@atlasauth/backend 0.5.0 → 0.6.0

package/dist/client/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.collect = exports.paginate = exports.AtlasApiError = exports.DEFAULT_API_URL = void 0;
+exports.collect = exports.paginate = exports.AtlasApiError = exports.createAtlasPlatformClient = exports.AtlasErrorCodes = exports.DEFAULT_API_URL = void 0;
 exports.createAtlasClient = createAtlasClient;
 const request_1 = require("./request");
 const users_1 = require("./users");
@@ -62,6 +62,24 @@ const instance_1 = require("./instance");
 const instance_security_1 = require("./instance-security");
 const tokens_1 = require("./tokens");
 const captcha_1 = require("./captcha");
+const design_1 = require("./design");
+const entitlement_overrides_1 = require("./entitlement-overrides");
+const org_ldap_connections_1 = require("./org-ldap-connections");
+const organization_settings_schema_1 = require("./organization-settings-schema");
+const email_addresses_1 = require("./email-addresses");
+const openfga_1 = require("./openfga");
+const connectors_1 = require("./connectors");
+const notifications_1 = require("./notifications");
+const audit_events_1 = require("./audit-events");
+const activity_1 = require("./activity");
+const pca_1 = require("./pca");
+const mcp_1 = require("./mcp");
+const legacy_auth_1 = require("./legacy-auth");
+const redirect_urls_1 = require("./redirect-urls");
+const session_exchange_apps_1 = require("./session-exchange-apps");
+const tickets_1 = require("./tickets");
+const test_mode_1 = require("./test-mode");
+const diagnostics_1 = require("./diagnostics");
 /**
  * The typed management client for the Atlas Backend API — the secret-key
  * surface, the peer of `@clerk/backend`'s `createClerkClient`.
@@ -73,6 +91,14 @@ const captcha_1 = require("./captcha");
  */
 function createAtlasClient(config) {
     const request = (0, request_1.createRequest)(config);
+    return {
+        ...buildNamespaces(request),
+        withOptions(overrides) {
+            return createAtlasClient({ ...config, ...overrides });
+        },
+    };
+}
+function buildNamespaces(request) {
     return {
         users: (0, users_1.usersResource)(request),
         sessions: (0, sessions_1.sessionsResource)(request),
@@ -124,12 +150,41 @@ function createAtlasClient(config) {
         // §5 "captcha anywhere" — verify any CAPTCHA token against the instance's
         // centrally-configured provider, server-side, with the secret held by Atlas.
         captcha: (0, captcha_1.captchaResource)(request),
+        // Sign-in page design: instance + per-organization overrides, images, catalog.
+        design: (0, design_1.designResource)(request),
+        entitlementOverrides: (0, entitlement_overrides_1.entitlementOverridesResource)(request),
+        orgLdapConnections: (0, org_ldap_connections_1.orgLdapConnectionsResource)(request),
+        organizationSettingsSchema: (0, organization_settings_schema_1.organizationSettingsSchemaResource)(request),
+        emailAddresses: (0, email_addresses_1.emailAddressesResource)(request),
+        // OpenFGA-wire ReBAC stores, models and tuples.
+        openfga: (0, openfga_1.openfgaResource)(request),
+        connectors: (0, connectors_1.connectorsResource)(request),
+        notifications: (0, notifications_1.notificationsResource)(request),
+        // The tenant's own custom audit events (distinct from Atlas's auditLogs).
+        auditEvents: (0, audit_events_1.auditEventsResource)(request),
+        events: (0, activity_1.eventsResource)(request),
+        usage: (0, activity_1.usageResource)(request),
+        configChangelog: (0, activity_1.configChangelogResource)(request),
+        pca: (0, pca_1.pcaResource)(request),
+        mcp: (0, mcp_1.mcpResource)(request),
+        mcpConnector: (0, mcp_1.mcpConnectorResource)(request),
+        legacyAuthConnection: (0, legacy_auth_1.legacyAuthConnectionResource)(request),
