@truenas/api-client 8.0.0 → 9.0.1

package/dist/{chunk-RH7UXULE.js → chunk-K7BL6J3Z.js}

@@ -1,4 +1,4 @@
-import { BehaviorSubject, filter, switchMap, catchError, EMPTY, tap, map, finalize, take, Subject, distinctUntilChanged, of, startWith, concat, throwError, retry, race, timer, skip, takeUntil, shareReplay, interval, Observable, timeout, TimeoutError, toArray, from, defer, firstValueFrom, share, merge, takeWhile } from 'rxjs';
+import { BehaviorSubject, filter, switchMap, catchError, EMPTY, tap, map, finalize, take, Subject, distinctUntilChanged, of, startWith, concat, throwError, retry, race, timer, skip, takeUntil, shareReplay, interval, Observable, timeout, TimeoutError, toArray, from, defer, firstValueFrom, share, ignoreElements, merge, takeWhile, skipWhile, pairwise } from 'rxjs';
 import { webSocket } from 'rxjs/webSocket';
 import { map as map$1, catchError as catchError$1, shareReplay as shareReplay$1 } from 'rxjs/operators';
 
@@ -28,6 +28,34 @@ function getApiErrorMessage(error, fallback = "API call failed") {
   return fallback;
 }
 
+// src/errors/api.errors.ts
+var TrueNasApiError = class _TrueNasApiError extends Error {
+  constructor(frame, method) {
+    super(getApiErrorMessage(frame, "API call failed"));
+    this.frame = frame;
+    this.method = method;
+    this.name = "TrueNasApiError";
+    Object.setPrototypeOf(this, _TrueNasApiError.prototype);
+  }
+  /** The JSON-RPC code: `-32001` for a refused call, others for a malformed one. */
+  get code() {
+    return this.frame.code;
+  }
+  /**
+   * The TrueNAS payload — `errname`, `reason`, `extra`, `trace`.
+   *
+   * `undefined` for the codes middleware sends without one, such as
+   * `-32601 "Method does not exist"`.
+   */
+  get data() {
+    return this.frame.data;
+  }
+  /** `data.errname`, e.g. `EINVAL`, or `undefined` when there is no payload. */
+  get errname() {
+    return this.frame.data?.errname;
+  }
+};
+
 // src/types/job.type.ts
 var JobState = /* @__PURE__ */ ((JobState2) => {
   JobState2["Pending"] = "PENDING";
@@ -1646,9 +1674,9 @@ __export(v25_10_5_exports, {
   ZfsTierRewriteJobEntryStatusInput: () => ZfsTierRewriteJobEntryStatusInput
 });
 
-// src/generated/v26_0_0/index.ts
-var v26_0_0_exports = {};
-__export(v26_0_0_exports, {
+// src/generated/v27_0_0/index.ts
+var v27_0_0_exports = {};
+__export(v27_0_0_exports, {
   ACLTemplateEntryAcltypeInput: () => ACLTemplateEntryAcltypeInput,
   Access: () => Access,
   Aclmode: () => Aclmode,
@@ -1781,7 +1809,7 @@ __export(v26_0_0_exports, {
   ZpoolScrubRunAction: () => ZpoolScrubRunAction
 });
 
-// src/generated/v26_0_0/api-types.ts
+// src/generated/v27_0_0/api-types.ts
 var Access = {
   Readonly: "READONLY",
   Writeonly: "WRITEONLY",
@@ -1903,9 +1931,9 @@ var ZpoolScrubRunAction = {
   Cancel: "CANCEL"
 };
 
-// src/generated/v27_0_0/index.ts
-var v27_0_0_exports = {};
-__export(v27_0_0_exports, {
+// src/generated/v28_0_0/index.ts
