@chainpatrol/sdk 1.2.0 → 1.4.0

package/CHANGELOG.md

@@ -1,5 +1,118 @@
 # @chainpatrol/sdk
 
+## 1.4.0
+
+### Minor Changes
+
+- ccd3811: Adds `reporterKind` and `reviewerKind` filters (`human` | `automation`) to organization report listing so callers can separate automation vs human report sources and approvals.
+
+  The previous `excludeAutomation` boolean remains supported as a deprecated alias for `reporterKind: "human"`. CLI adds `--reporter-kind` and `--reviewer-kind`.
+
+  Server-side work in `@chainpatrol/core`, `@chainpatrol/trpc`, and `@chainpatrol/external-trpc` backs the new filters; those packages are private and don't need version bumps.
+
+- 9dd02cf: Third and final tranche of the API-surface expansion — the join-required
+  slices. All additive, no removed fields.
+
+  **Takedowns — provider names on `listTakedowns` and `getTakedown`.** Each
+  `TakedownItem` and the `getTakedown` `takedown` object now carries
+  `domainRegistrar`, `hostingProvider`, and `tldRegistrar` (each
+  `{ id, name } | null`) alongside the existing `assignee` / `brand`.
+  Answers "who hosts phish.example?" without a follow-up call and unblocks
+  "which takedowns are stuck at registrar X?" cross-org queries. Distinct
+  from the per-task `takedownProvider` — the trio here is the
+  takedown-level assignment for the domain itself, whereas the task-level
+  provider is the entity handling the current step.
+
+  **Detection Configs — `lastResultAt` aggregate on
+  `listDetectionConfigs`.** Each `ConfigEntry` now carries `lastResultAt`
+  (nullable ISO timestamp) — the `MAX(createdAt)` of `ThreatDetectionResult`
+  rows tied to that config. Surfaces the same silent-config signal the
+  drift healthcheck already computes internally. A config with a stale
+  `lastResultAt` is going silent regardless of what its `updatedAt` says.
+
+  Computed with a single `groupBy` on `ThreatDetectionResult` scoped to the
+  response's config IDs — one extra query per call, index-friendly via
+  `ThreatDetectionResult.@@index([configId])`.
+
+  Server-side work in `@chainpatrol/external-trpc` and
+  `@chainpatrol/validation` supports the new fields; both are private
+  packages and don't need version bumps.
+
+- 725d32c: `listOrganizationReports` now calls `GET /organization/reports` instead of the deprecated `POST /public/getOrganizationReports`. Inputs, outputs, and the CLI's `reports list --org <slug>` behaviour are unchanged.
+
+  Server-side work in `@chainpatrol/external-trpc` makes the switch safe. `GET /organization/reports` now accepts an optional `slug`, authorized the same way the deprecated endpoint authorized it, so callers whose credentials cover more than one organization — user-scoped API keys, staff and member sessions, which is how `chainpatrol login` authenticates — can still choose an organization instead of having it derived from an org-scoped API key. It also fixes two query-string bugs that made the endpoint's filters unusable: `?<flag>=false` was read as `true`, and array filters passed once rather than repeated (`?brandIds=12`, `?assetTypes=URL`) were rejected with a validation error. `@chainpatrol/external-trpc` is private and does not need a version bump.
+
+- 725d32c: Adds a `needsCustomerReview` filter to organization report listing so callers can pull just the reports an organization still has to approve. CLI adds `--needs-customer-review` / `--no-needs-customer-review` to `reports list`.
+
+  The filter resolves what "waiting on the customer" means per organization: with Obligatory Organization Admin Approval on, every report with a pending proposal whose asset type is in the approval scope (all asset types when the scope is not narrowed) plus anything escalated to the customer; with it off, only reports escalated to the customer. Reports the organization submitted itself are excluded.
+
+  Server-side work in `@chainpatrol/core` and `@chainpatrol/external-trpc` backs the new filter; those packages are private and don't need version bumps.
