OAAO,SAAiB,WAA0C;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,eAAe,CAAC;EAC/B;;;;;EAMA,QAAQ,OACN,SACA,QACA,SACwB;GACxB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,iDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,YACT,MAAM,eAAe,UAAU,EAAE,OAAO,mDAAmD,CAAC;GAC9F,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,6DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,UAAmB;;;;;;EAMjB,QAAQ,OACN,SACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,mCAAmC;IACvF,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5B;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,aAAqB;GAChD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;EAOA,UAAU,OACR,SACA,UACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,uDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAS,EAAE;IAAG;GAAK,CAClD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,aAAqB;GACnD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAEA,UAAmB;;AAEjB,UAAU,OAAO,SAAiB,aAAqB;EACrD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;GAAE;GAAS;EAAS,EAAE,EAAE,CAC5C;EACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,OAAO;CACT,EACF;CAMA,UAAmB;;EAEjB,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;;EAGA,QAAQ,YAAY;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,SAAS;GAC9D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,6BAA6B,CAAC;GACxE,OAAO;EACT;;EAGA,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;CACF;AACF"}

package/dist/index.d.cts

@@ -2320,27 +2320,27 @@ declare class KrovaClient {
      * archive to those URLs, then call {@link imports.complete}.
      */
     create: (spaceId: string, body: NonNullable<paths["/spaces/{spaceId}/cubes/imports"]["post"]["requestBody"]>["content"]["application/json"]) => Promise<{
-      importId?: string | undefined;
-      uploadId?: string | undefined;
-      key?: string | undefined;
-      chunkSizeBytes?: number | undefined;
+      importId?: string;
+      uploadId?: string;
+      key?: string;
+      chunkSizeBytes?: number;
       parts?: {
-        partNumber?: number | undefined;
-        url?: string | undefined;
+        partNumber?: number;
+        url?: string;
       }[] | undefined;
-      expiresAt?: string | undefined;
+      expiresAt?: string;
     } | undefined>;
     /** Get an in-progress or completed import by id. */
     get: (spaceId: string, importId: string) => Promise<{
       import?: {
-        id?: string | undefined;
-        name?: string | undefined;
-        status?: "uploading" | "finalizing" | "provisioning" | "complete" | "failed" | "expired" | undefined;
-        cubeId?: string | null | undefined;
-        error?: string | null | undefined;
-        createdAt?: string | undefined;
-        updatedAt?: string | undefined;
-        completedAt?: string | null | undefined;
+        id?: string;
+        name?: string;
+        status?: "uploading" | "finalizing" | "provisioning" | "complete" | "failed" | "expired";
+        cubeId?: string | null;
+        error?: string | null;
+        createdAt?: string;
+        updatedAt?: string;
+        completedAt?: string | null;
       } | undefined;
     }>;
     /**
@@ -2349,9 +2349,9 @@ declare class KrovaClient {
      * `config`.
      */
     complete: (spaceId: string, importId: string, body: NonNullable<paths["/spaces/{spaceId}/cubes/imports/{importId}/complete"]["post"]["requestBody"]>["content"]["application/json"]) => Promise<{
-      importId?: string | undefined;
-      cubeId?: string | undefined;
-      status?: "provisioning" | undefined;
+      importId?: string;
+      cubeId?: string;
+      status?: "provisioning";
     } | undefined>;
     /** Cancel an in-progress import. */
     cancel: (spaceId: string, importId: string) => Promise<{
@@ -2361,10 +2361,10 @@ declare class KrovaClient {
   readonly backups: {
     /** Get a time-limited download URL for a backup `.cube` archive. */
     download: (spaceId: string, backupId: string) => Promise<{
-      url?: string | undefined;
-      filename?: string | undefined;
-      sizeBytes?: number | null | undefined;
-      expiresAt?: string | undefined;
+      url?: string;
+      filename?: string;
+      sizeBytes?: number | null;
+      expiresAt?: string;
     } | undefined>;
   };
   readonly catalog: {
@@ -2410,12 +2410,10 @@ declare class KrovaClient {
  * The error body shape returned by the Krova Cloud API.
  *
  * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response
- * body is `{ "error": string }`. Additional fields may appear over time, so
- * we keep the type open.
+ * body is `{ "error": string }`.
  */
 interface KrovaErrorBody {
   error?: string;
-  [key: string]: unknown;
 }
 /**
  * Error thrown by the ergonomic {@link KrovaClient} helpers when the API

package/dist/index.d.ts

@@ -2320,27 +2320,27 @@ declare class KrovaClient {
      * archive to those URLs, then call {@link imports.complete}.
      */
     create: (spaceId: string, body: NonNullable<paths["/spaces/{spaceId}/cubes/imports"]["post"]["requestBody"]>["content"]["application/json"]) => Promise<{
-      importId?: string | undefined;
-      uploadId?: string | undefined;
-      key?: string | undefined;
-      chunkSizeBytes?: number | undefined;
+      importId?: string;
+      uploadId?: string;
+      key?: string;
+      chunkSizeBytes?: number;
       parts?: {
-        partNumber?: number | undefined;
-        url?: string | undefined;
+        partNumber?: number;
+        url?: string;
       }[] | undefined;
-      expiresAt?: string | undefined;
+      expiresAt?: string;
     } | undefined>;
     /** Get an in-progress or completed import by id. */
     get: (spaceId: string, importId: string) => Promise<{
       import?: {
-        id?: string | undefined;
-        name?: string | undefined;
-        status?: "uploading" | "finalizing" | "provisioning" | "complete" | "failed" | "expired" | undefined;
-        cubeId?: string | null | undefined;
-        error?: string | null | undefined;
-        createdAt?: string | undefined;
-        updatedAt?: string | undefined;
-        completedAt?: string | null | undefined;
+        id?: string;
+        name?: string;
+        status?: "uploading" | "finalizing" | "provisioning" | "complete" | "failed" | "expired";
+        cubeId?: string | null;
+        error?: string | null;
+        createdAt?: string;
+        updatedAt?: string;
+        completedAt?: string | null;
       } | undefined;
     }>;
     /**
@@ -2349,9 +2349,9 @@ declare class KrovaClient {
      * `config`.
      */
     complete: (spaceId: string, importId: string, body: NonNullable<paths["/spaces/{spaceId}/cubes/imports/{importId}/complete"]["post"]["requestBody"]>["content"]["application/json"]) => Promise<{
-      importId?: string | undefined;
-      cubeId?: string | undefined;
-      status?: "provisioning" | undefined;
+      importId?: string;
+      cubeId?: string;
+      status?: "provisioning";
     } | undefined>;
     /** Cancel an in-progress import. */
     cancel: (spaceId: string, importId: string) => Promise<{
@@ -2361,10 +2361,10 @@ declare class KrovaClient {
   readonly backups: {
     /** Get a time-limited download URL for a backup `.cube` archive. */
     download: (spaceId: string, backupId: string) => Promise<{
-      url?: string | undefined;
-      filename?: string | undefined;
-      sizeBytes?: number | null | undefined;
-      expiresAt?: string | undefined;
+      url?: string;
+      filename?: string;
+      sizeBytes?: number | null;
+      expiresAt?: string;
     } | undefined>;
   };
   readonly catalog: {
@@ -2410,12 +2410,10 @@ declare class KrovaClient {
  * The error body shape returned by the Krova Cloud API.
  *
  * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response
- * body is `{ "error": string }`. Additional fields may appear over time, so
- * we keep the type open.
+ * body is `{ "error": string }`.
