@atlanai/sdk 0.2.4 → 0.3.0

package/dist/raw/model/models/ModelMessages400Response.d.ts

@@ -1,52 +0,0 @@
-/**
- * Model gateway
- * An LLM model gateway: register providers + their secrets, auto-discover their models, and proxy inference through OpenAI-compatible and Anthropic-compatible endpoints.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import type { ModelMessages400ResponseError } from './ModelMessages400ResponseError';
-/**
- * Anthropic-compatible error envelope.
- * @export
- * @interface ModelMessages400Response
- */
-export interface ModelMessages400Response {
-    /**
-     *
-     * @type {ModelMessages400ResponseError}
-     * @memberof ModelMessages400Response
-     */
-    error: ModelMessages400ResponseError;
-    /**
-     *
-     * @type {string}
-     * @memberof ModelMessages400Response
-     */
-    requestId: string;
-    /**
-     *
-     * @type {ModelMessages400ResponseTypeEnum}
-     * @memberof ModelMessages400Response
-     */
-    type: ModelMessages400ResponseTypeEnum;
-}
-/**
-* @export
-* @enum {string}
-*/
-export declare enum ModelMessages400ResponseTypeEnum {
-    Error = "error"
-}
-/**
- * Check if a given object implements the ModelMessages400Response interface.
- */
-export declare function instanceOfModelMessages400Response(value: object): value is ModelMessages400Response;
-export declare function ModelMessages400ResponseFromJSON(json: any): ModelMessages400Response;
-export declare function ModelMessages400ResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): ModelMessages400Response;
-export declare function ModelMessages400ResponseToJSON(json: any): ModelMessages400Response;
-export declare function ModelMessages400ResponseToJSONTyped(value?: ModelMessages400Response | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/model/models/ModelMessages400Response.js

@@ -1,70 +0,0 @@
-"use strict";
-/* tslint:disable */
-/* eslint-disable */
-/**
- * Model gateway
- * An LLM model gateway: register providers + their secrets, auto-discover their models, and proxy inference through OpenAI-compatible and Anthropic-compatible endpoints.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ModelMessages400ResponseTypeEnum = void 0;
-exports.instanceOfModelMessages400Response = instanceOfModelMessages400Response;
-exports.ModelMessages400ResponseFromJSON = ModelMessages400ResponseFromJSON;
-exports.ModelMessages400ResponseFromJSONTyped = ModelMessages400ResponseFromJSONTyped;
-exports.ModelMessages400ResponseToJSON = ModelMessages400ResponseToJSON;
-exports.ModelMessages400ResponseToJSONTyped = ModelMessages400ResponseToJSONTyped;
-const ModelMessages400ResponseError_1 = require("./ModelMessages400ResponseError");
-/**
-* @export
-* @enum {string}
-*/
-var ModelMessages400ResponseTypeEnum;
-(function (ModelMessages400ResponseTypeEnum) {
-    ModelMessages400ResponseTypeEnum["Error"] = "error";
-})(ModelMessages400ResponseTypeEnum || (exports.ModelMessages400ResponseTypeEnum = ModelMessages400ResponseTypeEnum = {}));
-/**
- * Check if a given object implements the ModelMessages400Response interface.
- */
-function instanceOfModelMessages400Response(value) {
-    if (!('error' in value) || value['error'] === undefined)
-        return false;
-    if ((!('requestId' in value) && !('request_id' in value)) || (value['requestId'] === undefined && value['request_id'] === undefined))
-        return false;
-    if (!('type' in value) || value['type'] === undefined)
-        return false;
-    if (value['type'] !== 'error')
-        return false;
-    return true;
-}
-function ModelMessages400ResponseFromJSON(json) {
-    return ModelMessages400ResponseFromJSONTyped(json, false);
-}
-function ModelMessages400ResponseFromJSONTyped(json, ignoreDiscriminator) {
-    if (json == null) {
-        return json;
-    }
-    return {
-        'error': (0, ModelMessages400ResponseError_1.ModelMessages400ResponseErrorFromJSON)(json['error']),
-        'requestId': json['request_id'],
-        'type': json['type'],
-    };
-}
-function ModelMessages400ResponseToJSON(json) {
-    return ModelMessages400ResponseToJSONTyped(json, false);
-}
-function ModelMessages400ResponseToJSONTyped(value, ignoreDiscriminator = false) {
-    if (value == null) {
-        return value;
-    }
-    return {
-        'error': (0, ModelMessages400ResponseError_1.ModelMessages400ResponseErrorToJSON)(value['error']),
-        'request_id': value['requestId'],
-        'type': value['type'],
-    };
-}

