@atlanai/sdk 0.2.2 → 0.2.4

package/dist/raw/secret/apis/OauthApi.js

@@ -0,0 +1,335 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * secret
+ * Operations provided by secret.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretStartOauthContentEncodingEnum = exports.SecretCompleteOauthContentEncodingEnum = exports.OauthApi = void 0;
+const runtime = __importStar(require("../runtime"));
+const GatewayOauthCompleteRequest_1 = require("../models/GatewayOauthCompleteRequest");
+const GatewayOauthCompletion_1 = require("../models/GatewayOauthCompletion");
+const GatewayOauthConnection_1 = require("../models/GatewayOauthConnection");
+const GatewayOauthProviderView_1 = require("../models/GatewayOauthProviderView");
+const GatewayOauthStartRequest_1 = require("../models/GatewayOauthStartRequest");
+const GatewayOauthStarted_1 = require("../models/GatewayOauthStarted");
+/**
+ *
+ */
+class OauthApi extends runtime.BaseAPI {
+    /**
+     * Creates request options for secretCompleteOauth without sending the request
+     */
+    async secretCompleteOauthRequestOpts(requestParameters) {
+        if (requestParameters['gatewayOauthCompleteRequest'] == null) {
+            throw new runtime.RequiredError('gatewayOauthCompleteRequest', 'Required parameter "gatewayOauthCompleteRequest" was null or undefined when calling secretCompleteOauth().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (requestParameters['contentEncoding'] != null) {
+            headerParameters['Content-Encoding'] = String(requestParameters['contentEncoding']);
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/oauth/complete`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, GatewayOauthCompleteRequest_1.GatewayOauthCompleteRequestToJSON)(requestParameters['gatewayOauthCompleteRequest']),
+        };
+    }
+    /**
+     * Use this operation to `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
+     * `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
+     */
+    async secretCompleteOauthRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.secretCompleteOauthRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, GatewayOauthCompletion_1.GatewayOauthCompletionFromJSON)(jsonValue));
+    }
+    /**
+     * Use this operation to `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
+     * `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
+     */
+    async secretCompleteOauth(requestParameters, initOverrides) {
+        const response = await this.secretCompleteOauthRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for secretDisconnectOauth without sending the request
+     */
+    async secretDisconnectOauthRequestOpts(requestParameters) {
+        if (requestParameters['secretId'] == null) {
+            throw new runtime.RequiredError('secretId', 'Required parameter "secretId" was null or undefined when calling secretDisconnectOauth().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/oauth/connections/{secret_id}`;
+        urlPath = urlPath.replace('{secret_id}', encodeURIComponent(String(requestParameters['secretId'])));
+        return {
+            path: urlPath,
+            method: 'DELETE',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Use this operation to `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
+     * `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
+     */
+    async secretDisconnectOauthRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.secretDisconnectOauthRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * Use this operation to `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
+     * `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
+     */
+    async secretDisconnectOauth(requestParameters, initOverrides) {
+        await this.secretDisconnectOauthRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Creates request options for secretListOauthConnections without sending the request
+     */
+    async secretListOauthConnectionsRequestOpts(requestParameters) {
+        const queryParameters = {};
+        if (requestParameters['provider'] != null) {
+            queryParameters['provider'] = requestParameters['provider'];
+        }
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/oauth/connections`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Use this operation to `GET /<ext>/v1/oauth/connections`.
+     * `GET /<ext>/v1/oauth/connections`.
+     */
+    async secretListOauthConnectionsRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.secretListOauthConnectionsRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(GatewayOauthConnection_1.GatewayOauthConnectionFromJSON));
+    }
+    /**
+     * Use this operation to `GET /<ext>/v1/oauth/connections`.
