@atlasauth/backend 0.5.0 → 0.6.0

package/dist/client/organizations.d.ts

@@ -48,10 +48,139 @@ export interface OrgDomain {
     last_checked_at: number | null;
     created_at: number;
 }
+/** Whether an organization runs an end-user (reader) pool beside its staff members. */
+export interface OrganizationEndUserPoolPolicy {
+    enabled: boolean;
+    /** New readers start `pending` until approved. */
+    requireApproval?: boolean;
+    /** Readers may sign up on the hosted pages. */
+    allowHostedSignup?: boolean;
+}
+/**
+ * The organization's security policy overrides. Keys are camelCase on this
+ * route, and only overrides that are set appear. Unknown keys from a newer API
+ * version are kept in the index signature.
+ */
+export interface OrganizationPolicySettings {
+    requireMfa?: boolean;
+    ssoRequired?: boolean;
+    sessionIdleOverrideMs?: number;
+    /**
+     * Sign-in methods a member may use (e.g. `password`, `passkey`, `oauth`,
+     * `oauth:google`, `saml`, `magic_link`). Absent = all methods.
+     */
+    allowedSignInMethods?: string[];
+    /** CIDR allow-list gating member sign-in (e.g. `203.0.113.0/24`). Absent = unrestricted. */
+    ipAllowlist?: string[];
+    /** Cap on the absolute session lifetime for members, in seconds (300 … 7776000). */
+    maxSessionAgeSeconds?: number;
+    endUserPool?: OrganizationEndUserPoolPolicy;
+    [key: string]: unknown;
+}
 export interface OrganizationPolicy {
     object: 'organization_policy';
     organization_id: string;
-    policy: Record<string, unknown>;
+    policy: OrganizationPolicySettings;
+}
+/** An organization's settings document, validated against the instance's settings schema. */
+export interface OrganizationSettings {
+    object: 'organization_settings';
+    organization_id: string;
+    values: Record<string, unknown>;
+    /** Monotonic per-organization version; 0 when nothing is set yet. */
+    version: number;
+    updated_by: string | null;
+    /** Last write (epoch ms), or null if never set. */
+    updated_at: number | null;
+}
+/** An organization's audit stream destination. The signing secret is never returned. */
+export interface OrganizationAuditStream {
+    object: 'org_audit_stream';
+    id: string;
+    organization_id: string;
+    url: string;
+    format: string;
+    active: boolean;
+    has_secret: boolean;
+    created_at: number;
+}
+export interface CreateOrganizationAuditStreamBody {
+    /** Public HTTPS endpoint of the SIEM/collector. */
+    url: string;
+    /** Shared HMAC-SHA256 signing secret (min 16 chars). Write-only. */
+    secret: string;
+    /** Shape hint for the collector. Default `json`. */
+    format?: string;
+}
+/** The organization's hosted-page branding overlay. Null fields inherit the instance brand. */
+export interface OrganizationBranding {
+    object: 'organization_branding';
+    organization_id: string;
+    display_name: string | null;
+    logo_url: string | null;
+    primary_color: string | null;
+    support_url: string | null;
+    custom_domain: string | null;
+    updated_at: number | null;
+}
+/** A partial merge: a provided field overrides, `null` (or `''`) clears it back. */
+export interface UpdateOrganizationBrandingBody {
+    display_name?: string | null;
+    logo_url?: string | null;
+    primary_color?: string | null;
+    support_url?: string | null;
+    custom_domain?: string | null;
+}
+export type OrganizationEndUserStatus = 'active' | 'pending' | 'blocked';
+/** A reader in an organization's end-user pool (distinct from its staff members). */
+export interface OrganizationEndUser {
+    object: 'organization_end_user';
+    id: string;
