@archastro/sdk 0.19.0 → 0.21.0

package/dist/v1/resources/kv.d.ts

@@ -14,8 +14,13 @@ export declare class KvResource {
      * response across all users within the caller's app. Use `user` to scope results
      * to a single user, `user_search` to do a substring match on email or full name,
      * and `key` to filter entries whose key starts with the given prefix. Results are
-     * ordered by creation time descending.
+     * ordered by update time descending. Supplying org, team, agent, or system selects
+     * a single owner's flat list instead. Expired entries are excluded in every mode.
      * @param params - Query parameters.
+     * @param params.org - Organization scope for the owner.
+     * @param params.team - Team owner ID.
+     * @param params.agent - Agent owner ID.
+     * @param params.system - Select system ownership within the app or organization.
      * @param params.page - Page number to retrieve. Applies to developer and server-to-server callers only. Defaults to 1.
      * @param params.pageSize - Number of entries per page. Applies to developer and server-to-server callers only. Defaults to 25; maximum is 100.
      * @param params.user - Filter results to entries belonging to this user ID. Applies to developer and server-to-server callers only.
@@ -24,6 +29,10 @@ export declare class KvResource {
      * @returns Key-value storage entries for the current page, with pagination metadata for developer and server-to-server callers.
      */
     list(params?: {
+        org?: string;
+        team?: string;
+        agent?: string;
+        system?: boolean;
         page?: number;
         pageSize?: number;
         user?: string;
@@ -32,67 +41,102 @@ export declare class KvResource {
     }): Promise<KeyValueStorageEntryPage>;
     /**
      * Create a key-value storage entry
-     * Creates a new key-value storage entry for the target user under the given key.
-     * The key must not already exist for this user; use the upsert endpoint to create
-     * or overwrite in a single call.
-     * End-user (user-JWT) callers always write to their own storage. Developer and
-     * server-to-server callers must supply a `user` param identifying the target user
-     * within their app's scope. Attempting to write for a user in a different app
-     * returns 404.
+     * Creates a key once per owner. An existing key returns HTTP 409 conflict, including expired rows awaiting sweep.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.create`): the entry is owned by the triggering
+     * automation's owner; scripts pass no owner params. A duplicate key
+     * returns a script Err with code "conflict" instead of raising.
      * @param input - Request body.
+     * @param input.agent - Agent owner ID.
      * @param input.key - Storage key for the entry. Must be a non-empty string unique to this user.
-     * @param input.user - Target user ID. Required when calling as a developer or with a server-to-server key; ignored for end-user callers.
+     * @param input.org - Organization scope for the owner.
+     * @param input.system - Select system ownership within the app or organization.
+     * @param input.team - Team owner ID.
+     * @param input.ttl_seconds - Positive lifetime in seconds; omitted means no expiry.
+     * @param input.user - User owner ID. Elevated callers may instead select team, agent, org, or system ownership.
      * @param input.value - Value to store under `key`. Must be a non-empty string.
      * @returns The newly created key-value storage entry.
      */
     create(input: {
+        agent?: string | undefined;
         key: string;
+        org?: string | undefined;
+        system?: boolean | undefined;
+        team?: string | undefined;
+        ttl_seconds?: number | undefined;
         user?: string | undefined;
         value: string;
     }): Promise<KeyValueStorageEntry>;
     /**
      * Delete a key-value storage entry
-     * Permanently deletes the key-value storage entry identified by `key` for the
-     * target user. Returns 204 No Content on success and 404 if the entry does not
-     * exist.
-     * End-user (user-JWT) callers can only delete entries they own. Developer and
