@canopy-io/node 0.3.4 → 0.3.6

package/dist/index.js

@@ -768,6 +768,127 @@ var Organizations = class {
       `/api/v1/organizations/${enc(id)}/sso-connections/${enc(connectionId)}`
     );
   }
+  // ── Directory sync: the organization's own SCIM connection ──
+  /**
+   * The roles this organization's identity provider may grant, and the one
+   * people arrive with. An empty list means directory sync is not open for
+   * the organization.
+   */
+  listDirectoryGrantableRoles(id) {
+    return this.client.request(
+      "GET",
+      `/api/v1/organizations/${enc(id)}/directory/grantable-roles`
+    );
+  }
+  /**
+   * Replace the list in one act, which is how directory sync is opened for
+   * an organization. Exactly one role is `default_role_id`, the one people
+   * arrive with. Withdrawing a role unmaps the groups naming it and keeps
+   * their members in the organization; an empty list is refused while a
+   * directory is connected. Your API key only: an organization admin's
+   * token can read the list but is refused changing it.
+   */
+  setDirectoryGrantableRoles(id, input) {
+    return this.client.request(
+      "PUT",
+      `/api/v1/organizations/${enc(id)}/directory/grantable-roles`,
+      { body: input }
+    );
+  }
+  /**
+   * The organization's directory, its full SCIM base URL, and the roles it
+   * may grant. `id` is null until a directory is connected.
+   */
+  getDirectory(id) {
+    return this.client.request(
+      "GET",
+      `/api/v1/organizations/${enc(id)}/directory`
+    );
+  }
+  /** Connect a directory. Refused until the organization's roles are set. */
+  createDirectory(id) {
+    return this.client.request(
+      "POST",
+      `/api/v1/organizations/${enc(id)}/directory`
+    );
+  }
+  /**
+   * End the connection. The people it provisioned keep their accounts and
+   * their membership; what ends is the provider's ability to push.
+   */
+  removeDirectory(id) {
+    return this.client.request(
+      "DELETE",
+      `/api/v1/organizations/${enc(id)}/directory`
+    );
+  }
+  listDirectoryTokens(id) {
+    return this.client.request(
+      "GET",
+      `/api/v1/organizations/${enc(id)}/directory/tokens`
+    );
+  }
+  /**
+   * The raw token is in this answer and nowhere else, alongside the full
+   * base URL the identity provider's connector needs with it.
+   */
+  mintDirectoryToken(id, input = {}) {
+    return this.client.request(
+      "POST",
+      `/api/v1/organizations/${enc(id)}/directory/tokens`,
+      { body: input }
+    );
+  }
+  /**
+   * A replacement token, shown once. The old one keeps working for a short
+   * overlap, so the provider can be moved across without an outage.
+   */
+  rotateDirectoryToken(id, tokenId, input = {}) {
+    return this.client.request(
+      "POST",
+      `/api/v1/organizations/${enc(id)}/directory/tokens/${enc(tokenId)}/rotate`,
+      { body: input }
+    );
+  }
+  revokeDirectoryToken(id, tokenId) {
+    return this.client.request(
+      "DELETE",
+      `/api/v1/organizations/${enc(id)}/directory/tokens/${enc(tokenId)}`
+    );
+  }
+  /** The organization's own provisioning events, newest first. */
+  listDirectoryActivity(id) {
+    return this.client.request(
+      "GET",
+      `/api/v1/organizations/${enc(id)}/directory/activity`
+    );
+  }
+  /** The groups the provider has pushed, each with its role mapping. */
+  listDirectoryGroups(id) {
+    return this.client.request(
+      "GET",
+      `/api/v1/organizations/${enc(id)}/directory/groups`
+    );
+  }
+  /**
+   * Grant a listed role to every member of a pushed group, at the
+   * organization. A role not on the organization's list is refused with
+   * `scim.role_not_grantable`.
+   */
+  mapDirectoryGroup(id, groupId, input) {
+    return this.client.request(
+      "PUT",
+      `/api/v1/organizations/${enc(id)}/directory/groups/${enc(groupId)}/mapping`,
+      { body: input }
+    );
+  }
+  /** Members fall back to the arrival role and stay in the organization. */
+  unmapDirectoryGroup(id, groupId) {
+    return this.client.request(
+      "DELETE",
+      `/api/v1/organizations/${enc(id)}/directory/groups/${enc(groupId)}/mapping`
+    );
+  }
 };
 function enc(segment) {
   return encodeURIComponent(segment);
@@ -1483,6 +1604,11 @@ var TokenVerifier = class {
   }
 };
 
-export { Assignments, Canopy, CanopyAuthorizerError, CanopyClient, CanopyConnectionError, CanopyError, CanopyTokenError, Identities, LocalAuthorizer, Organizations, Paginator, Permissions, Roles, TokenVerifier, isCanopyAuthorizerError, isCanopyConnectionError, isCanopyError, isCanopyTokenError, isCursorPagination, orgContext, paginate, withConcurrency };
+// src/webhooks.ts
+function isWebhookEvent(delivery, name) {
+  return delivery.event === name;
+}
+
+export { Assignments, Canopy, CanopyAuthorizerError, CanopyClient, CanopyConnectionError, CanopyError, CanopyTokenError, Identities, LocalAuthorizer, Organizations, Paginator, Permissions, Roles, TokenVerifier, isCanopyAuthorizerError, isCanopyConnectionError, isCanopyError, isCanopyTokenError, isCursorPagination, isWebhookEvent, orgContext, paginate, withConcurrency };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map