@atlasauth/backend 0.24.0 → 0.26.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +39 -1
- package/dist/client/abac.d.ts +521 -0
- package/dist/client/abac.js +146 -0
- package/dist/client/abac.js.map +1 -0
- package/dist/client/access-policies.d.ts +100 -0
- package/dist/client/access-policies.js +29 -0
- package/dist/client/access-policies.js.map +1 -0
- package/dist/client/action-gallery.d.ts +1 -1
- package/dist/client/action-gallery.js.map +1 -1
- package/dist/client/actions.d.ts +129 -6
- package/dist/client/actions.js +4 -0
- package/dist/client/actions.js.map +1 -1
- package/dist/client/analytics-reports.d.ts +215 -0
- package/dist/client/analytics-reports.js +56 -0
- package/dist/client/analytics-reports.js.map +1 -0
- package/dist/client/app-catalog.d.ts +74 -0
- package/dist/client/app-catalog.js +30 -0
- package/dist/client/app-catalog.js.map +1 -0
- package/dist/client/attack-protection.d.ts +10 -0
- package/dist/client/attack-protection.js +8 -0
- package/dist/client/attack-protection.js.map +1 -1
- package/dist/client/audit-events.d.ts +71 -0
- package/dist/client/audit-events.js +28 -0
- package/dist/client/audit-events.js.map +1 -1
- package/dist/client/authz-decisions.d.ts +108 -0
- package/dist/client/authz-decisions.js +40 -0
- package/dist/client/authz-decisions.js.map +1 -0
- package/dist/client/connections.d.ts +507 -0
- package/dist/client/connections.js +164 -0
- package/dist/client/connections.js.map +1 -0
- package/dist/client/credentials.d.ts +8 -0
- package/dist/client/credentials.js.map +1 -1
- package/dist/client/custom-oauth-providers.d.ts +15 -0
- package/dist/client/custom-oauth-providers.js.map +1 -1
- package/dist/client/delegated-ui-proxy.d.ts +25 -0
- package/dist/client/delegated-ui-proxy.js +46 -0
- package/dist/client/delegated-ui-proxy.js.map +1 -0
- package/dist/client/desktop-mfa.d.ts +104 -0
- package/dist/client/desktop-mfa.js +44 -0
- package/dist/client/desktop-mfa.js.map +1 -0
- package/dist/client/devices.d.ts +44 -0
- package/dist/client/devices.js +26 -0
- package/dist/client/devices.js.map +1 -0
- package/dist/client/email-templates.d.ts +1 -1
- package/dist/client/email-templates.js.map +1 -1
- package/dist/client/fga.d.ts +125 -4
- package/dist/client/fga.js +40 -0
- package/dist/client/fga.js.map +1 -1
- package/dist/client/flags.d.ts +101 -0
- package/dist/client/flags.js +104 -0
- package/dist/client/flags.js.map +1 -0
- package/dist/client/groups.d.ts +146 -0
- package/dist/client/groups.js +67 -0
- package/dist/client/groups.js.map +1 -0
- package/dist/client/identity-verification.d.ts +62 -0
- package/dist/client/identity-verification.js +39 -0
- package/dist/client/identity-verification.js.map +1 -0
- package/dist/client/iga.d.ts +436 -0
- package/dist/client/iga.js +82 -0
- package/dist/client/iga.js.map +1 -0
- package/dist/client/index.d.ts +1433 -4
- package/dist/client/index.js +96 -0
- package/dist/client/index.js.map +1 -1
- package/dist/client/journeys.d.ts +108 -0
- package/dist/client/journeys.js +35 -0
- package/dist/client/journeys.js.map +1 -0
- package/dist/client/least-privilege.d.ts +95 -0
- package/dist/client/least-privilege.js +28 -0
- package/dist/client/least-privilege.js.map +1 -0
- package/dist/client/log-streams.d.ts +1 -1
- package/dist/client/managed-grants.d.ts +52 -0
- package/dist/client/managed-grants.js +28 -0
- package/dist/client/managed-grants.js.map +1 -0
- package/dist/client/marketing.d.ts +67 -0
- package/dist/client/marketing.js +26 -0
- package/dist/client/marketing.js.map +1 -0
- package/dist/client/mcp-gateways.d.ts +126 -0
- package/dist/client/mcp-gateways.js +47 -0
- package/dist/client/mcp-gateways.js.map +1 -0
- package/dist/client/messaging.d.ts +14 -3
- package/dist/client/messaging.js.map +1 -1
- package/dist/client/mfa-factors.d.ts +120 -0
- package/dist/client/mfa-factors.js +73 -0
- package/dist/client/mfa-factors.js.map +1 -0
- package/dist/client/migrations.d.ts +1 -1
- package/dist/client/migrations.js.map +1 -1
- package/dist/client/network-acls.d.ts +6 -1
- package/dist/client/network-acls.js.map +1 -1
- package/dist/client/network-zones.d.ts +56 -0
- package/dist/client/network-zones.js +29 -0
- package/dist/client/network-zones.js.map +1 -0
- package/dist/client/notifications.d.ts +1 -1
- package/dist/client/notifications.js.map +1 -1
- package/dist/client/oauth-clients.d.ts +187 -3
- package/dist/client/oauth-clients.js +64 -0
- package/dist/client/oauth-clients.js.map +1 -1
- package/dist/client/openfga.d.ts +90 -3
- package/dist/client/openfga.js +27 -1
- package/dist/client/openfga.js.map +1 -1
- package/dist/client/org-role-grants.d.ts +57 -0
- package/dist/client/org-role-grants.js +40 -0
- package/dist/client/org-role-grants.js.map +1 -0
- package/dist/client/organizations.d.ts +52 -0
- package/dist/client/organizations.js +44 -0
- package/dist/client/organizations.js.map +1 -1
- package/dist/client/page-templates.d.ts +78 -0
- package/dist/client/page-templates.js +31 -0
- package/dist/client/page-templates.js.map +1 -0
- package/dist/client/passkey-api.d.ts +73 -0
- package/dist/client/passkey-api.js +34 -0
- package/dist/client/passkey-api.js.map +1 -0
- package/dist/client/policy-bundles.d.ts +105 -0
- package/dist/client/policy-bundles.js +38 -0
- package/dist/client/policy-bundles.js.map +1 -0
- package/dist/client/resources.d.ts +150 -0
- package/dist/client/resources.js +73 -0
- package/dist/client/resources.js.map +1 -0
- package/dist/client/risk-based-mfa.d.ts +147 -0
- package/dist/client/risk-based-mfa.js +30 -0
- package/dist/client/risk-based-mfa.js.map +1 -1
- package/dist/client/roles.d.ts +4 -0
- package/dist/client/roles.js.map +1 -1
- package/dist/client/service-connectors.d.ts +83 -0
- package/dist/client/service-connectors.js +33 -0
- package/dist/client/service-connectors.js.map +1 -0
- package/dist/client/ssf.d.ts +112 -0
- package/dist/client/ssf.js +49 -0
- package/dist/client/ssf.js.map +1 -0
- package/dist/client/sso-onboarding.d.ts +6 -0
