@typeship-ax/cli 0.8.0 → 0.9.1

package/dist/polling-login.d.ts

@@ -0,0 +1,57 @@
+export declare class LoginPollingError extends Error {
+    readonly code: "cancelled" | "expired" | "denied" | "invalid_response" | "request_failed";
+    constructor(code: "cancelled" | "expired" | "denied" | "invalid_response" | "request_failed");
+}
+export declare function loginEndpoint(value: string): URL;
+export interface DeviceLoginConfig {
+    clientId: string;
+    issuer?: string | null;
+    discoveryUrls: string[];
+    deviceUrl?: string | null;
+    tokenUrl?: string | null;
+    scopes: string[];
+    audience?: string;
+    resource?: string;
+}
+export interface DeviceLoginSession {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt?: number;
+    tokenUrl: string;
+    issuer?: string;
+    clientId: string;
+    revocationUrl?: string;
+    scopes?: string[];
+}
+/** RFC 8628: pending and slow_down are the only responses that keep polling.
+ * All deadlines include response bodies; cancellation also interrupts waits. */
+export declare function oauthDeviceLogin(config: DeviceLoginConfig, interaction: {
+    authorize(value: {
+        verificationUri: string;
+        userCode: string;
+        expiresIn: number;
+    }): void;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<DeviceLoginSession>;
+export interface ApprovedCredential {
+    api_key: string;
+    key_name: string;
+    org_id?: string;
+    revocationUrl: string;
+}
+/** This is the owner's custom approval contract, not an OAuth grant. A failed
+ * poll is not replayed: its one-use credential may already have been consumed. */
+export declare function customBrowserApproval(config: {
+    authUrl: string;
+    name: string;
+    source: "agent" | "cli";
+}, interaction: {
+    authorize(value: {
+        verificationUrl: string;
+        expiresIn: number;
+    }): void;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<ApprovedCredential>;
+//# sourceMappingURL=polling-login.d.ts.map

package/dist/polling-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polling-login.d.ts","sourceRoot":"","sources":["../src/polling-login.ts"],"names":[],"mappings":"AAGA,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,kBAAkB,GAAG,gBAAgB;gBAAhF,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,kBAAkB,GAAG,gBAAgB;CAItG;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAQhD;AAkCD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IAClE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACxD;AACD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC/D,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAChG;AAED;gFACgF;AAChF,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE;IAC7E,SAAS,CAAC,KAAK,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzF,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC1C,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAsD9B;AAED,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAEjH;kFACkF;AAClF,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAAA;CAAE,EAAE,WAAW,EAAE;IAC3H,SAAS,CAAC,KAAK,EAAE;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACvE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC1C,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkC9B"}