-     * server-to-server callers must supply a `user` param identifying the target user
-     * within their app's scope.
+     * Deletes an unexpired entry by owner and key. Returns 204, or 404 when absent.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.delete`): removes the entry owned by the triggering
+     * automation's owner; scripts pass no owner params.
      * @param key - Storage key of the entry to delete. Must be a non-empty string.
-     * @returns Empty response body. HTTP 204 No Content on success.
+     * @returns Successful response
      */
-    delete(key: string): Promise<void>;
+    delete(key: string): Promise<{
+        deleted: boolean;
+        key: string;
+    }>;
     /**
      * Retrieve a key-value storage entry
-     * Returns the key-value storage entry identified by `key` for the target user.
-     * Returns 404 if no entry exists for that key.
-     * End-user (user-JWT) callers retrieve entries from their own storage. Developer
-     * and server-to-server callers must supply a `user` param identifying the target
-     * user within their app's scope.
+     * Returns an unexpired entry by owner and key, or 404.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.get`): reads the entry owned by the triggering
+     * automation's owner; scripts pass no owner params.
      * @param key - Storage key of the entry to retrieve. Must be a non-empty string.
      * @param params - Query parameters.
-     * @param params.user - Target user ID. Required when calling as a developer or with a server-to-server key; ignored for end-user callers.
+     * @param params.org - Organization scope for the owner.
+     * @param params.team - Team owner ID.
+     * @param params.agent - Agent owner ID.
+     * @param params.system - Select system ownership within the app or organization.
+     * @param params.user - User owner ID. Elevated callers may instead select team, agent, org, or system ownership.
      * @returns The key-value storage entry for the given key.
      */
     get(key: string, params?: {
+        org?: string;
+        team?: string;
+        agent?: string;
+        system?: boolean;
         user?: string;
     }): Promise<KeyValueStorageEntry>;
     /**
      * Create or update a key-value storage entry
-     * Creates a new key-value storage entry for the given `key`, or overwrites the
-     * value if an entry already exists. This is the idempotent alternative to the
-     * create endpoint: safe to call regardless of whether the key already exists.
-     * End-user (user-JWT) callers always write to their own storage. Developer and
-     * server-to-server callers must supply a `user` param identifying the target user
-     * within their app's scope. Attempting to write for a user in a different app
-     * returns 404.
+     * Creates or replaces a value and its expiry. Omitted ttl_seconds clears any previous expiry.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.upsert`): overwrites the entry owned by the triggering
+     * automation's owner; scripts pass no owner params.
      * @param key - Storage key to create or overwrite. Must be a non-empty string.
      * @param input - Request body.
-     * @param input.user - Target user ID. Required when calling as a developer or with a server-to-server key; ignored for end-user callers.
+     * @param input.agent - Agent owner ID.
+     * @param input.org - Organization scope for the owner.
+     * @param input.system - Select system ownership within the app or organization.
+     * @param input.team - Team owner ID.
+     * @param input.ttl_seconds - Positive lifetime in seconds; omitted means no expiry.
+     * @param input.user - User owner ID. Elevated callers may instead select team, agent, org, or system ownership.
      * @param input.value - New value to store under `key`. Must be a non-empty string. Replaces any existing value.
      * @returns The created or updated key-value storage entry.
      */
     upsert(key: string, input: {
+        agent?: string | undefined;
+        org?: string | undefined;
+        system?: boolean | undefined;
+        team?: string | undefined;
+        ttl_seconds?: number | undefined;
         user?: string | undefined;
         value: string;
     }): Promise<KeyValueStorageEntry>;