- package/dist/client/sso-onboarding.js.map +1 -1
- package/dist/client/users.d.ts +302 -0
- package/dist/client/users.js +125 -0
- package/dist/client/users.js.map +1 -1
- package/dist/client/vault.d.ts +85 -0
- package/dist/client/vault.js +50 -0
- package/dist/client/vault.js.map +1 -0
- package/dist/client/vc.d.ts +136 -0
- package/dist/client/vc.js +43 -0
- package/dist/client/vc.js.map +1 -0
- package/dist/client/webhooks.d.ts +31 -2
- package/dist/client/webhooks.js.map +1 -1
- package/dist/client/workflows.d.ts +131 -0
- package/dist/client/workflows.js +36 -0
- package/dist/client/workflows.js.map +1 -0
- package/dist/index.d.ts +5 -0
- package/dist/index.js +11 -2
- package/dist/index.js.map +1 -1
- package/dist/magic-did.d.ts +5 -0
- package/dist/magic-did.js +49 -0
- package/dist/magic-did.js.map +1 -0
- package/dist/migration-bridge.d.ts +9 -0
- package/dist/migration-bridge.js +28 -2
- package/dist/migration-bridge.js.map +1 -1
- package/dist/migration-presets-g3.d.ts +2 -0
- package/dist/migration-presets-g3.js +254 -0
- package/dist/migration-presets-g3.js.map +1 -0
- package/dist/migration-presets-g4/authentik.d.ts +14 -0
- package/dist/migration-presets-g4/authentik.js +37 -0
- package/dist/migration-presets-g4/authentik.js.map +1 -0
- package/dist/migration-presets-g4/fusionauth.d.ts +2 -0
- package/dist/migration-presets-g4/fusionauth.js +52 -0
- package/dist/migration-presets-g4/fusionauth.js.map +1 -0
- package/dist/migration-presets-g4/hanko.d.ts +12 -0
- package/dist/migration-presets-g4/hanko.js +46 -0
- package/dist/migration-presets-g4/hanko.js.map +1 -0
- package/dist/migration-presets-g4/keycloak.d.ts +16 -0
- package/dist/migration-presets-g4/keycloak.js +37 -0
- package/dist/migration-presets-g4/keycloak.js.map +1 -0
- package/dist/migration-presets-g4/logto.d.ts +12 -0
- package/dist/migration-presets-g4/logto.js +35 -0
- package/dist/migration-presets-g4/logto.js.map +1 -0
- package/dist/migration-presets-g4/ory.d.ts +2 -0
- package/dist/migration-presets-g4/ory.js +67 -0
- package/dist/migration-presets-g4/ory.js.map +1 -0
- package/dist/migration-presets-g4/supertokens.d.ts +13 -0
- package/dist/migration-presets-g4/supertokens.js +35 -0
- package/dist/migration-presets-g4/supertokens.js.map +1 -0
- package/dist/migration-presets-g4/zitadel.d.ts +2 -0
- package/dist/migration-presets-g4/zitadel.js +36 -0
- package/dist/migration-presets-g4/zitadel.js.map +1 -0
- package/dist/migration-presets-g4.d.ts +10 -0
- package/dist/migration-presets-g4.js +30 -0
- package/dist/migration-presets-g4.js.map +1 -0
- package/dist/migration-presets.d.ts +6 -0
- package/dist/migration-presets.js +102 -6
- package/dist/migration-presets.js.map +1 -1
- package/dist/policy-bundle.d.ts +110 -0
- package/dist/policy-bundle.js +289 -0
- package/dist/policy-bundle.js.map +1 -0
- package/dist/request-auth.d.ts +32 -0
- package/dist/request-auth.js +72 -0
- package/dist/request-auth.js.map +1 -0
- package/dist/uma.d.ts +77 -0
- package/dist/uma.js +95 -0
- package/dist/uma.js.map +1 -0
- package/dist/verify.d.ts +2 -0
- package/dist/verify.js.map +1 -1
- package/dist/workos-session.d.ts +30 -0
- package/dist/workos-session.js +123 -0
- package/dist/workos-session.js.map +1 -0
- package/package.json +2 -2
package/dist/client/index.js
CHANGED
|
@@ -22,6 +22,8 @@ const sessions_1 = require("./sessions");
|
|
|
22
22
|
const organizations_1 = require("./organizations");
|
|
23
23
|
const roles_1 = require("./roles");
|
|
24
24
|
const oauth_clients_1 = require("./oauth-clients");
|
|
25
|
+
const passkey_api_1 = require("./passkey-api");
|
|
26
|
+
const vc_1 = require("./vc");
|
|
25
27
|
const resource_servers_1 = require("./resource-servers");
|
|
26
28
|
const sso_connections_1 = require("./sso-connections");
|
|
27
29
|
const scim_tokens_1 = require("./scim-tokens");
|
|
@@ -29,6 +31,7 @@ const domains_1 = require("./domains");
|
|
|
29
31
|
const waitlist_1 = require("./waitlist");
|
|
30
32
|
const restrictions_1 = require("./restrictions");
|
|
31
33
|
const attack_protection_1 = require("./attack-protection");
|
|
34
|
+
const mfa_factors_1 = require("./mfa-factors");
|
|
32
35
|
const actor_tokens_1 = require("./actor-tokens");
|
|
33
36
|
const invitations_1 = require("./invitations");
|
|
34
37
|
const webhooks_1 = require("./webhooks");
|
|
@@ -37,6 +40,7 @@ const audit_logs_1 = require("./audit-logs");
|
|
|
37
40
|
const jwt_templates_1 = require("./jwt-templates");
|
|
38
41
|
const api_keys_1 = require("./api-keys");
|
|
39
42
|
const app_roles_1 = require("./app-roles");
|
|
43
|
+
const groups_1 = require("./groups");
|
|
40
44
|
const machines_1 = require("./machines");
|
|
41
45
|
const oauth_providers_1 = require("./oauth-providers");
|
|
42
46
|
const sso_onboarding_1 = require("./sso-onboarding");
|
|
@@ -44,8 +48,19 @@ const scim_provisioning_1 = require("./scim-provisioning");
|
|
|
44
48
|
const fga_1 = require("./fga");
|
|
45
49
|
const rate_limit_1 = require("./rate-limit");
|
|
46
50
|
const risk_based_mfa_1 = require("./risk-based-mfa");
|
|
51
|
+
const ssf_1 = require("./ssf");
|
|
52
|
+
const managed_grants_1 = require("./managed-grants");
|
|
53
|
+
const least_privilege_1 = require("./least-privilege");
|
|
47
54
|
const bot_signals_1 = require("./bot-signals");
|
|
48
55
|
const network_acls_1 = require("./network-acls");
|
|
56
|
+
const network_zones_1 = require("./network-zones");
|
|
57
|
+
const access_policies_1 = require("./access-policies");
|
|
58
|
+
const abac_1 = require("./abac");
|
|
59
|
+
const authz_decisions_1 = require("./authz-decisions");
|
|
60
|
+
const policy_bundles_1 = require("./policy-bundles");
|
|
61
|
+
const resources_1 = require("./resources");
|
|
62
|
+
const org_role_grants_1 = require("./org-role-grants");
|
|
63
|
+
const devices_1 = require("./devices");
|
|
49
64
|
const managed_waf_1 = require("./managed-waf");
|
|
50
65
|
const log_streams_1 = require("./log-streams");
|
|
51
66
|
const compliance_1 = require("./compliance");
|
|