  */
 interface KrovaErrorBody {
   error?: string;
-  [key: string]: unknown;
 }
 /**
  * Error thrown by the ergonomic {@link KrovaClient} helpers when the API

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/error.ts","../src/client.ts"],"sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`. Additional fields may appear over time, so\n * we keep the type open.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n  [key: string]: unknown;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** A Space — the tenancy an API key is scoped to. */\nexport type Space = components[\"schemas\"][\"Space\"];\n\n/** A Cube's SSH connection info (host, port, user, and pinned host keys). */\nexport type CubeSshInfo = components[\"schemas\"][\"CubeSshInfo\"];\n\n/** A custom domain attached to a Cube. */\nexport type Domain = components[\"schemas\"][\"Domain\"];\n\n/**\n * One DNS record you must publish for a domain to work.\n *\n * An ordinary subdomain needs one CNAME. A wildcard needs three: an ownership\n * TXT, the routing CNAME, and an `_acme-challenge` CNAME that lets Krova issue\n * and renew its certificate.\n *\n * ⛔ `mustBeGrey` and `proxyOk` are deliberate OPPOSITES, and automation needs\n * both. The routing record may sit behind Cloudflare's proxy (orange); the\n * `_acme-challenge` record must not, because a proxied one answers with\n * Cloudflare's addresses and the certificate authority finds nothing there.\n */\nexport type DnsRecord = components[\"schemas\"][\"DnsRecord\"];\n\n/**\n * A {@link DnsRecord} plus what Krova can currently see in public DNS.\n *\n * ⛔ `state: \"missing\"` means NOT PUBLISHED YET — the expected state before you\n * create the record, never an error. `state: \"unknown\"` means Krova could not\n * complete the lookup, which is never a statement about your DNS. Surfacing\n * either to your own users as a failure would be wrong.\n */\nexport type DnsRecordStatus = components[\"schemas\"][\"DnsRecordStatus\"];\n\n/** A snapshot of a Cube's disk. */\nexport type Snapshot = components[\"schemas\"][\"Snapshot\"];\n\n/** A TCP port mapping exposing a Cube port on the host. */\nexport type TcpMapping = components[\"schemas\"][\"TcpMapping\"];\n\n/** Request body for attaching a custom domain to a Cube. */\nexport type CreateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for updating a custom domain's proxy settings. */\nexport type UpdateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\"][\"patch\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for creating a TCP port mapping. */\nexport type CreateTcpMappingInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request.\n *\n * A retried request may have a body (POST/PUT/DELETE — exactly the mutating,\n * rate-limited endpoints). By the time `onResponse` runs, the request that was\n * handed to `fetch` has had its body stream consumed, so `request.clone()` here\n * throws `TypeError: unusable`. To re-issue it we stash a *pristine* clone in\n * `onRequest` — captured before the body is read — keyed by openapi-fetch's\n * per-request `id`, and clone from that pristine copy on each attempt.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  const pristine = new Map<string, Request>();\n  return {\n    onRequest({ request, id }) {\n      pristine.set(id, request.clone());\n      return request;\n    },\n    onError({ id }) {\n      // fetch rejected (network error) — no onResponse will fire; don't leak.\n      pristine.delete(id);\n    },\n    async onResponse({ request, response, id }) {\n      const original = pristine.get(id) ?? request;\n      pristine.delete(id);\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        // Cap the wait — including a server-supplied `Retry-After` — so a hostile\n        // or misconfigured server can't park the client for minutes/hours.\n        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));\n        // Re-issue from the pristine clone; `.clone()` keeps it reusable across\n        // multiple attempts.\n        current = await doFetch(original.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update the IN-CUBE port that SSH is forwarded to.\n     *\n     * `cubePort` is the port **inside** the Cube that sshd listens on — NOT the\n     * host port you connect to. The host port is allocated by Krova and is not\n     * changed by this call. Pointing this at a port nothing is listening on\n     * inside the Cube will silently make SSH unreachable; the default is 22.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is this port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Power off a running Cube (asynchronous — power-off is enqueued). The Cube\n     *  becomes `stopped` (its host RAM is freed); start it again with `wake`. */\n    powerOff: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/power-off\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Start a stopped Cube (asynchronous — start is enqueued). */\n    /**\n     * Restart a Cube (COLD restart).\n     *\n     * The hypervisor process is stopped and relaunched, so the Cube boots\n     * against the host's current kernel. This is the only way a Cube picks up a\n     * refreshed guest kernel after a platform image update — a `reboot` issued\n     * INSIDE the Cube cannot do it, because Firecracker treats a guest reboot as\n     * a shutdown and the kernel is supplied externally by the host.\n     *\n     * Disk state is preserved; only the kernel changes. The Cube must be\n     * `running`. Concurrent restarts of the same Cube are rejected (409) rather\n     * than queued twice.\n     */\n    restart: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restart\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Get a Cube's SSH connection info — host, port, login user, and (when\n     * available) the pinned host public keys for strict host-key verification.\n     */\n    ssh: async (spaceId: string, cubeId: string): Promise<CubeSshInfo> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Cube SSH-info response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Restore a Cube's disk from one of its {@link Snapshot}s (asynchronous —\n     * the restore is enqueued). The Cube's current disk is replaced.\n     */\n    restore: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restore\",\n        { params: { path: { spaceId, cubeId } }, body: { snapshotId } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  /**\n   * Resolve the {@link Space} this API key is scoped to — so you don't have to\n   * hardcode a `spaceId`. Handy right after constructing the client:\n   *\n   * @example\n   * ```ts\n   * const space = await krova.getSpace();\n   * const cubes = await krova.cubes.list(space.id);\n   * ```\n   */\n  async getSpace(): Promise<Space> {\n    const { data, error, response } = await this.raw.GET(\"/space\");\n    if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n    if (data === undefined)\n      throw krovaErrorFrom(response, { error: \"Space response was empty.\" });\n    return data;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Custom domains\n  // ---------------------------------------------------------------------------\n\n  readonly domains = {\n    /** List the custom domains attached to a Cube. */\n    list: async (spaceId: string, cubeId: string): Promise<Domain[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.domains ?? [];\n    },\n\n    /**\n     * Attach a custom domain to a Cube. `domain` + `port` are required.\n     *\n     * Returns the domain AND the DNS records you must publish for it to work —\n     * so you can create them in the same run, without a second call and without\n     * hard-coding record shapes. A wildcard needs three; an exact host needs one.