@collective-intelligence/external-apps-server-sdk 0.1.2 → 0.1.4

package/README.md

@@ -1124,6 +1124,12 @@ const auth = createFederatedAuth({
 })
 ```
 
+For local development, `applicationOrigin` and `issuer` also accept an `http`
+origin whose host is exactly `localhost`, a `127.0.0.0/8` address, or `[::1]`,
+for example `http://localhost:3000`. On such an origin the session cookie is
+`ci-federated`, without the `__Host-` prefix and the `Secure` attribute, which
+browsers do not accept over plain HTTP. Any other `http` origin is rejected.
+
 Each request uses its own URL origin. A request on an unlisted origin gets
 `400 invalid_request`, and session lookups on it return `null`. The `Origin`
 header, `returnTo` and logout checks compare with that request origin. Login
@@ -1145,6 +1151,86 @@ session lookup revalidates the short-lived CI identity. Revoked or expired CI
 access ends application authorization on the next validation. A confidential
 OAuth client may supply `clientSecret`; a public PKCE client omits it.
 
+### Configure from the CLI enrollment
+
+`ci apps enroll --env-file .env.local` writes the application's identity as
+`CI_ISSUER`, `CI_AUDIENCE`, `CI_APPLICATION_ID`, `CI_CLIENT_ID`,
+`CI_ORGANIZATION_ID`, `CI_SCOPES` and, for a confidential application,
+`CI_CLIENT_SECRET`. `readApplicationEnrollment` reads those variables, so the
+application names none of them. It throws a `TypeError` that lists every
+missing variable. Pass the same prefix as `--prefix` when it is not `CI_`.
+
+```ts
+import {
+  createFederatedAuth,
+  readApplicationEnrollment
+} from "@collective-intelligence/external-apps-server-sdk/auth/federated"
+
+const enrollment = readApplicationEnrollment(process.env)
+export const auth = createFederatedAuth({
+  ...enrollment,
+  applicationOrigin: "http://localhost:3000",
+  session: { kind: "sealed_cookie", secrets: [sessionSecret] }
+})
+```
+
+Register `<applicationOrigin>/api/auth/callback` as the redirect URI:
+`ci apps enroll --redirect-uri http://localhost:3000/api/auth/callback ...`.
+
+### Read the session without a `Request`
+
+`getSession` and `getAccessToken` take a `Request`. Next.js Server Components
+and Server Functions have headers only. `sessionRequest` builds the request
+those reads need: it carries only the cookie, on the application origin.
+
+```ts
+import { sessionRequest } from "@collective-intelligence/external-apps-server-sdk/auth/federated"
+import { headers } from "next/headers"
+
+const accessToken = await auth.getAccessToken?.(
+  sessionRequest(await headers(), applicationOrigin)
+)
+```
+
+Mount `auth.handler` as the `GET` and `POST` handlers of
+`app/api/auth/[...path]/route.ts`.
+
+### Verify the access token in your own API
+
+When the application forwards the user's CI access token to a separate API as
+`Authorization: Bearer`, that API checks it with `createAccessTokenVerifier`.
+
+```ts
+import {
+  createAccessTokenVerifier,
+  FederatedAuthRejectedError,
+  readApplicationEnrollment
+} from "@collective-intelligence/external-apps-server-sdk/auth/federated"
+
+const tokens = createAccessTokenVerifier(readApplicationEnrollment(process.env))
+
+const caller = await tokens.verify(bearerToken)
+// userId, organizationId, applicationId, clientId, scopes, sessionId, expiresAt
+
+const identity = await tokens.identity(bearerToken, { signal: request.signal })
+// the same fields, and user { id, email, name }, roles, groupIds
+```
+
+- `verify` is offline against the issuer key set: ES256 signature, issuer,
+  audience, lifetime, and the application, client and Organization you supply.
+  It does not see a revocation before the token expires.
+- `identity` runs `verify`, then reads CI's current identity for the token and
+  checks that it describes the same grant. Use it when the API needs the
+  user's roles or groups, or must stop at once when CI revokes the token. It
+  is one CI request for each call, with a 10-second limit; cache the result
+  for as long as a role change may take to reach your API. Pass the `signal`
+  of the request you serve: when it aborts, the CI request ends and the call
+  rejects with the abort reason.
+
+Both throw `FederatedAuthRejectedError` for a token that is not valid for this
+application; answer `401`. Both throw `ApplicationUserAuthUnavailableError`
+when CI does not answer; answer `503`.
+
 ### Forwarding a bound entity to CI
 
 Import `defineCiEntityResource` from `/resources` and use it with the same

package/dist/admin.js

@@ -1,6 +1,6 @@
-var __defProp=Object.defineProperty;var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(null,newValue)}var __export=(target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:true,configurable:true,set:__exportSetter.bind(all,name)})};var exports_client={};__export(exports_client,{serverSdkAdminEntrypoint:()=>serverSdkAdminEntrypoint,serverAdminNamespaces:()=>serverAdminNamespaces,externalAppAdminScope:()=>externalAppAdminScope,createAdminClient:()=>createAdminClient});var jsonBodySerializer={bodySerializer:(body)=>JSON.stringify(body,(_key,value)=>typeof value==="bigint"?value.toString():value)};function createSseClient({onRequest,onSseError,onSseEvent,responseTransformer,responseValidator,sseDefaultRetryDelay,sseMaxRetryAttempts,sseMaxRetryDelay,sseSleepFn,url,...options}){let lastEventId;const sleep=sseSleepFn??((ms)=>new Promise((resolve)=>setTimeout(resolve,ms)));const createStream=async function*(){let retryDelay=sseDefaultRetryDelay??3000;let attempt=0;const signal=options.signal??new AbortController().signal;while(true){if(signal.aborted)break;attempt++;const headers=options.headers instanceof Headers?options.headers:new Headers(options.headers);if(lastEventId!==undefined){headers.set("Last-Event-ID",lastEventId)}try{const requestInit={redirect:"follow",...options,body:options.serializedBody??null,headers,signal};let request=new Request(url,requestInit);if(onRequest){request=await onRequest(url,requestInit)}const _fetch=options.fetch??globalThis.fetch;const response=await _fetch(request);if(!response.ok)throw new Error(`SSE failed: ${response.status} ${response.statusText}`);if(!response.body)throw new Error("No body in SSE response");const reader=response.body.pipeThrough(new TextDecoderStream).getReader();let buffer="";const abortHandler=()=>{try{reader.cancel()}catch{}};signal.addEventListener("abort",abortHandler);try{while(true){const{done,value}=await reader.read();if(done)break;buffer+=value;buffer=buffer.replace(/\r\n?/g,`
+var __defProp=Object.defineProperty;var __returnValue=(v)=>v;function __exportSetter(name,newValue){this[name]=__returnValue.bind(null,newValue)}var __export=(target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:true,configurable:true,set:__exportSetter.bind(all,name)})};var exports_client={};__export(exports_client,{createAdminClient:()=>createAdminClient,externalAppAdminScope:()=>externalAppAdminScope,serverAdminNamespaces:()=>serverAdminNamespaces,serverSdkAdminEntrypoint:()=>serverSdkAdminEntrypoint});var jsonBodySerializer={bodySerializer:(body)=>JSON.stringify(body,(_key,value)=>typeof value==="bigint"?value.toString():value)};function createSseClient({onRequest,onSseError,onSseEvent,responseTransformer,responseValidator,sseDefaultRetryDelay,sseMaxRetryAttempts,sseMaxRetryDelay,sseSleepFn,url,...options}){let lastEventId;const sleep=sseSleepFn??((ms)=>new Promise((resolve)=>setTimeout(resolve,ms)));const createStream=async function*(){let retryDelay=sseDefaultRetryDelay??3000;let attempt=0;const signal=options.signal??new AbortController().signal;while(true){if(signal.aborted)break;attempt++;const headers=options.headers instanceof Headers?options.headers:new Headers(options.headers);if(lastEventId!==undefined){headers.set("Last-Event-ID",lastEventId)}try{const requestInit={redirect:"follow",...options,body:options.serializedBody??null,headers,signal};let request=new Request(url,requestInit);if(onRequest){request=await onRequest(url,requestInit)}const _fetch=options.fetch??globalThis.fetch;const response=await _fetch(request);if(!response.ok)throw new Error(`SSE failed: ${response.status} ${response.statusText}`);if(!response.body)throw new Error("No body in SSE response");const reader=response.body.pipeThrough(new TextDecoderStream).getReader();let buffer="";const abortHandler=()=>{try{reader.cancel()}catch{}};signal.addEventListener("abort",abortHandler);try{while(true){const{done,value}=await reader.read();if(done)break;buffer+=value;buffer=buffer.replace(/\r\n?/g,`
 `);const chunks=buffer.split(`
 
 `);buffer=chunks.pop()??"";for(const chunk of chunks){const lines=chunk.split(`
 `);const dataLines=[];let eventName;for(const line of lines){if(line.startsWith("data:")){dataLines.push(line.replace(/^data:\s*/,""))}else if(line.startsWith("event:")){eventName=line.replace(/^event:\s*/,"")}else if(line.startsWith("id:")){lastEventId=line.replace(/^id:\s*/,"")}else if(line.startsWith("retry:")){const parsed=Number.parseInt(line.replace(/^retry:\s*/,""),10);if(!Number.isNaN(parsed)){retryDelay=parsed}}}let data;let parsedJson=false;if(dataLines.length){const rawData=dataLines.join(`
-`);try{data=JSON.parse(rawData);parsedJson=true}catch{data=rawData}}if(parsedJson){if(responseValidator){await responseValidator(data)}if(responseTransformer){data=await responseTransformer(data)}}onSseEvent?.({data,event:eventName,id:lastEventId,retry:retryDelay});if(dataLines.length){yield data}}}}finally{signal.removeEventListener("abort",abortHandler);reader.releaseLock()}break}catch(error){onSseError?.(error);if(sseMaxRetryAttempts!==undefined&&attempt>=sseMaxRetryAttempts){break}const backoff=Math.min(retryDelay*2**(attempt-1),sseMaxRetryDelay??30000);await sleep(backoff)}}};const stream=createStream();return{stream}}var separatorArrayExplode=(style)=>{switch(style){case"label":return".";case"matrix":return";";case"simple":return",";default:return"&"}};var separatorArrayNoExplode=(style)=>{switch(style){case"form":return",";case"pipeDelimited":return"|";case"spaceDelimited":return"%20";default:return","}};var separatorObjectExplode=(style)=>{switch(style){case"label":return".";case"matrix":return";";case"simple":return",";default:return"&"}};var serializeArrayParam=({allowReserved,explode,name,style,value})=>{if(!explode){const joinedValues2=(allowReserved?value:value.map((v)=>encodeURIComponent(v))).join(separatorArrayNoExplode(style));switch(style){case"label":return`.${joinedValues2}`;case"matrix":return`;${name}=${joinedValues2}`;case"simple":return joinedValues2;default:return`${name}=${joinedValues2}`}}const separator=separatorArrayExplode(style);const joinedValues=value.map((v)=>{if(style==="label"||style==="simple"){return allowReserved?v:encodeURIComponent(v)}return serializePrimitiveParam({allowReserved,name,value:v})}).join(separator);return style==="label"||style==="matrix"?separator+joinedValues:joinedValues};var serializePrimitiveParam=({allowReserved,name,value})=>{if(value===undefined||value===null){return""}if(typeof value==="object"){throw new Error("Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.")}return`${name}=${allowReserved?value:encodeURIComponent(value)}`};var serializeObjectParam=({allowReserved,explode,name,style,value,valueOnly})=>{if(value instanceof Date){return valueOnly?value.toISOString():`${name}=${value.toISOString()}`}if(style!=="deepObject"&&!explode){let values=[];Object.entries(value).forEach(([key,v])=>{values=[...values,key,allowReserved?v:encodeURIComponent(v)]});const joinedValues2=values.join(",");switch(style){case"form":return`${name}=${joinedValues2}`;case"label":return`.${joinedValues2}`;case"matrix":return`;${name}=${joinedValues2}`;default:return joinedValues2}}const separator=separatorObjectExplode(style);const joinedValues=Object.entries(value).map(([key,v])=>serializePrimitiveParam({allowReserved,name:style==="deepObject"?`${name}[${key}]`:key,value:v})).join(separator);return style==="label"||style==="matrix"?separator+joinedValues:joinedValues};var PATH_PARAM_RE=/\{[^{}]+\}/g;var defaultPathSerializer=({path,url:_url})=>{let url=_url;const matches=_url.match(PATH_PARAM_RE);if(matches){for(const match of matches){let explode=false;let name=match.substring(1,match.length-1);let style="simple";if(name.endsWith("*")){explode=true;name=name.substring(0,name.length-1)}if(name.startsWith(".")){name=name.substring(1);style="label"}else if(name.startsWith(";")){name=name.substring(1);style="matrix"}const value=path[name];if(value===undefined||value===null){continue}if(Array.isArray(value)){url=url.replace(match,serializeArrayParam({explode,name,style,value}));continue}if(typeof value==="object"){url=url.replace(match,serializeObjectParam({explode,name,style,value,valueOnly:true}));continue}if(style==="matrix"){url=url.replace(match,`;${serializePrimitiveParam({name,value})}`);continue}const replaceValue=encodeURIComponent(style==="label"?`.