+
+- e73955d: Fixes three problems with report search (`POST /reports/search`, `chainpatrol reports search`):
+
+  - **It did not work for logged-in CLI users.** The endpoint resolved the organization only from an organization-scoped API key, so anyone authenticated with the bearer token `chainpatrol login` issues got `API Organization not found. Invalid or missing API key.` It now accepts an optional `slug`, authorized the same way the rest of the API authorizes one, and the CLI passes the resolved organization.
+  - **Results were unbounded.** An asset content shared across many reports returned every one of them. Responses are now capped by a `limit` (default 50, max 100, newest first) and carry `totalCount` so callers can see when results were truncated. The CLI gains `--limit` and reports "Matched 3 of 41 report(s)".
+  - **The endpoint's purpose was unclear next to report listing.** Both endpoints' descriptions now state the question each answers and point at the other: search looks reports up by asset content in one batched call to avoid filing a duplicate; `GET /organization/reports` browses and filters an organization's reports with full records and pagination.
+
+  Server-side work in `@chainpatrol/external-trpc`, which is private and does not need a version bump.
+
+## 1.3.0
+
+### Minor Changes
+
+- 08b9976: Broaden the public API surface across Reports, Takedowns, Detections,
+  Detection Configs, and Assets. Everything additive — no removed fields,
+  no renames — so existing callers are unaffected.
+
+  **Detections (`listDetections`)** — new fields on each `DetectionListItem`:
+  `reason` (free-text explanation of why the detection fired), `score` (raw
+  0–1 model score), `configId` (which `ThreatDetectionConfig` produced the
+  hit), `reportedAt` (when it transitioned to `REPORTED`, nullable), and
+  `brands[]` (brand associations).
+
+  **Detection Configs (`listDetectionConfigs`)** — each `ConfigEntry` now
+  carries `description` (nullable), `createdAt`, and `updatedAt` so
+  integrators can spot silent or stale configs.
+
+  **Reports** — `listOrganizationReports` gains `slaDueAt` (SLA deadline),
+  `externalSubmissionLink` (original external source URL when submitted from
+  a third-party surface), and `duplicateOfId` (canonical report ID when this
+  one is a duplicate). Type gaps are also closed: `imageDisplay`,
+  `favoritedAt`, `attachments[]`, and `proposals.asset.scans[]` were already
+  returned by the handler but omitted from the SDK type — they're now
+  declared. `searchReports` (`report/search-external`) response now
+  surfaces the `title` and `createdAt` fields the handler already fetched.
+
+  **Takedowns (`listTakedowns`)** — each `TakedownItem` gains `externalId`
+  (vendor's own reference — CleanDNS report ID / registrar ticket, for
+  reconciliation), `hasFilingDelay`, `hasLivenessCheckDelay` (staff-set
+  flags used by median-time metrics), and `asset.blockedAt`.
+
+  **Takedowns (`getTakedown`)** — the response was previously bare
+  (`{ assetContent, takedownStatus, createdAt, updatedAt }`). It's now
+  fully built out with `asset` details (id / content / type /
+  `livenessStatus` / `blockedAt`) and a nested `takedown` record (id /
+  status / `externalId` / delay flags / assignee / brand / tasks[]). The
+  original top-level fields (`takedownStatus`, `createdAt`, `updatedAt`)
+  are preserved for existing callers.
+
+  **Assets — `livenessStatus` + `blockedAt` parity.** `listAssets`,
+  `listOrganizationAssets`, `assetSearch` (`.asset`), and `listThreats`
+  (`livenessStatus` only, `blockedAt` already there) now consistently
+  return both fields. `listAssets` also fixes a bug where each returned
+  row's `id` was stripped from the response mapper (the column was already
+  selected). Note: `assetCheck` is intentionally deferred — its response
+  goes through `@chainpatrol/asset`'s own `checkAsset()` contract; parity
+  there needs a scoped follow-up in the asset package.
+
+  Server-side work in `@chainpatrol/external-trpc`, `@chainpatrol/core`,
+  `@chainpatrol/validation`, and `@chainpatrol/database` backs the new
+  fields; those are private packages and don't need version bumps. Also
+  adds a `/// @deprecated` doc-comment to `Report.threatLevel` in the
+  Prisma schema — the field is not surfaced through the public API and no
+  in-app UI reads it; the column stays for now, removal is a separate
+  destructive migration.
