@takaro/apiclient 0.0.0-dev.e253942 → 0.0.0-dev.e2f5af7

package/dist/lib/client.d.ts

@@ -1,10 +1,31 @@
-import { CronJobApi, FunctionApi, GameServerApi, RoleApi, UserApi, ModuleApi, HookApi, PlayerApi, SettingsApi, CommandApi, VariableApi, DiscordApi, EventApi, PlayerOnGameServerApi, ItemApi, StatsApi, ShopOrderApi, ShopListingApi, ShopCategoryApi, TrackingApi, EntityApi, AnalyticsApi } from '../generated/api.js';
-import { BaseApiClient, IBaseApiClientConfig } from './baseClient.js';
+import { CronJobApi, ExecutionApi, FunctionApi, GameServerApi, RoleApi, UserApi, ModuleApi, HookApi, PlayerApi, SettingsApi, CommandApi, VariableApi, DiscordApi, EventApi, PlayerOnGameServerApi, ItemApi, ShopOrderApi, ShopListingApi, ShopCategoryApi, ShopActionApi, StorefrontConfigApi, StorefrontDomainApi, TrackingApi, EntityApi, AnalyticsApi, InviteLinkApi, ApiKeyApi, ThreadApi, CsmmImportApi } from '../generated/api.js';
+import { BaseApiClient, type IBaseApiClientConfig } from './baseClient.js';
 export interface IApiClientConfig extends IBaseApiClientConfig {
     auth: {
+        /**
+         * @deprecated Keycloak's password grant is for the browser login page only. Scripted callers
+         * authenticate with `apiKey` (a Takaro API Key) — see `docs/api/authentication.md`. Still
+         * supported; nothing breaks today.
+         */
         username?: string;
+        /**
+         * @deprecated Keycloak's password grant is for the browser login page only. Scripted callers
+         * authenticate with `apiKey` (a Takaro API Key) — see `docs/api/authentication.md`. Still
+         * supported; nothing breaks today.
+         */
         password?: string;
+        /** A Takaro-minted internal token (`POST /token`), sent as `Authorization: Bearer <jwt>`. */
         token?: string;
+        /** A Takaro API key secret (`takaro_pat_…`), sent as `Authorization: Bearer <key>`. */
+        apiKey?: string;
+        /**
+         * A Distributor Key secret (`takaro_dist_…`) for a white-label call, sent as
+         * `Authorization: Bearer <key>`. Requires `domainId`: a Distributor Key names the Domain it acts in
+         * on every request, and Takaro refuses it without the header.
+         */
+        distributorKey?: string;
+        /** The Domain a `distributorKey` acts in, sent as `X-Takaro-Domain`. Required with it. */
+        domainId?: string;
     };
 }
 export declare class Client extends BaseApiClient<IApiClientConfig> {
@@ -12,6 +33,13 @@ export declare class Client extends BaseApiClient<IApiClientConfig> {
     constructor(config: IApiClientConfig);
     set username(username: string);
     set password(password: string);
+    /**
+     * @deprecated Exchanges `auth.username` / `auth.password` for a token through Keycloak's
+     * resource-owner password grant, which exists for the hosted browser login page. Scripted
+     * callers should pass `auth.apiKey` (a Takaro API Key) to the constructor instead — no `login()`
+     * round trip, no user credential to store. See `docs/api/authentication.md`. This method is not
+     * being removed and existing callers keep working unchanged.
+     */
     login(): Promise<string>;
     logout(): void;
     permissionCodesToInputs(permissions: string[]): Promise<{
@@ -22,6 +50,7 @@ export declare class Client extends BaseApiClient<IApiClientConfig> {
     get role(): RoleApi;
     get gameserver(): GameServerApi;
     get cronjob(): CronJobApi;
+    get execution(): ExecutionApi;
     get function(): FunctionApi;
     get module(): ModuleApi;
