dataiku-sdk 3.1.0 → 3.3.0

package/dist/src/resources/webapps.d.ts

@@ -48,10 +48,23 @@ export declare class WebappsResource extends BaseResource {
     /**
      * Start or restart a webapp backend. The documented endpoint returns a
      * reference to a future, which is surfaced as-is; settle it with
-     * {@link restartBackendAndWait} or `client.futures.wait`.
+     * {@link restartBackendAndWait} or `client.futures.wait`. DSS 15 returns
+     * an empty body (no future) when no async job was spawned — the official
+     * Python client tolerates that (`DSSFuture.from_resp` accepts a missing
+     * jobId), so an empty response surfaces as `{}` rather than crashing.
      */
     startOrRestartBackend(webappId: string, projectKey?: string): Promise<Record<string, unknown>>;
-    /** Restart a webapp backend and wait for the returned future to settle. */
+    /**
+     * Restart a webapp backend and wait for the returned future to settle.
+     * The documented endpoint returns a reference to a future; with a real
+     * jobId this polls that future to completion. An empty response carries
+     * NO future to wait on (observed on DSS 15 for a webapp whose backend is
+     * not enabled — a no-op restart, not a supported wait target), so the
+     * wait reports the missing future explicitly instead of fabricating a
+     * result for it. Enable the backend (params.backendEnabled with the
+     * params.python code, exactly as the DSS editor does) to get a real
+     * restart future.
+     */
     restartBackendAndWait(webappId: string, projectKey?: string, options?: WebappWaitOptions): Promise<FutureWaitResult>;
     /** Get a webapp backend's state. */
     getBackendState(webappId: string, projectKey?: string): Promise<Record<string, unknown>>;

package/dist/src/resources/webapps.js

@@ -59,18 +59,32 @@ export class WebappsResource extends BaseResource {
     /**
      * Start or restart a webapp backend. The documented endpoint returns a
      * reference to a future, which is surfaced as-is; settle it with
-     * {@link restartBackendAndWait} or `client.futures.wait`.
+     * {@link restartBackendAndWait} or `client.futures.wait`. DSS 15 returns
+     * an empty body (no future) when no async job was spawned — the official
+     * Python client tolerates that (`DSSFuture.from_resp` accepts a missing
+     * jobId), so an empty response surfaces as `{}` rather than crashing.
      */
     async startOrRestartBackend(webappId, projectKey) {
         const id = encodeURIComponent(webappId);
-        return this.client.put(`/public/api/projects/${this.enc(projectKey)}/webapps/${id}/backend/actions/restart`, {});
+        const future = await this.client.put(`/public/api/projects/${this.enc(projectKey)}/webapps/${id}/backend/actions/restart`, {});
+        return future ?? {};
     }
-    /** Restart a webapp backend and wait for the returned future to settle. */
+    /**
+     * Restart a webapp backend and wait for the returned future to settle.
+     * The documented endpoint returns a reference to a future; with a real
+     * jobId this polls that future to completion. An empty response carries
+     * NO future to wait on (observed on DSS 15 for a webapp whose backend is
+     * not enabled — a no-op restart, not a supported wait target), so the
+     * wait reports the missing future explicitly instead of fabricating a
+     * result for it. Enable the backend (params.backendEnabled with the
+     * params.python code, exactly as the DSS editor does) to get a real
+     * restart future.
+     */
     async restartBackendAndWait(webappId, projectKey, options = {}) {
         const future = await this.startOrRestartBackend(webappId, projectKey);
         const jobId = future.jobId;
         if (typeof jobId !== "string" || jobId.length === 0) {
-            throw new Error("Webapp backend restart did not return a future jobId.");
+            throw new ClientValidationError("Webapp backend restart returned no future jobId, so there is nothing to wait on.", "validation_failed", "The restart endpoint returns a future reference only when it starts an async job (a webapp with an enabled Python backend). Enable the backend before restarting with --wait.", { webappId, restartResponseKeys: Object.keys(future), });
         }
         return this.client.futures.wait(jobId, {
             pollIntervalMs: options.pollIntervalMs,