@@ -54,6 +69,8 @@ const email_templates_1 = require("./email-templates");
|
|
|
54
69
|
const sms_templates_1 = require("./sms-templates");
|
|
55
70
|
const localizations_1 = require("./localizations");
|
|
56
71
|
const actions_1 = require("./actions");
|
|
72
|
+
const workflows_1 = require("./workflows");
|
|
73
|
+
const page_templates_1 = require("./page-templates");
|
|
57
74
|
const action_gallery_1 = require("./action-gallery");
|
|
58
75
|
const billing_plans_1 = require("./billing-plans");
|
|
59
76
|
const messaging_1 = require("./messaging");
|
|
@@ -63,6 +80,7 @@ const migrations_1 = require("./migrations");
|
|
|
63
80
|
const data_subject_requests_1 = require("./data-subject-requests");
|
|
64
81
|
const privacy_1 = require("./privacy");
|
|
65
82
|
const radius_clients_1 = require("./radius-clients");
|
|
83
|
+
const mcp_gateways_1 = require("./mcp-gateways");
|
|
66
84
|
const lti_platforms_1 = require("./lti-platforms");
|
|
67
85
|
const instance_1 = require("./instance");
|
|
68
86
|
const integrations_1 = require("./integrations");
|
|
@@ -80,12 +98,23 @@ const organization_settings_schema_1 = require("./organization-settings-schema")
|
|
|
80
98
|
const email_addresses_1 = require("./email-addresses");
|
|
81
99
|
const openfga_1 = require("./openfga");
|
|
82
100
|
const connectors_1 = require("./connectors");
|
|
101
|
+
const connections_1 = require("./connections");
|
|
83
102
|
const custom_oauth_providers_1 = require("./custom-oauth-providers");
|
|
84
103
|
const notifications_1 = require("./notifications");
|
|
85
104
|
const audit_events_1 = require("./audit-events");
|
|
105
|
+
const vault_1 = require("./vault");
|
|
106
|
+
const service_connectors_1 = require("./service-connectors");
|
|
107
|
+
const desktop_mfa_1 = require("./desktop-mfa");
|
|
108
|
+
const identity_verification_1 = require("./identity-verification");
|
|
109
|
+
const iga_1 = require("./iga");
|
|
110
|
+
const flags_1 = require("./flags");
|
|
86
111
|
const credentials_1 = require("./credentials");
|
|
87
112
|
const partner_platforms_1 = require("./partner-platforms");
|
|
88
113
|
const activity_1 = require("./activity");
|
|
114
|
+
const analytics_reports_1 = require("./analytics-reports");
|
|
115
|
+
const app_catalog_1 = require("./app-catalog");
|
|
116
|
+
const journeys_1 = require("./journeys");
|
|
117
|
+
const marketing_1 = require("./marketing");
|
|
89
118
|
const logout_notify_endpoints_1 = require("./logout-notify-endpoints");
|
|
90
119
|
const pca_1 = require("./pca");
|
|
91
120
|
const mcp_1 = require("./mcp");
|
|
@@ -121,6 +150,8 @@ function buildNamespaces(request) {
|
|
|
121
150
|
roles: (0, roles_1.rolesResource)(request),
|
|
122
151
|
permissions: (0, roles_1.permissionsResource)(request),
|
|
123
152
|
oauthClients: (0, oauth_clients_1.oauthClientsResource)(request),
|
|
153
|
+
passkeyApi: (0, passkey_api_1.passkeyApiResource)(request),
|
|
154
|
+
vc: (0, vc_1.vcResource)(request),
|
|
124
155
|
resourceServers: (0, resource_servers_1.resourceServersResource)(request),
|
|
125
156
|
ssoConnections: (0, sso_connections_1.ssoConnectionsResource)(request),
|
|
126
157
|
scimTokens: (0, scim_tokens_1.scimTokensResource)(request),
|
|
@@ -129,6 +160,8 @@ function buildNamespaces(request) {
|
|
|
129
160
|
allowlist: (0, restrictions_1.allowlistResource)(request),
|
|
130
161
|
blocklist: (0, restrictions_1.blocklistResource)(request),
|
|
131
162
|
attackProtection: (0, attack_protection_1.attackProtectionResource)(request),
|
|
163
|
+
// HOTP, Yubico OTP, Duo, smart card and security-question administration.
|
|
164
|
+
mfaFactors: (0, mfa_factors_1.mfaFactorsResource)(request),
|
|
132
165
|
actorTokens: (0, actor_tokens_1.actorTokensResource)(request),
|
|
133
166
|
invitations: (0, invitations_1.invitationsResource)(request),
|
|
134
167
|
webhooks: (0, webhooks_1.webhooksResource)(request),
|
|
@@ -138,6 +171,7 @@ function buildNamespaces(request) {
|
|
|
138
171
|
apiKeys: (0, api_keys_1.apiKeysResource)(request),
|
|
139
172
|
// App-level (instance-wide) user roles and permissions.
|
|
140
173
|
appRoles: (0, app_roles_1.appRolesResource)(request),
|
|
174
|
+
groups: (0, groups_1.groupsResource)(request),
|
|
141
175
|
// §9.3 / §P1-7 named machine identities + device registry + enrolment tokens.
|
|
142
176
|
machines: (0, machines_1.machinesResource)(request),
|
|
143
177
|
oauthProviders: (0, oauth_providers_1.oauthProvidersResource)(request),
|
|
@@ -146,8 +180,20 @@ function buildNamespaces(request) {
|
|
|
146
180
|
fga: (0, fga_1.fgaResource)(request),
|
|
147
181
|
rateLimitPolicy: (0, rate_limit_1.rateLimitPolicyResource)(request),
|
|
148
182
|
riskBasedMfa: (0, risk_based_mfa_1.riskBasedMfaResource)(request),
|
|
183
|
+
riskEvents: (0, risk_based_mfa_1.riskEventsResource)(request),
|
|
184
|
+
ssf: (0, ssf_1.ssfResource)(request),
|
|
185
|
+
managedGrants: (0, managed_grants_1.managedGrantsResource)(request),
|
|
186
|
+
leastPrivilege: (0, least_privilege_1.leastPrivilegeResource)(request),
|
|
149
187
|
botSignals: (0, bot_signals_1.botSignalsResource)(request),
|
|
150
188
|
networkAcls: (0, network_acls_1.networkAclsResource)(request),
|
|
189
|
+
networkZones: (0, network_zones_1.networkZonesResource)(request),
|
|
190
|
+
accessPolicies: (0, access_policies_1.accessPoliciesResource)(request),
|
|
191
|
+
abac: (0, abac_1.abacResource)(request),
|
|
192
|
+
authzDecisions: (0, authz_decisions_1.authzDecisionsResource)(request),
|
|
193
|
+
policyBundles: (0, policy_bundles_1.policyBundlesResource)(request),
|
|
194
|
+
resources: (0, resources_1.resourcesResource)(request),
|
|
195
|
+
orgRoleGrants: (0, org_role_grants_1.orgRoleGrantsResource)(request),
|
|
196
|
+
devices: (0, devices_1.devicesResource)(request),
|
|
151
197
|
managedWaf: (0, managed_waf_1.managedWafResource)(request),
|
|
152
198
|
logStreams: (0, log_streams_1.logStreamsResource)(request),
|
|
153
199
|
// Instance audit export: CloudEvents to a webhook or an S3-compatible bucket.