     get hook(): HookApi;
@@ -32,12 +61,18 @@ export declare class Client extends BaseApiClient<IApiClientConfig> {
     get discord(): DiscordApi;
     get event(): EventApi;
     get playerOnGameserver(): PlayerOnGameServerApi;
-    get stats(): StatsApi;
     get shopListing(): ShopListingApi;
     get shopCategory(): ShopCategoryApi;
+    get shopAction(): ShopActionApi;
     get shopOrder(): ShopOrderApi;
+    get storefrontConfig(): StorefrontConfigApi;
+    get storefrontDomain(): StorefrontDomainApi;
     get tracking(): TrackingApi;
     get entity(): EntityApi;
     get analytics(): AnalyticsApi;
+    get inviteLink(): InviteLinkApi;
+    get csmmImport(): CsmmImportApi;
+    get thread(): ThreadApi;
+    get apiKey(): ApiKeyApi;
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/lib/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,OAAO,EACP,OAAO,EACP,SAAS,EACT,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,SAAS,EACT,YAAY,EACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEtE,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,IAAI,EAAE;QACJ,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,qBAAa,MAAO,SAAQ,aAAa,CAAC,gBAAgB,CAAC;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;gBAChB,MAAM,EAAE,gBAAgB;IAQpC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAE5B;IAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAE5B;IAEY,KAAK;IAkBX,MAAM;IAIA,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE;;;IAc1D,IAAI,IAAI,YAQP;IAED,IAAI,IAAI,YAQP;IAED,IAAI,IAAI,YAQP;IAED,IAAI,UAAU,kBAQb;IAED,IAAI,OAAO,eAQV;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,MAAM,cAQT;IAED,IAAI,IAAI,YAQP;IAED,IAAI,OAAO,eAQV;IAED,IAAI,MAAM,cAQT;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,OAAO,eAQV;IAED,IAAI,KAAK,aAQR;IAED,IAAI,kBAAkB,0BAQrB;IAED,IAAI,KAAK,aAQR;IAED,IAAI,WAAW,mBAQd;IAED,IAAI,YAAY,oBAQf;IAED,IAAI,SAAS,iBAQZ;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,MAAM,cAQT;IAED,IAAI,SAAS,iBAQZ;CACF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,OAAO,EACP,SAAS,EACT,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,YAAY,EACZ,cAAc,EACd,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,SAAS,EACT,SAAS,EACT,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG3E,MAAM,WAAW,gBAAiB,SAAQ,oBAAoB;IAC5D,IAAI,EAAE;QACJ;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,6FAA6F;QAC7F,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uFAAuF;QACvF,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;WAIG;QACH,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,0FAA0F;QAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,qBAAa,MAAO,SAAQ,aAAa,CAAC,gBAAgB,CAAC;IAClD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;gBAChB,MAAM,EAAE,gBAAgB;IAyCpC,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAE5B;IAED,IAAI,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAE5B;IAED;;;;;;OAMG;IACU,KAAK;IAmBX,MAAM;IAIA,uBAAuB,CAAC,WAAW,EAAE,MAAM,EAAE;;;IAe1D,IAAI,IAAI,YAQP;IAED,IAAI,IAAI,YAQP;IAED,IAAI,IAAI,YAQP;IAED,IAAI,UAAU,kBAQb;IAED,IAAI,OAAO,eAQV;IAED,IAAI,SAAS,iBAQZ;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,MAAM,cAQT;IAED,IAAI,IAAI,YAQP;IAED,IAAI,OAAO,eAQV;IAED,IAAI,MAAM,cAQT;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,OAAO,eAQV;IAED,IAAI,KAAK,aAQR;IAED,IAAI,kBAAkB,0BAQrB;IAED,IAAI,WAAW,mBAQd;IAED,IAAI,YAAY,oBAQf;IAED,IAAI,UAAU,kBAQb;IAED,IAAI,SAAS,iBAQZ;IAED,IAAI,gBAAgB,wBAQnB;IAED,IAAI,gBAAgB,wBAQnB;IAED,IAAI,QAAQ,gBAQX;IAED,IAAI,MAAM,cAQT;IAED,IAAI,SAAS,iBAQZ;IAED,IAAI,UAAU,kBAQb;IAED,IAAI,UAAU,kBAQb;IAED,IAAI,MAAM,cAQT;IAED,IAAI,MAAM,cAQT;CACF"}