package/dist/src/schemas.d.ts

@@ -3,5 +3,5 @@
  * The types package (packages/types/) owns the TypeBox schema definitions.
  * SDK consumers get everything through this re-export.
  */
-export { BuildModeSchema, CodeEnvActionResultSchema, CodeEnvCreateOptionsSchema, CodeEnvDetailsSchema, CodeEnvGetLogOptionsSchema, CodeEnvLogResultSchema, CodeEnvLogSummaryArraySchema, CodeEnvLogSummarySchema, CodeEnvPackageListSchema, CodeEnvSetPackagesOptionsSchema, CodeEnvSummaryArraySchema, CodeEnvSummarySchema, CodeEnvUpdateImagesOptionsSchema, CodeEnvUpdatePackagesOptionsSchema, CodeEnvUsageArraySchema, CodeEnvVersionForProjectSchema, CodeEnvWaitOptionsSchema, ConnectionSummarySchema, DashboardDetailsSchema, DashboardSummaryArraySchema, DashboardSummarySchema, DataQualityComputeResultSchema, DataQualityProjectStatusSchema, DataQualityRuleArraySchema, DataQualityRuleResultArraySchema, DataQualityRuleResultSchema, DataQualityRuleSchema, DataQualityRulesSchema, DataQualityStatusByPartitionSchema, DataQualityStatusSchema, DataQualityTimelineEntrySchema, DataQualityTimelineSchema, DatasetCreateOptionsSchema, DatasetDetailsSchema, DatasetSchemaSchema, DatasetSummaryArraySchema, DatasetSummarySchema, FlowMapOptionsSchema, FlowZoneArraySchema, FlowZoneCreateOptionsSchema, FlowZoneItemSchema, FlowZoneObjectTypeSchema, FlowZonePositionSchema, FlowZoneSchema, FlowZoneUpdateOptionsSchema, FolderCreateOptionsSchema, FolderDetailsSchema, FolderItemArraySchema, FolderItemSchema, FolderSummaryArraySchema, FolderSummarySchema, FutureStateSchema, FutureWaitResultSchema, InsightDetailsSchema, InsightSummaryArraySchema, InsightSummarySchema, JobSummaryArraySchema, JobSummarySchema, JobWaitResultSchema, JupyterCellSchema, JupyterNotebookContentSchema, JupyterNotebookSummaryArraySchema, JupyterNotebookSummarySchema, NotebookSessionArraySchema, NotebookSessionSchema, parseSchema, ProjectDetailsSchema, ProjectGitActionResultSchema, ProjectGitDiffResultSchema, ProjectGitFutureResponseSchema, ProjectGitFutureStateSchema, ProjectGitLibrariesSchema, ProjectGitLibrarySchema, ProjectGitLogResultSchema, ProjectGitRemoteSchema, ProjectGitStatusSchema, ProjectGitTagSchema, ProjectGitTagsSchema, ProjectMetadataSchema, ProjectSummaryArraySchema, ProjectSummarySchema, ProjectVariablesSchema, RecipeCreateOptionsSchema, RecipeCreateResultSchema, RecipeDetailsSchema, RecipeSummaryArraySchema, RecipeSummarySchema, safeParseSchema, ScenarioDetailsSchema, ScenarioStatusSchema, ScenarioStepRunSchema, ScenarioSummaryArraySchema, ScenarioSummarySchema, ScenarioWaitResultSchema, SqlNotebookCellSchema, SqlNotebookContentSchema, SqlNotebookHistorySchema, SqlNotebookSummaryArraySchema, SqlNotebookSummarySchema, SqlQueryResponseSchema, SqlQueryResultSchema, SqlQuerySchemaSchema, WikiArticleDataArraySchema, WikiArticleDataSchema, WikiArticleMetadataSchema, WikiSettingsSchema, WikiTaxonomyNodeSchema, } from "../packages/types/src/index.js";
-export type { BuildMode, CodeEnvActionResult, CodeEnvCreateOptions, CodeEnvDetails, CodeEnvGetLogOptions, CodeEnvLogResult, CodeEnvLogSummary, CodeEnvPackageList, CodeEnvSetPackagesOptions, CodeEnvSummary, CodeEnvUpdateImagesOptions, CodeEnvUpdatePackagesOptions, CodeEnvUsage, CodeEnvVersionForProject, CodeEnvWaitOptions, ConnectionSummary, DashboardDetails, DashboardSummary, DataQualityComputeResult, DataQualityProjectStatus, DataQualityRule, DataQualityRuleResult, DataQualityRules, DataQualityStatus, DataQualityStatusByPartition, DataQualityTimeline, DataQualityTimelineEntry, DatasetCreateOptions, DatasetDetails, DatasetSchema, DatasetSummary, FlowMapOptions, FlowZone, FlowZoneCreateOptions, FlowZoneItem, FlowZoneObjectType, FlowZonePosition, FlowZoneUpdateOptions, FolderCreateOptions, FolderDetails, FolderItem, FolderSummary, FutureState, FutureWaitResult, InsightDetails, InsightSummary, JobSummary, JobWaitResult, JupyterCell, JupyterNotebookContent, JupyterNotebookSummary, NotebookSession, ProjectDetails, ProjectGitActionResult, ProjectGitDiffResult, ProjectGitFutureResponse, ProjectGitFutureState, ProjectGitLibraries, ProjectGitLibrary, ProjectGitLogResult, ProjectGitRemote, ProjectGitStatus, ProjectGitTag, ProjectGitTags, ProjectMetadata, ProjectSummary, ProjectVariables, RecipeCreateOptions, RecipeCreateResult, RecipeDetails, RecipeSummary, SafeParseResult, ScenarioDetails, ScenarioStatus, ScenarioStepRun, ScenarioSummary, ScenarioWaitResult, SqlNotebookCell, SqlNotebookContent, SqlNotebookHistory, SqlNotebookSummary, SqlQueryResponse, SqlQueryResult, SqlQuerySchema, WikiArticleData, WikiArticleMetadata, WikiSettings, WikiTaxonomyNode, } from "../packages/types/src/index.js";
