@ampsec/platform-client 70.2.0 → 70.3.0

package/build/src/dto/platform/platform.tenants.dto.js

@@ -1,3 +1,99 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports._TenantCountReportDto = exports._FlowsCountReport = exports._NotificationsCountReport = exports._FindingsCountReport = exports._SaasCompCountReport = exports._UserCountReport = exports._AssetCountReport = void 0;
+const zod_1 = require("zod");
+const enums_1 = require("../enums");
+const flows_dto_1 = require("../flows.dto");
+// TODO add "missing from" reports to better understand coverage gaps
+exports._AssetCountReport = zod_1.z.object({
+    byType: zod_1.z.object({ assetType: zod_1.z.nativeEnum(enums_1.GlobalAssetType), total: zod_1.z.number() }).array(),
+    // TODO byConnector: z.object({cid: z.string(), active: z.number(), inactive: z.number(), total: z.number()}).array(),
+    byConnector: zod_1.z.object({ cid: zod_1.z.string(), assetType: zod_1.z.nativeEnum(enums_1.GlobalAssetType), total: zod_1.z.number() }).array(),
+    totalAssets: zod_1.z.number(),
+    totalSaasAssets: zod_1.z.number(),
+    totalStagedAssets: zod_1.z.number(),
+    links: zod_1.z.object({
+        withUsers: zod_1.z.number(),
+        withoutUsers: zod_1.z.number(),
+        withVulns: zod_1.z.number(),
+        withoutVulns: zod_1.z.number(),
+        withUserAssignedVulns: zod_1.z.number(),
+        withOrphanedVulns: zod_1.z.number(),
+    }),
+});
+exports._UserCountReport = zod_1.z.object({
+    byConnectorStatus: zod_1.z.object({ cid: zod_1.z.string(), userType: zod_1.z.nativeEnum(enums_1.GlobalUserType), total: zod_1.z.number() }).array(),
+    byType: zod_1.z.object({ userType: zod_1.z.nativeEnum(enums_1.GlobalUserType), total: zod_1.z.number() }).array(),
+    totalUsers: zod_1.z.number(),
+    totalSaasUsers: zod_1.z.number(),
+    totalStagedUsers: zod_1.z.number(),
+    links: zod_1.z.object({
+        withDevices: zod_1.z.number(),
+        withoutDevices: zod_1.z.number(),
+    }),
+});
+exports._SaasCompCountReport = zod_1.z.object({
+    byConnectorKind: zod_1.z.object({ cid: zod_1.z.string(), kind: zod_1.z.string(), total: zod_1.z.number() }).array(),
+    totalSaasComps: zod_1.z.number(),
+    totalStagedSaasComps: zod_1.z.number(),
+    links: zod_1.z.object({
+        withUsers: zod_1.z.number(),
+        withoutUsers: zod_1.z.number(),
+        withDevices: zod_1.z.number(),
+        withoutDevices: zod_1.z.number(),
+        orphaned: zod_1.z.number(),
+    }),
+});
+const _RecentFindingSummaryReport = zod_1.z.object({
+    openWithUser: zod_1.z.number(),
+    openWithoutUser: zod_1.z.number(),
+    closedWithUser: zod_1.z.number(),
+    closedWithoutUser: zod_1.z.number(),
+});
+exports._FindingsCountReport = zod_1.z.object({
+    connectorKindSeverityStatus: zod_1.z
+        .object({
+        cid: zod_1.z.string().nullable(),
+        kind: zod_1.z.union([zod_1.z.nativeEnum(enums_1.FindingKind), zod_1.z.string()]),
+        severity: zod_1.z.nativeEnum(enums_1.FindingSeverity),
+        status: zod_1.z.nativeEnum(enums_1.FindingStatus),
+        total: zod_1.z.number(),
+    })
+        .array(),
+    total: _RecentFindingSummaryReport,
+    total90d: _RecentFindingSummaryReport,
+    pending: zod_1.z.number(),
+    links: zod_1.z.object({
+        withUsers: zod_1.z.number(),
+        withoutUsers: zod_1.z.number(),
+        withDevices: zod_1.z.number(),
+        withoutDevices: zod_1.z.number(),
+    }),
+});
+exports._NotificationsCountReport = zod_1.z.object({
+    total: zod_1.z.number(),
+    total7d: zod_1.z.number(),
+    total30d: zod_1.z.number(),
+    total90d: zod_1.z.number(),
+});
+const _FlowStatusSummaryReport = zod_1.z.object({
+    active: zod_1.z.number(),
+    closed: zod_1.z.number(),
+});
+exports._FlowsCountReport = zod_1.z.object({
+    specsByStatusTrigger: zod_1.z.object({ status: zod_1.z.nativeEnum(flows_dto_1.FlowSpecStatusKind), trigger: zod_1.z.string(), total: zod_1.z.number() }).array(),
+    statesByBucketStatus: zod_1.z.object({ status: zod_1.z.string(), bucket: zod_1.z.union([zod_1.z.nativeEnum(enums_1.FindingKind), zod_1.z.string()]), total: zod_1.z.number() }).array(),
+    total: _FlowStatusSummaryReport,
+    total7d: _FlowStatusSummaryReport,
+    total30d: _FlowStatusSummaryReport,
+    total90d: _FlowStatusSummaryReport,
+});
+exports._TenantCountReportDto = zod_1.z.object({
+    users: exports._UserCountReport,
+    assets: exports._AssetCountReport,
+    saasComp: exports._SaasCompCountReport,
+    findings: exports._FindingsCountReport,
+    notifications: exports._NotificationsCountReport,
+    flows: exports._FlowsCountReport,
+});
 //# sourceMappingURL=platform.tenants.dto.js.map