+    organization_id: string;
+    user_id: string;
+    status: OrganizationEndUserStatus;
+    source: string;
+    public_metadata: Metadata;
+    approved_at: number | null;
+    created_at: number;
+    updated_at: number;
+}
+export interface ListOrganizationEndUsersParams extends CursorParams {
+    status?: OrganizationEndUserStatus;
+}
+export interface AddOrganizationEndUserBody {
+    user_id: string;
+    /** Defaults to `active`. */
+    status?: OrganizationEndUserStatus;
+    /** How the reader entered the pool. Defaults to `token_exchange`. */
+    source?: 'hosted' | 'federated' | 'token_exchange' | 'import';
+}
+/** A host whose sign-ups join the organization's end-user pool. */
+export interface OrganizationReaderDomain {
+    object: 'custom_domain';
+    id: string;
+    role: string;
+    host: string;
+    status: string;
+    action: string | null;
+    live: boolean;
+    cname_target: string | null;
+    last_checked_at: number | null;
+    last_observed_target: string | null;
+    failure_reason: string | null;
+    certificate_expires_at: number | null;
+    cookie_domain: string | null;
+}
+/** The reader domain just bound, with the DNS record to publish. */
+export interface OrganizationReaderDomainCreated extends OrganizationReaderDomain {
+    instructions: Array<{
+        role: string;
+        host: string;
+        type: 'CNAME';
+        target: string;
+        purpose: string;
+    }>;
+    note: string;
 }
 export interface OrganizationHierarchy {
     object: 'organization_hierarchy';
@@ -95,11 +224,25 @@ export interface ReplaceOrganizationMetadataBody {
     public_metadata?: Metadata;
     private_metadata?: Metadata;
 }
-/** The org security policy patch (§4.4). Fields are camelCase on this route. */
+/**
+ * The org security policy patch (§4.4), a partial merge. Fields are camelCase on
+ * this route; an explicit `null` clears an override.
+ */
 export interface OrganizationPolicyPatch {
-    requireMfa?: boolean;
-    ssoRequired?: boolean;
+    requireMfa?: boolean | null;
+    ssoRequired?: boolean | null;
     sessionIdleOverrideMs?: number | null;
+    /** Restrict member sign-in methods; `null` clears (all methods). Unknown method → 400. */
+    allowedSignInMethods?: string[] | null;
+    /** CIDR allow-list for member sign-in; `null` clears. A bad CIDR → 400. */
+    ipAllowlist?: string[] | null;
+    /** Absolute session lifetime cap in seconds (300 … 7776000); `null` clears. */
+    maxSessionAgeSeconds?: number | null;
+    /** Retired: only `null` is accepted, to clear a stored value. Use `entitlementOverrides.create`. */
+    entitlementPlan?: null;
+    /** Retired: only `null` is accepted, to clear a stored value. */
+    entitlementOverrides?: null;
+    endUserPool?: OrganizationEndUserPoolPolicy | null;
     [key: string]: unknown;
 }
 export declare function organizationsResource(request: RequestFn): {
@@ -191,6 +334,64 @@ export declare function organizationsResource(request: RequestFn): {
             deleted: true;
         }>;
     };
+    /** The organization's settings document, validated against `organizationSettingsSchema`. */
+    settings: {
+        /** An empty document at version 0 when nothing is set. */
+        get(orgId: string): Promise<OrganizationSettings>;
+        /** Replace the whole document. A schema mismatch is a 422 `SETTINGS_INVALID`. */
+        replace(orgId: string, values: Record<string, unknown>, idempotencyKey?: string): Promise<OrganizationSettings>;
+        /**
+         * Merge a partial object (RFC 7396 shallow merge): a key set to `null` is
+         * removed, any other value overwrites, untouched keys are kept.