+        redirectUrls: (0, redirect_urls_1.redirectUrlsResource)(request),
+        sessionExchangeApps: (0, session_exchange_apps_1.sessionExchangeAppsResource)(request),
+        tickets: (0, tickets_1.ticketsResource)(request),
+        // Development-instance helpers: the paired test instance, test users, testing tokens.
+        testMode: (0, test_mode_1.testModeResource)(request),
+        diagnostics: (0, diagnostics_1.diagnosticsResource)(request),
     };
 }
 var request_2 = require("./request");
 Object.defineProperty(exports, "DEFAULT_API_URL", { enumerable: true, get: function () { return request_2.DEFAULT_API_URL; } });
 var error_1 = require("./error");
-Object.defineProperty(exports, "AtlasApiError", { enumerable: true, get: function () { return error_1.AtlasApiError; } });
+Object.defineProperty(exports, "AtlasErrorCodes", { enumerable: true, get: function () { return error_1.AtlasErrorCodes; } });
+var platform_1 = require("./platform");
+Object.defineProperty(exports, "createAtlasPlatformClient", { enumerable: true, get: function () { return platform_1.createAtlasPlatformClient; } });
+var error_2 = require("./error");
+Object.defineProperty(exports, "AtlasApiError", { enumerable: true, get: function () { return error_2.AtlasApiError; } });
 var paginate_1 = require("./paginate");
 Object.defineProperty(exports, "paginate", { enumerable: true, get: function () { return paginate_1.paginate; } });
 Object.defineProperty(exports, "collect", { enumerable: true, get: function () { return paginate_1.collect; } });
@@ -180,4 +235,23 @@ __exportStar(require("./instance"), exports);
 __exportStar(require("./instance-security"), exports);
 __exportStar(require("./tokens"), exports);
 __exportStar(require("./captcha"), exports);
+__exportStar(require("./design"), exports);
+__exportStar(require("./entitlement-overrides"), exports);
+__exportStar(require("./org-ldap-connections"), exports);
+__exportStar(require("./organization-settings-schema"), exports);
+__exportStar(require("./email-addresses"), exports);
+__exportStar(require("./openfga"), exports);
+__exportStar(require("./connectors"), exports);
+__exportStar(require("./notifications"), exports);
+__exportStar(require("./audit-events"), exports);
+__exportStar(require("./activity"), exports);
+__exportStar(require("./pca"), exports);
+__exportStar(require("./mcp"), exports);
+__exportStar(require("./legacy-auth"), exports);
+__exportStar(require("./redirect-urls"), exports);
+__exportStar(require("./session-exchange-apps"), exports);
+__exportStar(require("./tickets"), exports);
+__exportStar(require("./test-mode"), exports);
+__exportStar(require("./diagnostics"), exports);
+__exportStar(require("./platform"), exports);
 //# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAwDA,8CAuDC;AA/GD,uCAAkE;AAClE,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAAwD;AACxD,+CAAmD;AACnD,iDAAqD;AACrD,+CAAmD;AACnD,+CAAmD;AACnD,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,mEAAsE;AACtE,qDAAyD;AACzD,mDAAuD;AACvD,yCAA8C;AAC9C,2DAA+D;AAC/D,qCAA0C;AAC1C,uCAA4C;AAE5C;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IAEtC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;KAClC,CAAC;AACJ,CAAC;AAMD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,0DAAwC;AACxC,mDAAiC;AACjC,kDAAgC;AAChC,6CAA2B;AAC3B,sDAAoC;AACpC,2CAAyB;AACzB,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA2EA,8CAQC;AAnFD,uCAA6F;AAC7F,mCAAwC;AACxC,yCAA8C;AAC9C,mDAAwD;AACxD,mCAA6D;AAC7D,mDAAuD;AACvD,yDAA6D;AAC7D,uDAA2D;AAC3D,+CAAmD;AACnD,uCAA4C;AAC5C,yCAA8C;AAC9C,iDAAsE;AACtE,2DAA+D;AAC/D,iDAAqD;AACrD,+CAAoD;AACpD,yCAA8C;AAC9C,qDAAwD;AACxD,6CAAiD;AACjD,mDAAuD;AACvD,yCAA6C;AAC7C,yCAA8C;AAC9C,uDAA2D;AAC3D,qDAAyD;AACzD,2DAA+D;AAC/D,+BAAoC;AACpC,6CAAuD;AACvD,qDAAwD;AACxD,+CAAmD;AACnD,iDAAqD;AACrD,+CAAmD;AACnD,+CAAmD;AACnD,yCAA8C;AAC9C,uDAA2D;AAC3D,mDAAuD;AACvD,mDAAwD;AACxD,uCAA4C;AAC5C,mDAAkD;AAClD,2CAAgD;AAChD,mDAAuD;AACvD,mEAAsE;AACtE,qDAAyD;AACzD,mDAAuD;AACvD,yCAA8C;AAC9C,2DAA+D;AAC/D,qCAA0C;AAC1C,uCAA4C;AAC5C,qCAA0C;AAC1C,mEAAuE;AACvE,iEAAoE;AACpE,iFAAoF;AACpF,uDAA2D;AAC3D,uCAA4C;AAC5C,6CAAkD;AAClD,mDAAwD;AACxD,iDAAqD;AACrD,yCAAoF;AACpF,+BAAoC;AACpC,+BAA0D;AAC1D,+CAA6D;AAC7D,mDAAuD;AACvD,mEAAsE;AACtE,uCAA4C;AAC5C,2CAA+C;AAC/C,+CAAoD;AAGpD;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,IAAA,uBAAa,EAAC,MAAM,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3B,WAAW,CAAC,SAA+B;YACzC,OAAO,iBAAiB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkB;IACzC,OAAO;QACL,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,KAAK,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC;QAC7B,WAAW,EAAE,IAAA,2BAAmB,EAAC,OAAO,CAAC;QACzC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,eAAe,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC;QACjD,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,SAAS,EAAE,IAAA,gCAAiB,EAAC,OAAO,CAAC;QACrC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;QACzC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,SAAS,EAAE,IAAA,8BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,OAAO,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QACjC,8EAA8E;QAC9E,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,eAAe,EAAE,IAAA,oCAAuB,EAAC,OAAO,CAAC;QACjD,YAAY,EAAE,IAAA,qCAAoB,EAAC,OAAO,CAAC;QAC3C,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,UAAU,EAAE,IAAA,gCAAkB,EAAC,OAAO,CAAC;QACvC,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,OAAO,EAAE,IAAA,+BAAe,EAAC,OAAO,CAAC;QACjC,SAAS,EAAE,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACrC,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,aAAa,EAAE,IAAA,sCAAqB,EAAC,OAAO,CAAC;QAC7C,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,QAAQ,EAAE,IAAA,2BAAgB,EAAC,OAAO,CAAC;QACnC,gBAAgB,EAAE,IAAA,4CAAwB,EAAC,OAAO,CAAC;QACnD,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,0EAA0E;QAC1E,6EAA6E;QAC7E,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,+EAA+E;QAC/E,MAAM,EAAE,IAAA,uBAAc,EAAC,OAAO,CAAC;QAC/B,oBAAoB,EAAE,IAAA,oDAA4B,EAAC,OAAO,CAAC;QAC3D,kBAAkB,EAAE,IAAA,iDAA0B,EAAC,OAAO,CAAC;QACvD,0BAA0B,EAAE,IAAA,iEAAkC,EAAC,OAAO,CAAC;QACvE,cAAc,EAAE,IAAA,wCAAsB,EAAC,OAAO,CAAC;QAC/C,gDAAgD;QAChD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,UAAU,EAAE,IAAA,+BAAkB,EAAC,OAAO,CAAC;QACvC,aAAa,EAAE,IAAA,qCAAqB,EAAC,OAAO,CAAC;QAC7C,0EAA0E;QAC1E,WAAW,EAAE,IAAA,kCAAmB,EAAC,OAAO,CAAC;QACzC,MAAM,EAAE,IAAA,yBAAc,EAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAA,wBAAa,EAAC,OAAO,CAAC;QAC7B,eAAe,EAAE,IAAA,kCAAuB,EAAC,OAAO,CAAC;QACjD,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,GAAG,EAAE,IAAA,iBAAW,EAAC,OAAO,CAAC;QACzB,YAAY,EAAE,IAAA,0BAAoB,EAAC,OAAO,CAAC;QAC3C,oBAAoB,EAAE,IAAA,0CAA4B,EAAC,OAAO,CAAC;QAC3D,YAAY,EAAE,IAAA,oCAAoB,EAAC,OAAO,CAAC;QAC3C,mBAAmB,EAAE,IAAA,mDAA2B,EAAC,OAAO,CAAC;QACzD,OAAO,EAAE,IAAA,yBAAe,EAAC,OAAO,CAAC;QACjC,sFAAsF;QACtF,QAAQ,EAAE,IAAA,4BAAgB,EAAC,OAAO,CAAC;QACnC,WAAW,EAAE,IAAA,iCAAmB,EAAC,OAAO,CAAC;KAC1C,CAAC;AACJ,CAAC;AAoBD,qCAA4C;AAAnC,0GAAA,eAAe,OAAA;AACxB,iCAA+D;AAAtD,wGAAA,eAAe,OAAA;AACxB,uCAAuD;AAA9C,qHAAA,yBAAyB,OAAA;AAElC,iCAA6D;AAApD,sGAAA,aAAa,OAAA;AACtB,uCAA+C;AAAtC,oGAAA,QAAQ,OAAA;AAAE,mGAAA,OAAO,OAAA;AAE1B,oEAAoE;AACpE,0CAAwB;AACxB,0CAAwB;AACxB,6CAA2B;AAC3B,kDAAgC;AAChC,0CAAwB;AACxB,kDAAgC;AAChC,qDAAmC;AACnC,oDAAkC;AAClC,gDAA8B;AAC9B,4CAA0B;AAC1B,6CAA2B;AAC3B,iDAA+B;AAC/B,sDAAoC;AACpC,iDAA+B;AAC/B,gDAA8B;AAC9B,6CAA2B;AAC3B,mDAAiC;AACjC,+CAA6B;AAC7B,kDAAgC;AAChC,6CAA2B;AAC3B,6CAA2B;AAC3B,oDAAkC;AAClC,mDAAiC;AACjC,sDAAoC;AACpC,wCAAsB;AACtB,+CAA6B;AAC7B,mDAAiC;AACjC,gDAA8B;AAC9B,iDAA+B;AAC/B,gDAA8B;AAC9B,gDAA8B;AAC9B,6CAA2B;AAC3B,oDAAkC;AAClC,kDAAgC;AAChC,kDAAgC;AAChC,4CAA0B;AAC1B,kDAAgC;AAChC,8CAA4B;AAC5B,kDAAgC;AAChC,0DAAwC;AACxC,mDAAiC;AACjC,kDAAgC;AAChC,6CAA2B;AAC3B,sDAAoC;AACpC,2CAAyB;AACzB,4CAA0B;AAC1B,2CAAyB;AACzB,0DAAwC;AACxC,yDAAuC;AACvC,iEAA+C;AAC/C,oDAAkC;AAClC,4CAA0B;AAC1B,+CAA6B;AAC7B,kDAAgC;AAChC,iDAA+B;AAC/B,6CAA2B;AAC3B,wCAAsB;AACtB,wCAAsB;AACtB,gDAA8B;AAC9B,kDAAgC;AAChC,0DAAwC;AACxC,4CAA0B;AAC1B,8CAA4B;AAC5B,gDAA8B;AAC9B,6CAA2B"}