package/build/src/dto/platform/platform.tenants.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform.tenants.dto.js","sourceRoot":"","sources":["../../../../src/dto/platform/platform.tenants.dto.ts"],"names":[],"mappings":""}
+{"version":3,"file":"platform.tenants.dto.js","sourceRoot":"","sources":["../../../../src/dto/platform/platform.tenants.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAsB;AAEtB,oCAAsG;AACtG,4CAAgD;AAMhD,qEAAqE;AAExD,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAe,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IACvF,sHAAsH;IACtH,WAAW,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAe,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IAC7G,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE;IAC3B,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE;IAC7B,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;QACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;QACxB,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE;QACjC,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE;KAC9B,CAAC;CACH,CAAC,CAAC;AAGU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,iBAAiB,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAc,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IACjH,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,sBAAc,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IACrF,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;IACtB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;IAC1B,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;KAC3B,CAAC;CACH,CAAC,CAAC;AAGU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,eAAe,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IACzF,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;IAC1B,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE;IAChC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;QACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;KACrB,CAAC;CACH,CAAC,CAAC;AAGH,MAAM,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE;IAC3B,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;IAC1B,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE;CAC9B,CAAC,CAAC;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,2BAA2B,EAAE,OAAC;SAC3B,MAAM,CAAC;QACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1B,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,UAAU,CAAC,mBAAW,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,uBAAe,CAAC;QACvC,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,qBAAa,CAAC;QACnC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;KAClB,CAAC;SACD,KAAK,EAAE;IACV,KAAK,EAAE,2BAA2B;IAClC,QAAQ,EAAE,2BAA2B;IACrC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC;QACd,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;QACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;QACxB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE;QACvB,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE;KAC3B,CAAC;CACH,CAAC,CAAC;AAGU,QAAA,yBAAyB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AACU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,8BAAkB,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IAC1H,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,EAAC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,UAAU,CAAC,mBAAW,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,EAAC,CAAC,CAAC,KAAK,EAAE;IACzI,KAAK,EAAE,wBAAwB;IAC/B,OAAO,EAAE,wBAAwB;IACjC,QAAQ,EAAE,wBAAwB;IAClC,QAAQ,EAAE,wBAAwB;CACnC,CAAC,CAAC;AAGU,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,wBAAgB;IACvB,MAAM,EAAE,yBAAiB;IACzB,QAAQ,EAAE,4BAAoB;IAC9B,QAAQ,EAAE,4BAAoB;IAC9B,aAAa,EAAE,iCAAyB;IACxC,KAAK,EAAE,yBAAiB;CACzB,CAAC,CAAC"}

