@atlasauth/backend 0.17.0 → 0.19.0

package/dist/client/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.collect = exports.paginate = exports.AtlasApiError = exports.createAtlasPlatformClient = exports.AtlasErrorCodes = exports.DEFAULT_API_URL = void 0;
+exports.collect = exports.paginate = exports.AtlasApiError = exports.createAtlasPlatformClient = exports.AtlasErrorCodes = exports.createAtlasClientFromEnv = exports.atlasConfigFromEnv = exports.apiBaseFromEnv = exports.API_BASE_ENV_NAMES = exports.DEFAULT_API_URL = void 0;
 exports.createAtlasClient = createAtlasClient;
 const request_1 = require("./request");
 const users_1 = require("./users");
@@ -48,6 +48,7 @@ const bot_signals_1 = require("./bot-signals");
 const network_acls_1 = require("./network-acls");
 const managed_waf_1 = require("./managed-waf");
 const log_streams_1 = require("./log-streams");
+const compliance_1 = require("./compliance");
 const branding_1 = require("./branding");
 const email_templates_1 = require("./email-templates");
 const sms_templates_1 = require("./sms-templates");
@@ -59,11 +60,15 @@ const messaging_1 = require("./messaging");
 const import_export_1 = require("./import-export");
 const better_auth_imports_1 = require("./better-auth-imports");
 const data_subject_requests_1 = require("./data-subject-requests");
+const privacy_1 = require("./privacy");
 const radius_clients_1 = require("./radius-clients");
 const lti_platforms_1 = require("./lti-platforms");
 const instance_1 = require("./instance");
+const integrations_1 = require("./integrations");
 const instance_security_1 = require("./instance-security");
 const referrals_1 = require("./referrals");
+const policies_1 = require("./policies");
+const status_1 = require("./status");
 const user_hooks_1 = require("./user-hooks");
 const tokens_1 = require("./tokens");
 const captcha_1 = require("./captcha");
@@ -77,6 +82,7 @@ const connectors_1 = require("./connectors");
 const custom_oauth_providers_1 = require("./custom-oauth-providers");
 const notifications_1 = require("./notifications");
 const audit_events_1 = require("./audit-events");
+const credentials_1 = require("./credentials");
 const activity_1 = require("./activity");
 const logout_notify_endpoints_1 = require("./logout-notify-endpoints");
 const pca_1 = require("./pca");
@@ -142,6 +148,13 @@ function buildNamespaces(request) {
         networkAcls: (0, network_acls_1.networkAclsResource)(request),
         managedWaf: (0, managed_waf_1.managedWafResource)(request),
         logStreams: (0, log_streams_1.logStreamsResource)(request),
+        // Instance audit export: CloudEvents to a webhook or an S3-compatible bucket.
+        auditExports: (0, compliance_1.auditExportsResource)(request),
+        // Behaviour changes that affect this instance, and security advisories.
+        notices: (0, compliance_1.noticesResource)(request),
+        securityAdvisories: (0, compliance_1.securityAdvisoriesResource)(request),
+        // Who processes this instance's end-user data, in which role.
+        subProcessors: (0, compliance_1.subProcessorsResource)(request),
         branding: (0, branding_1.brandingResource)(request),
         emailTemplates: (0, email_templates_1.emailTemplatesResource)(request),
         smsTemplates: (0, sms_templates_1.smsTemplatesResource)(request),
@@ -155,12 +168,21 @@ function buildNamespaces(request) {
         // Migrate from Better Auth: sealed-bundle upload, dry run and resumable apply.
         betterAuthImports: (0, better_auth_imports_1.betterAuthImportsResource)(request),
         dataSubjectRequests: (0, data_subject_requests_1.dataSubjectRequestsResource)(request),
+        /** The data-rights executor protocol and the instance's orchestrator. */
+        privacy: (0, privacy_1.privacyResource)(request),
         radiusClients: (0, radius_clients_1.radiusClientsResource)(request),
         ltiPlatforms: (0, lti_platforms_1.ltiPlatformsResource)(request),
         instance: (0, instance_1.instanceResource)(request),
+        // Identity integrations, the integration-facing side: verify-error reports, sidebar cards, public metadata.