+var v28_0_0_exports = {};
+__export(v28_0_0_exports, {
   ACLTemplateEntryAcltypeInput: () => ACLTemplateEntryAcltypeInput,
   Access: () => Access,
   Aclmode: () => Aclmode,
@@ -1928,7 +1956,7 @@ __export(v27_0_0_exports, {
   CloudTaskAttributesEncryption: () => CloudTaskAttributesEncryption,
   CloudTaskAttributesEncryptionInput: () => CloudTaskAttributesEncryptionInput,
   Code: () => Code,
-  Compression: () => Compression,
+  Compression: () => Compression2,
   ContainerNICDeviceType: () => ContainerNICDeviceType,
   ContainerNICDeviceTypeInput: () => ContainerNICDeviceTypeInput,
   ContainerStatusState: () => ContainerStatusState,
@@ -2006,6 +2034,7 @@ __export(v27_0_0_exports, {
   Snapdir: () => Snapdir,
   SourceInput: () => SourceInput,
   SourceValueType: () => SourceValueType,
+  SourceValueTypeInput: () => SourceValueTypeInput,
   SupportNewTicketCommunityTypeInput: () => SupportNewTicketCommunityTypeInput,
   Sync: () => Sync,
   SyslogServerTransport: () => SyslogServerTransport,
@@ -2039,7 +2068,67 @@ __export(v27_0_0_exports, {
   ZpoolScrubRunAction: () => ZpoolScrubRunAction
 });
 
-// src/generated/v27_0_0/api-types.ts
+// src/generated/v28_0_0/api-types.ts
+var Compression2 = {
+  On: "ON",
+  Off: "OFF",
+  Lz4: "LZ4",
+  Gzip: "GZIP",
+  Gzip1: "GZIP-1",
+  Gzip2: "GZIP-2",
+  Gzip3: "GZIP-3",
+  Gzip4: "GZIP-4",
+  Gzip5: "GZIP-5",
+  Gzip6: "GZIP-6",
+  Gzip7: "GZIP-7",
+  Gzip8: "GZIP-8",
+  Gzip9: "GZIP-9",
+  Zstd: "ZSTD",
+  ZstdFast: "ZSTD-FAST",
+  Zle: "ZLE",
+  Lzjb: "LZJB",
+  Zstd1: "ZSTD-1",
+  Zstd2: "ZSTD-2",
+  Zstd3: "ZSTD-3",
+  Zstd4: "ZSTD-4",
+  Zstd5: "ZSTD-5",
+  Zstd6: "ZSTD-6",
+  Zstd7: "ZSTD-7",
+  Zstd8: "ZSTD-8",
+  Zstd9: "ZSTD-9",
+  Zstd10: "ZSTD-10",
+  Zstd11: "ZSTD-11",
+  Zstd12: "ZSTD-12",
+  Zstd13: "ZSTD-13",
+  Zstd14: "ZSTD-14",
+  Zstd15: "ZSTD-15",
+  Zstd16: "ZSTD-16",
+  Zstd17: "ZSTD-17",
+  Zstd18: "ZSTD-18",
+  Zstd19: "ZSTD-19",
+  ZstdFast1: "ZSTD-FAST-1",
+  ZstdFast2: "ZSTD-FAST-2",
+  ZstdFast3: "ZSTD-FAST-3",
+  ZstdFast4: "ZSTD-FAST-4",
+  ZstdFast5: "ZSTD-FAST-5",
+  ZstdFast6: "ZSTD-FAST-6",
+  ZstdFast7: "ZSTD-FAST-7",
+  ZstdFast8: "ZSTD-FAST-8",
+  ZstdFast9: "ZSTD-FAST-9",
+  ZstdFast10: "ZSTD-FAST-10",
+  ZstdFast20: "ZSTD-FAST-20",
+  ZstdFast30: "ZSTD-FAST-30",
+  ZstdFast40: "ZSTD-FAST-40",
+  ZstdFast50: "ZSTD-FAST-50",
+  ZstdFast60: "ZSTD-FAST-60",
+  ZstdFast70: "ZSTD-FAST-70",
+  ZstdFast80: "ZSTD-FAST-80",
+  ZstdFast90: "ZSTD-FAST-90",
+  ZstdFast100: "ZSTD-FAST-100",
+  ZstdFast500: "ZSTD-FAST-500",
+  ZstdFast1000: "ZSTD-FAST-1000",
+  Inherit: "INHERIT"
+};
 var Service2 = {
   Middleware: "MIDDLEWARE",
   S3: "S3",
@@ -2047,6 +2136,14 @@ var Service2 = {
   Sudo: "SUDO",
   System: "SYSTEM"
 };
+var SourceValueTypeInput = {
+  None: "NONE",
+  Default: "DEFAULT",
+  Temporary: "TEMPORARY",
+  Local: "LOCAL",
+  Inherited: "INHERITED",
+  Received: "RECEIVED"
+};
 var VMWareMatchDatastoresWithDatasetsResultFilesystemTypeInput = {