package/build/src/services/AmpSdk.d.ts

@@ -1,4 +1,4 @@
-import { PlatformActionExecutionDto, PlatformActionExecutionUpsertDto, PlatformCustomActionDto, PlatformCustomActionUpsertDto, PlatformCustomScoreCohortDto, PlatformCustomScoreCohortUpsertDto, PlatformCustomScoreValueDto, PlatformCustomScoreValueUpsertDto, PlatformFindingSpecDto, PlatformFindingSpecUpsertDto, PlatformFlowSpecDto, PlatformFlowSpecUpsertDto, PlatformFlowStateDto, PlatformFlowStateUpsertDto, PlatformJobExecutionStateDto, PlatformJobExecutionStateUpsertDto, PlatformJobSpecDto, PlatformJobSpecUpsertDto, PlatformNotificationDto, PlatformNotificationUpsertDto, PlatformProviderUpsertDto, PlatformReportResultDto, PlatformReportResultUpsertDto, PlatformRiskContributorDto, PlatformRiskContributorUpsertDto, PlatformSaasComponentDto, PlatformSaasComponentUpsertDto, PlatformStagedSaasAssetDto, PlatformStagedSaasAssetUpsertDto, PlatformStagedSaasUserDto, PlatformStagedSaasUserUpsertDto, PlatformTokenDto, PlatformTokenUpsertDto, ProviderDto, TenantDto, TenantUpsertDto } from '../dto';
+import { PlatformActionExecutionDto, PlatformActionExecutionUpsertDto, PlatformCustomActionDto, PlatformCustomActionUpsertDto, PlatformCustomScoreCohortDto, PlatformCustomScoreCohortUpsertDto, PlatformCustomScoreValueDto, PlatformCustomScoreValueUpsertDto, PlatformFindingSpecDto, PlatformFindingSpecUpsertDto, PlatformFlowSpecDto, PlatformFlowSpecUpsertDto, PlatformFlowStateDto, PlatformFlowStateUpsertDto, PlatformJobExecutionStateDto, PlatformJobExecutionStateUpsertDto, PlatformJobSpecDto, PlatformJobSpecUpsertDto, PlatformNotificationDto, PlatformNotificationUpsertDto, PlatformProviderUpsertDto, PlatformReportResultDto, PlatformReportResultUpsertDto, PlatformRiskContributorDto, PlatformRiskContributorUpsertDto, PlatformSaasComponentDto, PlatformSaasComponentUpsertDto, PlatformStagedSaasAssetDto, PlatformStagedSaasAssetUpsertDto, PlatformStagedSaasUserDto, PlatformStagedSaasUserUpsertDto, PlatformTokenDto, PlatformTokenUpsertDto, ProviderDto } from '../dto';
 import { AmpEntityService, AmpSdkAssetService, AmpSdkTenantService, AmpSdkUserService, TruncatableAmpEntityService } from './entity.service';
 import { AmpRestClientOptions, RestClient } from './rest';
 import { EnumService } from './rest/EnumService';
@@ -8,6 +8,7 @@ import { ContentfulService } from './contentful.service';
 import { FindingsInsightsService } from './findingsInsights.service';
 import { PlatformConnectorService } from './connector.platform.service';
 import { PlatformAgentService } from './AgentsService';
+import { TenantsService } from './rest/TenantsService';
 import { FindingsService } from './findings.service';
 export type AmpSdkOptions = AmpRestClientOptions;
 /**
@@ -47,7 +48,7 @@ export declare class AmpSdkServices {
     readonly stagedSaaSComponents: TruncatableAmpEntityService<PlatformSaasComponentUpsertDto, PlatformSaasComponentDto>;
     readonly stagedSaaSUsers: TruncatableAmpEntityService<PlatformStagedSaasUserUpsertDto, PlatformStagedSaasUserDto>;
     readonly settings: AmpSdkSettingsService;
-    readonly tenants: AmpSdkTenantService<TenantUpsertDto, TenantDto>;
+    readonly tenants: TenantsService;
     readonly tokens: AmpSdkTenantService<PlatformTokenUpsertDto, PlatformTokenDto>;
     readonly users: AmpSdkUserService;
     constructor(rest: RestClient);

package/build/src/services/AmpSdk.js

@@ -11,6 +11,7 @@ const contentful_service_1 = require("./contentful.service");
 const findingsInsights_service_1 = require("./findingsInsights.service");
 const connector_platform_service_1 = require("./connector.platform.service");
 const AgentsService_1 = require("./AgentsService");
+const TenantsService_1 = require("./rest/TenantsService");
 const findings_service_1 = require("./findings.service");
 /**
  * AMP API
@@ -50,7 +51,7 @@ class AmpSdkServices {
         this.stagedSaaSComponents = new entity_service_1.TruncatableAmpEntityServiceImpl(rest, constants_1.KIND.STAGED_SAAS_COMPONENTS, constants_1.TARGET_API_PLATFORM);
         this.stagedSaaSUsers = new entity_service_1.TruncatableAmpEntityServiceImpl(rest, constants_1.KIND.STAGED_SAAS_USERS, constants_1.TARGET_API_PLATFORM);
         this.settings = new settings_service_1.AmpSdkSettingsService(rest);
-        this.tenants = new entity_service_1.AmpEntityServiceImpl(rest, constants_1.KIND.TENANTS, constants_1.TARGET_API_PLATFORM);
+        this.tenants = new TenantsService_1.TenantsService(rest, constants_1.TARGET_API_PLATFORM);
         this.tokens = new entity_service_1.AmpEntityServiceImpl(rest, constants_1.KIND.TOKENS, constants_1.TARGET_API_PLATFORM);
         this.users = new entity_service_1.AmpSdkUserService(rest, constants_1.TARGET_API_PLATFORM);
     }

