@metabase/cli 0.5.2 → 0.5.4

package/dist/{client-D-Aw6JLk.mjs → client-DvWllzKd.mjs}

@@ -1,37 +1,41 @@
-import { Dt as PartialWriteError, Ft as isNonInterruptFailure, Mt as errorMessage, Nt as formatZodIssue, Ot as ResponseShapeError, P as CapabilityError, Q as parseJsonOrPlain, St as ConfigError, W as HttpError, Y as isPlainObject, kt as TimeoutError, n as isMethodKey, r as methodRequirements, wt as InternalError } from "./cli.mjs";
-import { n as Notification, r as NotificationCardPayload, t as CARD_PAYLOAD_TYPE } from "./notification-DaA4bBHW.mjs";
-import { V as profileFromProperties, tt as SessionProperties } from "./runtime-Cmes70jO.mjs";
-import { n as featureFailures, r as supersedingFeature, t as checkFeatures } from "./requirement-check-sfmyH2PH.mjs";
-import { n as createTransport } from "./transport-Ck4anhoc.mjs";
-import { i as CardDetail, o as CardQueryResult, t as Card } from "./card-QR3zEu6E.mjs";
-import { f as FieldWithDataSensitivity, g as fieldRemappedValueSchema, h as fieldDetailSchema, n as FieldBaseType, o as FieldSearchMatches, s as FieldSemanticType, u as FieldValues } from "./field-DoWQUl7V.mjs";
+import { _ as formatZodIssue, c as InternalError, d as PartialWriteError, f as ResponseShapeError, g as errorMessage, o as ConfigError, p as TimeoutError, r as isPlainObject, y as isNonInterruptFailure } from "./predicates-0C0TsWcJ.mjs";
+import { F as CapabilityError, K as HttpError, Z as parseJsonOrPlain, i as methodRequirements, r as isMethodKey } from "./cli.mjs";
+import { i as NotificationCardPayload, n as CARD_PAYLOAD_TYPE, r as Notification, t as AnyNotification } from "./notification-B5yMuPmo.mjs";
+import { V as profileFromProperties, tt as SessionProperties } from "./runtime-iIsqiOwO.mjs";
+import { i as CreatedApiKey, t as ApiKey } from "./api-key-DbsqHlN6.mjs";
+import { n as featureFailures, r as supersedingFeature, t as checkFeatures } from "./requirement-check-BoVSK1uK.mjs";
+import { n as createTransport } from "./transport-DZSxmmtY.mjs";
+import { i as CardDetail, o as CardQueryResult, t as Card } from "./card-BJRZ5D5Q.mjs";
+import { t as gateInput } from "./input-gate-registry-Dh8QjKgW.mjs";
+import { _ as fieldRemappedValueSchema, c as FieldSemanticType, d as FieldValues, g as fieldDetailSchema, p as FieldWithDataSensitivity, r as FieldBaseType, s as FieldSearchMatches, t as DATA_SENSITIVITY_GATE } from "./field-C2qOViFZ.mjs";
 import { r as ModerationReviewCreateInput, t as ModerationReview } from "./moderation-review-Bf9bPNQI.mjs";
-import { a as TemporalUnit, r as ParameterValues } from "./parameter-DvRQMKd2.mjs";
+import { i as ParameterValues, o as TemporalUnit } from "./parameter-Bucz3cLJ.mjs";
 import { r as PivotExportFormat, t as DatasetQuery } from "./query-BKtMP5eH.mjs";
-import { b as TableVisibilityType, p as TableQueryMetadata, s as TableDataLayerTier, t as Table, u as TableForeignKey, v as TableSelectors } from "./table-CF7zW9cI.mjs";
-import { c as DatabaseWithSettings, t as Database } from "./database-CxykzTAA.mjs";
+import { S as TableSelectors, _ as TableQueryMetadata, a as Table, d as TableDataLayerTier, m as TableForeignKey, n as DATA_LAYER_MEDALLION_GATE, r as DATA_LAYER_TIER_GATE, t as DATA_AUTHORITY_WITHDRAWAL_GATE, w as TableVisibilityType } from "./table-hgrX1i-R.mjs";
+import { c as DatabaseWithSettings, t as Database } from "./database-C5ucihp3.mjs";
 import { t as Snippet } from "./snippet-CyKAgIZl.mjs";
-import { r as QueryMetadata, t as CompiledQuery } from "./dataset-DIQLAp2P.mjs";
-import { c as CollectionItem, m as CollectionTreeNode, r as Collection } from "./collection-DNmFKALA.mjs";
+import { r as QueryMetadata, t as CompiledQuery } from "./dataset-LJxNN6p5.mjs";
+import { c as CollectionItem, m as CollectionTreeNode, r as Collection } from "./collection-Cz2qLX2m.mjs";
 import { t as ContentTranslationUploadResult } from "./content-translation-BrHOrmj9.mjs";
-import { o as DashboardDetail, r as DashboardCopy, t as Dashboard, u as Dashcard } from "./dashboard-Chjy5GKR.mjs";
-import { a as DataActionExecuteResult, s as dataActionSchema } from "./data-action-DZxVB_hD.mjs";
-import { r as pollUntil } from "./poll-CgtcJopL.mjs";
-import { i as DependencyEntity, s as DependencyGraph, t as BreakingSource, u as DependencyNode } from "./dependency-CaC6XuTY.mjs";
-import { t as Document } from "./document-UMG6me2P.mjs";
+import { a as DashboardCreateInput, f as Dashcard, g as dashboardDetailSchema, r as DashboardCopy, t as Dashboard } from "./dashboard-Cwsf-e9T.mjs";
+import { c as dataActionSchema, o as DataActionExecuteResult, t as DATA_ACTION_COLLECTION_GATE } from "./data-action-CuvI17XF.mjs";
+import { i as DataAppEntry, t as DataApp } from "./data-app-BUW-HlUo.mjs";
+import { r as pollUntil } from "./poll-vxN__4cz.mjs";
