fix: prevent large support bundle downloads BED-9186

[lrfalslev]

Description

Update openapi schema and trim support bundle for BHE https://github.com/SpecterOps/bloodhound-enterprise/pull/1708

Motivation and Context

Resolves BED-9186

Why is this change required? What problem does it solve?

How Has This Been Tested?

validated schema updates in UI

Screenshots (optional):

Types of changes

• Bug fix (non-breaking change which fixes an issue)

Checklist:

• I have met the contributing prerequisites
  • Assigned myself to this PR
  • Added the appropriate labels
  • Associated an issue: Issues and Pull Requests README #672
  • Read the Contributing guide: https://github.com/SpecterOps/BloodHound/wiki/Contributing
• I have ensured that related documentation is up-to-date
  • Open API docs
  • Code comments (GoDocs / JSDocs)
• I have followed proper test practices
  • Added/updated tests to cover my changes
  • All new and existing tests passed

Summary by CodeRabbit

• API Updates
  • Added a dedicated client support bundle schema with artifact identifiers, status, size, operation details, and lifecycle timestamps.
  • Clarified the distinction between support bundle records and client management operations.
  • Updated support bundle summaries and API references to use the revised schema definitions.
  • Refined management operation responses to focus on artifact, status, and lifecycle information.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 4f48507e-149f-42ce-ac65-7427e2359471

📥 Commits

Reviewing files that changed from the base of the PR and between e324e12 and 6eeeb9f.

📒 Files selected for processing (4)

• packages/go/openapi/doc/openapi.json
• packages/go/openapi/src/schemas/model.client-support-bundle-summary.yaml
• packages/go/openapi/src/schemas/model.client-support-bundle.yaml
• packages/javascript/js-client-library/src/responses.ts

💤 Files with no reviewable changes (1)

• packages/javascript/js-client-library/src/responses.ts

---

📝 Walkthrough

Walkthrough

The OpenAPI contract now separates client support bundles from client management operations. Support-bundle references and artifact metadata were updated, and the JavaScript ManagementOperation type was aligned with the revised contract.

Changes

Support bundle and management operation contracts

Layer / File(s)	Summary
Separate support-bundle and management-operation schemas packages/go/openapi/src/schemas/model.client-support-bundle.yaml, packages/go/openapi/doc/openapi.json, packages/go/openapi/src/schemas/model.client-support-bundle-summary.yaml	The OpenAPI definitions separate support-bundle artifact fields from management-operation fields. The artifact-status enum and affected references were updated.
Align JavaScript management operation response packages/javascript/js-client-library/src/responses.ts	ManagementOperation removes requester, creation-time, and execution-time fields while retaining operation lifecycle fields.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Possibly related PRs

• SpecterOps/BloodHound#3117: Both PRs update management-operation and support-bundle schemas and artifact metadata fields.
• SpecterOps/BloodHound#3044: Both PRs modify the shared support-bundle and management-operation schemas and JavaScript response types.
• SpecterOps/BloodHound#3029: Both PRs update support-bundle and management-operation schemas and types.

Suggested labels: api, documentation, javascript

Suggested reviewers: mykeelium

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the primary change: preventing large support bundle downloads under BED-9186.
Description check	✅ Passed	The description includes the required sections, linked ticket, change rationale, testing note, change type, and completed checklist.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch lfalslev/bed-9186

---

_{Comment @coderabbitai help to get the list of available commands.}