@atlasauth/backend 0.24.0 → 0.26.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (201) hide show
  1. package/CHANGELOG.md +39 -1
  2. package/dist/client/abac.d.ts +521 -0
  3. package/dist/client/abac.js +146 -0
  4. package/dist/client/abac.js.map +1 -0
  5. package/dist/client/access-policies.d.ts +100 -0
  6. package/dist/client/access-policies.js +29 -0
  7. package/dist/client/access-policies.js.map +1 -0
  8. package/dist/client/action-gallery.d.ts +1 -1
  9. package/dist/client/action-gallery.js.map +1 -1
  10. package/dist/client/actions.d.ts +129 -6
  11. package/dist/client/actions.js +4 -0
  12. package/dist/client/actions.js.map +1 -1
  13. package/dist/client/analytics-reports.d.ts +215 -0
  14. package/dist/client/analytics-reports.js +56 -0
  15. package/dist/client/analytics-reports.js.map +1 -0
  16. package/dist/client/app-catalog.d.ts +74 -0
  17. package/dist/client/app-catalog.js +30 -0
  18. package/dist/client/app-catalog.js.map +1 -0
  19. package/dist/client/attack-protection.d.ts +10 -0
  20. package/dist/client/attack-protection.js +8 -0
  21. package/dist/client/attack-protection.js.map +1 -1
  22. package/dist/client/audit-events.d.ts +71 -0
  23. package/dist/client/audit-events.js +28 -0
  24. package/dist/client/audit-events.js.map +1 -1
  25. package/dist/client/authz-decisions.d.ts +108 -0
  26. package/dist/client/authz-decisions.js +40 -0
  27. package/dist/client/authz-decisions.js.map +1 -0
  28. package/dist/client/connections.d.ts +507 -0
  29. package/dist/client/connections.js +164 -0
  30. package/dist/client/connections.js.map +1 -0
  31. package/dist/client/credentials.d.ts +8 -0
  32. package/dist/client/credentials.js.map +1 -1
  33. package/dist/client/custom-oauth-providers.d.ts +15 -0
  34. package/dist/client/custom-oauth-providers.js.map +1 -1
  35. package/dist/client/delegated-ui-proxy.d.ts +25 -0
  36. package/dist/client/delegated-ui-proxy.js +46 -0
  37. package/dist/client/delegated-ui-proxy.js.map +1 -0
  38. package/dist/client/desktop-mfa.d.ts +104 -0
  39. package/dist/client/desktop-mfa.js +44 -0
  40. package/dist/client/desktop-mfa.js.map +1 -0
  41. package/dist/client/devices.d.ts +44 -0
  42. package/dist/client/devices.js +26 -0
  43. package/dist/client/devices.js.map +1 -0
  44. package/dist/client/email-templates.d.ts +1 -1
  45. package/dist/client/email-templates.js.map +1 -1
  46. package/dist/client/fga.d.ts +125 -4
  47. package/dist/client/fga.js +40 -0
  48. package/dist/client/fga.js.map +1 -1
  49. package/dist/client/flags.d.ts +101 -0
  50. package/dist/client/flags.js +104 -0
  51. package/dist/client/flags.js.map +1 -0
  52. package/dist/client/groups.d.ts +146 -0
  53. package/dist/client/groups.js +67 -0
  54. package/dist/client/groups.js.map +1 -0
  55. package/dist/client/identity-verification.d.ts +62 -0
  56. package/dist/client/identity-verification.js +39 -0
  57. package/dist/client/identity-verification.js.map +1 -0
  58. package/dist/client/iga.d.ts +436 -0
  59. package/dist/client/iga.js +82 -0
  60. package/dist/client/iga.js.map +1 -0
  61. package/dist/client/index.d.ts +1433 -4
  62. package/dist/client/index.js +96 -0
  63. package/dist/client/index.js.map +1 -1
  64. package/dist/client/journeys.d.ts +108 -0
  65. package/dist/client/journeys.js +35 -0
  66. package/dist/client/journeys.js.map +1 -0
  67. package/dist/client/least-privilege.d.ts +95 -0
  68. package/dist/client/least-privilege.js +28 -0
  69. package/dist/client/least-privilege.js.map +1 -0
  70. package/dist/client/log-streams.d.ts +1 -1
  71. package/dist/client/managed-grants.d.ts +52 -0
  72. package/dist/client/managed-grants.js +28 -0
  73. package/dist/client/managed-grants.js.map +1 -0
  74. package/dist/client/marketing.d.ts +67 -0
  75. package/dist/client/marketing.js +26 -0
  76. package/dist/client/marketing.js.map +1 -0
  77. package/dist/client/mcp-gateways.d.ts +126 -0
  78. package/dist/client/mcp-gateways.js +47 -0
  79. package/dist/client/mcp-gateways.js.map +1 -0
  80. package/dist/client/messaging.d.ts +14 -3
  81. package/dist/client/messaging.js.map +1 -1
  82. package/dist/client/mfa-factors.d.ts +120 -0
  83. package/dist/client/mfa-factors.js +73 -0
  84. package/dist/client/mfa-factors.js.map +1 -0
  85. package/dist/client/migrations.d.ts +1 -1
  86. package/dist/client/migrations.js.map +1 -1
  87. package/dist/client/network-acls.d.ts +6 -1
  88. package/dist/client/network-acls.js.map +1 -1
  89. package/dist/client/network-zones.d.ts +56 -0
  90. package/dist/client/network-zones.js +29 -0
  91. package/dist/client/network-zones.js.map +1 -0
  92. package/dist/client/notifications.d.ts +1 -1
  93. package/dist/client/notifications.js.map +1 -1
  94. package/dist/client/oauth-clients.d.ts +187 -3
  95. package/dist/client/oauth-clients.js +64 -0
  96. package/dist/client/oauth-clients.js.map +1 -1
  97. package/dist/client/openfga.d.ts +90 -3
  98. package/dist/client/openfga.js +27 -1
  99. package/dist/client/openfga.js.map +1 -1
  100. package/dist/client/org-role-grants.d.ts +57 -0
  101. package/dist/client/org-role-grants.js +40 -0
  102. package/dist/client/org-role-grants.js.map +1 -0
  103. package/dist/client/organizations.d.ts +52 -0
  104. package/dist/client/organizations.js +44 -0
  105. package/dist/client/organizations.js.map +1 -1
  106. package/dist/client/page-templates.d.ts +78 -0
  107. package/dist/client/page-templates.js +31 -0
  108. package/dist/client/page-templates.js.map +1 -0
  109. package/dist/client/passkey-api.d.ts +73 -0