${value}`:value);url=url.replace(match,replaceValue)}}return url};var getUrl=({baseUrl,path,query,querySerializer,url:_url})=>{const pathUrl=_url.startsWith("/")?_url:`/${_url}`;let url=(baseUrl??"")+pathUrl;if(path){url=defaultPathSerializer({path,url})}let search=query?querySerializer(query):"";if(search.startsWith("?")){search=search.substring(1)}if(search){url+=`?${search}`}return url};function getValidRequestBody(options){const hasBody=options.body!==undefined;const isSerializedBody=hasBody&&options.bodySerializer;if(isSerializedBody){if("serializedBody"in options){const hasSerializedBody=options.serializedBody!==undefined&&options.serializedBody!=="";return hasSerializedBody?options.serializedBody:null}return options.body!==""?options.body:null}if(hasBody){return options.body}return}var getAuthToken=async(auth,callback)=>{const token=typeof callback==="function"?await callback(auth):callback;if(!token){return}if(auth.scheme==="bearer"){return`Bearer ${token}`}if(auth.scheme==="basic"){return`Basic ${btoa(token)}`}return token};var createQuerySerializer=({parameters={},...args}={})=>{const querySerializer=(queryParams)=>{const search=[];if(queryParams&&typeof queryParams==="object"){for(const name in queryParams){const value=queryParams[name];if(value===undefined||value===null){continue}const options=parameters[name]||args;if(Array.isArray(value)){const serializedArray=serializeArrayParam({allowReserved:options.allowReserved,explode:true,name,style:"form",value,...options.array});if(serializedArray)search.push(serializedArray)}else if(typeof value==="object"){const serializedObject=serializeObjectParam({allowReserved:options.allowReserved,explode:true,name,style:"deepObject",value,...options.object});if(serializedObject)search.push(serializedObject)}else{const serializedPrimitive=serializePrimitiveParam({allowReserved:options.allowReserved,name,value});if(serializedPrimitive)search.push(serializedPrimitive)}}}return search.join("&")};return querySerializer};var getParseAs=(contentType)=>{if(!contentType){return"stream"}const cleanContent=contentType.split(";")[0]?.trim();if(!cleanContent){return}if(cleanContent.startsWith("application/json")||cleanContent.endsWith("+json")){return"json"}if(cleanContent==="multipart/form-data"){return"formData"}if(["application/","audio/","image/","video/"].some((type)=>cleanContent.startsWith(type))){return"blob"}if(cleanContent.startsWith("text/")){return"text"}return};var checkForExistence=(options,name)=>{if(!name){return false}if(options.headers.has(name)||options.query?.[name]||options.headers.get("Cookie")?.includes(`${name}=`)){return true}return false};var setAuthParams=async({security,...options})=>{for(const auth of security){if(checkForExistence(options,auth.name)){continue}const token=await getAuthToken(auth,options.auth);if(!token){continue}const name=auth.name??"Authorization";switch(auth.in){case"query":if(!options.query){options.query={}}options.query[name]=token;break;case"cookie":options.headers.append("Cookie",`${name}=${token}`);break;case"header":default:options.headers.set(name,token);break}}};var buildUrl=(options)=>getUrl({baseUrl:options.baseUrl,path:options.path,query:options.query,querySerializer:typeof options.querySerializer==="function"?options.querySerializer:createQuerySerializer(options.querySerializer),url:options.url});var mergeConfigs=(a,b)=>{const config={...a,...b};if(config.baseUrl?.endsWith("/")){config.baseUrl=config.baseUrl.substring(0,config.baseUrl.length-1)}config.headers=mergeHeaders(a.headers,b.headers);return config};var headersEntries=(headers)=>{const entries=[];headers.forEach((value,key)=>{entries.push([key,value])});return entries};var mergeHeaders=(...headers)=>{const mergedHeaders=new Headers;for(const header of headers){if(!header){continue}const iterator=header instanceof Headers?headersEntries(header):Object.entries(header);for(const[key,value]of iterator){if(value===null){mergedHeaders.delete(key)}else if(Array.isArray(value)){for(const v of value){mergedHeaders.append(key,v)}}else if(value!==undefined){mergedHeaders.set(key,typeof value==="object"?JSON.stringify(value):value)}}}return mergedHeaders};class Interceptors{fns=[];clear(){this.fns=[]}eject(id){const index=this.getInterceptorIndex(id);if(this.fns[index]){this.fns[index]=null}}exists(id){const index=this.getInterceptorIndex(id);return Boolean(this.fns[index])}getInterceptorIndex(id){if(typeof id==="number"){return this.fns[id]?id:-1}return this.fns.indexOf(id)}update(id,fn){const index=this.getInterceptorIndex(id);if(this.fns[index]){this.fns[index]=fn;return id}return false}use(fn){this.fns.push(fn);return this.fns.length-1}}var createInterceptors=()=>({error:new Interceptors,request:new Interceptors,response:new Interceptors});var defaultQuerySerializer=createQuerySerializer({allowReserved:false,array:{explode:true,style:"form"},object:{explode:true,style:"deepObject"}});var defaultHeaders={"Content-Type":"application/json"};var createConfig=(override={})=>({...jsonBodySerializer,headers:defaultHeaders,parseAs:"auto",querySerializer:defaultQuerySerializer,...override});var createClient=(config={})=>{let _config=mergeConfigs(createConfig(),config);const getConfig=()=>({..._config});const setConfig=(config2)=>{_config=mergeConfigs(_config,config2);return getConfig()};const interceptors=createInterceptors();const beforeRequest=async(options)=>{const opts={..._config,...options,fetch:options.fetch??_config.fetch??globalThis.fetch,headers:mergeHeaders(_config.headers,options.headers),serializedBody:undefined};if(opts.security){await setAuthParams({...opts,security:opts.security})}if(opts.requestValidator){await opts.requestValidator(opts)}if(opts.body!==undefined&&opts.bodySerializer){opts.serializedBody=opts.bodySerializer(opts.body)}if(opts.body===undefined||opts.serializedBody===""){opts.headers.delete("Content-Type")}const resolvedOpts=opts;const url=buildUrl(resolvedOpts);return{opts:resolvedOpts,url}};const request=async(options)=>{const{opts,url}=await beforeRequest(options);const requestInit={redirect:"follow",...opts,body:getValidRequestBody(opts)};let request2=new Request(url,requestInit);for(const fn of interceptors.request.fns){if(fn){request2=await fn(request2,opts)}}const _fetch=opts.fetch;let response;try{response=await _fetch(request2)}catch(error2){let finalError2=error2;for(const fn of interceptors.error.fns){if(fn){finalError2=await fn(error2,undefined,request2,opts)}}finalError2=finalError2||{};if(opts.throwOnError){throw finalError2}return opts.responseStyle==="data"?undefined:{error:finalError2,request:request2,response:undefined}}for(const fn of interceptors.response.fns){if(fn){response=await fn(response,request2,opts)}}const result={request:request2,response};if(response.ok){const parseAs=(opts.parseAs==="auto"?getParseAs(response.headers.get("Content-Type")):opts.parseAs)??"json";if(response.status===204||response.headers.get("Content-Length")==="0"){let emptyData;switch(parseAs){case"arrayBuffer":case"blob":case"text":emptyData=await response[parseAs]();break;case"formData":emptyData=new FormData;break;case"stream":emptyData=response.body;break;case"json":default:emptyData={};break}return opts.responseStyle==="data"?emptyData:{data:emptyData,...result}}let data;switch(parseAs){case"arrayBuffer":case"blob":case"formData":case"text":data=await response[parseAs]();break;case"json":{const text=await response.text();data=text?JSON.parse(text):{};break}case"stream":return opts.responseStyle==="data"?response.body:{data:response.body,...result}}if(parseAs==="json"){if(opts.responseValidator){await opts.responseValidator(data)}if(opts.responseTransformer){data=await opts.responseTransformer(data)}}return opts.responseStyle==="data"?data:{data,...result}}const textError=await response.text();let jsonError;try{jsonError=JSON.parse(textError)}catch{}const error=jsonError??textError;let finalError=error;for(const fn of interceptors.error.fns){if(fn){finalError=await fn(error,response,request2,opts)}}finalError=finalError||{};if(opts.throwOnError){throw finalError}return opts.responseStyle==="data"?undefined:{error:finalError,...result}};const makeMethodFn=(method)=>(options)=>request({...options,method});const makeSseFn=(method)=>async(options)=>{const{opts,url}=await beforeRequest(options);return createSseClient({...opts,body:opts.body,headers:opts.headers,method,onRequest:async(url2,init)=>{let request2=new Request(url2,init);for(const fn of interceptors.request.fns){if(fn){request2=await fn(request2,opts)}}return request2},serializedBody:getValidRequestBody(opts),url})};const _buildUrl=(options)=>buildUrl({..._config,...options});return{buildUrl:_buildUrl,connect:makeMethodFn("CONNECT"),delete:makeMethodFn("DELETE"),get:makeMethodFn("GET"),getConfig,head:makeMethodFn("HEAD"),interceptors,options:makeMethodFn("OPTIONS"),patch:makeMethodFn("PATCH"),post:makeMethodFn("POST"),put:makeMethodFn("PUT"),request,setConfig,sse:{connect:makeSseFn("CONNECT"),delete:makeSseFn("DELETE"),get:makeSseFn("GET"),head:makeSseFn("HEAD"),options:makeSseFn("OPTIONS"),patch:makeSseFn("PATCH"),post:makeSseFn("POST"),put:makeSseFn("PUT"),trace:makeSseFn("TRACE")},trace:makeMethodFn("TRACE")}};var client=createClient(createConfig());var eventHubMonitoringSearchSubscriptions=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/subscriptions/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var eventHubMonitoringSearchDeadLetters=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/dead-letters/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var eventHubMonitoringDeadLetterDetail=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/dead-letters/{deadLetterId}",...options});var eventHubMonitoringReplayDeadLetter=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/dead-letters/{deadLetterId}/replay",...options,headers:{"Content-Type":"application/json",...options.headers}});var cacheAdminListInstances=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/cache/instances",...options});var cacheAdminInvalidateEntry=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/cache/entries/{entryId}",...options});var cacheAdminClear=(options)=>(options?.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/cache/clear",...options,headers:{"Content-Type":"application/json",...options?.headers}});var infrastructureJobsList=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/jobs",...options});var infrastructureJobsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/jobs/{name}",...options});var infrastructureJobsTrigger=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/jobs/{name}/trigger",...options,headers:{"Content-Type":"application/json",...options.headers}});var adminActivitiesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/activities/{organizationId}/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var adminActivitiesDetail=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/activities/{organizationId}/{activityId}",...options});var adminActivitiesEvidence=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/activities/{organizationId}/{activityId}/evidence",...options});var aiApprovalRequestsSearchRequests=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/approvals/requests/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiApprovalRequestsCreateRule=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/approvals/rules",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiApprovalRequestsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/approvals/{id}",...options});var aiEmbeddingModelsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiEmbeddingModelsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/{id}",...options});var aiEmbeddingModelsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/{id}",...options});var aiEmbeddingModelsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiEmbeddingModelsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiRunsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiRunsDetail=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/{invocationId}",...options});var aiRunsArtifacts=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/{invocationId}/artifacts",...options});var aiRunsReveal=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/{invocationId}/reveal",...options});var aiSkillsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiSkillsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/{id}",...options});var aiSkillsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/{id}",...options});var aiSkillsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiSkillsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorInstancesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorInstancesDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}",...options});var knowledgeConnectorInstancesGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}",...options});var knowledgeConnectorInstancesUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorInstancesTestConnection=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}/test-connection",...options});var knowledgeConnectorInstancesConfigurationRefresh=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}/configuration-refresh",...options});var knowledgeConnectorInstancesDiscoverSchemas=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}/discover-schemas",...options});var knowledgeConnectorTemplatesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorTemplatesGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/{id}",...options});var knowledgeConnectorTemplatesUninstall=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/{fqn}/install",...options});var knowledgeConnectorTemplatesInstall=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/{fqn}/install",...options,headers:{"Content-Type":"application/json",...options.headers}});var packageReleasesPublish=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/package-releases/publish",...options,headers:{"Content-Type":"application/json",...options.headers}});var packageReleasesPromote=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/package-releases/promote",...options,headers:{"Content-Type":"application/json",...options.headers}});var packageReleasesUpdateInstallation=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/package-installations/update",...options,headers:{"Content-Type":"application/json",...options.headers}});var extensionPackagesList=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages",...options});var extensionPackagesUninstall=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages/{fqn}",...options});var extensionPackagesGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages/{fqn}",...options});var extensionPackagesInstall=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages/{fqn}/install",...options,headers:{"Content-Type":"application/json",...options.headers}});var candidateProposalsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var candidateProposalsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/{id}",...options});var candidateProposalsAccept=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/{id}/accept",...options,headers:{"Content-Type":"application/json",...options.headers}});var candidateProposalsReject=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/{id}/reject",...options});var relationSchemasSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var relationSchemasDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/{id}",...options});var relationSchemasGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/{id}",...options});var relationSchemasUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var relationSchemasCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas",...options,headers:{"Content-Type":"application/json",...options.headers}});var entitySchemasSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var entitySchemasDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/{id}",...options});var entitySchemasGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/{id}",...options});var entitySchemasUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var entitySchemasCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeSyncQueueSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/sync-queue/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeSyncQueueGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/sync-queue/{id}",...options});var knowledgeSyncQueueRetry=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/sync-queue/{id}/retry",...options});var knowledgeIngestionRunsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/ingestion-runs/{sourceFileId}",...options});var studioAppSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var studioAppDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}",...options});var studioAppGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}",...options});var studioAppUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var studioAppCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps",...options,headers:{"Content-Type":"application/json",...options.headers}});var studioAppPublish=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}/publish",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantCapabilitiesGet=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/capabilities",...options});var tenantFeatureFlagsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/feature-flags/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantFeatureFlagsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/feature-flags/{uid}",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantExternalAppsList=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps",...options});var tenantExternalAppsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantExternalAppsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}",...options});var tenantExternalAppsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantExternalAppsDisable=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}/disable",...options});var tenantExternalAppsRotateCredential=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}/credential/rotate",...options});var tenantMonitoringOverview=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/monitoring/overview",...options});var tenantVariablesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantVariablesDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables/{id}",...options});var tenantVariablesUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantVariablesCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/{id}",...options});var organizationsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/{id}",...options});var organizationsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationsGetTeardown=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/teardowns/{teardownId}",...options});var organizationUsersSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/users/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationUsersDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/users/{id}",...options});var organizationUsersUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/users/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups/{id}",...options});var organizationGroupsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupMembersSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/group-members/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupMembersDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/group-members/{id}",...options});var organizationGroupMembersCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/group-members",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationInvitationsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/invitations",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationInvitationsRevoke=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/invitations/{id}",...options});var organizationReportDefinitionsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportDefinitionsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportDefinitionsArchive=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/{reportId}",...options});var organizationReportDefinitionsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/{reportId}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportDefinitionsRun=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/{reportId}/runs",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportRunsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-runs/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportRunsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-runs/{runId}",...options});var organizationAuthenticationListProviders=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers",...options});var organizationAuthenticationConfigureLocalMethod=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers/{method}/local",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationAuthenticationConfigureSsoProvider=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers/{provider}/sso",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationAuthenticationStartSsoTest=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers/{provider}/test",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}",...options});var organizationConnectionsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}",...options});var organizationConnectionsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsTest=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}/test",...options});var organizationConnectionsRefresh=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}/refresh",...options});var organizationApiKeysSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/api-keys/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationApiKeysCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/api-keys",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationApiKeysRevoke=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/api-keys/{id}/revoke",...options});var organizationExternalAppsList=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps",...options});var organizationExternalAppsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationExternalAppsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}",...options});var organizationExternalAppsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationExternalAppsDisable=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}/disable",...options});var organizationExternalAppsRotateCredential=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}/credential/rotate",...options});var workflowSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}",...options});var workflowFolderBrowse=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/folders",...options});var workflowFolderCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/folders",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowFolderDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/folders/{folderId}",...options});var workflowWorkingCopyGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/working-copy",...options});var workflowWorkingCopySave=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/working-copy/save",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowVersionSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/versions/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowVersionPublish=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/versions/{versionId}/publish",...options,headers:{"Content-Type":"application/json",...options.headers}});var bindOperation=(client2,operation)=>async(options)=>{const requestOptions={...options,client:client2,throwOnError:true};const result=await operation(requestOptions);return result.data};var administrationNamespaceInventory={aiAuthoring:{availability:"generated"},aiConfiguration:{availability:"generated"},aiGovernance:{availability:"generated"},apiKeys:{availability:"generated"},audit:{availability:"generated"},authentication:{availability:"generated"},connections:{availability:"generated"},eventsAndNotifications:{availability:"generated"},groups:{availability:"generated"},infrastructure:{availability:"generated"},knowledgeConnectors:{availability:"generated"},knowledgeIngestion:{availability:"generated"},knowledgeSchemas:{availability:"generated"},members:{availability:"generated"},organizations:{availability:"generated"},packages:{availability:"generated"},reports:{availability:"generated"},studioAdministration:{availability:"generated"},tenantAdministration:{availability:"generated"},workflowAdministration:{availability:"generated"}};var