package/dist/raw/model/models/ModelMessages400ResponseError.d.ts

@@ -1,38 +0,0 @@
-/**
- * Model gateway
- * An LLM model gateway: register providers + their secrets, auto-discover their models, and proxy inference through OpenAI-compatible and Anthropic-compatible endpoints.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- *
- * @export
- * @interface ModelMessages400ResponseError
- */
-export interface ModelMessages400ResponseError {
-    /**
-     *
-     * @type {string}
-     * @memberof ModelMessages400ResponseError
-     */
-    message: string;
-    /**
-     *
-     * @type {string}
-     * @memberof ModelMessages400ResponseError
-     */
-    type: string;
-}
-/**
- * Check if a given object implements the ModelMessages400ResponseError interface.
- */
-export declare function instanceOfModelMessages400ResponseError(value: object): value is ModelMessages400ResponseError;
-export declare function ModelMessages400ResponseErrorFromJSON(json: any): ModelMessages400ResponseError;
-export declare function ModelMessages400ResponseErrorFromJSONTyped(json: any, ignoreDiscriminator: boolean): ModelMessages400ResponseError;
-export declare function ModelMessages400ResponseErrorToJSON(json: any): ModelMessages400ResponseError;
-export declare function ModelMessages400ResponseErrorToJSONTyped(value?: ModelMessages400ResponseError | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/model/models/ModelMessages400ResponseError.js

@@ -1,54 +0,0 @@
-"use strict";
-/* tslint:disable */
-/* eslint-disable */
-/**
- * Model gateway
- * An LLM model gateway: register providers + their secrets, auto-discover their models, and proxy inference through OpenAI-compatible and Anthropic-compatible endpoints.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.instanceOfModelMessages400ResponseError = instanceOfModelMessages400ResponseError;
-exports.ModelMessages400ResponseErrorFromJSON = ModelMessages400ResponseErrorFromJSON;
-exports.ModelMessages400ResponseErrorFromJSONTyped = ModelMessages400ResponseErrorFromJSONTyped;
-exports.ModelMessages400ResponseErrorToJSON = ModelMessages400ResponseErrorToJSON;
-exports.ModelMessages400ResponseErrorToJSONTyped = ModelMessages400ResponseErrorToJSONTyped;
-/**
- * Check if a given object implements the ModelMessages400ResponseError interface.
- */
-function instanceOfModelMessages400ResponseError(value) {
-    if (!('message' in value) || value['message'] === undefined)
-        return false;
-    if (!('type' in value) || value['type'] === undefined)
-        return false;
-    return true;
-}
-function ModelMessages400ResponseErrorFromJSON(json) {
-    return ModelMessages400ResponseErrorFromJSONTyped(json, false);
-}
-function ModelMessages400ResponseErrorFromJSONTyped(json, ignoreDiscriminator) {
-    if (json == null) {
-        return json;
-    }
-    return {
-        'message': json['message'],
-        'type': json['type'],
-    };
-}
-function ModelMessages400ResponseErrorToJSON(json) {
-    return ModelMessages400ResponseErrorToJSONTyped(json, false);
-}
-function ModelMessages400ResponseErrorToJSONTyped(value, ignoreDiscriminator = false) {
-    if (value == null) {
-        return value;
-    }
-    return {
-        'message': value['message'],
-        'type': value['type'],
-    };
-}