   Filesystem: "FILESYSTEM",
   Volume: "VOLUME"
@@ -2060,8 +2157,8 @@ var SUPPORTED_API_VERSIONS = [
   "v25.10.3",
   "v25.10.4",
   "v25.10.5",
-  "v26.0.0",
-  "v27.0.0"
+  "v27.0.0",
+  "v28.0.0"
 ];
 
 // src/types/api-version.type.ts
@@ -2069,6 +2166,7 @@ var VersionCompatibility = /* @__PURE__ */ ((VersionCompatibility2) => {
   VersionCompatibility2["Compatible"] = "compatible";
   VersionCompatibility2["TooOld"] = "too-old";
   VersionCompatibility2["TooNew"] = "too-new";
+  VersionCompatibility2["Unsupported"] = "unsupported";
   VersionCompatibility2["Invalid"] = "invalid";
   return VersionCompatibility2;
 })(VersionCompatibility || {});
@@ -2152,6 +2250,19 @@ function createJsonRpcMessage(method, params) {
   };
 }
 
+// src/utils/subscription.utils.ts
+function subscriptionName(event, params) {
+  return params === void 0 ? event : `${event}:${JSON.stringify(params, sortKeys)}`;
+}
+function sortKeys(_key, value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return value;
+  }
+  return Object.fromEntries(
+    Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)
+  );
+}
+
 // src/api/truenas-api.ts
 var EVENT_KINDS = ["added", "changed", "removed"];
 var TrueNasApi = class {
@@ -2161,8 +2272,13 @@ var TrueNasApi = class {
     /**
      * Stream of job events from websocket.
      * JSON-RPC 2.0 events have structure: { method: 'collection_update', params: { collection, fields, ... } }
+     *
+     * Reads `messages()` when first subscribed, not when this is built, as every
+     * other verb does. A consumer that wraps the connection's `messages()` after
+     * the client is created — a debug panel mixing in mocked answers — is
+     * otherwise heard by `call` and `events` but not by job tracking.
      */
-    this.jobEvents = this.connection.messages().pipe(
+    this.jobEvents = defer(() => this.connection.messages()).pipe(
       filter(
         (res) => res.method === "collection_update" && res.params?.collection === "core.get_jobs"
       ),
@@ -2171,11 +2287,20 @@ var TrueNasApi = class {
       share()
     );
     /**
-     * One shared stream per subscribed event name — see {@link events}.
-     * Keyed by name rather than by caller, because the subscription it stands
-     * for lives on the server and is per socket, not per caller.
+     * One shared stream per subscription — see {@link events}. Keyed by the
+     * name *with* its arguments: a tail of one file is not a tail of another.
      */
     this.eventStreams = /* @__PURE__ */ new Map();
+    /**
+     * Releases awaiting their `core.unsubscribe` reply, per name. Middleware
+     * sends a source's release notice (`terminate`) before that reply, and a
+     * notice names only the collection; so an error-free one arriving inside
+     * that window belongs to the release, not to a later subscription. One per
+     * window, which closes on the reply whether or not a notice came.