+        integrations: (0, integrations_1.integrationsResource)(request),
         instanceSecurity: (0, instance_security_1.instanceSecurityResource)(request),
         // Referral attribution: the instance's referral platform connection and call log.
         referrals: (0, referrals_1.referralsResource)(request),
+        // Policy acceptance: policies, versions, acceptances, settings, and the external policy source.
+        policies: (0, policies_1.policiesResource)(request),
+        policySource: (0, policies_1.policySourceResource)(request),
+        // Atlas service status: the incident subscription, incidents that concern you, upstream status pages.
+        status: (0, status_1.statusResource)(request),
         // The before_user_create hook (sets external_id before the user exists).
         userHooks: (0, user_hooks_1.userHooksResource)(request),
         tokens: (0, tokens_1.tokensResource)(request),
@@ -170,6 +192,7 @@ function buildNamespaces(request) {
         // Sign-in page design: instance + per-organization overrides, images, catalog.
         design: (0, design_1.designResource)(request),
         entitlementOverrides: (0, entitlement_overrides_1.entitlementOverridesResource)(request),
+        entitlements: (0, entitlement_overrides_1.entitlementsResource)(request),
         orgLdapConnections: (0, org_ldap_connections_1.orgLdapConnectionsResource)(request),
         organizationSettingsSchema: (0, organization_settings_schema_1.organizationSettingsSchemaResource)(request),
         emailAddresses: (0, email_addresses_1.emailAddressesResource)(request),
@@ -180,6 +203,14 @@ function buildNamespaces(request) {
         notifications: (0, notifications_1.notificationsResource)(request),
         // The tenant's own custom audit events (distinct from Atlas's auditLogs).
         auditEvents: (0, audit_events_1.auditEventsResource)(request),
+        // The key this client uses, the instance's secret keys, and every credential on it.
+        whoami: (0, credentials_1.whoamiResource)(request),
+        secretKeys: (0, credentials_1.secretKeysResource)(request),
+        keys: (0, credentials_1.keysResource)(request),
+        // Partner links: products allowed to call this instance, and links partners granted Atlas.
+        partnerLinks: (0, credentials_1.partnerLinksResource)(request),
+        // Sign in with Atlas grants of apps this instance manages (DSAR erasure).
+        atlasIdGrants: (0, credentials_1.atlasIdGrantsResource)(request),
         events: (0, activity_1.eventsResource)(request),
         usage: (0, activity_1.usageResource)(request),
         configChangelog: (0, activity_1.configChangelogResource)(request),
@@ -199,6 +230,11 @@ function buildNamespaces(request) {
 }
 var request_2 = require("./request");
 Object.defineProperty(exports, "DEFAULT_API_URL", { enumerable: true, get: function () { return request_2.DEFAULT_API_URL; } });
+var env_1 = require("./env");
+Object.defineProperty(exports, "API_BASE_ENV_NAMES", { enumerable: true, get: function () { return env_1.API_BASE_ENV_NAMES; } });
+Object.defineProperty(exports, "apiBaseFromEnv", { enumerable: true, get: function () { return env_1.apiBaseFromEnv; } });
+Object.defineProperty(exports, "atlasConfigFromEnv", { enumerable: true, get: function () { return env_1.atlasConfigFromEnv; } });
+Object.defineProperty(exports, "createAtlasClientFromEnv", { enumerable: true, get: function () { return env_1.createAtlasClientFromEnv; } });
 var error_1 = require("./error");
 Object.defineProperty(exports, "AtlasErrorCodes", { enumerable: true, get: function () { return error_1.AtlasErrorCodes; } });
 var platform_1 = require("./platform");
@@ -210,6 +246,7 @@ Object.defineProperty(exports, "paginate", { enumerable: true, get: function ()
 Object.defineProperty(exports, "collect", { enumerable: true, get: function () { return paginate_1.collect; } });
 // Resource types — exported so callers can annotate their own code.