package/dist/raw/otel/models/OtelIngestLogs400Response.d.ts

@@ -1,46 +0,0 @@
-/**
- * OTel
- * OTLP trace/log/metric ingest. Account scope is always derived from the verified caller; a client-supplied ingest workspace is validated against that account before it is accepted.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- * JSON-encoded google.rpc.Status.
- * @export
- * @interface OtelIngestLogs400Response
- */
-export interface OtelIngestLogs400Response {
-    /**
-     *
-     * @type {number}
-     * @memberof OtelIngestLogs400Response
-     */
-    code: number;
-    /**
-     *
-     * @type {Array<{ [key: string]: any | null; }>}
-     * @memberof OtelIngestLogs400Response
-     */
-    details: Array<{
-        [key: string]: any | null;
-    }>;
-    /**
-     *
-     * @type {string}
-     * @memberof OtelIngestLogs400Response
-     */
-    message: string;
-}
-/**
- * Check if a given object implements the OtelIngestLogs400Response interface.
- */
-export declare function instanceOfOtelIngestLogs400Response(value: object): value is OtelIngestLogs400Response;
-export declare function OtelIngestLogs400ResponseFromJSON(json: any): OtelIngestLogs400Response;
-export declare function OtelIngestLogs400ResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OtelIngestLogs400Response;
-export declare function OtelIngestLogs400ResponseToJSON(json: any): OtelIngestLogs400Response;
-export declare function OtelIngestLogs400ResponseToJSONTyped(value?: OtelIngestLogs400Response | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/otel/models/OtelIngestLogs400Response.js

@@ -1,58 +0,0 @@
-"use strict";
-/* tslint:disable */
-/* eslint-disable */
-/**
- * OTel
- * OTLP trace/log/metric ingest. Account scope is always derived from the verified caller; a client-supplied ingest workspace is validated against that account before it is accepted.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.instanceOfOtelIngestLogs400Response = instanceOfOtelIngestLogs400Response;
-exports.OtelIngestLogs400ResponseFromJSON = OtelIngestLogs400ResponseFromJSON;
-exports.OtelIngestLogs400ResponseFromJSONTyped = OtelIngestLogs400ResponseFromJSONTyped;
-exports.OtelIngestLogs400ResponseToJSON = OtelIngestLogs400ResponseToJSON;
-exports.OtelIngestLogs400ResponseToJSONTyped = OtelIngestLogs400ResponseToJSONTyped;
-/**
- * Check if a given object implements the OtelIngestLogs400Response interface.
- */
-function instanceOfOtelIngestLogs400Response(value) {
-    if (!('code' in value) || value['code'] === undefined)
-        return false;
-    if (!('details' in value) || value['details'] === undefined)
-        return false;
-    if (!('message' in value) || value['message'] === undefined)
-        return false;
-    return true;
-}
-function OtelIngestLogs400ResponseFromJSON(json) {
-    return OtelIngestLogs400ResponseFromJSONTyped(json, false);
-}
-function OtelIngestLogs400ResponseFromJSONTyped(json, ignoreDiscriminator) {
-    if (json == null) {
-        return json;
-    }
-    return {
-        'code': json['code'],
-        'details': json['details'],
-        'message': json['message'],
-    };
-}
-function OtelIngestLogs400ResponseToJSON(json) {
-    return OtelIngestLogs400ResponseToJSONTyped(json, false);
-}
-function OtelIngestLogs400ResponseToJSONTyped(value, ignoreDiscriminator = false) {
-    if (value == null) {
-        return value;
-    }
-    return {
-        'code': value['code'],
-        'details': value['details'],
-        'message': value['message'],
-    };
-}