+export { BuildModeSchema, CodeEnvActionResultSchema, CodeEnvCreateOptionsSchema, CodeEnvDetailsSchema, CodeEnvGetLogOptionsSchema, CodeEnvLogResultSchema, CodeEnvLogSummaryArraySchema, CodeEnvLogSummarySchema, CodeEnvPackageListSchema, CodeEnvSetPackagesOptionsSchema, CodeEnvSummaryArraySchema, CodeEnvSummarySchema, CodeEnvUpdateImagesOptionsSchema, CodeEnvUpdatePackagesOptionsSchema, CodeEnvUsageArraySchema, CodeEnvVersionForProjectSchema, CodeEnvWaitOptionsSchema, ConnectionSummarySchema, DashboardDetailsSchema, DashboardSummaryArraySchema, DashboardSummarySchema, DataQualityComputeResultSchema, DataQualityProjectStatusSchema, DataQualityRuleArraySchema, DataQualityRuleResultArraySchema, DataQualityRuleResultSchema, DataQualityRuleSchema, DataQualityRulesSchema, DataQualityStatusByPartitionSchema, DataQualityStatusSchema, DataQualityTimelineEntrySchema, DataQualityTimelineSchema, DatasetCreateOptionsSchema, DatasetDetailsSchema, DatasetSchemaSchema, DatasetSummaryArraySchema, DatasetSummarySchema, FlowMapOptionsSchema, FlowZoneArraySchema, FlowZoneCreateOptionsSchema, FlowZoneItemSchema, FlowZoneObjectTypeSchema, FlowZonePositionSchema, FlowZoneSchema, FlowZoneUpdateOptionsSchema, FolderCreateOptionsSchema, FolderDetailsSchema, FolderItemArraySchema, FolderItemSchema, FolderSummaryArraySchema, FolderSummarySchema, FutureStateSchema, FutureWaitResultSchema, InsightDetailsSchema, InsightSummaryArraySchema, InsightSummarySchema, JobSummaryArraySchema, JobSummarySchema, JobWaitResultSchema, JupyterCellSchema, JupyterNotebookContentSchema, JupyterNotebookSummaryArraySchema, JupyterNotebookSummarySchema, MacroDefinitionSchema, MacroRunStartSchema, MacroStateSchema, MacroSummaryArraySchema, MacroSummarySchema, MacroWaitResultSchema, NotebookSessionArraySchema, NotebookSessionSchema, parseSchema, ProjectDetailsSchema, ProjectGitActionResultSchema, ProjectGitDiffResultSchema, ProjectGitFutureResponseSchema, ProjectGitFutureStateSchema, ProjectGitLibrariesSchema, ProjectGitLibrarySchema, ProjectGitLogResultSchema, ProjectGitRemoteSchema, ProjectGitStatusSchema, ProjectGitTagSchema, ProjectGitTagsSchema, ProjectMetadataSchema, ProjectSummaryArraySchema, ProjectSummarySchema, ProjectTagsSchema, ProjectVariablesSchema, RecipeCreateOptionsSchema, RecipeCreateResultSchema, RecipeDetailsSchema, RecipeSummaryArraySchema, RecipeSummarySchema, safeParseSchema, ScenarioDetailsSchema, ScenarioStatusSchema, ScenarioStepRunSchema, ScenarioSummaryArraySchema, ScenarioSummarySchema, ScenarioWaitResultSchema, SqlNotebookCellSchema, SqlNotebookContentSchema, SqlNotebookHistorySchema, SqlNotebookSummaryArraySchema, SqlNotebookSummarySchema, SqlQueryResponseSchema, SqlQueryResultSchema, SqlQuerySchemaSchema, WikiArticleDataArraySchema, WikiArticleDataSchema, WikiArticleMetadataSchema, WikiSettingsSchema, WikiTaxonomyNodeSchema, } from "../packages/types/src/index.js";
+export type { BuildMode, CodeEnvActionResult, CodeEnvCreateOptions, CodeEnvDetails, CodeEnvGetLogOptions, CodeEnvLogResult, CodeEnvLogSummary, CodeEnvPackageList, CodeEnvSetPackagesOptions, CodeEnvSummary, CodeEnvUpdateImagesOptions, CodeEnvUpdatePackagesOptions, CodeEnvUsage, CodeEnvVersionForProject, CodeEnvWaitOptions, ConnectionSummary, DashboardDetails, DashboardSummary, DataQualityComputeResult, DataQualityProjectStatus, DataQualityRule, DataQualityRuleResult, DataQualityRules, DataQualityStatus, DataQualityStatusByPartition, DataQualityTimeline, DataQualityTimelineEntry, DatasetCreateOptions, DatasetDetails, DatasetSchema, DatasetSummary, FlowMapOptions, FlowZone, FlowZoneCreateOptions, FlowZoneItem, FlowZoneObjectType, FlowZonePosition, FlowZoneUpdateOptions, FolderCreateOptions, FolderDetails, FolderItem, FolderSummary, FutureState, FutureWaitResult, InsightDetails, InsightSummary, JobSummary, JobWaitResult, JupyterCell, JupyterNotebookContent, JupyterNotebookSummary, MacroDefinition, MacroRunStart, MacroState, MacroSummary, MacroSummaryArray, MacroWaitResult, NotebookSession, ProjectDetails, ProjectGitActionResult, ProjectGitDiffResult, ProjectGitFutureResponse, ProjectGitFutureState, ProjectGitLibraries, ProjectGitLibrary, ProjectGitLogResult, ProjectGitRemote, ProjectGitStatus, ProjectGitTag, ProjectGitTags, ProjectMetadata, ProjectSummary, ProjectTags, ProjectVariables, RecipeCreateOptions, RecipeCreateResult, RecipeDetails, RecipeSummary, SafeParseResult, ScenarioDetails, ScenarioStatus, ScenarioStepRun, ScenarioSummary, ScenarioWaitResult, SqlNotebookCell, SqlNotebookContent, SqlNotebookHistory, SqlNotebookSummary, SqlQueryResponse, SqlQueryResult, SqlQuerySchema, WikiArticleData, WikiArticleMetadata, WikiSettings, WikiTaxonomyNode, } from "../packages/types/src/index.js";