package/dist/v1/resources/kv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kv.d.ts","sourceRoot":"","sources":["../../../src/v1/resources/kv.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAE5F,qBAAa,UAAU;IACT,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;;;;;;;;;;;OAmBG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAqB9I;;;;;;;;;;;;;;OAcG;IACG,MAAM,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI7G;;;;;;;;;;OAUG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC;;;;;;;;;;;OAWG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IASjF;;;;;;;;;;;;;;OAcG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAG9G"}
+{"version":3,"file":"kv.d.ts","sourceRoot":"","sources":["../../../src/v1/resources/kv.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAE5F,qBAAa,UAAU;IACT,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAiC7M;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,MAAM,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI9P;;;;;;;;;;;OAWG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAIrE;;;;;;;;;;;;;;;;;OAiBG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAqBhJ;;;;;;;;;;;;;;;;;;;OAmBG;IACG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAG/P"}

package/dist/v1/resources/kv.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 ArchAstro Inc. Licensed under the MIT License.
 // This file is auto-generated by @archastro/sdk-generator. Do not edit.
-// Content hash: c73677fe802c
+// Content hash: 271b64d3faf3
 export class KvResource {
     http;
     constructor(http) {
@@ -17,8 +17,13 @@ export class KvResource {
      * response across all users within the caller's app. Use `user` to scope results
      * to a single user, `user_search` to do a substring match on email or full name,
      * and `key` to filter entries whose key starts with the given prefix. Results are
-     * ordered by creation time descending.
+     * ordered by update time descending. Supplying org, team, agent, or system selects
+     * a single owner's flat list instead. Expired entries are excluded in every mode.
      * @param params - Query parameters.
+     * @param params.org - Organization scope for the owner.
+     * @param params.team - Team owner ID.
+     * @param params.agent - Agent owner ID.
+     * @param params.system - Select system ownership within the app or organization.
      * @param params.page - Page number to retrieve. Applies to developer and server-to-server callers only. Defaults to 1.
      * @param params.pageSize - Number of entries per page. Applies to developer and server-to-server callers only. Defaults to 25; maximum is 100.
      * @param params.user - Filter results to entries belonging to this user ID. Applies to developer and server-to-server callers only.
@@ -28,6 +33,18 @@ export class KvResource {
      */
     async list(params) {
         const query = {};
+        if (params?.org !== undefined) {
+            query["org"] = params?.org;
+        }
+        if (params?.team !== undefined) {
+            query["team"] = params?.team;
+        }
+        if (params?.agent !== undefined) {
+            query["agent"] = params?.agent;
+        }
+        if (params?.system !== undefined) {
+            query["system"] = params?.system;
+        }
         if (params?.page !== undefined) {
             query["page"] = params?.page;
         }
@@ -47,16 +64,22 @@ export class KvResource {
     }
     /**
      * Create a key-value storage entry
-     * Creates a new key-value storage entry for the target user under the given key.
-     * The key must not already exist for this user; use the upsert endpoint to create
-     * or overwrite in a single call.
-     * End-user (user-JWT) callers always write to their own storage. Developer and
-     * server-to-server callers must supply a `user` param identifying the target user
-     * within their app's scope. Attempting to write for a user in a different app
-     * returns 404.
+     * Creates a key once per owner. An existing key returns HTTP 409 conflict, including expired rows awaiting sweep.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.create`): the entry is owned by the triggering
+     * automation's owner; scripts pass no owner params. A duplicate key
+     * returns a script Err with code "conflict" instead of raising.
      * @param input - Request body.
+     * @param input.agent - Agent owner ID.
      * @param input.key - Storage key for the entry. Must be a non-empty string unique to this user.
-     * @param input.user - Target user ID. Required when calling as a developer or with a server-to-server key; ignored for end-user callers.
+     * @param input.org - Organization scope for the owner.
+     * @param input.system - Select system ownership within the app or organization.
+     * @param input.team - Team owner ID.
+     * @param input.ttl_seconds - Positive lifetime in seconds; omitted means no expiry.
+     * @param input.user - User owner ID. Elevated callers may instead select team, agent, org, or system ownership.
      * @param input.value - Value to store under `key`. Must be a non-empty string.