createAdministrationApi=(client2)=>({aiAuthoring:{createSkill:bindOperation(client2,aiSkillsCreate),deleteSkill:bindOperation(client2,aiSkillsDelete),getSkill:bindOperation(client2,aiSkillsGet),listSkills:bindOperation(client2,aiSkillsSearch),updateSkill:bindOperation(client2,aiSkillsUpdate)},aiConfiguration:{createEmbeddingModel:bindOperation(client2,aiEmbeddingModelsCreate),deleteEmbeddingModel:bindOperation(client2,aiEmbeddingModelsDelete),getEmbeddingModel:bindOperation(client2,aiEmbeddingModelsGet),listEmbeddingModels:bindOperation(client2,aiEmbeddingModelsSearch),updateEmbeddingModel:bindOperation(client2,aiEmbeddingModelsUpdate)},aiGovernance:{createApprovalRule:bindOperation(client2,aiApprovalRequestsCreateRule),getApprovalRequest:bindOperation(client2,aiApprovalRequestsGet),getRun:bindOperation(client2,aiRunsDetail),listApprovalRequests:bindOperation(client2,aiApprovalRequestsSearchRequests),listRunArtifacts:bindOperation(client2,aiRunsArtifacts),listRuns:bindOperation(client2,aiRunsSearch),revealRun:bindOperation(client2,aiRunsReveal)},apiKeys:{create:bindOperation(client2,organizationApiKeysCreate),list:bindOperation(client2,organizationApiKeysSearch),revoke:bindOperation(client2,organizationApiKeysRevoke)},audit:{detail:bindOperation(client2,adminActivitiesDetail),evidence:bindOperation(client2,adminActivitiesEvidence),search:bindOperation(client2,adminActivitiesSearch)},authentication:{configureLocalMethod:bindOperation(client2,organizationAuthenticationConfigureLocalMethod),configureSsoProvider:bindOperation(client2,organizationAuthenticationConfigureSsoProvider),listSsoProviders:bindOperation(client2,organizationAuthenticationListProviders),testSsoProvider:bindOperation(client2,organizationAuthenticationStartSsoTest)},connections:{create:bindOperation(client2,organizationConnectionsCreate),delete:bindOperation(client2,organizationConnectionsDelete),get:bindOperation(client2,organizationConnectionsGet),list:bindOperation(client2,organizationConnectionsSearch),refreshDiscovery:bindOperation(client2,organizationConnectionsRefresh),test:bindOperation(client2,organizationConnectionsTest),update:bindOperation(client2,organizationConnectionsUpdate)},eventsAndNotifications:{getDeadLetter:bindOperation(client2,eventHubMonitoringDeadLetterDetail),listDeadLetters:bindOperation(client2,eventHubMonitoringSearchDeadLetters),listSubscriptions:bindOperation(client2,eventHubMonitoringSearchSubscriptions),replayDeadLetter:bindOperation(client2,eventHubMonitoringReplayDeadLetter)},groups:{addMember:bindOperation(client2,organizationGroupMembersCreate),create:bindOperation(client2,organizationGroupsCreate),delete:bindOperation(client2,organizationGroupsDelete),list:bindOperation(client2,organizationGroupsSearch),listMembers:bindOperation(client2,organizationGroupMembersSearch),removeMember:bindOperation(client2,organizationGroupMembersDelete),update:bindOperation(client2,organizationGroupsUpdate)},infrastructure:{clearCache:bindOperation(client2,cacheAdminClear),getJob:bindOperation(client2,infrastructureJobsGet),invalidateCacheEntry:bindOperation(client2,cacheAdminInvalidateEntry),listCacheInstances:bindOperation(client2,cacheAdminListInstances),listJobs:bindOperation(client2,infrastructureJobsList),triggerJob:bindOperation(client2,infrastructureJobsTrigger)},knowledgeConnectors:{delete:bindOperation(client2,knowledgeConnectorInstancesDelete),discoverSchemas:bindOperation(client2,knowledgeConnectorInstancesDiscoverSchemas),get:bindOperation(client2,knowledgeConnectorInstancesGet),getTemplate:bindOperation(client2,knowledgeConnectorTemplatesGet),installTemplate:bindOperation(client2,knowledgeConnectorTemplatesInstall),list:bindOperation(client2,knowledgeConnectorInstancesSearch),listTemplates:bindOperation(client2,knowledgeConnectorTemplatesSearch),refreshConfiguration:bindOperation(client2,knowledgeConnectorInstancesConfigurationRefresh),test:bindOperation(client2,knowledgeConnectorInstancesTestConnection),uninstallTemplate:bindOperation(client2,knowledgeConnectorTemplatesUninstall),update:bindOperation(client2,knowledgeConnectorInstancesUpdate)},knowledgeIngestion:{approveProposal:bindOperation(client2,candidateProposalsAccept),getProposal:bindOperation(client2,candidateProposalsGet),getRun:bindOperation(client2,knowledgeIngestionRunsGet),getSync:bindOperation(client2,knowledgeSyncQueueGet),listProposals:bindOperation(client2,candidateProposalsSearch),listSyncs:bindOperation(client2,knowledgeSyncQueueSearch),rejectProposal:bindOperation(client2,candidateProposalsReject),retrySync:bindOperation(client2,knowledgeSyncQueueRetry)},knowledgeSchemas:{createEntitySchema:bindOperation(client2,entitySchemasCreate),createRelationSchema:bindOperation(client2,relationSchemasCreate),deleteEntitySchema:bindOperation(client2,entitySchemasDelete),deleteRelationSchema:bindOperation(client2,relationSchemasDelete),getEntitySchema:bindOperation(client2,entitySchemasGet),getRelationSchema:bindOperation(client2,relationSchemasGet),listEntitySchemas:bindOperation(client2,entitySchemasSearch),listRelationSchemas:bindOperation(client2,relationSchemasSearch),updateEntitySchema:bindOperation(client2,entitySchemasUpdate),updateRelationSchema:bindOperation(client2,relationSchemasUpdate)},members:{invite:bindOperation(client2,organizationInvitationsCreate),list:bindOperation(client2,organizationUsersSearch),remove:bindOperation(client2,organizationUsersDelete),revokeInvitation:bindOperation(client2,organizationInvitationsRevoke),update:bindOperation(client2,organizationUsersUpdate)},organizations:{archive:bindOperation(client2,organizationsDelete),get:bindOperation(client2,organizationsGet),getTeardown:bindOperation(client2,organizationsGetTeardown),list:bindOperation(client2,organizationsSearch),update:bindOperation(client2,organizationsUpdate)},packages:{get:bindOperation(client2,extensionPackagesGet),installRelease:bindOperation(client2,extensionPackagesInstall),list:bindOperation(client2,extensionPackagesList),promoteRelease:bindOperation(client2,packageReleasesPromote),publishRelease:bindOperation(client2,packageReleasesPublish),uninstall:bindOperation(client2,extensionPackagesUninstall),updateInstallation:bindOperation(client2,packageReleasesUpdateInstallation)},reports:{archiveDefinition:bindOperation(client2,organizationReportDefinitionsArchive),createDefinition:bindOperation(client2,organizationReportDefinitionsCreate),getRun:bindOperation(client2,organizationReportRunsGet),listDefinitions:bindOperation(client2,organizationReportDefinitionsSearch),listRuns:bindOperation(client2,organizationReportRunsSearch),run:bindOperation(client2,organizationReportDefinitionsRun),updateDefinition:bindOperation(client2,organizationReportDefinitionsUpdate)},studioAdministration:{createApp:bindOperation(client2,studioAppCreate),deleteApp:bindOperation(client2,studioAppDelete),getApp:bindOperation(client2,studioAppGet),listApps:bindOperation(client2,studioAppSearch),publishApp:bindOperation(client2,studioAppPublish),updateApp:bindOperation(client2,studioAppUpdate)},tenantAdministration:{createVariable:bindOperation(client2,tenantVariablesCreate),deleteVariable:bindOperation(client2,tenantVariablesDelete),getCapabilities:bindOperation(client2,tenantCapabilitiesGet),getMonitoringOverview:bindOperation(client2,tenantMonitoringOverview),listFeatureFlags:bindOperation(client2,tenantFeatureFlagsSearch),listVariables:bindOperation(client2,tenantVariablesSearch),updateFeatureFlag:bindOperation(client2,tenantFeatureFlagsUpdate),updateVariable:bindOperation(client2,tenantVariablesUpdate)},workflowAdministration:{create:bindOperation(client2,workflowCreate),createFolder:bindOperation(client2,workflowFolderCreate),delete:bindOperation(client2,workflowDelete),deleteFolder:bindOperation(client2,workflowFolderDelete),getWorkingCopy:bindOperation(client2,workflowWorkingCopyGet),list:bindOperation(client2,workflowSearch),listFolders:bindOperation(client2,workflowFolderBrowse),listVersions:bindOperation(client2,workflowVersionSearch),publishVersion:bindOperation(client2,workflowVersionPublish),saveWorkingCopy:bindOperation(client2,workflowWorkingCopySave)}});var clientConfig=(input)=>{const config={baseUrl:input.baseUrl,headers:{authorization:input.authorization}};if(input.fetch!==undefined){config.fetch=input.fetch}return config};var organizationHeaders=(scope)=>({"x-organization-id":scope.organizationId});var createExternalAppAdminApi=(config)=>{const client2="client"in config?config.client:createClient(clientConfig(config));return{create:async(scope,body)=>{if(scope.kind==="organization"){const{data:data2}=await organizationExternalAppsCreate({body,client:client2,headers:organizationHeaders(scope),throwOnError:true});return data2}const{data}=await tenantExternalAppsCreate({body,client:client2,throwOnError:true});return data},disable:async(scope,id)=>{if(scope.kind==="organization"){const{data:data2}=await organizationExternalAppsDisable({client:client2,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data2}const{data}=await tenantExternalAppsDisable({client:client2,path:{id},throwOnError:true});return data},get:async(scope,id)=>{if(scope.kind==="organization"){const{data:data2}=await organizationExternalAppsGet({client:client2,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data2}const{data}=await tenantExternalAppsGet({client:client2,path:{id},throwOnError:true});return data},list:async(scope)=>{if(scope.kind==="organization"){const{data:data2}=await organizationExternalAppsList({client:client2,headers:organizationHeaders(scope),throwOnError:true});return data2}const{data}=await tenantExternalAppsList({client:client2,throwOnError:true});return data},rotateCredential:async(scope,id)=>{if(scope.kind==="organization"){const{data:data2}=await organizationExternalAppsRotateCredential({client:client2,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data2}const{data}=await tenantExternalAppsRotateCredential({client:client2,path:{id},throwOnError:true});return data},update:async(scope,id,body)=>{if(scope.kind==="organization"){const{data:data2}=await organizationExternalAppsUpdate({body,client:client2,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data2}const{data}=await tenantExternalAppsUpdate({body,client:client2,path:{id},throwOnError:true});return data}}};var serverSdkAdminEntrypoint="admin";var serverAdminNamespaces={aiAuthoring:{...administrationNamespaceInventory.aiAuthoring,scopes:["ai:admin"]},aiConfiguration:{...administrationNamespaceInventory.aiConfiguration,scopes:["ai:admin"]},aiGovernance:{...administrationNamespaceInventory.aiGovernance,scopes:["ai:admin"]},apiKeys:{...administrationNamespaceInventory.apiKeys,scopes:["organizations:admin"]},applications:{availability:"generated",scopes:["applications:admin"]},audit:{...administrationNamespaceInventory.audit,scopes:["audit:admin"]},authentication:{...administrationNamespaceInventory.authentication,scopes:["organizations:admin"]},connections:{...administrationNamespaceInventory.connections,scopes:["organizations:admin"]},eventsAndNotifications:{...administrationNamespaceInventory.eventsAndNotifications,scopes:["organizations:admin"]},groups:{...administrationNamespaceInventory.groups,scopes:["organizations:admin"]},infrastructure:{...administrationNamespaceInventory.infrastructure,scopes:["infrastructure:admin"]},knowledgeConnectors:{...administrationNamespaceInventory.knowledgeConnectors,scopes:["organizations:admin"]},knowledgeIngestion:{...administrationNamespaceInventory.knowledgeIngestion,scopes:["knowledge-schemas:admin"]},knowledgeSchemas:{...administrationNamespaceInventory.knowledgeSchemas,scopes:["knowledge-schemas:admin"]},members:{...administrationNamespaceInventory.members,scopes:["organizations:admin"]},organizations:{...administrationNamespaceInventory.organizations,scopes:["organizations:admin"]},packages:{...administrationNamespaceInventory.packages,scopes:["packages:publish","packages:install"]},reports:{...administrationNamespaceInventory.reports,scopes:["organizations:admin"]},studioAdministration:{...administrationNamespaceInventory.studioAdministration,scopes:["organizations:admin"]},tenantAdministration:{...administrationNamespaceInventory.tenantAdministration,scopes:["organizations:admin"]},workflowAdministration:{...administrationNamespaceInventory.workflowAdministration,scopes:["ai:admin"]}};var[externalAppAdminScope]=serverAdminNamespaces.applications.scopes;var resolveAuthorization=async(provider)=>{const authorization=typeof provider==="string"?provider:await provider.getAuthorization();if(!authorization.startsWith("Bearer ")||authorization.slice("Bearer ".length).trim()===""){throw new TypeError("Server administration requires a Bearer user or API authorization")}return authorization};var parseTenantOrigin=(value)=>{let url;try{url=new URL(value)}catch{throw new TypeError("tenantUrl must contain only an HTTPS origin")}if(url.protocol!=="https:"||url.pathname!=="/"||url.search!==""||url.hash!==""||url.username!==""||url.password!==""){throw new TypeError("tenantUrl must contain only an HTTPS origin")}return url.origin};var createAdminClient=(config)=>{const clientOptions={baseUrl:parseTenantOrigin(config.tenantUrl)};if(config.fetch!==undefined){clientOptions.fetch=config.fetch}const client2=createClient(clientOptions);const createAuthorizedRequest=async(inputRequest)=>{const authorization=await resolveAuthorization(config.authorization);const headers=new Headers(inputRequest.headers);headers.set("authorization",authorization);return new Request(inputRequest,{headers})};const authorizeRequest=createAuthorizedRequest;client2.interceptors.request.use(authorizeRequest);const administration=createAdministrationApi(client2);const applications=createExternalAppAdminApi({client:client2});return{...administration,applications:{create:applications.create,disable:applications.disable,get:applications.get,list:applications.list,rotateCredential:applications.rotateCredential,update:applications.update}}};var{createAdminClient:createAdminClient2,externalAppAdminScope:externalAppAdminScope2,serverAdminNamespaces:serverAdminNamespaces2,serverSdkAdminEntrypoint:serverSdkAdminEntrypoint2}=exports_client;export{serverSdkAdminEntrypoint2 as serverSdkAdminEntrypoint,serverAdminNamespaces2 as serverAdminNamespaces,externalAppAdminScope2 as externalAppAdminScope,createAdminClient2 as createAdminClient};