+     */
+    this.releasing = /* @__PURE__ */ new Map();
+    /** The live subscription per name, told when the server ends it. */
+    this.serverEnds = /* @__PURE__ */ new Map();
     this.initializeJobEventsSubscription();
   }
   /**
@@ -2213,11 +2338,7 @@ var TrueNasApi = class {
         withId(messageId),
         map((msg) => {
           if (msg.error) {
-            const errorMessage = getApiErrorMessage(
-              msg.error,
-              "API call failed"
-            );
-            throw new Error(errorMessage);
+            throw new TrueNasApiError(msg.error, method);
           }
           return msg.result;
         }),
@@ -2270,21 +2391,32 @@ var TrueNasApi = class {
    *
    * The id comes from the first job event whose `message_ids` carries this
    * request's id, not from the response: what a job method returns on the wire
-   * differs by version (v25.10 answers with the id, v26 with `null`), while
+   * differs by version (v25.10 answers with the id, v27 with `null`), while
    * the event correlation holds for both.
    *
-   * @returns Observable that emits the job ID when received from websocket events
+   * @returns the job's id; errors with a {@link TrueNasApiError} if the method is refused before a job starts
    */
   callAndGetJobId(method, ...params) {
     return defer(() => {
       const message = createJsonRpcMessage(method, params[0]);
-      const seen = this.jobEvents.pipe(
+      const started = this.jobEvents.pipe(
         filter((job) => job.message_ids?.includes(message.id ?? "") ?? false),
-        map((job) => job.id),
-        take(1)
+        map((job) => job.id)
+      );
+      const refused = this.connection.messages().pipe(
+        withId(message.id ?? ""),
+        map((reply) => {
+          if (reply.error) {
+            throw new TrueNasApiError(reply.error, method);
+          }
+        }),
+        ignoreElements()
       );
       const sending = this.connection.send(message);
-      return seen.pipe(finalize(() => sending.unsubscribe()));
+      return merge(started, refused).pipe(
+        take(1),
+        finalize(() => sending.unsubscribe())
+      );
     });
   }
   /**
@@ -2303,41 +2435,118 @@ var TrueNasApi = class {
       switchMap((jobId) => this.trackJob(jobId))
     );
   }
-  /**
-   * Subscribe to a collection and emit its changes, discriminated on `msg`.
-   *
-   * ```typescript
-   * api.events('app.query').subscribe(event => {
-   *   if (event.msg === 'removed') return drop(event.id);
-   *   render(event.fields);          // only reachable once narrowed
-   * });
-   * ```
-   *
-   * Narrow before reading `fields`: `removed` events almost never carry it.
-   * Sources taking subscribe-time arguments are excluded; see {@link EventName}.
-   */
-  events(event) {
-    const existing = this.eventStreams.get(event);
+  events(event, params) {
+    const name = subscriptionName(event, params);
+    this.listenForEndNotices();
+    const existing = this.eventStreams.get(name);
     if (existing) return existing;
+    const forget = () => {
+      if (this.eventStreams.get(name) === stream) this.eventStreams.delete(name);
+    };
     const stream = defer(() => {
-      const resubscribe = this.authenticated.pipe(distinctUntilChanged(), filter(Boolean)).subscribe(() => {
-        this.connection.send(createJsonRpcMessage("core.subscribe", [event]));
+      let subscriptionId;
+      let released = false;
+      let serverEnded = false;
+      const ended = new Subject();
+      this.serverEnds.set(name, ended);
+      const subscribing = this.authenticated.pipe(distinctUntilChanged()).subscribe((isAuthenticated) => {
+        subscriptionId = void 0;
+        if (!isAuthenticated) return;
+        const request = createJsonRpcMessage("core.subscribe", [name]);
+        this.connection.messages().pipe(
+          withId(request.id ?? ""),
+          take(1),
+          takeUntil(this.authenticated.pipe(filter((isUp) => !isUp)))
+        ).subscribe((reply) => {
+          if (typeof reply.result !== "string") return;
+          if (!released) subscriptionId = reply.result;
+          else if (!serverEnded) this.unsubscribe(name, reply.result);
+        });
+        this.connection.send(request);
       });
-      return this.connection.messages().pipe(
-        filter((res) => res.method === "collection_update"),
-        map((res) => res.params),
+      const updates = this.connection.messages().pipe(
         filter(
-          (params) => params?.collection === event && EVENT_KINDS.includes(params.msg)
+          (res) => res.method === "collection_update" && res.params?.collection === name
         ),
+        map((res) => res.params),
+        filter((params2) => EVENT_KINDS.includes(params2.msg)),
+        // `merge` below ends only when both inputs do. The connection closing
+        // for good ends this one; `ended` has to follow, or the stream never
+        // completes and nothing tears down the resubscription.