 __exportStar(require("./types"), exports);
+__exportStar(require("./compliance"), exports);
 __exportStar(require("./users"), exports);
 __exportStar(require("./sessions"), exports);
 __exportStar(require("./organizations"), exports);
@@ -252,11 +289,15 @@ __exportStar(require("./messaging"), exports);
 __exportStar(require("./import-export"), exports);
 __exportStar(require("./better-auth-imports"), exports);
 __exportStar(require("./data-subject-requests"), exports);
+__exportStar(require("./privacy"), exports);
 __exportStar(require("./radius-clients"), exports);
 __exportStar(require("./lti-platforms"), exports);
 __exportStar(require("./instance"), exports);
+__exportStar(require("./integrations"), exports);
 __exportStar(require("./instance-security"), exports);
 __exportStar(require("./referrals"), exports);
+__exportStar(require("./policies"), exports);
+__exportStar(require("./status"), exports);
 __exportStar(require("./user-hooks"), exports);
 __exportStar(require("./tokens"), exports);
 __exportStar(require("./captcha"), exports);
@@ -281,4 +322,6 @@ __exportStar(require("./test-mode"), exports);
 __exportStar(require("./diagnostics"), exports);
 __exportStar(require("./logout-notify-endpoints"), exports);
 __exportStar(require("./platform"), exports);
+__exportStar(require("./credentials"), exports);
+__exportStar(require("./operator"), exports);
 //# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAkFA,8CAQC;AA1FD,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAAwD;AACxD,+CAAmD;AACnD,iDAAqD;AACrD,+CAAmD;AACnD,+CAAmD;AACnD,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,mEAAsE;AACtE,qDAAyD;AACzD,mDAAuD;AACvD,yCAA8C;AAC9C,2DAA+D;AAC/D,2CAAgD;AAChD,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAAuE;AACvE,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAqD;AACrD,yCAAoF;AACpF,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAoBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,0DAAwC;AACxC,mDAAiC;AACjC,kDAAgC;AAChC,6CAA2B;AAC3B,sDAAoC;AACpC,8CAA4B;AAC5B,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA8FA,8CAQC;AAtGD,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAAwD;AACxD,+CAAmD;AACnD,iDAAqD;AACrD,+CAAmD;AACnD,+CAAmD;AACnD,6CAAwH;AACxH,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,mEAAsE;AACtE,uCAA4C;AAC5C,qDAAyD;AACzD,mDAAuD;AACvD,yCAA8C;AAC9C,iDAAsD;AACtD,2DAA+D;AAC/D,2CAAgD;AAChD,yCAAoE;AACpE,qCAA0C;AAC1C,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAA6F;AAC7F,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAqD;AACrD,+CAMuB;AACvB,yCAAoF;AACpF,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,8EAA8E;QAC9E,YAAY,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QAC3C,wEAAwE;QACxE,OAAO,EAAE,IAAA,4BAAe,EAAC,OAAO,CAAC;QACjC,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,OAAO,CAAC;QACvD,8DAA8D;QAC9D,aAAa,EAAE,IAAA,kCAAqB,EAAC,OAAO,CAAC;QAC7C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,yEAAyE;QACzE,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,4GAA4G;QAC5G,YAAY,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,gGAAgG;QAChG,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,+BAAoB,EAAC,OAAO,CAAC;QAC3C,sGAAsG;QACtG,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,4CAAoB,EAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,oFAAoF;QACpF,MAAM,EAAE,IAAA,4BAAc,EAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,IAAI,EAAE,IAAA,0BAAY,EAAC,OAAO,CAAC;QAC3B,2FAA2F;QAC3F,YAAY,EAAE,IAAA,kCAAoB,EAAC,OAAO,CAAC;QAC3C,0EAA0E;QAC1E,aAAa,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAsBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,6BAAyG;AAAhG,yGAAA,kBAAkB,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,yGAAA,kBAAkB,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACzF,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,+CAA6B;AAC7B,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,0DAAwC;AACxC,4CAA0B;AAC1B,mDAAiC;AACjC,kDAAgC;AAChC,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,8CAA4B;AAC5B,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B;AAC3B,gDAA8B;AAC9B,6CAA2B"}