+
 ## 1.2.0
 
 ### Minor Changes

package/dist/api/index.d.mts

@@ -14,9 +14,37 @@ interface ChainPatrolApiClientOptions {
 interface ConfigEntry {
     id: number;
     title: string;
+    /**
+     * Human-readable description of what the config does. `null` when unset
+     * — most configs seeded before this field existed do not have one.
+     */
+    description: string | null;
     status: string;
     cron: string | null;
     config: Record<string, unknown>;
+    /**
+     * Optional brand connection. Present only for org-scoped configs when the
+     * config targets a specific brand.
+     */
+    brandId?: number | null;
+    brand?: {
+        id: number;
+        name: string;
+        slug: string;
+    } | null;
+    /** When the config was first created (ISO 8601, UTC). */
+    createdAt: string;
+    /**
+     * When the config was last updated (ISO 8601, UTC). Pair with the drift
+     * healthcheck to spot silent configs untouched in months.
+     */
+    updatedAt: string;
+    /**
+     * When the most recent `ThreatDetectionResult` for this config was created
+     * (ISO 8601, UTC). Null when the config has never produced a hit. A config
+     * with no recent `lastResultAt` is going silent regardless of `updatedAt`.
+     */
+    lastResultAt: string | null;
 }
 interface DetectionSource {
     source: string;
@@ -82,6 +110,16 @@ interface AssetSearchResultItem {
         type: string;
         status: string;
         watchStatus: string;
+        /**
+         * Whether the asset is currently reachable (`"ALIVE"`), gone
+         * (`"DEAD"`), or unchecked (`"UNKNOWN"`). Null when never evaluated.
+         */
+        livenessStatus: LivenessStatus | null;
+        /**
+         * When the asset transitioned to BLOCKED (ISO 8601, UTC). Null for
+         * non-blocked assets or blocks predating the field.
+         */
+        blockedAt: string | null;
         createdAt: string;
         updatedAt: string;
     } | null;
@@ -130,10 +168,22 @@ interface AssetListInput {
     nextPage?: string;
 }
 interface AssetListItem {
+    /** Asset ID — reference in follow-up calls (was previously stripped from the response). */
+    id: number;
     content: string;
     type: string;
     status: string;
     watchStatus: string;
+    /**
+     * Whether the asset is currently reachable (`"ALIVE"`), gone
+     * (`"DEAD"`), or unchecked (`"UNKNOWN"`). Null when never evaluated.
+     */
+    livenessStatus: LivenessStatus | null;
+    /**
+     * When the asset transitioned to BLOCKED (ISO 8601, UTC). Null for
+     * non-blocked assets.
+     */
+    blockedAt: string | null;
     updatedAt: string;
 }
 interface AssetListResult {
@@ -401,6 +451,8 @@ declare const REPORT_REVIEW_DECISIONS: readonly ["APPROVE", "REJECT", "SKIP", "E
 type ReportReviewDecision = (typeof REPORT_REVIEW_DECISIONS)[number];
 declare const REPORT_STATUSES: readonly ["TODO", "IN_PROGRESS", "CLOSED"];
 type ReportStatus = (typeof REPORT_STATUSES)[number];
+declare const ACTOR_KINDS: readonly ["human", "automation"];
+type ActorKind = (typeof ACTOR_KINDS)[number];
 interface OrganizationReportsListInput {
     slug: string;
     limit?: number;
@@ -409,7 +461,12 @@ interface OrganizationReportsListInput {
     searchQuery?: string;
     reporterQuery?: string;
     reportedByCustomer?: boolean;
+    /** @deprecated Prefer `reporterKind: "human"`. */
     excludeAutomation?: boolean;
+    /** Filter by whether the report was submitted by a human or automation. */
+    reporterKind?: ActorKind;
+    /** Filter by whether the report was approved by a human or automation. */
+    reviewerKind?: ActorKind;
     onlyRejected?: boolean;
     reviewStatuses?: ReportReviewDecision[];
     assetTypes?: string[];
@@ -420,16 +477,69 @@ interface OrganizationReportsListInput {
     endDate?: string;
     updatedAtStartDate?: string;
     updatedAtEndDate?: string;
+    /**
+     * Filter to reports waiting on the organization's own approval — the reports
+     * a customer admin still has to sign off on before the assets in them can be
+     * blocked. `true` returns only those reports; `false` returns only reports
+     * that are not waiting on them.