|
|
@@ -162,6 +208,8 @@ function buildNamespaces(request) {
|
|
|
162
208
|
smsTemplates: (0, sms_templates_1.smsTemplatesResource)(request),
|
|
163
209
|
localizations: (0, localizations_1.localizationsResource)(request),
|
|
164
210
|
actions: (0, actions_1.actionsResource)(request),
|
|
211
|
+
workflows: (0, workflows_1.workflowsResource)(request),
|
|
212
|
+
pageTemplates: (0, page_templates_1.pageTemplatesResource)(request),
|
|
165
213
|
actionGallery: (0, action_gallery_1.actionGalleryResource)(request),
|
|
166
214
|
actionTemplates: (0, action_gallery_1.actionTemplatesResource)(request),
|
|
167
215
|
billing: (0, billing_plans_1.billingResource)(request),
|
|
@@ -175,6 +223,8 @@ function buildNamespaces(request) {
|
|
|
175
223
|
/** The data-rights executor protocol and the instance's orchestrator. */
|
|
176
224
|
privacy: (0, privacy_1.privacyResource)(request),
|
|
177
225
|
radiusClients: (0, radius_clients_1.radiusClientsResource)(request),
|
|
226
|
+
/** MCP tool gateway: per-tool policy in front of an MCP server. */
|
|
227
|
+
mcpGateways: (0, mcp_gateways_1.mcpGatewaysResource)(request),
|
|
178
228
|
ltiPlatforms: (0, lti_platforms_1.ltiPlatformsResource)(request),
|
|
179
229
|
instance: (0, instance_1.instanceResource)(request),
|
|
180
230
|
// Identity integrations, the integration-facing side: verify-error reports, sidebar cards, public metadata.
|
|
@@ -203,10 +253,22 @@ function buildNamespaces(request) {
|
|
|
203
253
|
// OpenFGA-wire ReBAC stores, models and tuples.
|
|
204
254
|
openfga: (0, openfga_1.openfgaResource)(request),
|
|
205
255
|
connectors: (0, connectors_1.connectorsResource)(request),
|
|
256
|
+
// Org- or user-owned provider connections that own their tokens, per-owner OAuth clients, token reads.
|
|
257
|
+
connections: (0, connections_1.connectionsResource)(request),
|
|
206
258
|
customOAuthProviders: (0, custom_oauth_providers_1.customOAuthProvidersResource)(request),
|
|
207
259
|
notifications: (0, notifications_1.notificationsResource)(request),
|
|
208
260
|
// The tenant's own custom audit events (distinct from Atlas's auditLogs).
|
|
209
261
|
auditEvents: (0, audit_events_1.auditEventsResource)(request),
|
|
262
|
+
auditEventSchemas: (0, audit_events_1.auditEventSchemasResource)(request),
|
|
263
|
+
vault: (0, vault_1.vaultResource)(request),
|
|
264
|
+
// Typed connectors to messaging, CRM, analytics, fraud and identity-verification services.
|
|
265
|
+
serviceConnectors: (0, service_connectors_1.serviceConnectorsResource)(request),
|
|
266
|
+
desktopMfa: (0, desktop_mfa_1.desktopMfaResource)(request),
|
|
267
|
+
// Document and selfie identity checks through your own verification service.
|
|
268
|
+
identityVerification: (0, identity_verification_1.identityVerificationResource)(request),
|
|
269
|
+
// Identity governance: catalog, access requests and approvals, certification campaigns, separation of duties, joiner/mover/leaver.
|
|
270
|
+
iga: (0, iga_1.igaResource)(request),
|
|
271
|
+
flags: (0, flags_1.flagsResource)(request),
|
|
210
272
|
// The key this client uses, the instance's secret keys, and every credential on it.
|
|
211
273
|
whoami: (0, credentials_1.whoamiResource)(request),
|
|
212
274
|
secretKeys: (0, credentials_1.secretKeysResource)(request),
|
|
@@ -219,6 +281,10 @@ function buildNamespaces(request) {
|
|
|
219
281
|
atlasIdGrants: (0, credentials_1.atlasIdGrantsResource)(request),
|
|
220
282
|
events: (0, activity_1.eventsResource)(request),
|
|
221
283
|
usage: (0, activity_1.usageResource)(request),
|
|
284
|
+
analytics: (0, analytics_reports_1.analyticsResource)(request),
|
|
285
|
+
appCatalog: (0, app_catalog_1.appCatalogResource)(request),
|
|
286
|
+
journeys: (0, journeys_1.journeysResource)(request),
|
|
287
|
+
marketing: (0, marketing_1.marketingResource)(request),
|
|
222
288
|
configChangelog: (0, activity_1.configChangelogResource)(request),
|
|
223
289
|
pca: (0, pca_1.pcaResource)(request),
|
|
224
290
|
mcp: (0, mcp_1.mcpResource)(request),
|
|
@@ -253,11 +319,18 @@ Object.defineProperty(exports, "collect", { enumerable: true, get: function () {
|
|
|
253
319
|
// Resource types — exported so callers can annotate their own code.
