@atlasauth/backend 0.25.0 → 0.26.0

package/dist/client/index.js

@@ -49,11 +49,15 @@ const fga_1 = require("./fga");
 const rate_limit_1 = require("./rate-limit");
 const risk_based_mfa_1 = require("./risk-based-mfa");
 const ssf_1 = require("./ssf");
+const managed_grants_1 = require("./managed-grants");
+const least_privilege_1 = require("./least-privilege");
 const bot_signals_1 = require("./bot-signals");
 const network_acls_1 = require("./network-acls");
 const network_zones_1 = require("./network-zones");
 const access_policies_1 = require("./access-policies");
 const abac_1 = require("./abac");
+const authz_decisions_1 = require("./authz-decisions");
+const policy_bundles_1 = require("./policy-bundles");
 const resources_1 = require("./resources");
 const org_role_grants_1 = require("./org-role-grants");
 const devices_1 = require("./devices");
@@ -94,12 +98,15 @@ const organization_settings_schema_1 = require("./organization-settings-schema")
 const email_addresses_1 = require("./email-addresses");
 const openfga_1 = require("./openfga");
 const connectors_1 = require("./connectors");
+const connections_1 = require("./connections");
 const custom_oauth_providers_1 = require("./custom-oauth-providers");
 const notifications_1 = require("./notifications");
 const audit_events_1 = require("./audit-events");
 const vault_1 = require("./vault");
 const service_connectors_1 = require("./service-connectors");
+const desktop_mfa_1 = require("./desktop-mfa");
 const identity_verification_1 = require("./identity-verification");
+const iga_1 = require("./iga");
 const flags_1 = require("./flags");
 const credentials_1 = require("./credentials");
 const partner_platforms_1 = require("./partner-platforms");
@@ -175,11 +182,15 @@ function buildNamespaces(request) {
         riskBasedMfa: (0, risk_based_mfa_1.riskBasedMfaResource)(request),
         riskEvents: (0, risk_based_mfa_1.riskEventsResource)(request),
         ssf: (0, ssf_1.ssfResource)(request),
+        managedGrants: (0, managed_grants_1.managedGrantsResource)(request),
+        leastPrivilege: (0, least_privilege_1.leastPrivilegeResource)(request),
         botSignals: (0, bot_signals_1.botSignalsResource)(request),
         networkAcls: (0, network_acls_1.networkAclsResource)(request),
         networkZones: (0, network_zones_1.networkZonesResource)(request),
         accessPolicies: (0, access_policies_1.accessPoliciesResource)(request),
         abac: (0, abac_1.abacResource)(request),
+        authzDecisions: (0, authz_decisions_1.authzDecisionsResource)(request),
+        policyBundles: (0, policy_bundles_1.policyBundlesResource)(request),
         resources: (0, resources_1.resourcesResource)(request),
         orgRoleGrants: (0, org_role_grants_1.orgRoleGrantsResource)(request),
         devices: (0, devices_1.devicesResource)(request),
@@ -242,6 +253,8 @@ function buildNamespaces(request) {
         // OpenFGA-wire ReBAC stores, models and tuples.
         openfga: (0, openfga_1.openfgaResource)(request),
         connectors: (0, connectors_1.connectorsResource)(request),
+        // Org- or user-owned provider connections that own their tokens, per-owner OAuth clients, token reads.
+        connections: (0, connections_1.connectionsResource)(request),
         customOAuthProviders: (0, custom_oauth_providers_1.customOAuthProvidersResource)(request),
         notifications: (0, notifications_1.notificationsResource)(request),
         // The tenant's own custom audit events (distinct from Atlas's auditLogs).
@@ -250,8 +263,11 @@ function buildNamespaces(request) {
         vault: (0, vault_1.vaultResource)(request),
         // Typed connectors to messaging, CRM, analytics, fraud and identity-verification services.
         serviceConnectors: (0, service_connectors_1.serviceConnectorsResource)(request),
+        desktopMfa: (0, desktop_mfa_1.desktopMfaResource)(request),
         // Document and selfie identity checks through your own verification service.
         identityVerification: (0, identity_verification_1.identityVerificationResource)(request),
+        // Identity governance: catalog, access requests and approvals, certification campaigns, separation of duties, joiner/mover/leaver.
+        iga: (0, iga_1.igaResource)(request),
         flags: (0, flags_1.flagsResource)(request),
         // The key this client uses, the instance's secret keys, and every credential on it.
         whoami: (0, credentials_1.whoamiResource)(request),
@@ -305,7 +321,9 @@ __exportStar(require("./types"), exports);
 __exportStar(require("./compliance"), exports);
 __exportStar(require("./vault"), exports);
 __exportStar(require("./service-connectors"), exports);
+__exportStar(require("./desktop-mfa"), exports);
 __exportStar(require("./identity-verification"), exports);
+__exportStar(require("./iga"), exports);
 __exportStar(require("./flags"), exports);
 __exportStar(require("./users"), exports);
 __exportStar(require("./sessions"), exports);
@@ -337,11 +355,15 @@ __exportStar(require("./fga"), exports);
 __exportStar(require("./rate-limit"), exports);
 __exportStar(require("./risk-based-mfa"), exports);
 __exportStar(require("./ssf"), exports);
+__exportStar(require("./managed-grants"), exports);
+__exportStar(require("./least-privilege"), exports);
 __exportStar(require("./bot-signals"), exports);
 __exportStar(require("./network-acls"), exports);
 __exportStar(require("./network-zones"), exports);
 __exportStar(require("./access-policies"), exports);
 __exportStar(require("./abac"), exports);
+__exportStar(require("./authz-decisions"), exports);
+__exportStar(require("./policy-bundles"), exports);
 __exportStar(require("./resources"), exports);
 __exportStar(require("./org-role-grants"), exports);
 __exportStar(require("./devices"), exports);
@@ -381,6 +403,7 @@ __exportStar(require("./organization-settings-schema"), exports);
 __exportStar(require("./email-addresses"), exports);
 __exportStar(require("./openfga"), exports);
 __exportStar(require("./connectors"), exports);
+__exportStar(require("./connections"), exports);
 __exportStar(require("./passkey-api"), exports);
 __exportStar(require("./delegated-ui-proxy"), exports);
 __exportStar(require("./vc"), exports);