+     *
+     * When "Obligatory Organization Admin Approval" is on for the organization,
+     * that means every report with a pending proposal whose asset type is in the
+     * approval scope (all asset types when the scope has not been narrowed), plus
+     * anything ChainPatrol staff escalated to the organization. When the setting
+     * is off, only reports staff escalated to the organization are returned.
+     * Reports the organization submitted itself are never included — staff can
+     * action those without customer sign-off.
+     */
+    needsCustomerReview?: boolean;
+}
+interface OrganizationReportAssetScanEnrichment {
+    id: number;
+    type: string;
+    output: unknown;
+    status: string;
+}
+interface OrganizationReportAssetScan {
+    id: number;
+    status: string;
+    output: unknown;
+    createdAt: string;
+    enrichments: OrganizationReportAssetScanEnrichment[];
+}
+interface OrganizationReportAttachment {
+    id: number;
+    url: string;
 }
 interface OrganizationReportsListResult {
     reports: Array<{
         id: number;
         title: string;
         description: string;
+        /** Whether the report's images render inline or are hidden by default. */
+        imageDisplay: string;
+        /** When the report was starred/favorited (ISO 8601, UTC). Null when not favorited. */
+        favoritedAt: string | null;
         status: string | null;
         reportedByCustomer: boolean;
+        /**
+         * SLA deadline for this report (ISO 8601, UTC). Null when no SLA
+         * applies (e.g. staff-created reports).
+         */
+        slaDueAt: string | null;
+        /**
+         * URL to the original external source of the report when submitted
+         * from a third-party surface (Discord/Twitter link, forwarded webform).
+         * Null for reports created directly in ChainPatrol.
+         */
+        externalSubmissionLink: string | null;
+        /**
+         * ID of the canonical report this one duplicates. Null when the
+         * report is not a duplicate.
+         */
+        duplicateOfId: number | null;
         createdAt: string;
         updatedAt: string;
+        attachments: OrganizationReportAttachment[];
         proposals: Array<{
             reviewStatus: string;
             asset: {
@@ -437,6 +547,12 @@ interface OrganizationReportsListResult {
                 type: string;
                 content: string;
                 status: string;
+                /**
+                 * Per-scan enrichment data. Large (Apple App Store enrichments run
+                 * 50–200 KB each) — the agent42 tool strips these by default when
+                 * relaying results. Present in the raw handler response.
+                 */
+                scans: OrganizationReportAssetScan[];
             };
         }>;
         reporter: {
@@ -482,12 +598,42 @@ interface DetectionListInput {
     countryCodes?: string[];
     onlyDeleted?: boolean;
 }
+interface DetectionBrand {
+    id: number;
+    name: string;
+    slug: string;
+}
 interface DetectionListItem {
     id: number;
     threatContent: string;
     source: string;
     createdAt: string;
     confidence: DetectionConfidence;
+    /**
+     * Raw model score (0–1). `confidence` buckets this into low/medium/high
+     * using the org's thresholds; use `score` when the buckets are too coarse.
+     */
+    score: number;
+    /**
+     * Free-text explanation of why the detection fired (e.g. "matches
+     * brand-name typo squat", "TLS cert issued by known lookalike CA").
+     */
+    reason: string;
+    /**
+     * ID of the `ThreatDetectionConfig` that produced this hit. Pair with
+     * `listDetectionConfigs` to drill back into the config.
+     */
+    configId: number;
+    /**
+     * When the detection was reported (ISO 8601, UTC). Null when the
+     * detection has not been reported yet.
+     */
+    reportedAt: string | null;
+    /**
+     * Brands the detection was associated with. Empty when the detection
+     * was not linked to any brand at classification time.