|
|
254
320
|
__exportStar(require("./types"), exports);
|
|
255
321
|
__exportStar(require("./compliance"), exports);
|
|
322
|
+
__exportStar(require("./vault"), exports);
|
|
323
|
+
__exportStar(require("./service-connectors"), exports);
|
|
324
|
+
__exportStar(require("./desktop-mfa"), exports);
|
|
325
|
+
__exportStar(require("./identity-verification"), exports);
|
|
326
|
+
__exportStar(require("./iga"), exports);
|
|
327
|
+
__exportStar(require("./flags"), exports);
|
|
256
328
|
__exportStar(require("./users"), exports);
|
|
257
329
|
__exportStar(require("./sessions"), exports);
|
|
258
330
|
__exportStar(require("./organizations"), exports);
|
|
259
331
|
__exportStar(require("./roles"), exports);
|
|
260
332
|
__exportStar(require("./app-roles"), exports);
|
|
333
|
+
__exportStar(require("./groups"), exports);
|
|
261
334
|
__exportStar(require("./oauth-clients"), exports);
|
|
262
335
|
__exportStar(require("./resource-servers"), exports);
|
|
263
336
|
__exportStar(require("./sso-connections"), exports);
|
|
@@ -266,6 +339,7 @@ __exportStar(require("./domains"), exports);
|
|
|
266
339
|
__exportStar(require("./waitlist"), exports);
|
|
267
340
|
__exportStar(require("./restrictions"), exports);
|
|
268
341
|
__exportStar(require("./attack-protection"), exports);
|
|
342
|
+
__exportStar(require("./mfa-factors"), exports);
|
|
269
343
|
__exportStar(require("./actor-tokens"), exports);
|
|
270
344
|
__exportStar(require("./invitations"), exports);
|
|
271
345
|
__exportStar(require("./webhooks"), exports);
|
|
@@ -280,8 +354,19 @@ __exportStar(require("./scim-provisioning"), exports);
|
|
|
280
354
|
__exportStar(require("./fga"), exports);
|
|
281
355
|
__exportStar(require("./rate-limit"), exports);
|
|
282
356
|
__exportStar(require("./risk-based-mfa"), exports);
|
|
357
|
+
__exportStar(require("./ssf"), exports);
|
|
358
|
+
__exportStar(require("./managed-grants"), exports);
|
|
359
|
+
__exportStar(require("./least-privilege"), exports);
|
|
283
360
|
__exportStar(require("./bot-signals"), exports);
|
|
284
361
|
__exportStar(require("./network-acls"), exports);
|
|
362
|
+
__exportStar(require("./network-zones"), exports);
|
|
363
|
+
__exportStar(require("./access-policies"), exports);
|
|
364
|
+
__exportStar(require("./abac"), exports);
|
|
365
|
+
__exportStar(require("./authz-decisions"), exports);
|
|
366
|
+
__exportStar(require("./policy-bundles"), exports);
|
|
367
|
+
__exportStar(require("./resources"), exports);
|
|
368
|
+
__exportStar(require("./org-role-grants"), exports);
|
|
369
|
+
__exportStar(require("./devices"), exports);
|
|
285
370
|
__exportStar(require("./managed-waf"), exports);
|
|
286
371
|
__exportStar(require("./log-streams"), exports);
|
|
287
372
|
__exportStar(require("./branding"), exports);
|
|
@@ -289,6 +374,8 @@ __exportStar(require("./email-templates"), exports);
|
|
|
289
374
|
__exportStar(require("./sms-templates"), exports);
|
|
290
375
|
__exportStar(require("./localizations"), exports);
|
|
291
376
|
__exportStar(require("./actions"), exports);
|
|
377
|
+
__exportStar(require("./page-templates"), exports);
|
|
378
|
+
__exportStar(require("./workflows"), exports);
|
|
292
379
|
__exportStar(require("./action-gallery"), exports);
|
|
293
380
|
__exportStar(require("./billing-plans"), exports);
|
|
294
381
|
__exportStar(require("./messaging"), exports);
|
|
@@ -298,6 +385,7 @@ __exportStar(require("./migrations"), exports);
|
|
|
298
385
|
__exportStar(require("./data-subject-requests"), exports);
|
|
299
386
|
__exportStar(require("./privacy"), exports);
|
|
300
387
|
__exportStar(require("./radius-clients"), exports);
|
|
388
|
+
__exportStar(require("./mcp-gateways"), exports);
|
|
301
389
|
__exportStar(require("./lti-platforms"), exports);
|
|
302
390
|
__exportStar(require("./instance"), exports);
|
|
303
391
|
__exportStar(require("./integrations"), exports);
|
|
@@ -315,10 +403,18 @@ __exportStar(require("./organization-settings-schema"), exports);
|
|
|
315
403
|
__exportStar(require("./email-addresses"), exports);
|
|
316
404
|
__exportStar(require("./openfga"), exports);
|
|
317
405
|
__exportStar(require("./connectors"), exports);
|
|
406
|
+
__exportStar(require("./connections"), exports);
|
|
407
|
+
__exportStar(require("./passkey-api"), exports);
|
|
408
|
+
__exportStar(require("./delegated-ui-proxy"), exports);
|
|
409
|
+
__exportStar(require("./vc"), exports);
|
|
318
410
|
__exportStar(require("./custom-oauth-providers"), exports);
|
|
319
411
|
__exportStar(require("./notifications"), exports);
|
|
320
412
|
__exportStar(require("./audit-events"), exports);
|
|
321
413
|
__exportStar(require("./activity"), exports);
|
|
414
|
+
__exportStar(require("./analytics-reports"), exports);
|
|
415
|
+
__exportStar(require("./app-catalog"), exports);
|
|
416
|
+
__exportStar(require("./journeys"), exports);
|
|
417
|
+
__exportStar(require("./marketing"), exports);
|
|
322
418
|
__exportStar(require("./pca"), exports);
|
|
323
419
|
__exportStar(require("./mcp"), exports);
|
|
324
420
|
__exportStar(require("./legacy-auth"), exports);
|
package/dist/client/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA6HA,8CAQC;AArID,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,+CAAmD;AACnD,6BAAkC;AAClC,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,+CAAmD;AACnD,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,qCAA0C;AAC1C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAA4E;AAC5E,+BAAoC;AACpC,qDAAyD;AACzD,uDAA2D;AAC3D,+CAAmD;AACnD,iDAAqD;AACrD,mDAAuD;AACvD,uDAA2D;AAC3D,iCAAsC;AACtC,uDAA2D;AAC3D,qDAAyD;AACzD,2CAAgD;AAChD,uDAA0D;AAC1D,uCAA4C;AAC5C,+CAAmD;AACnD,+CAAmD;AACnD,6CAAwH;AACxH,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,2CAAgD;AAChD,qDAAyD;AACzD,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,6CAAkD;AAClD,mEAAsE;AACtE,uCAA4C;AAC5C,qDAAyD;AACzD,iDAAqD;AACrD,mDAAuD;AACvD,yCAA8C;AAC9C,iDAAsD;AACtD,2DAA+D;AAC/D,2CAAgD;AAChD,yCAAoE;AACpE,qCAA0C;AAC1C,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAA6F;AAC7F,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,+CAAoD;AACpD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAgF;AAChF,mCAAwC;AACxC,6DAAiE;AACjE,+CAAmD;AACnD,mEAAuE;AACvE,+BAAoC;AACpC,mCAAwC;AACxC,+CAMuB;AACvB,2DAA+D;AAC/D,yCAAoF;AACpF,2DAAwD;AACxD,+CAAmD;AACnD,yCAA8C;AAC9C,2CAAgD;AAChD,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