  110. package/dist/client/passkey-api.js +34 -0
  111. package/dist/client/passkey-api.js.map +1 -0
  112. package/dist/client/policy-bundles.d.ts +105 -0
  113. package/dist/client/policy-bundles.js +38 -0
  114. package/dist/client/policy-bundles.js.map +1 -0
  115. package/dist/client/resources.d.ts +150 -0
  116. package/dist/client/resources.js +73 -0
  117. package/dist/client/resources.js.map +1 -0
  118. package/dist/client/risk-based-mfa.d.ts +147 -0
  119. package/dist/client/risk-based-mfa.js +30 -0
  120. package/dist/client/risk-based-mfa.js.map +1 -1
  121. package/dist/client/roles.d.ts +4 -0
  122. package/dist/client/roles.js.map +1 -1
  123. package/dist/client/service-connectors.d.ts +83 -0
  124. package/dist/client/service-connectors.js +33 -0
  125. package/dist/client/service-connectors.js.map +1 -0
  126. package/dist/client/ssf.d.ts +112 -0
  127. package/dist/client/ssf.js +49 -0
  128. package/dist/client/ssf.js.map +1 -0
  129. package/dist/client/sso-onboarding.d.ts +6 -0
  130. package/dist/client/sso-onboarding.js.map +1 -1
  131. package/dist/client/users.d.ts +302 -0
  132. package/dist/client/users.js +125 -0
  133. package/dist/client/users.js.map +1 -1
  134. package/dist/client/vault.d.ts +85 -0
  135. package/dist/client/vault.js +50 -0
  136. package/dist/client/vault.js.map +1 -0
  137. package/dist/client/vc.d.ts +136 -0
  138. package/dist/client/vc.js +43 -0
  139. package/dist/client/vc.js.map +1 -0
  140. package/dist/client/webhooks.d.ts +31 -2
  141. package/dist/client/webhooks.js.map +1 -1
  142. package/dist/client/workflows.d.ts +131 -0
  143. package/dist/client/workflows.js +36 -0
  144. package/dist/client/workflows.js.map +1 -0
  145. package/dist/index.d.ts +5 -0
  146. package/dist/index.js +11 -2
  147. package/dist/index.js.map +1 -1
  148. package/dist/magic-did.d.ts +5 -0
  149. package/dist/magic-did.js +49 -0
  150. package/dist/magic-did.js.map +1 -0
  151. package/dist/migration-bridge.d.ts +9 -0
  152. package/dist/migration-bridge.js +28 -2
  153. package/dist/migration-bridge.js.map +1 -1
  154. package/dist/migration-presets-g3.d.ts +2 -0
  155. package/dist/migration-presets-g3.js +254 -0
  156. package/dist/migration-presets-g3.js.map +1 -0
  157. package/dist/migration-presets-g4/authentik.d.ts +14 -0
  158. package/dist/migration-presets-g4/authentik.js +37 -0
  159. package/dist/migration-presets-g4/authentik.js.map +1 -0
  160. package/dist/migration-presets-g4/fusionauth.d.ts +2 -0
  161. package/dist/migration-presets-g4/fusionauth.js +52 -0
  162. package/dist/migration-presets-g4/fusionauth.js.map +1 -0
  163. package/dist/migration-presets-g4/hanko.d.ts +12 -0
  164. package/dist/migration-presets-g4/hanko.js +46 -0
  165. package/dist/migration-presets-g4/hanko.js.map +1 -0
  166. package/dist/migration-presets-g4/keycloak.d.ts +16 -0
  167. package/dist/migration-presets-g4/keycloak.js +37 -0
  168. package/dist/migration-presets-g4/keycloak.js.map +1 -0
  169. package/dist/migration-presets-g4/logto.d.ts +12 -0
  170. package/dist/migration-presets-g4/logto.js +35 -0
  171. package/dist/migration-presets-g4/logto.js.map +1 -0
  172. package/dist/migration-presets-g4/ory.d.ts +2 -0
  173. package/dist/migration-presets-g4/ory.js +67 -0
  174. package/dist/migration-presets-g4/ory.js.map +1 -0
  175. package/dist/migration-presets-g4/supertokens.d.ts +13 -0
  176. package/dist/migration-presets-g4/supertokens.js +35 -0
  177. package/dist/migration-presets-g4/supertokens.js.map +1 -0
  178. package/dist/migration-presets-g4/zitadel.d.ts +2 -0
  179. package/dist/migration-presets-g4/zitadel.js +36 -0
  180. package/dist/migration-presets-g4/zitadel.js.map +1 -0
  181. package/dist/migration-presets-g4.d.ts +10 -0
  182. package/dist/migration-presets-g4.js +30 -0
  183. package/dist/migration-presets-g4.js.map +1 -0
  184. package/dist/migration-presets.d.ts +6 -0
  185. package/dist/migration-presets.js +102 -6
  186. package/dist/migration-presets.js.map +1 -1
  187. package/dist/policy-bundle.d.ts +110 -0
  188. package/dist/policy-bundle.js +289 -0
  189. package/dist/policy-bundle.js.map +1 -0
  190. package/dist/request-auth.d.ts +32 -0
  191. package/dist/request-auth.js +72 -0
  192. package/dist/request-auth.js.map +1 -0
  193. package/dist/uma.d.ts +77 -0
  194. package/dist/uma.js +95 -0
  195. package/dist/uma.js.map +1 -0
  196. package/dist/verify.d.ts +2 -0
  197. package/dist/verify.js.map +1 -1
  198. package/dist/workos-session.d.ts +30 -0
  199. package/dist/workos-session.js +123 -0
  200. package/dist/workos-session.js.map +1 -0
  201. package/package.json +2 -2
@@ -22,6 +22,8 @@ const sessions_1 = require("./sessions");
22
22
  const organizations_1 = require("./organizations");
23
23
  const roles_1 = require("./roles");
24
24
  const oauth_clients_1 = require("./oauth-clients");
25
+ const passkey_api_1 = require("./passkey-api");
26
+ const vc_1 = require("./vc");
25
27
  const resource_servers_1 = require("./resource-servers");
26
28
  const sso_connections_1 = require("./sso-connections");
27
29
  const scim_tokens_1 = require("./scim-tokens");
@@ -29,6 +31,7 @@ const domains_1 = require("./domains");
29
31
  const waitlist_1 = require("./waitlist");
30
32
  const restrictions_1 = require("./restrictions");
31
33
  const attack_protection_1 = require("./attack-protection");
34
+ const mfa_factors_1 = require("./mfa-factors");
32
35
  const actor_tokens_1 = require("./actor-tokens");
33
36
  const invitations_1 = require("./invitations");
34
37
  const webhooks_1 = require("./webhooks");