package/dist/lib/client.js

@@ -1,18 +1,57 @@
-import { CronJobApi, FunctionApi, GameServerApi, RoleApi, UserApi, ModuleApi, HookApi, PlayerApi, SettingsApi, CommandApi, VariableApi, DiscordApi, EventApi, PlayerOnGameServerApi, ItemApi, StatsApi, ShopOrderApi, ShopListingApi, ShopCategoryApi, TrackingApi, EntityApi, AnalyticsApi, } from '../generated/api.js';
+import { CronJobApi, ExecutionApi, FunctionApi, GameServerApi, RoleApi, UserApi, ModuleApi, HookApi, PlayerApi, SettingsApi, CommandApi, VariableApi, DiscordApi, EventApi, PlayerOnGameServerApi, ItemApi, ShopOrderApi, ShopListingApi, ShopCategoryApi, ShopActionApi, StorefrontConfigApi, StorefrontDomainApi, TrackingApi, EntityApi, AnalyticsApi, InviteLinkApi, ApiKeyApi, ThreadApi, CsmmImportApi, } from '../generated/api.js';
 import { BaseApiClient } from './baseClient.js';
+import { assertValidApiKey } from './apiKey.js';
 export class Client extends BaseApiClient {
     constructor(config) {
         super(config);
+        // `token` and `apiKey` are mutually exclusive — both write the same Authorization header, so
+        // setting both means `apiKey` wins. Nothing passes both, and a caller that did would see an
+        // obvious 401 on its first call. `distributorKey` writes the same header again, but it is
+        // rejected outright rather than allowed to win silently: it is the newest of the three, so a
+        // caller combining them has a bug, and the symptom would otherwise be an opaque 401 much later.
         if (this.config.auth.token) {
-            this.axios.defaults.headers.common['x-takaro-token'] = `${this.config.auth.token}`;
+            this.axios.defaults.headers.common.Authorization = `Bearer ${this.config.auth.token}`;
+        }
+        // Validated here rather than on first use: a mistyped key should fail where it was typed,
+        // not as an opaque 401 from some later call. The test is `!== undefined`, not truthiness: the
+        // commonest mistake of all is an unset `process.env.TAKARO_API_KEY`, and `''` or `null` must
+        // throw here rather than construct a client that quietly attaches no credential.
+        if (this.config.auth.apiKey !== undefined) {
+            assertValidApiKey(this.config.auth.apiKey);
+            this.axios.defaults.headers.common.Authorization = `Bearer ${this.config.auth.apiKey}`;
+        }
+        // White-label (GH #3839). `!== undefined` for the same reason the `apiKey` block gives: an unset
+        // env var must throw where it was typed, not construct a credential-less client.
+        if (this.config.auth.distributorKey !== undefined) {
+            if (this.config.auth.token !== undefined || this.config.auth.apiKey !== undefined) {
+                throw new Error('auth.distributorKey cannot be combined with auth.token or auth.apiKey');
+            }
+            if (!this.config.auth.domainId) {
+                throw new Error('auth.distributorKey requires auth.domainId: a Distributor key names the Domain it acts in');
+            }
+            // isValidApiKeyFormat matches the bare `takaro_` prefix plus the checksum, so a Distributor Key
+            // passes unchanged.
+            assertValidApiKey(this.config.auth.distributorKey);
+            this.axios.defaults.headers.common.Authorization = `Bearer ${this.config.auth.distributorKey}`;
+            this.setDomain(this.config.auth.domainId);
         }
     }
+    // The setters and login() below ARE the deprecated password mode's implementation, so they read
+    // the deprecated fields by construction; the rule would otherwise flag the feature for existing.
+    /* eslint-disable @typescript-eslint/no-deprecated */
     set username(username) {
         this.config.auth.username = username;
     }
     set password(password) {
         this.config.auth.password = password;
     }
+    /**
+     * @deprecated Exchanges `auth.username` / `auth.password` for a token through Keycloak's
+     * resource-owner password grant, which exists for the hosted browser login page. Scripted
+     * callers should pass `auth.apiKey` (a Takaro API Key) to the constructor instead — no `login()`
+     * round trip, no user credential to store. See `docs/api/authentication.md`. This method is not
+     * being removed and existing callers keep working unchanged.
+     */
     async login() {
         if (!this.config.auth.username || !this.config.auth.password) {
             throw new Error('No username or password provided');
@@ -23,11 +62,12 @@ export class Client extends BaseApiClient {
         });
         this.config.auth.token = loginRes.data.data.token;
         this.token = loginRes.data.data.token;
-        this.axios.defaults.headers.common['Authorization'] = `Bearer ${loginRes.data.data.token}`;
+        this.axios.defaults.headers.common.Authorization = `Bearer ${loginRes.data.data.token}`;
         return loginRes.data.data.token;
     }
+    /* eslint-enable @typescript-eslint/no-deprecated */
     logout() {
-        delete this.axios.defaults.headers.common['Authorization'];
+        delete this.axios.defaults.headers.common.Authorization;
     }
     async permissionCodesToInputs(permissions) {
         const permissionsRes = await this.role.roleControllerGetPermissions();
@@ -36,8 +76,9 @@ export class Client extends BaseApiClient {
             .map((p) => ({
             permissionId: p.id,
         }));
-        if (records.length !== permissions.length)
+        if (records.length !== permissions.length) {
             throw new Error(`Not all permissions were found: ${permissions.join(', ')}`);
+        }
         return records;
     }
     get item() {
@@ -65,6 +106,11 @@ export class Client extends BaseApiClient {
             isJsonMime: this.isJsonMime,
         }, '', this.axios);
     }
+    get execution() {
+        return new ExecutionApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
     get function() {
         return new FunctionApi({
             isJsonMime: this.isJsonMime,
@@ -115,11 +161,6 @@ export class Client extends BaseApiClient {
             isJsonMime: this.isJsonMime,
         }, '', this.axios);
     }
-    get stats() {
-        return new StatsApi({
-            isJsonMime: this.isJsonMime,
-        }, '', this.axios);
-    }
     get shopListing() {
         return new ShopListingApi({
             isJsonMime: this.isJsonMime,
@@ -130,11 +171,26 @@ export class Client extends BaseApiClient {
             isJsonMime: this.isJsonMime,
         }, '', this.axios);
     }
+    get shopAction() {
+        return new ShopActionApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
     get shopOrder() {
         return new ShopOrderApi({
             isJsonMime: this.isJsonMime,
         }, '', this.axios);
     }
+    get storefrontConfig() {
+        return new StorefrontConfigApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
+    get storefrontDomain() {
+        return new StorefrontDomainApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
     get tracking() {
         return new TrackingApi({
             isJsonMime: this.isJsonMime,
@@ -150,5 +206,25 @@ export class Client extends BaseApiClient {
             isJsonMime: this.isJsonMime,
         }, '', this.axios);
     }
+    get inviteLink() {
+        return new InviteLinkApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
+    get csmmImport() {
+        return new CsmmImportApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
+    get thread() {
+        return new ThreadApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
+    get apiKey() {
+        return new ApiKeyApi({
+            isJsonMime: this.isJsonMime,
+        }, '', this.axios);
+    }
 }
 //# sourceMappingURL=client.js.map