+     */
+    brands: DetectionBrand[];
     reportStatus: DetectionReportStatus;
     asset: {
         id: number;
@@ -516,6 +662,11 @@ interface ThreatItem {
     id: number;
     content: string;
     type: string;
+    /**
+     * Liveness of the blocked threat. `"ALIVE"` still reachable, `"DEAD"`
+     * gone, `"UNKNOWN"` unchecked. Null when never evaluated.
+     */
+    livenessStatus: LivenessStatus | null;
     blockedAt: string;
 }
 interface ThreatsListResult {
@@ -540,6 +691,16 @@ interface OrganizationAssetItem {
         id: number;
         name: string;
     } | null;
+    /**
+     * Whether the asset is currently reachable (`"ALIVE"`), gone
+     * (`"DEAD"`), or unchecked (`"UNKNOWN"`). Null when never evaluated.
+     */
+    livenessStatus: LivenessStatus | null;
+    /**
+     * When the asset transitioned to BLOCKED (ISO 8601, UTC). Null for
+     * non-blocked assets.
+     */
+    blockedAt: string | null;
     createdAt: string;
     updatedAt: string;
 }
@@ -600,16 +761,39 @@ interface OrganizationBrandsListResult {
 }
 interface ReportsSearchInput {
     assetContents: string[];
+    /**
+     * Organization slug. Optional for organization-scoped API keys, which resolve
+     * the organization from the key itself. Required when your credentials can
+     * reach more than one organization — including the bearer token issued by
+     * `chainpatrol login`.
+     */
+    slug?: string;
     reportedByCustomer?: boolean;
+    /**
+     * Maximum number of reports to return, newest first. Defaults to 50, maximum
+     * 100. Compare with `totalCount` to tell whether results were truncated.
+     */
+    limit?: number;
 }
 interface ReportsSearchResultItem {
     id: number;
+    /**
+     * Report title. Null for external / anonymous reports without one.
+     */
+    title: string | null;
     status: string;
     reportedByCustomer: boolean;
+    /** When the report was created (ISO 8601, UTC). */
+    createdAt: string;
     assets: string[];
 }
 interface ReportsSearchResult {
     reports: ReportsSearchResultItem[];
+    /**
+     * Total number of reports matching the search, ignoring `limit`. Greater than
+     * `reports.length` means the results were truncated.
+     */
+    totalCount: number;
 }
 interface UserMeResult {
     user: {
@@ -659,6 +843,24 @@ interface TakedownsListInput {
 interface TakedownItem {
     id: number;
     status: TakedownStatus;
+    /**
+     * Provider's own reference for this takedown (e.g. CleanDNS report ID,
+     * registrar ticket). Reconcile with the vendor's dashboard. `null` when
+     * no vendor has picked it up yet.
+     */
+    externalId: string | null;
+    /**
+     * Manually set by staff to exclude the takedown from median-time metrics
+     * when its filing was delayed for reasons unrelated to platform
+     * performance.
+     */
+    hasFilingDelay: boolean;
+    /**
+     * Manually set by staff to exclude the takedown from median-time metrics
+     * when the liveness-check step was delayed for reasons unrelated to
+     * platform performance.
+     */
+    hasLivenessCheckDelay: boolean;
     createdAt: string;
     updatedAt: string;
     asset: {
@@ -666,6 +868,11 @@ interface TakedownItem {
         content: string;
         type: string;
         livenessStatus: LivenessStatus | null;
+        /**
+         * When the asset transitioned to BLOCKED (ISO 8601, UTC). Null if the
+         * asset was never blocked (rare for takedown rows).
+         */
+        blockedAt: string | null;
     };
     assignee: {
         id: number;
@@ -676,6 +883,26 @@ interface TakedownItem {
         name: string;
         slug: string | null;
     } | null;
+    /**
+     * Domain registrar assigned to this takedown (e.g. Namecheap, GoDaddy).
+     * Null when unresolved. Distinct from per-task `takedownProvider` — this
+     * is the takedown-level assignment for the domain itself.
+     */
+    domainRegistrar: TakedownProviderRef | null;
+    /**
+     * Hosting provider assigned to this takedown (e.g. Cloudflare, AWS).