package/build/src/services/AmpSdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"AmpSdk.js","sourceRoot":"","sources":["../../../src/services/AmpSdk.ts"],"names":[],"mappings":";;;AAwCA,qDAQ0B;AAC1B,iCAA0E;AAC1E,2CAAsD;AACtD,oDAAmE;AACnE,yDAAyD;AACzD,6DAA+J;AAC/J,6DAAuD;AACvD,yEAAmE;AACnE,6EAAsE;AACtE,mDAAqD;AACrD,yDAAmD;AAInD;;;;;;;;GAQG;AACH,MAAa,cAAc;IAgCzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,qCAAoB,CAA+D,IAAI,EAAE,gBAAI,CAAC,gBAAgB,EAAE,+BAAmB,CAAC,CAAC;QACjK,IAAI,CAAC,MAAM,GAAG,IAAI,oCAAoB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,mCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,GAAG,IAAI,qDAAwB,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,IAAI,sCAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAyD,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QACtJ,IAAI,CAAC,kBAAkB,GAAG,IAAI,qCAAoB,CAAmE,IAAI,EAAE,gBAAI,CAAC,oBAAoB,EAAE,+BAAmB,CAAC,CAAC;QAC3K,IAAI,CAAC,iBAAiB,GAAG,IAAI,qCAAoB,CAAiE,IAAI,EAAE,gBAAI,CAAC,mBAAmB,EAAE,+BAAmB,CAAC,CAAC;QACvK,IAAI,CAAC,KAAK,GAAG,IAAI,gCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,kCAAe,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,6CAAwB,CAAuD,IAAI,EAAE,gBAAI,CAAC,aAAa,EAAE,+BAAmB,CAAC,CAAC;QACtJ,IAAI,CAAC,gBAAgB,GAAG,IAAI,kDAAuB,CAAC,IAAI,EAAE,gBAAI,CAAC,iBAAiB,EAAE,+BAAmB,CAAC,CAAC;QACvG,IAAI,CAAC,SAAS,GAAG,IAAI,6CAAwB,CAAiD,IAAI,EAAE,gBAAI,CAAC,UAAU,EAAE,+BAAmB,CAAC,CAAC;QAC1I,IAAI,CAAC,UAAU,GAAG,IAAI,6CAAwB,CAAmD,IAAI,EAAE,gBAAI,CAAC,WAAW,EAAE,+BAAmB,CAAC,CAAC;QAC9I,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAmE,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAChK,IAAI,CAAC,IAAI,GAAG,IAAI,qCAAoB,CAA+C,IAAI,EAAE,gBAAI,CAAC,QAAQ,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAyD,IAAI,EAAE,gBAAI,CAAC,aAAa,EAAE,+BAAmB,CAAC,CAAC;QACrJ,IAAI,CAAC,SAAS,GAAG,IAAI,qCAAoB,CAAyC,IAAI,EAAE,gBAAI,CAAC,SAAS,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,GAAG,IAAI,6CAAwB,CAAyD,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAC1J,IAAI,CAAC,gBAAgB,GAAG,IAAI,6CAAwB,CAA+D,IAAI,EAAE,gBAAI,CAAC,iBAAiB,EAAE,+BAAmB,CAAC,CAAC;QACtK,IAAI,CAAC,UAAU,GAAG,IAAI,2CAAsB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,IAAI,+CAA0B,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,GAAG,IAAI,0CAAqB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,IAAI,gDAA+B,CAA+D,IAAI,EAAE,gBAAI,CAAC,kBAAkB,EAAE,+BAAmB,CAAC,CAAC;QAC9K,IAAI,CAAC,oBAAoB,GAAG,IAAI,gDAA+B,CAC7D,IAAI,EACJ,gBAAI,CAAC,sBAAsB,EAC3B,+BAAmB,CACpB,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,IAAI,gDAA+B,CAA6D,IAAI,EAAE,gBAAI,CAAC,iBAAiB,EAAE,+BAAmB,CAAC,CAAC;QAE1K,IAAI,CAAC,QAAQ,GAAG,IAAI,wCAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,qCAAoB,CAA6B,IAAI,EAAE,gBAAI,CAAC,OAAO,EAAE,+BAAmB,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,GAAG,IAAI,qCAAoB,CAA2C,IAAI,EAAE,gBAAI,CAAC,MAAM,EAAE,+BAAmB,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,GAAG,IAAI,kCAAiB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAsB;QACpC,MAAM,IAAI,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AA1ED,wCA0EC"}
+{"version":3,"file":"AmpSdk.js","sourceRoot":"","sources":["../../../src/services/AmpSdk.ts"],"names":[],"mappings":";;;AAsCA,qDAQ0B;AAC1B,iCAA0E;AAC1E,2CAAsD;AACtD,oDAAmE;AACnE,yDAAyD;AACzD,6DAA+J;AAC/J,6DAAuD;AACvD,yEAAmE;AACnE,6EAAsE;AACtE,mDAAqD;AACrD,0DAAqD;AACrD,yDAAmD;AAInD;;;;;;;;GAQG;AACH,MAAa,cAAc;IAgCzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,qCAAoB,CAA+D,IAAI,EAAE,gBAAI,CAAC,gBAAgB,EAAE,+BAAmB,CAAC,CAAC;QACjK,IAAI,CAAC,MAAM,GAAG,IAAI,oCAAoB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,IAAI,mCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,GAAG,IAAI,qDAAwB,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,IAAI,sCAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAyD,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QACtJ,IAAI,CAAC,kBAAkB,GAAG,IAAI,qCAAoB,CAAmE,IAAI,EAAE,gBAAI,CAAC,oBAAoB,EAAE,+BAAmB,CAAC,CAAC;QAC3K,IAAI,CAAC,iBAAiB,GAAG,IAAI,qCAAoB,CAAiE,IAAI,EAAE,gBAAI,CAAC,mBAAmB,EAAE,+BAAmB,CAAC,CAAC;QACvK,IAAI,CAAC,KAAK,GAAG,IAAI,gCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,kCAAe,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,YAAY,GAAG,IAAI,6CAAwB,CAAuD,IAAI,EAAE,gBAAI,CAAC,aAAa,EAAE,+BAAmB,CAAC,CAAC;QACtJ,IAAI,CAAC,gBAAgB,GAAG,IAAI,kDAAuB,CAAC,IAAI,EAAE,gBAAI,CAAC,iBAAiB,EAAE,+BAAmB,CAAC,CAAC;QACvG,IAAI,CAAC,SAAS,GAAG,IAAI,6CAAwB,CAAiD,IAAI,EAAE,gBAAI,CAAC,UAAU,EAAE,+BAAmB,CAAC,CAAC;QAC1I,IAAI,CAAC,UAAU,GAAG,IAAI,6CAAwB,CAAmD,IAAI,EAAE,gBAAI,CAAC,WAAW,EAAE,+BAAmB,CAAC,CAAC;QAC9I,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAmE,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAChK,IAAI,CAAC,IAAI,GAAG,IAAI,qCAAoB,CAA+C,IAAI,EAAE,gBAAI,CAAC,QAAQ,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAyD,IAAI,EAAE,gBAAI,CAAC,aAAa,EAAE,+BAAmB,CAAC,CAAC;QACrJ,IAAI,CAAC,SAAS,GAAG,IAAI,qCAAoB,CAAyC,IAAI,EAAE,gBAAI,CAAC,SAAS,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,GAAG,IAAI,6CAAwB,CAAyD,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAC1J,IAAI,CAAC,gBAAgB,GAAG,IAAI,6CAAwB,CAA+D,IAAI,EAAE,gBAAI,CAAC,iBAAiB,EAAE,+BAAmB,CAAC,CAAC;QACtK,IAAI,CAAC,UAAU,GAAG,IAAI,2CAAsB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,IAAI,+CAA0B,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,GAAG,IAAI,0CAAqB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,gBAAgB,GAAG,IAAI,gDAA+B,CAA+D,IAAI,EAAE,gBAAI,CAAC,kBAAkB,EAAE,+BAAmB,CAAC,CAAC;QAC9K,IAAI,CAAC,oBAAoB,GAAG,IAAI,gDAA+B,CAC7D,IAAI,EACJ,gBAAI,CAAC,sBAAsB,EAC3B,+BAAmB,CACpB,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,IAAI,gDAA+B,CAA6D,IAAI,EAAE,gBAAI,CAAC,iBAAiB,EAAE,+BAAmB,CAAC,CAAC;QAE1K,IAAI,CAAC,QAAQ,GAAG,IAAI,wCAAqB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,+BAAc,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,GAAG,IAAI,qCAAoB,CAA2C,IAAI,EAAE,gBAAI,CAAC,MAAM,EAAE,+BAAmB,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,GAAG,IAAI,kCAAiB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAsB;QACpC,MAAM,IAAI,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AA1ED,wCA0EC"}