      * @returns The newly created key-value storage entry.
      */
@@ -65,32 +88,51 @@ export class KvResource {
     }
     /**
      * Delete a key-value storage entry
-     * Permanently deletes the key-value storage entry identified by `key` for the
-     * target user. Returns 204 No Content on success and 404 if the entry does not
-     * exist.
-     * End-user (user-JWT) callers can only delete entries they own. Developer and
-     * server-to-server callers must supply a `user` param identifying the target user
-     * within their app's scope.
+     * Deletes an unexpired entry by owner and key. Returns 204, or 404 when absent.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.delete`): removes the entry owned by the triggering
+     * automation's owner; scripts pass no owner params.
      * @param key - Storage key of the entry to delete. Must be a non-empty string.
-     * @returns Empty response body. HTTP 204 No Content on success.
+     * @returns Successful response
      */
     async delete(key) {
-        await this.http.request(`/api/v1/kv/${key}`, { method: "DELETE" });
+        return this.http.request(`/api/v1/kv/${key}`, { method: "DELETE" });
     }
     /**
      * Retrieve a key-value storage entry
-     * Returns the key-value storage entry identified by `key` for the target user.
-     * Returns 404 if no entry exists for that key.
-     * End-user (user-JWT) callers retrieve entries from their own storage. Developer
-     * and server-to-server callers must supply a `user` param identifying the target
-     * user within their app's scope.
+     * Returns an unexpired entry by owner and key, or 404.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.get`): reads the entry owned by the triggering
+     * automation's owner; scripts pass no owner params.
      * @param key - Storage key of the entry to retrieve. Must be a non-empty string.
      * @param params - Query parameters.
-     * @param params.user - Target user ID. Required when calling as a developer or with a server-to-server key; ignored for end-user callers.
+     * @param params.org - Organization scope for the owner.
+     * @param params.team - Team owner ID.
+     * @param params.agent - Agent owner ID.
+     * @param params.system - Select system ownership within the app or organization.
+     * @param params.user - User owner ID. Elevated callers may instead select team, agent, org, or system ownership.
      * @returns The key-value storage entry for the given key.
      */
     async get(key, params) {
         const query = {};
+        if (params?.org !== undefined) {
+            query["org"] = params?.org;
+        }
+        if (params?.team !== undefined) {
+            query["team"] = params?.team;
+        }
+        if (params?.agent !== undefined) {
+            query["agent"] = params?.agent;
+        }
+        if (params?.system !== undefined) {
+            query["system"] = params?.system;
+        }
         if (params?.user !== undefined) {
             query["user"] = params?.user;
         }
@@ -98,16 +140,21 @@ export class KvResource {
     }
     /**
      * Create or update a key-value storage entry
-     * Creates a new key-value storage entry for the given `key`, or overwrites the
-     * value if an entry already exists. This is the idempotent alternative to the
-     * create endpoint: safe to call regardless of whether the key already exists.
-     * End-user (user-JWT) callers always write to their own storage. Developer and
-     * server-to-server callers must supply a `user` param identifying the target user
-     * within their app's scope. Attempting to write for a user in a different app
-     * returns 404.
+     * Creates or replaces a value and its expiry. Omitted ttl_seconds clears any previous expiry.
+     * User-JWT callers use their own storage. Elevated callers select an owner with
+     * system: true, team, user, or agent (in that priority order). An org alone selects
+     * system ownership within that organization; all owners must be in the app scope.
+     * Create and upsert accept a positive ttl_seconds; absent means no expiry.
+     * Script binding (`kv.upsert`): overwrites the entry owned by the triggering
+     * automation's owner; scripts pass no owner params.
      * @param key - Storage key to create or overwrite. Must be a non-empty string.
      * @param input - Request body.
-     * @param input.user - Target user ID. Required when calling as a developer or with a server-to-server key; ignored for end-user callers.
+     * @param input.agent - Agent owner ID.
+     * @param input.org - Organization scope for the owner.
+     * @param input.system - Select system ownership within the app or organization.
+     * @param input.team - Team owner ID.
+     * @param input.ttl_seconds - Positive lifetime in seconds; omitted means no expiry.
+     * @param input.user - User owner ID. Elevated callers may instead select team, agent, org, or system ownership.
      * @param input.value - New value to store under `key`. Must be a non-empty string. Replaces any existing value.
      * @returns The created or updated key-value storage entry.
      */