package/dist/lib/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,WAAW,EACX,aAAa,EACb,OAAO,EACP,OAAO,EACP,SAAS,EACT,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,SAAS,EACT,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAUtE,MAAM,OAAO,MAAO,SAAQ,aAA+B;IAEzD,YAAY,MAAwB;QAClC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEd,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,QAAgB;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvC,CAAC;IAED,IAAI,QAAQ,CAAC,QAAgB;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvC,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACnD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;YACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAEtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAE3F,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IAClC,CAAC;IAEM,MAAM;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC7D,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,WAAqB;QACxD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;aACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,YAAY,EAAE,CAAC,CAAC,EAAE;SACnB,CAAC,CAAC,CAAC;QAEN,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YACvC,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE/E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,aAAa,CACtB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,UAAU,CACnB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,UAAU,CACnB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,UAAU,CACnB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,QAAQ,CACjB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,qBAAqB,CAC9B;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,QAAQ,CACjB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,cAAc,CACvB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,eAAe,CACxB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,YAAY,CACrB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,YAAY,CACrB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,WAAW,EACX,aAAa,EACb,OAAO,EACP,OAAO,EACP,SAAS,EACT,OAAO,EACP,SAAS,EACT,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,YAAY,EACZ,cAAc,EACd,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,SAAS,EACT,YAAY,EACZ,aAAa,EACb,SAAS,EACT,SAAS,EACT,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAA6B,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AA+BhD,MAAM,OAAO,MAAO,SAAQ,aAA+B;IAEzD,YAAY,MAAwB;QAClC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEd,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,6FAA6F;QAC7F,gGAAgG;QAChG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACxF,CAAC;QAED,0FAA0F;QAC1F,8FAA8F;QAC9F,6FAA6F;QAC7F,iFAAiF;QACjF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1C,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACzF,CAAC;QAED,iGAAiG;QACjG,iFAAiF;QACjF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClF,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;YAC/G,CAAC;YACD,gGAAgG;YAChG,oBAAoB;YACpB,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAC/F,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,iGAAiG;IACjG,qDAAqD;IACrD,IAAI,QAAQ,CAAC,QAAgB;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvC,CAAC;IAED,IAAI,QAAQ,CAAC,QAAgB;QAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,KAAK;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACnD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;YACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;SACpC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAEtC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAExF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IAClC,CAAC;IACD,oDAAoD;IAE7C,MAAM;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;IAC1D,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,WAAqB;QACxD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;aACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,YAAY,EAAE,CAAC,CAAC,EAAE;SACnB,CAAC,CAAC,CAAC;QAEN,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,aAAa,CACtB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,UAAU,CACnB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,YAAY,CACrB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,OAAO,CAChB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,UAAU,CACnB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,UAAU,CACnB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,QAAQ,CACjB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,kBAAkB;QACpB,OAAO,IAAI,qBAAqB,CAC9B;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,cAAc,CACvB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,eAAe,CACxB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,aAAa,CACtB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,YAAY,CACrB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,mBAAmB,CAC5B;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,mBAAmB,CAC5B;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,WAAW,CACpB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,YAAY,CACrB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,aAAa,CACtB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,aAAa,CACtB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,SAAS,CAClB;YACE,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,EACD,EAAE,EACF,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;CACF"}