+     * Answers "who hosts this?" without a follow-up call. Null when unresolved.
+     */
+    hostingProvider: TakedownProviderRef | null;
+    /**
+     * Top-level-domain registrar assigned to this takedown (e.g. Verisign).
+     * Null when unresolved.
+     */
+    tldRegistrar: TakedownProviderRef | null;
+}
+interface TakedownProviderRef {
+    id: number;
+    name: string;
 }
 interface TakedownsListResult {
     takedowns: TakedownItem[];
@@ -1033,4 +1260,4 @@ declare class ChainPatrolApiClient implements ApiClient {
 declare function parseIsoDate(value: string | undefined): Date | undefined;
 declare function parseIsoDateString(value: string | undefined): string | undefined;
 
-export { type ApiClient, type ApiCredential, type AssetCheckInput, type AssetCheckResult, type AssetCheckSourceEntry, type AssetCheckStatus, type AssetGroupItem, type AssetListInput, type AssetListItem, type AssetListResult, type AssetSearchInput, type AssetSearchResult, type AssetSearchResultItem, type BrandItem, type BrandLegalDocument, type BrandLegalDocuments, type BrandTrademarkRegistrationItem, type BrandType, ChainPatrolApiClient, type ChainPatrolApiClientOptions, type ConfigEntry, type CredentialProvider, DETECTION_CONFIDENCE_LEVELS, DETECTION_REPORTED_FILTERS, type DetectionConfidence, type DetectionConfigRunInput, type DetectionConfigRunResult, type DetectionConfigUpdateInput, type DetectionConfigUpdateResult, type DetectionConfigValidateInput, type DetectionConfigValidateResult, type DetectionDriftInput, type DetectionDriftResult, type DetectionListInput, type DetectionListItem, type DetectionListResult, type DetectionReportStatus, type DetectionReportedFilter, type DetectionSource, type HealthcheckCategory, type HealthcheckFinding, type HealthcheckRegistryEntry, type HealthcheckResult, type HealthcheckSeverity, type HealthchecksListResult, LIVENESS_FILTER_VALUES, LIVENESS_STATUSES, type LivenessFilterValue, type LivenessStatus, type MetricsBreakdownInput, type MetricsBreakdownResult, type MetricsFoundInput, type MetricsFoundResult, type MetricsSummaryInput, type MetricsSummaryResult, ORGANIZATION_METRICS_INCLUDE_FIELDS, type OperationsQueuesSnapshotInput, type OperationsQueuesSnapshotResult, type OrganizationAssetGroupsListResult, type OrganizationAssetItem, type OrganizationAssetsListInput, type OrganizationAssetsListResult, type OrganizationBrandsListResult, type OrganizationMetricsIncludeField, type OrganizationMetricsInput, type OrganizationMetricsResult, type OrganizationMetricsResultMetrics, type OrganizationMetricsServicesFilter, type OrganizationMetricsVisibility, type OrganizationPortalVisibility, type OrganizationReportVisibility, type OrganizationReportsListInput, type OrganizationReportsListResult, type PendingApprovalService, type PendingServiceApproval, REPORT_REVIEW_DECISIONS, REPORT_STATUSES, type ReportAssetInput, type ReportCreateInput, type ReportCreateResult, type ReportReviewDecision, type ReportStatus, type ReportsSearchInput, type ReportsSearchResult, type ReportsSearchResultItem, TAKEDOWN_SORT_KEYS, TAKEDOWN_STATUSES, type TakedownItem, type TakedownSortKey, type TakedownStatus, type TakedownsListInput, type TakedownsListResult, type ThreatItem, type ThreatsListInput, type ThreatsListResult, type UserMeResult, type UserOrg, type UserOrgBrandMetadata, type UserOrgGetInput, type UserOrgGetResult, type UserOrgIntegrations, type UserOrgLegalDocument, type UserOrgLegalDocuments, type UserOrgPortalCustomization, type UserOrgTrademarkRegistration, type UserOrgsInput, type UserOrgsObligatoryAdminApprovalFilter, type UserOrgsPendingServiceApprovalFilter, type UserOrgsResult, type UserOrgsServiceFilters, type UserOrgsSubscriptionStatus, type ValidateApiKeyResult, WATCHLIST_FILTER_VALUES, type WatchlistFilterValue, parseIsoDate, parseIsoDateString, staticApiKey, staticBearerToken };