package/dist/client/instance.d.ts

@@ -67,6 +67,77 @@ export interface PreflightFinding {
     fix: string;
     /** Ids of what the finding is about (provider, client_id, domain, …). */
     subject?: Record<string, string>;
+    /** `security_posture` on the findings about settings weaker than the defaults new instances get. */
+    group?: 'security_posture';
+    /** Only with `include_suppressed: true`: the finding does not apply to how the instance integrates. */
+    suppressed?: true;
+    suppressed_reason?: string;
+}
+/** A finding that does not apply to how the instance integrates, and why. */
+export interface PreflightSuppressedFinding {
+    code: string;
+    severity: 'error' | 'warning' | 'info';
+    subject: Record<string, string> | null;
+    reason: string;
+}
+/** How one allowed https origin signs in, as preflight judged it. */
+export interface PreflightOriginIntegration {
+    origin: string;
+    integration: 'redirect' | 'embedded';
+    source: 'declared' | 'embedded_traffic' | 'redirect_clients' | 'default';
+    /** False only for the default (nothing says how the origin signs in). */
+    confident: boolean;
+    reason: string;
+}
+export interface PreflightParams {
+    /** Only findings at least this severe (`ok` still covers every finding). */
+    min_severity?: 'error' | 'warning' | 'info';
+    /** Also list the suppressed findings in `findings`, marked `suppressed: true`. */
+    include_suppressed?: boolean;
+}
+/** One unknown body field your writes sent, aggregated over the report window. */
+export interface UnknownFieldReportRow {
+    method: string;
+    /** The route template, e.g. `/v1/users/{id}`. */
+    path: string;
+    /** The field path, nested as `parent.child`. */
+    field: string;
+    count: number;
+    /** Lenient requests: the field was ignored and named in Atlas-Unknown-Fields. */
+    ignored_count: number;
+    /** Strict requests: refused with 422 UNKNOWN_FIELD. */
+    rejected_count: number;
+    /** Epoch ms. */
+    last_seen_at: number;
+    /** The secret key that sent it (null without a key). */
+    api_key_id: string | null;
+}
+export interface UnknownFieldsReport {
+    object: 'unknown_fields_report';
+    days: number;
+    retention_days: number;
+    strict_request_bodies: boolean;
+    /** True when nothing in the window would be refused by strict request bodies. */
+    safe_to_enable_strict: boolean;
+    data: UnknownFieldReportRow[];
+}
+/** One operation in an OpenAPI diff. */
+export interface OpenApiDiffItem {
+    method: string;
+    path: string;
+    operation_id: string | null;
+    summary: string | null;
+    /** YYYY-MM-DD of the change. */
+    at: string;
+}
+export interface OpenApiDiff {
+    object: 'openapi_diff';
+    since: string;
+    /** The API build the diff was computed on (`<date>+<sha>`). */
+    version: string;
+    added: OpenApiDiffItem[];
+    deprecated: OpenApiDiffItem[];
+    removed: OpenApiDiffItem[];
 }
 /** An advisory published for an Atlas browser SDK version. */
 export interface SdkAdvisory {
@@ -92,14 +163,104 @@ export interface SdkVersionSeen {
     /** The advisories that apply to this version. */
     advisories: SdkAdvisory[];
 }
+/** One row of the integration-health report. */
+export interface IntegrationHealthCheck {
+    /** A preflight code verbatim, or `<source>.<check>`. */
+    id: string;
+    /** false = failing; null = not known or not configured. */
+    ok: boolean | null;
+    detail: string;
+    fix: string | null;
+    docs: string | null;
+    /** For a check that calls your server: the hop that failed. */
+    hop?: 'dns' | 'tls' | 'http' | 'challenge' | 'auth';
+    status?: number;
+    elapsedMs?: number;
+    source: string;