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAsHA,8CAQC;AA9HD,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,+CAAmD;AACnD,6BAAkC;AAClC,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,+CAAmD;AACnD,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,qCAA0C;AAC1C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAA4E;AAC5E,+BAAoC;AACpC,+CAAmD;AACnD,iDAAqD;AACrD,mDAAuD;AACvD,uDAA2D;AAC3D,iCAAsC;AACtC,2CAAgD;AAChD,uDAA0D;AAC1D,uCAA4C;AAC5C,+CAAmD;AACnD,+CAAmD;AACnD,6CAAwH;AACxH,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,2CAAgD;AAChD,qDAAyD;AACzD,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,6CAAkD;AAClD,mEAAsE;AACtE,uCAA4C;AAC5C,qDAAyD;AACzD,iDAAqD;AACrD,mDAAuD;AACvD,yCAA8C;AAC9C,iDAAsD;AACtD,2DAA+D;AAC/D,2CAAgD;AAChD,yCAAoE;AACpE,qCAA0C;AAC1C,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAA6F;AAC7F,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAgF;AAChF,mCAAwC;AACxC,6DAAiE;AACjE,mEAAuE;AACvE,mCAAwC;AACxC,+CAMuB;AACvB,2DAA+D;AAC/D,yCAAoF;AACpF,2DAAwD;AACxD,+CAAmD;AACnD,yCAA8C;AAC9C,2CAAgD;AAChD,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,EAAE,EAAE,IAAA,eAAU,EAAC,OAAO,CAAC;QACvB,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,mCAAkB,EAAC,OAAO,CAAC;QACvC,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,IAAI,EAAE,IAAA,mBAAY,EAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,uCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,8EAA8E;QAC9E,YAAY,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QAC3C,wEAAwE;QACxE,OAAO,EAAE,IAAA,4BAAe,EAAC,OAAO,CAAC;QACjC,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,OAAO,CAAC;QACvD,8DAA8D;QAC9D,aAAa,EAAE,IAAA,kCAAqB,EAAC,OAAO,CAAC;QAC7C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,wGAAwG;QACxG,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,yEAAyE;QACzE,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,mEAAmE;QACnE,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,4GAA4G;QAC5G,YAAY,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,gGAAgG;QAChG,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,+BAAoB,EAAC,OAAO,CAAC;QAC3C,sGAAsG;QACtG,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,4CAAoB,EAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;QACrD,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,2FAA2F;QAC3F,iBAAiB,EAAE,IAAA,8CAAyB,EAAC,OAAO,CAAC;QACrD,6EAA6E;QAC7E,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,oFAAoF;QACpF,MAAM,EAAE,IAAA,4BAAc,EAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,IAAI,EAAE,IAAA,0BAAY,EAAC,OAAO,CAAC;QAC3B,2FAA2F;QAC3F,YAAY,EAAE,IAAA,kCAAoB,EAAC,OAAO,CAAC;QAC3C,yFAAyF;QACzF,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,aAAa,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAA,qCAAiB,EAAC,OAAO,CAAC;QACrC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAsBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,6BAAyG;AAAhG,yGAAA,kBAAkB,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,yGAAA,kBAAkB,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACzF,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,+CAA6B;AAC7B,0CAAwB;AACxB,uDAAqC;AACrC,0DAAwC;AACxC,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,2CAAyB;AACzB,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,wCAAsB;AACtB,gDAA8B;AAC9B,iDAA+B;AAC/B,kDAAgC;AAChC,oDAAkC;AAClC,yCAAuB;AACvB,8CAA4B;AAC5B,oDAAkC;AAClC,4CAA0B;AAC1B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,8CAA4B;AAC5B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,4CAA0B;AAC1B,mDAAiC;AACjC,iDAA+B;AAC/B,kDAAgC;AAChC,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,8CAA4B;AAC5B,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,gDAA8B;AAC9B,uDAAqC;AACrC,uCAAqB;AACrB,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,sDAAoC;AACpC,gDAA8B;AAC9B,6CAA2B;AAC3B,8CAA4B;AAC5B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B;AAC3B,gDAA8B;AAC9B,sDAAoC;AACpC,6CAA2B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA6HA,8CAQC;AArID,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,+CAAmD;AACnD,6BAAkC;AAClC,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,+CAAmD;AACnD,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,2CAA+C;AAC/C,qCAA0C;AAC1C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAA4E;AAC5E,+BAAoC;AACpC,qDAAyD;AACzD,uDAA2D;AAC3D,+CAAmD;AACnD,iDAAqD;AACrD,mDAAuD;AACvD,uDAA2D;AAC3D,iCAAsC;AACtC,uDAA2D;AAC3D,qDAAyD;AACzD,2CAAgD;AAChD,uDAA0D;AAC1D,uCAA4C;AAC5C,+CAAmD;AACnD,+CAAmD;AACnD,6CAAwH;AACxH,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