@@ -37,6 +40,7 @@ const audit_logs_1 = require("./audit-logs");
37
40
  const jwt_templates_1 = require("./jwt-templates");
38
41
  const api_keys_1 = require("./api-keys");
39
42
  const app_roles_1 = require("./app-roles");
43
+ const groups_1 = require("./groups");
40
44
  const machines_1 = require("./machines");
41
45
  const oauth_providers_1 = require("./oauth-providers");
42
46
  const sso_onboarding_1 = require("./sso-onboarding");
@@ -44,8 +48,19 @@ const scim_provisioning_1 = require("./scim-provisioning");
44
48
  const fga_1 = require("./fga");
45
49
  const rate_limit_1 = require("./rate-limit");
46
50
  const risk_based_mfa_1 = require("./risk-based-mfa");
51
+ const ssf_1 = require("./ssf");
52
+ const managed_grants_1 = require("./managed-grants");
53
+ const least_privilege_1 = require("./least-privilege");
47
54
  const bot_signals_1 = require("./bot-signals");
48
55
  const network_acls_1 = require("./network-acls");
56
+ const network_zones_1 = require("./network-zones");
57
+ const access_policies_1 = require("./access-policies");
58
+ const abac_1 = require("./abac");
59
+ const authz_decisions_1 = require("./authz-decisions");
60
+ const policy_bundles_1 = require("./policy-bundles");
61
+ const resources_1 = require("./resources");
62
+ const org_role_grants_1 = require("./org-role-grants");
63
+ const devices_1 = require("./devices");
49
64
  const managed_waf_1 = require("./managed-waf");
50
65
  const log_streams_1 = require("./log-streams");
51
66
  const compliance_1 = require("./compliance");
@@ -54,6 +69,8 @@ const email_templates_1 = require("./email-templates");
54
69
  const sms_templates_1 = require("./sms-templates");
55
70
  const localizations_1 = require("./localizations");
56
71
  const actions_1 = require("./actions");
72
+ const workflows_1 = require("./workflows");
73
+ const page_templates_1 = require("./page-templates");
57
74
  const action_gallery_1 = require("./action-gallery");
58
75
  const billing_plans_1 = require("./billing-plans");
59
76
  const messaging_1 = require("./messaging");
@@ -63,6 +80,7 @@ const migrations_1 = require("./migrations");
63
80
  const data_subject_requests_1 = require("./data-subject-requests");
64
81
  const privacy_1 = require("./privacy");
65
82
  const radius_clients_1 = require("./radius-clients");
83
+ const mcp_gateways_1 = require("./mcp-gateways");
66
84
  const lti_platforms_1 = require("./lti-platforms");
67
85
  const instance_1 = require("./instance");
68
86
  const integrations_1 = require("./integrations");
@@ -80,12 +98,23 @@ const organization_settings_schema_1 = require("./organization-settings-schema")
80
98
  const email_addresses_1 = require("./email-addresses");
81
99
  const openfga_1 = require("./openfga");
82
100
  const connectors_1 = require("./connectors");
101
+ const connections_1 = require("./connections");
83
102
  const custom_oauth_providers_1 = require("./custom-oauth-providers");
84
103
  const notifications_1 = require("./notifications");
85
104
  const audit_events_1 = require("./audit-events");
105
+ const vault_1 = require("./vault");
106
+ const service_connectors_1 = require("./service-connectors");
107
+ const desktop_mfa_1 = require("./desktop-mfa");
108
+ const identity_verification_1 = require("./identity-verification");
109
+ const iga_1 = require("./iga");
110
+ const flags_1 = require("./flags");
86
111
  const credentials_1 = require("./credentials");
87
112
  const partner_platforms_1 = require("./partner-platforms");
88
113
  const activity_1 = require("./activity");
114
+ const analytics_reports_1 = require("./analytics-reports");
115
+ const app_catalog_1 = require("./app-catalog");
116
+ const journeys_1 = require("./journeys");
117
+ const marketing_1 = require("./marketing");
89
118
  const logout_notify_endpoints_1 = require("./logout-notify-endpoints");
90
119
  const pca_1 = require("./pca");
91
120
  const mcp_1 = require("./mcp");
@@ -121,6 +150,8 @@ function buildNamespaces(request) {
121
150
  roles: (0, roles_1.rolesResource)(request),
122
151
  permissions: (0, roles_1.permissionsResource)(request),
123
152
  oauthClients: (0, oauth_clients_1.oauthClientsResource)(request),
153
+ passkeyApi: (0, passkey_api_1.passkeyApiResource)(request),
154
+ vc: (0, vc_1.vcResource)(request),
124
155
  resourceServers: (0, resource_servers_1.resourceServersResource)(request),
125
156
  ssoConnections: (0, sso_connections_1.ssoConnectionsResource)(request),
126
157
  scimTokens: (0, scim_tokens_1.scimTokensResource)(request),
@@ -129,6 +160,8 @@ function buildNamespaces(request) {
129
160
  allowlist: (0, restrictions_1.allowlistResource)(request),
130
161
  blocklist: (0, restrictions_1.blocklistResource)(request),
131
162
  attackProtection: (0, attack_protection_1.attackProtectionResource)(request),
163
+ // HOTP, Yubico OTP, Duo, smart card and security-question administration.
164
+ mfaFactors: (0, mfa_factors_1.mfaFactorsResource)(request),
132
165
  actorTokens: (0, actor_tokens_1.actorTokensResource)(request),
133
166
  invitations: (0, invitations_1.invitationsResource)(request),
134
167
  webhooks: (0, webhooks_1.webhooksResource)(request),
@@ -138,6 +171,7 @@ function buildNamespaces(request) {
138
171
  apiKeys: (0, api_keys_1.apiKeysResource)(request),
139
172
  // App-level (instance-wide) user roles and permissions.
140
173
  appRoles: (0, app_roles_1.appRolesResource)(request),
174
+ groups: (0, groups_1.groupsResource)(request),
141
175
  // §9.3 / §P1-7 named machine identities + device registry + enrolment tokens.