package/dist/v1/resources/kv.js.map

@@ -1 +1 @@
-{"version":3,"file":"kv.js","sourceRoot":"","sources":["../../../src/v1/resources/kv.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,6BAA6B;AAK7B,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,IAAI,CAAC,MAA+F;QACxG,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,EAAE,QAAQ,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE,UAAU,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,MAAM,CAAC,KAAgE;QAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAA0B;QAC/C,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,KAAmD;QAC3E,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;CACF"}
+{"version":3,"file":"kv.js","sourceRoot":"","sources":["../../../src/v1/resources/kv.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,6BAA6B;AAK7B,MAAM,OAAO,UAAU;IACD;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,IAAI,CAAC,MAA8J;QACvK,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,IAAI,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACjC,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,KAAK,CAAC,WAAW,CAAC,GAAG,MAAM,EAAE,QAAQ,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;YACrC,KAAK,CAAC,aAAa,CAAC,GAAG,MAAM,EAAE,UAAU,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,MAAM,CAAC,KAAiN;QAC5N,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAAyF;QAC9G,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,IAAI,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACjC,CAAC;QACD,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,MAAM,CAAC,GAAW,EAAE,KAAoM;QAC5N,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/v1/resources/notifications.d.ts

@@ -60,6 +60,16 @@ export declare class NotificationResource {
      * 403. The app scope is stamped onto the notification automatically; an app
      * cannot target recipients outside its tenant. Built-in platform types such as
      * `"app_info"` and `"billing_alert"` are not accepted here.
+     * The `notifications.send` script binding also accepts the viewer a script runs
+     * as: a user, an agent, or a team's system viewer. Such a sender may notify only
+     * a user it can see in its own organization and sandbox. When the sender is a
+     * user, the recipient must also be able to see the sender. An agent cannot see
+     * user records, so an agent sender must name a source message: it may then
+     * notify a user in its own organization and sandbox who can read that message.
+     * Pass `thread` and `message` together to name the message the notification is
+     * about. The send is then refused unless that message is in that thread and both
+     * the sender and the recipient can read it, so a notification cannot quote a
+     * message its recipient cannot open.
      * Pass `idempotency_key` to deduplicate sends. If you call this endpoint twice
      * with the same `idempotency_key` for the same recipient, the second call
      * returns the original notification without creating a duplicate. The key is
@@ -68,6 +78,8 @@ export declare class NotificationResource {
      * @param input - Request body.
      * @param input.data - Arbitrary key-value payload merged with platform-provided context (recipient, app, org, brand) when rendering the notification's display fields. Defaults to an empty object when omitted.
      * @param input.idempotency_key - Optional deduplication key. A second call with the same `idempotency_key` for the same recipient returns the originally-created notification without inserting a new record. Scoped per calling app.
+     * @param input.message - Source message (`msg_...`) that the sender and the recipient must both be able to read.
+     * @param input.thread - Thread (`thr_...`) of the source message. Requires `message`.
      * @param input.type - Custom notification type identifier in the form `"custom:<lookup_key>"`, where `<lookup_key>` matches a `NotificationType` config declared in the calling app's bundle.
      * @param input.user - Recipient user ID (`usr_...`). Must be a member of the calling app's tenant.
      * @returns The created notification, or the existing notification when deduplicated by `idempotency_key`.
@@ -75,6 +87,8 @@ export declare class NotificationResource {
     send(input: {
         data?: Record<string, unknown> | undefined;
         idempotency_key?: string | undefined;
+        message?: string | undefined;
+        thread?: string | undefined;
         type: string;
         user: string;
     }): Promise<Notification>;

package/dist/v1/resources/notifications.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/v1/resources/notifications.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,qBAAa,oBAAoB;IACnB,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;;;;;;;;OAgBG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAelW;;;;;;;;;OASG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACG,IAAI,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAI1J;;;;;;;;OAQG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAI/C;;;;;;;;;;;;OAYG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;OAUG;IACG,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;;;;;;;;;;OAWG;IACG,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGrD"}
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../../src/v1/resources/notifications.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAEjE,qBAAa,oBAAoB;IACnB,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;;;;;;;;OAgBG;IACG,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE;YAAE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAelW;;;;;;;;;OASG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAI9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACG,IAAI,CAAC,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAIrN;;;;;;;;OAQG;IACG,WAAW,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAI/C;;;;;;;;;;;;OAYG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;;;;;;;;;OAUG;IACG,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;;;;;;;;;;OAWG;IACG,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGrD"}