+     * `GET /<ext>/v1/oauth/connections`.
+     */
+    async secretListOauthConnections(requestParameters = {}, initOverrides) {
+        const response = await this.secretListOauthConnectionsRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for secretListOauthProviders without sending the request
+     */
+    async secretListOauthProvidersRequestOpts() {
+        const queryParameters = {};
+        const headerParameters = {};
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/oauth/providers`;
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * Use this operation to `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
+     * `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
+     */
+    async secretListOauthProvidersRaw(initOverrides) {
+        const requestOptions = await this.secretListOauthProvidersRequestOpts();
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(GatewayOauthProviderView_1.GatewayOauthProviderViewFromJSON));
+    }
+    /**
+     * Use this operation to `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
+     * `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
+     */
+    async secretListOauthProviders(initOverrides) {
+        const response = await this.secretListOauthProvidersRaw(initOverrides);
+        return await response.value();
+    }
+    /**
+     * Creates request options for secretOauthCallback without sending the request
+     */
+    async secretOauthCallbackRequestOpts(requestParameters) {
+        if (requestParameters['provider'] == null) {
+            throw new runtime.RequiredError('provider', 'Required parameter "provider" was null or undefined when calling secretOauthCallback().');
+        }
+        const queryParameters = {};
+        if (requestParameters['code'] != null) {
+            queryParameters['code'] = requestParameters['code'];
+        }
+        if (requestParameters['state'] != null) {
+            queryParameters['state'] = requestParameters['state'];
+        }
+        if (requestParameters['error'] != null) {
+            queryParameters['error'] = requestParameters['error'];
+        }
+        const headerParameters = {};
+        let urlPath = `/oauth/callback/{provider}`;
+        urlPath = urlPath.replace('{provider}', encodeURIComponent(String(requestParameters['provider'])));
+        return {
+            path: urlPath,
+            method: 'GET',
+            headers: headerParameters,
+            query: queryParameters,
+        };
+    }
+    /**
+     * # Why this one route has no bearer, and what authenticates it instead  The caller here is the user\'s **browser**, arriving from the provider. It carries no Atlan credential and cannot be made to: the redirect target is registered with the provider months earlier and is followed by a plain navigation.  The authenticator is the `state` parameter. It is 32 bytes of system entropy minted by [`crate::flow::random_token`], stored only as its `sha256`, bound at `start` to one org, one subject and one workspace, single-use, and valid for ten minutes. Presenting it proves possession of something only the browser that began this consent received.  **And it is deliberately not sufficient on its own.** This handler does one thing: park the code against the attempt. Every decision that matters — whether the caller may write to that workspace, whose grant this becomes — happens in `complete`, under a verified Atlan bearer that must match the subject recorded at `start`. So a stolen `state` gets an attacker exactly as far as making the legitimate user\'s own connection succeed.  This is the compensating control the anonymous-tail entry needs. The five pre-existing anonymous tails were justified on the grounds that they \"carry no secret: the assets are bytes compiled into the binary, with no data plane behind the handler\" — which is not true here, so the justification has to be this instead, and it has to be the SDK\'s rather than any extension\'s.  The response is a static page: no artifact content, no token, no reflection of any query parameter, and `no-store` so a shared browser does not keep it.
+     * `GET /<ext>/v1/oauth/callback/{provider}` — the provider\'s redirect target.
+     */
+    async secretOauthCallbackRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.secretOauthCallbackRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.VoidApiResponse(response);
+    }
+    /**