+`);try{data=JSON.parse(rawData);parsedJson=true}catch{data=rawData}}if(parsedJson){if(responseValidator){await responseValidator(data)}if(responseTransformer){data=await responseTransformer(data)}}onSseEvent?.({data,event:eventName,id:lastEventId,retry:retryDelay});if(dataLines.length){yield data}}}}finally{signal.removeEventListener("abort",abortHandler);reader.releaseLock()}break}catch(error){onSseError?.(error);if(sseMaxRetryAttempts!==undefined&&attempt>=sseMaxRetryAttempts){break}const backoff=Math.min(retryDelay*2**(attempt-1),sseMaxRetryDelay??30000);await sleep(backoff)}}};const stream=createStream();return{stream}}var separatorArrayExplode=(style)=>{switch(style){case"label":return".";case"matrix":return";";case"simple":return",";default:return"&"}};var separatorArrayNoExplode=(style)=>{switch(style){case"form":return",";case"pipeDelimited":return"|";case"spaceDelimited":return"%20";default:return","}};var separatorObjectExplode=(style)=>{switch(style){case"label":return".";case"matrix":return";";case"simple":return",";default:return"&"}};var serializeArrayParam=({allowReserved,explode,name,style,value})=>{if(!explode){const joinedValues=(allowReserved?value:value.map((v)=>encodeURIComponent(v))).join(separatorArrayNoExplode(style));switch(style){case"label":return`.${joinedValues}`;case"matrix":return`;${name}=${joinedValues}`;case"simple":return joinedValues;default:return`${name}=${joinedValues}`}}const separator=separatorArrayExplode(style);const joinedValues=value.map((v)=>{if(style==="label"||style==="simple"){return allowReserved?v:encodeURIComponent(v)}return serializePrimitiveParam({allowReserved,name,value:v})}).join(separator);return style==="label"||style==="matrix"?separator+joinedValues:joinedValues};var serializePrimitiveParam=({allowReserved,name,value})=>{if(value===undefined||value===null){return""}if(typeof value==="object"){throw new Error("Deeply-nested arrays/objects aren’t supported. Provide your own `querySerializer()` to handle these.")}return`${name}=${allowReserved?value:encodeURIComponent(value)}`};var serializeObjectParam=({allowReserved,explode,name,style,value,valueOnly})=>{if(value instanceof Date){return valueOnly?value.toISOString():`${name}=${value.toISOString()}`}if(style!=="deepObject"&&!explode){let values=[];Object.entries(value).forEach(([key,v])=>{values=[...values,key,allowReserved?v:encodeURIComponent(v)]});const joinedValues=values.join(",");switch(style){case"form":return`${name}=${joinedValues}`;case"label":return`.${joinedValues}`;case"matrix":return`;${name}=${joinedValues}`;default:return joinedValues}}const separator=separatorObjectExplode(style);const joinedValues=Object.entries(value).map(([key,v])=>serializePrimitiveParam({allowReserved,name:style==="deepObject"?`${name}[${key}]`:key,value:v})).join(separator);return style==="label"||style==="matrix"?separator+joinedValues:joinedValues};var PATH_PARAM_RE=/\{[^{}]+\}/g;var defaultPathSerializer=({path,url:_url})=>{let url=_url;const matches=_url.match(PATH_PARAM_RE);if(matches){for(const match of matches){let explode=false;let name=match.substring(1,match.length-1);let style="simple";if(name.endsWith("*")){explode=true;name=name.substring(0,name.length-1)}if(name.startsWith(".")){name=name.substring(1);style="label"}else if(name.startsWith(";")){name=name.substring(1);style="matrix"}const value=path[name];if(value===undefined||value===null){continue}if(Array.isArray(value)){url=url.replace(match,serializeArrayParam({explode,name,style,value}));continue}if(typeof value==="object"){url=url.replace(match,serializeObjectParam({explode,name,style,value,valueOnly:true}));continue}if(style==="matrix"){url=url.replace(match,`;${serializePrimitiveParam({name,value})}`);continue}const replaceValue=encodeURIComponent(style==="label"?`.${value}`:value);url=url.replace(match,replaceValue)}}return url};var getUrl=({baseUrl,path,query,querySerializer,url:_url})=>{const pathUrl=_url.startsWith("/")?_url:`/${_url}`;let url=(baseUrl??"")+pathUrl;if(path){url=defaultPathSerializer({path,url})}let search=query?querySerializer(query):"";if(search.startsWith("?")){search=search.substring(1)}if(search){url+=`?${search}`}return url};function getValidRequestBody(options){const hasBody=options.body!==undefined;const isSerializedBody=hasBody&&options.bodySerializer;if(isSerializedBody){if("serializedBody"in options){const hasSerializedBody=options.serializedBody!==undefined&&options.serializedBody!=="";return hasSerializedBody?options.serializedBody:null}return options.body!==""?options.body:null}if(hasBody){return options.body}return}var getAuthToken=async(auth,callback)=>{const token=typeof callback==="function"?await callback(auth):callback;if(!token){return}if(auth.scheme==="bearer"){return`Bearer ${token}`}if(auth.scheme==="basic"){return`Basic ${btoa(token)}`}return token};var createQuerySerializer=({parameters={},...args}={})=>{const querySerializer=(queryParams)=>{const search=[];if(queryParams&&typeof queryParams==="object"){for(const name in queryParams){const value=queryParams[name];if(value===undefined||value===null){continue}const options=parameters[name]||args;if(Array.isArray(value)){const serializedArray=serializeArrayParam({allowReserved:options.allowReserved,explode:true,name,style:"form",value,...options.array});if(serializedArray)search.push(serializedArray)}else if(typeof value==="object"){const serializedObject=serializeObjectParam({allowReserved:options.allowReserved,explode:true,name,style:"deepObject",value,...options.object});if(serializedObject)search.push(serializedObject)}else{const serializedPrimitive=serializePrimitiveParam({allowReserved:options.allowReserved,name,value});if(serializedPrimitive)search.push(serializedPrimitive)}}}return search.join("&")};return querySerializer};var getParseAs=(contentType)=>{if(!contentType){return"stream"}const cleanContent=contentType.split(";")[0]?.trim();if(!cleanContent){return}if(cleanContent.startsWith("application/json")||cleanContent.endsWith("+json")){return"json"}if(cleanContent==="multipart/form-data"){return"formData"}if(["application/","audio/","image/","video/"].some((type)=>cleanContent.startsWith(type))){return"blob"}if(cleanContent.startsWith("text/")){return"text"}return};var checkForExistence=(options,name)=>{if(!name){return false}if(options.headers.has(name)||options.query?.[name]||options.headers.get("Cookie")?.includes(`${name}=`)){return true}return false};var setAuthParams=async({security,...options})=>{for(const auth of security){if(checkForExistence(options,auth.name)){continue}const token=await getAuthToken(auth,options.auth);if(!token){continue}const name=auth.name??"Authorization";switch(auth.in){case"query":if(!options.query){options.query={}}options.query[name]=token;break;case"cookie":options.headers.append("Cookie",`${name}=${token}`);break;case"header":default:options.headers.set(name,token);break}}};var buildUrl=(options)=>getUrl({baseUrl:options.baseUrl,path:options.path,query:options.query,querySerializer:typeof options.querySerializer==="function"?options.querySerializer:createQuerySerializer(options.querySerializer),url:options.url});var mergeConfigs=(a,b)=>{const config={...a,...b};if(config.baseUrl?.endsWith("/")){config.baseUrl=config.baseUrl.substring(0,config.baseUrl.length-1)}config.headers=mergeHeaders(a.headers,b.headers);return config};var headersEntries=(headers)=>{const entries=[];headers.forEach((value,key)=>{entries.push([key,value])});return entries};var mergeHeaders=(...headers)=>{const mergedHeaders=new Headers;for(const header of headers){if(!header){continue}const iterator=header instanceof Headers?headersEntries(header):Object.entries(header);for(const[key,value]of iterator){if(value===null){mergedHeaders.delete(key)}else if(Array.isArray(value)){for(const v of value){mergedHeaders.append(key,v)}}else if(value!==undefined){mergedHeaders.set(key,typeof value==="object"?JSON.stringify(value):value)}}}return mergedHeaders};class Interceptors{fns=[];clear(){this.fns=[]}eject(id){const index=this.getInterceptorIndex(id);if(this.fns[index]){this.fns[index]=null}}exists(id){const index=this.getInterceptorIndex(id);return Boolean(this.fns[index])}getInterceptorIndex(id){if(typeof id==="number"){return this.fns[id]?id:-1}return this.fns.indexOf(id)}update(id,fn){const index=this.getInterceptorIndex(id);if(this.fns[index]){this.fns[index]=fn;return id}return false}use(fn){this.fns.push(fn);return this.fns.length-1}}var createInterceptors=()=>({error:new Interceptors,request:new Interceptors,response:new Interceptors});var defaultQuerySerializer=createQuerySerializer({allowReserved:false,array:{explode:true,style:"form"},object:{explode:true,style:"deepObject"}});var defaultHeaders={"Content-Type":"application/json"};var createConfig=(override={})=>({...jsonBodySerializer,headers:defaultHeaders,parseAs:"auto",querySerializer:defaultQuerySerializer,...override});var createClient=(config={})=>{let _config=mergeConfigs(createConfig(),config);const getConfig=()=>({..._config});const setConfig=(config)=>{_config=mergeConfigs(_config,config);return getConfig()};const interceptors=createInterceptors();const beforeRequest=async(options)=>{const opts={..._config,...options,fetch:options.fetch??_config.fetch??globalThis.fetch,headers:mergeHeaders(_config.headers,options.headers),serializedBody:undefined};if(opts.security){await setAuthParams({...opts,security:opts.security})}if(opts.requestValidator){await opts.requestValidator(opts)}if(opts.body!==undefined&&opts.bodySerializer){opts.serializedBody=opts.bodySerializer(opts.body)}if(opts.body===undefined||opts.serializedBody===""){opts.headers.delete("Content-Type")}const resolvedOpts=opts;const url=buildUrl(resolvedOpts);return{opts:resolvedOpts,url}};const request=async(options)=>{const{opts,url}=await beforeRequest(options);const requestInit={redirect:"follow",...opts,body:getValidRequestBody(opts)};let request=new Request(url,requestInit);for(const fn of interceptors.request.fns){if(fn){request=await fn(request,opts)}}const _fetch=opts.fetch;let response;try{response=await _fetch(request)}catch(error){let finalError=error;for(const fn of interceptors.error.fns){if(fn){finalError=await fn(error,undefined,request,opts)}}finalError=finalError||{};if(opts.throwOnError){throw finalError}return opts.responseStyle==="data"?undefined:{error:finalError,request,response:undefined}}for(const fn of interceptors.response.fns){if(fn){response=await fn(response,request,opts)}}const result={request,response};if(response.ok){const parseAs=(opts.parseAs==="auto"?getParseAs(response.headers.get("Content-Type")):opts.parseAs)??"json";if(response.status===204||response.headers.get("Content-Length")==="0"){let emptyData;switch(parseAs){case"arrayBuffer":case"blob":case"text":emptyData=await response[parseAs]();break;case"formData":emptyData=new FormData;break;case"stream":emptyData=response.body;break;case"json":default:emptyData={};break}return opts.responseStyle==="data"?emptyData:{data:emptyData,...result}}let data;switch(parseAs){case"arrayBuffer":case"blob":case"formData":case"text":data=await response[parseAs]();break;case"json":{const text=await response.text();data=text?JSON.parse(text):{};break}case"stream":return opts.responseStyle==="data"?response.body:{data:response.body,...result}}if(parseAs==="json"){if(opts.responseValidator){await opts.responseValidator(data)}if(opts.responseTransformer){data=await opts.responseTransformer(data)}}return opts.responseStyle==="data"?data:{data,...result}}const textError=await response.text();let jsonError;try{jsonError=JSON.parse(textError)}catch{}const error=jsonError??textError;let finalError=error;for(const fn of interceptors.error.fns){if(fn){finalError=await fn(error,response,request,opts)}}finalError=finalError||{};if(opts.throwOnError){throw finalError}return opts.responseStyle==="data"?undefined:{error:finalError,...result}};const makeMethodFn=(method)=>(options)=>request({...options,method});const makeSseFn=(method)=>async(options)=>{const{opts,url}=await beforeRequest(options);return createSseClient({...opts,body:opts.body,headers:opts.headers,method,onRequest:async(url,init)=>{let request=new Request(url,init);for(const fn of interceptors.request.fns){if(fn){request=await fn(request,opts)}}return request},serializedBody:getValidRequestBody(opts),url})};const _buildUrl=(options)=>buildUrl({..._config,...options});return{buildUrl:_buildUrl,connect:makeMethodFn("CONNECT"),delete:makeMethodFn("DELETE"),get:makeMethodFn("GET"),getConfig,head:makeMethodFn("HEAD"),interceptors,options:makeMethodFn("OPTIONS"),patch:makeMethodFn("PATCH"),post:makeMethodFn("POST"),put:makeMethodFn("PUT"),request,setConfig,sse:{connect:makeSseFn("CONNECT"),delete:makeSseFn("DELETE"),get:makeSseFn("GET"),head:makeSseFn("HEAD"),options:makeSseFn("OPTIONS"),patch:makeSseFn("PATCH"),post:makeSseFn("POST"),put:makeSseFn("PUT"),trace:makeSseFn("TRACE")},trace:makeMethodFn("TRACE")}};var client=createClient(createConfig());var eventHubMonitoringSearchSubscriptions=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/subscriptions/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var eventHubMonitoringSearchDeadLetters=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/dead-letters/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var eventHubMonitoringDeadLetterDetail=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/dead-letters/{deadLetterId}",...options});var eventHubMonitoringReplayDeadLetter=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/events-hub/monitoring/dead-letters/{deadLetterId}/replay",...options,headers:{"Content-Type":"application/json",...options.headers}});var cacheAdminListInstances=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/cache/instances",...options});var cacheAdminInvalidateEntry=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/cache/entries/{entryId}",...options});var cacheAdminClear=(options)=>(options?.