package/dist/polling-login.js

@@ -0,0 +1,204 @@
+import { createHash, randomBytes } from "node:crypto";
+import { oauthJsonRequest, oauthDeviceRequest, OAuthResponseError } from "./oauth-request.js";
+export class LoginPollingError extends Error {
+    code;
+    constructor(code) {
+        super({ cancelled: "Login was cancelled.", expired: "Login expired. Run login again and approve the new request.", denied: "Login was denied. Run login again if you want to retry.", invalid_response: "The login service returned an invalid response. Check its configuration.", request_failed: "The login request failed. Check the service and start a new login." }[code]);
+        this.code = code;
+        this.name = "LoginPollingError";
+    }
+}
+export function loginEndpoint(value) {
+    try {
+        if (typeof value !== "string" || /[\x00-\x20\x7f]/.test(value))
+            throw new Error();
+        const url = new URL(value);
+        const local = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+        if ((url.protocol !== "https:" && !(url.protocol === "http:" && local)) || url.username || url.password || url.hash)
+            throw new Error();
+        return url;
+    }
+    catch {
+        throw new LoginPollingError("invalid_response");
+    }
+}
+function text(value, limit = 65_536) {
+    return typeof value === "string" && value.trim().length > 0 && value.length <= limit && !/[\x00-\x1f\x7f]/.test(value);
+}
+function seconds(value) {
+    return typeof value === "number" && Number.isFinite(value) && value > 0 && Number.isSafeInteger(Math.ceil(value * 1000));
+}
+function interval(value, fallback) {
+    if (value === undefined)
+        return fallback * 1000;
+    if (typeof value !== "number" || !Number.isFinite(value) || value < 0 || !Number.isSafeInteger(Math.ceil(value * 1000)))
+        throw new LoginPollingError("invalid_response");
+    return Math.max(1, value) * 1000;
+}
+function lifetime(signal, timeoutMs, maximum) {
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0 || timeoutMs > maximum)
+        throw new LoginPollingError("invalid_response");
+    const controller = new AbortController();
+    let expired = false;
+    const cancel = () => controller.abort();
+    const timer = setTimeout(() => { expired = true; controller.abort(); }, timeoutMs);
+    signal?.addEventListener("abort", cancel, { once: true });
+    if (signal?.aborted)
+        cancel();
+    const check = () => { if (controller.signal.aborted)
+        throw new LoginPollingError(expired ? "expired" : "cancelled"); };
+    return { signal: controller.signal, check, close() { clearTimeout(timer); signal?.removeEventListener("abort", cancel); } };
+}
+async function pause(ms, signal) {
+    if (signal.aborted)
+        throw new LoginPollingError("cancelled");
+    await new Promise((resolve, reject) => {
+        const done = () => { clearTimeout(timer); signal.removeEventListener("abort", abort); resolve(); };
+        const abort = () => { clearTimeout(timer); signal.removeEventListener("abort", abort); reject(new LoginPollingError("cancelled")); };
+        const timer = setTimeout(done, Math.min(ms, 2_147_483_647));
+        signal.addEventListener("abort", abort, { once: true });
+    });
+}
+const form = (params, signal) => ({ method: "POST", headers: { "Content-Type": "application/x-www-form-urlencoded", Accept: "application/json" }, body: new URLSearchParams(params), signal });
+/** RFC 8628: pending and slow_down are the only responses that keep polling.
+ * All deadlines include response bodies; cancellation also interrupts waits. */
+export async function oauthDeviceLogin(config, interaction) {
+    const flow = lifetime(interaction.signal, interaction.timeoutMs ?? 900_000, 900_000);
+    try {
+        flow.check();
+        if (!text(config.clientId))
+            throw new LoginPollingError("invalid_response");
+        if (config.issuer && loginEndpoint(config.issuer).search)
+            throw new LoginPollingError("invalid_response");
+        let deviceUrl = config.deviceUrl ? loginEndpoint(config.deviceUrl).href : undefined;
+        let tokenUrl = config.tokenUrl ? loginEndpoint(config.tokenUrl).href : undefined;
+        let revocationUrl;
+        for (const url of config.discoveryUrls) {
+            if (deviceUrl && tokenUrl)
+                break;
+            const response = await oauthJsonRequest(loginEndpoint(url), { headers: { Accept: "application/json" }, signal: flow.signal }, 10_000);
+            if (response.status !== 200)
+                continue;
+            const data = response.data;
+            if (config.issuer && data.issuer !== config.issuer)
+                throw new LoginPollingError("invalid_response");
+            if (!deviceUrl && typeof data.device_authorization_endpoint === "string")
+                deviceUrl = loginEndpoint(data.device_authorization_endpoint).href;
+            if (!tokenUrl && typeof data.token_endpoint === "string")
+                tokenUrl = loginEndpoint(data.token_endpoint).href;
+            if (data.revocation_endpoint !== undefined)
+                revocationUrl = loginEndpoint(data.revocation_endpoint).href;
+        }
+        if (!deviceUrl || !tokenUrl)
+            throw new LoginPollingError("invalid_response");
+        const params = { ...(config.audience ? { audience: config.audience } : {}), ...(config.resource ? { resource: config.resource } : {}) };
+        const start = await oauthJsonRequest(deviceUrl, form({ client_id: config.clientId, ...(config.scopes.length ? { scope: config.scopes.join(" ") } : {}), ...params }, flow.signal));
+        const data = start.data;
+        if (start.status !== 200)
+            throw new LoginPollingError("request_failed");
+        if (!data || !text(data.device_code) || !text(data.user_code, 512) || !text(data.verification_uri, 8192) || !seconds(data.expires_in))
+            throw new LoginPollingError("invalid_response");
+        loginEndpoint(data.verification_uri);
+        const verificationUri = loginEndpoint((data.verification_uri_complete ?? data.verification_uri)).href;
