@barndoor-ai/sdk 1.3.0 → 2.0.0-dev.g37b8897

package/dist/auth/pkce.d.ts

@@ -1,98 +0,0 @@
-/**
- * PKCE (Proof Key for Code Exchange) implementation for OAuth 2.0.
- *
- * This module provides PKCE functionality that mirrors the Python SDK's
- * auth.py implementation, supporting secure OAuth flows in both browser
- * and Node.js environments.
- *
- * Uses OIDC discovery to automatically determine endpoints for any provider.
- */
-/**
- * PKCE state data structure.
- */
-export interface PKCEState {
-    /** Code verifier for PKCE flow */
-    codeVerifier: string;
-    /** Code challenge derived from verifier */
-    codeChallenge: string;
-    /** OAuth state parameter */
-    state: string;
-    /** Timestamp when state was created */
-    timestamp: number;
-}
-/**
- * PKCE Manager class to handle state per instance instead of globally.
- * This prevents race conditions in browser environments with multiple parallel login flows.
- */
-export declare class PKCEManager {
-    private _codeVerifier;
-    private _currentState;
-    private readonly _logger;
-    /**
-     * Generate PKCE parameters and build authorization URL.
-     * @param params - Authorization parameters
-     * @returns Authorization URL
-     */
-    buildAuthorizationUrl({ domain, clientId, redirectUri, audience, scope, issuer, }: AuthorizationUrlParams): Promise<string>;
-    /**
-     * Exchange authorization code for tokens using stored PKCE state.
-     * @param params - Token exchange parameters
-     * @returns Token response
-     */
-    exchangeCodeForToken({ domain, clientId, code, redirectUri, clientSecret, issuer, }: TokenExchangeParams): Promise<unknown>;
-    /**
-     * Validate state parameter to prevent CSRF attacks.
-     * @param receivedState - State received from OAuth callback
-     * @returns True if state is valid
-     */
-    validateState(receivedState: string): boolean;
-    /**
-     * Clear PKCE state (for cleanup or error handling).
-     */
-    clearState(): void;
-    /**
-     * Get current PKCE state (for debugging/testing).
-     */
-    getState(): PKCEState | null;
-}
-/**
- * Authorization URL parameters.
- */
-export interface AuthorizationUrlParams {
-    /** @deprecated Use issuer instead. Auth domain for backwards compatibility. */
-    domain?: string;
-    /** OAuth client ID */
-    clientId: string;
-    /** Redirect URI */
-    redirectUri: string;
-    /** API audience */
-    audience: string;
-    /** OAuth scopes */
-    scope?: string;
-    /** OIDC issuer URL. If provided, uses OIDC discovery to find authorization endpoint. */
-    issuer?: string;
-}
-/**
- * Token exchange parameters.
- */
-export interface TokenExchangeParams {
-    /** @deprecated Use issuer instead. Auth domain for backwards compatibility. */
-    domain?: string;
-    /** OAuth client ID */
-    clientId: string;
-    /** Authorization code */
-    code: string;
-    /** Redirect URI */
-    redirectUri: string;
-    /** Client secret (for backend flows) */
-    clientSecret?: string;
-    /** OIDC issuer URL. If provided, uses OIDC discovery to find token endpoint. */
-    issuer?: string;
-}
-/**
- * Start a local callback server for OAuth redirect (Node.js only).
- * @param port - Port to listen on
- * @returns [redirectUri, waiter] tuple
- */
-export declare function startLocalCallbackServer(port?: number): [string, Promise<[string, string]>];
-//# sourceMappingURL=pkce.d.ts.map

package/dist/auth/pkce.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../src/auth/pkce.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IAEtD;;;;OAIG;IACU,qBAAqB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,WAAW,EACX,QAAQ,EACR,KAA8B,EAC9B,MAAM,GACP,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgC3C;;;;OAIG;IACU,oBAAoB,CAAC,EAChC,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,WAAW,EACX,YAAY,EACZ,MAAM,GACP,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqEzC;;;;OAIG;IACI,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO;IAIpD;;OAEG;IACI,UAAU,IAAI,IAAI;IAKzB;;OAEG;IACI,QAAQ,IAAI,SAAS,GAAG,IAAI;CAWpC;AAmED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,mBAAmB;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,SAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAoG1F"}

package/dist/auth/store.d.ts

@@ -1,168 +0,0 @@
-/**
- * Token storage and management.