package/dist/client/instance.d.ts

@@ -28,7 +28,61 @@ export interface InstanceUpdateResult {
     allowed_origins: string[];
     auth_config: Metadata;
 }
+/** One problem (or note) the setup check found. */
+export interface PreflightFinding {
+    severity: 'error' | 'warning' | 'info';
+    /** Stable snake_case identifier, e.g. `oauth_provider_missing_credentials`. */
+    code: string;
+    /** What is wrong, in a plain sentence. */
+    message: string;
+    /** What to do about it, in a plain sentence. */
+    fix: string;
+    /** Ids of what the finding is about (provider, client_id, domain, …). */
+    subject?: Record<string, string>;
+}
+export interface PreflightReport {
+    object: 'preflight';
+    /** True when there are no error-severity findings. */
+    ok: boolean;
+    /** When the check ran (epoch ms). */
+    checked_at: number;
+    /** Ordered error, then warning, then info. */
+    findings: PreflightFinding[];
+}
+/** The cookie-consent script injected into the hosted sign-in, sign-up and account pages. */
+export interface CookieConsent {
+    object: 'cookie_consent';
+    enabled: boolean;
+    /** The consent script URL (https). */
+    script_url?: string;
+    script_id?: string | null;
+    site_id?: string | null;
+    blocking_mode?: string | null;
+    extra_origins?: string[];
+}
+export interface SetCookieConsentBody {
+    /** Your consent script URL. Must be https; its origin is added to the page CSP. */
+    script_url: string;
+    /** The `<script id>` some consent tools need. */
+    script_id?: string | null;
+    /** Your consent site id (sent as `data-cbid`). */
+    site_id?: string | null;
+    /** The prior-blocking mode, e.g. `"auto"` (sent as `data-blockingmode`). */
+    blocking_mode?: string | null;
+    /** Other https URLs the script loads from or calls; each origin is added to the CSP. */
+    extra_origins?: string[];
+}
 export declare function instanceResource(request: RequestFn): {
     get(): Promise<Instance>;
     update(body: UpdateInstanceBody): Promise<InstanceUpdateResult>;
+    /** Check your setup in one call: configuration the server can see is broken or risky. */
+    preflight(): Promise<PreflightReport>;
+    /** The cookie-consent script on the hosted pages (any provider). */
+    cookieConsent: {
+        get(): Promise<CookieConsent>;
+        /** Replaces the whole setting. */
+        set(body: SetCookieConsentBody): Promise<CookieConsent>;
+        /** Turn it off: no script is injected and the CSP goes back to the default. */
+        delete(): Promise<CookieConsent>;
+    };
 };

package/dist/client/instance.js

@@ -9,6 +9,24 @@ function instanceResource(request) {
         update(body) {
             return request({ method: 'PATCH', path: '/v1/instance', body });
         },
+        /** Check your setup in one call: configuration the server can see is broken or risky. */
+        preflight() {
+            return request({ method: 'GET', path: '/v1/instance/preflight' });
+        },
+        /** The cookie-consent script on the hosted pages (any provider). */
+        cookieConsent: {
+            get() {
+                return request({ method: 'GET', path: '/v1/instance/cookie_consent' });
+            },
+            /** Replaces the whole setting. */
+            set(body) {
+                return request({ method: 'PUT', path: '/v1/instance/cookie_consent', body });
+            },
+            /** Turn it off: no script is injected and the CSP goes back to the default. */
+            delete() {
+                return request({ method: 'DELETE', path: '/v1/instance/cookie_consent' });
+            },
+        },
     };
 }
 //# sourceMappingURL=instance.js.map