package/dist/lib/distributorClient.d.ts

@@ -0,0 +1,18 @@
+import { DistributorSelfServiceApi } from '../generated-management/api.js';
+import { BaseApiClient, type IBaseApiClientConfig } from './baseClient.js';
+export interface IDistributorApiClientConfig extends IBaseApiClientConfig {
+    auth: {
+        /** A Distributor Key secret (`takaro_dist_…`), sent as `Authorization: Bearer <key>`. */
+        distributorKey: string;
+    };
+}
+/**
+ * The client an integrating Distributor uses against the Management API (ADR 0023). Authenticated
+ * by a Distributor Key, never by the admin secret — those are two separate doors.
+ */
+export declare class DistributorClient extends BaseApiClient<IDistributorApiClientConfig> {
+    constructor(config: IDistributorApiClientConfig);
+    /** The Distributor's own self-service routes: who am I, and its key lifecycle. */
+    get self(): DistributorSelfServiceApi;
+}
+//# sourceMappingURL=distributorClient.d.ts.map

package/dist/lib/distributorClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"distributorClient.d.ts","sourceRoot":"","sources":["../../src/lib/distributorClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG3E,MAAM,WAAW,2BAA4B,SAAQ,oBAAoB;IACvE,IAAI,EAAE;QACJ,yFAAyF;QACzF,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,aAAa,CAAC,2BAA2B,CAAC;gBACnE,MAAM,EAAE,2BAA2B;IAS/C,kFAAkF;IAClF,IAAI,IAAI,8BAEP;CACF"}

package/dist/lib/distributorClient.js

@@ -0,0 +1,21 @@
+import { DistributorSelfServiceApi } from '../generated-management/api.js';
+import { BaseApiClient } from './baseClient.js';
+import { assertValidApiKey } from './apiKey.js';
+/**
+ * The client an integrating Distributor uses against the Management API (ADR 0023). Authenticated
+ * by a Distributor Key, never by the admin secret — those are two separate doors.
+ */
+export class DistributorClient extends BaseApiClient {
+    constructor(config) {
+        super(config);
+        // Validated where it was typed, not as an opaque 401 later. isValidApiKeyFormat matches the
+        // bare `takaro_` prefix plus the checksum, so a Distributor Key passes unchanged.
+        assertValidApiKey(config.auth.distributorKey);
+        this.axios.defaults.headers.common.Authorization = `Bearer ${config.auth.distributorKey}`;
+    }
+    /** The Distributor's own self-service routes: who am I, and its key lifecycle. */
+    get self() {
+        return new DistributorSelfServiceApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+}
+//# sourceMappingURL=distributorClient.js.map

package/dist/lib/distributorClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"distributorClient.js","sourceRoot":"","sources":["../../src/lib/distributorClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAA6B,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAShD;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,aAA0C;IAC/E,YAAY,MAAmC;QAC7C,KAAK,CAAC,MAAM,CAAC,CAAC;QAEd,4FAA4F;QAC5F,kFAAkF;QAClF,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,GAAG,UAAU,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;IAC5F,CAAC;IAED,kFAAkF;IAClF,IAAI,IAAI;QACN,OAAO,IAAI,yBAAyB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;CACF"}