- *
- * This module provides token storage that works in both browser and Node.js
- * environments, mirroring the Python SDK's auth_store functionality.
- */
-import { Logger } from '../logging';
-/**
- * OIDC configuration from discovery endpoint.
- */
-export interface OidcConfig {
-    issuer: string;
-    token_endpoint: string;
-    authorization_endpoint: string;
-    userinfo_endpoint: string;
-    jwks_uri: string;
-    [key: string]: unknown;
-}
-/**
- * Fetch and cache OIDC configuration from the issuer's discovery endpoint.
- *
- * @param issuer - The OIDC issuer URL (e.g., https://auth.barndoor.ai or
- *                 https://auth.barndoor.ai/realms/barndoor)
- * @returns OIDC configuration containing endpoints like token_endpoint, jwks_uri, etc.
- */
-export declare function getOidcConfig(issuer: string): Promise<OidcConfig>;
-/**
- * Clear the OIDC config cache (useful for testing).
- */
-export declare function clearOidcConfigCache(): void;
-/**
- * Set a custom logger for the token management module.
- * @deprecated Use setLogger from the main logging module instead
- */
-export declare function setTokenLogger(_logger: Logger): void;
-/**
- * Token data structure for storage.
- */
-export interface TokenData {
-    /** Access token for API requests */
-    access_token: string;
-    /** Optional refresh token */
-    refresh_token?: string;
-    /** Token type (usually 'Bearer') */
-    token_type?: string;
-    /** Token expiration time in seconds */
-    expires_in?: number;
-    /** Token scope */
-    scope?: string;
-    /** Additional token properties */
-    [key: string]: unknown;
-}
-/**
- * JWT verification result.
- */
-export declare enum JWTVerificationResult {
-    VALID = "valid",
-    EXPIRED = "expired",
-    INVALID = "invalid"
-}
-/**
- * Abstract base class for token storage.
- */
-declare abstract class TokenStorage {
-    /**
-     * Load token data from storage.
-     * @returns Token data or null if not found
-     */
-    abstract loadToken(): Promise<TokenData | null>;
-    /**
-     * Save token data to storage.
-     * @param tokenData - Token data to save
-     */
-    abstract saveToken(tokenData: TokenData): Promise<void>;
-    /**
-     * Clear token data from storage.
-     */
-    abstract clearToken(): Promise<void>;
-}
-/**
- * Get the appropriate token storage for the current environment.
- * @returns Token storage instance
- */
-export declare function getTokenStorage(): TokenStorage;
-/**
- * Verify JWT locally using JWKS.
- * @param token - JWT token to verify
- * @param issuer - OIDC issuer URL (e.g., https://auth.barndoor.ai)
- * @param audience - Expected audience
- * @returns Verification result
- */
-export declare function verifyJWTLocal(token: string, issuer: string, audience: string): Promise<JWTVerificationResult>;
-/**
- * Token manager that handles storage, validation, and refresh.
- */
-export declare class TokenManager {
-    /** Token storage instance */
-    private readonly storage;
-    /** Mutex to prevent concurrent refresh operations */
-    private readonly _refreshMutex;
-    /**
-     * Create a new TokenManager.
-     * @param _apiBaseUrl - Base URL for the API (currently unused)
-     */
-    constructor(_apiBaseUrl: string);
-    /**
-     * Get a valid token, refreshing if necessary.