\n     *\n     * ⛔ BREAKING in 0.4.0: this used to resolve to `Domain`. It now resolves to\n     * `{ domain, records }`, because for a wildcard two of the three records\n     * (the ownership TXT and the `_acme-challenge` delegation) were not\n     * derivable from anything the SDK returned — an integration had to read\n     * them out of the docs and hope they still matched the server.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateDomainInput,\n    ): Promise<{ domain: Domain; records: DnsRecord[] }> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Create domain response had no `domain`.\" });\n      return { domain: data.domain, records: data.records ?? [] };\n    },\n\n    /**\n     * The DNS records a domain needs, each checked against live DNS.\n     *\n     * Poll this after publishing them: `summary.complete` turns true only once\n     * every record is `found`. Each call performs real DNS lookups and is rate\n     * limited, so poll on an interval rather than in a tight loop.\n     */\n    records: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n    ): Promise<{\n      domain: string;\n      isWildcard: boolean;\n      records: DnsRecordStatus[];\n      summary: { found: number; total: number; complete: boolean };\n      checkedAt: string;\n    }> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}/records\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data)\n        throw krovaErrorFrom(response, { error: \"Domain records response was empty.\" });\n      return data;\n    },\n\n    /** Update a domain's per-domain proxy settings. */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n      body: UpdateDomainInput,\n    ): Promise<Domain> => {\n      const { data, error, response } = await this.raw.PATCH(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Update domain response had no `domain`.\" });\n      return data.domain;\n    },\n\n    /** Detach a custom domain from a Cube. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Snapshots\n  // ---------------------------------------------------------------------------\n\n  readonly snapshots = {\n    /** List a Cube's snapshots. */\n    list: async (spaceId: string, cubeId: string): Promise<Snapshot[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.snapshots ?? [];\n    },\n\n    /** Create a snapshot of a Cube's disk (asynchronous — enqueued). */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body?: { name?: string },\n    ): Promise<Snapshot> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } }, body: body ?? {} },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.snapshot)\n        throw krovaErrorFrom(response, { error: \"Create snapshot response had no `snapshot`.\" });\n      return data.snapshot;\n    },\n\n    /** Delete a snapshot. */\n    delete: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots/{snapshotId}\",\n        { params: { path: { spaceId, cubeId, snapshotId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // TCP port mappings\n  // ---------------------------------------------------------------------------\n\n  readonly tcpMappings = {\n    /** List a Cube's TCP port mappings. */\n    list: async (spaceId: string, cubeId: string): Promise<TcpMapping[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.tcpMappings ?? [];\n    },\n\n    /**\n     * Create a TCP port mapping exposing a Cube port on the host. `cubePort` is\n     * required; `whitelistIps` optionally restricts who can reach it.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateTcpMappingInput,\n    ): Promise<TcpMapping> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.tcpMapping)\n        throw krovaErrorFrom(response, { error: \"Create TCP mapping response had no `tcpMapping`.\" });\n      return data.tcpMapping;\n    },\n\n    /** Delete a TCP port mapping. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Imports & backups (.cube archive import / export)\n  // ---------------------------------------------------------------------------\n\n  readonly imports = {\n    /**\n     * Start importing a `.cube` archive into a new Cube. Returns the multipart\n     * upload target (`importId`, `uploadId`, presigned `parts`, …). Upload the\n     * archive to those URLs, then call {@link imports.complete}.\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes/imports\", {\n        params: { path: { spaceId } },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Get an in-progress or completed import by id. */\n    get: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Finish an import after the archive has been uploaded — provisions the\n     * Cube. Pass the uploaded `parts` (partNumber + etag) and the resolved\n     * `config`.\n     */\n    complete: async (\n      spaceId: string,\n      importId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports/{importId}/complete\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/imports/{importId}/complete\",\n        { params: { path: { spaceId, importId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Cancel an in-progress import. */\n    cancel: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  readonly backups = {\n    /** Get a time-limited download URL for a backup `.cube` archive. */\n    download: async (spaceId: string, backupId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/backups/{backupId}/download\",\n        { params: { path: { spaceId, backupId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;AAoBA,IAAa,aAAb,MAAa,mBAAmB,MAAM;;CAEpC;;;;;;CAOA;;;;;CAMA;;CAGA;;CAGA;CAEA,YACE,SACA,MAOA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,SAAS,KAAK;EACnB,KAAK,OAAO,KAAK;EACjB,KAAK,YAAY,KAAK;EACtB,KAAK,OAAO,KAAK;EACjB,KAAK,WAAW,KAAK;EAErB,OAAO,eAAe,MAAM,WAAW,SAAS;CAClD;AACF;;;;AAKA,SAAgB,eACd,UACA,MACY;CAKZ,OAAO,IAAI,WAHR,OAAO,MAAM,UAAU,YAAY,KAAK,SACzC,SAAS,cACT,8BAA8B,SAAS,UACV;EAC7B,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EAC9C,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EACnD;EACA;CACF,CAAC;AACH;;;;ACTA,MAAa,mBAAmB;;AAqChC,MAAM,qCAAqB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;;AAE7C,MAAM,kBAAkB;;AAExB,MAAM,iBAAiB;AAEvB,MAAM,SAAS,OACb,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;;;;;AAMlD,SAAS,kBAAkB,aAA2C;CACpE,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,OAAO,SAAS,OAAO,GAAG,OAAO,KAAK,IAAI,GAAG,UAAU,GAAI;CAC/D,MAAM,SAAS,KAAK,MAAM,WAAW;CACrC,IAAI,OAAO,SAAS,MAAM,GAAG,OAAO,KAAK,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;CACnE,OAAO;AACT;AAEA,SAAS,eAAe,QAAgB,QAAgC;CACtE,OAAO,EACL,UAAU,EAAE,WAAW;EACrB,IAAI,WAAW,UACb,QAAQ,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;OAEvD,QAAQ,QAAQ,IAAI,aAAa,MAAM;EAEzC,OAAO;CACT,EACF;AACF;;;;;;;;;;;;AAaA,SAAS,gBAAgB,YAAoB,SAAmC;CAC9E,MAAM,2BAAW,IAAI,IAAqB;CAC1C,OAAO;EACL,UAAU,EAAE,SAAS,MAAM;GACzB,SAAS,IAAI,IAAI,QAAQ,MAAM,CAAC;GAChC,OAAO;EACT;EACA,QAAQ,EAAE,MAAM;GAEd,SAAS,OAAO,EAAE;EACpB;EACA,MAAM,WAAW,EAAE,SAAS,UAAU,MAAM;GAC1C,MAAM,WAAW,SAAS,IAAI,EAAE,KAAK;GACrC,SAAS,OAAO,EAAE;GAClB,IAAI,cAAc,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,GAC5D,OAAO;GAET,IAAI,UAAU;GACd,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAAW;IACtD,IAAI,CAAC,mBAAmB,IAAI,QAAQ,MAAM,GAAG;IAC7C,MAAM,eAAe,kBAAkB,QAAQ,QAAQ,IAAI,aAAa,CAAC;IACzE,MAAM,UAAU,KAAK,IAAI,kBAAkB,MAAM,UAAU,IAAI,cAAc;IAG7E,MAAM,MAAM,KAAK,IAAI,gBAAgB,SAAS,cAAc,CAAC;IAG7D,UAAU,MAAM,QAAQ,SAAS,MAAM,CAAC;GAC1C;GACA,OAAO;EACT;CACF;AACF;;;;;;;;;;AAWA,IAAa,cAAb,MAAyB;;;;;;;;;;;;;CAavB;;CAGA;CAEA,YAAY,SAA6B;EACvC,IAAI,CAAC,SAAS,QACZ,MAAM,IAAI,MAAM,oCAAoC;EAEtD,KAAK,UAAU,QAAQ,WAAA;EACvB,MAAM,UAAU,QAAQ,SAAS,WAAW;EAC5C,MAAM,aAAa,QAAQ,cAAc;EAEzC,KAAK,MAAM,aAAoB;GAC7B,SAAS,KAAK;GAUd,UAAU;GACV,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAClD,CAAC;EACD,KAAK,IAAI,IAAI,eAAe,QAAQ,QAAQ,QAAQ,cAAc,WAAW,CAAC;EAC9E,IAAI,aAAa,GACf,KAAK,IAAI,IAAI,gBAAgB,YAAY,OAAO,CAAC;CAErD;CAMA,QAAiB;;EAEf,MAAM,OAAO,YAAoB;GAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,2BAA2B,EAC9E,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC9B,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