+        let intervalMs = interval(data.interval, 5);
+        const expiresIn = Math.min(data.expires_in, 900), deadline = Date.now() + expiresIn * 1000;
+        interaction.authorize({ verificationUri, userCode: data.user_code, expiresIn });
+        while (true) {
+            await pause(Math.min(intervalMs, Math.max(0, deadline - Date.now())), flow.signal);
+            flow.check();
+            if (Date.now() >= deadline)
+                throw new LoginPollingError("expired");
+            let response;
+            try {
+                response = await oauthDeviceRequest(tokenUrl, form({ ...params, grant_type: "urn:ietf:params:oauth:grant-type:device_code", device_code: data.device_code, client_id: config.clientId }, flow.signal), Math.min(30_000, deadline - Date.now()));
+            }
+            catch (error) {
+                flow.check();
+                if (error instanceof OAuthResponseError && error.code === "timed_out") {
+                    intervalMs *= 2;
+                    continue;
+                }
+                throw error;
+            }
+            flow.check();
+            if (Date.now() >= deadline)
+                throw new LoginPollingError("expired");
+            if (response.status === 400 && response.error === "authorization_pending")
+                continue;
+            if (response.status === 400 && response.error === "slow_down") {
+                intervalMs += 5000;
+                continue;
+            }
+            if (response.status === 400 && response.error === "access_denied")
+                throw new LoginPollingError("denied");
+            if (response.status === 400 && response.error === "expired_token")
+                throw new LoginPollingError("expired");
+            if (response.status !== 200)
+                throw new LoginPollingError("request_failed");
+            const token = response.data;
+            if (!text(token.access_token) || typeof token.token_type !== "string" || token.token_type.toLowerCase() !== "bearer" || token.error !== undefined || token.refresh_token !== undefined && !text(token.refresh_token) || token.expires_in !== undefined && !seconds(token.expires_in) || token.scope !== undefined && typeof token.scope !== "string")
+                throw new LoginPollingError("invalid_response");
+            return { accessToken: token.access_token, ...(typeof token.refresh_token === "string" ? { refreshToken: token.refresh_token } : {}), ...(typeof token.expires_in === "number" ? { expiresAt: Date.now() + token.expires_in * 1000 } : {}), clientId: config.clientId, tokenUrl, ...(config.issuer ? { issuer: config.issuer } : {}), ...(revocationUrl ? { revocationUrl } : {}), ...(typeof token.scope === "string" ? { scopes: token.scope.split(/\s+/).filter(Boolean) } : {}) };
+        }
+    }
+    catch (error) {
+        flow.check();
+        throw error;
+    }
+    finally {
+        flow.close();
+    }
+}
+/** This is the owner's custom approval contract, not an OAuth grant. A failed
+ * poll is not replayed: its one-use credential may already have been consumed. */
+export async function customBrowserApproval(config, interaction) {
+    const flow = lifetime(interaction.signal, interaction.timeoutMs ?? 600_000, 600_000);
+    try {
+        flow.check();
+        const base = loginEndpoint(config.authUrl);
+        if (base.search)
+            throw new LoginPollingError("invalid_response");
+        const url = base.href.replace(/\/$/, "");
+        const verifier = randomBytes(32).toString("base64url"), challenge = createHash("sha256").update(verifier).digest("base64url");
+        const post = (body) => ({ method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(body), signal: flow.signal });
+        const response = await oauthJsonRequest(url + "/start", post({ code_challenge: challenge, name: config.name, source: config.source }), 15_000);
+        if (response.status !== 200)
+            throw new LoginPollingError("request_failed");
+        const start = response.data;
+        if (!text(start.session) || !text(start.verification_url, 8192) || start.expires_in !== undefined && !seconds(start.expires_in))
+            throw new LoginPollingError("invalid_response");
+        const verificationUrl = loginEndpoint(start.verification_url).href;
+        const expiresIn = Math.min(typeof start.expires_in === "number" ? start.expires_in : 600, 600);
+        const intervalMs = interval(start.interval, 3), deadline = Date.now() + expiresIn * 1000;
+        interaction.authorize({ verificationUrl, expiresIn });
+        while (true) {
+            await pause(Math.min(intervalMs, Math.max(0, deadline - Date.now())), flow.signal);
+            flow.check();
+            if (Date.now() >= deadline)
+                throw new LoginPollingError("expired");
+            const result = await oauthJsonRequest(url + "/status", post({ session: start.session, code_verifier: verifier }), Math.min(15_000, deadline - Date.now()));
+            flow.check();
+            if (Date.now() >= deadline)
+                throw new LoginPollingError("expired");
+            if (result.status !== 200)
+                throw new LoginPollingError("request_failed");
+            const poll = result.data;
+            if (poll.status === "pending")
+                continue;
+            if (poll.status === "denied")
+                throw new LoginPollingError("denied");
+            if (poll.status === "expired")
+                throw new LoginPollingError("expired");
+            if (poll.status !== "complete" || !text(poll.api_key) || poll.key_name !== undefined && !text(poll.key_name, 1024) || poll.org_id !== undefined && !text(poll.org_id, 1024))
+                throw new LoginPollingError("invalid_response");
+            return { api_key: poll.api_key, key_name: typeof poll.key_name === "string" ? poll.key_name : config.name, ...(typeof poll.org_id === "string" ? { org_id: poll.org_id } : {}), revocationUrl: url + "/revoke" };
+        }
+    }
+    catch (error) {
+        flow.check();
+        throw error;
+    }
+    finally {
+        flow.close();
+    }
+}