-     * @returns Valid access token
-     */
-    getValidToken(): Promise<string>;
-    /**
-     * Check if token should be refreshed proactively.
-     * @private
-     */
-    private _shouldRefreshToken;
-    /**
-     * Validate token using fast-path local verification with remote fallback.
-     * @private
-     */
-    private _validateOrRefresh;
-    /**
-     * Validate token remotely using userinfo endpoint (discovered via OIDC).
-     * @private
-     */
-    private _isTokenValidRemote;
-    /**
-     * Refresh the access token using the refresh token.
-     * @private
-     */
-    private _refreshToken;
-}
-/**
- * Load user token from storage.
- * @returns User access token or null if not found
- */
-export declare function loadUserToken(): Promise<string | null>;
-/**
- * Save user token to storage.
- * @param token - Token string or token data object
- */
-export declare function saveUserToken(token: string | TokenData): Promise<void>;
-/**
- * Clear cached token.
- */
-export declare function clearCachedToken(): Promise<void>;
-/**
- * Check if cached token is active without attempting refresh.
- * @param apiBaseUrl - Base URL of the API (for compatibility, not used)
- * @returns True if token is active
- */
-export declare function isTokenActive(_apiBaseUrl?: string): Promise<boolean>;
-/**
- * Check if cached token is active, attempting refresh if needed.
- * @param apiBaseUrl - Base URL of the API (for compatibility, not used)
- * @returns True if token is active or was successfully refreshed
- */
-export declare function isTokenActiveWithRefresh(apiBaseUrl?: string): Promise<boolean>;
-/**
- * Validate a token using fast-path local verification with remote fallback.
- * @param token - The JWT token to validate
- * @param apiBaseUrl - Base URL of the API (for compatibility, not used)
- * @returns Dictionary with 'valid' key indicating if token is valid
- */
-export declare function validateToken(token: string, _apiBaseUrl?: string): Promise<{
-    valid: boolean;
-}>;
-export {};
-//# sourceMappingURL=store.d.ts.map

package/dist/auth/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/auth/store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAsB,MAAM,EAAE,MAAM,YAAY,CAAC;AASxD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAKD;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAsDvE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAGpD;AAqDD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,oBAAY,qBAAqB;IAC/B,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,OAAO,YAAY;CACpB;AA0HD;;GAEG;AACH,uBAAe,YAAY;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAEvD;;OAEG;IACH,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CACrC;AA+HD;;;GAGG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAQ9C;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,qBAAqB,CAAC,CAwBhC;AAyCD;;GAEG;AACH,qBAAa,YAAY;IACvB,6BAA6B;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,qDAAqD;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAe;IAE7C;;;OAGG;gBACS,WAAW,EAAE,MAAM;IAI/B;;;OAGG;IACU,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IA8B7C;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;;OAGG;YACW,kBAAkB;IAgChC;;;OAGG;YACW,mBAAmB;IAuBjC;;;OAGG;YACW,aAAa;CAkG5B;AAID;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ5D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAW5E;AAED;;GAEG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAGtD;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA+B1E;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASpF;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAwC7B"}

package/dist/client.d.ts

@@ -1,363 +0,0 @@
-/**
- * Main Barndoor SDK client.
- *
- * This module provides the primary BarndoorSDK class that mirrors the Python
- * SDK's client.py functionality with 100% API compatibility.
- */
-import { ServerSummary, ServerDetail } from './models';
-import type { Channel, ChannelOptions, ChannelTestResult, UpsertChannelInput, WebhookSecret } from './models';
-import { ClientCredentialsParams } from './auth/clientCredentials';
-/**
- * Configuration options for BarndoorSDK constructor.
- */
-export interface BarndoorSDKOptions {
-    /** User JWT token (optional - can be set later via authenticate()) */
-    token?: string;
-    /** Whether to validate token on initialization */
-    validateTokenOnInit?: boolean;
-    /** Request timeout in seconds */
-    timeout?: number;
-    /** Maximum number of retries */
-    maxRetries?: number;
-}
-/**
- * Options for ensureServerConnected method.