,2CAAgD;AAChD,qDAAyD;AACzD,qDAAkF;AAClF,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,+DAAkE;AAClE,6CAAkD;AAClD,mEAAsE;AACtE,uCAA4C;AAC5C,qDAAyD;AACzD,iDAAqD;AACrD,mDAAuD;AACvD,yCAA8C;AAC9C,iDAAsD;AACtD,2DAA+D;AAC/D,2CAAgD;AAChD,yCAAoE;AACpE,qCAA0C;AAC1C,6CAAiD;AACjD,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAA6F;AAC7F,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,+CAAoD;AACpD,qEAAwE;AACxE,mDAAwD;AACxD,iDAAgF;AAChF,mCAAwC;AACxC,6DAAiE;AACjE,+CAAmD;AACnD,mEAAuE;AACvE,+BAAoC;AACpC,mCAAwC;AACxC,+CAMuB;AACvB,2DAA+D;AAC/D,yCAAoF;AACpF,2DAAwD;AACxD,+CAAmD;AACnD,yCAA8C;AAC9C,2CAAgD;AAChD,uEAA0E;AAC1E,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,EAAE,EAAE,IAAA,eAAU,EAAC,OAAO,CAAC;QACvB,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,wDAAwD;QACxD,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,mCAAkB,EAAC,OAAO,CAAC;QACvC,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,IAAI,EAAE,IAAA,mBAAY,EAAC,OAAO,CAAC;QAC3B,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,uCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,8EAA8E;QAC9E,YAAY,EAAE,IAAA,iCAAoB,EAAC,OAAO,CAAC;QAC3C,wEAAwE;QACxE,OAAO,EAAE,IAAA,4BAAe,EAAC,OAAO,CAAC;QACjC,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,OAAO,CAAC;QACvD,8DAA8D;QAC9D,aAAa,EAAE,IAAA,kCAAqB,EAAC,OAAO,CAAC;QAC7C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,eAAe,EAAE,IAAA,wCAAuB,EAAC,OAAO,CAAC;QACjD,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,+EAA+E;QAC/E,iBAAiB,EAAE,IAAA,+CAAyB,EAAC,OAAO,CAAC;QACrD,wGAAwG;QACxG,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,yEAAyE;QACzE,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,mEAAmE;QACnE,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,4GAA4G;QAC5G,YAAY,EAAE,IAAA,mCAAoB,EAAC,OAAO,CAAC;QAC3C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,kFAAkF;QAClF,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,gGAAgG;QAChG,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,+BAAoB,EAAC,OAAO,CAAC;QAC3C,sGAAsG;QACtG,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,yEAAyE;QACzE,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,4CAAoB,EAAC,OAAO,CAAC;QAC3C,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,uGAAuG;QACvG,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,oBAAoB,EAAE,IAAA,qDAA4B,EAAC,OAAO,CAAC;QAC3D,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,iBAAiB,EAAE,IAAA,wCAAyB,EAAC,OAAO,CAAC;QACrD,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,2FAA2F;QAC3F,iBAAiB,EAAE,IAAA,8CAAyB,EAAC,OAAO,CAAC;QACrD,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,6EAA6E;QAC7E,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,mIAAmI;QACnI,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,oFAAoF;QACpF,MAAM,EAAE,IAAA,4BAAc,EAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,IAAI,EAAE,IAAA,0BAAY,EAAC,OAAO,CAAC;QAC3B,2FAA2F;QAC3F,YAAY,EAAE,IAAA,kCAAoB,EAAC,OAAO,CAAC;QAC3C,yFAAyF;QACzF,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,0EAA0E;QAC1E,aAAa,EAAE,IAAA,mCAAqB,EAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,SAAS,EAAE,IAAA,qCAAiB,EAAC,OAAO,CAAC;QACrC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,wEAAwE;QACxE,qBAAqB,EAAE,IAAA,uDAA6B,EAAC,OAAO,CAAC;KAC9D,CAAC;AACJ,CAAC;AAsBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,6BAAyG;AAAhG,yGAAA,kBAAkB,OAAA;AAAE,qGAAA,cAAc,OAAA;AAAE,yGAAA,kBAAkB,OAAA;AAAE,+GAAA,wBAAwB,OAAA;AACzF,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,+CAA6B;AAC7B,0CAAwB;AACxB,uDAAqC;AACrC,gDAA8B;AAC9B,0DAAwC;AACxC,wCAAsB;AACtB,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,8CAA4B;AAC5B,2CAAyB;AACzB,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,wCAAsB;AACtB,mDAAiC;AACjC,oDAAkC;AAClC,gDAA8B;AAC9B,iDAA+B;AAC/B,kDAAgC;AAChC,oDAAkC;AAClC,yCAAuB;AACvB,oDAAkC;AAClC,mDAAiC;AACjC,8CAA4B;AAC5B,oDAAkC;AAClC,4CAA0B;AAC1B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,mDAAiC;AACjC,8CAA4B;AAC5B,mDAAiC;AACjC,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,wDAAsC;AACtC,+CAA6B;AAC7B,0DAAwC;AACxC,4CAA0B;AAC1B,mDAAiC;AACjC,iDAA+B;AAC/B,kDAAgC;AAChC,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,8CAA4B;AAC5B,6CAA2B;AAC3B,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,gDAA8B;AAC9B,gDAA8B;AAC9B,uDAAqC;AACrC,uCAAqB;AACrB,2DAAyC;AACzC,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,sDAAoC;AACpC,gDAA8B;AAC9B,6CAA2B;AAC3B,8CAA4B;AAC5B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,4DAA0C;AAC1C,6CAA2B;AAC3B,gDAA8B;AAC9B,sDAAoC;AACpC,6CAA2B"}