+         */
+        update(orgId: string, values: Record<string, unknown>, idempotencyKey?: string): Promise<OrganizationSettings>;
+    };
+    /** Per-organization audit stream destinations (only that org's events are forwarded). */
+    auditStreams: {
+        list(orgId: string): Promise<ListPage<OrganizationAuditStream>>;
+        create(orgId: string, body: CreateOrganizationAuditStreamBody, idempotencyKey?: string): Promise<OrganizationAuditStream>;
+        delete(orgId: string, streamId: string): Promise<{
+            object: "org_audit_stream";
+            id: string;
+            deleted: true;
+        }>;
+    };
+    /** The organization's hosted-page branding overlay. */
+    branding: {
+        get(orgId: string): Promise<OrganizationBranding>;
+        /** Partial merge: provided fields override, `null` clears back to the instance brand. */
+        update(orgId: string, body: UpdateOrganizationBrandingBody): Promise<OrganizationBranding>;
+    };
+    /** The organization's end-user (reader) pool — external users, not staff members. */
+    endUsers: {
+        list(orgId: string, params?: ListOrganizationEndUsersParams): Promise<CursorPage<OrganizationEndUser> & {
+            object: "list";
+        }>;
+        /** Attach an instance user as a reader. Idempotent per (org, user); grants no org role. */
+        add(orgId: string, body: AddOrganizationEndUserBody, idempotencyKey?: string): Promise<OrganizationEndUser>;
+        /** Approve (`active`), gate (`pending`) or block a reader. */
+        update(orgId: string, userId: string, body: {
+            status: OrganizationEndUserStatus;
+        }): Promise<OrganizationEndUser>;
+        remove(orgId: string, userId: string): Promise<{
+            object: "organization_end_user";
+            id: string;
+            deleted: true;
+        }>;
+    };
+    /** The host(s) whose sign-ups join the organization's end-user pool. */
+    readerDomain: {
+        list(orgId: string): Promise<ListPage<OrganizationReaderDomain>>;
+        /** Bind a host; returns the CNAME to publish. Verify with `domains.verify(id)`. */
+        create(orgId: string, body: {
+            host: string;
+        }, idempotencyKey?: string): Promise<OrganizationReaderDomainCreated>;
+        delete(orgId: string): Promise<{
+            object: "custom_domain";
+            id: string;
+            deleted: true;
+        }>;
+    };
     /** Directory-group → role grants that augment members' permissions. */
     groupRoles: {
         grant(orgId: string, groupId: string, roleId: string): Promise<{

package/dist/client/organizations.js

@@ -116,6 +116,115 @@ function organizationsResource(request) {
                 });
             },
         },
+        /** The organization's settings document, validated against `organizationSettingsSchema`. */
+        settings: {
+            /** An empty document at version 0 when nothing is set. */
+            get(orgId) {
+                return request({ method: 'GET', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/settings` });
+            },
+            /** Replace the whole document. A schema mismatch is a 422 `SETTINGS_INVALID`. */
+            replace(orgId, values, idempotencyKey) {
+                return request({
+                    method: 'PUT',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/settings`,
+                    body: { values },
+                    idempotencyKey,
+                });
+            },
+            /**
+             * Merge a partial object (RFC 7396 shallow merge): a key set to `null` is
+             * removed, any other value overwrites, untouched keys are kept.