package/dist/src/schemas.js

@@ -3,4 +3,4 @@
  * The types package (packages/types/) owns the TypeBox schema definitions.
  * SDK consumers get everything through this re-export.
  */
-export { BuildModeSchema, CodeEnvActionResultSchema, CodeEnvCreateOptionsSchema, CodeEnvDetailsSchema, CodeEnvGetLogOptionsSchema, CodeEnvLogResultSchema, CodeEnvLogSummaryArraySchema, CodeEnvLogSummarySchema, CodeEnvPackageListSchema, CodeEnvSetPackagesOptionsSchema, CodeEnvSummaryArraySchema, CodeEnvSummarySchema, CodeEnvUpdateImagesOptionsSchema, CodeEnvUpdatePackagesOptionsSchema, CodeEnvUsageArraySchema, CodeEnvVersionForProjectSchema, CodeEnvWaitOptionsSchema, ConnectionSummarySchema, DashboardDetailsSchema, DashboardSummaryArraySchema, DashboardSummarySchema, DataQualityComputeResultSchema, DataQualityProjectStatusSchema, DataQualityRuleArraySchema, DataQualityRuleResultArraySchema, DataQualityRuleResultSchema, DataQualityRuleSchema, DataQualityRulesSchema, DataQualityStatusByPartitionSchema, DataQualityStatusSchema, DataQualityTimelineEntrySchema, DataQualityTimelineSchema, DatasetCreateOptionsSchema, DatasetDetailsSchema, DatasetSchemaSchema, DatasetSummaryArraySchema, DatasetSummarySchema, FlowMapOptionsSchema, FlowZoneArraySchema, FlowZoneCreateOptionsSchema, FlowZoneItemSchema, FlowZoneObjectTypeSchema, FlowZonePositionSchema, FlowZoneSchema, FlowZoneUpdateOptionsSchema, FolderCreateOptionsSchema, FolderDetailsSchema, FolderItemArraySchema, FolderItemSchema, FolderSummaryArraySchema, FolderSummarySchema, FutureStateSchema, FutureWaitResultSchema, InsightDetailsSchema, InsightSummaryArraySchema, InsightSummarySchema, JobSummaryArraySchema, JobSummarySchema, JobWaitResultSchema, JupyterCellSchema, JupyterNotebookContentSchema, JupyterNotebookSummaryArraySchema, JupyterNotebookSummarySchema, NotebookSessionArraySchema, NotebookSessionSchema, parseSchema, ProjectDetailsSchema, ProjectGitActionResultSchema, ProjectGitDiffResultSchema, ProjectGitFutureResponseSchema, ProjectGitFutureStateSchema, ProjectGitLibrariesSchema, ProjectGitLibrarySchema, ProjectGitLogResultSchema, ProjectGitRemoteSchema, ProjectGitStatusSchema, ProjectGitTagSchema, ProjectGitTagsSchema, ProjectMetadataSchema, ProjectSummaryArraySchema, ProjectSummarySchema, ProjectVariablesSchema, RecipeCreateOptionsSchema, RecipeCreateResultSchema, RecipeDetailsSchema, RecipeSummaryArraySchema, RecipeSummarySchema, safeParseSchema, ScenarioDetailsSchema, ScenarioStatusSchema, ScenarioStepRunSchema, ScenarioSummaryArraySchema, ScenarioSummarySchema, ScenarioWaitResultSchema, SqlNotebookCellSchema, SqlNotebookContentSchema, SqlNotebookHistorySchema, SqlNotebookSummaryArraySchema, SqlNotebookSummarySchema, SqlQueryResponseSchema, SqlQueryResultSchema, SqlQuerySchemaSchema, WikiArticleDataArraySchema, WikiArticleDataSchema, WikiArticleMetadataSchema, WikiSettingsSchema, WikiTaxonomyNodeSchema, } from "../packages/types/src/index.js";
+export { BuildModeSchema, CodeEnvActionResultSchema, CodeEnvCreateOptionsSchema, CodeEnvDetailsSchema, CodeEnvGetLogOptionsSchema, CodeEnvLogResultSchema, CodeEnvLogSummaryArraySchema, CodeEnvLogSummarySchema, CodeEnvPackageListSchema, CodeEnvSetPackagesOptionsSchema, CodeEnvSummaryArraySchema, CodeEnvSummarySchema, CodeEnvUpdateImagesOptionsSchema, CodeEnvUpdatePackagesOptionsSchema, CodeEnvUsageArraySchema, CodeEnvVersionForProjectSchema, CodeEnvWaitOptionsSchema, ConnectionSummarySchema, DashboardDetailsSchema, DashboardSummaryArraySchema, DashboardSummarySchema, DataQualityComputeResultSchema, DataQualityProjectStatusSchema, DataQualityRuleArraySchema, DataQualityRuleResultArraySchema, DataQualityRuleResultSchema, DataQualityRuleSchema, DataQualityRulesSchema, DataQualityStatusByPartitionSchema, DataQualityStatusSchema, DataQualityTimelineEntrySchema, DataQualityTimelineSchema, DatasetCreateOptionsSchema, DatasetDetailsSchema, DatasetSchemaSchema, DatasetSummaryArraySchema, DatasetSummarySchema, FlowMapOptionsSchema, FlowZoneArraySchema, FlowZoneCreateOptionsSchema, FlowZoneItemSchema, FlowZoneObjectTypeSchema, FlowZonePositionSchema, FlowZoneSchema, FlowZoneUpdateOptionsSchema, FolderCreateOptionsSchema, FolderDetailsSchema, FolderItemArraySchema, FolderItemSchema, FolderSummaryArraySchema, FolderSummarySchema, FutureStateSchema, FutureWaitResultSchema, InsightDetailsSchema, InsightSummaryArraySchema, InsightSummarySchema, JobSummaryArraySchema, JobSummarySchema, JobWaitResultSchema, JupyterCellSchema, JupyterNotebookContentSchema, JupyterNotebookSummaryArraySchema, JupyterNotebookSummarySchema, MacroDefinitionSchema, MacroRunStartSchema, MacroStateSchema, MacroSummaryArraySchema, MacroSummarySchema, MacroWaitResultSchema, NotebookSessionArraySchema, NotebookSessionSchema, parseSchema, ProjectDetailsSchema, ProjectGitActionResultSchema, ProjectGitDiffResultSchema, ProjectGitFutureResponseSchema, ProjectGitFutureStateSchema, ProjectGitLibrariesSchema, ProjectGitLibrarySchema, ProjectGitLogResultSchema, ProjectGitRemoteSchema, ProjectGitStatusSchema, ProjectGitTagSchema, ProjectGitTagsSchema, ProjectMetadataSchema, ProjectSummaryArraySchema, ProjectSummarySchema, ProjectTagsSchema, ProjectVariablesSchema, RecipeCreateOptionsSchema, RecipeCreateResultSchema, RecipeDetailsSchema, RecipeSummaryArraySchema, RecipeSummarySchema, safeParseSchema, ScenarioDetailsSchema, ScenarioStatusSchema, ScenarioStepRunSchema, ScenarioSummaryArraySchema, ScenarioSummarySchema, ScenarioWaitResultSchema, SqlNotebookCellSchema, SqlNotebookContentSchema, SqlNotebookHistorySchema, SqlNotebookSummaryArraySchema, SqlNotebookSummarySchema, SqlQueryResponseSchema, SqlQueryResultSchema, SqlQuerySchemaSchema, WikiArticleDataArraySchema, WikiArticleDataSchema, WikiArticleMetadataSchema, WikiSettingsSchema, WikiTaxonomyNodeSchema, } from "../packages/types/src/index.js";