package/dist/client/instance.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance.js","sourceRoot":"","sources":["../../src/client/instance.ts"],"names":[],"mappings":";;AAmCA,4CASC;AATD,SAAgB,gBAAgB,CAAC,OAAkB;IACjD,OAAO;QACL,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,IAAwB;YAC7B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"instance.js","sourceRoot":"","sources":["../../src/client/instance.ts"],"names":[],"mappings":";;AAmFA,4CA2BC;AA3BD,SAAgB,gBAAgB,CAAC,OAAkB;IACjD,OAAO;QACL,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,CAAC,IAAwB;YAC7B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,yFAAyF;QACzF,SAAS;YACP,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,oEAAoE;QACpE,aAAa,EAAE;YACb,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,kCAAkC;YAClC,GAAG,CAAC,IAA0B;gBAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,+EAA+E;YAC/E,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC5E,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/invitations.d.ts

@@ -14,7 +14,21 @@ export interface CreateInvitationBody {
     email_address: string;
     public_metadata?: Metadata;
 }
+/** A per-entry failure from a bulk create; `index` points into the request array. */
+export interface BulkInvitationError {
+    index: number;
+    email_address: string | null;
+    code: string;
+    message: string;
+}
+export interface BulkInvitationsResult {
+    object: 'list';
+    data: Invitation[];
+    errors: BulkInvitationError[];
+}
 export declare function invitationsResource(request: RequestFn): {
+    /** Create up to 100 invitations; each entry is validated and de-duplicated on its own. */
+    bulkCreate(invitations: CreateInvitationBody[], idempotencyKey?: string): Promise<BulkInvitationsResult>;
     list(params?: CursorParams): Promise<CursorPage<Invitation>>;
     create(body: CreateInvitationBody, idempotencyKey?: string): Promise<Invitation>;
     revoke(id: string): Promise<Invitation>;

package/dist/client/invitations.js

@@ -4,6 +4,15 @@ exports.invitationsResource = invitationsResource;
 const request_1 = require("./request");
 function invitationsResource(request) {
     return {
+        /** Create up to 100 invitations; each entry is validated and de-duplicated on its own. */
+        bulkCreate(invitations, idempotencyKey) {
+            return request({
+                method: 'POST',
+                path: '/v1/invitations/bulk',
+                body: { invitations },
+                idempotencyKey,
+            });
+        },
         list(params = {}) {
             return request({ method: 'GET', path: '/v1/invitations', query: { ...params } });
         },

package/dist/client/invitations.js.map

@@ -1 +1 @@
-{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../src/client/invitations.ts"],"names":[],"mappings":";;AAmBA,kDAYC;AA/BD,uCAAgD;AAmBhD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI,CAAC,SAAuB,EAAE;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"invitations.js","sourceRoot":"","sources":["../../src/client/invitations.ts"],"names":[],"mappings":";;AAiCA,kDAwBC;AAzDD,uCAAgD;AAiChD,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,0FAA0F;QAC1F,UAAU,CACR,WAAmC,EACnC,cAAuB;YAEvB,OAAO,OAAO,CAAC;gBACb,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,sBAAsB;gBAC5B,IAAI,EAAE,EAAE,WAAW,EAAE;gBACrB,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,SAAuB,EAAE;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,CAAC,IAA0B,EAAE,cAAuB;YACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/legacy-auth.d.ts

@@ -0,0 +1,45 @@
+import type { RequestFn } from './request';
+/**
+ * The instance's lazy-migration connection: on sign-in, Atlas can verify a
+ * password against your legacy user store and (optionally) import the user.
+ * The signing secret is never returned — only `has_signing_secret`.
+ */
+export interface LegacyAuthConnection {
+    object: 'legacy_auth_connection';
+    id?: string;
+    enabled?: boolean;
+    verify_url?: string;
+    has_signing_secret?: boolean;
+    import_on_login?: boolean;
+    timeout_ms?: number;
+    strategy?: string;
+    /** Epoch ms. */
+    created_at?: number;
+    /** Epoch ms. */
+    updated_at?: number;
+    /** Present and `false` when no connection exists yet. */
+    configured?: boolean;
+}
+/** `PUT /v1/legacy_auth_connection` — create or replace the connection. */
+export interface PutLegacyAuthConnectionBody {
+    /** Your HTTPS verify endpoint (public https on a production instance). */
+    verify_url: string;
+    /** Whether sign-in consults the legacy store. Default false. */
+    enabled?: boolean;
+    /** HMAC signing secret. Write-only; required on create, omit on edit to keep the stored one. */
+    signing_secret?: string;
+    /** Create the user locally on a successful verify. Default true. */
+    import_on_login?: boolean;
+    /** Fail-closed call budget, 1–30000 ms. Default 5000. */
+    timeout_ms?: number;
+    strategy?: 'password';
+}
+export declare function legacyAuthConnectionResource(request: RequestFn): {
+    /** Returns `{ configured: false }` when none exists. */
+    get(): Promise<LegacyAuthConnection>;
+    set(body: PutLegacyAuthConnectionBody, idempotencyKey?: string): Promise<LegacyAuthConnection>;
+    delete(): Promise<{
+        object: "legacy_auth_connection";
+        deleted: boolean;
+    }>;
+};