package/dist/lib/staffClient.d.ts

@@ -0,0 +1,23 @@
+import { DistributorApi, DomainApi, PlatformStatsApi, StaffMeApi, StaffPlanApi, StaffTakaroAiApi } from '../generated-management/api.js';
+import { BaseApiClient, type IBaseApiClientConfig } from './baseClient.js';
+/**
+ * The client the Staff admin dashboard uses against the Management API (ADR 0023, ADR 0026).
+ *
+ * Authenticated by the Staff session cookie and nothing else — no Authorization header, no
+ * admin secret, no Distributor Key. `withCredentials` is already on in BaseApiClient, so the
+ * cookie rides along on same-origin requests; the dashboard and the API share one origin
+ * (ADR 0026 decision 1), which is what makes a cookie enough.
+ */
+export declare class StaffClient extends BaseApiClient<IBaseApiClientConfig> {
+    /** Who this Staff session belongs to, and at which tier. */
+    get staff(): StaffMeApi;
+    /** Platform-wide counts: Domains by state, by backing, per Distributor, created per week. */
+    get stats(): PlatformStatsApi;
+    get domains(): DomainApi;
+    get distributors(): DistributorApi;
+    /** The Plan catalogue, so a Domain's `planId` can be shown as the Plan's name. */
+    get plans(): StaffPlanApi;
+    /** Takaro AI staff controls: global multiplier, Domain override, spend. */
+    get takaroAi(): StaffTakaroAiApi;
+}
+//# sourceMappingURL=staffClient.d.ts.map

package/dist/lib/staffClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"staffClient.d.ts","sourceRoot":"","sources":["../../src/lib/staffClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE3E;;;;;;;GAOG;AACH,qBAAa,WAAY,SAAQ,aAAa,CAAC,oBAAoB,CAAC;IAClE,4DAA4D;IAC5D,IAAI,KAAK,eAER;IAED,6FAA6F;IAC7F,IAAI,KAAK,qBAER;IAED,IAAI,OAAO,cAEV;IAED,IAAI,YAAY,mBAEf;IAED,kFAAkF;IAClF,IAAI,KAAK,iBAER;IAED,2EAA2E;IAC3E,IAAI,QAAQ,qBAEX;CACF"}

package/dist/lib/staffClient.js

@@ -0,0 +1,35 @@
+import { DistributorApi, DomainApi, PlatformStatsApi, StaffMeApi, StaffPlanApi, StaffTakaroAiApi, } from '../generated-management/api.js';
+import { BaseApiClient } from './baseClient.js';
+/**
+ * The client the Staff admin dashboard uses against the Management API (ADR 0023, ADR 0026).
+ *
+ * Authenticated by the Staff session cookie and nothing else — no Authorization header, no
+ * admin secret, no Distributor Key. `withCredentials` is already on in BaseApiClient, so the
+ * cookie rides along on same-origin requests; the dashboard and the API share one origin
+ * (ADR 0026 decision 1), which is what makes a cookie enough.
+ */
+export class StaffClient extends BaseApiClient {
+    /** Who this Staff session belongs to, and at which tier. */
+    get staff() {
+        return new StaffMeApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+    /** Platform-wide counts: Domains by state, by backing, per Distributor, created per week. */
+    get stats() {
+        return new PlatformStatsApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+    get domains() {
+        return new DomainApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+    get distributors() {
+        return new DistributorApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+    /** The Plan catalogue, so a Domain's `planId` can be shown as the Plan's name. */
+    get plans() {
+        return new StaffPlanApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+    /** Takaro AI staff controls: global multiplier, Domain override, spend. */
+    get takaroAi() {
+        return new StaffTakaroAiApi({ isJsonMime: this.isJsonMime }, '', this.axios);
+    }
+}
+//# sourceMappingURL=staffClient.js.map

package/dist/lib/staffClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staffClient.js","sourceRoot":"","sources":["../../src/lib/staffClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,gBAAgB,GACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAA6B,MAAM,iBAAiB,CAAC;AAE3E;;;;;;;GAOG;AACH,MAAM,OAAO,WAAY,SAAQ,aAAmC;IAClE,4DAA4D;IAC5D,IAAI,KAAK;QACP,OAAO,IAAI,UAAU,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,6FAA6F;IAC7F,IAAI,KAAK;QACP,OAAO,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,cAAc,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC;IAED,kFAAkF;IAClF,IAAI,KAAK;QACP,OAAO,IAAI,YAAY,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,2EAA2E;IAC3E,IAAI,QAAQ;QACV,OAAO,IAAI,gBAAgB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;CACF"}