- */
-export interface EnsureServerConnectedOptions {
-    /** Maximum seconds to wait for connection */
-    pollSeconds?: number;
-}
-/**
- * Response from server connection initiation.
- */
-export interface ConnectionInitiationResponse {
-    /** OAuth authorization URL */
-    auth_url?: string;
-    [key: string]: unknown;
-}
-/**
- * Response from connection status check.
- */
-export interface ConnectionStatusResponse {
-    /** Current connection status */
-    status: string;
-}
-/**
- * Options for {@link BarndoorSDK.fromClientCredentials}.
- */
-export interface FromClientCredentialsOptions extends ClientCredentialsParams {
-    /** Request timeout in seconds for API calls (default: 30). */
-    timeout?: number;
-    /** Maximum number of retries for API calls (default: 3). */
-    maxRetries?: number;
-}
-/**
- * Async client for interacting with the Barndoor Platform API.
- *
- * This SDK provides methods to:
- * - Manage server connections and OAuth flows
- * - List available MCP servers
- * - Validate user tokens
- *
- * The client handles authentication automatically by including the user's
- * JWT token in all requests.
- */
-export declare class BarndoorSDK {
-    /** Platform path for the public notification channel-management surface (BCP-3758). */
-    private static readonly CHANNELS_PATH;
-    /** Base URL of the Barndoor API */
-    readonly base: string;
-    /** User JWT token */
-    private _token;
-    /** HTTP client instance */
-    private readonly _http;
-    /** Whether token has been validated */
-    private _tokenValidated;
-    /** Whether the SDK has been closed */
-    private _closed;
-    /** Cached client-credentials parameters for automatic token refresh. */
-    private _credentials;
-    /** Scoped logger for this SDK instance */
-    private readonly _logger;
-    /**
-     * Create a new BarndoorSDK instance.
-     * @param apiBaseUrl - Base URL of the Barndoor API
-     * @param options - Configuration options (token is optional)
-     */
-    constructor(apiBaseUrl: string, options?: BarndoorSDKOptions);
-    /**
-     * Build a {@link BarndoorSDK} authenticated via the OAuth 2.0
-     * client-credentials (machine-to-machine) grant.
-     *
-     * Performs the grant against the Barndoor auth server and returns a
-     * ready-to-use SDK instance. The credentials are retained on the
-     * instance so the access token can be refreshed automatically when it
-     * nears expiry or when the API responds with 401.
-     *
-     * @example
-     * ```ts
-     * const sdk = await BarndoorSDK.fromClientCredentials(
-     *   'https://api.barndoor.host',
-     *   {
-     *     clientId: process.env.BARNDOOR_M2M_CLIENT_ID!,
-     *     clientSecret: process.env.BARNDOOR_M2M_CLIENT_SECRET!,
-     *     audience: 'https://barndoor.ai/',
-     *     issuer: 'https://auth.barndoor.ai/realms/barndoor',
-     *   }
-     * );
-     * const servers = await sdk.listServers();
-     * ```
-     */
-    static fromClientCredentials(apiBaseUrl: string, options: FromClientCredentialsOptions): Promise<BarndoorSDK>;
-    /**
-     * Get the current token.
-     */
-    get token(): string;
-    /**
-     * Set authentication token for the SDK.
-     * @param token - JWT token to use for authentication
-     */
-    authenticate(token: string): Promise<void>;
-    /**
-     * Validate URL format.
-     * @private
-     */
-    private _validateUrl;
-    /**
-     * Validate token format.
-     * @private
-     */
-    private _validateToken;
-    /**
-     * Ensure the SDK hasn't been closed.
-     * @private
-     */
-    private _ensureNotClosed;
-    /**
-     * Make authenticated request with automatic token validation.
-     * @private
-     */
-    private _req;
-    /**
-     * Refresh the M2M access token if it is near expiry.