+             */
+            update(orgId, values, idempotencyKey) {
+                return request({
+                    method: 'PATCH',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/settings`,
+                    body: { values },
+                    idempotencyKey,
+                });
+            },
+        },
+        /** Per-organization audit stream destinations (only that org's events are forwarded). */
+        auditStreams: {
+            list(orgId) {
+                return request({ method: 'GET', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/audit_streams` });
+            },
+            create(orgId, body, idempotencyKey) {
+                return request({
+                    method: 'POST',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/audit_streams`,
+                    body,
+                    idempotencyKey,
+                });
+            },
+            delete(orgId, streamId) {
+                return request({
+                    method: 'DELETE',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/audit_streams/${(0, request_1.enc)(streamId)}`,
+                });
+            },
+        },
+        /** The organization's hosted-page branding overlay. */
+        branding: {
+            get(orgId) {
+                return request({ method: 'GET', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/branding` });
+            },
+            /** Partial merge: provided fields override, `null` clears back to the instance brand. */
+            update(orgId, body) {
+                return request({ method: 'PUT', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/branding`, body });
+            },
+        },
+        /** The organization's end-user (reader) pool — external users, not staff members. */
+        endUsers: {
+            list(orgId, params = {}) {
+                return request({
+                    method: 'GET',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/end_users`,
+                    query: { ...params },
+                });
+            },
+            /** Attach an instance user as a reader. Idempotent per (org, user); grants no org role. */
+            add(orgId, body, idempotencyKey) {
+                return request({
+                    method: 'POST',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/end_users`,
+                    body,
+                    idempotencyKey,
+                });
+            },
+            /** Approve (`active`), gate (`pending`) or block a reader. */
+            update(orgId, userId, body) {
+                return request({
+                    method: 'PATCH',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/end_users/${(0, request_1.enc)(userId)}`,
+                    body,
+                });
+            },
+            remove(orgId, userId) {
+                return request({
+                    method: 'DELETE',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/end_users/${(0, request_1.enc)(userId)}`,
+                });
+            },
+        },
+        /** The host(s) whose sign-ups join the organization's end-user pool. */
+        readerDomain: {
+            list(orgId) {
+                return request({ method: 'GET', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/reader_domain` });
+            },
+            /** Bind a host; returns the CNAME to publish. Verify with `domains.verify(id)`. */
+            create(orgId, body, idempotencyKey) {
+                return request({
+                    method: 'POST',
+                    path: `/v1/organizations/${(0, request_1.enc)(orgId)}/reader_domain`,
+                    body,
+                    idempotencyKey,
+                });
+            },
+            delete(orgId) {
+                return request({ method: 'DELETE', path: `/v1/organizations/${(0, request_1.enc)(orgId)}/reader_domain` });
+            },
+        },
         /** Directory-group → role grants that augment members' permissions. */
         groupRoles: {
             grant(orgId, groupId, roleId) {

package/dist/client/organizations.js.map

@@ -1 +1 @@
-{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../src/client/organizations.ts"],"names":[],"mappings":";;AAyGA,sDA+LC;AAxSD,uCAAgD;AAyGhD,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,IAAI,CAAC,SAAuB,EAAE;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA4B,EAAE,cAAuB;YAC1D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA4B;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,gFAAgF;QAChF,cAAc,CAAC,EAAU,EAAE,IAAqC;YAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,4CAA4C;QAC5C,YAAY,CAAC,EAAU,EAAE,IAA6B;YACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD;;;;WAIG;QACH,SAAS,CAAC,EAAU,EAAE,IAA+C;YACnE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,gGAAgG;QAChG,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACpF,CAAC;QACD;;;WAGG;QACH,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,GAAG,CACD,KAAa,EACb,IAAwC,EACxC,cAAuB;gBAOvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAAsB;gBAEtB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAClE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;SACF;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8D,EAC9D,cAAuB;gBASvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,YAAoB;gBAEpB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,YAAY,CAAC,SAAS;iBAChF,CAAC,CAAC;YACL,CAAC;SACF;QAED,OAAO,EAAE;YACP,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8E,EAC9E,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU;oBAC/C,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa,EAAE,QAAgB;gBACpC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,uEAAuE;QACvE,UAAU,EAAE;YACV,KAAK,CACH,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"organizations.js","sourceRoot":"","sources":["../../src/client/organizations.ts"],"names":[],"mappings":";;AAqQA,sDAkVC;AAvlBD,uCAAgD;AAqQhD,SAAgB,qBAAqB,CAAC,OAAkB;IACtD,OAAO;QACL,IAAI,CAAC,SAAuB,EAAE;YAC5B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,CAAC,IAA4B,EAAE,cAAuB;YAC1D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,IAA4B;YAC7C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,gFAAgF;QAChF,cAAc,CAAC,EAAU,EAAE,IAAqC;YAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,4CAA4C;QAC5C,YAAY,CAAC,EAAU,EAAE,IAA6B;YACpD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD;;;;WAIG;QACH,SAAS,CAAC,EAAU,EAAE,IAA+C;YACnE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,gGAAgG;QAChG,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;QACpF,CAAC;QACD;;;WAGG;QACH,YAAY,CAAC,EAAU;YACrB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,GAAG,CACD,KAAa,EACb,IAAwC,EACxC,cAAuB;gBAOvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAAsB;gBAEtB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAClE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACnE,CAAC,CAAC;YACL,CAAC;SACF;QAED,WAAW,EAAE;YACX,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8D,EAC9D,cAAuB;gBASvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc;oBACnD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,YAAoB;gBAEpB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,IAAA,aAAG,EAAC,YAAY,CAAC,SAAS;iBAChF,CAAC,CAAC;YACL,CAAC;SACF;QAED,OAAO,EAAE;YACP,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAA8E,EAC9E,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,UAAU;oBAC/C,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa,EAAE,QAAgB;gBACpC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,SAAS;iBACxE,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,4FAA4F;QAC5F,QAAQ,EAAE;YACR,0DAA0D;YAC1D,GAAG,CAAC,KAAa;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,iFAAiF;YACjF,OAAO,CACL,KAAa,EACb,MAA+B,EAC/B,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW;oBAChD,IAAI,EAAE,EAAE,MAAM,EAAE;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD;;;eAGG;YACH,MAAM,CACJ,KAAa,EACb,MAA+B,EAC/B,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW;oBAChD,IAAI,EAAE,EAAE,MAAM,EAAE;oBAChB,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QAED,yFAAyF;QACzF,YAAY,EAAE;YACZ,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,CACJ,KAAa,EACb,IAAuC,EACvC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB;oBACrD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,QAAgB;gBAEhB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,kBAAkB,IAAA,aAAG,EAAC,QAAQ,CAAC,EAAE;iBACvE,CAAC,CAAC;YACL,CAAC;SACF;QAED,uDAAuD;QACvD,QAAQ,EAAE;YACR,GAAG,CAAC,KAAa;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,yFAAyF;YACzF,MAAM,CAAC,KAAa,EAAE,IAAoC;gBACxD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,CAAC;SACF;QAED,qFAAqF;QACrF,QAAQ,EAAE;YACR,IAAI,CACF,KAAa,EACb,SAAyC,EAAE;gBAE3C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;oBACjD,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,2FAA2F;YAC3F,GAAG,CACD,KAAa,EACb,IAAgC,EAChC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;oBACjD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,8DAA8D;YAC9D,MAAM,CACJ,KAAa,EACb,MAAc,EACd,IAA2C;gBAE3C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,OAAO;oBACf,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;oBAChE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,MAAc;gBAEd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACjE,CAAC,CAAC;YACL,CAAC;SACF;QAED,wEAAwE;QACxE,YAAY,EAAE;YACZ,IAAI,CAAC,KAAa;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,mFAAmF;YACnF,MAAM,CACJ,KAAa,EACb,IAAsB,EACtB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB;oBACrD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CAAC,KAAa;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC9F,CAAC;SACF;QAED,uEAAuE;QACvE,UAAU,EAAE;YACV,KAAK,CACH,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;YACD,MAAM,CACJ,KAAa,EACb,OAAe,EACf,MAAc;gBAQd,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,EAAE;iBACpF,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/client/pca.d.ts

@@ -0,0 +1,59 @@
+import { type RequestFn } from './request';
+/**
+ * Server-side controls for Proof-Carrying Authority (agentic actions): trusted
+ * attestor keys, the instance-wide kill switch, capability revocation and
+ * denying a held step-up. Verifying a PCActn offline is `verifyPCActn`.