package/dist/raw/otel/models/OtelIngestLogs403Response.d.ts

@@ -1,46 +0,0 @@
-/**
- * OTel
- * OTLP trace/log/metric ingest. Account scope is always derived from the verified caller; a client-supplied ingest workspace is validated against that account before it is accepted.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-/**
- * JSON-encoded google.rpc.Status.
- * @export
- * @interface OtelIngestLogs403Response
- */
-export interface OtelIngestLogs403Response {
-    /**
-     *
-     * @type {number}
-     * @memberof OtelIngestLogs403Response
-     */
-    code: number;
-    /**
-     *
-     * @type {Array<{ [key: string]: any; }>}
-     * @memberof OtelIngestLogs403Response
-     */
-    details: Array<{
-        [key: string]: any;
-    }>;
-    /**
-     *
-     * @type {string}
-     * @memberof OtelIngestLogs403Response
-     */
-    message: string;
-}
-/**
- * Check if a given object implements the OtelIngestLogs403Response interface.
- */
-export declare function instanceOfOtelIngestLogs403Response(value: object): value is OtelIngestLogs403Response;
-export declare function OtelIngestLogs403ResponseFromJSON(json: any): OtelIngestLogs403Response;
-export declare function OtelIngestLogs403ResponseFromJSONTyped(json: any, ignoreDiscriminator: boolean): OtelIngestLogs403Response;
-export declare function OtelIngestLogs403ResponseToJSON(json: any): OtelIngestLogs403Response;
-export declare function OtelIngestLogs403ResponseToJSONTyped(value?: OtelIngestLogs403Response | null, ignoreDiscriminator?: boolean): any;

package/dist/raw/otel/models/OtelIngestLogs403Response.js

@@ -1,58 +0,0 @@
-"use strict";
-/* tslint:disable */
-/* eslint-disable */
-/**
- * OTel
- * OTLP trace/log/metric ingest. Account scope is always derived from the verified caller; a client-supplied ingest workspace is validated against that account before it is accepted.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.instanceOfOtelIngestLogs403Response = instanceOfOtelIngestLogs403Response;
-exports.OtelIngestLogs403ResponseFromJSON = OtelIngestLogs403ResponseFromJSON;
-exports.OtelIngestLogs403ResponseFromJSONTyped = OtelIngestLogs403ResponseFromJSONTyped;
-exports.OtelIngestLogs403ResponseToJSON = OtelIngestLogs403ResponseToJSON;
-exports.OtelIngestLogs403ResponseToJSONTyped = OtelIngestLogs403ResponseToJSONTyped;
-/**
- * Check if a given object implements the OtelIngestLogs403Response interface.
- */
-function instanceOfOtelIngestLogs403Response(value) {
-    if (!('code' in value) || value['code'] === undefined)
-        return false;
-    if (!('details' in value) || value['details'] === undefined)
-        return false;
-    if (!('message' in value) || value['message'] === undefined)
-        return false;
-    return true;
-}
-function OtelIngestLogs403ResponseFromJSON(json) {
-    return OtelIngestLogs403ResponseFromJSONTyped(json, false);
-}
-function OtelIngestLogs403ResponseFromJSONTyped(json, ignoreDiscriminator) {
-    if (json == null) {
-        return json;
-    }
-    return {
-        'code': json['code'],
-        'details': json['details'],
-        'message': json['message'],
-    };
-}
-function OtelIngestLogs403ResponseToJSON(json) {
-    return OtelIngestLogs403ResponseToJSONTyped(json, false);
-}
-function OtelIngestLogs403ResponseToJSONTyped(value, ignoreDiscriminator = false) {
-    if (value == null) {
-        return value;
-    }
-    return {
-        'code': value['code'],
-        'details': value['details'],
-        'message': value['message'],
-    };
-}