+     * # Why this one route has no bearer, and what authenticates it instead  The caller here is the user\'s **browser**, arriving from the provider. It carries no Atlan credential and cannot be made to: the redirect target is registered with the provider months earlier and is followed by a plain navigation.  The authenticator is the `state` parameter. It is 32 bytes of system entropy minted by [`crate::flow::random_token`], stored only as its `sha256`, bound at `start` to one org, one subject and one workspace, single-use, and valid for ten minutes. Presenting it proves possession of something only the browser that began this consent received.  **And it is deliberately not sufficient on its own.** This handler does one thing: park the code against the attempt. Every decision that matters — whether the caller may write to that workspace, whose grant this becomes — happens in `complete`, under a verified Atlan bearer that must match the subject recorded at `start`. So a stolen `state` gets an attacker exactly as far as making the legitimate user\'s own connection succeed.  This is the compensating control the anonymous-tail entry needs. The five pre-existing anonymous tails were justified on the grounds that they \"carry no secret: the assets are bytes compiled into the binary, with no data plane behind the handler\" — which is not true here, so the justification has to be this instead, and it has to be the SDK\'s rather than any extension\'s.  The response is a static page: no artifact content, no token, no reflection of any query parameter, and `no-store` so a shared browser does not keep it.
+     * `GET /<ext>/v1/oauth/callback/{provider}` — the provider\'s redirect target.
+     */
+    async secretOauthCallback(requestParameters, initOverrides) {
+        await this.secretOauthCallbackRaw(requestParameters, initOverrides);
+    }
+    /**
+     * Creates request options for secretStartOauth without sending the request
+     */
+    async secretStartOauthRequestOpts(requestParameters) {
+        if (requestParameters['gatewayOauthStartRequest'] == null) {
+            throw new runtime.RequiredError('gatewayOauthStartRequest', 'Required parameter "gatewayOauthStartRequest" was null or undefined when calling secretStartOauth().');
+        }
+        const queryParameters = {};
+        const headerParameters = {};
+        headerParameters['Content-Type'] = 'application/json';
+        if (requestParameters['contentEncoding'] != null) {
+            headerParameters['Content-Encoding'] = String(requestParameters['contentEncoding']);
+        }
+        if (this.configuration && this.configuration.accessToken) {
+            const token = this.configuration.accessToken;
+            const tokenString = await token("bearer", []);
+            if (tokenString) {
+                headerParameters["Authorization"] = `Bearer ${tokenString}`;
+            }
+        }
+        let urlPath = `/oauth/start`;
+        return {
+            path: urlPath,
+            method: 'POST',
+            headers: headerParameters,
+            query: queryParameters,
+            body: (0, GatewayOauthStartRequest_1.GatewayOauthStartRequestToJSON)(requestParameters['gatewayOauthStartRequest']),
+        };
+    }
+    /**
+     * Use this operation to `POST /<ext>/v1/oauth/start`.
+     * `POST /<ext>/v1/oauth/start`.
+     */
+    async secretStartOauthRaw(requestParameters, initOverrides) {
+        const requestOptions = await this.secretStartOauthRequestOpts(requestParameters);
+        const response = await this.request(requestOptions, initOverrides);
+        return new runtime.JSONApiResponse(response, (jsonValue) => (0, GatewayOauthStarted_1.GatewayOauthStartedFromJSON)(jsonValue));
+    }
+    /**
+     * Use this operation to `POST /<ext>/v1/oauth/start`.
+     * `POST /<ext>/v1/oauth/start`.
+     */
+    async secretStartOauth(requestParameters, initOverrides) {
+        const response = await this.secretStartOauthRaw(requestParameters, initOverrides);
+        return await response.value();
+    }
+}
+exports.OauthApi = OauthApi;
+/**
+  * @export
+  * @enum {string}
+  */
+var SecretCompleteOauthContentEncodingEnum;
+(function (SecretCompleteOauthContentEncodingEnum) {
+    SecretCompleteOauthContentEncodingEnum["Base64"] = "base64";
+    SecretCompleteOauthContentEncodingEnum["GzipBase64"] = "gzip, base64";
+})(SecretCompleteOauthContentEncodingEnum || (exports.SecretCompleteOauthContentEncodingEnum = SecretCompleteOauthContentEncodingEnum = {}));
+/**
+  * @export
+  * @enum {string}
+  */
+var SecretStartOauthContentEncodingEnum;
+(function (SecretStartOauthContentEncodingEnum) {
+    SecretStartOauthContentEncodingEnum["Base64"] = "base64";
+    SecretStartOauthContentEncodingEnum["GzipBase64"] = "gzip, base64";
+})(SecretStartOauthContentEncodingEnum || (exports.SecretStartOauthContentEncodingEnum = SecretStartOauthContentEncodingEnum = {}));

