@envsync-cloud/envsync-ts-sdk 0.7.7 → 0.8.0

package/README.md

@@ -33,6 +33,33 @@ const apps = await sdk.applications.getApps();
 console.log(apps);
 ```
 
+## Multi-Org Bearer Token Usage
+
+If one identity belongs to multiple organizations, bearer-token clients can
+select the org for a single request by sending `X-EnvSync-Org-Id`.
+
+```ts
+import { EnvSyncAPISDK } from "@envsync-cloud/envsync-ts-sdk";
+
+const sdk = new EnvSyncAPISDK({
+	BASE: "https://api.envsync.cloud",
+	TOKEN: process.env.ENVSYNC_TOKEN,
+	HEADERS: async () => ({
+		"X-EnvSync-Org-Id": process.env.ENVSYNC_ORG_ID ?? "",
+	}),
+});
+
+const me = await sdk.authentication.whoami();
+
+console.log(me.org.id);
+```
+
+Notes:
+
+- `X-EnvSync-Org-Id` is honored only for bearer-token requests.
+- Cookie-session clients should continue using `POST /api/auth/switch-org`.
+- API-key requests ignore this header.
+
 ## Runtime Notes
 
 - The SDK uses the generated `fetch` client from `openapi-typescript-codegen`.

package/dist/index.d.mts

@@ -416,7 +416,7 @@ declare class AuthenticationService {
     whoami(): CancelablePromise<WhoAmIResponse>;
 }
 
-type CertificateListResponse = Array<{
+type BaseCertificateResponse = {
     id: string;
     org_id: string;
     serial_hex: string;
@@ -424,15 +424,19 @@ type CertificateListResponse = Array<{
     subject_cn: string;
     subject_email: string | null;
     status: string;
-    not_before: string | null;
-    not_after: string | null;
-    description: string | null;
+    description?: string | null;
     metadata?: any | null;
-    revoked_at: string | null;
+    cert_pem?: string | null;
+    is_system_generated: boolean;
+    not_before?: string | null;
+    not_after?: string | null;
+    revoked_at?: string | null;
     supersedes_certificate_id?: string | null;
     created_at: string;
     updated_at: string;
-}>;
+};
+
+type CertificateListResponse = Array<BaseCertificateResponse>;
 
 type CRLResponse = {
     crl_pem: string;
@@ -447,7 +451,7 @@ type InitOrgCARequest = {
 
 type IssueMemberCertRequest = {
     member_email: string;
-    role: string;
+    role?: string;
     description?: string;
     metadata?: Record<string, string>;
 };
@@ -460,10 +464,41 @@ type MemberCertResponse = {
     subject_cn: string;
     subject_email: string | null;
     status: string;
+    description?: string | null;
     metadata?: any | null;
-    cert_pem: string;
-    key_pem: string;
+    cert_pem?: string | null;
+    is_system_generated: boolean;
+    not_before?: string | null;
+    not_after?: string | null;
+    revoked_at?: string | null;
+    supersedes_certificate_id?: string | null;
     created_at: string;
+    updated_at: string;
+    key_pem: string;
+};
+
+type MyCertificateBundleResponse = {
+    root_ca_pem: string;
+    member_certificate: {
+        id: string;
+        org_id: string;
+        serial_hex: string;
+        cert_type: string;
+        subject_cn: string;
+        subject_email: string | null;
+        status: string;
+        description?: string | null;
+        metadata?: any | null;
+        cert_pem?: string | null;
+        is_system_generated: boolean;
+        not_before?: string | null;
+        not_after?: string | null;
+        revoked_at?: string | null;
+        supersedes_certificate_id?: string | null;
+        created_at: string;
+        updated_at: string;
+        key_pem: string;
+    };
 };
 
 type OCSPResponse = {
@@ -477,9 +512,18 @@ type OrgCAResponse = {
     serial_hex: string;
     cert_type: string;
     subject_cn: string;
+    subject_email: string | null;
     status: string;
-    cert_pem?: string;
+    description?: string | null;
+    metadata?: any | null;
+    cert_pem?: string | null;
+    is_system_generated: boolean;
+    not_before?: string | null;
+    not_after?: string | null;
+    revoked_at?: string | null;
+    supersedes_certificate_id?: string | null;
     created_at: string;
+    updated_at: string;
 };
 
 type RenewCertRequest = {
@@ -547,6 +591,13 @@ declare class CertificatesService {
      * @throws ApiError
      */
     getCrl(): CancelablePromise<CRLResponse>;
+    /**
+     * Get Current User Certificate Bundle