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/cache/clear",...options,headers:{"Content-Type":"application/json",...options?.headers}});var infrastructureJobsList=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/jobs",...options});var infrastructureJobsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/jobs/{name}",...options});var infrastructureJobsTrigger=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/infrastructure/jobs/{name}/trigger",...options,headers:{"Content-Type":"application/json",...options.headers}});var adminActivitiesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/activities/{organizationId}/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var adminActivitiesDetail=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/activities/{organizationId}/{activityId}",...options});var adminActivitiesEvidence=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/activities/{organizationId}/{activityId}/evidence",...options});var aiApprovalRequestsSearchRequests=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/approvals/requests/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiApprovalRequestsCreateRule=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/approvals/rules",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiApprovalRequestsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/approvals/{id}",...options});var aiEmbeddingModelsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiEmbeddingModelsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/{id}",...options});var aiEmbeddingModelsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/{id}",...options});var aiEmbeddingModelsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiEmbeddingModelsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/embedding-models",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiRunsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiRunsDetail=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/{invocationId}",...options});var aiRunsArtifacts=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/{invocationId}/artifacts",...options});var aiRunsReveal=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/runs/{invocationId}/reveal",...options});var aiSkillsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiSkillsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/{id}",...options});var aiSkillsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/{id}",...options});var aiSkillsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var aiSkillsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/ai/skills",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorInstancesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorInstancesDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}",...options});var knowledgeConnectorInstancesGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}",...options});var knowledgeConnectorInstancesUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorInstancesTestConnection=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}/test-connection",...options});var knowledgeConnectorInstancesConfigurationRefresh=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}/configuration-refresh",...options});var knowledgeConnectorInstancesDiscoverSchemas=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-instances/{id}/discover-schemas",...options});var knowledgeConnectorTemplatesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeConnectorTemplatesGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/{id}",...options});var knowledgeConnectorTemplatesUninstall=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/{fqn}/install",...options});var knowledgeConnectorTemplatesInstall=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/knowledge-connector-templates/{fqn}/install",...options,headers:{"Content-Type":"application/json",...options.headers}});var packageReleasesPublish=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/package-releases/publish",...options,headers:{"Content-Type":"application/json",...options.headers}});var packageReleasesPromote=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/package-releases/promote",...options,headers:{"Content-Type":"application/json",...options.headers}});var packageReleasesUpdateInstallation=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/package-installations/update",...options,headers:{"Content-Type":"application/json",...options.headers}});var extensionPackagesList=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages",...options});var extensionPackagesUninstall=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages/{fqn}",...options});var extensionPackagesGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages/{fqn}",...options});var extensionPackagesInstall=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/extensions/packages/{fqn}/install",...options,headers:{"Content-Type":"application/json",...options.headers}});var candidateProposalsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var candidateProposalsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/{id}",...options});var candidateProposalsAccept=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/{id}/accept",...options,headers:{"Content-Type":"application/json",...options.headers}});var candidateProposalsReject=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/candidate-proposals/{id}/reject",...options});var relationSchemasSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var relationSchemasDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/{id}",...options});var relationSchemasGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/{id}",...options});var relationSchemasUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var relationSchemasCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/relation-schemas",...options,headers:{"Content-Type":"application/json",...options.headers}});var entitySchemasSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var entitySchemasDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/{id}",...options});var entitySchemasGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/{id}",...options});var entitySchemasUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var entitySchemasCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/entity-schemas",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeSyncQueueSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/sync-queue/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var knowledgeSyncQueueGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/sync-queue/{id}",...options});var knowledgeSyncQueueRetry=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/sync-queue/{id}/retry",...options});var knowledgeIngestionRunsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/knowledge/ingestion-runs/{sourceFileId}",...options});var studioAppSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var studioAppDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}",...options});var studioAppGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}",...options});var studioAppUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var studioAppCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps",...options,headers:{"Content-Type":"application/json",...options.headers}});var studioAppPublish=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/studio/apps/{id}/publish",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantCapabilitiesGet=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/capabilities",...options});var tenantFeatureFlagsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/feature-flags/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantFeatureFlagsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/feature-flags/{uid}",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantExternalAppsList=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps",...options});var tenantExternalAppsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantExternalAppsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}",...options});var tenantExternalAppsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantExternalAppsDisable=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}/disable",...options});var tenantExternalAppsRotateCredential=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/external-apps/{id}/credential/rotate",...options});var tenantMonitoringOverview=(options)=>(options?.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/monitoring/overview",...options});var tenantVariablesSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantVariablesDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables/{id}",...options});var tenantVariablesUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var tenantVariablesCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/tenant/variables",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/{id}",...options});var organizationsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/{id}",...options});var organizationsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationsGetTeardown=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organizations/teardowns/{teardownId}",...options});var organizationUsersSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/users/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationUsersDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/users/{id}",...options});var organizationUsersUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/users/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups/{id}",...options});var organizationGroupsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/groups",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupMembersSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/group-members/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationGroupMembersDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/group-members/{id}",...options});var organizationGroupMembersCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/group-members",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationInvitationsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/invitations",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationInvitationsRevoke=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/invitations/{id}",...options});var organizationReportDefinitionsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportDefinitionsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportDefinitionsArchive=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/{reportId}",...options});var organizationReportDefinitionsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/{reportId}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportDefinitionsRun=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-definitions/{reportId}/runs",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportRunsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-runs/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationReportRunsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/report-runs/{runId}",...options});var organizationAuthenticationListProviders=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers",...options});var