+        finalize(() => ended.complete())
+      );
+      const end = ended.pipe(
+        map((notice) => {
+          subscriptionId = void 0;
+          serverEnded = true;
+          if (notice.error) {
+            throw new TrueNasApiError(
+              { code: -32001, message: notice.error.reason, data: notice.error },
+              name
+            );
+          }
+        })
+      );
+      return merge(updates, end).pipe(
+        takeWhile((change) => change !== void 0),
         // `collection` is the subscription the caller already named; what is
         // left is exactly the payload the directory declares, plus its tag.
         map(({ collection, ...change }) => change),
-        finalize(() => resubscribe.unsubscribe())
+        // An ended stream stays ended (below), so the next `events()` call for
+        // this name needs a new one.
+        tap({ complete: forget, error: forget }),
+        finalize(() => {
+          released = true;
+          subscribing.unsubscribe();
+          if (this.serverEnds.get(name) === ended) this.serverEnds.delete(name);
+          if (subscriptionId) this.unsubscribe(name, subscriptionId);
+        })
       );
-    }).pipe(share({ resetOnRefCountZero: false, resetOnComplete: false }));
-    this.eventStreams.set(event, stream);
+    }).pipe(
+      share({
+        resetOnRefCountZero: true,
+        resetOnComplete: false,
+        resetOnError: false
+      })
+    );
+    this.eventStreams.set(name, stream);
     return stream;
   }
+  /**
+   * Release a subscription by the id `core.subscribe` answered with, holding
+   * its notice window (see {@link releasing}) open until the reply.
+   */
+  unsubscribe(name, subscriptionId) {
+    const release = { noticed: false };
+    this.releasing.set(name, [...this.releasing.get(name) ?? [], release]);
+    const request = createJsonRpcMessage("core.unsubscribe", [subscriptionId]);
+    this.connection.messages().pipe(
+      withId(request.id ?? ""),
+      take(1),
+      takeUntil(this.authenticated.pipe(filter((isUp) => !isUp))),
+      finalize(() => {
+        const open = (this.releasing.get(name) ?? []).filter((r) => r !== release);
+        if (open.length) this.releasing.set(name, open);
+        else this.releasing.delete(name);
+      })
+    ).subscribe();
+    this.connection.send(request);
+  }
+  /**
+   * Route each `notify_unsubscribed` once: an error-free one inside an open
+   * release window is that release's, anything else ends the name's live
+   * subscription. Installed on the first `events()` call, before any stream
+   * listens.
+   */
+  listenForEndNotices() {
+    if (this.endNotices) return;
+    this.endNotices = this.connection.messages().pipe(filter((res) => res.method === "notify_unsubscribed")).subscribe((res) => {
+      const notice = res.params;
+      const release = notice.error ? void 0 : this.releasing.get(notice.collection)?.find((r) => !r.noticed);
+      if (release) release.noticed = true;
+      else this.serverEnds.get(notice.collection)?.next(notice);
+    });
+  }
   /**
    * Convenience wrapper for auth.generate_token API call.
    *
@@ -2370,12 +2579,10 @@ var TrueNasApi = class {
       filter((job) => job.id === jobId),
       map((job) => job)
     );
-    const read$ = this.dispatch("core.get_jobs", [
-      [["id", "=", jobId]]
-    ]).pipe(
-      map((jobs) => jobs[0]),
-      share()
+    const readJob = () => this.dispatch("core.get_jobs", [[["id", "=", jobId]]]).pipe(
+      map((jobs) => jobs[0])
     );
+    const read$ = readJob().pipe(share());
     const missing$ = read$.pipe(
       filter((job) => job === void 0),
       takeUntil(updates$)
@@ -2384,10 +2591,29 @@ var TrueNasApi = class {
       filter((job) => job !== void 0),
       takeUntil(updates$)
     );
-    return merge(snapshot$, updates$).pipe(
+    const reread$ = this.authenticated.pipe(
+      distinctUntilChanged(),
+      skipWhile((isUp) => !isUp),
+      pairwise(),
+      filter(([wasUp, isUp]) => !wasUp && isUp),
+      switchMap(
+        () => readJob().pipe(
+          // Stale once events flow again, as the opening read is; they carry the end.