142
176
  machines: (0, machines_1.machinesResource)(request),
143
177
  oauthProviders: (0, oauth_providers_1.oauthProvidersResource)(request),
@@ -146,8 +180,20 @@ function buildNamespaces(request) {
146
180
  fga: (0, fga_1.fgaResource)(request),
147
181
  rateLimitPolicy: (0, rate_limit_1.rateLimitPolicyResource)(request),
148
182
  riskBasedMfa: (0, risk_based_mfa_1.riskBasedMfaResource)(request),
183
+ riskEvents: (0, risk_based_mfa_1.riskEventsResource)(request),
184
+ ssf: (0, ssf_1.ssfResource)(request),
185
+ managedGrants: (0, managed_grants_1.managedGrantsResource)(request),
186
+ leastPrivilege: (0, least_privilege_1.leastPrivilegeResource)(request),
149
187
  botSignals: (0, bot_signals_1.botSignalsResource)(request),
150
188
  networkAcls: (0, network_acls_1.networkAclsResource)(request),
189
+ networkZones: (0, network_zones_1.networkZonesResource)(request),
190
+ accessPolicies: (0, access_policies_1.accessPoliciesResource)(request),
191
+ abac: (0, abac_1.abacResource)(request),
192
+ authzDecisions: (0, authz_decisions_1.authzDecisionsResource)(request),
193
+ policyBundles: (0, policy_bundles_1.policyBundlesResource)(request),
194
+ resources: (0, resources_1.resourcesResource)(request),
195
+ orgRoleGrants: (0, org_role_grants_1.orgRoleGrantsResource)(request),
196
+ devices: (0, devices_1.devicesResource)(request),
151
197
  managedWaf: (0, managed_waf_1.managedWafResource)(request),
152
198
  logStreams: (0, log_streams_1.logStreamsResource)(request),
153
199
  // Instance audit export: CloudEvents to a webhook or an S3-compatible bucket.
@@ -162,6 +208,8 @@ function buildNamespaces(request) {
162
208
  smsTemplates: (0, sms_templates_1.smsTemplatesResource)(request),
163
209
  localizations: (0, localizations_1.localizationsResource)(request),
164
210
  actions: (0, actions_1.actionsResource)(request),
211
+ workflows: (0, workflows_1.workflowsResource)(request),
212
+ pageTemplates: (0, page_templates_1.pageTemplatesResource)(request),
165
213
  actionGallery: (0, action_gallery_1.actionGalleryResource)(request),
166
214
  actionTemplates: (0, action_gallery_1.actionTemplatesResource)(request),
167
215
  billing: (0, billing_plans_1.billingResource)(request),
@@ -175,6 +223,8 @@ function buildNamespaces(request) {
175
223
  /** The data-rights executor protocol and the instance's orchestrator. */
176
224
  privacy: (0, privacy_1.privacyResource)(request),
177
225
  radiusClients: (0, radius_clients_1.radiusClientsResource)(request),
226
+ /** MCP tool gateway: per-tool policy in front of an MCP server. */
227
+ mcpGateways: (0, mcp_gateways_1.mcpGatewaysResource)(request),
178
228
  ltiPlatforms: (0, lti_platforms_1.ltiPlatformsResource)(request),
179
229
  instance: (0, instance_1.instanceResource)(request),
180
230
  // Identity integrations, the integration-facing side: verify-error reports, sidebar cards, public metadata.
@@ -203,10 +253,22 @@ function buildNamespaces(request) {
203
253
  // OpenFGA-wire ReBAC stores, models and tuples.
204
254
  openfga: (0, openfga_1.openfgaResource)(request),
205
255
  connectors: (0, connectors_1.connectorsResource)(request),
256
+ // Org- or user-owned provider connections that own their tokens, per-owner OAuth clients, token reads.
257
+ connections: (0, connections_1.connectionsResource)(request),
206
258
  customOAuthProviders: (0, custom_oauth_providers_1.customOAuthProvidersResource)(request),
207
259
  notifications: (0, notifications_1.notificationsResource)(request),
208
260
  // The tenant's own custom audit events (distinct from Atlas's auditLogs).
209
261
  auditEvents: (0, audit_events_1.auditEventsResource)(request),
262
+ auditEventSchemas: (0, audit_events_1.auditEventSchemasResource)(request),
263
+ vault: (0, vault_1.vaultResource)(request),
264
+ // Typed connectors to messaging, CRM, analytics, fraud and identity-verification services.
265
+ serviceConnectors: (0, service_connectors_1.serviceConnectorsResource)(request),
266
+ desktopMfa: (0, desktop_mfa_1.desktopMfaResource)(request),
267
+ // Document and selfie identity checks through your own verification service.
268
+ identityVerification: (0, identity_verification_1.identityVerificationResource)(request),
269
+ // Identity governance: catalog, access requests and approvals, certification campaigns, separation of duties, joiner/mover/leaver.
270
+ iga: (0, iga_1.igaResource)(request),
271
+ flags: (0, flags_1.flagsResource)(request),
210
272
  // The key this client uses, the instance's secret keys, and every credential on it.
211
273
  whoami: (0, credentials_1.whoamiResource)(request),
212
274
  secretKeys: (0, credentials_1.secretKeysResource)(request),
@@ -219,6 +281,10 @@ function buildNamespaces(request) {
219
281
  atlasIdGrants: (0, credentials_1.atlasIdGrantsResource)(request),
220
282
  events: (0, activity_1.eventsResource)(request),
221
283
  usage: (0, activity_1.usageResource)(request),
284
+ analytics: (0, analytics_reports_1.analyticsResource)(request),
285
+ appCatalog: (0, app_catalog_1.appCatalogResource)(request),
286
+ journeys: (0, journeys_1.journeysResource)(request),
287
+ marketing: (0, marketing_1.marketingResource)(request),
222
288
  configChangelog: (0, activity_1.configChangelogResource)(request),
223
289
  pca: (0, pca_1.pcaResource)(request),
224
290
  mcp: (0, mcp_1.mcpResource)(request),
@@ -253,11 +319,18 @@ Object.defineProperty(exports, "collect", { enumerable: true, get: function () {
253
319
  // Resource types — exported so callers can annotate their own code.