+     * Retrieve the current user's active system-generated certificate bundle
+     * @returns MyCertificateBundleResponse Certificate bundle retrieved successfully
+     * @throws ApiError
+     */
+    getMyCertificateBundle(): CancelablePromise<MyCertificateBundleResponse>;
     /**
      * List Certificates
      * List all certificates for the organization
@@ -1016,6 +1067,8 @@ type EnvHistoryRequest = {
     env_type_id: string;
     page?: number;
     per_page?: number;
+    from_created_at?: string;
+    to_created_at?: string;
 };
 
 type EnvHistoryResponse = {
@@ -1028,6 +1081,7 @@ type EnvHistoryResponse = {
         user_id: string;
         created_at: string;
         updated_at: string;
+        changes_count: number;
     }>;
     totalPages: number;
 };
@@ -1045,6 +1099,13 @@ type EnvPitStateResponse = Array<{
     operation: 'CREATE' | 'UPDATE' | 'DELETE';
 }>;
 
+type EnvTimestampRangeDiffRequest = {
+    app_id: string;
+    env_type_id: string;
+    from_timestamp: string;
+    to_timestamp: string;
+};
+
 type EnvTimestampRequest = {
     app_id: string;
     env_type_id: string;
@@ -1102,6 +1163,14 @@ declare class EnvironmentVariablesPointInTimeService {
      * @throws ApiError
      */
     getEnvDiff(requestBody?: EnvDiffRequest): CancelablePromise<EnvDiffResponse>;
+    /**
+     * Get Environment Variables Diff By Timestamp Range
+     * Compare environment variables between two timestamps
+     * @param requestBody
+     * @returns EnvDiffResponse Environment variables timestamp-range diff retrieved successfully
+     * @throws ApiError
+     */
+    getEnvDiffByTimestampRange(requestBody?: EnvTimestampRangeDiffRequest): CancelablePromise<EnvDiffResponse>;
     /**
      * Get Variable Timeline
      * Get timeline of changes for a specific environment variable
@@ -1474,6 +1543,14 @@ type AcceptOrgInviteRequest = {
 
 type AcceptOrgInviteResponse = {
     message: string;
+    generated_certificate_bundle: {
+        root_ca_pem: string;
+        member_cert_pem: string;
+        member_key_pem: string;
+        member_certificate_id: string;
+        member_serial_hex: string;
+        is_system_generated: boolean;
+    };
 };
 
 type AcceptUserInviteRequest = {
@@ -1483,6 +1560,14 @@ type AcceptUserInviteRequest = {
 
 type AcceptUserInviteResponse = {
     message: string;
+    generated_certificate_bundle: {
+        root_ca_pem: string;
+        member_cert_pem: string;
+        member_key_pem: string;
+        member_certificate_id: string;
+        member_serial_hex: string;
+        is_system_generated: boolean;
+    };
 };
 
 type CreateOrgInviteRequest = {
@@ -1621,6 +1706,14 @@ type CheckSlugResponse = {
     exists: boolean;
 };
 
+type DeleteOrgRequest = {
+    confirm_name: string;
+};
+
+type DeleteOrgResponse = {
+    message: string;
+};
+
 type OrgResponse = {
     id: string;
     name: string;
@@ -1659,6 +1752,14 @@ declare class OrganizationsService {
      * @throws ApiError
      */
     updateOrg(requestBody?: UpdateOrgRequest): CancelablePromise<OrgResponse>;
+    /**
+     * Delete Organization
+     * Permanently delete the current organization
+     * @param requestBody
+     * @returns DeleteOrgResponse Organization deleted successfully
+     * @throws ApiError
+     */
+    deleteOrg(requestBody?: DeleteOrgRequest): CancelablePromise<DeleteOrgResponse>;
     /**
      * Check Slug Availability
      * Check if an organization slug is available
@@ -1669,13 +1770,40 @@ declare class OrganizationsService {
     checkIfSlugExists(slug: string): CancelablePromise<CheckSlugResponse>;
 }
 
-type EffectiveAccessResponse = Array<{
+type EffectiveAccessEntry = {
     user_id: string;
     email: string;
-    relation: 'admin' | 'editor' | 'viewer';
-    source: 'direct' | 'team' | 'both';
+    relation: EffectiveAccessEntry.relation;
+    org_relation: EffectiveAccessEntry.org_relation;
+    direct_relation: EffectiveAccessEntry.direct_relation;
+    team_relation: EffectiveAccessEntry.team_relation;
+    sources: Array<'org' | 'direct' | 'team'>;
     teams: Array<string>;
-}>;
+};
+declare namespace EffectiveAccessEntry {
+    enum relation {
+        ADMIN = "admin",