package/dist/resources/account.d.ts

@@ -1,5 +1,5 @@
 import { HttpCore, type ApiResult, type RequestOptions } from "../core/http.js";
-import { TransportError, UnexpectedApiError, ValidationError, ForbiddenError, RateLimitedError, UnauthorizedError } from "../errors.js";
+import { ResponseParseError, TransportError, UnexpectedApiError, ValidationError, ForbiddenError, RateLimitedError, UnauthorizedError } from "../errors.js";
 import type { AccountRead } from "../types.js";
 export declare class AccountResource {
     private readonly _core;
@@ -14,5 +14,5 @@ export declare class AccountResource {
     retrieve(options?: RequestOptions): Promise<ApiResult<AccountRead, AccountRetrieveError>>;
 }
 /** Every error `retrieve` can produce, as a discriminated union. */
-export type AccountRetrieveError = UnauthorizedError | ForbiddenError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type AccountRetrieveError = UnauthorizedError | ForbiddenError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 //# sourceMappingURL=account.d.ts.map

package/dist/resources/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/resources/account.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAW,WAAW,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;CAUhG;AAED,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/resources/account.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAW,WAAW,EAAE,MAAM,aAAa,CAAC;AAExD,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;OAMG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;CAWhG;AAED,oEAAoE;AACpE,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}

package/dist/resources/account.js

@@ -17,6 +17,7 @@ export class AccountResource {
         return this._core.request({
             method: "GET",
             path: "/me",
+            security: [{ "apiKey": [] }],
             errors: { "401": UnauthorizedError, "403": ForbiddenError, "429": RateLimitedError },
             idempotent: true,
             schemaKey: "account.retrieve",

package/dist/resources/api-keys.d.ts

@@ -1,6 +1,6 @@
 import { HttpCore, type ApiResult, type RequestOptions } from "../core/http.js";
 import { PagePromise } from "../core/pagination.js";
-import { TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError } from "../errors.js";
+import { ResponseParseError, TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError } from "../errors.js";
 import type { ApiKeyRead, ApiKeyResponseRead } from "../types.js";
 export declare class ApiKeysResource {
     private readonly _core;
@@ -36,7 +36,7 @@ export interface ApiKeysListParams {
     cursor?: string;
 }
 /** Every error `list` can produce, as a discriminated union. */
-export type ApiKeysListError = BadRequestError | UnauthorizedError | ForbiddenError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type ApiKeysListError = BadRequestError | UnauthorizedError | ForbiddenError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 /** Every error `revoke` can produce, as a discriminated union. */
-export type ApiKeysRevokeError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type ApiKeysRevokeError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 //# sourceMappingURL=api-keys.d.ts.map

package/dist/resources/api-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/resources/api-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAY,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAIV,UAAU,EAEV,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;;;OAQG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC;IA2BrG;;;;;;;;OAQG;IACG,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;CAe9D;AAED,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,kEAAkE;AAClE,MAAM,MAAM,kBAAkB,GAC1B,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/resources/api-keys.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAY,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAIV,UAAU,EAEV,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;;;OAQG;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,WAAW,CAAC,UAAU,EAAE,gBAAgB,CAAC;IA4BrG;;;;;;;;OAQG;IACG,MAAM,CACV,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;CAgB9D;AAED,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,kEAAkE;AAClE,MAAM,MAAM,kBAAkB,GAC1B,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}

package/dist/resources/api-keys.js

@@ -20,6 +20,7 @@ export class ApiKeysResource {
         return paginate(this._core, {
             method: "GET",
             path: "/api_keys",
+            security: [{ "apiKey": [] }],
             query: {
                 limit: params?.limit,
                 cursor: params?.cursor,
@@ -55,6 +56,7 @@ export class ApiKeysResource {
         return this._core.request({
             method: "DELETE",
             path: `/api_keys/${encodeURIComponent(String(apiKeyId))}`,
+            security: [{ "apiKey": [] }],
             errors: {
                 "401": UnauthorizedError,
                 "403": ForbiddenError,