+          takeUntil(updates$),
+          // A failed read waits for the next reconnect.
+          catchError(() => EMPTY)
+        )
+      ),
+      share()
+    );
+    const gone$ = reread$.pipe(filter((job) => job === void 0));
+    const rereadJob$ = reread$.pipe(
+      filter((job) => job !== void 0)
+    );
+    return merge(snapshot$, updates$, rereadJob$).pipe(
       takeWhile((job) => !isJobFinished(job), true),
       // Include the final state
-      takeUntil(missing$)
+      takeUntil(merge(missing$, gone$))
     );
   }
   /**
@@ -2427,7 +2653,7 @@ var apiVersionConfig = {
    * not write its client, so the ceiling is the newest version in
    * `CLIENT_BY_VERSION_KEY`. A factory test asserts the two agree.
    */
-  MAX_SUPPORTED_VERSION: "v27.0.0",
+  MAX_SUPPORTED_VERSION: "v28.0.0",
   /**
    * Version assumed when discovery is CORS-blocked, as v25.10.0's
    * `/api/versions` is. Used only for an appliance that answers a reachability
@@ -2487,6 +2713,9 @@ function checkVersionCompatibility(version) {
   if (compareVersions(version, maxVersion) > 0) {
     return "too-new" /* TooNew */;
   }
+  if (!SUPPORTED_API_VERSIONS.includes(version.version)) {
+    return "unsupported" /* Unsupported */;
+  }
   return "compatible" /* Compatible */;
 }
 function isVersionSupported(version) {
@@ -2592,7 +2821,7 @@ var TrueNasAuthenticator = class _TrueNasAuthenticator {
   /**
    * `login_options` asking for a reconnect token, when the server understands it.
    *
-   * Omitted below v26. `AuthCommonOptions` is `additionalProperties: false`
+   * Omitted below v27. `AuthCommonOptions` is `additionalProperties: false`
    * there and has only `user_info`, so sending the member is a validation
    * error, not an ignored field — it would fail login outright on the oldest
    * version this client supports.
@@ -2600,7 +2829,7 @@ var TrueNasAuthenticator = class _TrueNasAuthenticator {
   /**
    * Two things this does not do, both deliberate and both worth knowing.
    *
-   * There is no way for a consumer to decline: every v26+ password login now
+   * There is no way for a consumer to decline: every v27+ password login now
    * mints a single-use credential carrying that session's roles, whether or not
    * the caller wants one. And the auto-relogin in the constructor subscribes
    * with no observer, so the token it mints is dropped — a caller reconnecting
@@ -2735,7 +2964,7 @@ var TrueNasAuthenticator = class _TrueNasAuthenticator {
    * e.g. to open another connection without asking for the password again.
    *
    * Tokens are single-use, short-lived, and voided by a `middlewared` restart.
-   * On v26+ each successful login mints a new one; store the newest. Token
+   * On v27+ each successful login mints a new one; store the newest. Token
    * sessions are not re-logged automatically on reconnect — the caller must.
    */
   loginWithToken(token) {
@@ -2794,7 +3023,7 @@ var TrueNasAuthenticator = class _TrueNasAuthenticator {
     );
   }
   /**
-   * No reconnect token is requested here, though v26+ would mint one: an
+   * No reconnect token is requested here, though v27+ would mint one: an
    * api-key session already reconnects without a prompt, since the key is held
    * and replayed. The token exists for the credential that cannot be.