+import { i as DependencyEntity, s as DependencyGraph, t as BreakingSource, u as DependencyNode } from "./dependency-C1DExO6k.mjs";
+import { t as Document } from "./document-BHOQq2T_.mjs";
 import { i as EidTranslateResult } from "./eid-translation-Ba92VOHe.mjs";
 import { a as SyncExportPreflight, f as SyncTask, g as isSyncTaskTerminal, l as SyncRemoteChanges, n as SyncBranchCreated, r as SyncDirtyItem, t as RemoteSyncState, u as SyncSettingsUpdateResult } from "./git-sync-DP4wQFzm.mjs";
-import { t as Glossary } from "./glossary-QN-hHfOT.mjs";
-import { a as libraryWireSchema, i as LibraryPublishTablesInput, n as LibraryCollectionInfo, o as toLibrary } from "./library-DKIqzyUk.mjs";
-import { t as Measure } from "./measure-CtfjqJFP.mjs";
-import { t as Pulse } from "./pulse-CC81N2_0.mjs";
-import { a as TransformDagTransform, d as TransformTarget, g as transformRowSchema, h as transformDetailSchema, i as TransformDagRunResult, l as TransformRunSummary, m as isTransformRunTerminal, o as TransformRun, p as isTransformRunFailed, u as TransformSourceTableEntry } from "./transform-DiW7bREn.mjs";
+import { t as Glossary } from "./glossary-iPIWrEbP.mjs";
+import { a as libraryWireSchema, i as LibraryPublishTablesInput, n as LibraryCollectionInfo, o as toLibrary } from "./library-C4g9pdiS.mjs";
+import { t as Measure } from "./measure-BMWrX1ca.mjs";
+import { o as SUBSCRIPTION_FILTERS_GATE, t as Pulse } from "./pulse-B2AmIWsO.mjs";
+import { _ as transformRowSchema, a as TransformDagTransform, d as TransformTarget, g as transformDetailSchema, h as keyedByAlias, i as TransformDagRunResult, l as TransformRunSummary, m as isTransformRunTerminal, o as TransformRun, p as isTransformRunFailed, u as TransformSourceTableEntryInput, v as transformSourceBody } from "./transform-B62craFM.mjs";
 import { r as SearchResult } from "./search-1et9tv_s.mjs";
-import { t as Segment } from "./segment-OsrbUDzw.mjs";
+import { t as Segment } from "./segment-Cf-DrdjE.mjs";
 import { t as Setting } from "./setting-DTiLCW8g.mjs";
-import { n as SetupResult } from "./setup-CO7QV-ao.mjs";
+import { n as SetupResult } from "./setup-BnczkG96.mjs";
 import { i as TimelineEvent, t as Timeline } from "./timeline-DcsCXNUt.mjs";
-import { c as transformJobSchema, n as TransformJobActiveResult, s as transformJobRunResultSchema } from "./transform-job-ClX8e5iO.mjs";
+import { c as transformJobSchema, n as TransformJobActiveResult, s as transformJobRunResultSchema } from "./transform-job-CDIb3B9o.mjs";
 import { t as TransformTag } from "./transform-tag-CcElGp3C.mjs";
 import { i as TransformTestRunResult, t as TransformTest } from "./transform-test-Bexa_K89.mjs";
 import { t as UploadResult } from "./upload-DAtxBBms.mjs";
@@ -48,6 +52,38 @@ var __exportAll = (all, no_symbols) => {
 	return target;
 };
 //#endregion
+//#region ../client/src/resources/api-key.ts
+function apiKeyResource(transport) {
+	/** List the API keys, each with its masked key and the group it acts as. `GET /api/api-key` answers a bare array. */
+	async function list(options = {}) {
+		return {
+			data: await transport.requestParsed(z.array(ApiKey), "/api/api-key", { ...options }),
+			total: null
+		};
+	}
+	/** Create an API key acting as a member of the group; the answer carries the key itself, which no later read returns. */
+	async function create(params, options = {}) {
+		return transport.requestParsed(CreatedApiKey, "/api/api-key", {
+			...options,
+			method: "POST",
+			body: params
+		});
+	}
+	/** Delete an API key by id; requests made with it fail from then on. */
+	async function remove(id, options = {}) {
+		await transport.requestRaw(`/api/api-key/${id}`, {
+			...options,
+			method: "DELETE",
+			expectContentType: "binary"
+		});
+	}
+	return {
+		list,
+		create,
+		delete: remove
+	};
+}
+//#endregion
 //#region ../client/src/resources/pivot-export.ts
 const PivotedExportsProperty = SessionProperties.extend({ "enable-pivoted-exports": z.boolean() });
 /**
@@ -200,112 +236,6 @@ function paginatedEnvelopeSchema(itemSchema) {
 	}).loose();
 }
 //#endregion
-//#region ../client/src/resources/collection.ts
-const CollectionApiList = z.array(Collection);
-const CollectionTreeApiList = z.array(CollectionTreeNode);
-const COLLECTION_LIST_QUERY = {
-	all: {},
-	archived: { archived: true },
-	personal: { "personal-only": true }
-};
-const DEFAULT_LIST_FILTER = "all";
-function refPath(ref) {
-	return encodeURIComponent(ref);
-}
-/**
-* List every collection the caller can read, the Library and its children among them, parsing each
-* through the caller's own projection. `Collection` pins `type`, `namespace` and `authority_level`
-* to closed enums, so a consumer reading a few fields off every collection on the instance narrows
-* here: one collection carrying a server value outside those sets then costs nothing to a caller
-* that never reads the field.