,iCAAiC,CAAC;GAC5E,OAAO;EACT;;;;;;;;EASA,QAAQ,OACN,SACA,MAGA,SACkB;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,2BAA2B;IAC/E,QAAQ;KACN,MAAM,EAAE,QAAQ;KAChB,GAAI,MAAM,iBACN,EAAE,QAAQ,EAAE,mBAAmB,KAAK,eAAe,EAAE,IACrD,CAAC;IACP;IACA;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,sCAAsC,CAAC;GAEjF,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,WAAkC;GAC7D,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,mCAAmC,CAAC;GAE9E,OAAO;EACT;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SAGqB;GACrB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,6CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,WAAmB;GACjD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,kCAAkC,CAAC;GAC7E,OAAO;EACT;;;EAIA,UAAU,OAAO,SAAiB,WAAqC;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;;;;;;;;;;EAgBA,SAAS,OAAO,SAAiB,WAAqC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;EAEA,MAAM,OAAO,SAAiB,WAAqC;GACjE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,yCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;EAMA,KAAK,OAAO,SAAiB,WAAyC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,wCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,oCAAoC,CAAC;GAC/E,OAAO;EACT;;;;;EAMA,SAAS,OAAO,SAAiB,QAAgB,eAAuB;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,EAAE,WAAW;GAAE,CAChE;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;;;;;;;;;;;CAYA,MAAM,WAA2B;EAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,QAAQ;EAC7D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,4BAA4B,CAAC;EACvE,OAAO;CACT;CAMA,UAAmB;;EAEjB,MAAM,OAAO,SAAiB,WAAsC;GAClE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,WAAW,CAAC;EAC3B;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SACsD;GACtD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO;IAAE,QAAQ,KAAK;IAAQ,SAAS,KAAK,WAAW,CAAC;GAAE;EAC5D;;;;;;;;EASA,SAAS,OACP,SACA,QACA,cAOI;GACJ,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,gEACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,qCAAqC,CAAC;GAChF,OAAO;EACT;;EAGA,QAAQ,OACN,SACA,QACA,WACA,SACoB;GACpB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,MAC/C,wDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;KAAQ;IAAU,EAAE;IAAG;GAAK,CAC3D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,wDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,YAAqB;;EAEnB,MAAM,OAAO,SAAiB,WAAwC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,aAAa,CAAC;EAC7B;;EAGA,QAAQ,OACN,SACA,QACA,SACsB;GACtB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,QAAQ,CAAC;GAAE,CAC5D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,UACT,MAAM,eAAe,UAAU,EAAE,OAAO,8CAA8C,CAAC;GACzF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,eAAuB;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,2DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAW,EAAE,EAAE,CACtD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,cAAuB;;EAErB,MAAM,OAAO,SAAiB,WAA0C;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,eAAe,CAAC;EAC/B;;;;;EAMA,QAAQ,OACN,SACA,QACA,SACwB;GACxB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,iDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,YACT,MAAM,eAAe,UAAU,EAAE,OAAO,mDAAmD,CAAC;GAC9F,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,6DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,UAAmB;;;;;;EAMjB,QAAQ,OACN,SACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,mCAAmC;IACvF,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5B;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,aAAqB;GAChD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;EAOA,UAAU,OACR,SACA,UACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,uDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAS,EAAE;IAAG;GAAK,CAClD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,aAAqB;GACnD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAEA,UAAmB;;AAEjB,UAAU,OAAO,SAAiB,aAAqB;EACrD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;GAAE;GAAS;EAAS,EAAE,EAAE,CAC5C;EACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,OAAO;CACT,EACF;CAMA,UAAmB;;EAEjB,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;;EAGA,QAAQ,YAAY;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,SAAS;GAC9D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,6BAA6B,CAAC;GACxE,OAAO;EACT;;EAGA,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;CACF;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/error.ts","../src/client.ts"],"sourcesContent":["/**\n * The error body shape returned by the Krova Cloud API.\n *\n * Per the OpenAPI spec (`components.schemas.Error`), every non-2xx response\n * body is `{ \"error\": string }`.\n */\nexport interface KrovaErrorBody {\n  error?: string;\n}\n\n/**\n * Error thrown by the ergonomic {@link KrovaClient} helpers when the API\n * responds with a non-2xx status.\n *\n * The raw openapi-fetch client (`client.raw`) never throws — it returns\n * `{ data, error, response }`. The helpers wrap that and throw `KrovaError`\n * so callers can `try/catch`.\n */\nexport class KrovaError extends Error {\n  /** HTTP status code of the failing response. */\n  readonly status: number;\n\n  /**\n   * A machine-readable error code, when the API surfaces one via the\n   * `X-Error-Code` response header. The documented error body only carries a\n   * human-readable `error` string, so this is best-effort.\n   */\n  readonly code?: string;\n\n  /**\n   * The request id from the `X-Request-Id` response header, when present.\n   * Useful when contacting Krova Cloud support about a specific failure.\n   */\n  readonly requestId?: string;\n\n  /** The parsed JSON error body, when the response had one. */\n  readonly body?: KrovaErrorBody;\n\n  /** The raw `Response` object, for callers that need headers/url/etc. */\n  readonly response?: Response;\n\n  constructor(\n    message: string,\n    init: {\n      status: number;\n      code?: string;\n      requestId?: string;\n      body?: KrovaErrorBody;\n      response?: Response;\n    },\n  ) {\n    super(message);\n    this.name = \"KrovaError\";\n    this.status = init.status;\n    this.code = init.code;\n    this.requestId = init.requestId;\n    this.body = init.body;\n    this.response = init.response;\n    // Restore prototype chain for instanceof across compilation targets.\n    Object.setPrototypeOf(this, KrovaError.prototype);\n  }\n}\n\n/**\n * Build a {@link KrovaError} from a failing response + parsed error body.\n */\nexport function krovaErrorFrom(\n  response: Response,\n  body: KrovaErrorBody | undefined,\n): KrovaError {\n  const message =\n    (typeof body?.error === \"string\" && body.error) ||\n    response.statusText ||\n    `Request failed with status ${response.status}`;\n  return new KrovaError(message, {\n    status: response.status,\n    code: response.headers.get(\"x-error-code\") ?? undefined,\n    requestId: response.headers.get(\"x-request-id\") ?? undefined,\n    body,\n    response,\n  });\n}\n","import createClient, { type Client, type Middleware } from \"openapi-fetch\";\nimport { krovaErrorFrom } from \"./error.js\";\nimport type { components, paths } from \"./generated/types.js\";\n\n/** The Cube resource, as defined in the Krova Cloud OpenAPI spec. */\nexport type Cube = components[\"schemas\"][\"Cube\"];\n\n/** A region with available capacity (from the catalog). */\nexport type Region = components[\"schemas\"][\"Region\"];\n\n/** A selectable OS image (from the catalog). */\nexport type Image = components[\"schemas\"][\"Image\"];\n\n/** A volume-pricing tier (from the catalog). */\nexport type PricingTier = components[\"schemas\"][\"PricingTier\"];\n\n/** Pagination envelope returned alongside a Cube list. */\nexport type Pagination = components[\"schemas\"][\"Pagination\"];\n\n/** A Space — the tenancy an API key is scoped to. */\nexport type Space = components[\"schemas\"][\"Space\"];\n\n/** A Cube's SSH connection info (host, port, user, and pinned host keys). */\nexport type CubeSshInfo = components[\"schemas\"][\"CubeSshInfo\"];\n\n/** A custom domain attached to a Cube. */\nexport type Domain = components[\"schemas\"][\"Domain\"];\n\n/**\n * One DNS record you must publish for a domain to work.