organizationAuthenticationConfigureLocalMethod=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers/{method}/local",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationAuthenticationConfigureSsoProvider=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers/{provider}/sso",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationAuthenticationStartSsoTest=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/authentication/providers/{provider}/test",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}",...options});var organizationConnectionsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}",...options});var organizationConnectionsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationConnectionsTest=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}/test",...options});var organizationConnectionsRefresh=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/connections/{id}/refresh",...options});var organizationApiKeysSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/api-keys/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationApiKeysCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/api-keys",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationApiKeysRevoke=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/api-keys/{id}/revoke",...options});var organizationExternalAppsList=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps",...options});var organizationExternalAppsCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationExternalAppsGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}",...options});var organizationExternalAppsUpdate=(options)=>(options.client??client).put({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}",...options,headers:{"Content-Type":"application/json",...options.headers}});var organizationExternalAppsDisable=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}/disable",...options});var organizationExternalAppsRotateCredential=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/organization/external-apps/{id}/credential/rotate",...options});var workflowSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}",...options});var workflowFolderBrowse=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/folders",...options});var workflowFolderCreate=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/folders",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowFolderDelete=(options)=>(options.client??client).delete({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/folders/{folderId}",...options});var workflowWorkingCopyGet=(options)=>(options.client??client).get({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/working-copy",...options});var workflowWorkingCopySave=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/working-copy/save",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowVersionSearch=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/versions/search",...options,headers:{"Content-Type":"application/json",...options.headers}});var workflowVersionPublish=(options)=>(options.client??client).post({security:[{scheme:"bearer",type:"http"}],url:"/admin/workflows/{workflowId}/versions/{versionId}/publish",...options,headers:{"Content-Type":"application/json",...options.headers}});var bindOperation=(client,operation)=>async(options)=>{const requestOptions={...options,client,throwOnError:true};const result=await operation(requestOptions);return result.data};var administrationNamespaceInventory={aiAuthoring:{availability:"generated"},aiConfiguration:{availability:"generated"},aiGovernance:{availability:"generated"},apiKeys:{availability:"generated"},audit:{availability:"generated"},authentication:{availability:"generated"},connections:{availability:"generated"},eventsAndNotifications:{availability:"generated"},groups:{availability:"generated"},infrastructure:{availability:"generated"},knowledgeConnectors:{availability:"generated"},knowledgeIngestion:{availability:"generated"},knowledgeSchemas:{availability:"generated"},members:{availability:"generated"},organizations:{availability:"generated"},packages:{availability:"generated"},reports:{availability:"generated"},studioAdministration:{availability:"generated"},tenantAdministration:{availability:"generated"},workflowAdministration:{availability:"generated"}};var createAdministrationApi=(client)=>({aiAuthoring:{createSkill:bindOperation(client,aiSkillsCreate),deleteSkill:bindOperation(client,aiSkillsDelete),getSkill:bindOperation(client,aiSkillsGet),listSkills:bindOperation(client,aiSkillsSearch),updateSkill:bindOperation(client,aiSkillsUpdate)},aiConfiguration:{createEmbeddingModel:bindOperation(client,aiEmbeddingModelsCreate),deleteEmbeddingModel:bindOperation(client,aiEmbeddingModelsDelete),getEmbeddingModel:bindOperation(client,aiEmbeddingModelsGet),listEmbeddingModels:bindOperation(client,aiEmbeddingModelsSearch),updateEmbeddingModel:bindOperation(client,aiEmbeddingModelsUpdate)},aiGovernance:{createApprovalRule:bindOperation(client,aiApprovalRequestsCreateRule),getApprovalRequest:bindOperation(client,aiApprovalRequestsGet),getRun:bindOperation(client,aiRunsDetail),listApprovalRequests:bindOperation(client,aiApprovalRequestsSearchRequests),listRunArtifacts:bindOperation(client,aiRunsArtifacts),listRuns:bindOperation(client,aiRunsSearch),revealRun:bindOperation(client,aiRunsReveal)},apiKeys:{create:bindOperation(client,organizationApiKeysCreate),list:bindOperation(client,organizationApiKeysSearch),revoke:bindOperation(client,organizationApiKeysRevoke)},audit:{detail:bindOperation(client,adminActivitiesDetail),evidence:bindOperation(client,adminActivitiesEvidence),search:bindOperation(client,adminActivitiesSearch)},authentication:{configureLocalMethod:bindOperation(client,organizationAuthenticationConfigureLocalMethod),configureSsoProvider:bindOperation(client,organizationAuthenticationConfigureSsoProvider),listSsoProviders:bindOperation(client,organizationAuthenticationListProviders),testSsoProvider:bindOperation(client,organizationAuthenticationStartSsoTest)},connections:{create:bindOperation(client,organizationConnectionsCreate),delete:bindOperation(client,organizationConnectionsDelete),get:bindOperation(client,organizationConnectionsGet),list:bindOperation(client,organizationConnectionsSearch),refreshDiscovery:bindOperation(client,organizationConnectionsRefresh),test:bindOperation(client,organizationConnectionsTest),update:bindOperation(client,organizationConnectionsUpdate)},eventsAndNotifications:{getDeadLetter:bindOperation(client,eventHubMonitoringDeadLetterDetail),listDeadLetters:bindOperation(client,eventHubMonitoringSearchDeadLetters),listSubscriptions:bindOperation(client,eventHubMonitoringSearchSubscriptions),replayDeadLetter:bindOperation(client,eventHubMonitoringReplayDeadLetter)},groups:{addMember:bindOperation(client,organizationGroupMembersCreate),create:bindOperation(client,organizationGroupsCreate),delete:bindOperation(client,organizationGroupsDelete),list:bindOperation(client,organizationGroupsSearch),listMembers:bindOperation(client,organizationGroupMembersSearch),removeMember:bindOperation(client,organizationGroupMembersDelete),update:bindOperation(client,organizationGroupsUpdate)},infrastructure:{clearCache:bindOperation(client,cacheAdminClear),getJob:bindOperation(client,infrastructureJobsGet),invalidateCacheEntry:bindOperation(client,cacheAdminInvalidateEntry),listCacheInstances:bindOperation(client,cacheAdminListInstances),listJobs:bindOperation(client,infrastructureJobsList),triggerJob:bindOperation(client,infrastructureJobsTrigger)},knowledgeConnectors:{delete:bindOperation(client,knowledgeConnectorInstancesDelete),discoverSchemas:bindOperation(client,knowledgeConnectorInstancesDiscoverSchemas),get:bindOperation(client,knowledgeConnectorInstancesGet),getTemplate:bindOperation(client,knowledgeConnectorTemplatesGet),installTemplate:bindOperation(client,knowledgeConnectorTemplatesInstall),list:bindOperation(client,knowledgeConnectorInstancesSearch),listTemplates:bindOperation(client,knowledgeConnectorTemplatesSearch),refreshConfiguration:bindOperation(client,knowledgeConnectorInstancesConfigurationRefresh),test:bindOperation(client,knowledgeConnectorInstancesTestConnection),uninstallTemplate:bindOperation(client,knowledgeConnectorTemplatesUninstall),update:bindOperation(client,knowledgeConnectorInstancesUpdate)},knowledgeIngestion:{approveProposal:bindOperation(client,candidateProposalsAccept),getProposal:bindOperation(client,candidateProposalsGet),getRun:bindOperation(client,knowledgeIngestionRunsGet),getSync:bindOperation(client,knowledgeSyncQueueGet),listProposals:bindOperation(client,candidateProposalsSearch),listSyncs:bindOperation(client,knowledgeSyncQueueSearch),rejectProposal:bindOperation(client,candidateProposalsReject),retrySync:bindOperation(client,knowledgeSyncQueueRetry)},knowledgeSchemas:{createEntitySchema:bindOperation(client,entitySchemasCreate),createRelationSchema:bindOperation(client,relationSchemasCreate),deleteEntitySchema:bindOperation(client,entitySchemasDelete),deleteRelationSchema:bindOperation(client,relationSchemasDelete),getEntitySchema:bindOperation(client,entitySchemasGet),getRelationSchema:bindOperation(client,relationSchemasGet),listEntitySchemas:bindOperation(client,entitySchemasSearch),listRelationSchemas:bindOperation(client,relationSchemasSearch),updateEntitySchema:bindOperation(client,entitySchemasUpdate),updateRelationSchema:bindOperation(client,relationSchemasUpdate)},members:{invite:bindOperation(client,organizationInvitationsCreate),list:bindOperation(client,organizationUsersSearch),remove:bindOperation(client,organizationUsersDelete),revokeInvitation:bindOperation(client,organizationInvitationsRevoke),update:bindOperation(client,organizationUsersUpdate)},organizations:{archive:bindOperation(client,organizationsDelete),get:bindOperation(client,organizationsGet),getTeardown:bindOperation(client,organizationsGetTeardown),list:bindOperation(client,organizationsSearch),update:bindOperation(client,organizationsUpdate)},packages:{get:bindOperation(client,extensionPackagesGet),installRelease:bindOperation(client,extensionPackagesInstall),list:bindOperation(client,extensionPackagesList),promoteRelease:bindOperation(client,packageReleasesPromote),publishRelease:bindOperation(client,packageReleasesPublish),uninstall:bindOperation(client,extensionPackagesUninstall),updateInstallation:bindOperation(client,packageReleasesUpdateInstallation)},reports:{archiveDefinition:bindOperation(client,organizationReportDefinitionsArchive),createDefinition:bindOperation(client,organizationReportDefinitionsCreate),getRun:bindOperation(client,organizationReportRunsGet),listDefinitions:bindOperation(client,organizationReportDefinitionsSearch),listRuns:bindOperation(client,organizationReportRunsSearch),run:bindOperation(client,organizationReportDefinitionsRun),updateDefinition:bindOperation(client,organizationReportDefinitionsUpdate)},studioAdministration:{createApp:bindOperation(client,studioAppCreate),deleteApp:bindOperation(client,studioAppDelete),getApp:bindOperation(client,studioAppGet),listApps:bindOperation(client,studioAppSearch),publishApp:bindOperation(client,studioAppPublish),updateApp:bindOperation(client,studioAppUpdate)},tenantAdministration:{createVariable:bindOperation(client,tenantVariablesCreate),deleteVariable:bindOperation(client,tenantVariablesDelete),getCapabilities:bindOperation(client,tenantCapabilitiesGet),getMonitoringOverview:bindOperation(client,tenantMonitoringOverview),listFeatureFlags:bindOperation(client,tenantFeatureFlagsSearch),listVariables:bindOperation(client,tenantVariablesSearch),updateFeatureFlag:bindOperation(client,tenantFeatureFlagsUpdate),updateVariable:bindOperation(client,tenantVariablesUpdate)},workflowAdministration:{create:bindOperation(client,workflowCreate),createFolder:bindOperation(client,workflowFolderCreate),delete:bindOperation(client,workflowDelete),deleteFolder:bindOperation(client,workflowFolderDelete),getWorkingCopy:bindOperation(client,workflowWorkingCopyGet),list:bindOperation(client,workflowSearch),listFolders:bindOperation(client,workflowFolderBrowse),listVersions:bindOperation(client,workflowVersionSearch),publishVersion:bindOperation(client,workflowVersionPublish),saveWorkingCopy:bindOperation(client,workflowWorkingCopySave)}});var clientConfig=(input)=>{const config={baseUrl:input.baseUrl,headers:{authorization:input.authorization}};if(input.fetch!