package/dist/raw/secret/apis/OauthApi.d.ts

@@ -1,143 +0,0 @@
-/**
- * secret
- * Operations provided by secret.
- *
- * The version of the OpenAPI document: 0.1.0
- *
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import * as runtime from '../runtime';
-import { type GatewayOauthCompleteRequest } from '../models/GatewayOauthCompleteRequest';
-import { type GatewayOauthCompletion } from '../models/GatewayOauthCompletion';
-import { type GatewayOauthConnection } from '../models/GatewayOauthConnection';
-import { type GatewayOauthProviderView } from '../models/GatewayOauthProviderView';
-import { type GatewayOauthStartRequest } from '../models/GatewayOauthStartRequest';
-import { type GatewayOauthStarted } from '../models/GatewayOauthStarted';
-export interface SecretCompleteOauthRequest {
-    gatewayOauthCompleteRequest: GatewayOauthCompleteRequest;
-    contentEncoding?: SecretCompleteOauthContentEncodingEnum;
-}
-export interface SecretDisconnectOauthRequest {
-    secretId: string;
-}
-export interface SecretListOauthConnectionsRequest {
-    provider?: string;
-}
-export interface SecretOauthCallbackRequest {
-    provider: string;
-    code?: string;
-    state?: string;
-    error?: string;
-}
-export interface SecretStartOauthRequest {
-    gatewayOauthStartRequest: GatewayOauthStartRequest;
-    contentEncoding?: SecretStartOauthContentEncodingEnum;
-}
-/**
- *
- */
-export declare class OauthApi extends runtime.BaseAPI {
-    /**
-     * Creates request options for secretCompleteOauth without sending the request
-     */
-    secretCompleteOauthRequestOpts(requestParameters: SecretCompleteOauthRequest): Promise<runtime.RequestOpts>;
-    /**
-     * Use this operation to `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
-     * `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
-     */
-    secretCompleteOauthRaw(requestParameters: SecretCompleteOauthRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GatewayOauthCompletion>>;
-    /**
-     * Use this operation to `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
-     * `POST /<ext>/v1/oauth/complete` — polled until it answers `connected`.
-     */
-    secretCompleteOauth(requestParameters: SecretCompleteOauthRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GatewayOauthCompletion>;
-    /**
-     * Creates request options for secretDisconnectOauth without sending the request
-     */
-    secretDisconnectOauthRequestOpts(requestParameters: SecretDisconnectOauthRequest): Promise<runtime.RequestOpts>;
-    /**
-     * Use this operation to `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
-     * `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
-     */
-    secretDisconnectOauthRaw(requestParameters: SecretDisconnectOauthRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
-    /**
-     * Use this operation to `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
-     * `DELETE /<ext>/v1/oauth/connections/{secret_id}`.
-     */
-    secretDisconnectOauth(requestParameters: SecretDisconnectOauthRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
-    /**
-     * Creates request options for secretListOauthConnections without sending the request
-     */
-    secretListOauthConnectionsRequestOpts(requestParameters: SecretListOauthConnectionsRequest): Promise<runtime.RequestOpts>;
-    /**
-     * Use this operation to `GET /<ext>/v1/oauth/connections`.
-     * `GET /<ext>/v1/oauth/connections`.
-     */
-    secretListOauthConnectionsRaw(requestParameters: SecretListOauthConnectionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<GatewayOauthConnection>>>;
-    /**
-     * Use this operation to `GET /<ext>/v1/oauth/connections`.
-     * `GET /<ext>/v1/oauth/connections`.
-     */
-    secretListOauthConnections(requestParameters?: SecretListOauthConnectionsRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<GatewayOauthConnection>>;
-    /**
-     * Creates request options for secretListOauthProviders without sending the request
-     */
-    secretListOauthProvidersRequestOpts(): Promise<runtime.RequestOpts>;
-    /**
-     * Use this operation to `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
-     * `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
-     */
-    secretListOauthProvidersRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<Array<GatewayOauthProviderView>>>;
-    /**
-     * Use this operation to `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
-     * `GET /<ext>/v1/oauth/providers` — what can be connected, and the callback URL to register for each.
-     */
-    secretListOauthProviders(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<GatewayOauthProviderView>>;
-    /**
-     * Creates request options for secretOauthCallback without sending the request
-     */