254
320
  __exportStar(require("./types"), exports);
255
321
  __exportStar(require("./compliance"), exports);
322
+ __exportStar(require("./vault"), exports);
323
+ __exportStar(require("./service-connectors"), exports);
324
+ __exportStar(require("./desktop-mfa"), exports);
325
+ __exportStar(require("./identity-verification"), exports);
326
+ __exportStar(require("./iga"), exports);
327
+ __exportStar(require("./flags"), exports);
256
328
  __exportStar(require("./users"), exports);
257
329
  __exportStar(require("./sessions"), exports);
258
330
  __exportStar(require("./organizations"), exports);
259
331
  __exportStar(require("./roles"), exports);
260
332
  __exportStar(require("./app-roles"), exports);
333
+ __exportStar(require("./groups"), exports);
261
334
  __exportStar(require("./oauth-clients"), exports);
262
335
  __exportStar(require("./resource-servers"), exports);
263
336
  __exportStar(require("./sso-connections"), exports);
@@ -266,6 +339,7 @@ __exportStar(require("./domains"), exports);
266
339
  __exportStar(require("./waitlist"), exports);
267
340
  __exportStar(require("./restrictions"), exports);
268
341
  __exportStar(require("./attack-protection"), exports);
342
+ __exportStar(require("./mfa-factors"), exports);
269
343
  __exportStar(require("./actor-tokens"), exports);
270
344
  __exportStar(require("./invitations"), exports);
271
345
  __exportStar(require("./webhooks"), exports);
@@ -280,8 +354,19 @@ __exportStar(require("./scim-provisioning"), exports);
280
354
  __exportStar(require("./fga"), exports);
281
355
  __exportStar(require("./rate-limit"), exports);
282
356
  __exportStar(require("./risk-based-mfa"), exports);
357
+ __exportStar(require("./ssf"), exports);
358
+ __exportStar(require("./managed-grants"), exports);
359
+ __exportStar(require("./least-privilege"), exports);
283
360
  __exportStar(require("./bot-signals"), exports);
284
361
  __exportStar(require("./network-acls"), exports);
362
+ __exportStar(require("./network-zones"), exports);
363
+ __exportStar(require("./access-policies"), exports);
364
+ __exportStar(require("./abac"), exports);
365
+ __exportStar(require("./authz-decisions"), exports);
366
+ __exportStar(require("./policy-bundles"), exports);
367
+ __exportStar(require("./resources"), exports);
368
+ __exportStar(require("./org-role-grants"), exports);
369
+ __exportStar(require("./devices"), exports);
285
370
  __exportStar(require("./managed-waf"), exports);
286
371
  __exportStar(require("./log-streams"), exports);
287
372
  __exportStar(require("./branding"), exports);
@@ -289,6 +374,8 @@ __exportStar(require("./email-templates"), exports);
289
374
  __exportStar(require("./sms-templates"), exports);
290
375
  __exportStar(require("./localizations"), exports);
291
376
  __exportStar(require("./actions"), exports);
377
+ __exportStar(require("./page-templates"), exports);
378
+ __exportStar(require("./workflows"), exports);
292
379
  __exportStar(require("./action-gallery"), exports);
293
380
  __exportStar(require("./billing-plans"), exports);
294
381
  __exportStar(require("./messaging"), exports);
@@ -298,6 +385,7 @@ __exportStar(require("./migrations"), exports);
298
385
  __exportStar(require("./data-subject-requests"), exports);
299
386
  __exportStar(require("./privacy"), exports);
300
387
  __exportStar(require("./radius-clients"), exports);
388
+ __exportStar(require("./mcp-gateways"), exports);
301
389
  __exportStar(require("./lti-platforms"), exports);
302
390
  __exportStar(require("./instance"), exports);
303
391
  __exportStar(require("./integrations"), exports);
@@ -315,10 +403,18 @@ __exportStar(require("./organization-settings-schema"), exports);
315
403
  __exportStar(require("./email-addresses"), exports);
316
404
  __exportStar(require("./openfga"), exports);
317
405
  __exportStar(require("./connectors"), exports);
406
+ __exportStar(require("./connections"), exports);
407
+ __exportStar(require("./passkey-api"), exports);
408
+ __exportStar(require("./delegated-ui-proxy"), exports);
409
+ __exportStar(require("./vc"), exports);
318
410
  __exportStar(require("./custom-oauth-providers"), exports);
319
411
  __exportStar(require("./notifications"), exports);
320
412
  __exportStar(require("./audit-events"), exports);
321
413
  __exportStar(require("./activity"), exports);
414
+ __exportStar(require("./analytics-reports"), exports);
415
+ __exportStar(require("./app-catalog"), exports);
416
+ __exportStar(require("./journeys"), exports);
417
+ __exportStar(require("./marketing"), exports);
322
418
  __exportStar(require("./pca"), exports);
323
419
  __exportStar(require("./mcp"), exports);
324
420
  __exportStar(require("./legacy-auth"), exports);
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAgGA,8CAQC;AAxGD,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAAwD;AACxD,+CAAmD;AACnD,iDAAqD;AACrD,+CAAmD;AACnD,+CAAmD;AACnD,6CAAwH;AACxH,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,6CAAkD;AAClD,mEAAsE;AACtE,uCAA4C;AAC5C,qDAAyD;AACzD,mDAAuD;AACvD,yCAA8C;AAC9C,iDAAsD;AACtD,2DAA+D;AAC/D,2CAAgD;AAChD,yCAAoE;AACpE,qCAA0C;AAC1C,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAA6F;AAC7F,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAqD;AACrD,+CAMuB;AACvB,2DAA+D;AAC/D,yCAAoF;AACpF,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,8EAA8E;QAC9E,YAAY,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QAC3C,wEAAwE;QACxE,OAAO,EAAE,IAAA,4BAAe,EAAC,OAAO,CAAC;QACjC,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,OAAO,CAAC;QACvD,8DAA8D;QAC9D,aAAa,EAAE,IAAA,kCAAqB,EAAC,OAAO,CAAC;QAC7C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,wGAAwG;QACxG,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,yEAAyE;QACzE,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,4GAA4G;QAC5G,YAAY,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,gGAAgG;QAChG,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,+BAAoB,EAAC,OAAO,CAAC;QAC3C,sGAAsG;QACtG,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,4CAAoB,EAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,oFAAoF;QACpF,MAAM,EAAE,IAAA,4BAAc,EAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,IAAI,EAAE,IAAA,0BAAY,EAAC,OAAO,CAAC;QAC3B,2FAA2F;QAC3F,YAAY,EAAE,IAAA,kCAAoB,EAAC,OAAO,CAAC;QAC3C,yFAAyF;QACzF,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,aAAa,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAsBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,6BAAyG;AAAhG,yGAAA,kBAAkB,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,yGAAA,kBAAkB,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACzF,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,+CAA6B;AAC7B,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,4CAA0B;AAC1B,mDAAiC;AACjC,kDAAgC;AAChC,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,8CAA4B;AAC5B,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B;AAC3B,gDAA8B;AAC9B,sDAAoC;AACpC,6CAA2B"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA6HA,8CAQC;AArID,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,+CAAmD;AACnD,6BAAkC;AAClC,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,+CAAmD;AACnD,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,qCAA0C;AAC1C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAA4E;AAC5E,+BAAoC;AACpC,qDAAyD;AACzD,uDAA2D;AAC3D,+CAAmD;AACnD,iDAAqD;AACrD,mDAAuD;AACvD,uDAA2D;AAC3D,iCAAsC;AACtC,uDAA2D;AAC3D,qDAAyD;AACzD,2CAAgD;AAChD,uDAA0D;AAC1D,uCAA4C;AAC5C,+CAAmD;AACnD,+CAAmD;AACnD,6CAAwH;AACxH,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,2CAAgD;AAChD,qDAAyD;AACzD,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,6CAAkD;AAClD,mEAAsE;AACtE,uCAA4C;AAC5C,qDAAyD;AACzD,iDAAqD;AACrD,mDAAuD;AACvD,yCAA8C;AAC9C,iDAAsD;AACtD,2DAA+D;AAC/D,2CAAgD;AAChD,yCAAoE;AACpE,qCAA0C;AAC1C,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAA6F;AAC7F,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,+CAAoD;AACpD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAgF;AAChF,mCAAwC;AACxC,6DAAiE;AACjE,+CAAmD;AACnD,mEAAuE;AACvE,+BAAoC;AACpC,mCAAwC;AACxC,+CAMuB;AACvB,2DAA+D;AAC/D,yCAAoF;AACpF,2DAAwD;AACxD,+CAAmD;AACnD,yCAA8C;AAC9C,2CAAgD;AAChD,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,EAAE,EAAE,IAAA,eAAU,EAAC,OAAO,CAAC;QACvB,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,mCAAkB,EAAC,OAAO,CAAC;QACvC,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,IAAI,EAAE,IAAA,mBAAY,EAAC,OAAO,CAAC;QAC3B,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,uCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,8EAA8E;QAC9E,YAAY,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QAC3C,wEAAwE;QACxE,OAAO,EAAE,IAAA,4BAAe,EAAC,OAAO,CAAC;QACjC,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,OAAO,CAAC;QACvD,8DAA8D;QAC9D,aAAa,EAAE,IAAA,kCAAqB,EAAC,OAAO,CAAC;QAC7C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,wGAAwG;QACxG,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,yEAAyE;QACzE,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,mEAAmE;QACnE,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,4GAA4G;QAC5G,YAAY,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,gGAAgG;QAChG,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,+BAAoB,EAAC,OAAO,CAAC;QAC3C,sGAAsG;QACtG,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,4CAAoB,EAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,uGAAuG;QACvG,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;QACrD,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,2FAA2F;QAC3F,iBAAiB,EAAE,IAAA,8CAAyB,EAAC,OAAO,CAAC;QACrD,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,6EAA6E;QAC7E,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,mIAAmI;QACnI,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,oFAAoF;QACpF,MAAM,EAAE,IAAA,4BAAc,EAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,IAAI,EAAE,IAAA,0BAAY,EAAC,OAAO,CAAC;QAC3B,2FAA2F;QAC3F,YAAY,EAAE,IAAA,kCAAoB,EAAC,OAAO,CAAC;QAC3C,yFAAyF;QACzF,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,aAAa,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAA,qCAAiB,EAAC,OAAO,CAAC;QACrC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAsBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,6BAAyG;AAAhG,yGAAA,kBAAkB,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,yGAAA,kBAAkB,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACzF,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,+CAA6B;AAC7B,0CAAwB;AACxB,uDAAqC;AACrC,gDAA8B;AAC9B,0DAAwC;AACxC,wCAAsB;AACtB,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,2CAAyB;AACzB,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,wCAAsB;AACtB,mDAAiC;AACjC,oDAAkC;AAClC,gDAA8B;AAC9B,iDAA+B;AAC/B,kDAAgC;AAChC,oDAAkC;AAClC,yCAAuB;AACvB,oDAAkC;AAClC,mDAAiC;AACjC,8CAA4B;AAC5B,oDAAkC;AAClC,4CAA0B;AAC1B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,8CAA4B;AAC5B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,4CAA0B;AAC1B,mDAAiC;AACjC,iDAA+B;AAC/B,kDAAgC;AAChC,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,8CAA4B;AAC5B,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,gDAA8B;AAC9B,gDAA8B;AAC9B,uDAAqC;AACrC,uCAAqB;AACrB,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,sDAAoC;AACpC,gDAA8B;AAC9B,6CAA2B;AAC3B,8CAA4B;AAC5B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B;AAC3B,gDAA8B;AAC9B,sDAAoC;AACpC,6CAA2B"}
@@ -0,0 +1,108 @@
1
+ import { type RequestFn } from './request';
2
+ export type JourneyStepType = 'require_method' | 'require_mfa' | 'required_action' | 'profile_prompt' | 'policy_acceptance' | 'action' | 'set_claim' | 'redirect' | 'deny' | 'form' | 'subflow';
3
+ /** A field of a form step; its value is saved to the user's public metadata under `key`. */
4
+ export interface JourneyFormField {
5
+ key: string;
6
+ label: string;
7
+ type: 'text' | 'email' | 'number' | 'date' | 'select' | 'checkbox' | 'textarea';
8
+ required?: boolean;
9
+ placeholder?: string;
10
+ options?: string[];
11
+ }
12
+ export interface JourneyStep {
13
+ id: string;
14
+ type: JourneyStepType;
15
+ /** Access-policy conditions: applications, userIds, groups, orgs, roles, networkZones, countries, riskLevels, deviceTrust, authMethods, timeWindow. */
16
+ when?: Record<string, unknown>;
17
+ methods?: string[];
18
+ action?: 'update_password' | 'verify_email' | 'configure_mfa' | 'update_profile' | 'accept_policy' | 'identity_verification' | 'custom';
19
+ url?: string;
20
+ action_id?: string;
21
+ claim?: string;
22
+ value?: unknown;
23
+ message?: string;
24
+ /** form */
25
+ title?: string;
26
+ intro?: string;
27
+ fields?: JourneyFormField[];
28
+ once?: boolean;
29
+ /** subflow: the journey to run here. */
30
+ flow_id?: string;
31
+ }
32
+ export interface JourneyDefinition {
33
+ steps: JourneyStep[];
34
+ }
35
+ export interface SignInJourney {
36
+ object: 'sign_in_journey';
37
+ id: string;
38
+ name: string;
39
+ description: string | null;
40
+ is_default: boolean;
41
+ applications: string[];
42
+ enabled: boolean;
43
+ active_version: number | null;
44
+ latest_version: number;
45
+ definition?: JourneyDefinition | null;
46
+ created_at: number;
47
+ updated_at: number;