package/dist/client/legacy-auth.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.legacyAuthConnectionResource = legacyAuthConnectionResource;
+function legacyAuthConnectionResource(request) {
+    return {
+        /** Returns `{ configured: false }` when none exists. */
+        get() {
+            return request({ method: 'GET', path: '/v1/legacy_auth_connection' });
+        },
+        set(body, idempotencyKey) {
+            return request({ method: 'PUT', path: '/v1/legacy_auth_connection', body, idempotencyKey });
+        },
+        delete() {
+            return request({ method: 'DELETE', path: '/v1/legacy_auth_connection' });
+        },
+    };
+}
+//# sourceMappingURL=legacy-auth.js.map

package/dist/client/legacy-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-auth.js","sourceRoot":"","sources":["../../src/client/legacy-auth.ts"],"names":[],"mappings":";;AAuCA,oEAaC;AAbD,SAAgB,4BAA4B,CAAC,OAAkB;IAC7D,OAAO;QACL,wDAAwD;QACxD,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,GAAG,CAAC,IAAiC,EAAE,cAAuB;YAC5D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM;YACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QAC3E,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/mcp.d.ts

@@ -0,0 +1,86 @@
+import type { RequestFn } from './request';
+/** `GET /v1/mcp` — the MCP server descriptor and the tools this key may call. */
+export interface McpServerDescriptor {
+    object: 'mcp_server';
+    protocol_version: string;
+    server: {
+        name?: string;
+        version?: string;
+    };
+    capabilities: Record<string, unknown>;
+    /** MCP tool definitions (name, description, inputSchema, annotations…). */
+    tools: Array<Record<string, unknown>>;
+    rate_limit?: unknown;
+    recommended_agent_scopes?: string[];
+}
+/** The JSON-RPC 2.0 envelope `POST /v1/mcp` answers with. */
+export interface McpJsonRpcResponse<R = Record<string, unknown>> {
+    jsonrpc: '2.0';
+    id: string | number | null;
+    result?: R;
+    error?: {
+        code: number;
+        message: string;
+    };
+}
+/** A `tools/call` result. A refused call is a result with `isError: true`, not a JSON-RPC error. */
+export interface McpToolCallResult {
+    content: Array<{
+        type: string;
+        text?: string;
+        [key: string]: unknown;
+    }>;
+    isError?: boolean;
+    [key: string]: unknown;
+}
+/** The instance's remote MCP connector (OAuth-protected MCP for end users). */
+export interface McpConnector {
+    object: 'mcp_connector';
+    enabled: boolean;
+    name: string | null;
+    exposed_scopes: string[];
+    dynamic_registration: boolean;
+    allowed_redirect_hosts: string[];
+    /** The RFC 9728 protected-resource metadata URL. */
+    discovery_url: string | null;
+    /** The RFC 8707 resource identifier (token audience). */
+    resource: string | null;
+    /** Whether the MCP resource server has been provisioned. */
+    resource_server_exists: boolean;
+}
+/** User-scoped tool groups the connector can expose. */
+export type McpConnectorScope = 'profile' | 'email' | 'mfa' | 'sessions' | 'organizations';
+/** `PUT /v1/mcp_connector` — only the fields you send change. */
+export interface UpdateMcpConnectorBody {
+    /** Master switch. Enabling provisions the MCP resource server and needs a frontend API host. */
+    enabled?: boolean;
+    /** Display name on the consent screen (max 80 chars). */
+    name?: string;
+    exposed_scopes?: McpConnectorScope[];
+    /** Let MCP clients self-register an OAuth client (RFC 7591). */
+    dynamic_registration?: boolean;
+    /** Extra redirect-URI hostnames allowed for dynamic registration. */
+    allowed_redirect_hosts?: string[];
+}
+export declare function mcpResource(request: RequestFn): {
+    /** The server descriptor and the tools this secret key may call. */
+    describe(): Promise<McpServerDescriptor>;
+    /**
+     * Send one JSON-RPC call (`initialize`, `tools/list`, `tools/call`, `ping`).
+     * A JSON-RPC error comes back in `error`, not as a thrown exception.
+     */
+    rpc: <R = Record<string, unknown>>(method: string, params?: unknown, id?: string | number) => Promise<McpJsonRpcResponse<R>>;
+    /** `tools/list` — the tools this key may call. */
+    listTools(): Promise<McpJsonRpcResponse<{
+        tools: Array<Record<string, unknown>>;
+    }>>;
+    /** `tools/call` — run one tool with its arguments. */
+    callTool(name: string, args?: Record<string, unknown>): Promise<McpJsonRpcResponse<McpToolCallResult>>;
+};
+export declare function mcpConnectorResource(request: RequestFn): {
+    get(): Promise<McpConnector>;
+    /** Configure the connector. Only the fields you send change; an unknown scope is a 422. */
+    update(body: UpdateMcpConnectorBody, idempotencyKey?: string): Promise<McpConnector>;
+    /** Disable it. Preferences are kept for a later re-enable; issued tokens stop working at once. */
+    disable(): Promise<McpConnector>;
+};