package/dist/resources/definition-revisions.d.ts

@@ -1,6 +1,6 @@
 import { HttpCore, type ApiResult, type RequestOptions } from "../core/http.js";
 import { PagePromise } from "../core/pagination.js";
-import { TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError } from "../errors.js";
+import { ResponseParseError, TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError } from "../errors.js";
 import type { DefinitionDocumentId, DefinitionId, DefinitionRevisionId, DefinitionRevisionRead, DefinitionRevisionResponseRead } from "../types.js";
 export declare class DefinitionRevisionsResource {
     private readonly _core;
@@ -48,11 +48,11 @@ export interface DefinitionRevisionsListParams {
     cursor?: string;
 }
 /** Every error `list` can produce, as a discriminated union. */
-export type DefinitionRevisionsListError = BadRequestError | UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type DefinitionRevisionsListError = BadRequestError | UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 /** Every error `retrieve` can produce, as a discriminated union. */
-export type DefinitionRevisionsRetrieveError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type DefinitionRevisionsRetrieveError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 /** Every error `retrieveContent` can produce, as a discriminated union. */
-export type DefinitionRevisionsRetrieveContentError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type DefinitionRevisionsRetrieveContentError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 /** Every error `retrieveDocumentContent` can produce, as a discriminated union. */
-export type DefinitionRevisionsRetrieveDocumentContentError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type DefinitionRevisionsRetrieveDocumentContentError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 //# sourceMappingURL=definition-revisions.d.ts.map

package/dist/resources/definition-revisions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definition-revisions.d.ts","sourceRoot":"","sources":["../../src/resources/definition-revisions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAY,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,oBAAoB,EACpB,YAAY,EAEZ,oBAAoB,EAGpB,sBAAsB,EAEtB,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,qBAAa,2BAA2B;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;;;;OASG;IACH,IAAI,CACF,YAAY,EAAE,YAAY,EAC1B,MAAM,CAAC,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;IA4BpE;;;;;;OAMG;IACG,QAAQ,CACZ,oBAAoB,EAAE,oBAAoB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC;IAgBvF;;;;;;OAMG;IACG,eAAe,CACnB,oBAAoB,EAAE,oBAAoB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;IAgBtE;;;OAGG;IACG,uBAAuB,CAC3B,oBAAoB,EAAE,oBAAoB,EAC1C,UAAU,EAAE,oBAAoB,EAChC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,+CAA+C,CAAC,CAAC;CAe/E;AAED,MAAM,WAAW,6BAA6B;IAC5C,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GACpC,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,oEAAoE;AACpE,MAAM,MAAM,gCAAgC,GACxC,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,2EAA2E;AAC3E,MAAM,MAAM,uCAAuC,GAC/C,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,mFAAmF;AACnF,MAAM,MAAM,+CAA+C,GACvD,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}
+{"version":3,"file":"definition-revisions.d.ts","sourceRoot":"","sources":["../../src/resources/definition-revisions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAY,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EACV,oBAAoB,EACpB,YAAY,EAEZ,oBAAoB,EAGpB,sBAAsB,EAEtB,8BAA8B,EAC/B,MAAM,aAAa,CAAC;AAErB,qBAAa,2BAA2B;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;;;;OASG;IACH,IAAI,CACF,YAAY,EAAE,YAAY,EAC1B,MAAM,CAAC,EAAE,6BAA6B,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;IA6BpE;;;;;;OAMG;IACG,QAAQ,CACZ,oBAAoB,EAAE,oBAAoB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,8BAA8B,EAAE,gCAAgC,CAAC,CAAC;IAiBvF;;;;;;OAMG;IACG,eAAe,CACnB,oBAAoB,EAAE,oBAAoB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;IAiBtE;;;OAGG;IACG,uBAAuB,CAC3B,oBAAoB,EAAE,oBAAoB,EAC1C,UAAU,EAAE,oBAAoB,EAChC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,+CAA+C,CAAC,CAAC;CAgB/E;AAED,MAAM,WAAW,6BAA6B;IAC5C,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,gEAAgE;AAChE,MAAM,MAAM,4BAA4B,GACpC,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,oEAAoE;AACpE,MAAM,MAAM,gCAAgC,GACxC,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,2EAA2E;AAC3E,MAAM,MAAM,uCAAuC,GAC/C,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,mFAAmF;AACnF,MAAM,MAAM,+CAA+C,GACvD,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}

package/dist/resources/definition-revisions.js

@@ -21,6 +21,7 @@ export class DefinitionRevisionsResource {
         return paginate(this._core, {
             method: "GET",
             path: `/definitions/${encodeURIComponent(String(definitionId))}/revisions`,
+            security: [{ "apiKey": [] }],
             query: {
                 limit: params?.limit,
                 cursor: params?.cursor,
@@ -55,6 +56,7 @@ export class DefinitionRevisionsResource {
         return this._core.request({
             method: "GET",
             path: `/definition_revisions/${encodeURIComponent(String(definitionRevisionId))}`,
+            security: [{ "apiKey": [] }],
             errors: {
                 "401": UnauthorizedError,
                 "403": ForbiddenError,
@@ -77,6 +79,7 @@ export class DefinitionRevisionsResource {
         return this._core.request({
             method: "GET",
             path: `/definition_revisions/${encodeURIComponent(String(definitionRevisionId))}/content`,
+            security: [{ "apiKey": [] }],
             errors: {
                 "401": UnauthorizedError,
                 "403": ForbiddenError,
@@ -96,6 +99,7 @@ export class DefinitionRevisionsResource {
         return this._core.request({
             method: "GET",
             path: `/definition_revisions/${encodeURIComponent(String(definitionRevisionId))}/documents/${encodeURIComponent(String(documentId))}/content`,
+            security: [{ "apiKey": [] }],
             errors: {
                 "401": UnauthorizedError,
                 "403": ForbiddenError,