-*/
-async function listCollectionsAs(transport, schema, options = {}) {
-	return transport.requestParsed(z.array(schema), "/api/collection", { ...options });
-}
-function collectionResource(transport) {
-	/**
-	* List collections. `filter` picks a server-side preset: everything, archived, or personal. Every
-	* preset includes the Library collections that match it. `namespace` lists that namespace's
-	* collections, with its root, instead of the default namespace's.
-	*/
-	async function list(params = {}, options = {}) {
-		return {
-			data: await transport.requestParsed(CollectionApiList, "/api/collection", {
-				...options,
-				query: {
-					...COLLECTION_LIST_QUERY[params.filter ?? DEFAULT_LIST_FILTER],
-					namespace: params.namespace
-				}
-			}),
-			total: null
-		};
-	}
-	/** Get one collection by id, entity id, or the `root`/`trash` alias. */
-	async function get(ref, options = {}) {
-		return transport.requestParsed(Collection, `/api/collection/${refPath(ref)}`, { ...options });
-	}
-	/** Create a new collection. */
-	async function create(params, options = {}) {
-		return transport.requestParsed(Collection, "/api/collection", {
-			...options,
-			method: "POST",
-			body: params
-		});
-	}
-	/**
-	* Update a collection, patching the fields the body carries. The server reads an absent
-	* `archived` as `false`, so a patch without it restores an archived collection, and a patch that
-	* moves a collection into the trash ignores `parent_id`.
-	*/
-	async function update(ref, params, options = {}) {
-		return transport.requestParsed(Collection, `/api/collection/${refPath(ref)}`, {
-			...options,
-			method: "PUT",
-			body: params
-		});
-	}
-	/** Archive (soft-delete) a collection. Metabase models this as an update, not its own endpoint. */
-	async function archive(ref, options = {}) {
-		return update(ref, { archived: true }, options);
-	}
-	/**
-	* Walk the items inside a collection one page at a time. This endpoint pages on the server, so
-	* the caller consumes pages rather than a single list and decides how far to pull.
-	*/
-	async function* itemPages(ref, params = {}, options = {}) {
-		yield* paginatePages(transport, `/api/collection/${refPath(ref)}/items`, CollectionItem, {
-			query: {
-				models: params.models,
-				archived: params.archived,
-				pinned_state: params.pinned_state
-			},
-			...options.offset !== void 0 && { offset: options.offset },
-			...options.max !== void 0 && { max: options.max },
-			...options.pageSize !== void 0 && { pageSize: options.pageSize },
-			...options.signal !== void 0 && { signal: options.signal }
-		});
-	}
-	/** Fetch the collection hierarchy as a forest of nested nodes. */
-	async function tree(params = {}, options = {}) {
-		return {
-			data: await transport.requestParsed(CollectionTreeApiList, "/api/collection/tree", {
-				...options,
-				query: { "include-library": params["include-library"] }
-			}),
-			total: null
-		};
-	}
-	return {
-		list,
-		get,
-		create,
-		update,
-		archive,
-		itemPages,
-		tree
-	};
-}
-//#endregion
 //#region ../client/src/version/refusal.ts
 const REFUSAL_STATUSES = /* @__PURE__ */ new Set([
 	400,
@@ -428,6 +358,135 @@ function topLevelField(path) {
 	return end === -1 ? path : path.slice(0, end);
 }
 //#endregion
+//#region ../client/src/resources/collection.ts
+const CollectionApiList = z.array(Collection);
+const CollectionTreeApiList = z.array(CollectionTreeNode);
+const COLLECTION_LIST_QUERY = {
+	all: {},
+	archived: { archived: true },
+	personal: { "personal-only": true }
+};
+const DEFAULT_LIST_FILTER = "all";
+const TRASH_ALIAS = "trash";
+const MODELS_FIELDS$1 = ["models"];
+const ITEM_MODEL_FEATURES = {
+	transform: "transforms",
+	measure: "collectionItemMeasures",
+	exploration: "explorations"
+};
+function itemModelFeatures(_ref, params = {}) {
+	if (params.models === void 0) return [];
+	return params.models.flatMap((model) => {
+		const feature = ITEM_MODEL_FEATURES[model];
+		return feature === void 0 ? [] : [{
+			feature,
+			fields: MODELS_FIELDS$1
+		}];
+	});
+}
+function refPath(ref) {
+	return encodeURIComponent(ref);
+}
+/**
+* List every collection the caller can read, the Library and its children among them, parsing each
+* through the caller's own projection. `Collection` pins `type`, `namespace` and `authority_level`
+* to closed enums, so a consumer reading a few fields off every collection on the instance narrows
+* here: one collection carrying a server value outside those sets then costs nothing to a caller
+* that never reads the field.