package/dist/client/mcp.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpResource = mcpResource;
+exports.mcpConnectorResource = mcpConnectorResource;
+function mcpResource(request) {
+    let nextId = 1;
+    const rpc = (method, params, id) => request({
+        method: 'POST',
+        path: '/v1/mcp',
+        body: { jsonrpc: '2.0', id: id ?? nextId++, method, ...(params !== undefined ? { params } : {}) },
+    });
+    return {
+        /** The server descriptor and the tools this secret key may call. */
+        describe() {
+            return request({ method: 'GET', path: '/v1/mcp' });
+        },
+        /**
+         * Send one JSON-RPC call (`initialize`, `tools/list`, `tools/call`, `ping`).
+         * A JSON-RPC error comes back in `error`, not as a thrown exception.
+         */
+        rpc,
+        /** `tools/list` — the tools this key may call. */
+        listTools() {
+            return rpc('tools/list');
+        },
+        /** `tools/call` — run one tool with its arguments. */
+        callTool(name, args = {}) {
+            return rpc('tools/call', { name, arguments: args });
+        },
+    };
+}
+function mcpConnectorResource(request) {
+    return {
+        get() {
+            return request({ method: 'GET', path: '/v1/mcp_connector' });
+        },
+        /** Configure the connector. Only the fields you send change; an unknown scope is a 422. */
+        update(body, idempotencyKey) {
+            return request({ method: 'PUT', path: '/v1/mcp_connector', body, idempotencyKey });
+        },
+        /** Disable it. Preferences are kept for a later re-enable; issued tokens stop working at once. */
+        disable() {
+            return request({ method: 'DELETE', path: '/v1/mcp_connector' });
+        },
+    };
+}
+//# sourceMappingURL=mcp.js.map

package/dist/client/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/client/mcp.ts"],"names":[],"mappings":";;AA6DA,kCAmCC;AAED,oDAcC;AAnDD,SAAgB,WAAW,CAAC,OAAkB;IAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,GAAG,GAAG,CACV,MAAc,EACd,MAAgB,EAChB,EAAoB,EACY,EAAE,CAClC,OAAO,CAAC;QACN,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAClG,CAAC,CAAC;IAEL,OAAO;QACL,oEAAoE;QACpE,QAAQ;YACN,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACrD,CAAC;QACD;;;WAGG;QACH,GAAG;QACH,kDAAkD;QAClD,SAAS;YACP,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3B,CAAC;QACD,sDAAsD;QACtD,QAAQ,CACN,IAAY,EACZ,OAAgC,EAAE;YAElC,OAAO,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,OAAO;QACL,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,2FAA2F;QAC3F,MAAM,CAAC,IAA4B,EAAE,cAAuB;YAC1D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,kGAAkG;QAClG,OAAO;YACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAClE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/notifications.d.ts

