@atlasauth/backend 0.25.0 → 0.27.0

package/dist/client/mcp-gateways.d.ts

@@ -22,24 +22,179 @@ export interface McpGateway {
     object: 'mcp_gateway';
     id: string;
     name: string;
-    upstream_url: string;
+    /** Null for a gateway made only of upstreams. */
+    upstream_url: string | null;
     /** The upstream Authorization header is write-only. */
     has_upstream_authorization: boolean;
     default_policy: 'allow' | 'deny';
     tools: Record<string, McpToolPolicy>;
     enabled: boolean;
+    /** Authorize every tool call through the ABAC policy engine too. */
+    abac: McpGatewayAbac;
+    /** A caller sees only the tools of packs assigned to them. */
+    packs_enforced: boolean;
+    /** Upstreams must be approved in the registry. */
+    registry_only: boolean;
+    guard: McpGatewayGuard;
+    user_auth: McpGatewayUserAuth;
+    /** The URL (and RFC 8707 resource) MCP clients connect to. */
+    resource: string;
+    resource_metadata_url: string;
     url: string;
     created_at: number;
 }
+/** Response and argument guardrails of a gateway. */
+export interface McpGatewayGuard {
+    /** Block tool results shaped like prompt injection. */
+    injection: boolean;
+    /** Redacted in results, refused in arguments: email, card, ssn, phone. */
+    pii: Array<'email' | 'card' | 'ssn' | 'phone'>;
+    block_patterns: string[];
+    /** Pin each tool's description and schema; block a tool whose definition changed. */
+    pin_tools: boolean;
+    max_result_chars: number;
+}
+/** End-user OAuth: MCP clients sign people in with Atlas and call with their token. */
+export interface McpGatewayUserAuth {
+    enabled: boolean;
+    allow_agents: boolean;
+    /** Group name (`*` = everyone) to the tool names (a trailing `*` is a prefix) that group may use. */
+    groups: Record<string, string[]>;
+    required_scopes: string[];
+}
+/**
+ * Each call is checked as: principal = the agent (type `Agent`: name, tier, owner_user_id,
+ * organization_id, scopes, data), action = the tool name, resource = the tool (type `McpTool`:
+ * gateway_id, gateway_name, tool, args). With `enabled` and no permitting policy, every call is denied.
+ */
+export interface McpGatewayAbac {
+    enabled: boolean;
+    /** The policies consulted; empty means every enabled policy. */
+    policy_ids: string[];
+}
+/** A ceiling across calls: calls, cost units, or calls per window, per agent or per session. */
+export interface McpBudget {
+    object: 'mcp_budget';
+    id: string;
+    gateway_id: string;
+    name: string;
+    /** `agent`: each agent counts apart. `session`: each session (the Mcp-Session-Id an initialize returns). */
+    scope: 'agent' | 'session';
+    agent_id: string | null;
+    tool: string | null;
+    metric: 'calls' | 'cost' | 'rate';
+    limit: number;
+    /** Fixed windows; null never resets. */
+    window_seconds: number | null;
+    cost_per_call: number;
+    /** A dot path to a number in the call arguments that is the cost of the call. */
+    cost_arg: string | null;
+    enabled: boolean;
+    created_at: number;
+}
+export interface CreateMcpBudgetBody {
+    name: string;
+    metric: 'calls' | 'cost' | 'rate';
+    limit: number;
+    scope?: 'agent' | 'session';
+    /** Required for `rate`. */
+    window_seconds?: number | null;
+    agent_id?: string | null;
+    tool?: string | null;
+    cost_per_call?: number;
+    cost_arg?: string | null;
+    enabled?: boolean;
+}
+export interface McpBudgetUsage {
+    object: 'mcp_budget_usage';
+    budget_id: string;
+    agent_id: string;
+    used: number;
+    limit: number;
+    remaining: number;
+    resets_at: number | null;
+}
 export interface CreateMcpGatewayBody {
     name: string;
-    upstream_url: string;
+    /** Omit for a gateway made only of upstreams. */
+    upstream_url?: string | null;
     upstream_authorization?: string;
     default_policy?: 'allow' | 'deny';
     tools?: Record<string, McpToolPolicy>;
     enabled?: boolean;
+    abac?: Partial<McpGatewayAbac>;
+    packs_enforced?: boolean;
+    registry_only?: boolean;
+    guard?: Partial<Omit<McpGatewayGuard, 'block_patterns'>> & {
+        block_patterns?: string[];
+    };
+    user_auth?: Partial<McpGatewayUserAuth>;
 }
 export type UpdateMcpGatewayBody = Partial<CreateMcpGatewayBody>;
+/** One upstream of a gateway: an MCP server, an OpenAPI-described API, or a connection's managed actions. */
+export interface McpGatewayUpstream {
+    object: 'mcp_gateway_upstream';
+    id: string;
+    gateway_id: string;
+    namespace: string;
+    kind: 'mcp' | 'openapi' | 'actions';
+    url: string | null;
+    auth_kind: 'none' | 'static' | 'connection';
+    has_authorization: boolean;
+    connection_id: string | null;
+    connection_owner: 'org' | 'agent_owner';