+*/
+async function listCollectionsAs(transport, schema, options = {}) {
+	return transport.requestParsed(z.array(schema), "/api/collection", { ...options });
+}
+function collectionResource(transport) {
+	const { explainWalk } = explainer(transport, "collection");
+	/**
+	* List collections. `filter` picks a server-side preset: everything, archived, or personal. Every
+	* preset includes the Library collections that match it. `namespace` lists that namespace's
+	* collections, with its root, instead of the default namespace's.
+	*/
+	async function list(params = {}, options = {}) {
+		return {
+			data: await transport.requestParsed(CollectionApiList, "/api/collection", {
+				...options,
+				query: {
+					...COLLECTION_LIST_QUERY[params.filter ?? DEFAULT_LIST_FILTER],
+					namespace: params.namespace
+				}
+			}),
+			total: null
+		};
+	}
+	/** Get one collection by id, entity id, or the `root`/`trash` alias. */
+	async function get(ref, options = {}) {
+		return transport.requestParsed(Collection, `/api/collection/${refPath(ref)}`, { ...options });
+	}
+	/** Create a new collection. */
+	async function create(params, options = {}) {
+		return transport.requestParsed(Collection, "/api/collection", {
+			...options,
+			method: "POST",
+			body: params
+		});
+	}
+	/**
+	* Update a collection, patching the fields the body carries. The server reads an absent
+	* `archived` as `false`, so a patch without it restores an archived collection, and a patch that
+	* moves a collection into the trash ignores `parent_id`.
+	*/
+	async function update(ref, params, options = {}) {
+		return transport.requestParsed(Collection, `/api/collection/${refPath(ref)}`, {
+			...options,
+			method: "PUT",
+			body: params
+		});
+	}
+	/** Archive (soft-delete) a collection. Metabase models this as an update, not its own endpoint. */
+	async function archive(ref, options = {}) {
+		return update(ref, { archived: true }, options);
+	}
+	/**
+	* Walk the items inside a collection one page at a time. This endpoint pages on the server, so
+	* the caller consumes pages rather than a single list and decides how far to pull. The `trash`
+	* alias costs one more request, which reads the trash collection's id. A `models` filter takes
+	* `transform` only with `transforms`, `measure` only with `collectionItemMeasures`, and
+	* `exploration` only with `explorations`.
+	*/
+	async function* itemPages(ref, params = {}, options = {}) {
+		const withSignal = options.signal !== void 0 && { signal: options.signal };
+		yield* paginatePages(transport, `/api/collection/${refPath(ref === TRASH_ALIAS ? (await get(TRASH_ALIAS, { ...withSignal })).id : ref)}/items`, CollectionItem, {
+			query: {
+				models: params.models,
+				archived: params.archived,
+				pinned_state: params.pinned_state,
+				"pinned-state": params.pinned_state
+			},
+			...options.offset !== void 0 && { offset: options.offset },
+			...options.max !== void 0 && { max: options.max },
+			...options.pageSize !== void 0 && { pageSize: options.pageSize },
+			...withSignal
+		});
+	}
+	/** Fetch the collection hierarchy as a forest of nested nodes. */
+	async function tree(params = {}, options = {}) {
+		return {
+			data: await transport.requestParsed(CollectionTreeApiList, "/api/collection/tree", {
+				...options,
+				query: { "include-library": params["include-library"] }
+			}),
+			total: null
+		};
+	}
+	return {
+		list,
+		get,
+		create,
+		update,
+		archive,
+		itemPages: explainWalk("itemPages", itemPages, itemModelFeatures),
+		tree
+	};
+}
+//#endregion
 //#region ../client/src/resources/csv-upload.ts
 const CSV_CONTENT_TYPE = "text/csv";
 function buildCsvFormData(file) {
@@ -459,6 +518,17 @@ function contentTranslationResource(transport) {
 	};
 }
 //#endregion
+//#region ../client/src/resources/request-body.ts
+/**
+* Parse the body a caller hands a method, refusing one that does not match `schema` before any
+* request. `what` names the body in the refusal.