package/dist/resources/definitions.d.ts

@@ -1,5 +1,5 @@
 import { HttpCore, type ApiResult, type RequestOptions } from "../core/http.js";
-import { TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError, UnprocessableEntityError } from "../errors.js";
+import { ResponseParseError, TransportError, UnexpectedApiError, ValidationError, BadRequestError, ConflictError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError, UnprocessableEntityError } from "../errors.js";
 import type { DefinitionId, DefinitionRead, DefinitionUpdateRequest } from "../types.js";
 export declare class DefinitionsResource {
     private readonly _core;
@@ -13,12 +13,23 @@ export declare class DefinitionsResource {
      * Update and resolve a Definition
      *
      * Resolves the complete document graph and records a new immutable revision before saving.
+     *
+     * A `Idempotency-Key` UUID is generated per call (stable across retries) unless you pass one.
      * `PATCH /definitions/{definition_id}`
      */
-    update(definitionId: DefinitionId, body: DefinitionUpdateRequest, options?: RequestOptions): Promise<ApiResult<DefinitionRead, DefinitionsUpdateError>>;
+    update(definitionId: DefinitionId, body: DefinitionUpdateRequest, params?: DefinitionsUpdateParams, options?: RequestOptions): Promise<ApiResult<DefinitionRead, DefinitionsUpdateError>>;
 }
 /** Every error `retrieve` can produce, as a discriminated union. */
-export type DefinitionsRetrieveError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type DefinitionsRetrieveError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
+export interface DefinitionsUpdateParams {
+    /**
+     * Identifies one logical write for 24 hours. The key is scoped to the authenticated account and
+     * operation; account-less generation uses a hashed network identity. Retrying the same method,
+     * path, query, and JSON body replays the original response. Reusing the key with changed intent
+     * returns 409. After expiry the key starts a new write.
+     */
+    idempotencyKey?: string;
+}
 /** Every error `update` can produce, as a discriminated union. */
-export type DefinitionsUpdateError = BadRequestError | UnauthorizedError | ForbiddenError | NotFoundError | UnprocessableEntityError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type DefinitionsUpdateError = BadRequestError | UnauthorizedError | ForbiddenError | NotFoundError | ConflictError | UnprocessableEntityError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 //# sourceMappingURL=definitions.d.ts.map

package/dist/resources/definitions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/resources/definitions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAEV,YAAY,EACZ,cAAc,EACd,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAErB,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;OAGG;IACG,QAAQ,CACZ,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAgB/D;;;;;OAKG;IACG,MAAM,CACV,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,uBAAuB,EAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;CAiB9D;AAED,oEAAoE;AACpE,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,kEAAkE;AAClE,MAAM,MAAM,sBAAsB,GAC9B,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,wBAAwB,GACxB,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}
+{"version":3,"file":"definitions.d.ts","sourceRoot":"","sources":["../../src/resources/definitions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAEV,YAAY,EACZ,cAAc,EACd,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAErB,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;OAGG;IACG,QAAQ,CACZ,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IAiB/D;;;;;;;OAOG;IACG,MAAM,CACV,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,uBAAuB,EAC7B,MAAM,CAAC,EAAE,uBAAuB,EAChC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,sBAAsB,CAAC,CAAC;CAuB9D;AAED,oEAAoE;AACpE,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,kEAAkE;AAClE,MAAM,MAAM,sBAAsB,GAC9B,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,aAAa,GACb,wBAAwB,GACxB,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}