+    connect_redirect_url: string | null;
+    action_names: string[];
+    tool_count: number | null;
+    stream: boolean;
+    enabled: boolean;
+    created_at: number;
+}
+export interface McpGatewayUpstreamBody {
+    namespace?: string;
+    kind?: 'mcp' | 'openapi' | 'actions';
+    url?: string;
+    /** openapi: an OpenAPI 3.x document. */
+    openapi?: Record<string, unknown>;
+    auth_kind?: 'none' | 'static' | 'connection';
+    /** Write-only. */
+    authorization?: string;
+    connection_id?: string;
+    connection_owner?: 'org' | 'agent_owner';
+    connect_redirect_url?: string | null;
+    action_names?: string[];
+    stream?: boolean;
+    enabled?: boolean;
+}
+export interface McpToolPack {
+    object: 'mcp_tool_pack';
+    id: string;
+    gateway_id: string;
+    name: string;
+    description: string | null;
+    tools: string[];
+    agent_ids: string[];
+    org_ids: string[];
+    groups: string[];
+    created_at: number;
+}
+export interface McpToolPackBody {
+    name?: string;
+    description?: string | null;
+    tools?: string[];
+    agent_ids?: string[];
+    org_ids?: string[];
+    groups?: string[];
+}
+export interface McpToolPin {
+    object: 'mcp_tool_pin';
+    gateway_id: string;
+    tool: string;
+    status: 'approved' | 'changed';
+    approved_by: string | null;
+    approved_at: number;
+    changed_at: number | null;
+}
 export declare function mcpGatewaysResource(request: RequestFn): {
     list(): Promise<ListPage<McpGateway>>;
     create(body: CreateMcpGatewayBody, idempotencyKey?: string): Promise<McpGateway>;
@@ -51,4 +206,67 @@ export declare function mcpGatewaysResource(request: RequestFn): {
         id: string;
         deleted: true;
     }>;
+    /** Cross-call budgets of one gateway. */
+    budgets: {
+        list(gatewayId: string): Promise<ListPage<McpBudget>>;
+        create(gatewayId: string, body: CreateMcpBudgetBody): Promise<McpBudget>;
+        get(gatewayId: string, budgetId: string): Promise<McpBudget>;
+        update(gatewayId: string, budgetId: string, body: Partial<CreateMcpBudgetBody>): Promise<McpBudget>;
+        delete(gatewayId: string, budgetId: string): Promise<{
+            object: "mcp_budget";
+            id: string;
+            deleted: true;
+        }>;
+        /** What an agent (and, for a per-session budget, one session) has used of the budget now. */
+        usage(gatewayId: string, budgetId: string, query?: {
+            agent_id?: string;
+            session_id?: string;
+        }): Promise<McpBudgetUsage>;
+    };
+    /** MCP servers and APIs behind one gateway, each under a namespace (`<namespace>__<tool>`). */
+    upstreams: {
+        list(gatewayId: string): Promise<ListPage<McpGatewayUpstream>>;
+        create(gatewayId: string, body: McpGatewayUpstreamBody): Promise<McpGatewayUpstream>;
+        get(gatewayId: string, upstreamId: string): Promise<McpGatewayUpstream>;
+        update(gatewayId: string, upstreamId: string, body: McpGatewayUpstreamBody): Promise<McpGatewayUpstream>;
+        delete(gatewayId: string, upstreamId: string): Promise<{
+            object: "mcp_gateway_upstream";
+            id: string;
+            deleted: true;
+        }>;
+        /** Reach the upstream and list the tools it would add. */
+        test(gatewayId: string, upstreamId: string): Promise<{
+            object: "mcp_upstream_test";
+            ok: boolean;
+            tools: string[];
+            error: string | null;
+        }>;
+    };
+    /** Named tool sets assigned to agents, organizations or groups. */
+    packs: {
+        list(gatewayId: string): Promise<ListPage<McpToolPack>>;
+        create(gatewayId: string, body: McpToolPackBody & {
+            name: string;
+        }): Promise<McpToolPack>;
+        get(gatewayId: string, packId: string): Promise<McpToolPack>;
+        update(gatewayId: string, packId: string, body: McpToolPackBody): Promise<McpToolPack>;
+        delete(gatewayId: string, packId: string): Promise<{
+            object: "mcp_tool_pack";
+            id: string;
+            deleted: true;
+        }>;
+    };
+    /** Pinned tool definitions (`guard.pin_tools`): review what changed, approve it. */
+    pins: {
+        list(gatewayId: string, query?: {
+            status?: "approved" | "changed";
+        }): Promise<ListPage<McpToolPin>>;
+        approve(gatewayId: string, tool: string): Promise<McpToolPin>;
+        delete(gatewayId: string, tool: string): Promise<{
+            object: "mcp_tool_pin";
+            gateway_id: string;
+            tool: string;
+            deleted: true;
+        }>;
+    };
 };

package/dist/client/mcp-gateways.js

@@ -20,6 +20,80 @@ function mcpGatewaysResource(request) {
         delete(id) {