+*/
+function parseRequestBody(schema, value, what) {
+	const parsed = schema.safeParse(value);
+	if (!parsed.success) throw new ConfigError(`invalid ${what}: ${parsed.error.issues.map(formatZodIssue).join("; ")}`);
+	return parsed.data;
+}
+//#endregion
 //#region ../client/src/resources/dashboard.ts
 const DashboardApiList = z.array(Dashboard);
 const PreflightDashcard = z.looseObject({ card_id: z.number().int().nullable().optional() });
@@ -476,17 +546,19 @@ function dashboardResource(transport) {
 	}
 	/** Get one dashboard by id, with its dashcards, tabs and parameters. */
 	async function get(id, options = {}) {
-		return transport.requestParsed(DashboardDetail, `/api/dashboard/${id}`, { ...options });
+		return transport.requestParsed(dashboardDetailSchema, `/api/dashboard/${id}`, { ...options });
 	}
 	/**
 	* Create a dashboard. The endpoint accepts no dashcards or tabs — a follow-up `update` is what
-	* puts content on a fresh dashboard.
+	* puts content on a fresh dashboard. A key `DashboardCreateInput` does not declare is dropped
+	* before the request, as the server drops it.
 	*/
 	async function create(params, options = {}) {
+		const body = parseRequestBody(DashboardCreateInput, params, "dashboard");
 		return transport.requestParsed(Dashboard, "/api/dashboard", {
 			...options,
 			method: "POST",
-			body: params
+			body
 		});
 	}
 	/**
@@ -497,7 +569,7 @@ function dashboardResource(transport) {
 	*/
 	async function update(id, params, options = {}) {
 		const body = await withCurrentTabs(id, params, options);
-		return transport.requestParsed(DashboardDetail, `/api/dashboard/${id}`, {
+		return transport.requestParsed(dashboardDetailSchema, `/api/dashboard/${id}`, {
 			...options,
 			method: "PUT",
 			body
@@ -670,13 +742,18 @@ function stripEntityId(dashcard) {
 	};
 }
 //#endregion
-//#region ../client/src/resources/data-action.ts
-function collectionFeatures(params) {
-	return params.collection_id === void 0 ? [] : [{
-		feature: "dataActionCollections",
-		fields: ["collection_id"]
-	}];
+//#region ../client/src/version/input-gates.ts
+/** Whether `value`, as a caller passes it for the gated field, is one the gate applies to. */
+function gateTriggered(gate, value) {
+	const { when } = gate;
+	switch (when.kind) {
+		case "present": return value !== void 0;
+		case "values": return when.values.some((gated) => gated === value);
+		case "nonEmpty": return Array.isArray(value) && value.length > 0;
+	}
 }
+//#endregion
+//#region ../client/src/resources/data-action.ts
 function dataActionResource(transport) {
 	const { explain } = explainer(transport, "dataAction");
 	async function readSchema(options) {
@@ -705,8 +782,13 @@ function dataActionResource(transport) {
 			body: params
 		});
 	}
-	/** Update a data action by id, patching only the fields the body carries. */
+	/**
+	* Update a data action by id, patching only the fields the body carries. A server whose data
+	* actions have no collection never moves the action, and from 58.31 it strips the undeclared key and
+	* answers as if it had. So the field is refused there before the wire.
+	*/
 	async function update(id, params, options = {}) {
+		await transport.requireFeatures(gateTriggered(DATA_ACTION_COLLECTION_GATE, params.collection_id) ? [DATA_ACTION_COLLECTION_GATE.feature] : [], options);
 		const schema = await readSchema(options);
 		return transport.requestParsed(schema, `/api/action/${id}`, {
 			...options,
@@ -738,13 +820,84 @@ function dataActionResource(transport) {
 		list,
 		get,
 		create: explain("create", create),
-		update: explain("update", update, (_id, params) => collectionFeatures(params)),
+		update,
 		archive,
 		delete: remove,
 		execute
 	};
 }
 //#endregion
+//#region ../client/src/resources/data-app.ts
+const DATA_APPS_PATH = "/api/ee/apps";
+function appPath(slug) {
+	return `${DATA_APPS_PATH}/${encodeURIComponent(slug)}`;
+}
+function dataAppResource(transport) {
+	const { explain } = explainer(transport, "dataApp");
+	/** List the data apps; `available` keeps only the enabled ones that aren't outdated. `GET /api/ee/apps` answers a bare array. */
+	async function list(filter = {}, options = {}) {
+		return {
+			data: await transport.requestParsed(z.array(DataAppEntry), DATA_APPS_PATH, {
+				...options,
+				query: { available: filter.available }
+			}),
+			total: null
+		};
+	}
+	/** Get one data app by slug; admins read disabled apps too. */
+	async function get(slug, options = {}) {
+		return transport.requestParsed(DataAppEntry, appPath(slug), { ...options });