package/dist/src/skill.d.ts

@@ -29,18 +29,27 @@ export declare function detectAgents(): DetectedAgent[];
  */
 export declare function findWorkspaceRoot(startDir: string): string;
 export type SkillStatus = "missing" | "stale" | "current";
+export interface InstalledSkillFile {
+    relativePath: string;
+    path: string;
+    status: SkillStatus;
+    changed: boolean;
+    expectedSha256: string;
+    actualSha256?: string;
+}
 export interface InstallResult {
     agent: string;
     path: string;
     via: DetectedAgent["via"];
-    /** Deterministic state of the destination file relative to the canonical skill content. */
+    /** Missing entrypoint, incomplete/different bundle, or entirely current bundle. */
     status: SkillStatus;
-    /** Whether an install run would (or did) write the destination file. */
+    /** Whether any bundled file would (or did) change. Unmanaged files are preserved. */
     changed: boolean;
-    /** SHA-256 hex of the canonical skill bytes this installation writes. */
+    /** SHA-256 of the canonical SKILL.md entrypoint, not the whole bundle. */
     expectedSha256: string;
-    /** SHA-256 hex of the destination file when it exists; absent when status is "missing". */
+    /** Hash of the existing entrypoint; absent when that file is missing. */
     actualSha256?: string;
+    files: InstalledSkillFile[];
 }
 export declare function planSkillInstalls(agents: DetectedAgent[], opts: {
     global: boolean;