\n *\n * An ordinary subdomain needs one CNAME. A wildcard needs three: an ownership\n * TXT, the routing CNAME, and an `_acme-challenge` CNAME that lets Krova issue\n * and renew its certificate.\n *\n * ⛔ `mustBeGrey` and `proxyOk` are deliberate OPPOSITES, and automation needs\n * both. The routing record may sit behind Cloudflare's proxy (orange); the\n * `_acme-challenge` record must not, because a proxied one answers with\n * Cloudflare's addresses and the certificate authority finds nothing there.\n */\nexport type DnsRecord = components[\"schemas\"][\"DnsRecord\"];\n\n/**\n * A {@link DnsRecord} plus what Krova can currently see in public DNS.\n *\n * ⛔ `state: \"missing\"` means NOT PUBLISHED YET — the expected state before you\n * create the record, never an error. `state: \"unknown\"` means Krova could not\n * complete the lookup, which is never a statement about your DNS. Surfacing\n * either to your own users as a failure would be wrong.\n */\nexport type DnsRecordStatus = components[\"schemas\"][\"DnsRecordStatus\"];\n\n/** A snapshot of a Cube's disk. */\nexport type Snapshot = components[\"schemas\"][\"Snapshot\"];\n\n/** A TCP port mapping exposing a Cube port on the host. */\nexport type TcpMapping = components[\"schemas\"][\"TcpMapping\"];\n\n/** Request body for attaching a custom domain to a Cube. */\nexport type CreateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for updating a custom domain's proxy settings. */\nexport type UpdateDomainInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\"][\"patch\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Request body for creating a TCP port mapping. */\nexport type CreateTcpMappingInput = NonNullable<\n  paths[\"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\"][\"post\"][\"requestBody\"]\n>[\"content\"][\"application/json\"];\n\n/** Default API base URL — the single `servers[0].url` from the OpenAPI spec. */\nexport const DEFAULT_BASE_URL = \"https://krova.cloud/api/v1\";\n\n/**\n * How the API key is presented to the server.\n *\n * - `\"x-api-key\"` (default) — `X-API-KEY: <key>`, matching the spec's\n *   `components.securitySchemes.ApiKeyAuth` (an `apiKey` header named\n *   `X-API-KEY`).\n * - `\"bearer\"` — `Authorization: Bearer <key>`, for gateways that expect it.\n */\nexport type AuthScheme = \"x-api-key\" | \"bearer\";\n\nexport interface KrovaClientOptions {\n  /**\n   * Your Krova Cloud API key (a `kro_...` token). Keys are scoped per Space\n   * and inherit the permissions of the membership that created them.\n   */\n  apiKey: string;\n  /** Override the API base URL. Defaults to {@link DEFAULT_BASE_URL}. */\n  baseUrl?: string;\n  /**\n   * Auth header scheme. Defaults to `\"x-api-key\"` (the spec's scheme).\n   */\n  authScheme?: AuthScheme;\n  /**\n   * Max automatic retries on retryable statuses (429, 503).\n   * Defaults to 2. Set to 0 to disable retries.\n   */\n  maxRetries?: number;\n  /**\n   * A custom `fetch` implementation (e.g. for tests or a proxy). Defaults to\n   * the global `fetch`.\n   */\n  fetch?: typeof fetch;\n}\n\n/** Statuses the retry middleware treats as transient. */\nconst RETRYABLE_STATUSES = new Set([429, 503]);\n/** Fallback backoff (ms) when the server sends no `Retry-After` header. */\nconst BASE_BACKOFF_MS = 500;\n/** Cap on any single backoff wait (ms), to keep retries \"small but real\". */\nconst MAX_BACKOFF_MS = 10_000;\n\nconst sleep = (ms: number): Promise<void> =>\n  new Promise((resolve) => setTimeout(resolve, ms));\n\n/**\n * Parse a `Retry-After` header (RFC 7231): either delta-seconds or an\n * HTTP-date. Returns milliseconds to wait, or `null` if absent/unparseable.\n */\nfunction parseRetryAfterMs(headerValue: string | null): number | null {\n  if (!headerValue) return null;\n  const seconds = Number(headerValue);\n  if (Number.isFinite(seconds)) return Math.max(0, seconds * 1000);\n  const dateMs = Date.parse(headerValue);\n  if (Number.isFinite(dateMs)) return Math.max(0, dateMs - Date.now());\n  return null;\n}\n\nfunction authMiddleware(apiKey: string, scheme: AuthScheme): Middleware {\n  return {\n    onRequest({ request }) {\n      if (scheme === \"bearer\") {\n        request.headers.set(\"Authorization\", `Bearer ${apiKey}`);\n      } else {\n        request.headers.set(\"X-API-KEY\", apiKey);\n      }\n      return request;\n    },\n  };\n}\n\n/**\n * Retry middleware: on a retryable status, wait (honoring `Retry-After` when\n * present, else exponential backoff) and re-issue the request.\n *\n * A retried request may have a body (POST/PUT/DELETE — exactly the mutating,\n * rate-limited endpoints). By the time `onResponse` runs, the request that was\n * handed to `fetch` has had its body stream consumed, so `request.clone()` here\n * throws `TypeError: unusable`. To re-issue it we stash a *pristine* clone in\n * `onRequest` — captured before the body is read — keyed by openapi-fetch's\n * per-request `id`, and clone from that pristine copy on each attempt.\n */\nfunction retryMiddleware(maxRetries: number, doFetch: typeof fetch): Middleware {\n  const pristine = new Map<string, Request>();\n  return {\n    onRequest({ request, id }) {\n      pristine.set(id, request.clone());\n      return request;\n    },\n    onError({ id }) {\n      // fetch rejected (network error) — no onResponse will fire; don't leak.\n      pristine.delete(id);\n    },\n    async onResponse({ request, response, id }) {\n      const original = pristine.get(id) ?? request;\n      pristine.delete(id);\n      if (maxRetries <= 0 || !RETRYABLE_STATUSES.has(response.status)) {\n        return response;\n      }\n      let current = response;\n      for (let attempt = 1; attempt <= maxRetries; attempt++) {\n        if (!RETRYABLE_STATUSES.has(current.status)) break;\n        const retryAfterMs = parseRetryAfterMs(current.headers.get(\"retry-after\"));\n        const backoff = Math.min(BASE_BACKOFF_MS * 2 ** (attempt - 1), MAX_BACKOFF_MS);\n        // Cap the wait — including a server-supplied `Retry-After` — so a hostile\n        // or misconfigured server can't park the client for minutes/hours.\n        await sleep(Math.min(retryAfterMs ?? backoff, MAX_BACKOFF_MS));\n        // Re-issue from the pristine clone; `.clone()` keeps it reusable across\n        // multiple attempts.\n        current = await doFetch(original.clone());\n      }\n      return current;\n    },\n  };\n}\n\n/**\n * A typed client for the Krova Cloud API.\n *\n * @example\n * ```ts\n * const krova = new KrovaClient({ apiKey: \"kro_...\" });\n * const cubes = await krova.cubes.list(\"space_123\");\n * ```\n */\nexport class KrovaClient {\n  /**\n   * The underlying openapi-fetch client — a fully typed escape hatch to every\n   * path in the spec. Returns `{ data, error, response }` and never throws.\n   *\n   * @example\n   * ```ts\n   * const { data, error } = await krova.raw.GET(\n   *   \"/spaces/{spaceId}/cubes/{cubeId}\",\n   *   { params: { path: { spaceId, cubeId } } },\n   * );\n   * ```\n   */\n  readonly raw: Client<paths>;\n\n  /** The resolved base URL in use. */\n  readonly baseUrl: string;\n\n  constructor(options: KrovaClientOptions) {\n    if (!options?.apiKey) {\n      throw new Error(\"KrovaClient: `apiKey` is required.\");\n    }\n    this.baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;\n    const doFetch = options.fetch ?? globalThis.fetch;\n    const maxRetries = options.maxRetries ?? 