-     *
-     * No-op for SDK instances not created via {@link BarndoorSDK.fromClientCredentials}.
-     * @private
-     */
-    private _maybeRefreshM2MToken;
-    /**
-     * Unconditionally fetch a fresh M2M token using stored credentials.
-     * @private
-     */
-    private _refreshM2MToken;
-    /**
-     * Validate the cached token by making a test API call.
-     * @returns True if the token is valid
-     */
-    validateCachedToken(): Promise<boolean>;
-    /**
-     * Ensure token is valid, validating if necessary.
-     */
-    ensureValidToken(): Promise<void>;
-    /**
-     * List all MCP servers available to the caller's organization.
-     * Automatically fetches all pages if results are paginated.
-     * @returns Array of server summaries
-     */
-    listServers(): Promise<ServerSummary[]>;
-    /**
-     * Get detailed information about a specific server.
-     * @param serverId - Server ID or slug
-     * @returns Server details
-     */
-    getServer(serverId: string): Promise<ServerDetail>;
-    /**
-     * Initiate OAuth connection flow for a server.
-     * @param serverId - Server ID or slug
-     * @param returnUrl - Optional return URL
-     * @returns Connection initiation response
-     */
-    initiateConnection(serverId: string, returnUrl?: string): Promise<ConnectionInitiationResponse>;
-    /**
-     * Get the user's connection status for a specific server.
-     * @param serverId - Server ID or slug
-     * @returns Connection status
-     */
-    getConnectionStatus(serverId: string): Promise<string>;
-    /**
-     * Disconnect from a specific MCP server.
-     *
-     * This will remove the connection record and clean up any stored OAuth credentials.
-     * The user will need to reconnect to use this server again.
-     *
-     * @param serverId - Server ID or slug to disconnect from
-     */
-    disconnectServer(serverId: string): Promise<void>;
-    /**
-     * List the alert types this organization may subscribe a channel to.
-     *
-     * Read this before building a subscription set: the alert-type vocabulary grows over
-     * time and is gated per organization, so this endpoint — not a hardcoded list — is the
-     * authoritative answer to what `subscriptions` accepts. Subscribing to a type absent
-     * here is accepted but never delivers.
-     *
-     * @returns The admitted alert types, plus the category and severity vocabularies
-     */
-    getChannelOptions(): Promise<ChannelOptions>;
-    /**
-     * List the organization's shared notification channels.
-     *
-     * Returns the organization-wide channels — `email`, `webhook`, `slack`, `teams` — with
-     * their current subscription sets. Personal channels are not included; use
-     * {@link listUserChannels} for those.
-     *
-     * @returns The organization's shared channels, in no guaranteed order
-     */
-    listChannels(): Promise<Channel[]>;
-    /**
-     * List the caller's own personal notification channels.
-     *
-     * Returns the authenticated caller's `in_app` and `user_email` channels. Always
-     * self-scoped — there is no way to read another user's personal channels.
-     *
-     * @returns The caller's personal channels
-     */
-    listUserChannels(): Promise<Channel[]>;
-    /**
-     * Create or update a notification channel and replace its subscriptions.
-     *
-     * This is a full upsert, not a patch: `subscriptions` **replaces** the channel's
-     * existing set, so omitting it removes every subscription the channel had. Send the
-     * complete desired set on every call.
-     *
-     * Without `channelId` the channel is keyed on its type's natural identity, so repeating
-     * an identical call is idempotent rather than creating duplicates: `email` by address,
-     * `webhook` by URL, `slack` by channel id, and the personal types by (organization,
-     * type, caller). With `channelId` it is an authoritative edit of that row — the only way
-     * to update a `teams` channel, whose natural identity is a secret URL.
-     *
-     * Which destination fields are permitted depends on `type`; sending one that does not
-     * belong throws {@link HTTPError} with status 422 rather than being silently ignored.