,EAAE,EAAE,IAAA,eAAU,EAAC,OAAO,CAAC;QACvB,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,mCAAkB,EAAC,OAAO,CAAC;QACvC,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,IAAI,EAAE,IAAA,mBAAY,EAAC,OAAO,CAAC;QAC3B,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,uCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,8EAA8E;QAC9E,YAAY,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QAC3C,wEAAwE;QACxE,OAAO,EAAE,IAAA,4BAAe,EAAC,OAAO,CAAC;QACjC,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,OAAO,CAAC;QACvD,8DAA8D;QAC9D,aAAa,EAAE,IAAA,kCAAqB,EAAC,OAAO,CAAC;QAC7C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,wGAAwG;QACxG,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,yEAAyE;QACzE,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,mEAAmE;QACnE,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,4GAA4G;QAC5G,YAAY,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,gGAAgG;QAChG,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,+BAAoB,EAAC,OAAO,CAAC;QAC3C,sGAAsG;QACtG,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,4CAAoB,EAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,uGAAuG;QACvG,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;QACrD,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,2FAA2F;QAC3F,iBAAiB,EAAE,IAAA,8CAAyB,EAAC,OAAO,CAAC;QACrD,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,6EAA6E;QAC7E,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,mIAAmI;QACnI,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,oFAAoF;QACpF,MAAM,EAAE,IAAA,4BAAc,EAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,IAAI,EAAE,IAAA,0BAAY,EAAC,OAAO,CAAC;QAC3B,2FAA2F;QAC3F,YAAY,EAAE,IAAA,kCAAoB,EAAC,OAAO,CAAC;QAC3C,yFAAyF;QACzF,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,aAAa,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAA,qCAAiB,EAAC,OAAO,CAAC;QACrC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAsBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,6BAAyG;AAAhG,yGAAA,kBAAkB,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,yGAAA,kBAAkB,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACzF,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,+CAA6B;AAC7B,0CAAwB;AACxB,uDAAqC;AACrC,gDAA8B;AAC9B,0DAAwC;AACxC,wCAAsB;AACtB,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,2CAAyB;AACzB,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,wCAAsB;AACtB,mDAAiC;AACjC,oDAAkC;AAClC,gDAA8B;AAC9B,iDAA+B;AAC/B,kDAAgC;AAChC,oDAAkC;AAClC,yCAAuB;AACvB,oDAAkC;AAClC,mDAAiC;AACjC,8CAA4B;AAC5B,oDAAkC;AAClC,4CAA0B;AAC1B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,8CAA4B;AAC5B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,4CAA0B;AAC1B,mDAAiC;AACjC,iDAA+B;AAC/B,kDAAgC;AAChC,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,8CAA4B;AAC5B,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,gDAA8B;AAC9B,gDAA8B;AAC9B,uDAAqC;AACrC,uCAAqB;AACrB,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,sDAAoC;AACpC,gDAA8B;AAC9B,6CAA2B;AAC3B,8CAA4B;AAC5B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B;AAC3B,gDAA8B;AAC9B,sDAAoC;AACpC,6CAA2B"}
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
import { type RequestFn } from './request';
|
|
2
|
+
export type JourneyStepType = 'require_method' | 'require_mfa' | 'required_action' | 'profile_prompt' | 'policy_acceptance' | 'action' | 'set_claim' | 'redirect' | 'deny' | 'form' | 'subflow';
|
|
3
|
+
/** A field of a form step; its value is saved to the user's public metadata under `key`. */
|
|
4
|
+
export interface JourneyFormField {
|
|
5
|
+
key: string;
|
|
6
|
+
label: string;
|
|
7
|
+
type: 'text' | 'email' | 'number' | 'date' | 'select' | 'checkbox' | 'textarea';
|
|
8
|
+
required?: boolean;
|
|
9
|
+
placeholder?: string;
|
|
10
|
+
options?: string[];
|
|
11
|
+
}
|
|
12
|
+
export interface JourneyStep {
|
|
13
|
+
id: string;
|
|
14
|
+
type: JourneyStepType;
|
|
15
|
+
/** Access-policy conditions: applications, userIds, groups, orgs, roles, networkZones, countries, riskLevels, deviceTrust, authMethods, timeWindow. */
|
|
16
|
+
when?: Record<string, unknown>;
|
|
17
|
+
methods?: string[];
|
|
18
|
+
action?: 'update_password' | 'verify_email' | 'configure_mfa' | 'update_profile' | 'accept_policy' | 'identity_verification' | 'custom';
|
|
19
|
+
url?: string;
|
|
20
|
+
action_id?: string;
|
|
21
|
+
claim?: string;
|
|
22
|
+
value?: unknown;
|
|
23
|
+
message?: string;
|
|
24
|
+
/** form */
|
|
25
|
+
title?: string;
|
|
26
|
+
intro?: string;
|
|
27
|
+
fields?: JourneyFormField[];
|
|
28
|
+
once?: boolean;
|
|
29
|
+
/** subflow: the journey to run here. */
|
|
30
|
+
flow_id?: string;
|
|
31
|
+
}
|
|
32
|
+
export interface JourneyDefinition {
|
|
33
|
+
steps: JourneyStep[];
|
|
34
|
+
}
|
|
35
|
+
export interface SignInJourney {
|
|
36
|
+
object: 'sign_in_journey';
|
|
37
|
+
id: string;
|
|
38
|
+
name: string;
|
|
39
|
+
description: string | null;
|
|
40
|
+
is_default: boolean;
|
|
41
|
+
applications: string[];
|
|
42
|
+
enabled: boolean;
|
|
43
|
+
active_version: number | null;
|
|
44
|
+
latest_version: number;
|
|
45
|
+
definition?: JourneyDefinition | null;
|
|
46
|
+
created_at: number;
|
|
47
|
+
updated_at: number;
|
|
48
|
+
}
|
|
49
|
+
export interface JourneyBody {
|
|
50
|
+
name?: string;
|
|
51
|
+
description?: string | null;
|
|
52
|
+
is_default?: boolean;
|
|
53
|
+
applications?: string[];
|
|
54
|
+
enabled?: boolean;
|
|
55
|
+
definition?: JourneyDefinition;
|
|
56
|
+
activate?: boolean;
|
|
57
|
+
}
|
|
58
|
+
export interface JourneySimulation {
|
|
59
|
+
object: 'sign_in_journey_simulation';
|
|
60
|
+
journey_id: string;
|
|
61
|
+
version: number;
|
|
62
|
+
outcome: 'allowed' | 'held' | 'refused';
|
|
63
|
+
effects: Array<Record<string, unknown>>;
|
|
64
|
+
trace: Array<{
|
|
65
|
+
step: string;
|
|
66
|
+
type: JourneyStepType;
|
|
67
|
+
matched: boolean;
|
|
68
|
+
outcome: 'skipped' | 'passed' | 'effect' | 'stopped';
|
|
69
|
+
}>;
|
|
70
|
+
}
|
|
71
|
+
/** Sign-in journeys (`/v1/flows`): versioned steps run before a session is issued. */
|
|
72
|
+
export declare function journeysResource(request: RequestFn): {
|
|
73
|
+
list(): Promise<{
|
|
74
|
+
object: "list";
|
|
75
|
+
data: SignInJourney[];
|
|
76
|
+
has_more: boolean;
|
|
77
|
+
}>;
|
|
78
|
+
get(id: string): Promise<SignInJourney>;
|
|
79
|
+
create(body: JourneyBody & {
|
|
80
|
+