+        EDITOR = "editor",
+        VIEWER = "viewer"
+    }
+    enum org_relation {
+        ADMIN = "admin",
+        EDITOR = "editor",
+        VIEWER = "viewer"
+    }
+    enum direct_relation {
+        ADMIN = "admin",
+        EDITOR = "editor",
+        VIEWER = "viewer"
+    }
+    enum team_relation {
+        ADMIN = "admin",
+        EDITOR = "editor",
+        VIEWER = "viewer"
+    }
+}
+
+type EffectiveAccessResponse = Array<EffectiveAccessEntry>;
 
 type EffectivePermissionsResponse = {
     can_view: boolean;
@@ -1712,11 +1840,24 @@ declare namespace GrantAccessRequest {
     }
 }
 
-type GrantsListResponse = Array<{
+type GrantEntry = {
     subject_id: string;
-    subject_type: 'user' | 'team';
-    relation: 'admin' | 'editor' | 'viewer';
-}>;
+    subject_type: GrantEntry.subject_type;
+    relation: GrantEntry.relation;
+};
+declare namespace GrantEntry {
+    enum subject_type {
+        USER = "user",
+        TEAM = "team"
+    }
+    enum relation {
+        ADMIN = "admin",
+        EDITOR = "editor",
+        VIEWER = "viewer"
+    }
+}
+
+type GrantsListResponse = Array<GrantEntry>;
 
 type PermissionMessageResponse = {
     message: string;
@@ -2076,6 +2217,8 @@ type SecretHistoryRequest = {
     env_type_id: string;
     page?: number;
     per_page?: number;
+    from_created_at?: string;
+    to_created_at?: string;
 };
 
 type SecretHistoryResponse = {
@@ -2088,6 +2231,7 @@ type SecretHistoryResponse = {
         user_id: string;
         created_at: string;
         updated_at: string;
+        changes_count: number;
     }>;
     totalPages: number;
 };
@@ -2102,8 +2246,16 @@ type SecretPitStateResponse = Array<{
     key: string;
     value: string;
     last_updated: string;
+    operation: 'CREATE' | 'UPDATE' | 'DELETE';
 }>;
 
+type SecretTimestampRangeDiffRequest = {
+    app_id: string;
+    env_type_id: string;
+    from_timestamp: string;
+    to_timestamp: string;
+};
+
 type SecretTimestampRequest = {
     app_id: string;
     env_type_id: string;
@@ -2161,6 +2313,14 @@ declare class SecretsPointInTimeService {
      * @throws ApiError
      */
     getSecretDiff(requestBody?: SecretDiffRequest): CancelablePromise<SecretDiffResponse>;
+    /**
+     * Get Secrets Diff By Timestamp Range
+     * Compare secrets between two timestamps
+     * @param requestBody
+     * @returns SecretDiffResponse Secrets timestamp-range diff retrieved successfully
+     * @throws ApiError
+     */
+    getSecretDiffByTimestampRange(requestBody?: SecretTimestampRangeDiffRequest): CancelablePromise<SecretDiffResponse>;
     /**
      * Get Secret Variable Timeline
      * Get timeline of changes for a specific secret variable
@@ -2663,4 +2823,4 @@ type UploadFileError = {
     error: string;
 };
 
-export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, type CreateEnvRequest, type CreateEnvTypeRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateRoleRequest, type CreateSecretRequest, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, type EffectiveAccessResponse, type EffectivePermissionsResponse, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRequest, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, type IssueMemberCertRequest, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type OCSPResponse, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, SignDataRequest, type SignatureResponse, type TeamMessageResponse, TeamsService, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateEnvRequest, type UpdateEnvTypeRequest, type UpdateOrgRequest, type UpdateRoleRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, type WhoAmIResponse };