package/dist/main.d.ts

@@ -1,8 +1,15 @@
-import { AxiosResponse } from 'axios';
+import { type AxiosResponse } from 'axios';
 export { AxiosResponse } from 'axios';
 export { isAxiosError } from 'axios';
 export { AdminClient } from './lib/adminClient.js';
 export { Client } from './lib/client.js';
+export { DistributorClient } from './lib/distributorClient.js';
+export type { IDistributorApiClientConfig } from './lib/distributorClient.js';
+export { StaffClient } from './lib/staffClient.js';
+export { isValidApiKeyFormat, assertValidApiKey } from './lib/apiKey.js';
 export type ITakaroAPIAxiosResponse<T> = AxiosResponse<T>;
 export * from './generated/api.js';
+export { DistributorApi, DistributorSelfServiceApi, DomainApi, PlatformStatsApi, StaffAuthApi, StaffMeApi, StaffMeOutputDTOTierEnum, StaffPlanApi, StaffTakaroAiApi, TakaroAiDomainOutputDTOOverrideStateEnum, DomainStateCountDTOStateEnum, DomainSearchInputAllowedFiltersStateEnum, DistributorKeyOutputDTOStatusEnum, } from './generated-management/api.js';
+export type { DomainBackingCountsDTO, DomainStateCountDTO, DomainsPerDistributorDTO, DomainsPerWeekDTO, PlatformStatsOutputDTO, TakaroAiDomainOutputDTO, TakaroAiPlatformOutputDTO, TakaroAiStaffChangeOutputDTO, StaffMeOutputDTO, DomainSearchInputDTO, DomainSearchInputAllowedFilters, DomainSearchInputAllowedSearch, ManagementDomainOutputArrayDTOAPI, DomainApiKeyCreateInputDTO, DomainAttachResultDTO, DistributorSearchInputDTO, DistributorOutputArrayDTOAPI, DistributorOutputDTOAPI, DistributorKeyOutputDTO, DistributorKeyOutputArrayDTOAPI, DistributorKeyCreateInputDTO, DistributorKeyCreateResultDTO, DistributorKeySearchInputDTO, PlanOutputDTO, PlanOutputArrayDTOAPI, PlanLimitsDTO, PlanPriceDTO, StaffRoleOutputDTO, StaffRoleOutputArrayDTOAPI, } from './generated-management/api.js';
+export type { DistributorOutputDTO as StaffDistributorOutputDTO, DistributorCreateInputDTO as StaffDistributorCreateInputDTO, DistributorUpdateInputDTO as StaffDistributorUpdateInputDTO, } from './generated-management/api.js';
 //# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;AAC1D,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,OAAO,CAAC;AAE3C,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,YAAY,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;AAC1D,cAAc,oBAAoB,CAAC;AAMnC,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,wCAAwC,EACxC,4BAA4B,EAC5B,wCAAwC,EACxC,iCAAiC,GAClC,MAAM,+BAA+B,CAAC;AAIvC,YAAY,EACV,sBAAsB,EACtB,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,EAC/B,8BAA8B,EAC9B,iCAAiC,EACjC,0BAA0B,EAC1B,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,+BAA+B,EAC/B,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,EAC5B,aAAa,EACb,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,+BAA+B,CAAC;AAavC,YAAY,EACV,oBAAoB,IAAI,yBAAyB,EACjD,yBAAyB,IAAI,8BAA8B,EAC3D,yBAAyB,IAAI,8BAA8B,GAC5D,MAAM,+BAA+B,CAAC"}

package/dist/main.js

@@ -1,5 +1,13 @@
 export { isAxiosError } from 'axios';
 export { AdminClient } from './lib/adminClient.js';
 export { Client } from './lib/client.js';
+export { DistributorClient } from './lib/distributorClient.js';
+export { StaffClient } from './lib/staffClient.js';
+export { isValidApiKeyFormat, assertValidApiKey } from './lib/apiKey.js';
 export * from './generated/api.js';
+// The Domain lifecycle routes live on the Management API and so on its own generated tree
+// (ADR 0023). Re-exported by name rather than `export *`: both trees carry every shared DTO,
+// so a star-export would be silently ambiguous — and a name that ever exists in both makes
+// TypeScript fail the build, which is the drift gate we want.
+export { DistributorApi, DistributorSelfServiceApi, DomainApi, PlatformStatsApi, StaffAuthApi, StaffMeApi, StaffMeOutputDTOTierEnum, StaffPlanApi, StaffTakaroAiApi, TakaroAiDomainOutputDTOOverrideStateEnum, DomainStateCountDTOStateEnum, DomainSearchInputAllowedFiltersStateEnum, DistributorKeyOutputDTOStatusEnum, } from './generated-management/api.js';
 //# sourceMappingURL=main.js.map