package/dist/client/least-privilege.d.ts

@@ -0,0 +1,95 @@
+import { type RequestFn } from './request';
+export type LeastPrivilegeSubjectType = 'api_key' | 'oauth_client' | 'mcp_gateway' | 'agent';
+export interface LeastPrivilegePermission {
+    /** A scope, `tool:<name>`, `<kind>:<resource>` for an agent grant, or `default_policy:allow`. */
+    permission: string;
+    kind: 'scope' | 'tool' | 'grant' | 'default_policy' | 'wildcard';
+    detail?: string;
+}
+export interface LeastPrivilegeChange {
+    field: string;
+    before: unknown;
+    after: unknown;
+}
+export interface LeastPrivilegeSubject {
+    object: 'least_privilege_subject';
+    subject_type: LeastPrivilegeSubjectType;
+    subject_id: string;
+    name: string | null;
+    window_days: number;
+    /** How many of the window's days the usage data covers. */
+    observed_days: number;
+    /** `low` when the data covers less than the window. */
+    confidence: 'high' | 'low';
+    granted: LeastPrivilegePermission[];
+    used: Array<{
+        permission: string;
+        uses: number;
+        last_used_at: number;
+    }>;
+    unused: Array<LeastPrivilegePermission & {
+        last_used_at: null;
+    }>;
+    /** The narrower grant. It only ever removes permissions. */
+    suggestion: {
+        summary: string;
+        changes: LeastPrivilegeChange[];
+        digest: string;
+    } | null;
+    /** The suggestion can be applied with one call. */
+    applicable: boolean;
+    note?: string;
+}
+export interface LeastPrivilegeReport {
+    object: 'least_privilege_report';
+    generated_at: number;
+    window_days: number;
+    summary: {
+        subjects: number;
+        with_unused: number;
+        unused_permissions: number;
+        applicable_suggestions: number;
+    };
+    data: LeastPrivilegeSubject[];
+}
+export interface LeastPrivilegeReportQuery {
+    days?: number;
+    subject_type?: LeastPrivilegeSubjectType;
+    subject_id?: string;
+    only_unused?: boolean;
+    limit?: number;
+}
+export interface ApplyLeastPrivilegeBody {
+    subject_type: LeastPrivilegeSubjectType;
+    subject_id: string;
+    /** `suggestion.digest` from the report: what you previewed is what is applied. */
+    digest: string;
+    days?: number;
+    /** Required when the report's `confidence` is `low`. */
+    acknowledge_short_window?: boolean;
+}
+/**
+ * The least-privilege report: what each secret key, OAuth client, MCP gateway and
+ * agent holds against what it used, and the narrower grant that would cover it.
+ * Preview an `apply` with `dryRun` first.
+ */
+export declare function leastPrivilegeResource(request: RequestFn): {
+    report(query?: LeastPrivilegeReportQuery): Promise<LeastPrivilegeReport>;
+    /** One credential's report. */
+    get(type: LeastPrivilegeSubjectType, id: string, query?: {
+        days?: number;
+    }): Promise<LeastPrivilegeSubject>;
+    /** The report as CSV, one row per used or unused permission. */
+    exportCsv(query?: LeastPrivilegeReportQuery): Promise<string>;
+    /** Apply a suggestion. `dryRun: true` previews it without changing anything. */
+    apply(body: ApplyLeastPrivilegeBody, options?: {
+        dryRun?: boolean;
+    }): Promise<{
+        object: "least_privilege_change";
+        subject_type: LeastPrivilegeSubjectType;
+        subject_id: string;
+        applied: true;
+        summary: string;
+        changes: LeastPrivilegeChange[];
+    }>;
+};