package/dist/src/skill.js

@@ -2,17 +2,21 @@ import { createHash, } from "node:crypto";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
+import { fileURLToPath, } from "node:url";
 const SKILL_URLS = [
     new URL("../skills/dataiku-dss/SKILL.md", import.meta.url),
     new URL("../../skills/dataiku-dss/SKILL.md", import.meta.url),
 ];
-function skillContent() {
+function skillDirectory() {
     for (const skillUrl of SKILL_URLS) {
         if (fs.existsSync(skillUrl))
-            return fs.readFileSync(skillUrl, "utf-8");
+            return new URL("./", skillUrl);
     }
     throw new Error(`Bundled Dataiku skill not found. Checked: ${SKILL_URLS.map((url) => url.pathname).join(", ")}`);
 }
+function skillContent() {
+    return fs.readFileSync(new URL("SKILL.md", skillDirectory()), "utf-8");
+}
 export const AGENTS = {
     claude: {
         name: "Claude Code",
@@ -110,7 +114,27 @@ function skillState(target, expectedSha256) {
         actualSha256,
     };
 }
-export function planSkillInstalls(agents, opts) {
+/** Load the packaged tree, keeping portable relative paths in the report. */
+function skillFiles() {
+    const root = fileURLToPath(skillDirectory());
+    const files = new Map();
+    function visit(relativeDir) {
+        const dir = path.join(root, relativeDir);
+        for (const entry of fs.readdirSync(dir, { withFileTypes: true, }).sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0)) {
+            const relativePath = relativeDir ? `${relativeDir}/${entry.name}` : entry.name;
+            if (entry.isDirectory())
+                visit(relativePath);
+            else if (entry.isFile()) {
+                files.set(relativePath, fs.readFileSync(path.join(root, relativePath)));
+            }
+            else
+                throw new Error(`Unsupported bundled skill entry: ${relativePath}`);
+        }
+    }
+    visit("");
+    return files;
+}
+function skillInstallPlan(agents, opts, bundle) {
     const home = os.homedir();
     const results = [];
     for (const { id, def, via, } of agents) {
@@ -121,38 +145,65 @@ export function planSkillInstalls(agents, opts) {
                 : undefined;
         if (!dir)
             continue;
-        const target = path.join(dir, def.filename);
-        const expectedSha256 = sha256Hex(def.content());
-        const state = skillState(target, expectedSha256);
+        const files = [];
+        for (const [sourcePath, source,] of bundle) {
+            const relativePath = sourcePath === "SKILL.md" ? def.filename : sourcePath;
+            const target = path.join(dir, relativePath);
+            const expectedSha256 = sha256Hex(sourcePath === "SKILL.md" ? def.content() : source);
+            const state = skillState(target, expectedSha256);
+            files.push({
+                relativePath,
+                path: target,
+                ...state,
+                changed: state.status !== "current",
+                expectedSha256,
+            });
+        }
+        const entrypoint = files.find((file) => file.relativePath === def.filename);
+        const changed = files.some((file) => file.changed);
         results.push({
             agent: id,
-            path: target,
+            path: entrypoint.path,
             via,
-            ...state,
-            changed: state.status !== "current",
-            expectedSha256,
+            status: entrypoint.status === "missing" ? "missing" : changed ? "stale" : "current",
+            changed,
+            expectedSha256: entrypoint.expectedSha256,
+            ...(entrypoint.actualSha256 !== undefined ? { actualSha256: entrypoint.actualSha256, } : {}),
+            files,
         });
     }
     return results;
 }
+export function planSkillInstalls(agents, opts) {
+    return skillInstallPlan(agents, opts, skillFiles());
+}
+function writeSkillFile(file, content) {
+    if (!file.changed)
+        return;
+    const dir = path.dirname(file.path);
+    fs.mkdirSync(dir, { recursive: true, });
+    const tmpPath = path.join(dir, `.${path.basename(file.path)}.tmp-${process.pid}-${Date.now().toString(36)}`);
+    try {
+        fs.writeFileSync(tmpPath, content);
+        fs.renameSync(tmpPath, file.path);
+    }
+    finally {
+        fs.rmSync(tmpPath, { force: true, });
+    }
+}
 export function installSkill(agents, opts) {
-    const results = planSkillInstalls(agents, opts);
+    const bundle = skillFiles();
+    const results = skillInstallPlan(agents, opts, bundle);
     for (const result of results) {
-        const def = AGENTS[result.agent];
-        if (!def || !result.changed)
+        if (!result.changed)
             continue;
-        const content = def.content();
-        const dir = path.dirname(result.path);
-        fs.mkdirSync(dir, { recursive: true, });
-        const tmpPath = path.join(dir, `.${path.basename(result.path)}.tmp-${process.pid}-${Date.now().toString(36)}`);
-        fs.writeFileSync(tmpPath, content, "utf-8");
-        try {
-            fs.renameSync(tmpPath, result.path);
-        }
-        catch (error) {
-            fs.rmSync(tmpPath, { force: true, });
-            throw error;
+        const def = agents.find((agent) => agent.id === result.agent).def;
+        // Publish referenced files first; never expose a new entrypoint with missing references.
+        for (const file of result.files) {
+            if (file.relativePath !== def.filename)
+                writeSkillFile(file, bundle.get(file.relativePath));
         }
+        writeSkillFile(result.files.find((file) => file.relativePath === def.filename), def.content());
     }
     return results;
 }

package/dist/src/utils/deep-merge.d.ts

@@ -1 +1 @@
-export declare function deepMerge<T extends Record<string, unknown>>(base: T, patch: Record<string, unknown>): T;
+export declare function deepMerge<T extends object>(base: T, patch: Record<string, unknown>): T & Record<string, unknown>;

package/dist/src/utils/polling.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared polling helpers used by every long-running wait loop (jobs, futures,
+ * scenarios, macros, Visual ML training, Project Git futures).
+ */
+/** Hard ceiling for one adaptive backoff step (ms). */
+export declare const MAX_POLL_INTERVAL_MS = 10000;
+interface ComputeNextPollDelayMsOptions {
+    pollCount: number;
+    baseIntervalMs: number;
+    adaptiveEnabled: boolean;
+}
+/**
+ * Compute the next poll delay.
+ * When adaptive polling is enabled, the interval doubles every 3 polls,
+ * capped at MAX_POLL_INTERVAL_MS (or baseIntervalMs if it's larger).
+ */
+export declare function computeNextPollDelayMs({ pollCount, baseIntervalMs, adaptiveEnabled, }: ComputeNextPollDelayMsOptions): number;
+/** Distinguish an exhausted wait deadline from an earlier request timeout. */
+export declare function isRequestDeadlineError(error: unknown, deadlineAt: number): boolean;
+export {};

package/dist/src/utils/polling.js

@@ -0,0 +1,27 @@
+import { DataikuError, } from "../errors.js";
+/**
+ * Shared polling helpers used by every long-running wait loop (jobs, futures,
+ * scenarios, macros, Visual ML training, Project Git futures).
+ */
+/** Hard ceiling for one adaptive backoff step (ms). */
+export const MAX_POLL_INTERVAL_MS = 10_000;
+/**
+ * Compute the next poll delay.
+ * When adaptive polling is enabled, the interval doubles every 3 polls,
+ * capped at MAX_POLL_INTERVAL_MS (or baseIntervalMs if it's larger).
+ */
+export function computeNextPollDelayMs({ pollCount, baseIntervalMs, adaptiveEnabled, }) {
+    if (!adaptiveEnabled) {
+        return baseIntervalMs;
+    }
+    const step = Math.max(0, Math.floor((pollCount - 1) / 3));
+    const interval = baseIntervalMs * 2 ** step;
+    return Math.min(interval, Math.max(baseIntervalMs, MAX_POLL_INTERVAL_MS));
+}
+/** Distinguish an exhausted wait deadline from an earlier request timeout. */
+export function isRequestDeadlineError(error, deadlineAt) {
+    return Date.now() >= deadlineAt
+        && error instanceof DataikuError
+        && error.status === 0
+        && (error.retry?.timedOut === true || error.statusText === "Request Timeout");
+}