package/build/src/services/rest/TenantsService.d.ts

@@ -0,0 +1,27 @@
+import { TenantCountReportDto, TenantDto, TenantUpsertDto } from '../../dto';
+import { TargetApi } from '../constants';
+import { AmpEntityServiceImpl } from '../entity.service';
+import { RestClient } from './RestClient';
+import { OpsRpcResult } from '../../dto/platform/platform.ops.dto';
+export declare class TenantsService extends AmpEntityServiceImpl<TenantUpsertDto, TenantDto> {
+    constructor(rest: RestClient, targetApi?: TargetApi);
+    countReport(tid: string): Promise<TenantCountReportDto>;
+    /**
+     * !!! WARNING !!! 🚨 💀 🚨 💀 🚨 💀 🚨 💀
+     * This method will permanently HARD delete any soft deleted tenant data, including the tenant itsself. There is no UNDO!
+     *
+     * @param tid Tenant id to clean
+     * @returns void
+     * @deprecated do not use this function... unless you REALLY mean it! Note: this is more of a warning than true deprecation.
+     */
+    hardDelete(tid: string): Promise<OpsRpcResult>;
+    /**
+     * !!! WARNING !!! 🚨 💀 🚨 💀 🚨 💀 🚨 💀
+     * This method will permanently HARD delete a tenant and associated data. There is no UNDO!
+     *
+     * @param tid Tenant id to delete
+     * @returns void
+     * @deprecated Use truncate instead... unless you REALLY mean it! Note: this is more of a warning than true deprecation.
+     */
+    removeTenant(tid: string): Promise<OpsRpcResult>;
+}