package/dist/client/least-privilege.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.leastPrivilegeResource = leastPrivilegeResource;
+/**
+ * The least-privilege report: what each secret key, OAuth client, MCP gateway and
+ * agent holds against what it used, and the narrower grant that would cover it.
+ * Preview an `apply` with `dryRun` first.
+ */
+function leastPrivilegeResource(request) {
+    return {
+        report(query = {}) {
+            return request({ method: 'GET', path: '/v1/least_privilege/report', query: { ...query } });
+        },
+        /** One credential's report. */
+        get(type, id, query = {}) {
+            return request({ method: 'GET', path: `/v1/least_privilege/report/${type}/${encodeURIComponent(id)}`, query: { ...query } });
+        },
+        /** The report as CSV, one row per used or unused permission. */
+        exportCsv(query = {}) {
+            return request({ method: 'GET', path: '/v1/least_privilege/report', query: { ...query, format: 'csv' }, raw: true });
+        },
+        /** Apply a suggestion. `dryRun: true` previews it without changing anything. */
+        apply(body, options = {}) {
+            return request({ method: 'POST', path: '/v1/least_privilege/apply', body, ...(options.dryRun ? { query: { dry_run: true } } : {}) });
+        },
+    };
+}
+//# sourceMappingURL=least-privilege.js.map

package/dist/client/least-privilege.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"least-privilege.js","sourceRoot":"","sources":["../../src/client/least-privilege.ts"],"names":[],"mappings":";;AAoEA,wDAyBC;AA9BD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,OAAO;QACL,MAAM,CAAC,QAAmC,EAAE;YAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,+BAA+B;QAC/B,GAAG,CAAC,IAA+B,EAAE,EAAU,EAAE,QAA2B,EAAE;YAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAI,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,gEAAgE;QAChE,SAAS,CAAC,QAAmC,EAAE;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,gFAAgF;QAChF,KAAK,CAAC,IAA6B,EAAE,UAAgC,EAAE;YAQrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvI,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/managed-grants.d.ts

@@ -0,0 +1,52 @@
+import { type RequestFn } from './request';
+/** A grant an OAuth client holds for a user (OpenID Grant Management): the `grant_id` token responses carry. */
+export interface ManagedGrant {
+    object: 'managed_grant';
+    id: string;
+    /** The OAuth client's public `client_id`. */
+    client_id: string | null;
+    user_id: string;
+    organization_id: string | null;
+    status: 'active' | 'revoked';
+    scopes: string[];
+    /** The API (resource server identifier) the grant covers. */
+    resource: string | null;
+    authorization_details: Record<string, unknown>[] | null;
+    /** Bumped by every merge, replace and narrowing. */
+    revision: number;
+    created_at: number;
+    updated_at: number;
+    revoked_at: number | null;
+    revoked_by: 'client' | 'user' | 'admin' | 'system' | null;
+}
+export interface ListManagedGrantsQuery {
+    user_id?: string;
+    /** The OAuth client's public client id. */
+    client_id?: string;
+    status?: 'active' | 'revoked';
+    limit?: number;
+}
+/**
+ * OpenID Grant Management grants. Backends can read, narrow and revoke what each
+ * OAuth client holds for each user. Widening is the user's alone: they authorize
+ * again with `grant_management_action=merge`.
+ */
+export declare function managedGrantsResource(request: RequestFn): {
+    list(query?: ListManagedGrantsQuery): Promise<{
+        object: "list";
+        data: ManagedGrant[];
+    }>;
+    get(id: string): Promise<ManagedGrant>;
+    /** Keep a subset of what the grant holds. A scope or authorization_details entry it does not hold is refused. */
+    narrow(id: string, body: {
+        scopes?: string[];
+        authorization_details?: Record<string, unknown>[];
+    }): Promise<ManagedGrant>;
+    /** Revoke the grant and end every token issued under it. */
+    revoke(id: string): Promise<{
+        object: "managed_grant";
+        id: string;
+        deleted: true;
+        tokens_ended: number;
+    }>;
+};