+    severity?: 'error' | 'warning' | 'info';
+    subject?: Record<string, string>;
+    observedAt?: number | null;
+}
+export interface IntegrationHealthReport {
+    object: 'integration_health';
+    ok: boolean;
+    summary: {
+        failing: number;
+        passing: number;
+        unknown: number;
+    };
+    checks: IntegrationHealthCheck[];
+    /** ISO 8601. */
+    generatedAt: string;
+    /** The same instant, epoch ms. */
+    generated_at: number;
+}
+/** The embed manifest (embed-v1) for one instance: CSP sources per surface, storage, SRI and the merged policy. */
+export interface EmbedManifest {
+    schema: string;
+    product: string;
+    updated: string;
+    openapi?: string;
+    llms?: string;
+    status?: string;
+    docs?: string;
+    checkers?: {
+        userAgent: string;
+        userAgents?: string[];
+        egress: string[];
+    };
+    surfaces: Record<string, {
+        tenant?: boolean;
+        servedBy?: 'customer' | 'atlas';
+        csp?: Record<string, string[]>;
+        requires?: Record<string, string[]>;
+        trustedTypes?: string[];
+        consentCategory?: string;
+        storage?: Array<{
+            name: string;
+            type: string;
+            category: string;
+            lifetime: string;
+            purpose: {
+                en: string;
+            } & Record<string, string>;
+        }>;
+        sri?: Record<string, string>;
+        notes?: string[];
+    }>;
+    changes: Array<{
+        effective: string;
+        surface: string;
+        add: Record<string, string[]>;
+        remove: Record<string, string[]>;
+        note?: string;
+    }>;
+    tenant?: {
+        instance: string;
+        environment: string;
+        frontendApiHosts: string[];
+        shape: 'redirect' | 'panel' | 'button' | null;
+        origin: string | null;
+        originAllowed: boolean | null;
+        /** The merged sources for your pages, as one Content-Security-Policy value. */
+        policy: string;
+        sources: Record<string, string[]>;
+    };
+}
 export interface PreflightReport {
     object: 'preflight';
     /** True when there are no error-severity findings. */
     ok: boolean;
     /** When the check ran (epoch ms). */
     checked_at: number;
-    /** Ordered error, then warning, then info. */
+    /** Ordered error, then warning, then info; only those at or above `min_severity`. */
     findings: PreflightFinding[];
+    /** The `min_severity` the findings were filtered by (`info` = everything). */
+    min_severity?: 'error' | 'warning' | 'info';
+    /** Findings that do not apply to how the instance integrates (not counted in `ok`). */
+    suppressed?: PreflightSuppressedFinding[];
+    /** How each allowed https origin signs in. */
+    integrations?: PreflightOriginIntegration[];
     /** Atlas browser SDK versions seen in the last 7 days (newest first), with their advisories. */
     sdk_versions_seen?: SdkVersionSeen[];
 }
@@ -296,21 +457,258 @@ export interface SetForumulateIntegrationBody {
     /** The token `aud`. Default `forumulate:<org_id>`. */
     audience?: string | null;
 }
+/** Receiver health, in the webhook health vocabulary. */
+export interface IntegrationReceiverHealth {
+    url: string;
+    endpoint_id: string | null;
+    state: 'healthy' | 'failing' | 'disabled' | 'unknown';
+    failing_since: number | null;
+    disabled_at: number | null;
+    last_success_at: number | null;
+    last_failure: {
+        at: number;
+        status: number | null;
+        error: string | null;
+    } | null;
+    consecutive_failures: number;
+    success_rate_24h: number | null;
+    events?: string[];
+}
+/**
+ * An identity integration: any service that verifies a user with a JWT — a
+ * preset (`chatly`, `forumulate`, `cookiemunch`, `referalli`) or a custom one.
+ * `enabled: false, connected: false` when it was never connected.