package/dist/src/utils/response-file.d.ts

@@ -0,0 +1,2 @@
+/** Stream with backpressure; publish only a complete download, preserving existing output on failure. */
+export declare function writeResponseToFile(path: string, response: Response, permissions?: "private" | "preserve"): Promise<number>;

package/dist/src/utils/response-file.js

@@ -0,0 +1,34 @@
+import { randomUUID, } from "node:crypto";
+import { createWriteStream, } from "node:fs";
+import { chmod, rename, rm, stat, } from "node:fs/promises";
+import { basename, dirname, join, } from "node:path";
+import { Readable, } from "node:stream";
+import { pipeline, } from "node:stream/promises";
+/** Stream with backpressure; publish only a complete download, preserving existing output on failure. */
+export async function writeResponseToFile(path, response, permissions = "private") {
+    let mode;
+    if (permissions === "preserve") {
+        try {
+            mode = (await stat(path)).mode & 0o777;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+            mode = 0o666 & ~process.umask();
+        }
+    }
+    const input = Readable.from(response.body, { objectMode: false, });
+    const temporaryPath = join(dirname(path), `.${basename(path)}.tmp-${randomUUID()}`);
+    const output = createWriteStream(temporaryPath, { flags: "wx", mode: 0o600, });
+    try {
+        await pipeline(input, output);
+        // Keep partial contents private; restore publication permissions only after completion.
+        if (mode !== undefined)
+            await chmod(temporaryPath, mode);
+        await rename(temporaryPath, path);
+        return output.bytesWritten;
+    }
+    finally {
+        await rm(temporaryPath, { force: true, });
+    }
+}

package/dist/src/utils/secret-sanitize.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Shared recursive secret sanitizer for CLI output and error surfaces.
+ *
+ * Walks any JSON-like value and:
+ * - replaces values under sensitive keys (per-domain key table) with `[redacted]`;
+ * - replaces exact occurrences of known secret values anywhere in strings;
+ * - optionally redacts userinfo embedded in HTTP(S) URL authorities
+ *   (`https://user:pass@host/...` -> `https://[redacted]@host/...`).
+ *
+ * The SDK resource layer forwards values verbatim to DSS over TLS; sanitization
+ * is a CLI presentation concern and must never leak secret material instead.
+ */
+/** Marker replacing every redacted value or secret occurrence. */
+export declare const SECRET_REDACTED = "[redacted]";
+/** Sensitive keys are matched after stripping `-`/`_` and lowercasing. */
+export declare function normalizeSecretKey(key: string): string;
+export interface SecretSanitizeOptions {
+    /**
+     * Per-domain table of sensitive keys (normalized form -> true). Policies
+     * deliberately differ between domains; never merge them.
+     */
+    sensitiveKeys: Record<string, true>;
+    /**
+     * Optional extra predicate over normalized keys for key families a flat
+     * table cannot express (e.g. the user `secrets` array).
+     */
+    isSensitiveKey?: (normalizedKey: string) => boolean;
+    /** Exact secret values to replace everywhere in strings. */
+    secrets?: string[];
+    /** Also redact userinfo embedded in HTTP(S) URL authorities. */
+    redactUrlUserinfo?: boolean;
+}
+/**
+ * Replace every exact occurrence of each secret so echoed errors cannot leak
+ * it. Empty secrets are skipped (an empty needle would corrupt every string).
+ */
+export declare function replaceSecrets(text: string, secrets: readonly string[]): string;
+/**
+ * Redact the userinfo of every HTTP(S) URL in a string. DSS may contain legacy
+ * remotes with credentials in the URL, and Git error text can echo them.
+ */
+export declare function redactUrlUserinfo(text: string): string;
+/**
+ * Recursively sanitize `value`: strings lose exact secret occurrences (and
+ * URL userinfo when enabled), objects redact values under sensitive keys and
+ * recurse, arrays recurse. Non-string scalars pass through unchanged.
+ */
+export declare function sanitizeSecrets<T>(value: T, options: SecretSanitizeOptions): T;
+/**
+ * Scrub secret material from an error's message, stack, and string body.
+ * `DataikuError.message` is built at construction, so all three carriers need
+ * the same string pass as output values.
+ */
+export declare function sanitizeErrorSecrets(error: unknown, options: SecretSanitizeOptions): unknown;