package/dist/client/managed-grants.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.managedGrantsResource = managedGrantsResource;
+/**
+ * OpenID Grant Management grants. Backends can read, narrow and revoke what each
+ * OAuth client holds for each user. Widening is the user's alone: they authorize
+ * again with `grant_management_action=merge`.
+ */
+function managedGrantsResource(request) {
+    const path = (id) => `/v1/grant_management/grants/${encodeURIComponent(id)}`;
+    return {
+        list(query = {}) {
+            return request({ method: 'GET', path: '/v1/grant_management/grants', query: { ...query } });
+        },
+        get(id) {
+            return request({ method: 'GET', path: path(id) });
+        },
+        /** Keep a subset of what the grant holds. A scope or authorization_details entry it does not hold is refused. */
+        narrow(id, body) {
+            return request({ method: 'PATCH', path: path(id), body });
+        },
+        /** Revoke the grant and end every token issued under it. */
+        revoke(id) {
+            return request({ method: 'DELETE', path: path(id) });
+        },
+    };
+}
+//# sourceMappingURL=managed-grants.js.map

package/dist/client/managed-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-grants.js","sourceRoot":"","sources":["../../src/client/managed-grants.ts"],"names":[],"mappings":";;AAoCA,sDAkBC;AAvBD;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,+BAA+B,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,OAAO;QACL,IAAI,CAAC,QAAgC,EAAE;YACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,iHAAiH;QACjH,MAAM,CAAC,EAAU,EAAE,IAA8E;YAC/F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,4DAA4D;QAC5D,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/mcp-gateways.d.ts

@@ -28,9 +28,63 @@ export interface McpGateway {
     default_policy: 'allow' | 'deny';
     tools: Record<string, McpToolPolicy>;
     enabled: boolean;
+    /** Authorize every tool call through the ABAC policy engine too. */
+    abac: McpGatewayAbac;
     url: string;
     created_at: number;
 }
+/**
+ * Each call is checked as: principal = the agent (type `Agent`: name, tier, owner_user_id,
+ * organization_id, scopes, data), action = the tool name, resource = the tool (type `McpTool`:
+ * gateway_id, gateway_name, tool, args). With `enabled` and no permitting policy, every call is denied.
+ */
+export interface McpGatewayAbac {
+    enabled: boolean;
+    /** The policies consulted; empty means every enabled policy. */
+    policy_ids: string[];
+}
+/** A ceiling across calls: calls, cost units, or calls per window, per agent or per session. */
+export interface McpBudget {
+    object: 'mcp_budget';
+    id: string;
+    gateway_id: string;
+    name: string;
+    /** `agent`: each agent counts apart. `session`: each session (the Mcp-Session-Id an initialize returns). */
+    scope: 'agent' | 'session';
+    agent_id: string | null;
+    tool: string | null;
+    metric: 'calls' | 'cost' | 'rate';
+    limit: number;
+    /** Fixed windows; null never resets. */
+    window_seconds: number | null;
+    cost_per_call: number;
+    /** A dot path to a number in the call arguments that is the cost of the call. */
+    cost_arg: string | null;
+    enabled: boolean;
+    created_at: number;
+}
+export interface CreateMcpBudgetBody {
+    name: string;
+    metric: 'calls' | 'cost' | 'rate';
+    limit: number;
+    scope?: 'agent' | 'session';
+    /** Required for `rate`. */
+    window_seconds?: number | null;
+    agent_id?: string | null;
+    tool?: string | null;
+    cost_per_call?: number;
+    cost_arg?: string | null;
+    enabled?: boolean;
+}
+export interface McpBudgetUsage {
+    object: 'mcp_budget_usage';
+    budget_id: string;
+    agent_id: string;
+    used: number;
+    limit: number;
+    remaining: number;
+    resets_at: number | null;
+}
 export interface CreateMcpGatewayBody {
     name: string;
     upstream_url: string;
@@ -38,6 +92,7 @@ export interface CreateMcpGatewayBody {
     default_policy?: 'allow' | 'deny';
     tools?: Record<string, McpToolPolicy>;
     enabled?: boolean;
+    abac?: Partial<McpGatewayAbac>;
 }
 export type UpdateMcpGatewayBody = Partial<CreateMcpGatewayBody>;
 export declare function mcpGatewaysResource(request: RequestFn): {
@@ -51,4 +106,21 @@ export declare function mcpGatewaysResource(request: RequestFn): {
         id: string;
         deleted: true;
     }>;
+    /** Cross-call budgets of one gateway. */
+    budgets: {
+        list(gatewayId: string): Promise<ListPage<McpBudget>>;
+        create(gatewayId: string, body: CreateMcpBudgetBody): Promise<McpBudget>;
+        get(gatewayId: string, budgetId: string): Promise<McpBudget>;
+        update(gatewayId: string, budgetId: string, body: Partial<CreateMcpBudgetBody>): Promise<McpBudget>;
+        delete(gatewayId: string, budgetId: string): Promise<{
+            object: "mcp_budget";
+            id: string;
+            deleted: true;
+        }>;
+        /** What an agent (and, for a per-session budget, one session) has used of the budget now. */
+        usage(gatewayId: string, budgetId: string, query?: {
+            agent_id?: string;
+            session_id?: string;
+        }): Promise<McpBudgetUsage>;
+    };
 };