48
+ }
49
+ export interface JourneyBody {
50
+ name?: string;
51
+ description?: string | null;
52
+ is_default?: boolean;
53
+ applications?: string[];
54
+ enabled?: boolean;
55
+ definition?: JourneyDefinition;
56
+ activate?: boolean;
57
+ }
58
+ export interface JourneySimulation {
59
+ object: 'sign_in_journey_simulation';
60
+ journey_id: string;
61
+ version: number;
62
+ outcome: 'allowed' | 'held' | 'refused';
63
+ effects: Array<Record<string, unknown>>;
64
+ trace: Array<{
65
+ step: string;
66
+ type: JourneyStepType;
67
+ matched: boolean;
68
+ outcome: 'skipped' | 'passed' | 'effect' | 'stopped';
69
+ }>;
70
+ }
71
+ /** Sign-in journeys (`/v1/flows`): versioned steps run before a session is issued. */
72
+ export declare function journeysResource(request: RequestFn): {
73
+ list(): Promise<{
74
+ object: "list";
75
+ data: SignInJourney[];
76
+ has_more: boolean;
77
+ }>;
78
+ get(id: string): Promise<SignInJourney>;
79
+ create(body: JourneyBody & {
80
+ name: string;
81
+ definition: JourneyDefinition;
82
+ }, idempotencyKey?: string): Promise<SignInJourney>;
83
+ /** A `definition` becomes the next version (active unless `activate: false`). */
84
+ update(id: string, body: JourneyBody, idempotencyKey?: string): Promise<SignInJourney>;
85
+ delete(id: string): Promise<{
86
+ object: "sign_in_journey";
87
+ id: string;
88
+ deleted: true;
89
+ }>;
90
+ versions(id: string): Promise<{
91
+ object: "list";
92
+ data: Array<{
93
+ version: number;
94
+ definition: JourneyDefinition;
95
+ created_by: string | null;
96
+ created_at: number;
97
+ }>;
98
+ }>;
99
+ activate(id: string, version: number): Promise<SignInJourney>;
100
+ simulate(id: string, body: {
101
+ user_id: string;
102
+ method?: string;
103
+ mfa_verified?: boolean;
104
+ ip?: string;
105
+ application_id?: string;
106
+ version?: number;
107
+ }): Promise<JourneySimulation>;
108
+ };
@@ -0,0 +1,35 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.journeysResource = journeysResource;
4
+ const request_1 = require("./request");
5
+ /** Sign-in journeys (`/v1/flows`): versioned steps run before a session is issued. */
6
+ function journeysResource(request) {
7
+ return {
8
+ list() {
9
+ return request({ method: 'GET', path: '/v1/flows' });
10
+ },
11
+ get(id) {
12
+ return request({ method: 'GET', path: `/v1/flows/${(0, request_1.enc)(id)}` });
13
+ },
14
+ create(body, idempotencyKey) {
15
+ return request({ method: 'POST', path: '/v1/flows', body, idempotencyKey });
16
+ },
17
+ /** A `definition` becomes the next version (active unless `activate: false`). */
18
+ update(id, body, idempotencyKey) {
19
+ return request({ method: 'PATCH', path: `/v1/flows/${(0, request_1.enc)(id)}`, body, idempotencyKey });
20
+ },
21
+ delete(id) {
22
+ return request({ method: 'DELETE', path: `/v1/flows/${(0, request_1.enc)(id)}` });
23
+ },
24
+ versions(id) {
25
+ return request({ method: 'GET', path: `/v1/flows/${(0, request_1.enc)(id)}/versions` });
26
+ },
27
+ activate(id, version) {
28
+ return request({ method: 'POST', path: `/v1/flows/${(0, request_1.enc)(id)}/activate`, body: { version } });
29
+ },
30
+ simulate(id, body) {
31
+ return request({ method: 'POST', path: `/v1/flows/${(0, request_1.enc)(id)}/simulate`, body });
32
+ },
33
+ };
34
+ }
35
+ //# sourceMappingURL=journeys.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"journeys.js","sourceRoot":"","sources":["../../src/client/journeys.ts"],"names":[],"mappings":";;AA0EA,4CA4BC;AAtGD,uCAAgD;AAyEhD,sFAAsF;AACtF,SAAgB,gBAAgB,CAAC,OAAkB;IACjD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,IAAmE,EAAE,cAAuB;YACjG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,iFAAiF;QACjF,MAAM,CAAC,EAAU,EAAE,IAAiB,EAAE,cAAuB;YAC3D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,EAAU;YACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,QAAQ,CAAC,EAAU,EAAE,OAAe;YAClC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,QAAQ,CAAC,EAAU,EAAE,IAA0H;YAC7I,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,95 @@
1
+ import { type RequestFn } from './request';
2
+ export type LeastPrivilegeSubjectType = 'api_key' | 'oauth_client' | 'mcp_gateway' | 'agent';
3
+ export interface LeastPrivilegePermission {
4
+ /** A scope, `tool:<name>`, `<kind>:<resource>` for an agent grant, or `default_policy:allow`. */
5
+ permission: string;
6
+ kind: 'scope' | 'tool' | 'grant' | 'default_policy' | 'wildcard';
7
+ detail?: string;
8
+ }
9
+ export interface LeastPrivilegeChange {
10
+ field: string;
11
+ before: unknown;
12
+ after: unknown;
13
+ }
14
+ export interface LeastPrivilegeSubject {
15
+ object: 'least_privilege_subject';
16
+ subject_type: LeastPrivilegeSubjectType;
17
+ subject_id: string;
18
+ name: string | null;
19
+ window_days: number;
20
+ /** How many of the window's days the usage data covers. */
21
+ observed_days: number;
22
+ /** `low` when the data covers less than the window. */
23
+ confidence: 'high' | 'low';
24
+ granted: LeastPrivilegePermission[];
25
+ used: Array<{
26
+ permission: string;
27
+ uses: number;
28
+ last_used_at: number;
29
+ }>;
30
+ unused: Array<LeastPrivilegePermission & {
31
+ last_used_at: null;
32
+ }>;
33
+ /** The narrower grant. It only ever removes permissions. */
34
+ suggestion: {
35
+ summary: string;
36
+ changes: LeastPrivilegeChange[];
37
+ digest: string;
38
+ } | null;
39
+ /** The suggestion can be applied with one call. */
40
+ applicable: boolean;
41
+ note?: string;
42
+ }
43
+ export interface LeastPrivilegeReport {
44
+ object: 'least_privilege_report';
45
+ generated_at: number;
46
+ window_days: number;
47
+ summary: {
48
+ subjects: number;
49
+ with_unused: number;
50
+ unused_permissions: number;
51
+ applicable_suggestions: number;
52
+ };
53
+ data: LeastPrivilegeSubject[];
54
+ }
55
+ export interface LeastPrivilegeReportQuery {
56
+ days?: number;
57
+ subject_type?: LeastPrivilegeSubjectType;
58
+ subject_id?: string;
59
+ only_unused?: boolean;
60
+ limit?: number;
61
+ }
62
+ export interface ApplyLeastPrivilegeBody {
63
+ subject_type: LeastPrivilegeSubjectType;
64
+ subject_id: string;
65
+ /** `suggestion.digest` from the report: what you previewed is what is applied. */
66
+ digest: string;
67
+ days?: number;
68
+ /** Required when the report's `confidence` is `low`. */
69
+ acknowledge_short_window?: boolean;
70
+ }
71
+ /**
72
+ * The least-privilege report: what each secret key, OAuth client, MCP gateway and
73
+ * agent holds against what it used, and the narrower grant that would cover it.