             return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(id)}` });
         },
+        /** Cross-call budgets of one gateway. */
+        budgets: {
+            list(gatewayId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets` });
+            },
+            create(gatewayId, body) {
+                return request({ method: 'POST', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets`, body });
+            },
+            get(gatewayId, budgetId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}` });
+            },
+            update(gatewayId, budgetId, body) {
+                return request({ method: 'PATCH', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}`, body });
+            },
+            delete(gatewayId, budgetId) {
+                return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}` });
+            },
+            /** What an agent (and, for a per-session budget, one session) has used of the budget now. */
+            usage(gatewayId, budgetId, query = {}) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/budgets/${(0, request_1.enc)(budgetId)}/usage`, query: { ...query } });
+            },
+        },
+        /** MCP servers and APIs behind one gateway, each under a namespace (`<namespace>__<tool>`). */
+        upstreams: {
+            list(gatewayId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/upstreams` });
+            },
+            create(gatewayId, body) {
+                return request({ method: 'POST', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/upstreams`, body });
+            },
+            get(gatewayId, upstreamId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/upstreams/${(0, request_1.enc)(upstreamId)}` });
+            },
+            update(gatewayId, upstreamId, body) {
+                return request({ method: 'PATCH', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/upstreams/${(0, request_1.enc)(upstreamId)}`, body });
+            },
+            delete(gatewayId, upstreamId) {
+                return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/upstreams/${(0, request_1.enc)(upstreamId)}` });
+            },
+            /** Reach the upstream and list the tools it would add. */
+            test(gatewayId, upstreamId) {
+                return request({ method: 'POST', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/upstreams/${(0, request_1.enc)(upstreamId)}/test` });
+            },
+        },
+        /** Named tool sets assigned to agents, organizations or groups. */
+        packs: {
+            list(gatewayId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/packs` });
+            },
+            create(gatewayId, body) {
+                return request({ method: 'POST', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/packs`, body });
+            },
+            get(gatewayId, packId) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/packs/${(0, request_1.enc)(packId)}` });
+            },
+            update(gatewayId, packId, body) {
+                return request({ method: 'PATCH', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/packs/${(0, request_1.enc)(packId)}`, body });
+            },
+            delete(gatewayId, packId) {
+                return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/packs/${(0, request_1.enc)(packId)}` });
+            },
+        },
+        /** Pinned tool definitions (`guard.pin_tools`): review what changed, approve it. */
+        pins: {
+            list(gatewayId, query = {}) {
+                return request({ method: 'GET', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/pins`, query: { ...query } });
+            },
+            approve(gatewayId, tool) {
+                return request({ method: 'POST', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/pins/${(0, request_1.enc)(tool)}/approve` });
+            },
+            delete(gatewayId, tool) {
+                return request({ method: 'DELETE', path: `/v1/mcp_gateways/${(0, request_1.enc)(gatewayId)}/pins/${(0, request_1.enc)(tool)}` });
+            },
+        },
     };
 }
 //# sourceMappingURL=mcp-gateways.js.map