package/dist/client/mcp-gateways.js

@@ -20,6 +20,28 @@ function mcpGatewaysResource(request) {
         delete(id) {
             return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(id)}` });
         },
+        /** Cross-call budgets of one gateway. */
+        budgets: {
+            list(gatewayId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets` });
+            },
+            create(gatewayId, body) {
+                return request({ method: 'POST', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets`, body });
+            },
+            get(gatewayId, budgetId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}` });
+            },
+            update(gatewayId, budgetId, body) {
+                return request({ method: 'PATCH', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}`, body });
+            },
+            delete(gatewayId, budgetId) {
+                return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}` });
+            },
+            /** What an agent (and, for a per-session budget, one session) has used of the budget now. */
+            usage(gatewayId, budgetId, query = {}) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}/usage`, query: { ...query } });
+            },
+        },
     };
 }
 //# sourceMappingURL=mcp-gateways.js.map

package/dist/client/mcp-gateways.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-gateways.js","sourceRoot":"","sources":["../../src/client/mcp-gateways.ts"],"names":[],"mappings":";;AAwCA,kDAmBC;AA3DD,uCAAgD;AAwChD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,sCAAsC;QACtC,MAAM,CAAC,EAAU,EAAE,IAA0B;YAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mcp-gateways.js","sourceRoot":"","sources":["../../src/client/mcp-gateways.ts"],"names":[],"mappings":";;AAmGA,kDAyCC;AA5ID,uCAAgD;AAmGhD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,sCAAsC;QACtC,MAAM,CAAC,EAAU,EAAE,IAA0B;YAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,yCAAyC;QACzC,OAAO,EAAE;YACP,IAAI,CAAC,SAAiB;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,IAAyB;gBACjD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,GAAG,CAAC,SAAiB,EAAE,QAAgB;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,QAAgB,EAAE,IAAkC;gBAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjH,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,QAAgB;gBACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,6FAA6F;YAC7F,KAAK,CAAC,SAAiB,EAAE,QAAgB,EAAE,QAAoD,EAAE;gBAC/F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YACpI,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/oauth-clients.d.ts

@@ -61,6 +61,8 @@ export interface OAuthClient extends ProvisioningFields {
     first_party: boolean;
     /** Where the client may send users after an RP-initiated logout. */
     post_logout_redirect_uris: string[];
+    /** UMA 2.0 claims-gathering redirect allowlist (exact match). */
+    claims_redirect_uris: string[];
     /** Back-channel logout endpoint Atlas POSTs a `logout_token` to, or null. */
     backchannel_logout_uri: string | null;
     /** Whether the back-channel `logout_token` must carry `sid`. */
@@ -149,6 +151,8 @@ export interface CreateInitialAccessTokenBody {
  */
 export interface OAuthClientLogoutFields {
     post_logout_redirect_uris?: string[];
+    /** UMA 2.0 claims-gathering redirect allowlist (exact match). */
+    claims_redirect_uris?: string[];
     backchannel_logout_uri?: string | null;
     backchannel_logout_session_required?: boolean;
     frontchannel_logout_uri?: string | null;