-    secretOauthCallbackRequestOpts(requestParameters: SecretOauthCallbackRequest): Promise<runtime.RequestOpts>;
-    /**
-     * # Why this one route has no bearer, and what authenticates it instead  The caller here is the user\'s **browser**, arriving from the provider. It carries no Atlan credential and cannot be made to: the redirect target is registered with the provider months earlier and is followed by a plain navigation.  The authenticator is the `state` parameter. It is 32 bytes of system entropy minted by [`crate::flow::random_token`], stored only as its `sha256`, bound at `start` to one org, one subject and one workspace, single-use, and valid for ten minutes. Presenting it proves possession of something only the browser that began this consent received.  **And it is deliberately not sufficient on its own.** This handler does one thing: park the code against the attempt. Every decision that matters — whether the caller may write to that workspace, whose grant this becomes — happens in `complete`, under a verified Atlan bearer that must match the subject recorded at `start`. So a stolen `state` gets an attacker exactly as far as making the legitimate user\'s own connection succeed.  This is the compensating control the anonymous-tail entry needs. The five pre-existing anonymous tails were justified on the grounds that they \"carry no secret: the assets are bytes compiled into the binary, with no data plane behind the handler\" — which is not true here, so the justification has to be this instead, and it has to be the SDK\'s rather than any extension\'s.  The response is a static page: no artifact content, no token, no reflection of any query parameter, and `no-store` so a shared browser does not keep it.
-     * `GET /<ext>/v1/oauth/callback/{provider}` — the provider\'s redirect target.
-     */
-    secretOauthCallbackRaw(requestParameters: SecretOauthCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<void>>;
-    /**
-     * # Why this one route has no bearer, and what authenticates it instead  The caller here is the user\'s **browser**, arriving from the provider. It carries no Atlan credential and cannot be made to: the redirect target is registered with the provider months earlier and is followed by a plain navigation.  The authenticator is the `state` parameter. It is 32 bytes of system entropy minted by [`crate::flow::random_token`], stored only as its `sha256`, bound at `start` to one org, one subject and one workspace, single-use, and valid for ten minutes. Presenting it proves possession of something only the browser that began this consent received.  **And it is deliberately not sufficient on its own.** This handler does one thing: park the code against the attempt. Every decision that matters — whether the caller may write to that workspace, whose grant this becomes — happens in `complete`, under a verified Atlan bearer that must match the subject recorded at `start`. So a stolen `state` gets an attacker exactly as far as making the legitimate user\'s own connection succeed.  This is the compensating control the anonymous-tail entry needs. The five pre-existing anonymous tails were justified on the grounds that they \"carry no secret: the assets are bytes compiled into the binary, with no data plane behind the handler\" — which is not true here, so the justification has to be this instead, and it has to be the SDK\'s rather than any extension\'s.  The response is a static page: no artifact content, no token, no reflection of any query parameter, and `no-store` so a shared browser does not keep it.
-     * `GET /<ext>/v1/oauth/callback/{provider}` — the provider\'s redirect target.
-     */
-    secretOauthCallback(requestParameters: SecretOauthCallbackRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<void>;
-    /**
-     * Creates request options for secretStartOauth without sending the request
-     */
-    secretStartOauthRequestOpts(requestParameters: SecretStartOauthRequest): Promise<runtime.RequestOpts>;
-    /**
-     * Use this operation to `POST /<ext>/v1/oauth/start`.
-     * `POST /<ext>/v1/oauth/start`.
-     */
-    secretStartOauthRaw(requestParameters: SecretStartOauthRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<GatewayOauthStarted>>;
-    /**
-     * Use this operation to `POST /<ext>/v1/oauth/start`.
-     * `POST /<ext>/v1/oauth/start`.
-     */
-    secretStartOauth(requestParameters: SecretStartOauthRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<GatewayOauthStarted>;
-}
-/**
-  * @export
-  * @enum {string}
-  */
-export declare enum SecretCompleteOauthContentEncodingEnum {
-    Base64 = "base64",
-    GzipBase64 = "gzip, base64"
-}
-/**
-  * @export
-  * @enum {string}
-  */
-export declare enum SecretStartOauthContentEncodingEnum {
-    Base64 = "base64",
-    GzipBase64 = "gzip, base64"
-}