-     *
-     * @param input - Channel definition; see {@link UpsertChannelInput}
-     * @returns The created or updated channel. When this call *creates* a `webhook`
-     *   channel, `signing_secret` carries the one-time reveal — store it. A retried create
-     *   that lands after the first attempt already succeeded returns a null
-     *   `signing_secret` rather than a second secret; use {@link regenerateChannelSecret}
-     *   if you need one.
-     */
-    upsertChannel(input: UpsertChannelInput): Promise<Channel>;
-    /**
-     * Delete a notification channel.
-     *
-     * Its subscriptions cascade and any stored secret is removed. Irreversible — to stop
-     * delivery reversibly, call {@link upsertChannel} with `enabled: false`.
-     *
-     * @param channelId - Unique identifier of the channel to delete
-     * @throws {HTTPError} With status 404 when no such channel exists in the caller's org
-     */
-    deleteChannel(channelId: string): Promise<void>;
-    /**
-     * Rotate a webhook channel's signing secret.
-     *
-     * Returns the new secret once. The previous secret stops verifying immediately, so
-     * deploy the new one to your receiver before the next alert fires. There is no endpoint
-     * that reads the current secret, so this is also the recovery path when a secret from
-     * channel creation was lost.
-     *
-     * @param channelId - Unique identifier of the webhook channel
-     * @returns The new signing secret
-     */
-    regenerateChannelSecret(channelId: string): Promise<WebhookSecret>;
-    /**
-     * Send a connectivity-test message through a channel's real transport.
-     *
-     * Lets you verify a webhook receiver, email address, Slack channel, or Teams workflow
-     * actually works. It is not an alert: nothing is persisted, no other channel is
-     * notified, and it ignores the channel's subscriptions.
-     *
-     * A transport failure comes back as `ok: false` with a reason, not as a thrown error —
-     * the request succeeded, the delivery did not.
-     *
-     * @param channelId - Unique identifier of the channel to test
-     * @returns Whether the message reached the transport, and why not if it did not
-     */
-    testChannel(channelId: string): Promise<ChannelTestResult>;
-    /** Validate and normalize a channel id shared by the by-id channel methods. */
-    private _requireChannelId;
-    /**
-     * Validate server ID format.
-     * @private
-     */
-    private _validateServerId;
-    /**
-     * Check if serverId is a UUID or slug.
-     * @private
-     */
-    private _isUuid;
-    /**
-     * List policies with pagination and filtering.
-     * @param page - Page number for pagination (default: 1)
-     * @param limit - Number of items per page (default: 10)
-     * @param filters - Additional query parameters for filtering
-     * @returns Paginated response containing policies
-     */
-    listPolicies(page?: number, limit?: number, filters?: Record<string, any>): Promise<any>;
-    /**
-     * Get detailed information about a specific policy.
-     * @param policyId - Unique identifier of the policy
-     * @returns Policy details
-     */
-    getPolicy(policyId: string): Promise<any>;
-    /**
-     * Create a new policy.
-     * @param policyData - Policy configuration data
-     * @returns Created policy details
-     */
-    createPolicy(policyData: any): Promise<any>;
-    /**
-     * Update an existing policy.
-     * @param policyId - Unique identifier of the policy to update
-     * @param policyData - Updated policy configuration data
-     * @returns Updated policy details
-     */
-    updatePolicy(policyId: string, policyData: any): Promise<any>;
-    /**
-     * Clone an existing policy.
-     * @param policyId - Unique identifier of the policy to clone
-     * @param newName - Name for the cloned policy
-     * @returns Cloned policy details
-     */
-    clonePolicy(policyId: string, newName: string): Promise<any>;
-    /**
-     * Validate policy configuration.
-     * @param validationData - Policy data to validate
-     * @returns Validation result
-     */
-    validatePolicy(validationData: any): Promise<any>;
-    /**
-     * Get summary of all policies.
-     * @returns Policy summary information
-     */
-    getPolicySummary(): Promise<any>;
-    /**
-     * Get available filter definitions for policies.