package/dist/client/oauth-clients.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-clients.js","sourceRoot":"","sources":["../../src/client/oauth-clients.ts"],"names":[],"mappings":";;AA2TA,oDAyKC;AApeD,6CAAyH;AACzH,uCAAgD;AA0ThD,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,OAAO;QACL,qFAAqF;QACrF,MAAM,CACJ,IAA2C,EAC3C,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,wEAAwE;QACxE,IAAI,CAAC,SAA8C,EAAE;YACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA2B,EAAE,cAAuB;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA2B;YAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD;;;WAGG;QACH,YAAY,CACV,EAAU,EACV,OAAoC,EAAE,EACtC,cAAuB;YAEvB,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;gBAClD,IAAI;gBACJ,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD;;;WAGG;QACH,WAAW,EAAE;YACX,+CAA+C;YAC/C,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,qGAAqG;YACrG,MAAM,CAAC,EAAU,EAAE,IAAiC;gBAClD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;SACF;QACD,mEAAmE;QACnE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;YAEtC,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;gBAC3D,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;aACpB,CAAC,CAAC;QACL,CAAC;QACD,iFAAiF;QACjF,qBAAqB,CAAC,EAAU;YAC9B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,4FAA4F;QAC5F,cAAc,CACZ,EAAU,EACV,IAAgE;YAEhE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,gGAAgG;QAChG,aAAa,EAAE;YACb,GAAG,CAAC,cAAsB;gBACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,CACJ,cAAsB,EACtB,IAA2E;gBAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,CAAC,cAAsB,EAAE,OAAwB,EAAE;gBACvD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;SACF;QACD,oGAAoG;QACpG,eAAe,EAAE;YACf,GAAG,CAAC,gBAAwB;gBAC1B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAuD,EAAE;gBACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAwB,EAAE;gBACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;SACF;QAED,yEAAyE;QACzE,mBAAmB,EAAE;YACnB,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4CAA4C;YAC5C,MAAM,CAAC,OAAqC,EAAE;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mCAAmC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;QAED,6FAA6F;QAC7F,cAAc,EAAE;YACd,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAwB;gBAC/C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,QAAgB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,oBAAoB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;SACF;QAED,6FAA6F;QAC7F,gBAAgB,EAAE;YAChB,OAAO;gBACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,UAAU,CAAC,KAAmG;gBAC5G,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,IAAuD;gBAEvD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,OAAe;gBAEf,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"oauth-clients.js","sourceRoot":"","sources":["../../src/client/oauth-clients.ts"],"names":[],"mappings":";;AA+TA,oDAyKC;AAxeD,6CAAyH;AACzH,uCAAgD;AA8ThD,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,OAAO;QACL,qFAAqF;QACrF,MAAM,CACJ,IAA2C,EAC3C,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,wEAAwE;QACxE,IAAI,CAAC,SAA8C,EAAE;YACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA2B,EAAE,cAAuB;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA2B;YAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD;;;WAGG;QACH,YAAY,CACV,EAAU,EACV,OAAoC,EAAE,EACtC,cAAuB;YAEvB,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;gBAClD,IAAI;gBACJ,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD;;;WAGG;QACH,WAAW,EAAE;YACX,+CAA+C;YAC/C,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,qGAAqG;YACrG,MAAM,CAAC,EAAU,EAAE,IAAiC;gBAClD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;SACF;QACD,mEAAmE;QACnE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;YAEtC,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;gBAC3D,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;aACpB,CAAC,CAAC;QACL,CAAC;QACD,iFAAiF;QACjF,qBAAqB,CAAC,EAAU;YAC9B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,4FAA4F;QAC5F,cAAc,CACZ,EAAU,EACV,IAAgE;YAEhE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,gGAAgG;QAChG,aAAa,EAAE;YACb,GAAG,CAAC,cAAsB;gBACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,CACJ,cAAsB,EACtB,IAA2E;gBAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,CAAC,cAAsB,EAAE,OAAwB,EAAE;gBACvD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;SACF;QACD,oGAAoG;QACpG,eAAe,EAAE;YACf,GAAG,CAAC,gBAAwB;gBAC1B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAuD,EAAE;gBACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAwB,EAAE;gBACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;SACF;QAED,yEAAyE;QACzE,mBAAmB,EAAE;YACnB,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4CAA4C;YAC5C,MAAM,CAAC,OAAqC,EAAE;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mCAAmC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;QAED,6FAA6F;QAC7F,cAAc,EAAE;YACd,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAwB;gBAC/C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,QAAgB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,oBAAoB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;SACF;QAED,6FAA6F;QAC7F,gBAAgB,EAAE;YAChB,OAAO;gBACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,UAAU,CAAC,KAAmG;gBAC5G,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,IAAuD;gBAEvD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,OAAe;gBAEf,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}