package/dist/v1/resources/notifications.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 ArchAstro Inc. Licensed under the MIT License.
 // This file is auto-generated by @archastro/sdk-generator. Do not edit.
-// Content hash: 20a294b0a2cf
+// Content hash: 4059b479e7c9
 export class NotificationResource {
     http;
     constructor(http) {
@@ -60,6 +60,16 @@ export class NotificationResource {
      * 403. The app scope is stamped onto the notification automatically; an app
      * cannot target recipients outside its tenant. Built-in platform types such as
      * `"app_info"` and `"billing_alert"` are not accepted here.
+     * The `notifications.send` script binding also accepts the viewer a script runs
+     * as: a user, an agent, or a team's system viewer. Such a sender may notify only
+     * a user it can see in its own organization and sandbox. When the sender is a
+     * user, the recipient must also be able to see the sender. An agent cannot see
+     * user records, so an agent sender must name a source message: it may then
+     * notify a user in its own organization and sandbox who can read that message.
+     * Pass `thread` and `message` together to name the message the notification is
+     * about. The send is then refused unless that message is in that thread and both
+     * the sender and the recipient can read it, so a notification cannot quote a
+     * message its recipient cannot open.
      * Pass `idempotency_key` to deduplicate sends. If you call this endpoint twice
      * with the same `idempotency_key` for the same recipient, the second call
      * returns the original notification without creating a duplicate. The key is
@@ -68,6 +78,8 @@ export class NotificationResource {
      * @param input - Request body.
      * @param input.data - Arbitrary key-value payload merged with platform-provided context (recipient, app, org, brand) when rendering the notification's display fields. Defaults to an empty object when omitted.
      * @param input.idempotency_key - Optional deduplication key. A second call with the same `idempotency_key` for the same recipient returns the originally-created notification without inserting a new record. Scoped per calling app.
+     * @param input.message - Source message (`msg_...`) that the sender and the recipient must both be able to read.
+     * @param input.thread - Thread (`thr_...`) of the source message. Requires `message`.
      * @param input.type - Custom notification type identifier in the form `"custom:<lookup_key>"`, where `<lookup_key>` matches a `NotificationType` config declared in the calling app's bundle.
      * @param input.user - Recipient user ID (`usr_...`). Must be a member of the calling app's tenant.
      * @returns The created notification, or the existing notification when deduplicated by `idempotency_key`.

package/dist/v1/resources/notifications.js.map

@@ -1 +1 @@
-{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/v1/resources/notifications.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,6BAA6B;AAK7B,MAAM,OAAO,oBAAoB;IACX;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,IAAI,CAAC,MAAkE;QAC3E,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACjC,CAAC;QACD,IAAI,MAAM,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE,WAAW,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,KAAK,CAAC,IAAI,CAAC,KAAuH;QAChI,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,YAAY,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CAAC,YAAoB;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,YAAY,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CAAC,YAAoB;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;CACF"}
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../../src/v1/resources/notifications.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,6BAA6B;AAK7B,MAAM,OAAO,oBAAoB;IACX;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,IAAI,CAAC,MAAkE;QAC3E,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,KAAK,CAAC,QAAQ,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACjC,CAAC;QACD,IAAI,MAAM,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,KAAK,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE,WAAW,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,KAAK,CAAC,IAAI,CAAC,KAAkL;QAC3L,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,YAAY,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,CAAC,YAAoB;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,YAAY,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,SAAS,CAAC,YAAoB;QAClC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,YAAY,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjG,CAAC;CACF"}

package/dist/v1/resources/oauth.d.ts

@@ -113,6 +113,7 @@ export declare class OauthResource {
      * @param input.grant_type - The OAuth 2.0 grant type. One of `"authorization_code"`, `"refresh_token"`, or `"urn:ietf:params:oauth:grant-type:device_code"`.
      * @param input.redirect_uri - Redirect URI that was used in the original authorization request. Must exactly match the URI on record for the client. Required for `"authorization_code"` grants.
      * @param input.refresh_token - Refresh token received from a previous token response. Required for `"refresh_token"` grants. The token is rotated on each successful call.
+     * @param input.resource - Resource audience. Required for code exchange and refresh of a token bound to a resource server; must match the consent grant.
      * @returns Token pair issued for the authenticated user.
      */
     token(input: {
@@ -123,6 +124,7 @@ export declare class OauthResource {
         grant_type: string;
         redirect_uri?: string | undefined;
         refresh_token?: string | undefined;
+        resource?: string | undefined;
     }): Promise<OAuthTokenResponse>;
 }
 //# sourceMappingURL=oauth.d.ts.map