    */
@@ -3457,7 +3686,7 @@ function toAppState(state) {
     case "STARTING":
     case "DEPLOYING":
       return "DEPLOYING" /* Deploying */;
-    // v25.10's freezer states are the same idea as v26's `SUSPENDED`: the
+    // v25.10's freezer states are the same idea as v27's `SUSPENDED`: the
     // processes are paused, not exited. `FROZEN` is that pause completed, so it
     // and `SUSPENDED` are the same answer.
     case "SUSPENDED":
@@ -3569,14 +3798,14 @@ function toContainer(instance) {
     // declares only `description`, but the API returns `architecture`, `os`,
     // `release` and more, and callers were already receiving them. Narrowing
     // to the declared field would take data away to match a type that was
-    // always an under-declaration — the same call as the v26 `description`
+    // always an under-declaration — the same call as the v27 `description`
     // widening, decided the same way.
     image: instance.image.description === null ? void 0 : { ...instance.image, description: instance.image.description }
   };
 }
-var TrueNasApiClientV26 = class extends TrueNasApiClient {
+var TrueNasApiClientV27 = class extends TrueNasApiClient {
   /**
-   * Create v26-specific operation mappings
+   * Create v27-specific operation mappings
    *
    * Operations return Observable<Job | null>:
    * - Async operations emit Job updates until complete
@@ -3590,7 +3819,7 @@ var TrueNasApiClientV26 = class extends TrueNasApiClient {
       containerQuery: () => this.api.query("container.query").pipe(
         map((containers) => containers.map(toContainer2))
       ),
-      // container.start is synchronous in v26.0.0 - emit null
+      // container.start is synchronous in v27.0.0 - emit null
       containerStart: (id) => this.api.call("container.start", [parseInt(id, 10)]).pipe(map(() => null)),
       // container.stop emits job updates
       containerStop: (id, options) => this.api.job("container.stop", [
@@ -3600,7 +3829,7 @@ var TrueNasApiClientV26 = class extends TrueNasApiClient {
           force_after_timeout: options.force
         }
       ]),
-      // v26.0.0 doesn't have container.restart - chain stop + start
+      // v27.0.0 doesn't have container.restart - chain stop + start
       // Emits Job updates during stop, then null when start completes
       containerRestart: (id, options) => {
         const numericId = parseInt(id, 10);
@@ -3652,9 +3881,9 @@ function toContainer2(container) {
     description
   };
 }
-var TrueNasApiClientV27 = class extends TrueNasApiClient {
+var TrueNasApiClientV28 = class extends TrueNasApiClient {
   /**
-   * Create v27-specific operation mappings
+   * Create v28-specific operation mappings
    *
    * Operations return Observable<Job | null>:
    * - Async operations emit Job updates until complete
@@ -3668,7 +3897,7 @@ var TrueNasApiClientV27 = class extends TrueNasApiClient {
       containerQuery: () => this.api.query("container.query").pipe(
         map((containers) => containers.map(toContainer3))
       ),
-      // container.start is synchronous in v27 - emit null
+      // container.start is synchronous in v28 - emit null
       containerStart: (id) => this.api.call("container.start", [parseInt(id, 10)]).pipe(map(() => null)),
       // container.stop emits job updates
       containerStop: (id, options) => this.api.job("container.stop", [
@@ -3678,7 +3907,7 @@ var TrueNasApiClientV27 = class extends TrueNasApiClient {
           force_after_timeout: options.force
         }
       ]),
-      // v27 still has no container.restart - chain stop + start.
+      // v28 still has no container.restart - chain stop + start.
       // Emits Job updates during stop, then null when start completes.
       containerRestart: (id, options) => {
         const numericId = parseInt(id, 10);
@@ -3700,7 +3929,7 @@ var TrueNasApiClientV27 = class extends TrueNasApiClient {
           )
         );
       },
-      // Absent options are omitted, as in v26: `[id, null]` fails validation.