package/build/src/services/rest/TenantsService.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantsService = void 0;
+const dto_1 = require("../../dto");
+const constants_1 = require("../constants");
+const entity_service_1 = require("../entity.service");
+const platform_ops_dto_1 = require("../../dto/platform/platform.ops.dto");
+class TenantsService extends entity_service_1.AmpEntityServiceImpl {
+    constructor(rest, targetApi = 'api') {
+        super(rest, constants_1.KIND.TENANTS, targetApi);
+    }
+    countReport(tid) {
+        const url = `/${this.targetApi}/v1/${this.kind}/${tid}/count_report`;
+        return this.rest
+            .call({
+            url,
+            method: 'GET',
+        })
+            .then(res => dto_1._TenantCountReportDto.parse(res.data));
+    }
+    /**
+     * !!! WARNING !!! 🚨 💀 🚨 💀 🚨 💀 🚨 💀
+     * This method will permanently HARD delete any soft deleted tenant data, including the tenant itsself. There is no UNDO!
+     *
+     * @param tid Tenant id to clean
+     * @returns void
+     * @deprecated do not use this function... unless you REALLY mean it! Note: this is more of a warning than true deprecation.
+     */
+    hardDelete(tid) {
+        const url = `/${this.targetApi}/v1/ops/rpc`;
+        return this.rest
+            .call({
+            url,
+            method: 'POST',
+            data: {
+                op: 'hardDelete',
+                input: {
+                    tid,
+                },
+            },
+        })
+            .then(res => platform_ops_dto_1._OpsRpcResult.parse(res.data));
+    }
+    /**
+     * !!! WARNING !!! 🚨 💀 🚨 💀 🚨 💀 🚨 💀
+     * This method will permanently HARD delete a tenant and associated data. There is no UNDO!
+     *
+     * @param tid Tenant id to delete
+     * @returns void
+     * @deprecated Use truncate instead... unless you REALLY mean it! Note: this is more of a warning than true deprecation.
+     */
+    removeTenant(tid) {
+        const url = `/${this.targetApi}/v1/ops/rpc`;
+        return this.rest
+            .call({
+            url,
+            method: 'POST',
+            data: {
+                op: 'removeTenant',
+                input: {
+                    tid,
+                },
+            },
+        })
+            .then(res => platform_ops_dto_1._OpsRpcResult.parse(res.data));
+    }
+}
+exports.TenantsService = TenantsService;
+//# sourceMappingURL=TenantsService.js.map

package/build/src/services/rest/TenantsService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantsService.js","sourceRoot":"","sources":["../../../../src/services/rest/TenantsService.ts"],"names":[],"mappings":";;;AAAA,mCAAkG;AAClG,4CAA6C;AAC7C,sDAAuD;AAEvD,0EAAgF;AAEhF,MAAa,cAAe,SAAQ,qCAAgD;IAClF,YAAY,IAAgB,EAAE,YAAuB,KAAK;QACxD,KAAK,CAAC,IAAI,EAAE,gBAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC,IAAI,IAAI,GAAG,eAAe,CAAC;QACrE,OAAO,IAAI,CAAC,IAAI;aACb,IAAI,CAAC;YACJ,GAAG;YACH,MAAM,EAAE,KAAK;SACd,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,2BAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CAAC,GAAW;QACpB,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,aAAa,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI;aACb,IAAI,CAAC;YACJ,GAAG;YACH,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,EAAE,EAAE,YAAY;gBAChB,KAAK,EAAE;oBACL,GAAG;iBACJ;aACF;SACF,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,gCAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,GAAW;QACtB,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,aAAa,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI;aACb,IAAI,CAAC;YACJ,GAAG;YACH,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,EAAE,EAAE,cAAc;gBAClB,KAAK,EAAE;oBACL,GAAG;iBACJ;aACF;SACF,CAAC;aACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,gCAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;CACF;AA9DD,wCA8DC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampsec/platform-client",
-  "version": "70.2.0",
+  "version": "70.3.0",
   "description": "",
   "main": "build/src/index.js",
   "runkitExampleFilename": "example/main.js",

package/src/dto/platform/platform.ops.dto.ts

@@ -0,0 +1,22 @@
+import {z} from 'zod';
+
+export const _SuccessOpsRpcResult = z.object({
+  success: z.literal(true),
+  input: z.unknown(),
+  output: z.unknown(),
+});
+export type SuccessOpsRpcResult = z.infer<typeof _SuccessOpsRpcResult>;
+
+export const _FailureOpsRpcResult = z.object({
+  success: z.literal(false),
+  input: z.unknown(),
+  error: z.object({
+    message: z.string(),
+    stack: z.string().optional(),
+    ctx: z.unknown().optional(),
+  }),
+});
+export type FailureOpsRpcResult = z.infer<typeof _FailureOpsRpcResult>;
+
+export const _OpsRpcResult = _SuccessOpsRpcResult.or(_FailureOpsRpcResult);
+export type OpsRpcResult = z.infer<typeof _OpsRpcResult>;