==undefined){config.fetch=input.fetch}return config};var organizationHeaders=(scope)=>({"x-organization-id":scope.organizationId});var createExternalAppAdminApi=(config)=>{const client="client"in config?config.client:createClient(clientConfig(config));return{create:async(scope,body)=>{if(scope.kind==="organization"){const{data}=await organizationExternalAppsCreate({body,client,headers:organizationHeaders(scope),throwOnError:true});return data}const{data}=await tenantExternalAppsCreate({body,client,throwOnError:true});return data},disable:async(scope,id)=>{if(scope.kind==="organization"){const{data}=await organizationExternalAppsDisable({client,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data}const{data}=await tenantExternalAppsDisable({client,path:{id},throwOnError:true});return data},get:async(scope,id)=>{if(scope.kind==="organization"){const{data}=await organizationExternalAppsGet({client,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data}const{data}=await tenantExternalAppsGet({client,path:{id},throwOnError:true});return data},list:async(scope)=>{if(scope.kind==="organization"){const{data}=await organizationExternalAppsList({client,headers:organizationHeaders(scope),throwOnError:true});return data}const{data}=await tenantExternalAppsList({client,throwOnError:true});return data},rotateCredential:async(scope,id)=>{if(scope.kind==="organization"){const{data}=await organizationExternalAppsRotateCredential({client,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data}const{data}=await tenantExternalAppsRotateCredential({client,path:{id},throwOnError:true});return data},update:async(scope,id,body)=>{if(scope.kind==="organization"){const{data}=await organizationExternalAppsUpdate({body,client,headers:organizationHeaders(scope),path:{id},throwOnError:true});return data}const{data}=await tenantExternalAppsUpdate({body,client,path:{id},throwOnError:true});return data}}};var serverSdkAdminEntrypoint="admin";var serverAdminNamespaces={aiAuthoring:{...administrationNamespaceInventory.aiAuthoring,scopes:["ai:admin"]},aiConfiguration:{...administrationNamespaceInventory.aiConfiguration,scopes:["ai:admin"]},aiGovernance:{...administrationNamespaceInventory.aiGovernance,scopes:["ai:admin"]},apiKeys:{...administrationNamespaceInventory.apiKeys,scopes:["organizations:admin"]},applications:{availability:"generated",scopes:["applications:admin"]},audit:{...administrationNamespaceInventory.audit,scopes:["audit:admin"]},authentication:{...administrationNamespaceInventory.authentication,scopes:["organizations:admin"]},connections:{...administrationNamespaceInventory.connections,scopes:["organizations:admin"]},eventsAndNotifications:{...administrationNamespaceInventory.eventsAndNotifications,scopes:["organizations:admin"]},groups:{...administrationNamespaceInventory.groups,scopes:["organizations:admin"]},infrastructure:{...administrationNamespaceInventory.infrastructure,scopes:["infrastructure:admin"]},knowledgeConnectors:{...administrationNamespaceInventory.knowledgeConnectors,scopes:["organizations:admin"]},knowledgeIngestion:{...administrationNamespaceInventory.knowledgeIngestion,scopes:["knowledge-schemas:admin"]},knowledgeSchemas:{...administrationNamespaceInventory.knowledgeSchemas,scopes:["knowledge-schemas:admin"]},members:{...administrationNamespaceInventory.members,scopes:["organizations:admin"]},organizations:{...administrationNamespaceInventory.organizations,scopes:["organizations:admin"]},packages:{...administrationNamespaceInventory.packages,scopes:["packages:publish","packages:install"]},reports:{...administrationNamespaceInventory.reports,scopes:["organizations:admin"]},studioAdministration:{...administrationNamespaceInventory.studioAdministration,scopes:["organizations:admin"]},tenantAdministration:{...administrationNamespaceInventory.tenantAdministration,scopes:["organizations:admin"]},workflowAdministration:{...administrationNamespaceInventory.workflowAdministration,scopes:["ai:admin"]}};var[externalAppAdminScope]=serverAdminNamespaces.applications.scopes;var resolveAuthorization=async(provider)=>{const authorization=typeof provider==="string"?provider:await provider.getAuthorization();if(!authorization.startsWith("Bearer ")||authorization.slice("Bearer ".length).trim()===""){throw new TypeError("Server administration requires a Bearer user or API authorization")}return authorization};var parseTenantOrigin=(value)=>{let url;try{url=new URL(value)}catch{throw new TypeError("tenantUrl must contain only an HTTPS origin")}if(url.protocol!=="https:"||url.pathname!=="/"||url.search!==""||url.hash!==""||url.username!==""||url.password!==""){throw new TypeError("tenantUrl must contain only an HTTPS origin")}return url.origin};var createAdminClient=(config)=>{const clientOptions={baseUrl:parseTenantOrigin(config.tenantUrl)};if(config.fetch!==undefined){clientOptions.fetch=config.fetch}const client=createClient(clientOptions);const createAuthorizedRequest=async(inputRequest)=>{const authorization=await resolveAuthorization(config.authorization);const headers=new Headers(inputRequest.headers);headers.set("authorization",authorization);return new Request(inputRequest,{headers})};const authorizeRequest=createAuthorizedRequest;client.interceptors.request.use(authorizeRequest);const administration=createAdministrationApi(client);const applications=createExternalAppAdminApi({client});return{...administration,applications:{create:applications.create,disable:applications.disable,get:applications.get,list:applications.list,rotateCredential:applications.rotateCredential,update:applications.update}}};var{createAdminClient:createAdminClient2,externalAppAdminScope:externalAppAdminScope2,serverAdminNamespaces:serverAdminNamespaces2,serverSdkAdminEntrypoint:serverSdkAdminEntrypoint2}=exports_client;export{createAdminClient2 as createAdminClient,externalAppAdminScope2 as externalAppAdminScope,serverAdminNamespaces2 as serverAdminNamespaces,serverSdkAdminEntrypoint2 as serverSdkAdminEntrypoint};

package/dist/auth/better-auth.js

@@ -1 +1 @@
-import{betterAuth}from"better-auth";var unavailableBrand=Symbol.for("@collective-intelligence/external-apps-server-sdk/ApplicationUserAuthUnavailableError");class ApplicationUserAuthUnavailableError extends Error{[unavailableBrand]=true;code="user_auth_unavailable";static[Symbol.hasInstance](value){return value instanceof Error&&unavailableBrand in value&&value[unavailableBrand]===true&&"code"in value&&value.code==="user_auth_unavailable"}constructor(cause){super("Application user authentication is unavailable",{cause});this.name="ApplicationUserAuthUnavailableError"}}var createBetterAuth=(options)=>{if(options.database===undefined||options.database===null){throw new TypeError("Application-owned SQL persistence is required")}const auth=betterAuth({...options,plugins:[],secondaryStorage:undefined,session:{...options.session,cookieCache:{enabled:false},preserveSessionInDatabase:false,storeSessionInDatabase:true}});return{getEntityContext:async()=>null,getSession:async(request)=>{const result=await auth.api.getSession({headers:request.headers,query:{disableCookieCache:true}}).catch((error)=>{throw new ApplicationUserAuthUnavailableError(error)});if(result===null){return null}return{expiresAt:result.session.expiresAt,identity:{email:result.user.email,id:result.user.id,kind:"local_user",name:result.user.name}}},handler:auth.handler,mode:"local"}};var ApplicationUserAuthUnavailableError2=ApplicationUserAuthUnavailableError;var createBetterAuth2=createBetterAuth;export{createBetterAuth2 as createBetterAuth,ApplicationUserAuthUnavailableError2 as ApplicationUserAuthUnavailableError};
+import{betterAuth}from"better-auth";var unavailableBrand=Symbol.for("@collective-intelligence/external-apps-server-sdk/ApplicationUserAuthUnavailableError");class ApplicationUserAuthUnavailableError extends Error{[unavailableBrand]=true;code="user_auth_unavailable";static[Symbol.hasInstance](value){return value instanceof Error&&unavailableBrand in value&&value[unavailableBrand]===true&&"code"in value&&value.code==="user_auth_unavailable"}constructor(cause){super("Application user authentication is unavailable",{cause});this.name="ApplicationUserAuthUnavailableError"}}var createBetterAuth=(options)=>{if(options.database===undefined||options.database===null){throw new TypeError("Application-owned SQL persistence is required")}const auth=betterAuth({...options,plugins:[],secondaryStorage:undefined,session:{...options.session,cookieCache:{enabled:false},preserveSessionInDatabase:false,storeSessionInDatabase:true}});return{getEntityContext:async()=>null,getSession:async(request)=>{const result=await auth.api.getSession({headers:request.headers,query:{disableCookieCache:true}}).catch((error)=>{throw new ApplicationUserAuthUnavailableError(error)});if(result===null){return null}return{expiresAt:result.session.expiresAt,identity:{email:result.user.email,id:result.user.id,kind:"local_user",name:result.user.name}}},handler:auth.handler,mode:"local"}};var ApplicationUserAuthUnavailableError2=ApplicationUserAuthUnavailableError;var createBetterAuth2=createBetterAuth;export{ApplicationUserAuthUnavailableError2 as ApplicationUserAuthUnavailableError,createBetterAuth2 as createBetterAuth};

package/dist/auth/federated.d.ts

@@ -57,6 +57,67 @@ export type UserAuthScopePolicy = Readonly<{
 	writeScope: string;
 }>;
 export type UserAuthAuthorization = (resourceId: string) => (request: Request, operation?: string) => Promise<EntityInvocationContext | Response>;
+export type CiFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+export type AccessTokenVerifierOptions = Readonly<{
+	/** CI External App id (`app_id` claim). Give this, `clientId`, or both. */
+	applicationId?: string;
+	audience: string;
+	/** OAuth client id (`client_id` claim). Give this, `applicationId`, or both. */
+	clientId?: string;
+	fetch?: CiFetch;
+	/** HTTPS CI issuer, or a loopback HTTP issuer for local development. */
+	issuer: string;
+	now?: () => number;
+	/** When set, a token of another Organization is rejected. */
+	organizationId?: string;
+}>;
+export type VerifiedAccessToken = Readonly<{
+	applicationId: string;
+	clientId: string;
+	expiresAt: Date;
+	organizationId: string;
+	scopes: readonly string[];
+	sessionId: string;
+	userId: string;
+}>;
+export type AccessTokenIdentity = VerifiedAccessToken & Readonly<{
+	/** Absent when CI supplies no current group policy for the application. */
+	groupIds: readonly string[] | undefined;
+	/** CI Organization roles; absent when CI supplies no current role policy. */
+	roles: readonly string[] | undefined;
+	user: Readonly<{
+		email: string | null;
+		id: string;
+		name: string | null;
+	}>;
+}>;
+export type AccessTokenVerifier = Readonly<{
+	/**
+	 * The token's current CI identity: `verify`, then CI's own answer for the
+	 * user, roles and groups. A token CI has revoked is rejected. Pass the
+	 * `signal` of the request being served: when it aborts, the CI request ends
+	 * and the call rejects with the abort reason.
+	 */
+	identity: (token: string, options?: Readonly<{
+		signal?: AbortSignal;
+	}>) => Promise<AccessTokenIdentity>;
+	/**
+	 * Offline check against the issuer key set. It does not see a revocation
+	 * before the token expires.
+	 */
+	verify: (token: string) => Promise<VerifiedAccessToken>;
+}>;
+/** The application's CI enrollment, as `ci apps enroll --env-file` writes it. */
+export type ApplicationEnrollment = Readonly<{
+	applicationId: string;
+	audience: string;
+	clientId: string;
+	/** Present for a confidential application only. */
+	clientSecret?: string;
+	issuer: string;
+	organizationId: string;
+	scopes: readonly string[];
+}>;
 declare class FederatedAuthRejectedError extends Error {
 	readonly code: "invalid_request" | "invalid_state" | "invalid_identity" | "authorization_failed";
 	constructor(code: FederatedAuthRejectedError["code"]);
@@ -104,6 +165,8 @@ export type FederatedAuthOptions = Readonly<{
 	/**
 	 * HTTPS browser-visible origin, or list of origins, that owns the auth routes and __Host cookie.
 	 * Each request uses its own listed origin; register `<origin><basePath>/callback` for each one.
+	 * A loopback HTTP origin such as `http://localhost:3000` is accepted for local development;
+	 * its cookie has no `__Host-` prefix and no `Secure` attribute.
 	 */
 	applicationOrigin: string | readonly string[];
 	audience: string;
@@ -125,8 +188,11 @@ declare const FederatedAuthRejectedError$1: typeof FederatedAuthRejectedError;
 type FederatedAuthRejectedError$1 = FederatedAuthRejectedError;
 declare const ApplicationUserAuthUnavailableError$2: typeof ApplicationUserAuthUnavailableError;
 export declare const authorizeWithUserAuth: (auth: Pick<ApplicationUserAuth, "getEntityContext">, policy: UserAuthScopePolicy) => UserAuthAuthorization;
+export declare const createAccessTokenVerifier: (options: AccessTokenVerifierOptions) => AccessTokenVerifier;
 export declare const createFederatedAuth: (options: FederatedAuthOptions) => ApplicationUserAuth;
 declare const FederatedAuthRejectedError$2: typeof FederatedAuthRejectedError;
+export declare const readApplicationEnrollment: (env: Readonly<Record<string, string | undefined>>, prefix?: string) => ApplicationEnrollment;
+export declare const sessionRequest: (headers: Headers, applicationOrigin: string) => Request;
 type ApplicationUserAuthUnavailableError$2 = ApplicationUserAuthUnavailableError$1;
 type FederatedAuthRejectedError$2 = FederatedAuthRejectedError$1;