+      // Absent options are omitted, as in v27: `[id, null]` fails validation.
       containerDelete: (id, options) => this.api.job(
         "container.delete",
         options ? [parseInt(id, 10), options] : [parseInt(id, 10)]
@@ -3797,13 +4026,16 @@ var NoCompatibleVersionsError = class extends VersionDiscoveryError {
   constructor(hostname, availableVersions, supportedRange = {
     min: apiVersionConfig.MIN_SUPPORTED_VERSION,
     max: apiVersionConfig.MAX_SUPPORTED_VERSION
-  }) {
+  }, supportedVersions = SUPPORTED_API_VERSIONS) {
     super(
-      `No compatible API versions available. Supported: ${supportedRange.min} to ${supportedRange.max}. Available: ${availableVersions.join(", ")}`,
+      `No compatible API versions available. Supported: ${supportedVersions.join(
+        ", "
+      )}. Available: ${availableVersions.join(", ")}`,
       hostname
     );
     this.availableVersions = availableVersions;
     this.supportedRange = supportedRange;
+    this.supportedVersions = supportedVersions;
   }
 };
 var InvalidVersionResponseError = class extends VersionDiscoveryError {
@@ -4222,8 +4454,8 @@ function selectRepresentativeFailure(failures) {
 }
 var CLIENT_BY_VERSION_KEY = {
   "25.10": TrueNasApiClientV2510,
-  "26": TrueNasApiClientV26,
-  "27": TrueNasApiClientV27
+  "27": TrueNasApiClientV27,
+  "28": TrueNasApiClientV28
 };
 function clientVersionKey(version) {
   if (version.year <= legacyCutoffYear) {
@@ -4280,6 +4512,6 @@ var UserRole = /* @__PURE__ */ ((UserRole2) => {
   return UserRole2;
 })(UserRole || {});
 
-export { AppState, AuthError, AuthErrorCode, AuthResponseType, InvalidVersionResponseError, JobState, NoCompatibleVersionsError, SUPPORTED_API_VERSIONS, TrueNasApiClient, TrueNasApiClientV2510, TrueNasApiClientV26, TrueNasApiClientV27, TrueNasAuthMechanism, TrueNasAuthenticator, TrueNasConnection, UserRole, VersionCompatibility, VersionDiscovery, VersionDiscoveryError, VersionDiscoveryNetworkError, VersionDiscoveryTimeoutError, VersionEndpointNotFoundError, VersionTooNewError, VersionTooOldError, clientClassFor, consoleLogger, createTrueNasClient, getApiErrorMessage, getCloseMessage, isJobFinished, noopLogger, parseApiVersion, policyViolationCloseCode, v25_10_0_exports, v25_10_1_exports, v25_10_2_exports, v25_10_3_exports, v25_10_4_exports, v25_10_5_exports, v26_0_0_exports, v27_0_0_exports };
-//# sourceMappingURL=chunk-RH7UXULE.js.map
-//# sourceMappingURL=chunk-RH7UXULE.js.map
+export { AppState, AuthError, AuthErrorCode, AuthResponseType, InvalidVersionResponseError, JobState, NoCompatibleVersionsError, SUPPORTED_API_VERSIONS, TrueNasApiClient, TrueNasApiClientV2510, TrueNasApiClientV27, TrueNasApiClientV28, TrueNasApiError, TrueNasAuthMechanism, TrueNasAuthenticator, TrueNasConnection, UserRole, VersionCompatibility, VersionDiscovery, VersionDiscoveryError, VersionDiscoveryNetworkError, VersionDiscoveryTimeoutError, VersionEndpointNotFoundError, VersionTooNewError, VersionTooOldError, clientClassFor, consoleLogger, createTrueNasClient, getApiErrorMessage, getCloseMessage, isJobFinished, noopLogger, parseApiVersion, policyViolationCloseCode, subscriptionName, v25_10_0_exports, v25_10_1_exports, v25_10_2_exports, v25_10_3_exports, v25_10_4_exports, v25_10_5_exports, v27_0_0_exports, v28_0_0_exports };
+//# sourceMappingURL=chunk-K7BL6J3Z.js.map
+//# sourceMappingURL=chunk-K7BL6J3Z.js.map