package/dist/v1/resources/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/v1/resources/oauth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,KAAK,EAAE,kCAAkC,EAAE,2BAA2B,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAChJ,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,qBAAa,cAAc;IACb,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;;;;;;;OAeG;IACG,OAAO,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAIpH;;;;;;;;OAQG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kCAAkC,CAAC;IAO5F;;;;;;;;;;;;;;;;;OAiBG;IACG,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAI5G;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC;CAGrF;AAED,qBAAa,aAAa;IAGZ,OAAO,CAAC,IAAI;IAFxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;gBAEZ,IAAI,EAAE,UAAU;IAIpC;;;;;;;OAOG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAI5D;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,KAAK,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAG7Q"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/v1/resources/oauth.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,KAAK,EAAE,kCAAkC,EAAE,2BAA2B,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAC;AAChJ,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,qBAAa,cAAc;IACb,OAAO,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEpC;;;;;;;;;;;;;;;OAeG;IACG,OAAO,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAIpH;;;;;;;;OAQG;IACG,aAAa,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kCAAkC,CAAC;IAO5F;;;;;;;;;;;;;;;;;OAiBG;IACG,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAI5G;;;;;;;;;;;OAWG;IACG,IAAI,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iCAAiC,CAAC;CAGrF;AAED,qBAAa,aAAa;IAGZ,OAAO,CAAC,IAAI;IAFxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;gBAEZ,IAAI,EAAE,UAAU;IAIpC;;;;;;;OAOG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAI5D;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,KAAK,CAAC,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAG5S"}

package/dist/v1/resources/oauth.js

@@ -1,6 +1,6 @@
 // Copyright (c) 2026 ArchAstro Inc. Licensed under the MIT License.
 // This file is auto-generated by @archastro/sdk-generator. Do not edit.
-// Content hash: 7edd64bbf9cc
+// Content hash: 31d084134ed0
 export class DeviceResource {
     http;
     constructor(http) {
@@ -118,6 +118,7 @@ export class OauthResource {
      * @param input.grant_type - The OAuth 2.0 grant type. One of `"authorization_code"`, `"refresh_token"`, or `"urn:ietf:params:oauth:grant-type:device_code"`.
      * @param input.redirect_uri - Redirect URI that was used in the original authorization request. Must exactly match the URI on record for the client. Required for `"authorization_code"` grants.
      * @param input.refresh_token - Refresh token received from a previous token response. Required for `"refresh_token"` grants. The token is rotated on each successful call.
+     * @param input.resource - Resource audience. Required for code exchange and refresh of a token bound to a resource server; must match the consent grant.
      * @returns Token pair issued for the authenticated user.
      */
     async token(input) {

package/dist/v1/resources/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/v1/resources/oauth.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,6BAA6B;AAM7B,MAAM,OAAO,cAAc;IACL;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,OAAO,CAAC,KAAyD;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,MAA0B;QAC5C,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,SAAS,CAAC,KAAqD;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,CAAC,KAA4B;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IAGJ;IAFX,MAAM,CAAiB;IAEhC,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,KAAK,CAAC,KAAkO;QAC5O,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;CACF"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/v1/resources/oauth.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,6BAA6B;AAM7B,MAAM,OAAO,cAAc;IACL;IAApB,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAExC;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,OAAO,CAAC,KAAyD;QACrE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,aAAa,CAAC,MAA0B;QAC5C,MAAM,KAAK,GAA6F,EAAE,CAAC;QAC3G,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,SAAS,CAAC,KAAqD;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,IAAI,CAAC,KAA4B;QACrC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IAGJ;IAFX,MAAM,CAAiB;IAEhC,YAAoB,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,KAAK,CAAC,KAAK,CAAC,KAAiQ;QAC3Q,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;CACF"}