package/dist/client/mcp-gateways.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-gateways.js","sourceRoot":"","sources":["../../src/client/mcp-gateways.ts"],"names":[],"mappings":";;AAwCA,kDAmBC;AA3DD,uCAAgD;AAwChD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,sCAAsC;QACtC,MAAM,CAAC,EAAU,EAAE,IAA0B;YAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mcp-gateways.js","sourceRoot":"","sources":["../../src/client/mcp-gateways.ts"],"names":[],"mappings":";;AA4MA,kDA6FC;AAzSD,uCAAgD;AA4MhD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,sCAAsC;QACtC,MAAM,CAAC,EAAU,EAAE,IAA0B;YAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,yCAAyC;QACzC,OAAO,EAAE;YACP,IAAI,CAAC,SAAiB;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,IAAyB;gBACjD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,GAAG,CAAC,SAAiB,EAAE,QAAgB;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACzG,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,QAAgB,EAAE,IAAkC;gBAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjH,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,QAAgB;gBACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,6FAA6F;YAC7F,KAAK,CAAC,SAAiB,EAAE,QAAgB,EAAE,QAAoD,EAAE;gBAC/F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YACpI,CAAC;SACF;QACD,+FAA+F;QAC/F,SAAS,EAAE;YACT,IAAI,CAAC,SAAiB;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,IAA4B;gBACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,GAAG,CAAC,SAAiB,EAAE,UAAkB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,UAAkB,EAAE,IAA4B;gBACxE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrH,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,UAAkB;gBAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,0DAA0D;YAC1D,IAAI,CAAC,SAAiB,EAAE,UAAkB;gBACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACnH,CAAC;SACF;QACD,mEAAmE;QACnE,KAAK,EAAE;YACL,IAAI,CAAC,SAAiB;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,IAAwC;gBAChE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,GAAG,CAAC,SAAiB,EAAE,MAAc;gBACnC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,MAAc,EAAE,IAAqB;gBAC7D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,MAAc;gBACtC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YACxG,CAAC;SACF;QACD,oFAAoF;QACpF,IAAI,EAAE;YACJ,IAAI,CAAC,SAAiB,EAAE,QAA6C,EAAE;gBACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1G,CAAC;YACD,OAAO,CAAC,SAAiB,EAAE,IAAY;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,SAAS,IAAA,aAAG,EAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC3G,CAAC;YACD,MAAM,CAAC,SAAiB,EAAE,IAAY;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,SAAS,CAAC,SAAS,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACrG,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/messaging.d.ts

@@ -18,7 +18,7 @@ import { type RequestFn } from './request';
  * stored secret) stays. So a from-address change need not re-enter the API key.
  */
 /** Email transports accepted by `PUT /v1/messaging_providers/email`. */
-export type EmailTransport = 'resend' | 'ses' | 'smtp' | 'brevo' | 'mailgun' | 'webhook';
+export type EmailTransport = 'resend' | 'ses' | 'smtp' | 'brevo' | 'mailgun' | 'smtp2go' | 'webhook';
 /** SMS transports accepted by `PUT /v1/messaging_providers/sms`. */
 export type SmsTransport = 'twilio' | 'vonage' | 'messagebird' | 'plivo' | 'telnyx' | 'sinch' | 'infobip' | 'clicksend' | 'bandwidth' | 'aws_sns' | 'webhook';
 export type MessagingTransport = EmailTransport | SmsTransport;
@@ -46,6 +46,13 @@ export interface MailgunConfig {
     /** Mailgun region. Default `us`. */
     region?: 'us' | 'eu';
 }
+/** SMTP2GO. */
+export interface Smtp2goConfig {
+    /** SMTP2GO API key (`api-…`) with permission to send email. Required on first setup. Write-only: never returned. */
+    api_key: string;
+    /** The data region your account uses. Omit for the regionless host. */
+    region?: 'us' | 'eu' | 'au';
+}
 /** Amazon SES. */
 export interface SesConfig {
     /** AWS region, e.g. `us-east-1`. Required on first setup. */
@@ -166,6 +173,7 @@ export interface MessagingTransportConfigs {
     smtp: SmtpConfig;
     brevo: BrevoConfig;
     mailgun: MailgunConfig;
+    smtp2go: Smtp2goConfig;
     twilio: TwilioConfig;
     vonage: VonageConfig;
     messagebird: MessagebirdConfig;
@@ -185,6 +193,7 @@ export interface MessagingSecretKeys {
     smtp: 'password';
     brevo: 'api_key';
     mailgun: 'api_key';
+    smtp2go: 'api_key';
     twilio: 'auth_token';
     vonage: 'api_secret';
     messagebird: 'access_key';
@@ -424,7 +433,7 @@ export type EnableDevelopmentEmailBody = {
     provider_id: string;
     from_address?: string;
 } | {
-    transport: 'resend' | 'ses' | 'smtp' | 'brevo' | 'mailgun' | 'webhook';
+    transport: 'resend' | 'ses' | 'smtp' | 'brevo' | 'mailgun' | 'smtp2go' | 'webhook';
     config?: Record<string, string>;
     from_address?: string;
 };

package/dist/client/messaging.js.map

@@ -1 +1 @@