+export { ACTOR_KINDS, type ActorKind, type ApiClient, type ApiCredential, type AssetCheckInput, type AssetCheckResult, type AssetCheckSourceEntry, type AssetCheckStatus, type AssetGroupItem, type AssetListInput, type AssetListItem, type AssetListResult, type AssetSearchInput, type AssetSearchResult, type AssetSearchResultItem, type BrandItem, type BrandLegalDocument, type BrandLegalDocuments, type BrandTrademarkRegistrationItem, type BrandType, ChainPatrolApiClient, type ChainPatrolApiClientOptions, type ConfigEntry, type CredentialProvider, DETECTION_CONFIDENCE_LEVELS, DETECTION_REPORTED_FILTERS, type DetectionBrand, type DetectionConfidence, type DetectionConfigRunInput, type DetectionConfigRunResult, type DetectionConfigUpdateInput, type DetectionConfigUpdateResult, type DetectionConfigValidateInput, type DetectionConfigValidateResult, type DetectionDriftInput, type DetectionDriftResult, type DetectionListInput, type DetectionListItem, type DetectionListResult, type DetectionReportStatus, type DetectionReportedFilter, type DetectionSource, type HealthcheckCategory, type HealthcheckFinding, type HealthcheckRegistryEntry, type HealthcheckResult, type HealthcheckSeverity, type HealthchecksListResult, LIVENESS_FILTER_VALUES, LIVENESS_STATUSES, type LivenessFilterValue, type LivenessStatus, type MetricsBreakdownInput, type MetricsBreakdownResult, type MetricsFoundInput, type MetricsFoundResult, type MetricsSummaryInput, type MetricsSummaryResult, ORGANIZATION_METRICS_INCLUDE_FIELDS, type OperationsQueuesSnapshotInput, type OperationsQueuesSnapshotResult, type OrganizationAssetGroupsListResult, type OrganizationAssetItem, type OrganizationAssetsListInput, type OrganizationAssetsListResult, type OrganizationBrandsListResult, type OrganizationMetricsIncludeField, type OrganizationMetricsInput, type OrganizationMetricsResult, type OrganizationMetricsResultMetrics, type OrganizationMetricsServicesFilter, type OrganizationMetricsVisibility, type OrganizationPortalVisibility, type OrganizationReportAssetScan, type OrganizationReportAssetScanEnrichment, type OrganizationReportAttachment, type OrganizationReportVisibility, type OrganizationReportsListInput, type OrganizationReportsListResult, type PendingApprovalService, type PendingServiceApproval, REPORT_REVIEW_DECISIONS, REPORT_STATUSES, type ReportAssetInput, type ReportCreateInput, type ReportCreateResult, type ReportReviewDecision, type ReportStatus, type ReportsSearchInput, type ReportsSearchResult, type ReportsSearchResultItem, TAKEDOWN_SORT_KEYS, TAKEDOWN_STATUSES, type TakedownItem, type TakedownProviderRef, type TakedownSortKey, type TakedownStatus, type TakedownsListInput, type TakedownsListResult, type ThreatItem, type ThreatsListInput, type ThreatsListResult, type UserMeResult, type UserOrg, type UserOrgBrandMetadata, type UserOrgGetInput, type UserOrgGetResult, type UserOrgIntegrations, type UserOrgLegalDocument, type UserOrgLegalDocuments, type UserOrgPortalCustomization, type UserOrgTrademarkRegistration, type UserOrgsInput, type UserOrgsObligatoryAdminApprovalFilter, type UserOrgsPendingServiceApprovalFilter, type UserOrgsResult, type UserOrgsServiceFilters, type UserOrgsSubscriptionStatus, type ValidateApiKeyResult, WATCHLIST_FILTER_VALUES, type WatchlistFilterValue, parseIsoDate, parseIsoDateString, staticApiKey, staticBearerToken };