+ */
+export interface Integration {
+    object: string;
+    id: string;
+    /** The same value as `id`. */
+    product: string;
+    preset: 'chatly' | 'forumulate' | 'cookiemunch' | 'referalli' | null;
+    name?: string;
+    role?: 'support_chat' | 'docs_community' | 'consent' | 'referrals' | 'other';
+    enabled: boolean;
+    connected: boolean;
+    audience?: string;
+    audience_format?: string | null;
+    principal_claim?: 'audience_hint' | null;
+    ext_claim?: 'external_id' | null;
+    ttl_seconds?: number;
+    issuer?: string;
+    jwks_url?: string;
+    token_schema?: string;
+    events_url?: string | null;
+    events_url_default?: boolean;
+    events?: string[];
+    backchannel_logout_url?: string | null;
+    backchannel_logout_url_default?: boolean;
+    /** Where the receiver comes from: set here, the first-party OAuth client's backchannel_logout_uri, or the preset's path. */
+    backchannel_logout_source?: 'integration' | 'oauth_client' | 'preset' | null;
+    /** With source `oauth_client`: that client's client_id (also the `aud` of its logout tokens). */
+    backchannel_logout_client_id?: string | null;
+    /** The first-party OAuth client the service signs users in with, as set (null = not set). */
+    oauth_client_id?: string | null;
+    verify_error_report_url?: string | null;
+    cmp?: {
+        script_url: string;
+        script_id: string | null;
+        site_id: string | null;
+        blocking_mode: string | null;
+        extra_origins: string[];
+        settings_preset: 'cookiemunch' | 'cookiebot' | 'onetrust' | 'custom' | null;
+    } | null;
+    atlas_id_users?: boolean;
+    atlas_id_issuer?: {
+        issuer: string;
+        jwks_url: string;
+    } | null;
+    enabled_at?: number | null;
+    updated_at?: number | null;
+    /** Present on a `?dry_run=true` answer. */
+    dry_run?: boolean;
+    health?: {
+        last_minted_at: number | null;
+        mints_24h: number;
+        verify_errors_24h: number;
+        last_verify_error: {
+            error: string;
+            audience: string | null;
+            at: number;
+            reported_at: number;
+        } | null;
+        events: IntegrationReceiverHealth | null;
+        backchannel_logout: IntegrationReceiverHealth | null;
+    };
+    /** Preset fields (chatly: channel/template/identity_verification; forumulate: org_id/spaces/reader_auth_provider; cookiemunch: site_id; referalli: org_id). */
+    [presetField: string]: unknown;
+}
+export interface SetIntegrationBody {
+    enabled?: boolean;
+    /** `<preset>:<id>` for a preset; any value for a custom integration. */
+    audience?: string;
+    /** Custom integrations: the display name (required), role and audience format. */
+    name?: string;
+    role?: 'support_chat' | 'docs_community' | 'consent' | 'referrals' | 'other';
+    audience_format?: string | null;
+    principal_claim?: 'audience_hint' | null;
+    ext_claim?: 'external_id' | null;
+    /** 10-120. Default 120. */
+    ttl_seconds?: number;
+    /** Omitted = the preset default; null = none. */
+    events_url?: string | null;
+    /**
+     * Omitted = the backchannel_logout_uri of the service's first-party OAuth
+     * client when it has one, else the preset default; null = none.
+     */
+    backchannel_logout_url?: string | null;
+    verify_error_report_url?: string | null;
+    /**
+     * The client_id of the first-party OAuth client the service signs users in
+     * with. Omitted = the first-party client tagged `metadata.product = <id>`;
+     * null = none.
+     */
+    oauth_client_id?: string | null;
+    cmp?: {
+        script_url: string;
+        script_id?: string | null;
+        site_id?: string | null;
+        blocking_mode?: string | null;
+        extra_origins?: string[];
+        settings_preset?: 'cookiemunch' | 'cookiebot' | 'onetrust' | 'custom' | null;
+    } | null;
+    atlas_id_users?: boolean;
+    /** chatly: the channel (same as `audience: 'chatly:<channel>'`). */
+    channel?: string;
+    /** forumulate: the org and spaces. */
+    org_id?: string;
+    spaces?: Array<string | {
+        id: string;
+        redeem_url?: string | null;
+    }>;
+}
+export interface IntegrationDelivery {
+    object: 'integration_delivery';
+    kind: 'event' | 'backchannel_logout';
+    integration: string;
+    id: string;
+    url: string;
+    event_id?: string;
+    event_type?: string | null;
+    sid?: string | null;
+    trace_id: string | null;
+    status: 'pending' | 'success' | 'failed';
+    attempt_number: number;
+    http_status: number | null;
+    error: string | null;
+    created_at: number;
+    [field: string]: unknown;
+}
+/** An integration token (the claims follow /schemas/integration-token-v1.json). */
+export interface IntegrationTokenResponse {
+    object: 'integration_token';
+    integration: string;
+    product: string;
+    jwt: string;
+    expires_in: number;
+    audience: string;
+    org_id?: string;
+    space_id?: string;
+    redeem_url?: string;
+    issuer?: string;
+    jwks_uri?: string;
+}
 export declare function instanceResource(request: RequestFn): {
     get(): Promise<Instance>;
     update(body: UpdateInstanceBody): Promise<InstanceUpdateResult>;
     /** Check your setup in one call: configuration the server can see is broken or risky. */
-    preflight(): Promise<PreflightReport>;
+    preflight(params?: PreflightParams): Promise<PreflightReport>;
+    /**
+     * The unknown body fields your writes sent over the last `days` (1-90,
+     * default 30): fix every row with an `ignored_count`, then turn
+     * `auth_config.strictRequestBodies` on.