-     * @returns Available filter categories and options
-     */
-    getPolicyFilterDefinitions(): Promise<any>;
-    /**
-     * Close the SDK and clean up resources.
-     */
-    close(): Promise<void>;
-    /**
-     * Alias for close() to match Python SDK naming.
-     */
-    aclose(): Promise<void>;
-    /**
-     * Ensure a server is connected, initiating OAuth if needed.
-     * @param serverIdentifier - Server slug or provider name
-     * @param options - Options
-     */
-    ensureServerConnected(serverIdentifier: string, options?: EnsureServerConnectedOptions): Promise<void>;
-}
-//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,KAAK,EACV,OAAO,EAEP,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACd,MAAM,UAAU,CAAC;AAIlB,OAAO,EACL,uBAAuB,EAGxB,MAAM,0BAA0B,CAAC;AAQlC;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAsBD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,WAAW;IACtB,uFAAuF;IACvF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAA0C;IAC/E,mCAAmC;IACnC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,qBAAqB;IACrB,OAAO,CAAC,MAAM,CAAgB;IAC9B,2BAA2B;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;IACnC,uCAAuC;IACvC,OAAO,CAAC,eAAe,CAAU;IACjC,sCAAsC;IACtC,OAAO,CAAC,OAAO,CAAU;IACzB,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAAwC;IAC5D,0CAA0C;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IAExD;;;;OAIG;gBACS,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB;IA2BhE;;;;;;;;;;;;;;;;;;;;;;OAsBG;WACiB,qBAAqB,CACvC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,WAAW,CAAC;IAiBvB;;OAEG;IACH,IAAW,KAAK,IAAI,MAAM,CAOzB;IAED;;;OAGG;IACU,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD;;;OAGG;IACH,OAAO,CAAC,YAAY;IAapB;;;OAGG;IACH,OAAO,CAAC,cAAc;IActB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAMxB;;;OAGG;YACW,IAAI;IA6BlB;;;;;OAKG;YACW,qBAAqB;IAWnC;;;OAGG;YACW,gBAAgB;IAU9B;;;OAGG;IACU,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC;IAqCpD;;OAEG;IACU,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B9C;;;;OAIG;IACU,WAAW,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IA0BpD;;;;OAIG;IACU,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAY/D;;;;;OAKG;IACU,kBAAkB,CAC7B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,4BAA4B,CAAC;IAqCxC;;;;OAIG;IACU,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYnE;;;;;;;OAOG;IACU,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2B9D;;;;;;;;;OASG;IACU,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC;IAKzD;;;;;;;;OAQG;IACU,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAM/C;;;;;;;OAOG;IACU,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IASnD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACU,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwCvE;;;;;;;;OAQG;IACU,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM5D;;;;;;;;;;OAUG;IACU,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAS/E;;;;;;;;;;;;OAYG;IACU,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IASvE,+EAA+E;IAC/E,OAAO,CAAC,iBAAiB;IAWzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAkBzB;;;OAGG;IACH,OAAO,CAAC,OAAO;IAOf;;;;;;OAMG;IACU,YAAY,CAAC,IAAI,SAAI,EAAE,KAAK,SAAK,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAahG;;;;OAIG;IACU,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAYtD;;;;OAIG;IACU,YAAY,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IASxD;;;;;OAKG;IACU,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAe1E;;;;;OAKG;IACU,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAezE;;;;OAIG;IACU,cAAc,CAAC,cAAc,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAS9D;;;OAGG;IACU,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC;IAK7C;;;OAGG;IACU,0BAA0B,IAAI,OAAO,CAAC,GAAG,CAAC;IAKvD;;OAEG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAOnC;;OAEG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIpC;;;;OAIG;IACU,qBAAqB,CAChC,gBAAgB,EAAE,MAAM,EACxB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,IAAI,CAAC;CA4EjB"}