2;\n\n    this.raw = createClient<paths>({\n      baseUrl: this.baseUrl,\n      // SECURITY: never auto-follow redirects. The Krova Cloud API is a plain\n      // JSON API and never legitimately 3xx's a data call. Following a redirect\n      // would resend the `X-API-KEY` header to the redirect target — and unlike\n      // `Authorization`, `Cookie`, and `Proxy-Authorization`, the Fetch spec does\n      // NOT strip a custom header like `X-API-KEY` on a cross-origin redirect\n      // (verified against undici/Node fetch). A compromised/misconfigured proxy,\n      // an open-redirect on the API, or a MITM could otherwise exfiltrate the key\n      // to an attacker's host. With `\"manual\"`, a redirect comes back as a\n      // non-ok response and the helpers throw `KrovaError` instead of leaking.\n      redirect: \"manual\",\n      ...(options.fetch ? { fetch: options.fetch } : {}),\n    });\n    this.raw.use(authMiddleware(options.apiKey, options.authScheme ?? \"x-api-key\"));\n    if (maxRetries > 0) {\n      this.raw.use(retryMiddleware(maxRetries, doFetch));\n    }\n  }\n\n  // ---------------------------------------------------------------------------\n  // Cubes\n  // ---------------------------------------------------------------------------\n\n  readonly cubes = {\n    /** List Cubes in a Space, with pagination metadata. */\n    list: async (spaceId: string) => {\n      const { data, error, response } = await this.raw.GET(\"/spaces/{spaceId}/cubes\", {\n        params: { path: { spaceId } },\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"List Cubes response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Create a Cube. Returns the created {@link Cube}.\n     *\n     * @param spaceId Target Space id.\n     * @param body Cube spec — `{ name, image, resources, sshPublicKey, ... }`.\n     * @param opts Optional `idempotencyKey` (max 255 chars, scoped per space).\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n      opts?: { idempotencyKey?: string },\n    ): Promise<Cube> => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes\", {\n        params: {\n          path: { spaceId },\n          ...(opts?.idempotencyKey\n            ? { header: { \"Idempotency-Key\": opts.idempotencyKey } }\n            : {}),\n        },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Create Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /** Get a single Cube. Returns the {@link Cube}. */\n    get: async (spaceId: string, cubeId: string): Promise<Cube> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      const cube = data?.cube;\n      if (!cube) {\n        throw krovaErrorFrom(response, { error: \"Get Cube response had no `cube`.\" });\n      }\n      return cube;\n    },\n\n    /**\n     * Update the IN-CUBE port that SSH is forwarded to.\n     *\n     * `cubePort` is the port **inside** the Cube that sshd listens on — NOT the\n     * host port you connect to. The host port is allocated by Krova and is not\n     * changed by this call. Pointing this at a port nothing is listening on\n     * inside the Cube will silently make SSH unreachable; the default is 22.\n     *\n     * The Krova Cloud API exposes no general Cube-mutation endpoint; the only\n     * mutable Cube field over the API is this port, via\n     * `PUT /spaces/{spaceId}/cubes/{cubeId}/ssh-port`. This helper maps to that\n     * endpoint. (Compute resize / rename are not part of the public API.)\n     */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\"][\"put\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ): Promise<unknown> => {\n      const { data, error, response } = await this.raw.PUT(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh-port\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Delete a Cube (asynchronous — deletion is enqueued). */\n    delete: async (spaceId: string, cubeId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Delete Cube response was empty.\" });\n      return data;\n    },\n\n    /** Power off a running Cube (asynchronous — power-off is enqueued). The Cube\n     *  becomes `stopped` (its host RAM is freed); start it again with `wake`. */\n    powerOff: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/power-off\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Start a stopped Cube (asynchronous — start is enqueued). */\n    /**\n     * Restart a Cube (COLD restart).\n     *\n     * The hypervisor process is stopped and relaunched, so the Cube boots\n     * against the host's current kernel. This is the only way a Cube picks up a\n     * refreshed guest kernel after a platform image update — a `reboot` issued\n     * INSIDE the Cube cannot do it, because Firecracker treats a guest reboot as\n     * a shutdown and the kernel is supplied externally by the host.\n     *\n     * Disk state is preserved; only the kernel changes. The Cube must be\n     * `running`. Concurrent restarts of the same Cube are rejected (409) rather\n     * than queued twice.\n     */\n    restart: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restart\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    wake: async (spaceId: string, cubeId: string): Promise<unknown> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/wake\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Get a Cube's SSH connection info — host, port, login user, and (when\n     * available) the pinned host public keys for strict host-key verification.\n     */\n    ssh: async (spaceId: string, cubeId: string): Promise<CubeSshInfo> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/ssh\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Cube SSH-info response was empty.\" });\n      return data;\n    },\n\n    /**\n     * Restore a Cube's disk from one of its {@link Snapshot}s (asynchronous —\n     * the restore is enqueued). The Cube's current disk is replaced.\n     */\n    restore: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/restore\",\n        { params: { path: { spaceId, cubeId } }, body: { snapshotId } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  /**\n   * Resolve the {@link Space} this API key is scoped to — so you don't have to\n   * hardcode a `spaceId`. Handy right after constructing the client:\n   *\n   * @example\n   * ```ts\n   * const space = await krova.getSpace();\n   * const cubes = await krova.cubes.list(space.id);\n   * ```\n   */\n  async getSpace(): Promise<Space> {\n    const { data, error, response } = await this.raw.GET(\"/space\");\n    if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n    if (data === undefined)\n      throw krovaErrorFrom(response, { error: \"Space response was empty.\" });\n    return data;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Custom domains\n  // ---------------------------------------------------------------------------\n\n  readonly domains = {\n    /** List the custom domains attached to a Cube. */\n    list: async (spaceId: string, cubeId: string): Promise<Domain[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.domains ?? [];\n    },\n\n    /**\n     * Attach a custom domain to a Cube. `domain` + `port` are required.\n     *\n     * Returns the domain AND the DNS records you must publish for it to work —\n     * so you can create them in the same run, without a second call and without\n     * hard-coding record shapes. A wildcard needs three; an exact host needs one.\n     *\n     * ⛔ BREAKING in 0.4.0: this used to resolve to `Domain`. It now resolves to\n     * `{ domain, records }`, because for a wildcard two of the three records\n     * (the ownership TXT and the `_acme-challenge` delegation) were not\n     * derivable from anything the SDK returned — an integration had to read\n     * them out of the docs and hope they still matched the server.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateDomainInput,\n    ): Promise<{ domain: Domain; records: DnsRecord[] }> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Create domain response had no `domain`.\" });\n      return { domain: data.domain, records: data.records ?? [] };\n    },\n\n    /**\n     * The DNS records a domain needs, each checked against live DNS.