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGzC,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGzE,cAAc,oBAAoB,CAAC;AAEnC,0FAA0F;AAC1F,6FAA6F;AAC7F,2FAA2F;AAC3F,8DAA8D;AAC9D,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,SAAS,EACT,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,YAAY,EACZ,gBAAgB,EAChB,wCAAwC,EACxC,4BAA4B,EAC5B,wCAAwC,EACxC,iCAAiC,GAClC,MAAM,+BAA+B,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@takaro/apiclient",
   "description": "API client for Takaro",
-  "version": "0.0.0-dev.e253942",
+  "version": "0.0.0-dev.e2f5af7",
   "author": "",
   "dependencies": {
     "axios": "1.7.7"
@@ -13,11 +13,19 @@
     "registry": "https://registry.npmjs.org",
     "access": "public"
   },
+  "type": "module",
+  "types": "dist/main.d.ts",
+  "devDependencies": {
+    "@takaro/test": "0.7.2",
+    "@types/node": "24.13.3",
+    "typescript": "5.5.4"
+  },
+  "files": [
+    "dist"
+  ],
   "scripts": {
     "build": "tsc -p ./tsconfig.build.json",
-    "generate": "../../scripts/generate-api-client.sh",
+    "generate": "node ../../scripts/dev/index.mjs generate-api-client",
     "start:dev": ":"
-  },
-  "type": "module",
-  "types": "dist/main.d.ts"
-}
+  }
+}

package/src/__tests__/main.integration.test.ts

@@ -1,39 +0,0 @@
-import { AdminClient } from '../main.js';
-import { expect, integrationConfig } from '@takaro/test';
-import { describe, it } from 'node:test';
-
-const TEST_DOMAIN_NAME = 'apiClient-test';
-
-describe('API client', () => {
-  const adminClient = new AdminClient({
-    url: integrationConfig.get('host'),
-    auth: {
-      clientSecret: integrationConfig.get('auth.adminClientSecret'),
-    },
-  });
-
-  describe('Meta controller', () => {
-    it('should get health', async () => {
-      const health = await adminClient.meta.metaGetHealth();
-      expect(health.data.healthy).to.be.true;
-    });
-  });
-
-  describe('Domain controller', () => {
-    it('Can create and delete a domain', async () => {
-      const domain = await adminClient.domain.domainControllerCreate({
-        name: TEST_DOMAIN_NAME,
-      });
-      expect(domain.data.data.createdDomain.name).to.equal(TEST_DOMAIN_NAME);
-
-      const domainsRes = await adminClient.domain.domainControllerSearch({
-        filters: { name: [TEST_DOMAIN_NAME] },
-      });
-
-      expect(domainsRes.data.data).to.have.lengthOf(1);
-      expect(domainsRes.data.data[0].name).to.equal(TEST_DOMAIN_NAME);
-
-      await adminClient.domain.domainControllerRemove(domain.data.data.createdDomain.id);
-    });
-  });
-});

package/src/generated/.openapi-generator-ignore

@@ -1,23 +0,0 @@
-# OpenAPI Generator Ignore
-# Generated by openapi-generator https://github.com/openapitools/openapi-generator
-
-# Use this file to prevent files from being overwritten by the generator.
-# The patterns follow closely to .gitignore or .dockerignore.
-
-# As an example, the C# client generator defines ApiClient.cs.
-# You can make changes and tell OpenAPI Generator to ignore just this file by uncommenting the following line:
-#ApiClient.cs
-
-# You can match any string of characters against a directory, file or extension with a single asterisk (*):
-#foo/*/qux
-# The above matches foo/bar/qux and foo/baz/qux, but not foo/bar/baz/qux
-
-# You can recursively match patterns against a directory, file or extension with a double asterisk (**):
-#foo/**/qux
-# This matches foo/bar/qux, foo/baz/qux, and foo/bar/baz/qux
-
-# You can also negate patterns with an exclamation (!).
-# For example, you can ignore all files in a docs folder with the file extension .md:
-#docs/*.md
-# Then explicitly reverse the ignore rule for a single file:
-#!docs/README.md