package/dist/raw/secret/apis/index.d.ts

@@ -0,0 +1 @@
+export * from './OauthApi';

package/dist/raw/secret/apis/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/* tslint:disable */
+/* eslint-disable */
+__exportStar(require("./OauthApi"), exports);

package/dist/raw/secret/index.d.ts

@@ -1,2 +1,3 @@
 export * from './runtime';
+export * from './apis/index';
 export * from './models/index';

package/dist/raw/secret/index.js

@@ -17,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 /* tslint:disable */
 /* eslint-disable */
 __exportStar(require("./runtime"), exports);
+__exportStar(require("./apis/index"), exports);
 __exportStar(require("./models/index"), exports);

package/dist/raw/secret/models/GatewayOauthCompleteRequest.d.ts

@@ -0,0 +1,32 @@
+/**
+ * secret
+ * Operations provided by secret.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+/**
+ * Input accepted by the OauthComplete operation.
+ * @export
+ * @interface GatewayOauthCompleteRequest
+ */
+export interface GatewayOauthCompleteRequest {
+    /**
+     * The handle `start` returned.
+     * @type {string}
+     * @memberof GatewayOauthCompleteRequest
+     */
+    attemptId: string;
+}
+/**
+ * Check if a given object implements the GatewayOauthCompleteRequest interface.
+ */
+export declare function instanceOfGatewayOauthCompleteRequest(value: object): value is GatewayOauthCompleteRequest;
+export declare function GatewayOauthCompleteRequestFromJSON(json: any): GatewayOauthCompleteRequest;
+export declare function GatewayOauthCompleteRequestFromJSONTyped(json: any, ignoreDiscriminator: boolean): GatewayOauthCompleteRequest;
+export declare function GatewayOauthCompleteRequestToJSON(json: any): GatewayOauthCompleteRequest;
+export declare function GatewayOauthCompleteRequestToJSONTyped(value?: GatewayOauthCompleteRequest | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/secret/models/GatewayOauthCompleteRequest.js

@@ -0,0 +1,50 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * secret
+ * Operations provided by secret.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfGatewayOauthCompleteRequest = instanceOfGatewayOauthCompleteRequest;
+exports.GatewayOauthCompleteRequestFromJSON = GatewayOauthCompleteRequestFromJSON;
+exports.GatewayOauthCompleteRequestFromJSONTyped = GatewayOauthCompleteRequestFromJSONTyped;
+exports.GatewayOauthCompleteRequestToJSON = GatewayOauthCompleteRequestToJSON;
+exports.GatewayOauthCompleteRequestToJSONTyped = GatewayOauthCompleteRequestToJSONTyped;
+/**
+ * Check if a given object implements the GatewayOauthCompleteRequest interface.
+ */
+function instanceOfGatewayOauthCompleteRequest(value) {
+    if ((!('attemptId' in value) && !('attempt_id' in value)) || (value['attemptId'] === undefined && value['attempt_id'] === undefined))
+        return false;
+    return true;
+}
+function GatewayOauthCompleteRequestFromJSON(json) {
+    return GatewayOauthCompleteRequestFromJSONTyped(json, false);
+}
+function GatewayOauthCompleteRequestFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'attemptId': json['attempt_id'],
+    };
+}
+function GatewayOauthCompleteRequestToJSON(json) {
+    return GatewayOauthCompleteRequestToJSONTyped(json, false);
+}
+function GatewayOauthCompleteRequestToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'attempt_id': value['attemptId'],
+    };
+}

package/dist/raw/secret/models/GatewayOauthCompletion.d.ts

@@ -0,0 +1,46 @@
+/**
+ * secret
+ * Operations provided by secret.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { GatewayOauthConnection } from './GatewayOauthConnection';
+/**
+ * The reply to `complete`.
+ * @export
+ * @interface GatewayOauthCompletion
+ */
+export interface GatewayOauthCompletion {
+    /**
+     * Value of the `connection` field.
+     * @type {GatewayOauthConnection}
+     * @memberof GatewayOauthCompletion
+     */
+    connection?: GatewayOauthConnection | null;
+    /**
+     *
+     * @type {any}
+     * @memberof GatewayOauthCompletion
+     */
+    providerContext?: any | null;
+    /**
+     * `pending` while the browser is still at the provider, `connected` once the
+     * grant is stored. A client polls until it changes.
+     * @type {string}
+     * @memberof GatewayOauthCompletion
+     */
+    status: string;
+}
+/**
+ * Check if a given object implements the GatewayOauthCompletion interface.
+ */
+export declare function instanceOfGatewayOauthCompletion(value: object): value is GatewayOauthCompletion;
+export declare function GatewayOauthCompletionFromJSON(json: any): GatewayOauthCompletion;
+export declare function GatewayOauthCompletionFromJSONTyped(json: any, ignoreDiscriminator: boolean): GatewayOauthCompletion;
+export declare function GatewayOauthCompletionToJSON(json: any): GatewayOauthCompletion;
+export declare function GatewayOauthCompletionToJSONTyped(value?: GatewayOauthCompletion | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/secret/models/GatewayOauthCompletion.js