+	}
+	/** Create a data app with its resource collection and an empty bundle; it is disabled unless the body says otherwise. */
+	async function create(params, options = {}) {
+		return transport.requestParsed(DataApp, DATA_APPS_PATH, {
+			...options,
+			method: "POST",
+			body: params
+		});
+	}
+	/** Update a data app's fields, or enable or disable it. */
+	async function update(slug, params, options = {}) {
+		return transport.requestParsed(DataApp, appPath(slug), {
+			...options,
+			method: "PUT",
+			body: params
+		});
+	}
+	/** Replace a data app's bundle with the text of a built bundle. */
+	async function replaceBundle(slug, bundle, options = {}) {
+		return transport.requestParsed(DataApp, `${appPath(slug)}/bundle`, {
+			...options,
+			method: "PUT",
+			body: { bundle }
+		});
+	}
+	/** The TypeScript module of the app's queries and actions: a `defineQuery` or `defineAction` call per question and action in its collection. */
+	async function typedSchema(slug, options = {}) {
+		return (await transport.requestRaw(`${appPath(slug)}/typed-schema`, {
+			...options,
+			expectContentType: "text"
+		})).text();
+	}
+	/** Delete a data app with its bundle, its collection and its group assignments. */
+	async function remove(slug, options = {}) {
+		await transport.requestRaw(appPath(slug), {
+			...options,
+			method: "DELETE",
+			expectContentType: "binary"
+		});
+	}
+	return {
+		list: explain("list", list),
+		get: explain("get", get),
+		create: explain("create", create),
+		update: explain("update", update),
+		replaceBundle: explain("replaceBundle", replaceBundle),
+		typedSchema: explain("typedSchema", typedSchema),
+		delete: explain("delete", remove)
+	};
+}
+//#endregion
 //#region ../client/src/resources/database.ts
 const DatabaseApiList = z.object({
 	data: z.array(Database),
@@ -923,18 +1076,24 @@ function datasetResource(transport) {
 //#region ../client/src/resources/dependency.ts
 const DependencyNodeApiList = z.array(DependencyNode);
 const DependencyEntityApiList = z.array(DependencyEntity);
-function graphTypeFeatures(type) {
-	return type === "measure" ? [{
+function entityTypeFeatures(type) {
+	if (type === "measure") return [{
 		feature: "measureDependencyGraph",
 		fields: ["type"]
-	}] : [];
+	}];
+	if (type === "action") return [{
+		feature: "actionDependencyGraph",
+		fields: ["type"]
+	}];
+	return [];
 }
 function dependencyResource(transport) {
 	const { explain, explainWalk } = explainer(transport, "dependency");
 	/**
 	* The upstream dependency graph of one entity. `nodes` holds the starting entity plus every
 	* entity it depends on, directly or transitively; each edge runs from the dependent to what it
-	* depends on. A measure starts a graph only on a server with `measureDependencyGraph`.
+	* depends on. A measure starts a graph only on a server with `measureDependencyGraph`, and an
+	* action only on one with `actionDependencyGraph`.
 	*/
 	async function graph(type, id, options = {}) {
 		return transport.requestParsed(DependencyGraph, "/api/ee/dependencies/graph", {
@@ -1042,9 +1201,9 @@ function dependencyResource(transport) {
 		});
 	}
 	return {
-		graph: explain("graph", graph, graphTypeFeatures),
-		dependents: explain("dependents", dependents),
-		broken: explain("broken", broken),
+		graph: explain("graph", graph, entityTypeFeatures),
+		dependents: explain("dependents", dependents, entityTypeFeatures),
+		broken: explain("broken", broken, entityTypeFeatures),
 		unreferencedPages: explainWalk("unreferencedPages", unreferencedPages),
 		breakingPages: explainWalk("breakingPages", breakingPages)
 	};
@@ -1233,7 +1392,7 @@ function fieldResource(transport) {
 	* the label is refused there before the wire. Answers the field the way `get` does.
 	*/
 	async function update(id, params, options = {}) {
-		await transport.requireFeatures(params.data_sensitivity === void 0 ? [] : ["fieldDataSensitivity"], options);
+		await transport.requireFeatures(gateTriggered(DATA_SENSITIVITY_GATE, params.data_sensitivity) ? [DATA_SENSITIVITY_GATE.feature] : [], options);
 		const { features } = await transport.server(options);
 		return transport.requestParsed(fieldDetailSchema(features), `/api/field/${id}`, {
 			...options,
@@ -1705,17 +1864,6 @@ function glossaryResource(transport) {
 	};
 }
 //#endregion
-//#region ../client/src/resources/request-body.ts
-/**
-* Parse the body a caller hands a method, refusing one that does not match `schema` before any
-* request. `what` names the body in the refusal.