+ */
+export interface PcaAdminAttestors {
+    object: 'pca_attestors';
+    /** b64u Ed25519 public keys. */
+    trusted_attestor_keys: string[];
+}
+export interface PcaAdminFreeze {
+    object: 'pca_freeze';
+    frozen: boolean;
+}
+export interface PcaAdminRevocation {
+    object: 'pca_revocation';
+    grant_ref: string;
+    cap_id: string;
+    revoked: boolean;
+}
+export interface PcaAdminStepUp {
+    object: 'pca_stepup';
+    stepup_id: string;
+    grant_ref: string;
+    action_digest: string;
+    required_t: number;
+    status: 'pending' | 'approved' | 'denied' | 'expired';
+    /** Roles that have contributed a share. */
+    shares: string[];
+    created_at: string;
+    expires_at: string;
+    receipt?: Record<string, unknown>;
+    step_up_required?: boolean;
+}
+export declare function pcaResource(request: RequestFn): {
+    attestors: {
+        get(): Promise<PcaAdminAttestors>;
+        /**
+         * Replace the trusted attestor key list (max 50). Non-empty: a presented
+         * attestation is verified against these keys. Empty: attestation is not enforced.
+         */
+        set(trustedAttestorKeys: string[]): Promise<PcaAdminAttestors>;
+    };
+    /** Engage the instance-wide kill switch: every PCActn is denied until `unfreeze`. */
+    freeze(body?: {
+        reason?: string;
+    }): Promise<PcaAdminFreeze>;
+    unfreeze(): Promise<PcaAdminFreeze>;
+    /** Revoke a capability under a grant; revoking `grant_ref` itself revokes the whole grant. */
+    revoke(body: {
+        grant_ref: string;
+        cap_id: string;
+    }): Promise<PcaAdminRevocation>;
+    /** Deny a pending step-up: the held action is never anchored. */
+    denyStepUp(id: string, body?: {
+        reason?: string;
+    }): Promise<PcaAdminStepUp>;
+};

package/dist/client/pca.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pcaResource = pcaResource;
+const request_1 = require("./request");
+function pcaResource(request) {
+    return {
+        attestors: {
+            get() {
+                return request({ method: 'GET', path: '/v1/pca/attestors' });
+            },
+            /**
+             * Replace the trusted attestor key list (max 50). Non-empty: a presented
+             * attestation is verified against these keys. Empty: attestation is not enforced.
+             */
+            set(trustedAttestorKeys) {
+                return request({
+                    method: 'PUT',
+                    path: '/v1/pca/attestors',
+                    body: { trusted_attestor_keys: trustedAttestorKeys },
+                });
+            },
+        },
+        /** Engage the instance-wide kill switch: every PCActn is denied until `unfreeze`. */
+        freeze(body = {}) {
+            return request({ method: 'POST', path: '/v1/pca/freeze', body });
+        },
+        unfreeze() {
+            return request({ method: 'DELETE', path: '/v1/pca/freeze' });
+        },
+        /** Revoke a capability under a grant; revoking `grant_ref` itself revokes the whole grant. */
+        revoke(body) {
+            return request({ method: 'POST', path: '/v1/pca/revocations', body });
+        },
+        /** Deny a pending step-up: the held action is never anchored. */
+        denyStepUp(id, body = {}) {
+            return request({ method: 'POST', path: `/v1/pca/stepups/${(0, request_1.enc)(id)}/deny`, body });
+        },
+    };
+}
+//# sourceMappingURL=pca.js.map

package/dist/client/pca.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pca.js","sourceRoot":"","sources":["../../src/client/pca.ts"],"names":[],"mappings":";;AAwCA,kCAkCC;AA1ED,uCAAgD;AAwChD,SAAgB,WAAW,CAAC,OAAkB;IAC5C,OAAO;QACL,SAAS,EAAE;YACT,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD;;;eAGG;YACH,GAAG,CAAC,mBAA6B;gBAC/B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,mBAAmB;oBACzB,IAAI,EAAE,EAAE,qBAAqB,EAAE,mBAAmB,EAAE;iBACrD,CAAC,CAAC;YACL,CAAC;SACF;QACD,qFAAqF;QACrF,MAAM,CAAC,OAA4B,EAAE;YACnC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,QAAQ;YACN,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,8FAA8F;QAC9F,MAAM,CAAC,IAA2C;YAChD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,iEAAiE;QACjE,UAAU,CAAC,EAAU,EAAE,OAA4B,EAAE;YACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;AACJ,CAAC"}