package/dist/src/utils/secret-sanitize.js

@@ -0,0 +1,101 @@
+/**
+ * Shared recursive secret sanitizer for CLI output and error surfaces.
+ *
+ * Walks any JSON-like value and:
+ * - replaces values under sensitive keys (per-domain key table) with `[redacted]`;
+ * - replaces exact occurrences of known secret values anywhere in strings;
+ * - optionally redacts userinfo embedded in HTTP(S) URL authorities
+ *   (`https://user:pass@host/...` -> `https://[redacted]@host/...`).
+ *
+ * The SDK resource layer forwards values verbatim to DSS over TLS; sanitization
+ * is a CLI presentation concern and must never leak secret material instead.
+ */
+/** Marker replacing every redacted value or secret occurrence. */
+export const SECRET_REDACTED = "[redacted]";
+/** Sensitive keys are matched after stripping `-`/`_` and lowercasing. */
+export function normalizeSecretKey(key) {
+    return key.replace(/[-_]/g, "").toLowerCase();
+}
+/**
+ * Replace every exact occurrence of each secret so echoed errors cannot leak
+ * it. Empty secrets are skipped (an empty needle would corrupt every string).
+ */
+export function replaceSecrets(text, secrets) {
+    let result = text;
+    for (const secret of secrets) {
+        if (secret !== "" && secret !== undefined && secret !== null) {
+            result = result.split(secret).join(SECRET_REDACTED);
+        }
+    }
+    return result;
+}
+/**
+ * Redact the userinfo of every HTTP(S) URL in a string. DSS may contain legacy
+ * remotes with credentials in the URL, and Git error text can echo them.
+ */
+export function redactUrlUserinfo(text) {
+    return text.replace(/https?:[\\/]{1,2}[^\s"'<>]+/giu, (url) => {
+        const schemeEnd = url.indexOf(":") + 1;
+        let authorityStart = schemeEnd;
+        while (url[authorityStart] === "/" || url[authorityStart] === "\\")
+            authorityStart++;
+        const slash = url.slice(authorityStart).search(/[\\/]/u);
+        const authorityEnd = slash === -1 ? url.length : authorityStart + slash;
+        const at = url.lastIndexOf("@", authorityEnd - 1);
+        if (at < authorityStart)
+            return url;
+        return `${url.slice(0, authorityStart)}${SECRET_REDACTED}@${url.slice(at + 1)}`;
+    });
+}
+/**
+ * Recursively sanitize `value`: strings lose exact secret occurrences (and
+ * URL userinfo when enabled), objects redact values under sensitive keys and
+ * recurse, arrays recurse. Non-string scalars pass through unchanged.
+ */
+export function sanitizeSecrets(value, options) {
+    const { secrets = [], } = options;
+    const stringPass = (text) => {
+        const sanitized = options.redactUrlUserinfo ? redactUrlUserinfo(text) : text;
+        return replaceSecrets(sanitized, secrets);
+    };
+    if (typeof value === "string") {
+        return stringPass(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => sanitizeSecrets(item, options));
+    }
+    if (value !== null && typeof value === "object") {
+        const sanitized = {};
+        for (const [key, item,] of Object.entries(value)) {
+            const normalizedKey = normalizeSecretKey(key);
+            sanitized[key] = options.sensitiveKeys[normalizedKey] === true
+                || options.isSensitiveKey?.(normalizedKey) === true
+                ? SECRET_REDACTED
+                : sanitizeSecrets(item, options);
+        }
+        return sanitized;
+    }
+    return value;
+}
+/**
+ * Scrub secret material from an error's message, stack, and string body.
+ * `DataikuError.message` is built at construction, so all three carriers need
+ * the same string pass as output values.
+ */
+export function sanitizeErrorSecrets(error, options) {
+    if (!(error instanceof Error))
+        return error;
+    const stringPass = (text) => {
+        const sanitized = options.redactUrlUserinfo ? redactUrlUserinfo(text) : text;
+        return replaceSecrets(sanitized, options.secrets ?? []);
+    };
+    error.message = stringPass(error.message);
+    if (typeof error.stack === "string") {
+        error.stack = stringPass(error.stack);
+    }
+    const errorWithBody = error;
+    if (typeof errorWithBody.body === "string") {
+        errorWithBody.body = stringPass(errorWithBody.body);
+    }
+    return error;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "dataiku-sdk",
-	"version": "3.1.0",
+	"version": "3.3.0",
 	"description": "Dataiku DSS SDK and CLI for programmatic access to DSS REST APIs",
 	"type": "module",
 	"workspaces": [
@@ -25,13 +25,15 @@
 		"build": "tsc && bun scripts/generate-build-metadata.mjs && tsc -p packages/types/tsconfig.json",
 		"prepack": "bun scripts/sync-plugin-version.mjs --check && tsc && bun scripts/generate-build-metadata.mjs && tsc -p packages/types/tsconfig.json",
 		"prepublishOnly": "bun scripts/sync-plugin-version.mjs --check && tsc && bun scripts/generate-build-metadata.mjs && tsc -p packages/types/tsconfig.json",
-		"check": "tsc --noEmit && bun scripts/sync-plugin-version.mjs --check",
+		"check": "tsc --noEmit && tsc -p tools/oxlint/tsconfig.json && bun run check:live && bun scripts/sync-plugin-version.mjs --check",
 		"version": "bun scripts/sync-plugin-version.mjs && git add plugin.json",
-		"lint": "oxlint src/",
-		"lint:fix": "oxlint --fix src/",
+		"lint": "oxlint src/ tools/oxlint/ scripts/live-suite.ts tests/live-*.ts",
+		"lint:fix": "oxlint --fix src/ tools/oxlint/ scripts/live-suite.ts tests/live-*.ts",
 		"format": "dprint fmt",
 		"format:check": "dprint check",
 		"test": "bun test",
+		"test:live": "bun --no-env-file scripts/live-suite.ts",
+		"check:live": "tsc --noEmit -p tsconfig.live.json",
 		"test:tokens": "bun test tests/cli/agent-token-budget.test.ts",
 		"test:platform": "bun scripts/platform-smoke.mjs",
 		"test:integration": "cross-env RUN_DATAIKU_INTEGRATION=1 bun test tests/integration-playground.test.ts",
@@ -40,11 +42,12 @@
 		"test:integration:rigorous:mutating": "cross-env RUN_DATAIKU_INTEGRATION=1 RUN_DATAIKU_INTEGRATION_MUTATING=1 bun test tests/integration-rigorous.test.ts"
 	},
 	"devDependencies": {
+		"@oxlint/plugins": "1.81.0",
 		"@types/bun": "^1.4.0",
 		"cross-env": "^10.1.0",
 		"dprint": "^0.57.0",
 		"js-tiktoken": "1.0.21",
-		"oxlint": "^1.81.0",
+		"oxlint": "1.81.0",
 		"typescript": "^7.0.2",
 		"typescript-language-server": "6.0.0",
 		"typescript-language-service": "npm:typescript@5.9.3"