+     */
+    unknownFieldsReport(params?: {
+        days?: number;
+    }): Promise<UnknownFieldsReport>;
+    /** What changed in the API since a date (YYYY-MM-DD): operations added, deprecated and removed. */
+    openapiDiff(params: {
+        since: string;
+        surface?: string;
+    }): Promise<OpenApiDiff>;
     /**
      * Move every URL that points at one origin to another (a domain move), across
      * the instance, its OAuth clients, webhooks, redirect URLs and Sign in with
      * Atlas apps. `dry_run: true` writes nothing.
      */
     moveOrigin(body: OriginMoveRequest): Promise<OriginMove>;
+    /**
+     * One report of everything that connects the instance to the outside world
+     * (setup checks, webhooks with the failing hop, back-channel logout,
+     * referrals, email, consent manager, SDK versions). `only` limits the
+     * sources; `probe: false` skips live reachability probes.
+     */
+    integrationHealth(params?: {
+        only?: string[];
+        probe?: boolean;
+    }): Promise<IntegrationHealthReport>;
+    /** The integration-health check sources this deployment reports. */
+    integrationHealthProviders(): Promise<{
+        object: "list";
+        data: {
+            object: "integration_health_provider";
+            source: string;
+            description: string;
+        }[];
+        has_more: false;
+    }>;
+    /**
+     * The embed manifest for an instance (public; no key needed): CSP sources per
+     * surface with its hosts filled in, and the merged policy in `tenant.policy`.
+     */
+    embed(params: {
+        instance: string;
+        origin?: string;
+        shape?: "redirect" | "panel" | "button";
+    }): Promise<EmbedManifest>;
     /** The instance's links to other platforms and their health. Read-only. */
     connections(): Promise<InstanceConnections>;
-    /** Built-in connections to other platforms. */
+    /**
+     * Identity integrations: presets and custom integrations (generic), plus the
+     * earlier per-product helpers (`chatly`, `forumulate`) on the same records.
+     */
     integrations: {
+        /** Every integration (the presets, connected or not, and every custom one) with its health. */
+        list(): Promise<{
+            object: "list";
+            data: Integration[];
+            has_more: boolean;
+        }>;
+        get(id: string): Promise<Integration>;
+        /** Connect or replace an integration. `{ dryRun: true }` validates and saves nothing. */
+        set(id: string, body: SetIntegrationBody, opts?: {
+            dryRun?: boolean;
+        }): Promise<Integration>;
+        remove(id: string): Promise<Integration>;
+        /** Event and back-channel logout deliveries, newest first; `trace` finds one operation. */
+        deliveries(id: string, query?: {
+            limit?: number;
+            trace?: string;
+            kind?: "event" | "backchannel_logout";
+        }): Promise<{
+            object: "list";
+            data: IntegrationDelivery[];
+            has_more: boolean;
+        }>;
+        /** Reveal the event receiver's signing secret (audited). */
+        revealEventsSecret(id: string): Promise<{
+            object: "integration_events_secret";
+            integration: string;
+            endpoint_id: string;
+            url: string;
+            secret: string;
+        }>;
+        /** An integration token for a Sign in with Atlas user (their Atlas ID access token). */
+        atlasIdToken(id: string, accessToken: string): Promise<IntegrationTokenResponse>;
         chatly: {
             get(): Promise<ChatlyIntegration>;
             set(body: SetChatlyIntegrationBody): Promise<ChatlyIntegration>;