package/src/dto/platform/platform.tenants.dto.ts

@@ -1,5 +1,115 @@
+import {z} from 'zod';
 import {TenantDto, TenantUpsertDto} from '../tenants.dto';
+import {FindingKind, FindingSeverity, FindingStatus, GlobalAssetType, GlobalUserType} from '../enums';
+import {FlowSpecStatusKind} from '../flows.dto';
 
 export type PlatformTenantUpsertDto = TenantUpsertDto;
 
 export type PlatformTenantDto = TenantDto;
+
+// TODO add "missing from" reports to better understand coverage gaps
+
+export const _AssetCountReport = z.object({
+  byType: z.object({assetType: z.nativeEnum(GlobalAssetType), total: z.number()}).array(),
+  // TODO byConnector: z.object({cid: z.string(), active: z.number(), inactive: z.number(), total: z.number()}).array(),
+  byConnector: z.object({cid: z.string(), assetType: z.nativeEnum(GlobalAssetType), total: z.number()}).array(),
+  totalAssets: z.number(),
+  totalSaasAssets: z.number(),
+  totalStagedAssets: z.number(),
+  links: z.object({
+    withUsers: z.number(),
+    withoutUsers: z.number(),
+    withVulns: z.number(),
+    withoutVulns: z.number(),
+    withUserAssignedVulns: z.number(),
+    withOrphanedVulns: z.number(),
+  }),
+});
+export type AssetCountReport = z.infer<typeof _AssetCountReport>;
+
+export const _UserCountReport = z.object({
+  byConnectorStatus: z.object({cid: z.string(), userType: z.nativeEnum(GlobalUserType), total: z.number()}).array(),
+  byType: z.object({userType: z.nativeEnum(GlobalUserType), total: z.number()}).array(),
+  totalUsers: z.number(),
+  totalSaasUsers: z.number(),
+  totalStagedUsers: z.number(),
+  links: z.object({
+    withDevices: z.number(),
+    withoutDevices: z.number(),
+  }),
+});
+export type UserCountReport = z.infer<typeof _UserCountReport>;
+
+export const _SaasCompCountReport = z.object({
+  byConnectorKind: z.object({cid: z.string(), kind: z.string(), total: z.number()}).array(),
+  totalSaasComps: z.number(),
+  totalStagedSaasComps: z.number(),
+  links: z.object({
+    withUsers: z.number(),
+    withoutUsers: z.number(),
+    withDevices: z.number(),
+    withoutDevices: z.number(),
+    orphaned: z.number(),
+  }),
+});
+export type SaasCompCountReport = z.infer<typeof _SaasCompCountReport>;
+
+const _RecentFindingSummaryReport = z.object({
+  openWithUser: z.number(),
+  openWithoutUser: z.number(),
+  closedWithUser: z.number(),
+  closedWithoutUser: z.number(),
+});
+export const _FindingsCountReport = z.object({
+  connectorKindSeverityStatus: z
+    .object({
+      cid: z.string().nullable(),
+      kind: z.union([z.nativeEnum(FindingKind), z.string()]),
+      severity: z.nativeEnum(FindingSeverity),
+      status: z.nativeEnum(FindingStatus),
+      total: z.number(),
+    })
+    .array(),
+  total: _RecentFindingSummaryReport,
+  total90d: _RecentFindingSummaryReport,
+  pending: z.number(),
+  links: z.object({
+    withUsers: z.number(),
+    withoutUsers: z.number(),
+    withDevices: z.number(),
+    withoutDevices: z.number(),
+  }),
+});
+export type FindingsCountReport = z.infer<typeof _FindingsCountReport>;
+
+export const _NotificationsCountReport = z.object({
+  total: z.number(),
+  total7d: z.number(),
+  total30d: z.number(),
+  total90d: z.number(),
+});
+export type NotificationsCountReport = z.infer<typeof _NotificationsCountReport>;
+
+const _FlowStatusSummaryReport = z.object({
+  active: z.number(),
+  closed: z.number(),
+});
+export const _FlowsCountReport = z.object({
+  specsByStatusTrigger: z.object({status: z.nativeEnum(FlowSpecStatusKind), trigger: z.string(), total: z.number()}).array(),
+  statesByBucketStatus: z.object({status: z.string(), bucket: z.union([z.nativeEnum(FindingKind), z.string()]), total: z.number()}).array(),
+  total: _FlowStatusSummaryReport,
+  total7d: _FlowStatusSummaryReport,
+  total30d: _FlowStatusSummaryReport,
+  total90d: _FlowStatusSummaryReport,
+});
+export type FlowsCountReport = z.infer<typeof _FlowsCountReport>;
+
+export const _TenantCountReportDto = z.object({
+  users: _UserCountReport,
+  assets: _AssetCountReport,
+  saasComp: _SaasCompCountReport,
+  findings: _FindingsCountReport,
+  notifications: _NotificationsCountReport,
+  flows: _FlowsCountReport,
+});
+export type TenantCountReportDto = z.infer<typeof _TenantCountReportDto>;