@@ -0,0 +1,92 @@
+import { type RequestFn } from './request';
+/** Built-in notification templates `send` falls back to when no tenant template has the name. */
+export type BuiltInNotificationTemplate = 'new_device' | 'unattended_access' | 'password_changed' | 'mfa_changed';
+export interface SendNotificationBody {
+    /** The end-user to notify. */
+    user_id: string;
+    /** A template name you defined, or a built-in one. */
+    template: BuiltInNotificationTemplate | (string & {});
+    /** Variables interpolated into the template (e.g. device, location, when, url). */
+    data?: Record<string, string>;
+}
+/** `suppressed` when the user opted out of the template's (optional) category. */
+export interface SentNotification {
+    object: 'notification';
+    id: string;
+    status: 'sent' | 'suppressed';
+}
+/** A category you defined; users can turn it off on their preference page. */
+export interface NotificationCategory {
+    object: 'notification_category';
+    id: string;
+    /** The key templates and preferences reference. */
+    key: string;
+    /** The user-facing label on the preference toggle. */
+    label: string;
+    /** Always true for a tenant-defined category. */
+    optional: boolean;
+    created_at: number;
+}
+export interface NotificationTemplate {
+    object: 'notification_template';
+    id: string;
+    /** The `template` a send passes. */
+    name: string;
+    subject: string;
+    /** Body with `{{variables}}` interpolated at send. */
+    body: string;
+    /** The category whose per-user preference gates this template. */
+    category: string;
+    created_at: number;
+    updated_at: number;
+}
+export interface UpdateNotificationTemplateBody {
+    subject: string;
+    /** Email body with `{{variables}}`. */
+    body: string;
+    /** A built-in category (new_device, unattended_access, credential_change) or one you defined. */
+    category: string;
+}
+export interface CreateNotificationTemplateBody extends UpdateNotificationTemplateBody {
+    /** Unique per instance. */
+    name: string;
+}
+export declare function notificationsResource(request: RequestFn): {
+    /** Send a templated, instance-branded security email, honouring the user's preferences. */
+    send(body: SendNotificationBody, idempotencyKey?: string): Promise<SentNotification>;
+    categories: {
+        list(): Promise<{
+            object: "list";
+            data: NotificationCategory[];
+        }>;
+        /** A duplicate or built-in key is a 409. */
+        create(body: {
+            key: string;
+            label: string;
+        }): Promise<NotificationCategory>;
+        update(key: string, body: {
+            label: string;
+        }): Promise<NotificationCategory>;
+        /** Refused with a 409 while a template still uses it. */
+        delete(key: string): Promise<{
+            object: "notification_category";
+            key: string;
+            deleted: boolean;
+        }>;
+    };
+    templates: {
+        list(): Promise<{
+            object: "list";
+            data: NotificationTemplate[];
+        }>;
+        /** A duplicate name is a 409. */
+        create(body: CreateNotificationTemplateBody): Promise<NotificationTemplate>;
+        get(name: string): Promise<NotificationTemplate>;
+        update(name: string, body: UpdateNotificationTemplateBody): Promise<NotificationTemplate>;
+        delete(name: string): Promise<{
+            object: "notification_template";
+            name: string;
+            deleted: boolean;
+        }>;
+    };
+};

package/dist/client/notifications.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.notificationsResource = notificationsResource;
+const request_1 = require("./request");
+function notificationsResource(request) {
+    return {
+        /** Send a templated, instance-branded security email, honouring the user's preferences. */
+        send(body, idempotencyKey) {
+            return request({ method: 'POST', path: '/v1/notifications', body, idempotencyKey });
+        },
+        categories: {
+            list() {
+                return request({ method: 'GET', path: '/v1/notification_categories' });
+            },
+            /** A duplicate or built-in key is a 409. */
+            create(body) {
+                return request({ method: 'POST', path: '/v1/notification_categories', body });
+            },
+            update(key, body) {
+                return request({
+                    method: 'PUT',
+                    path: `/v1/notification_categories/${(0, request_1.enc)(key)}`,
+                    body,
+                });
+            },
+            /** Refused with a 409 while a template still uses it. */
+            delete(key) {
+                return request({ method: 'DELETE', path: `/v1/notification_categories/${(0, request_1.enc)(key)}` });
+            },
+        },
+        templates: {
+            list() {
+                return request({ method: 'GET', path: '/v1/notification_templates' });
+            },
+            /** A duplicate name is a 409. */
+            create(body) {
+                return request({ method: 'POST', path: '/v1/notification_templates', body });
+            },
+            get(name) {
+                return request({ method: 'GET', path: `/v1/notification_templates/${(0, request_1.enc)(name)}` });
+            },
+            update(name, body) {
+                return request({
+                    method: 'PUT',
+                    path: `/v1/notification_templates/${(0, request_1.enc)(name)}`,
+                    body,
+                });
+            },
+            delete(name) {
+                return request({ method: 'DELETE', path: `/v1/notification_templates/${(0, request_1.enc)(name)}` });
+            },
+        },
+    };
+}
+//# sourceMappingURL=notifications.js.map

package/dist/client/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/client/notifications.ts"],"names":[],"mappings":";;AAiEA,sDAqDC;AAtHD,uCAAgD;AAiEhD,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,2FAA2F;QAC3F,IAAI,CAAC,IAA0B,EAAE,cAAuB;YACtD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,UAAU,EAAE;YACV,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,4CAA4C;YAC5C,MAAM,CAAC,IAAoC;gBACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,CAAC,GAAW,EAAE,IAAuB;gBACzC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,GAAG,CAAC,EAAE;oBAC/C,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,yDAAyD;YACzD,MAAM,CACJ,GAAW;gBAEX,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,+BAA+B,IAAA,aAAG,EAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACxF,CAAC;SACF;QACD,SAAS,EAAE;YACT,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,iCAAiC;YACjC,MAAM,CAAC,IAAoC;gBACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,GAAG,CAAC,IAAY;gBACd,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CAAC,IAAY,EAAE,IAAoC;gBACvD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE;oBAC/C,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,IAAY;gBAEZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACxF,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}