name: string;
|
|
81
|
+
definition: JourneyDefinition;
|
|
82
|
+
}, idempotencyKey?: string): Promise<SignInJourney>;
|
|
83
|
+
/** A `definition` becomes the next version (active unless `activate: false`). */
|
|
84
|
+
update(id: string, body: JourneyBody, idempotencyKey?: string): Promise<SignInJourney>;
|
|
85
|
+
delete(id: string): Promise<{
|
|
86
|
+
object: "sign_in_journey";
|
|
87
|
+
id: string;
|
|
88
|
+
deleted: true;
|
|
89
|
+
}>;
|
|
90
|
+
versions(id: string): Promise<{
|
|
91
|
+
object: "list";
|
|
92
|
+
data: Array<{
|
|
93
|
+
version: number;
|
|
94
|
+
definition: JourneyDefinition;
|
|
95
|
+
created_by: string | null;
|
|
96
|
+
created_at: number;
|
|
97
|
+
}>;
|
|
98
|
+
}>;
|
|
99
|
+
activate(id: string, version: number): Promise<SignInJourney>;
|
|
100
|
+
simulate(id: string, body: {
|
|
101
|
+
user_id: string;
|
|
102
|
+
method?: string;
|
|
103
|
+
mfa_verified?: boolean;
|
|
104
|
+
ip?: string;
|
|
105
|
+
application_id?: string;
|
|
106
|
+
version?: number;
|
|
107
|
+
}): Promise<JourneySimulation>;
|
|
108
|
+
};
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.journeysResource = journeysResource;
|
|
4
|
+
const request_1 = require("./request");
|
|
5
|
+
/** Sign-in journeys (`/v1/flows`): versioned steps run before a session is issued. */
|
|
6
|
+
function journeysResource(request) {
|
|
7
|
+
return {
|
|
8
|
+
list() {
|
|
9
|
+
return request({ method: 'GET', path: '/v1/flows' });
|
|
10
|
+
},
|
|
11
|
+
get(id) {
|
|
12
|
+
return request({ method: 'GET', path: `/v1/flows/${(0, request_1.enc)(id)}` });
|
|
13
|
+
},
|
|
14
|
+
create(body, idempotencyKey) {
|
|
15
|
+
return request({ method: 'POST', path: '/v1/flows', body, idempotencyKey });
|
|
16
|
+
},
|
|
17
|
+
/** A `definition` becomes the next version (active unless `activate: false`). */
|
|
18
|
+
update(id, body, idempotencyKey) {
|
|
19
|
+
return request({ method: 'PATCH', path: `/v1/flows/${(0, request_1.enc)(id)}`, body, idempotencyKey });
|
|
20
|
+
},
|
|
21
|
+
delete(id) {
|
|
22
|
+
return request({ method: 'DELETE', path: `/v1/flows/${(0, request_1.enc)(id)}` });
|
|
23
|
+
},
|
|
24
|
+
versions(id) {
|
|
25
|
+
return request({ method: 'GET', path: `/v1/flows/${(0, request_1.enc)(id)}/versions` });
|
|
26
|
+
},
|
|
27
|
+
activate(id, version) {
|
|
28
|
+
return request({ method: 'POST', path: `/v1/flows/${(0, request_1.enc)(id)}/activate`, body: { version } });
|
|
29
|
+
},
|
|
30
|
+
simulate(id, body) {
|
|
31
|
+
return request({ method: 'POST', path: `/v1/flows/${(0, request_1.enc)(id)}/simulate`, body });
|
|
32
|
+
},
|
|
33
|
+
};
|
|
34
|
+
}
|
|
35
|
+
//# sourceMappingURL=journeys.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"journeys.js","sourceRoot":"","sources":["../../src/client/journeys.ts"],"names":[],"mappings":";;AA0EA,4CA4BC;AAtGD,uCAAgD;AAyEhD,sFAAsF;AACtF,SAAgB,gBAAgB,CAAC,OAAkB;IACjD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,IAAmE,EAAE,cAAuB;YACjG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,iFAAiF;QACjF,MAAM,CAAC,EAAU,EAAE,IAAiB,EAAE,cAAuB;YAC3D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,CAAC,EAAU;YACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,QAAQ,CAAC,EAAU,EAAE,OAAe;YAClC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,QAAQ,CAAC,EAAU,EAAE,IAA0H;YAC7I,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,95 @@
|
|
|
1
|
+
import { type RequestFn } from './request';
|
|
2
|
+
export type LeastPrivilegeSubjectType = 'api_key' | 'oauth_client' | 'mcp_gateway' | 'agent';
|
|
3
|
+
export interface LeastPrivilegePermission {
|
|
4
|
+
/** A scope, `tool:<name>`, `<kind>:<resource>` for an agent grant, or `default_policy:allow`. */
|
|
5
|
+
permission: string;
|
|
6
|
+
kind: 'scope' | 'tool' | 'grant' | 'default_policy' | 'wildcard';
|
|
7
|
+
detail?: string;
|
|
8
|
+
}
|
|
9
|
+
export interface LeastPrivilegeChange {
|
|
10
|
+
field: string;
|
|
11
|
+
before: unknown;
|
|
12
|
+
after: unknown;
|
|
13
|
+
}
|
|
14
|
+
export interface LeastPrivilegeSubject {
|
|
15
|
+
object: 'least_privilege_subject';
|
|
16
|
+
subject_type: LeastPrivilegeSubjectType;
|
|
17
|
+
subject_id: string;
|
|
18
|
+
name: string | null;
|
|
19
|
+
window_days: number;
|
|
20
|
+
/** How many of the window's days the usage data covers. */
|
|
21
|
+
observed_days: number;
|
|
22
|
+
/** `low` when the data covers less than the window. */
|
|
23
|
+
confidence: 'high' | 'low';
|
|
24
|
+
granted: LeastPrivilegePermission[];
|
|
25
|
+
used: Array<{
|
|
26
|
+
permission: string;
|
|
27
|
+
uses: number;
|
|
28
|
+
last_used_at: number;
|
|
29
|
+
}>;
|
|
30
|
+
unused: Array<LeastPrivilegePermission & {
|
|
31
|
+
last_used_at: null;
|
|
32
|
+
}>;
|
|
33
|
+
/** The narrower grant. It only ever removes permissions. */
|
|
34
|
+
suggestion: {
|
|
35
|
+
summary: string;
|
|
36
|
+
changes: LeastPrivilegeChange[];
|
|
37
|
+
digest: string;
|
|
38
|
+
} | null;
|
|
39
|
+
/** The suggestion can be applied with one call. */
|
|
40
|
+
applicable: boolean;
|
|
41
|
+
note?: string;
|
|
42
|
+
}
|
|
43
|
+
export interface LeastPrivilegeReport {
|
|
44
|
+
object: 'least_privilege_report';
|
|
45
|
+
generated_at: number;
|
|
46
|
+
window_days: number;
|
|
47
|
+
summary: {
|
|
48
|
+
subjects: number;
|
|
49
|
+
with_unused: number;
|
|
50
|
+
unused_permissions: number;
|
|
51
|
+
applicable_suggestions: number;
|
|
52
|
+
};
|
|
53
|
+
data: LeastPrivilegeSubject[];
|
|
54
|
+
}
|
|
55
|
+
export interface LeastPrivilegeReportQuery {
|
|
56
|
+
days?: number;
|
|
57
|
+
subject_type?: LeastPrivilegeSubjectType;
|
|
58
|
+
subject_id?: string;
|
|
59
|
+
only_unused?: boolean;
|
|
60
|
+
limit?: number;
|
|
61
|
+
}
|
|
62
|
+
export interface ApplyLeastPrivilegeBody {
|
|
63
|
+
subject_type: LeastPrivilegeSubjectType;
|
|
64
|
+
subject_id: string;
|
|
65
|
+
/** `suggestion.digest` from the report: what you previewed is what is applied. */
|
|
66
|
+
digest: string;
|
|
67
|
+
days?: number;
|
|
68
|
+
/** Required when the report's `confidence` is `low`. */
|
|
69
|
+
acknowledge_short_window?: boolean;
|
|
70
|
+
}
|
|
71
|
+
/**
|
|
72
|
+
* The least-privilege report: what each secret key, OAuth client, MCP gateway and
|
|
73
|
+
* agent holds against what it used, and the narrower grant that would cover it.
|
|
74
|
+
* Preview an `apply` with `dryRun` first.