\n     *\n     * Poll this after publishing them: `summary.complete` turns true only once\n     * every record is `found`. Each call performs real DNS lookups and is rate\n     * limited, so poll on an interval rather than in a tight loop.\n     */\n    records: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n    ): Promise<{\n      domain: string;\n      isWildcard: boolean;\n      records: DnsRecordStatus[];\n      summary: { found: number; total: number; complete: boolean };\n      checkedAt: string;\n    }> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}/records\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data)\n        throw krovaErrorFrom(response, { error: \"Domain records response was empty.\" });\n      return data;\n    },\n\n    /** Update a domain's per-domain proxy settings. */\n    update: async (\n      spaceId: string,\n      cubeId: string,\n      mappingId: string,\n      body: UpdateDomainInput,\n    ): Promise<Domain> => {\n      const { data, error, response } = await this.raw.PATCH(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.domain)\n        throw krovaErrorFrom(response, { error: \"Update domain response had no `domain`.\" });\n      return data.domain;\n    },\n\n    /** Detach a custom domain from a Cube. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/domains/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Snapshots\n  // ---------------------------------------------------------------------------\n\n  readonly snapshots = {\n    /** List a Cube's snapshots. */\n    list: async (spaceId: string, cubeId: string): Promise<Snapshot[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.snapshots ?? [];\n    },\n\n    /** Create a snapshot of a Cube's disk (asynchronous — enqueued). */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body?: { name?: string },\n    ): Promise<Snapshot> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots\",\n        { params: { path: { spaceId, cubeId } }, body: body ?? {} },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.snapshot)\n        throw krovaErrorFrom(response, { error: \"Create snapshot response had no `snapshot`.\" });\n      return data.snapshot;\n    },\n\n    /** Delete a snapshot. */\n    delete: async (spaceId: string, cubeId: string, snapshotId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/snapshots/{snapshotId}\",\n        { params: { path: { spaceId, cubeId, snapshotId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // TCP port mappings\n  // ---------------------------------------------------------------------------\n\n  readonly tcpMappings = {\n    /** List a Cube's TCP port mappings. */\n    list: async (spaceId: string, cubeId: string): Promise<TcpMapping[]> => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data?.tcpMappings ?? [];\n    },\n\n    /**\n     * Create a TCP port mapping exposing a Cube port on the host. `cubePort` is\n     * required; `whitelistIps` optionally restricts who can reach it.\n     */\n    create: async (\n      spaceId: string,\n      cubeId: string,\n      body: CreateTcpMappingInput,\n    ): Promise<TcpMapping> => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings\",\n        { params: { path: { spaceId, cubeId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (!data?.tcpMapping)\n        throw krovaErrorFrom(response, { error: \"Create TCP mapping response had no `tcpMapping`.\" });\n      return data.tcpMapping;\n    },\n\n    /** Delete a TCP port mapping. */\n    delete: async (spaceId: string, cubeId: string, mappingId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/{cubeId}/tcp-mappings/{mappingId}\",\n        { params: { path: { spaceId, cubeId, mappingId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Imports & backups (.cube archive import / export)\n  // ---------------------------------------------------------------------------\n\n  readonly imports = {\n    /**\n     * Start importing a `.cube` archive into a new Cube. Returns the multipart\n     * upload target (`importId`, `uploadId`, presigned `parts`, …). Upload the\n     * archive to those URLs, then call {@link imports.complete}.\n     */\n    create: async (\n      spaceId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\"/spaces/{spaceId}/cubes/imports\", {\n        params: { path: { spaceId } },\n        body,\n      });\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Get an in-progress or completed import by id. */\n    get: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /**\n     * Finish an import after the archive has been uploaded — provisions the\n     * Cube. Pass the uploaded `parts` (partNumber + etag) and the resolved\n     * `config`.\n     */\n    complete: async (\n      spaceId: string,\n      importId: string,\n      body: NonNullable<\n        paths[\"/spaces/{spaceId}/cubes/imports/{importId}/complete\"][\"post\"][\"requestBody\"]\n      >[\"content\"][\"application/json\"],\n    ) => {\n      const { data, error, response } = await this.raw.POST(\n        \"/spaces/{spaceId}/cubes/imports/{importId}/complete\",\n        { params: { path: { spaceId, importId } }, body },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n\n    /** Cancel an in-progress import. */\n    cancel: async (spaceId: string, importId: string) => {\n      const { data, error, response } = await this.raw.DELETE(\n        \"/spaces/{spaceId}/cubes/imports/{importId}\",\n        { params: { path: { spaceId, importId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  readonly backups = {\n    /** Get a time-limited download URL for a backup `.cube` archive. */\n    download: async (spaceId: string, backupId: string) => {\n      const { data, error, response } = await this.raw.GET(\n        \"/spaces/{spaceId}/backups/{backupId}/download\",\n        { params: { path: { spaceId, backupId } } },\n      );\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      return data;\n    },\n  };\n\n  // ---------------------------------------------------------------------------\n  // Public catalog (no auth required by the API, but the key is harmless)\n  // ---------------------------------------------------------------------------\n\n  readonly catalog = {\n    /** List regions with available capacity. */\n    regions: async () => {\n      const { data, error, response } = await this.raw.GET(\"/regions\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Regions response was empty.\" });\n      return data;\n    },\n\n    /** List available OS images. */\n    images: async () => {\n      const { data, error, response } = await this.raw.GET(\"/images\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Images response was empty.\" });\n      return data;\n    },\n\n    /** Per-resource hourly rates and volume pricing tiers. */\n    pricing: async () => {\n      const { data, error, response } = await this.raw.GET(\"/pricing\");\n      if (error !== undefined || !response.ok) throw krovaErrorFrom(response, error);\n      if (data === undefined)\n        throw krovaErrorFrom(response, { error: \"Pricing response was empty.