74
+ * Preview an `apply` with `dryRun` first.
75
+ */
76
+ export declare function leastPrivilegeResource(request: RequestFn): {
77
+ report(query?: LeastPrivilegeReportQuery): Promise<LeastPrivilegeReport>;
78
+ /** One credential's report. */
79
+ get(type: LeastPrivilegeSubjectType, id: string, query?: {
80
+ days?: number;
81
+ }): Promise<LeastPrivilegeSubject>;
82
+ /** The report as CSV, one row per used or unused permission. */
83
+ exportCsv(query?: LeastPrivilegeReportQuery): Promise<string>;
84
+ /** Apply a suggestion. `dryRun: true` previews it without changing anything. */
85
+ apply(body: ApplyLeastPrivilegeBody, options?: {
86
+ dryRun?: boolean;
87
+ }): Promise<{
88
+ object: "least_privilege_change";
89
+ subject_type: LeastPrivilegeSubjectType;
90
+ subject_id: string;
91
+ applied: true;
92
+ summary: string;
93
+ changes: LeastPrivilegeChange[];
94
+ }>;
95
+ };
@@ -0,0 +1,28 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.leastPrivilegeResource = leastPrivilegeResource;
4
+ /**
5
+ * The least-privilege report: what each secret key, OAuth client, MCP gateway and
6
+ * agent holds against what it used, and the narrower grant that would cover it.
7
+ * Preview an `apply` with `dryRun` first.
8
+ */
9
+ function leastPrivilegeResource(request) {
10
+ return {
11
+ report(query = {}) {
12
+ return request({ method: 'GET', path: '/v1/least_privilege/report', query: { ...query } });
13
+ },
14
+ /** One credential's report. */
15
+ get(type, id, query = {}) {
16
+ return request({ method: 'GET', path: `/v1/least_privilege/report/${type}/${encodeURIComponent(id)}`, query: { ...query } });
17
+ },
18
+ /** The report as CSV, one row per used or unused permission. */
19
+ exportCsv(query = {}) {
20
+ return request({ method: 'GET', path: '/v1/least_privilege/report', query: { ...query, format: 'csv' }, raw: true });
21
+ },
22
+ /** Apply a suggestion. `dryRun: true` previews it without changing anything. */
23
+ apply(body, options = {}) {
24
+ return request({ method: 'POST', path: '/v1/least_privilege/apply', body, ...(options.dryRun ? { query: { dry_run: true } } : {}) });
25
+ },
26
+ };
27
+ }
28
+ //# sourceMappingURL=least-privilege.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"least-privilege.js","sourceRoot":"","sources":["../../src/client/least-privilege.ts"],"names":[],"mappings":";;AAoEA,wDAyBC;AA9BD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,OAAO;QACL,MAAM,CAAC,QAAmC,EAAE;YAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,+BAA+B;QAC/B,GAAG,CAAC,IAA+B,EAAE,EAAU,EAAE,QAA2B,EAAE;YAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,gEAAgE;QAChE,SAAS,CAAC,QAAmC,EAAE;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,gFAAgF;QAChF,KAAK,CAAC,IAA6B,EAAE,UAAgC,EAAE;YAQrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -1,6 +1,6 @@
1
1
  import { type RequestFn } from './request';
2
2
  import type { ListPage } from './types';
3
- export type LogStreamType = 'http' | 'datadog' | 'splunk';
3
+ export type LogStreamType = 'http' | 'datadog' | 'splunk' | 's3' | 'gcs' | 'azure_blob' | 'aws_eventbridge' | 'kinesis_firehose' | 'cloudwatch_logs' | 'elastic' | 'sumo_logic' | 'new_relic' | 'azure_event_hubs' | 'sentinel' | 'gcp_pubsub' | 'bigquery' | 'loki' | 'otlp' | 'kafka';
4
4
  /**
5
5
  * A log stream — the instance event feed forwarded to an external sink (generic
6
6
  * HTTP, Datadog, Splunk HEC), Auth0-style. Destination SECRETS (datadog api_key,
@@ -0,0 +1,52 @@
1
+ import { type RequestFn } from './request';
2
+ /** A grant an OAuth client holds for a user (OpenID Grant Management): the `grant_id` token responses carry. */
3
+ export interface ManagedGrant {
4
+ object: 'managed_grant';
5
+ id: string;
6
+ /** The OAuth client's public `client_id`. */
7
+ client_id: string | null;
8
+ user_id: string;
9
+ organization_id: string | null;
10
+ status: 'active' | 'revoked';
11
+ scopes: string[];
12
+ /** The API (resource server identifier) the grant covers. */
13
+ resource: string | null;
14
+ authorization_details: Record<string, unknown>[] | null;
15
+ /** Bumped by every merge, replace and narrowing. */
16
+ revision: number;
17
+ created_at: number;
18
+ updated_at: number;
19
+ revoked_at: number | null;
20
+ revoked_by: 'client' | 'user' | 'admin' | 'system' | null;
21
+ }
22
+ export interface ListManagedGrantsQuery {
23
+ user_id?: string;
24
+ /** The OAuth client's public client id. */
25
+ client_id?: string;
26
+ status?: 'active' | 'revoked';
27
+ limit?: number;
28
+ }
29
+ /**
30
+ * OpenID Grant Management grants. Backends can read, narrow and revoke what each
31
+ * OAuth client holds for each user. Widening is the user's alone: they authorize
32
+ * again with `grant_management_action=merge`.
33
+ */
34
+ export declare function managedGrantsResource(request: RequestFn): {
35
+ list(query?: ListManagedGrantsQuery): Promise<{
36
+ object: "list";
37
+ data: ManagedGrant[];
38
+ }>;
39
+ get(id: string): Promise<ManagedGrant>;
40
+ /** Keep a subset of what the grant holds. A scope or authorization_details entry it does not hold is refused. */
41
+ narrow(id: string, body: {
42
+ scopes?: string[];
43
+ authorization_details?: Record<string, unknown>[];
44
+ }): Promise<ManagedGrant>;
45
+ /** Revoke the grant and end every token issued under it. */
46
+ revoke(id: string): Promise<{
47
+ object: "managed_grant";
48
+ id: string;
49
+ deleted: true;
50
+ tokens_ended: number;
51
+ }>;
52
+ };