@@ -0,0 +1,55 @@
+"use strict";
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * secret
+ * Operations provided by secret.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instanceOfGatewayOauthCompletion = instanceOfGatewayOauthCompletion;
+exports.GatewayOauthCompletionFromJSON = GatewayOauthCompletionFromJSON;
+exports.GatewayOauthCompletionFromJSONTyped = GatewayOauthCompletionFromJSONTyped;
+exports.GatewayOauthCompletionToJSON = GatewayOauthCompletionToJSON;
+exports.GatewayOauthCompletionToJSONTyped = GatewayOauthCompletionToJSONTyped;
+const GatewayOauthConnection_1 = require("./GatewayOauthConnection");
+/**
+ * Check if a given object implements the GatewayOauthCompletion interface.
+ */
+function instanceOfGatewayOauthCompletion(value) {
+    if (!('status' in value) || value['status'] === undefined)
+        return false;
+    return true;
+}
+function GatewayOauthCompletionFromJSON(json) {
+    return GatewayOauthCompletionFromJSONTyped(json, false);
+}
+function GatewayOauthCompletionFromJSONTyped(json, ignoreDiscriminator) {
+    if (json == null) {
+        return json;
+    }
+    return {
+        'connection': json['connection'] === undefined ? undefined : json['connection'] === null ? null : (0, GatewayOauthConnection_1.GatewayOauthConnectionFromJSON)(json['connection']),
+        'providerContext': json['provider_context'] === undefined ? undefined : json['provider_context'] === null ? null : json['provider_context'],
+        'status': json['status'],
+    };
+}
+function GatewayOauthCompletionToJSON(json) {
+    return GatewayOauthCompletionToJSONTyped(json, false);
+}
+function GatewayOauthCompletionToJSONTyped(value, ignoreDiscriminator = false) {
+    if (value == null) {
+        return value;
+    }
+    return {
+        'connection': (0, GatewayOauthConnection_1.GatewayOauthConnectionToJSON)(value['connection']),
+        'provider_context': value['providerContext'],
+        'status': value['status'],
+    };
+}

package/dist/raw/secret/models/GatewayOauthConnection.d.ts

@@ -0,0 +1,83 @@
+/**
+ * secret
+ * Operations provided by secret.
+ *
+ * The version of the OpenAPI document: 0.1.0
+ *
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+import type { GatewayOauthOwner } from './GatewayOauthOwner';
+/**
+ * A stored connection, as read back off the `secret` row. Non-sensitive only —
+ * no token ever appears here, and the type has no field one could occupy.
+ * @export
+ * @interface GatewayOauthConnection
+ */
+export interface GatewayOauthConnection {
+    /**
+     * Value of the `created_at` field.
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    createdAt: string;
+    /**
+     * `oauth2` (refreshable) or `bearer_token` (non-expiring).
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    credentialType: string;
+    /**
+     * The caller-supplied label, echoed from `display_name`.
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    label: string;
+    /**
+     *
+     * @type {GatewayOauthOwner}
+     * @memberof GatewayOauthConnection
+     */
+    owner: GatewayOauthOwner;
+    /**
+     * Value of the `provider` field.
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    provider: string;
+    /**
+     * Scopes the provider actually granted.
+     * @type {Array<string>}
+     * @memberof GatewayOauthConnection
+     */
+    scopes: Array<string>;
+    /**
+     * The `secret_…` handle. This is the connection's id, and what an
+     * `mcp_server` or any other consumer links to.
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    secretId: string;
+    /**
+     * Value of the `updated_at` field.
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    updatedAt: string;
+    /**
+     * Stable identifier of the related workspace resource.
+     * @type {string}
+     * @memberof GatewayOauthConnection
+     */
+    workspaceId: string;
+}
+/**
+ * Check if a given object implements the GatewayOauthConnection interface.
+ */
+export declare function instanceOfGatewayOauthConnection(value: object): value is GatewayOauthConnection;
+export declare function GatewayOauthConnectionFromJSON(json: any): GatewayOauthConnection;
+export declare function GatewayOauthConnectionFromJSONTyped(json: any, ignoreDiscriminator: boolean): GatewayOauthConnection;
+export declare function GatewayOauthConnectionToJSON(json: any): GatewayOauthConnection;
+export declare function GatewayOauthConnectionToJSONTyped(value?: GatewayOauthConnection | null, ignoreDiscriminator?: boolean): any;