+export { type AcceptOrgInviteRequest, type AcceptOrgInviteResponse, type AcceptUserInviteRequest, type AcceptUserInviteResponse, AccessService, type AddTeamMemberRequest, ApiError, type ApiKeyResponse, type ApiKeysResponse, ApiKeysService, ApplicationsService, type AssignTeamRoleRequest, AuditLogsService, AuthenticationService, type BaseCertificateResponse, BaseHttpRequest, type BatchCreateEnvsRequest, type BatchCreateSecretsRequest, type BatchDeleteEnvsRequest, type BatchDeleteSecretsRequest, type BatchEnvsResponse, type BatchSecretsResponse, type CRLResponse, type CallbackResponse, CancelError, CancelablePromise, type CertificateListResponse, CertificatesService, type ChangeRequestListResponse, ChangeRequestResponse, ChangeRequestsService, type CheckSlugResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateAppResponse, type CreateEnvRequest, type CreateEnvTypeRequest, type CreateOrgInviteRequest, type CreateOrgInviteResponse, type CreateRoleRequest, type CreateSecretRequest, type CreateTeamRequest, type CreateTeamResponse, type CreateUserInviteRequest, type CreateUserInviteResponse, CreateWebhookRequest, type DeleteAppResponse, type DeleteEnvRequest, type DeleteEnvTypeRequest, type DeleteOrgRequest, type DeleteOrgResponse, type DeleteSecretRequest, type DeleteUserInviteResponse, type DirectChangeRequestBody, EffectiveAccessEntry, type EffectiveAccessResponse, type EffectivePermissionsResponse, type EnvDiffRequest, type EnvDiffResponse, type EnvHistoryRequest, type EnvHistoryResponse, type EnvPitRequest, type EnvPitStateResponse, type EnvResponse, EnvSyncAPISDK, type EnvTimestampRangeDiffRequest, type EnvTimestampRequest, type EnvTypeResponse, type EnvTypesResponse, EnvironmentTypesService, EnvironmentVariablesPointInTimeService, EnvironmentVariablesRollbackService, EnvironmentVariablesService, type EnvsResponse, type ErrorResponse, ExportEnvRequest, type ExportEnvResponse, type ExportKeyResponse, type ExtendGpgKeyExpiryRequest, FileUploadService, GenerateGpgKeyRequest, type GetAppResponse, type GetAppsResponse, type GetAuditLogsResponse, type GetAuditLogsResponseWrapper, type GetEnvRequest, type GetOrgInviteByCodeResponse, type GetSecretRequest, type GetTeamResponse, type GetTeamsResponse, type GetUserInviteByTokenResponse, type GpgKeyDetailResponse, type GpgKeyResponse, type GpgKeysResponse, GpgKeysService, GrantAccessRequest, GrantEntry, type GrantsListResponse, type ImportGpgKeyRequest, type InitOrgCARequest, type IssueMemberCertRequest, type LoginUrlResponse, type LogoutUrlResponse, type MemberCertResponse, type MyCertificateBundleResponse, type OCSPResponse, OnboardingService, OpenAPI, type OpenAPIConfig, type OrgCAResponse, type OrgResponse, OrganizationsService, type PermissionMessageResponse, PermissionsService, type PromotionChangeRequestBody, type RegenerateApiKeyResponse, type RejectChangeRequestBody, type RenewCertRequest, type RevealSecretsRequest, type RevealSecretsResponse, RevokeAccessRequest, type RevokeCertRequest, type RevokeCertResponse, type RevokeGpgKeyRequest, type RoleResponse, type RoleStatsResponse, type RolesResponse, RolesService, type RollbackResponse, type RollbackSecretsResponse, type RollbackSecretsToPitRequest, type RollbackSecretsToTimestampRequest, type RollbackToPitRequest, type RollbackToTimestampRequest, type RootCAResponse, type RotateCertRequest, RotateGpgKeyRequest, type SecretDiffRequest, type SecretDiffResponse, type SecretHistoryRequest, type SecretHistoryResponse, type SecretPitRequest, type SecretPitStateResponse, type SecretResponse, type SecretTimestampRangeDiffRequest, type SecretTimestampRequest, SecretVariableRollbackResponse, type SecretVariableRollbackToPitRequest, type SecretVariableRollbackToTimestampRequest, type SecretVariableTimelineRequest, type SecretVariableTimelineResponse, SecretsPointInTimeService, type SecretsResponse, SecretsRollbackService, SecretsService, SignDataRequest, type SignatureResponse, type TeamMessageResponse, TeamsService, type UpdateApiKeyRequest, type UpdateAppRequest, type UpdateAppResponse, type UpdateEnvRequest, type UpdateEnvTypeRequest, type UpdateOrgRequest, type UpdateRoleRequest, type UpdateSecretRequest, type UpdateTeamRequest, UpdateTrustLevelRequest, type UpdateUserInviteRequest, type UpdateUserInviteResponse, type UpdateUserRequest, UpdateWebhookRequest, type UploadFileError, type UploadFileResponse, type UserResponse, type UsersResponse, UsersService, VariableRollbackResponse, type VariableRollbackToPitRequest, type VariableRollbackToTimestampRequest, type VariableTimelineRequest, type VariableTimelineResponse, type VerifyResponse, type VerifySignatureRequest, WebhookResponse, type WebhooksResponse, WebhooksService, type WhoAmIResponse };