|
|
75
|
+
*/
|
|
76
|
+
export declare function leastPrivilegeResource(request: RequestFn): {
|
|
77
|
+
report(query?: LeastPrivilegeReportQuery): Promise<LeastPrivilegeReport>;
|
|
78
|
+
/** One credential's report. */
|
|
79
|
+
get(type: LeastPrivilegeSubjectType, id: string, query?: {
|
|
80
|
+
days?: number;
|
|
81
|
+
}): Promise<LeastPrivilegeSubject>;
|
|
82
|
+
/** The report as CSV, one row per used or unused permission. */
|
|
83
|
+
exportCsv(query?: LeastPrivilegeReportQuery): Promise<string>;
|
|
84
|
+
/** Apply a suggestion. `dryRun: true` previews it without changing anything. */
|
|
85
|
+
apply(body: ApplyLeastPrivilegeBody, options?: {
|
|
86
|
+
dryRun?: boolean;
|
|
87
|
+
}): Promise<{
|
|
88
|
+
object: "least_privilege_change";
|
|
89
|
+
subject_type: LeastPrivilegeSubjectType;
|
|
90
|
+
subject_id: string;
|
|
91
|
+
applied: true;
|
|
92
|
+
summary: string;
|
|
93
|
+
changes: LeastPrivilegeChange[];
|
|
94
|
+
}>;
|
|
95
|
+
};
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.leastPrivilegeResource = leastPrivilegeResource;
|
|
4
|
+
/**
|
|
5
|
+
* The least-privilege report: what each secret key, OAuth client, MCP gateway and
|
|
6
|
+
* agent holds against what it used, and the narrower grant that would cover it.
|
|
7
|
+
* Preview an `apply` with `dryRun` first.
|
|
8
|
+
*/
|
|
9
|
+
function leastPrivilegeResource(request) {
|
|
10
|
+
return {
|
|
11
|
+
report(query = {}) {
|
|
12
|
+
return request({ method: 'GET', path: '/v1/least_privilege/report', query: { ...query } });
|
|
13
|
+
},
|
|
14
|
+
/** One credential's report. */
|
|
15
|
+
get(type, id, query = {}) {
|
|
16
|
+
return request({ method: 'GET', path: `/v1/least_privilege/report/${type}/${encodeURIComponent(id)}`, query: { ...query } });
|
|
17
|
+
},
|
|
18
|
+
/** The report as CSV, one row per used or unused permission. */
|
|
19
|
+
exportCsv(query = {}) {
|
|
20
|
+
return request({ method: 'GET', path: '/v1/least_privilege/report', query: { ...query, format: 'csv' }, raw: true });
|
|
21
|
+
},
|
|
22
|
+
/** Apply a suggestion. `dryRun: true` previews it without changing anything. */
|
|
23
|
+
apply(body, options = {}) {
|
|
24
|
+
return request({ method: 'POST', path: '/v1/least_privilege/apply', body, ...(options.dryRun ? { query: { dry_run: true } } : {}) });
|
|
25
|
+
},
|
|
26
|
+
};
|
|
27
|
+
}
|
|
28
|
+
//# sourceMappingURL=least-privilege.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"least-privilege.js","sourceRoot":"","sources":["../../src/client/least-privilege.ts"],"names":[],"mappings":";;AAoEA,wDAyBC;AA9BD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,OAAO;QACL,MAAM,CAAC,QAAmC,EAAE;YAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,+BAA+B;QAC/B,GAAG,CAAC,IAA+B,EAAE,EAAU,EAAE,QAA2B,EAAE;YAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,gEAAgE;QAChE,SAAS,CAAC,QAAmC,EAAE;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,gFAAgF;QAChF,KAAK,CAAC,IAA6B,EAAE,UAAgC,EAAE;YAQrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { type RequestFn } from './request';
|
|
2
2
|
import type { ListPage } from './types';
|
|
3
|
-
export type LogStreamType = 'http' | 'datadog' | 'splunk';
|
|
3
|
+
export type LogStreamType = 'http' | 'datadog' | 'splunk' | 's3' | 'gcs' | 'azure_blob' | 'aws_eventbridge' | 'kinesis_firehose' | 'cloudwatch_logs' | 'elastic' | 'sumo_logic' | 'new_relic' | 'azure_event_hubs' | 'sentinel' | 'gcp_pubsub' | 'bigquery' | 'loki' | 'otlp' | 'kafka';
|
|
4
4
|
/**
|
|
5
5
|
* A log stream — the instance event feed forwarded to an external sink (generic
|
|
6
6
|
* HTTP, Datadog, Splunk HEC), Auth0-style. Destination SECRETS (datadog api_key,
|
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
import { type RequestFn } from './request';
|
|
2
|
+
/** A grant an OAuth client holds for a user (OpenID Grant Management): the `grant_id` token responses carry. */
|
|
3
|
+
export interface ManagedGrant {
|
|
4
|
+
object: 'managed_grant';
|
|
5
|
+
id: string;
|
|
6
|
+
/** The OAuth client's public `client_id`. */
|
|
7
|
+
client_id: string | null;
|
|
8
|
+
user_id: string;
|
|
9
|
+
organization_id: string | null;
|
|
10
|
+
status: 'active' | 'revoked';
|
|
11
|
+
scopes: string[];
|
|
12
|
+
/** The API (resource server identifier) the grant covers. */
|
|
13
|
+
resource: string | null;
|
|
14
|
+
authorization_details: Record<string, unknown>[] | null;
|
|
15
|
+
/** Bumped by every merge, replace and narrowing. */
|
|
16
|
+
revision: number;
|
|
17
|
+
created_at: number;
|
|
18
|
+
updated_at: number;
|
|
19
|
+
revoked_at: number | null;
|
|
20
|
+
revoked_by: 'client' | 'user' | 'admin' | 'system' | null;
|
|
21
|
+
}
|
|
22
|
+
export interface ListManagedGrantsQuery {
|
|
23
|
+
user_id?: string;
|
|
24
|
+
/** The OAuth client's public client id. */
|
|
25
|
+
client_id?: string;
|
|
26
|
+
status?: 'active' | 'revoked';
|
|
27
|
+
limit?: number;
|
|
28
|
+
}
|
|
29
|
+
/**
|
|
30
|
+
* OpenID Grant Management grants. Backends can read, narrow and revoke what each
|
|
31
|
+
* OAuth client holds for each user. Widening is the user's alone: they authorize
|
|
32
|
+
* again with `grant_management_action=merge`.
|
|
33
|
+
*/
|
|
34
|
+
export declare function managedGrantsResource(request: RequestFn): {
|
|
35
|
+
list(query?: ListManagedGrantsQuery): Promise<{
|
|
36
|
+
object: "list";
|
|
37
|
+
data: ManagedGrant[];
|
|
38
|
+
}>;
|
|
39
|
+
get(id: string): Promise<ManagedGrant>;
|
|
40
|
+
/** Keep a subset of what the grant holds. A scope or authorization_details entry it does not hold is refused. */
|
|
41
|
+
narrow(id: string, body: {
|
|
42
|
+
scopes?: string[];
|
|
43
|
+
authorization_details?: Record<string, unknown>[];
|
|
44
|
+
}): Promise<ManagedGrant>;
|
|
45
|
+
/** Revoke the grant and end every token issued under it. */
|
|
46
|
+
revoke(id: string): Promise<{
|
|
47
|
+
object: "managed_grant";
|
|
48
|
+
id: string;
|
|
49
|
+
deleted: true;
|
|
50
|
+
tokens_ended: number;
|
|
51
|
+
}>;
|
|
52
|
+
};
|