package/dist/resources/definitions.js

@@ -1,6 +1,6 @@
 // typeship — definitions resource.
 // Generated by typeship — https://typeship.dev — do not edit by hand.
-import { BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError, UnprocessableEntityError, } from "../errors.js";
+import { BadRequestError, ConflictError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError, UnprocessableEntityError, } from "../errors.js";
 export class DefinitionsResource {
     _core;
     constructor(_core) {
@@ -14,6 +14,7 @@ export class DefinitionsResource {
         return this._core.request({
             method: "GET",
             path: `/definitions/${encodeURIComponent(String(definitionId))}`,
+            security: [{ "apiKey": [] }],
             errors: {
                 "401": UnauthorizedError,
                 "403": ForbiddenError,
@@ -29,21 +30,29 @@ export class DefinitionsResource {
      * Update and resolve a Definition
      *
      * Resolves the complete document graph and records a new immutable revision before saving.
+     *
+     * A `Idempotency-Key` UUID is generated per call (stable across retries) unless you pass one.
      * `PATCH /definitions/{definition_id}`
      */
-    async update(definitionId, body, options) {
+    async update(definitionId, body, params, options) {
         return this._core.request({
             method: "PATCH",
             path: `/definitions/${encodeURIComponent(String(definitionId))}`,
+            security: [{ "apiKey": [] }],
+            headers: {
+                "Idempotency-Key": params?.idempotencyKey === undefined ? undefined : String(params?.idempotencyKey),
+            },
             body,
             errors: {
                 "400": BadRequestError,
                 "401": UnauthorizedError,
                 "403": ForbiddenError,
                 "404": NotFoundError,
+                "409": ConflictError,
                 "422": UnprocessableEntityError,
                 "429": RateLimitedError,
             },
+            idempotencyKey: "Idempotency-Key",
             schemaKey: "definitions.update",
             options,
         });

package/dist/resources/generate.d.ts

@@ -1,5 +1,5 @@
 import { HttpCore, type ApiResult, type RequestOptions } from "../core/http.js";
-import { TransportError, UnexpectedApiError, ValidationError, ApiResponseError, BadRequestError, ForbiddenError, PayloadTooLargeError, RateLimitedError, UnauthorizedError, UnprocessableEntityError } from "../errors.js";
+import { ResponseParseError, TransportError, UnexpectedApiError, ValidationError, ApiResponseError, BadRequestError, ConflictError, ForbiddenError, PayloadTooLargeError, RateLimitedError, UnauthorizedError, UnprocessableEntityError } from "../errors.js";
 import type { GenerateRequest, GenerationResultRead } from "../types.js";
 export declare class GenerateResource {
     private readonly _core;
@@ -16,10 +16,21 @@ export declare class GenerateResource {
      * the first 25 operations and
      * paid plans generate the complete Definition. A present but invalid key is a
      * 401, not a downgrade to anonymous.
+     *
+     * A `Idempotency-Key` UUID is generated per call (stable across retries) unless you pass one.
      * `POST /generate`
      */
-    run(body: GenerateRequest, options?: RequestOptions): Promise<ApiResult<GenerationResultRead, GenerateRunError>>;
+    run(body: GenerateRequest, params?: GenerateRunParams, options?: RequestOptions): Promise<ApiResult<GenerationResultRead, GenerateRunError>>;
+}
+export interface GenerateRunParams {
+    /**
+     * Identifies one logical write for 24 hours. The key is scoped to the authenticated account and
+     * operation; account-less generation uses a hashed network identity. Retrying the same method,
+     * path, query, and JSON body replays the original response. Reusing the key with changed intent
+     * returns 409. After expiry the key starts a new write.
+     */
+    idempotencyKey?: string;
 }
 /** Every error `run` can produce, as a discriminated union. */
-export type GenerateRunError = BadRequestError | UnauthorizedError | ForbiddenError | PayloadTooLargeError | UnprocessableEntityError | RateLimitedError | ApiResponseError | UnexpectedApiError | TransportError | ValidationError;
+export type GenerateRunError = BadRequestError | UnauthorizedError | ForbiddenError | ConflictError | PayloadTooLargeError | UnprocessableEntityError | RateLimitedError | ApiResponseError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 //# sourceMappingURL=generate.d.ts.map

package/dist/resources/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/resources/generate.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,eAAe,EAAoB,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE3F,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;;;;;;;;OAaG;IACG,GAAG,CACP,IAAI,EAAE,eAAe,EACrB,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;CAkB9D;AAED,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,oBAAoB,GACpB,wBAAwB,GACxB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/resources/generate.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,eAAe,EAAoB,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE3F,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;;;;;;;;;;;OAeG;IACG,GAAG,CACP,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;CAwB9D;AAED,MAAM,WAAW,iBAAiB;IAChC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,oBAAoB,GACpB,wBAAwB,GACxB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}