-{"version":3,"file":"messaging.js","sourceRoot":"","sources":["../../src/client/messaging.ts"],"names":[],"mappings":";;AAifA,8CA6GC;AA9lBD,uCAAgD;AAifhD,SAAgB,iBAAiB,CAAC,OAAkB;IAIlD,SAAS,QAAQ,CAAC,IAAa;QAC7B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAKD,SAAS,MAAM,CAAC,IAAa;QAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,0EAA0E;QAC1E,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,oFAAoF;QACpF,OAAO,CACL,OAAU;YAEV,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,OAAO,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QACD;;;;WAIG;QACH,QAAQ;QACR;;;;WAIG;QACH,MAAM;QACN;;;;;;WAMG;QACH,aAAa,CACX,OAAwB,EACxB,UAA+B,EAAE;YAEjC,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;gBAC/C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;QACD;;;WAGG;QACH,gBAAgB,EAAE;YAChB,4EAA4E;YAC5E,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,8FAA8F;YAC9F,MAAM,CAAC,IAAgC;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,iDAAiD;YACjD,OAAO;gBACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAC1F,CAAC;SACF;QACD,4FAA4F;QAC5F,YAAY,EAAE;YACZ,uDAAuD;YACvD,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,yEAAyE;YACzE,MAAM,CAAC,IAA4B;gBACjC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,+EAA+E;YAC/E,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD;;;;eAIG;YACH,MAAM,CAAC,UAA+B,EAAE;gBACtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,uCAAuC;oBAC7C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;SACF;QACD,gFAAgF;QAChF,IAAI,CAAC,OAAwB,EAAE,IAAoB;YACjD,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,OAAO,CAAC,OAAO;gBACpD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"messaging.js","sourceRoot":"","sources":["../../src/client/messaging.ts"],"names":[],"mappings":";;AA2fA,8CA6GC;AAxmBD,uCAAgD;AA2fhD,SAAgB,iBAAiB,CAAC,OAAkB;IAIlD,SAAS,QAAQ,CAAC,IAAa;QAC7B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAKD,SAAS,MAAM,CAAC,IAAa;QAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,0EAA0E;QAC1E,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,oFAAoF;QACpF,OAAO,CACL,OAAU;YAEV,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,OAAO,EAAE,EAAE,CAAC,CAAC;QAChF,CAAC;QACD;;;;WAIG;QACH,QAAQ;QACR;;;;WAIG;QACH,MAAM;QACN;;;;;;WAMG;QACH,aAAa,CACX,OAAwB,EACxB,UAA+B,EAAE;YAEjC,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;gBAC/C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;QACD;;;WAGG;QACH,gBAAgB,EAAE;YAChB,4EAA4E;YAC5E,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,8FAA8F;YAC9F,MAAM,CAAC,IAAgC;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,iDAAiD;YACjD,OAAO;gBACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC,CAAC;YAC1F,CAAC;SACF;QACD,4FAA4F;QAC5F,YAAY,EAAE;YACZ,uDAAuD;YACvD,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,yEAAyE;YACzE,MAAM,CAAC,IAA4B;gBACjC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,+EAA+E;YAC/E,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8CAA8C,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD;;;;eAIG;YACH,MAAM,CAAC,UAA+B,EAAE;gBACtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,uCAAuC;oBAC7C,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;SACF;QACD,gFAAgF;QAChF,IAAI,CAAC,OAAwB,EAAE,IAAoB;YACjD,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,2BAA2B,IAAA,aAAG,EAAC,OAAO,CAAC,OAAO;gBACpD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/oauth-clients.d.ts

@@ -61,6 +61,8 @@ export interface OAuthClient extends ProvisioningFields {
     first_party: boolean;
     /** Where the client may send users after an RP-initiated logout. */
     post_logout_redirect_uris: string[];
+    /** UMA 2.0 claims-gathering redirect allowlist (exact match). */
+    claims_redirect_uris: string[];
     /** Back-channel logout endpoint Atlas POSTs a `logout_token` to, or null. */
     backchannel_logout_uri: string | null;
     /** Whether the back-channel `logout_token` must carry `sid`. */
@@ -149,6 +151,8 @@ export interface CreateInitialAccessTokenBody {
  */
 export interface OAuthClientLogoutFields {
     post_logout_redirect_uris?: string[];
+    /** UMA 2.0 claims-gathering redirect allowlist (exact match). */
+    claims_redirect_uris?: string[];
     backchannel_logout_uri?: string | null;
     backchannel_logout_session_required?: boolean;
     frontchannel_logout_uri?: string | null;

package/dist/client/oauth-clients.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-clients.js","sourceRoot":"","sources":["../../src/client/oauth-clients.ts"],"names":[],"mappings":";;AA2TA,oDAyKC;AApeD,6CAAyH;AACzH,uCAAgD;AA0ThD,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,OAAO;QACL,qFAAqF;QACrF,MAAM,CACJ,IAA2C,EAC3C,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,wEAAwE;QACxE,IAAI,CAAC,SAA8C,EAAE;YACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA2B,EAAE,cAAuB;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA2B;YAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD;;;WAGG;QACH,YAAY,CACV,EAAU,EACV,OAAoC,EAAE,EACtC,cAAuB;YAEvB,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;gBAClD,IAAI;gBACJ,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD;;;WAGG;QACH,WAAW,EAAE;YACX,+CAA+C;YAC/C,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,qGAAqG;YACrG,MAAM,CAAC,EAAU,EAAE,IAAiC;gBAClD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;SACF;QACD,mEAAmE;QACnE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;YAEtC,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;gBAC3D,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;aACpB,CAAC,CAAC;QACL,CAAC;QACD,iFAAiF;QACjF,qBAAqB,CAAC,EAAU;YAC9B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,4FAA4F;QAC5F,cAAc,CACZ,EAAU,EACV,IAAgE;YAEhE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,gGAAgG;QAChG,aAAa,EAAE;YACb,GAAG,CAAC,cAAsB;gBACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,CACJ,cAAsB,EACtB,IAA2E;gBAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,CAAC,cAAsB,EAAE,OAAwB,EAAE;gBACvD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;SACF;QACD,oGAAoG;QACpG,eAAe,EAAE;YACf,GAAG,CAAC,gBAAwB;gBAC1B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAuD,EAAE;gBACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAwB,EAAE;gBACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;SACF;QAED,yEAAyE;QACzE,mBAAmB,EAAE;YACnB,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4CAA4C;YAC5C,MAAM,CAAC,OAAqC,EAAE;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mCAAmC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;QAED,6FAA6F;QAC7F,cAAc,EAAE;YACd,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAwB;gBAC/C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,QAAgB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,oBAAoB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;SACF;QAED,6FAA6F;QAC7F,gBAAgB,EAAE;YAChB,OAAO;gBACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,UAAU,CAAC,KAAmG;gBAC5G,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,IAAuD;gBAEvD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,OAAe;gBAEf,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"oauth-clients.js","sourceRoot":"","sources":["../../src/client/oauth-clients.ts"],"names":[],"mappings":";;AA+TA,oDAyKC;AAxeD,6CAAyH;AACzH,uCAAgD;AA8ThD,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,OAAO;QACL,qFAAqF;QACrF,MAAM,CACJ,IAA2C,EAC3C,cAAuB;YAEvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,wEAAwE;QACxE,IAAI,CAAC,SAA8C,EAAE;YACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA2B,EAAE,cAAuB;YACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA2B;YAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD;;;WAGG;QACH,YAAY,CACV,EAAU,EACV,OAAoC,EAAE,EACtC,cAAuB;YAEvB,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;gBAClD,IAAI;gBACJ,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD;;;WAGG;QACH,WAAW,EAAE;YACX,+CAA+C;YAC/C,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,qGAAqG;YACrG,MAAM,CAAC,EAAU,EAAE,IAAiC;gBAClD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/F,CAAC;SACF;QACD,mEAAmE;QACnE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;YAEtC,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;gBAC3D,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;aACpB,CAAC,CAAC;QACL,CAAC;QACD,iFAAiF;QACjF,qBAAqB,CAAC,EAAU;YAC9B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,4FAA4F;QAC5F,cAAc,CACZ,EAAU,EACV,IAAgE;YAEhE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,gGAAgG;QAChG,aAAa,EAAE;YACb,GAAG,CAAC,cAAsB;gBACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,CACJ,cAAsB,EACtB,IAA2E;gBAE3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,CAAC,cAAsB,EAAE,OAAwB,EAAE;gBACvD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,KAAK,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/H,CAAC;SACF;QACD,oGAAoG;QACpG,eAAe,EAAE;YACf,GAAG,CAAC,gBAAwB;gBAC1B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAuD,EAAE;gBACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,CAAC,gBAAwB,EAAE,OAAwB,EAAE;gBACzD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mCAAmC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACrI,CAAC;SACF;QAED,yEAAyE;QACzE,mBAAmB,EAAE;YACnB,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4CAA4C;YAC5C,MAAM,CAAC,OAAqC,EAAE;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mCAAmC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;QAED,6FAA6F;QAC7F,cAAc,EAAE;YACd,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAwB;gBAC/C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,QAAgB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,oBAAoB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,CAAC;SACF;QAED,6FAA6F;QAC7F,gBAAgB,EAAE;YAChB,OAAO;gBACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,UAAU,CAAC,KAAmG;gBAC5G,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC3E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAqC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QAED,MAAM,EAAE;YACN,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,IAAuD;gBAEvD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;oBACjD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,QAAgB,EAChB,OAAe;gBAEf,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBAClE,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/oauth-protocols.d.ts