package/src/services/AmpSdk.ts

@@ -35,8 +35,6 @@ import {
   PlatformTokenDto,
   PlatformTokenUpsertDto,
   ProviderDto,
-  TenantDto,
-  TenantUpsertDto,
 } from '../dto';
 import {
   AmpEntityService,
@@ -56,6 +54,7 @@ import {ContentfulService} from './contentful.service';
 import {FindingsInsightsService} from './findingsInsights.service';
 import {PlatformConnectorService} from './connector.platform.service';
 import {PlatformAgentService} from './AgentsService';
+import {TenantsService} from './rest/TenantsService';
 import {FindingsService} from './findings.service';
 
 export type AmpSdkOptions = AmpRestClientOptions;
@@ -97,7 +96,7 @@ export class AmpSdkServices {
   readonly stagedSaaSComponents: TruncatableAmpEntityService<PlatformSaasComponentUpsertDto, PlatformSaasComponentDto>;
   readonly stagedSaaSUsers: TruncatableAmpEntityService<PlatformStagedSaasUserUpsertDto, PlatformStagedSaasUserDto>;
   readonly settings: AmpSdkSettingsService;
-  readonly tenants: AmpSdkTenantService<TenantUpsertDto, TenantDto>;
+  readonly tenants: TenantsService;
   readonly tokens: AmpSdkTenantService<PlatformTokenUpsertDto, PlatformTokenDto>;
   readonly users: AmpSdkUserService;
 
@@ -134,7 +133,7 @@ export class AmpSdkServices {
     this.stagedSaaSUsers = new TruncatableAmpEntityServiceImpl<PlatformStagedSaasUserUpsertDto, PlatformStagedSaasUserDto>(rest, KIND.STAGED_SAAS_USERS, TARGET_API_PLATFORM);
 
     this.settings = new AmpSdkSettingsService(rest);
-    this.tenants = new AmpEntityServiceImpl<TenantUpsertDto, TenantDto>(rest, KIND.TENANTS, TARGET_API_PLATFORM);
+    this.tenants = new TenantsService(rest, TARGET_API_PLATFORM);
     this.tokens = new AmpEntityServiceImpl<PlatformTokenUpsertDto, PlatformTokenDto>(rest, KIND.TOKENS, TARGET_API_PLATFORM);
     this.users = new AmpSdkUserService(rest, TARGET_API_PLATFORM);
   }

package/src/services/rest/TenantsService.ts

@@ -0,0 +1,69 @@
+import {TenantCountReportDto, TenantDto, TenantUpsertDto, _TenantCountReportDto} from '../../dto';
+import {KIND, TargetApi} from '../constants';
+import {AmpEntityServiceImpl} from '../entity.service';
+import {RestClient} from './RestClient';
+import {OpsRpcResult, _OpsRpcResult} from '../../dto/platform/platform.ops.dto';
+
+export class TenantsService extends AmpEntityServiceImpl<TenantUpsertDto, TenantDto> {
+  constructor(rest: RestClient, targetApi: TargetApi = 'api') {
+    super(rest, KIND.TENANTS, targetApi);
+  }
+
+  countReport(tid: string): Promise<TenantCountReportDto> {
+    const url = `/${this.targetApi}/v1/${this.kind}/${tid}/count_report`;
+    return this.rest
+      .call({
+        url,
+        method: 'GET',
+      })
+      .then(res => _TenantCountReportDto.parse(res.data));
+  }
+
+  /**
+   * !!! WARNING !!! 🚨 💀 🚨 💀 🚨 💀 🚨 💀
+   * This method will permanently HARD delete any soft deleted tenant data, including the tenant itsself. There is no UNDO!
+   *
+   * @param tid Tenant id to clean
+   * @returns void
+   * @deprecated do not use this function... unless you REALLY mean it! Note: this is more of a warning than true deprecation.
+   */
+  hardDelete(tid: string): Promise<OpsRpcResult> {
+    const url = `/${this.targetApi}/v1/ops/rpc`;
+    return this.rest
+      .call({
+        url,
+        method: 'POST',
+        data: {
+          op: 'hardDelete',
+          input: {
+            tid,
+          },
+        },
+      })
+      .then(res => _OpsRpcResult.parse(res.data));
+  }
+
+  /**
+   * !!! WARNING !!! 🚨 💀 🚨 💀 🚨 💀 🚨 💀
+   * This method will permanently HARD delete a tenant and associated data. There is no UNDO!
+   *
+   * @param tid Tenant id to delete
+   * @returns void
+   * @deprecated Use truncate instead... unless you REALLY mean it! Note: this is more of a warning than true deprecation.
+   */
+  removeTenant(tid: string): Promise<OpsRpcResult> {
+    const url = `/${this.targetApi}/v1/ops/rpc`;
+    return this.rest
+      .call({
+        url,
+        method: 'POST',
+        data: {
+          op: 'removeTenant',
+          input: {
+            tid,
+          },
+        },
+      })
+      .then(res => _OpsRpcResult.parse(res.data));
+  }
+}