-*/
-function parseRequestBody(schema, value, what) {
-	const parsed = schema.safeParse(value);
-	if (!parsed.success) throw new ConfigError(`invalid ${what}: ${parsed.error.issues.map(formatZodIssue).join("; ")}`);
-	return parsed.data;
-}
-//#endregion
 //#region ../client/src/resources/library.ts
 const LIBRARY_ROOT_PATH = "/api/ee/library/";
 const PUBLISH_TABLES_PATH = "/api/ee/data-studio/table/publish-tables";
@@ -2096,7 +2244,7 @@ function notificationResource(transport) {
 	}
 	/** Get one question alert by id, refusing an id that names a system-event notification. */
 	async function get(id, options = {}) {
-		return assertCardAlert(await transport.requestParsed(Notification, `/api/notification/${id}`, { ...options }));
+		return assertCardAlert(await transport.requestParsed(AnyNotification, `/api/notification/${id}`, { ...options }));
 	}
 	/** Create a question alert — its card payload, schedules and handlers — from a full body. */
 	async function create(params, options = {}) {
@@ -2265,7 +2413,7 @@ function pulseResource(transport) {
 		return update(id, { archived: true }, options);
 	}
 	async function requireSubscriptionFilters(parameters, options) {
-		if (parameters !== void 0 && parameters.length > 0) await transport.requireFeatures(["dashboardSubscriptionFilters"], options);
+		if (gateTriggered(SUBSCRIPTION_FILTERS_GATE, parameters)) await transport.requireFeatures([SUBSCRIPTION_FILTERS_GATE.feature], options);
 	}
 	return {
 		list,
@@ -2489,8 +2637,34 @@ const RevisionRow = z.object({
 	is_reversion: z.boolean(),
 	most_recent: z.boolean()
 }).loose();
+const REVISION_ENTITY_GATES = [
+	{
+		feature: "measures",
+		effect: "needs",
+		when: {
+			kind: "values",
+			values: ["measure"]
+		}
+	},
+	{
+		feature: "transforms",
+		effect: "needs",
+		when: {
+			kind: "values",
+			values: ["transform"]
+		}
+	},
+	{
+		feature: "transformTests",
+		effect: "needs",
+		when: {
+			kind: "values",
+			values: ["transform-test"]
+		}
+	}
+];
 z.object({
-	entity: RevisionEntity,
+	entity: gateInput(z.enum(RevisionEntity.options), ...REVISION_ENTITY_GATES),
 	id: z.number().int().positive(),
 	revision_id: z.number().int().positive()
 }).strict();
@@ -2513,17 +2687,11 @@ const RevisionApiRevert = z.union([Revision.transform((revision) => ({
 	outcome: "unchanged",
 	revision
 }))]);
-const ENTITY_FEATURES = {
-	measure: "measures",
-	transform: "transforms",
-	"transform-test": "transformTests"
-};
 function entityFeatures(entity) {
-	const feature = ENTITY_FEATURES[entity];
-	return feature === void 0 ? [] : [{
-		feature,
+	return REVISION_ENTITY_GATES.filter((gate) => gateTriggered(gate, entity)).map((gate) => ({
+		feature: gate.feature,
 		fields: ["entity"]
-	}];
+	}));
 }
 function revisionResource(transport) {
 	const { explain } = explainer(transport, "revision");
@@ -2562,6 +2730,25 @@ function verifiedFeatures(params = {}) {
 		fields: ["verified"]
 	}] : [];
 }
+const MODELS_FIELDS = ["models"];
+const SEARCH_MODEL_FEATURES = {
+	measure: "measures",
+	transform: "transforms",
+	exploration: "explorations"
+};
+function modelFeatures(params) {
+	if (params.models === void 0) return [];
+	return params.models.flatMap((model) => {
+		const feature = SEARCH_MODEL_FEATURES[model];
+		return feature === void 0 ? [] : [{
+			feature,
+			fields: MODELS_FIELDS
+		}];
+	});
+}
+function queryFeatures(params = {}) {
+	return [...verifiedFeatures(params), ...modelFeatures(params)];
+}
 function searchResource(transport) {
 	const { explain } = explainer(transport, "search");
 	/**
@@ -2575,7 +2762,9 @@ function searchResource(transport) {
 	* default), and `limit`/`offset` are the window the server applies before ranking hydration.
 	* `verified` needs the `content_verification` premium feature, and is refused before the wire
 	* without it: a server granting neither it nor `official_collections` refuses the filter, and one
-	* granting `official_collections` alone takes it without applying it.
+	* granting `official_collections` alone takes it without applying it. `models` takes `measure`
+	* only with `measures`, `transform` with `transforms` or on a Metabase 58 enterprise build, and
+	* `exploration` only with `explorations`.