package/dist/resources/generate.js

@@ -1,6 +1,6 @@
 // typeship — generate resource.
 // Generated by typeship — https://typeship.dev — do not edit by hand.
-import { ApiResponseError, BadRequestError, ForbiddenError, PayloadTooLargeError, RateLimitedError, UnauthorizedError, UnprocessableEntityError, } from "../errors.js";
+import { ApiResponseError, BadRequestError, ConflictError, ForbiddenError, PayloadTooLargeError, RateLimitedError, UnauthorizedError, UnprocessableEntityError, } from "../errors.js";
 export class GenerateResource {
     _core;
     constructor(_core) {
@@ -18,22 +18,30 @@ export class GenerateResource {
      * the first 25 operations and
      * paid plans generate the complete Definition. A present but invalid key is a
      * 401, not a downgrade to anonymous.
+     *
+     * A `Idempotency-Key` UUID is generated per call (stable across retries) unless you pass one.
      * `POST /generate`
      */
-    async run(body, options) {
+    async run(body, params, options) {
         return this._core.request({
             method: "POST",
             path: "/generate",
+            security: [{}, { "apiKey": [] }],
+            headers: {
+                "Idempotency-Key": params?.idempotencyKey === undefined ? undefined : String(params?.idempotencyKey),
+            },
             body,
             errors: {
                 "400": BadRequestError,
                 "401": UnauthorizedError,
                 "403": ForbiddenError,
+                "409": ConflictError,
                 "413": PayloadTooLargeError,
                 "422": UnprocessableEntityError,
                 "429": RateLimitedError,
                 default: ApiResponseError,
             },
+            idempotencyKey: "Idempotency-Key",
             schemaKey: "generate.run",
             options,
         });

package/dist/resources/generations.d.ts

@@ -1,5 +1,5 @@
 import { HttpCore, type ApiResult, type RequestOptions } from "../core/http.js";
-import { TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError } from "../errors.js";
+import { ResponseParseError, TransportError, UnexpectedApiError, ValidationError, BadRequestError, ForbiddenError, NotFoundError, RateLimitedError, UnauthorizedError } from "../errors.js";
 import type { GenerationId, GenerationResponseRead } from "../types.js";
 export declare class GenerationsResource {
     private readonly _core;
@@ -21,11 +21,11 @@ export declare class GenerationsResource {
     retrieveFile(generationId: GenerationId, params: GenerationsRetrieveFileParams, options?: RequestOptions): Promise<ApiResult<string, GenerationsRetrieveFileError>>;
 }
 /** Every error `retrieve` can produce, as a discriminated union. */
-export type GenerationsRetrieveError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type GenerationsRetrieveError = UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 export interface GenerationsRetrieveFileParams {
     /** Repo-relative path inside the generated package. */
     path: string;
 }
 /** Every error `retrieveFile` can produce, as a discriminated union. */
-export type GenerationsRetrieveFileError = BadRequestError | UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | TransportError | ValidationError;
+export type GenerationsRetrieveFileError = BadRequestError | UnauthorizedError | ForbiddenError | NotFoundError | RateLimitedError | UnexpectedApiError | ResponseParseError | TransportError | ValidationError;
 //# sourceMappingURL=generations.d.ts.map

package/dist/resources/generations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generations.d.ts","sourceRoot":"","sources":["../../src/resources/generations.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAsB,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE5F,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;OAKG;IACG,QAAQ,CACZ,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAgBvE;;;;;;OAMG;IACG,YAAY,CAChB,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,6BAA6B,EACrC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;CAmB5D;AAED,oEAAoE;AACpE,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,WAAW,6BAA6B;IAC5C,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wEAAwE;AACxE,MAAM,MAAM,4BAA4B,GACpC,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}
+{"version":3,"file":"generations.d.ts","sourceRoot":"","sources":["../../src/resources/generations.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,YAAY,EAAsB,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE5F,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C;;;;;OAKG;IACG,QAAQ,CACZ,YAAY,EAAE,YAAY,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,wBAAwB,CAAC,CAAC;IAiBvE;;;;;;OAMG;IACG,YAAY,CAChB,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,6BAA6B,EACrC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;CAoB5D;AAED,oEAAoE;AACpE,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC;AAEpB,MAAM,WAAW,6BAA6B;IAC5C,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wEAAwE;AACxE,MAAM,MAAM,4BAA4B,GACpC,eAAe,GACf,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAAC"}

package/dist/resources/generations.js

@@ -16,6 +16,7 @@ export class GenerationsResource {
         return this._core.request({
             method: "GET",
             path: `/generations/${encodeURIComponent(String(generationId))}`,
+            security: [{ "apiKey": [] }],
             errors: {
                 "401": UnauthorizedError,
                 "403": ForbiddenError,
@@ -38,6 +39,7 @@ export class GenerationsResource {
         return this._core.request({
             method: "GET",
             path: `/generations/${encodeURIComponent(String(generationId))}/file`,
+            security: [{ "apiKey": [] }],
             query: {
                 path: params.path,
             },