\" });\n      return data;\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;AAkBA,IAAa,aAAb,MAAa,mBAAmB,MAAM;;CAEpC;;;;;;CAOA;;;;;CAMA;;CAGA;;CAGA;CAEA,YACE,SACA,MAOA;EACA,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,SAAS,KAAK;EACnB,KAAK,OAAO,KAAK;EACjB,KAAK,YAAY,KAAK;EACtB,KAAK,OAAO,KAAK;EACjB,KAAK,WAAW,KAAK;EAErB,OAAO,eAAe,MAAM,WAAW,SAAS;CAClD;AACF;;;;AAKA,SAAgB,eACd,UACA,MACY;CAKZ,OAAO,IAAI,WAHR,OAAO,MAAM,UAAU,YAAY,KAAK,SACzC,SAAS,cACT,8BAA8B,SAAS,UACV;EAC7B,QAAQ,SAAS;EACjB,MAAM,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EAC9C,WAAW,SAAS,QAAQ,IAAI,cAAc,KAAK,KAAA;EACnD;EACA;CACF,CAAC;AACH;;;;ACPA,MAAa,mBAAmB;;AAqChC,MAAM,qCAAqB,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;;AAE7C,MAAM,kBAAkB;;AAExB,MAAM,iBAAiB;AAEvB,MAAM,SAAS,OACb,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC;;;;;AAMlD,SAAS,kBAAkB,aAA2C;CACpE,IAAI,CAAC,aAAa,OAAO;CACzB,MAAM,UAAU,OAAO,WAAW;CAClC,IAAI,OAAO,SAAS,OAAO,GAAG,OAAO,KAAK,IAAI,GAAG,UAAU,GAAI;CAC/D,MAAM,SAAS,KAAK,MAAM,WAAW;CACrC,IAAI,OAAO,SAAS,MAAM,GAAG,OAAO,KAAK,IAAI,GAAG,SAAS,KAAK,IAAI,CAAC;CACnE,OAAO;AACT;AAEA,SAAS,eAAe,QAAgB,QAAgC;CACtE,OAAO,EACL,UAAU,EAAE,WAAW;EACrB,IAAI,WAAW,UACb,QAAQ,QAAQ,IAAI,iBAAiB,UAAU,QAAQ;OAEvD,QAAQ,QAAQ,IAAI,aAAa,MAAM;EAEzC,OAAO;CACT,EACF;AACF;;;;;;;;;;;;AAaA,SAAS,gBAAgB,YAAoB,SAAmC;CAC9E,MAAM,2BAAW,IAAI,IAAqB;CAC1C,OAAO;EACL,UAAU,EAAE,SAAS,MAAM;GACzB,SAAS,IAAI,IAAI,QAAQ,MAAM,CAAC;GAChC,OAAO;EACT;EACA,QAAQ,EAAE,MAAM;GAEd,SAAS,OAAO,EAAE;EACpB;EACA,MAAM,WAAW,EAAE,SAAS,UAAU,MAAM;GAC1C,MAAM,WAAW,SAAS,IAAI,EAAE,KAAK;GACrC,SAAS,OAAO,EAAE;GAClB,IAAI,cAAc,KAAK,CAAC,mBAAmB,IAAI,SAAS,MAAM,GAC5D,OAAO;GAET,IAAI,UAAU;GACd,KAAK,IAAI,UAAU,GAAG,WAAW,YAAY,WAAW;IACtD,IAAI,CAAC,mBAAmB,IAAI,QAAQ,MAAM,GAAG;IAC7C,MAAM,eAAe,kBAAkB,QAAQ,QAAQ,IAAI,aAAa,CAAC;IACzE,MAAM,UAAU,KAAK,IAAI,kBAAkB,MAAM,UAAU,IAAI,cAAc;IAG7E,MAAM,MAAM,KAAK,IAAI,gBAAgB,SAAS,cAAc,CAAC;IAG7D,UAAU,MAAM,QAAQ,SAAS,MAAM,CAAC;GAC1C;GACA,OAAO;EACT;CACF;AACF;;;;;;;;;;AAWA,IAAa,cAAb,MAAyB;;;;;;;;;;;;;CAavB;;CAGA;CAEA,YAAY,SAA6B;EACvC,IAAI,CAAC,SAAS,QACZ,MAAM,IAAI,MAAM,oCAAoC;EAEtD,KAAK,UAAU,QAAQ,WAAA;EACvB,MAAM,UAAU,QAAQ,SAAS,WAAW;EAC5C,MAAM,aAAa,QAAQ,cAAc;EAEzC,KAAK,MAAM,aAAoB;GAC7B,SAAS,KAAK;GAUd,UAAU;GACV,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAClD,CAAC;EACD,KAAK,IAAI,IAAI,eAAe,QAAQ,QAAQ,QAAQ,cAAc,WAAW,CAAC;EAC9E,IAAI,aAAa,GACf,KAAK,IAAI,IAAI,gBAAgB,YAAY,OAAO,CAAC;CAErD;CAMA,QAAiB;;EAEf,MAAM,OAAO,YAAoB;GAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,2BAA2B,EAC9E,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAC9B,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,iCAAiC,CAAC;GAC5E,OAAO;EACT;;;;;;;;EASA,QAAQ,OACN,SACA,MAGA,SACkB;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,2BAA2B;IAC/E,QAAQ;KACN,MAAM,EAAE,QAAQ;KAChB,GAAI,MAAM,iBACN,EAAE,QAAQ,EAAE,mBAAmB,KAAK,eAAe,EAAE,IACrD,CAAC;IACP;IACA;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,sCAAsC,CAAC;GAEjF,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,WAAkC;GAC7D,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,MAAM,OAAO,MAAM;GACnB,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,mCAAmC,CAAC;GAE9E,OAAO;EACT;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SAGqB;GACrB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,6CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,WAAmB;GACjD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,oCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,kCAAkC,CAAC;GAC7E,OAAO;EACT;;;EAIA,UAAU,OAAO,SAAiB,WAAqC;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;;;;;;;;;;EAgBA,SAAS,OAAO,SAAiB,WAAqC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;EAEA,MAAM,OAAO,SAAiB,WAAqC;GACjE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,yCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;EAMA,KAAK,OAAO,SAAiB,WAAyC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,wCACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,oCAAoC,CAAC;GAC/E,OAAO;EACT;;;;;EAMA,SAAS,OAAO,SAAiB,QAAgB,eAAuB;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,EAAE,WAAW;GAAE,CAChE;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;;;;;;;;;;;CAYA,MAAM,WAA2B;EAC/B,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,QAAQ;EAC7D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,4BAA4B,CAAC;EACvE,OAAO;CACT;CAMA,UAAmB;;EAEjB,MAAM,OAAO,SAAiB,WAAsC;GAClE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,4CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,WAAW,CAAC;EAC3B;;;;;;;;;;;;;;EAeA,QAAQ,OACN,SACA,QACA,SACsD;GACtD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,4CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO;IAAE,QAAQ,KAAK;IAAQ,SAAS,KAAK,WAAW,CAAC;GAAE;EAC5D;;;;;;;;EASA,SAAS,OACP,SACA,QACA,cAOI;GACJ,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,gEACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MACH,MAAM,eAAe,UAAU,EAAE,OAAO,qCAAqC,CAAC;GAChF,OAAO;EACT;;EAGA,QAAQ,OACN,SACA,QACA,WACA,SACoB;GACpB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,MAC/C,wDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;KAAQ;IAAU,EAAE;IAAG;GAAK,CAC3D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,QACT,MAAM,eAAe,UAAU,EAAE,OAAO,0CAA0C,CAAC;GACrF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,wDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,YAAqB;;EAEnB,MAAM,OAAO,SAAiB,WAAwC;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,aAAa,CAAC;EAC7B;;EAGA,QAAQ,OACN,SACA,QACA,SACsB;GACtB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,8CACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG,MAAM,QAAQ,CAAC;GAAE,CAC5D;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,UACT,MAAM,eAAe,UAAU,EAAE,OAAO,8CAA8C,CAAC;GACzF,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,eAAuB;GACrE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,2DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAW,EAAE,EAAE,CACtD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,cAAuB;;EAErB,MAAM,OAAO,SAAiB,WAA0C;GACtE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAO,EAAE,EAAE,CAC1C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO,MAAM,eAAe,CAAC;EAC/B;;;;;EAMA,QAAQ,OACN,SACA,QACA,SACwB;GACxB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,iDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAO,EAAE;IAAG;GAAK,CAChD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,CAAC,MAAM,YACT,MAAM,eAAe,UAAU,EAAE,OAAO,mDAAmD,CAAC;GAC9F,OAAO,KAAK;EACd;;EAGA,QAAQ,OAAO,SAAiB,QAAgB,cAAsB;GACpE,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,6DACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;IAAQ;GAAU,EAAE,EAAE,CACrD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAMA,UAAmB;;;;;;EAMjB,QAAQ,OACN,SACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAAK,mCAAmC;IACvF,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5B;GACF,CAAC;GACD,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,KAAK,OAAO,SAAiB,aAAqB;GAChD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;;;;;EAOA,UAAU,OACR,SACA,UACA,SAGG;GACH,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,KAC/C,uDACA;IAAE,QAAQ,EAAE,MAAM;KAAE;KAAS;IAAS,EAAE;IAAG;GAAK,CAClD;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;;EAGA,QAAQ,OAAO,SAAiB,aAAqB;GACnD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,OAC/C,8CACA,EAAE,QAAQ,EAAE,MAAM;IAAE;IAAS;GAAS,EAAE,EAAE,CAC5C;GACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,OAAO;EACT;CACF;CAEA,UAAmB;;AAEjB,UAAU,OAAO,SAAiB,aAAqB;EACrD,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAC/C,iDACA,EAAE,QAAQ,EAAE,MAAM;GAAE;GAAS;EAAS,EAAE,EAAE,CAC5C;EACA,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;EAC7E,OAAO;CACT,EACF;CAMA,UAAmB;;EAEjB,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;;EAGA,QAAQ,YAAY;GAClB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,SAAS;GAC9D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,6BAA6B,CAAC;GACxE,OAAO;EACT;;EAGA,SAAS,YAAY;GACnB,MAAM,EAAE,MAAM,OAAO,aAAa,MAAM,KAAK,IAAI,IAAI,UAAU;GAC/D,IAAI,UAAU,KAAA,KAAa,CAAC,SAAS,IAAI,MAAM,eAAe,UAAU,KAAK;GAC7E,IAAI,SAAS,KAAA,GACX,MAAM,eAAe,UAAU,EAAE,OAAO,8BAA8B,CAAC;GACzE,OAAO;EACT;CACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@krovacloud/sdk",
-  "version": "0.4.1",
+  "version": "0.4.3",
   "description": "Official TypeScript SDK for Krova Cloud — a typed client for provisioning and managing Cubes (Firecracker microVMs) with dedicated resources.",
   "license": "MIT",
   "type": "module",
@@ -65,7 +65,7 @@
     "openapi-typescript": "^7.13.0",
     "tsdown": "0.22.14",
     "tsx": "^4.23.12",
-    "typescript": "^6.0.3"
+    "typescript": "^7.0.2"
   },
   "scripts": {
     "gen": "openapi-typescript openapi.json -o src/generated/types.ts",