 	*/
 	async function query(params = {}, options = {}) {
 		await transport.requireFeatures(verifiedFeatures(params).map((requirement) => requirement.feature), options);
@@ -2601,7 +2790,7 @@ function searchResource(transport) {
 			total: response.total
 		};
 	}
-	return { query: explain("query", query, verifiedFeatures) };
+	return { query: explain("query", query, queryFeatures) };
 }
 //#endregion
 //#region ../client/src/resources/segment.ts
@@ -2780,14 +2969,11 @@ function listParamFeatures(params) {
 	return LIST_PARAM_FEATURES.filter(([param]) => params[param] === true).map(([, feature]) => feature);
 }
 function dataLayerFeatures(value, field) {
-	return isTierName(value) ? [{
-		feature: "tableDataLayerTiers",
+	return gateTriggered(DATA_LAYER_TIER_GATE, value) ? [{
+		feature: DATA_LAYER_TIER_GATE.feature,
 		fields: [field]
 	}] : [];
 }
-function isTierName(value) {
-	return value !== null && value !== void 0 && TableDataLayerTier.safeParse(value).success;
-}
 const UPLOAD_UPDATE_PATHS = {
 	append: "append-csv",
 	replace: "replace-csv"
@@ -2841,10 +3027,11 @@ function tableResource(transport) {
 		return updated;
 	}
 	async function refuseRewrittenDataLayer(value, options) {
-		if (value === null || value === void 0 || isTierName(value)) return;
+		if (!gateTriggered(DATA_LAYER_MEDALLION_GATE, value)) return;
 		const profile = await transport.preflightServer(options);
 		if (profile === null) return;
-		const failure = supersedingFeature("tableDataLayerTiers", profile, `data_layer "${value}" is a medallion name; this server names a table's layer ${TableDataLayerTier.options.join(", ")} and would map it onto one of those without a word`);
+		const detail = `data_layer "${value}" is a medallion name; this server names a table's layer ${TableDataLayerTier.options.join(", ")} and would map it onto one of those without a word`;
+		const failure = supersedingFeature(DATA_LAYER_MEDALLION_GATE.feature, profile, detail);
 		if (failure !== null) transport.refuseBeforeSending(new CapabilityError(failure));
 	}
 	/** Get a table by id with its fields hydrated — the metadata the query builder runs on. */
@@ -2920,7 +3107,7 @@ function tableResource(transport) {
 		};
 	}
 	async function requireDataAuthorityNull(value, options) {
-		if (value === null) await transport.requireFeatures(["tableUserValueWithdrawal"], options);
+		if (gateTriggered(DATA_AUTHORITY_WITHDRAWAL_GATE, value)) await transport.requireFeatures([DATA_AUTHORITY_WITHDRAWAL_GATE.feature], options);
 	}
 	async function postSelection(path, selectors, options) {
 		const body = parseRequestBody(TableSelectors, selectors, "table selectors");
@@ -3478,10 +3665,22 @@ const TEST_RUN_ROW_LIMIT = {
 const TestRunRowLimit = z.number().int().min(TEST_RUN_ROW_LIMIT.min).max(TEST_RUN_ROW_LIMIT.max);
 z.object({
 	code: z.string(),
-	source_tables: z.array(TransformSourceTableEntry).min(1),
+	source_tables: z.array(TransformSourceTableEntryInput).min(1),
 	output_row_limit: TestRunRowLimit.optional(),
 	per_input_row_limit: TestRunRowLimit.optional()
 }).strict();
+function toTestRunTableValue(entry) {
+	const { alias: _alias, ...reference } = entry;
+	return typeof entry.table_id === "number" ? entry.table_id : reference;
+}
+/** A test run body as a server with `features` reads it. */
+function pythonTestRunBody(params, features) {
+	if (features.transformSourceTablesAsList) return params;
+	return {
+		...params,
+		source_tables: keyedByAlias(params.source_tables, toTestRunTableValue)
+	};
+}
 const PythonTestRunOutput = z.object({
 	cols: z.array(z.object({ name: z.string() }).loose()),
 	rows: z.array(z.unknown())
@@ -3538,10 +3737,11 @@ function transformPythonResource(transport) {
 	* sizes are capped at 100 rows.
 	*/
 	async function testRun(params, options = {}) {
+		const { features } = await transport.server(options);
 		return transport.requestParsed(PythonApiTestRun, "/api/ee/transforms-python/test-run", {
 			...options,
 			method: "POST",
-			body: params
+			body: pythonTestRunBody(params, features)
 		});
 	}
 	return {
@@ -3582,20 +3782,30 @@ function transformResource(transport) {
 		const { features } = await transport.server(options);
 		return transport.requestParsed(transformDetailSchema(features), `/api/transform/${id}`, { ...options });
 	}
+	async function writeBody(params, options) {
+		if (params.source === void 0) return params;
+		const { features } = await transport.server(options);
+		return {
+			...params,
+			source: transformSourceBody(params.source, features)
+		};
+	}
 	/** Create a transform — a query plus the warehouse table it writes — from a full body. */
 	async function create(params, options = {}) {
+		const body = await writeBody(params, options);
 		return requestTransform("/api/transform", {
 			...options,
 			method: "POST",
-			body: params
+			body
 		});
 	}
 	/** Update a transform by id, patching only the fields the body carries. */
 	async function update(id, params, options = {}) {
+		const body = await writeBody(params, options);
 		return requestTransform(`/api/transform/${id}`, {
 			...options,
 			method: "PUT",
-			body: params
+			body
 		});
 	}
 	/** Delete a transform by id, leaving any table it already materialized in place. */
@@ -3922,7 +4132,7 @@ function parseResponseInteger(value, source) {
 //#region ../client/src/domain/user.ts
 const CurrentUser = z.object({
 	id: z.number().int(),
-	email: z.email(),
+	email: z.string(),
 	common_name: z.string(),
 	is_superuser: z.boolean()
 }).loose();
@@ -3947,11 +4157,13 @@ var client_exports = /* @__PURE__ */ __exportAll({ createClient: () => createCli
 function createClient(config, options) {
 	const transport = createTransport(config, options);
 	return {
+		apiKey: apiKeyResource(transport),
 		card: cardResource(transport),
 		collection: collectionResource(transport),
 		contentTranslation: contentTranslationResource(transport),
 		dashboard: dashboardResource(transport),
 		dataAction: dataActionResource(transport),
+		dataApp: dataAppResource(transport),
 		database: databaseResource(transport),
 		dataset: datasetResource(transport),
 		dependency: dependencyResource(transport),