@@ -0,0 +1,116 @@
+import { type RequestFn } from './request';
+import type { ListPage } from './types';
+export interface RefreshToken {
+    object: 'refresh_token';
+    id: string;
+    client_id: string;
+    user_id: string;
+    organization_id: string | null;
+    status: 'active' | 'revoked' | 'expired' | 'replaced';
+    scope: string;
+    audience: string | null;
+    sender_constrained: boolean;
+    created_at: number;
+    expires_at: number;
+    idle_expires_at: number;
+}
+export interface OpKey {
+    object: 'op_key';
+    kid: string;
+    alg: 'PS256' | 'ES384' | 'EdDSA' | 'RSA-OAEP-256' | 'ECDH-ES';
+    use: 'sig' | 'enc';
+    status: 'current' | 'previous';
+    retires_at: number | null;
+    created_at: number;
+}
+export interface TokenExchangeProfile {
+    object: 'oauth_token_exchange_profile';
+    id: string;
+    client_id: string;
+    name: string;
+    subject_token_type: string;
+    enabled: boolean;
+    created_at: number;
+    updated_at: number;
+}
+export interface Federation {
+    object: 'federation';
+    enabled: boolean;
+    entity_id: string;
+    entity_configuration_url: string;
+    federation_fetch_endpoint: string | null;
+    federation_list_endpoint: string | null;
+    federation_resolve_endpoint: string;
+    federation_registration_endpoint: string | null;
+    authority_hints: string[];
+    trust_anchors: string[];
+    subordinates: string[];
+    automatic_registration: boolean;
+    explicit_registration: boolean;
+}
+export type FederationResolution = {
+    object: 'federation_resolution';
+    entity_id: string;
+    valid: true;
+    trust_anchor: string;
+    entities: string[];
+    expires_at: number;
+    metadata: Record<string, unknown>;
+} | {
+    object: 'federation_resolution';
+    entity_id: string;
+    valid: false;
+    error: string;
+    error_description: string;
+};
+/** Refresh-token search and bulk revoke; the OpenID provider's extra keys; custom token-exchange subject types. */
+export declare function oauthProtocolsResource(request: RequestFn): {
+    refreshTokens: {
+        /** Search the refresh grants OAuth apps hold. Tokens and hashes are never returned. */
+        list(query?: {
+            user_id?: string;
+            client_id?: string;
+            status?: RefreshToken["status"];
+            limit?: number;
+        }): Promise<ListPage<RefreshToken>>;
+        /** Revoke by ids, or every active grant of a user and / or app. A request with no filter is refused. */
+        revoke(body: {
+            ids?: string[];
+            user_id?: string;
+            client_id?: string;
+        }): Promise<{
+            object: "refresh_token_revocation";
+            revoked: number;
+        }>;
+    };
+    federation: {
+        /** This instance's OpenID Federation entity identifier, endpoints and configured anchors. */
+        get(): Promise<Federation>;
+        /** Dry-run: resolve an entity's trust chain against the configured anchors. Registers nothing. */
+        resolve(body: {
+            entity_id: string;
+            trust_anchor?: string;
+        }): Promise<FederationResolution>;
+    };
+    opKeys: {
+        list(): Promise<ListPage<OpKey>>;
+        /** Rotate one algorithm's key; the previous public key stays published for the grace window. */
+        rotate(body: {
+            alg: OpKey["alg"];
+            grace_period_seconds?: number;
+        }): Promise<OpKey>;
+    };
+    tokenExchangeProfiles: {
+        list(clientId: string): Promise<ListPage<TokenExchangeProfile>>;
+        create(clientId: string, body: {
+            name: string;
+            subject_token_type: string;
+            enabled?: boolean;
+        }): Promise<TokenExchangeProfile>;
+        update(clientId: string, profileId: string, body: {
+            name?: string;
+            enabled?: boolean;
+        }): Promise<TokenExchangeProfile>;
+        delete(clientId: string, profileId: string): Promise<void>;
+    };
+};

package/dist/client/oauth-protocols.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.oauthProtocolsResource = oauthProtocolsResource;
+const request_1 = require("./request");
+/** Refresh-token search and bulk revoke; the OpenID provider's extra keys; custom token-exchange subject types. */
+function oauthProtocolsResource(request) {
+    const profiles = (clientId) => `/v1/oauth_clients/${(0, request_1.enc)(clientId)}/token_exchange_profiles`;
+    return {
+        refreshTokens: {
+            /** Search the refresh grants OAuth apps hold. Tokens and hashes are never returned. */
+            list(query = {}) {
+                return request({ method: 'GET', path: '/v1/refresh_tokens', query });
+            },
+            /** Revoke by ids, or every active grant of a user and / or app. A request with no filter is refused. */
+            revoke(body) {
+                return request({ method: 'POST', path: '/v1/refresh_tokens/revoke', body });
+            },
+        },
+        federation: {
+            /** This instance's OpenID Federation entity identifier, endpoints and configured anchors. */
+            get() {
+                return request({ method: 'GET', path: '/v1/federation' });
+            },
+            /** Dry-run: resolve an entity's trust chain against the configured anchors. Registers nothing. */
+            resolve(body) {
+                return request({ method: 'POST', path: '/v1/federation/resolve', body });
+            },
+        },
+        opKeys: {
+            list() {
+                return request({ method: 'GET', path: '/v1/instance/op_keys' });
+            },
+            /** Rotate one algorithm's key; the previous public key stays published for the grace window. */
+            rotate(body) {
+                return request({ method: 'POST', path: '/v1/instance/op_keys/rotate', body });
+            },
+        },
+        tokenExchangeProfiles: {
+            list(clientId) {
+                return request({ method: 'GET', path: profiles(clientId) });
+            },
+            create(clientId, body) {
+                return request({ method: 'POST', path: profiles(clientId), body });
+            },
+            update(clientId, profileId, body) {
+                return request({ method: 'PATCH', path: `${profiles(clientId)}/${(0, request_1.enc)(profileId)}`, body });
+            },
+            delete(clientId, profileId) {
+                return request({ method: 'DELETE', path: `${profiles(clientId)}/${(0, request_1.enc)(profileId)}` });
+            },
+        },
+    };
+}
+//# sourceMappingURL=oauth-protocols.js.map

package/dist/client/oauth-protocols.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-protocols.js","sourceRoot":"","sources":["../../src/client/oauth-protocols.ts"],"names":[],"mappings":";;AA4DA,wDA+CC;AA3GD,uCAAgD;AA2DhD,mHAAmH;AACnH,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,qBAAqB,IAAA,aAAG,EAAC,QAAQ,CAAC,0BAA0B,CAAC;IACpG,OAAO;QACL,aAAa,EAAE;YACb,uFAAuF;YACvF,IAAI,CAAC,QAAmG,EAAE;gBACxG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,wGAAwG;YACxG,MAAM,CAAC,IAA8D;gBACnE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC;SACF;QACD,UAAU,EAAE;YACV,6FAA6F;YAC7F,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,kGAAkG;YAClG,OAAO,CAAC,IAAkD;gBACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,CAAC;SACF;QACD,MAAM,EAAE;YACN,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,gGAAgG;YAChG,MAAM,CAAC,IAA0D;gBAC/D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,CAAC;SACF;QACD,qBAAqB,EAAE;YACrB,IAAI,CAAC,QAAgB;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAqE;gBAC5F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,SAAiB,EAAE,IAA0C;gBACpF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,SAAiB;gBACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACxF,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/oauth-providers.d.ts

@@ -57,7 +57,7 @@ export interface OAuthProvider {
     custom_redirect_uri?: string | null;
     /** The instance's icon override for this provider's button, or null. */
     icon_url?: string | null;
-    /** Wallet providers only (siwe, siws, siwf): the stored verifier settings. */
+    /** Wallet providers only (siwe, siws, siwb, siwf): the stored verifier settings. */
     setting_values?: Record<string, string>;
 }
 export type OAuthProviderMode = 'native' | 'redirect';
@@ -73,14 +73,14 @@ export interface ListOAuthProvidersParams {
  * clears one; an unknown key is refused.
  */
 export interface OAuthWalletSettings {
-    /** siwe / siws / siwf: the expected domain (`hostname[:port]`). */
+    /** siwe / siws / siwb / siwf: the expected domain (`hostname[:port]`). */
     domain?: string | null;
     /** siwe / siwf: allowed chain ids (positive integers, array or comma list). */
     chain_ids?: number[] | string | null;
     /** siwe: an https RPC URL; enables smart-contract (EIP-1271) wallets. */
     rpc_url?: string | null;
-    /** siws: allowed networks. */
-    networks?: Array<'mainnet' | 'devnet' | 'testnet'> | string | null;
+    /** siws: allowed networks. siwb: allowed Bitcoin networks (`mainnet`, `testnet`, `testnet4`, `signet`, `regtest`). */
+    networks?: Array<'mainnet' | 'devnet' | 'testnet' | 'testnet4' | 'signet' | 'regtest'> | string | null;
     /** siwf: an https Optimism RPC URL, required to verify FID ownership. */
     optimism_rpc_url?: string | null;
     /** siwf: the Farcaster ID registry contract (`0x…`). */