@epilot/sdk 2.20.15 → 2.20.16

package/dist/apis/template-variables.cjs

@@ -6,25 +6,25 @@ var _chunk4QCVVDTAcjs = require('../chunk-4QCVVDTA.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('../chunk-BV7UB72B.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/template-variables.ts
 var loadDefinition = () => {
   const mod = _chunk4QCVVDTAcjs.require_template_variables_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "templateVariables" });
+    _instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: def, apiName: "templateVariables" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "templateVariables" }),
+  createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "templateVariables" }),
   apiName: "templateVariables"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var templateVariables = _handle;
 
 
 
-exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.templateVariables = templateVariables;
+exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.templateVariables = templateVariables;

package/dist/apis/template-variables.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-2LP3UTEA.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/template-variables.ts

package/dist/apis/user.cjs

@@ -6,25 +6,25 @@ var _chunkX2LMHC5Rcjs = require('../chunk-X2LMHC5R.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('../chunk-BV7UB72B.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/user.ts
 var loadDefinition = () => {
   const mod = _chunkX2LMHC5Rcjs.require_user_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "user" });
+    _instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: def, apiName: "user" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "user" }),
+  createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "user" }),
   apiName: "user"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var user = _handle;
 
 
 
-exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.user = user;
+exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.user = user;

package/dist/apis/user.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-2LP3UTEA.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/user.ts

package/dist/apis/validation-rules.cjs

@@ -6,25 +6,25 @@ var _chunkJIUTCNTBcjs = require('../chunk-JIUTCNTB.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('../chunk-BV7UB72B.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/validation-rules.ts
 var loadDefinition = () => {
   const mod = _chunkJIUTCNTBcjs.require_validation_rules_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "validationRules" });
+    _instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: def, apiName: "validationRules" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "validationRules" }),
+  createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "validationRules" }),
   apiName: "validationRules"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var validationRules = _handle;
 
 
 
-exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.validationRules = validationRules;
+exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.validationRules = validationRules;

package/dist/apis/validation-rules.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-2LP3UTEA.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/validation-rules.ts

package/dist/apis/webhooks.cjs

@@ -6,25 +6,25 @@ var _chunkNGGI52NVcjs = require('../chunk-NGGI52NV.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('../chunk-BV7UB72B.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/webhooks.ts
 var loadDefinition = () => {
   const mod = _chunkNGGI52NVcjs.require_webhooks_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "webhooks" });
+    _instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: def, apiName: "webhooks" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "webhooks" }),
+  createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "webhooks" }),
   apiName: "webhooks"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var webhooks = _handle;
 
 
 
-exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.webhooks = webhooks;
+exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.webhooks = webhooks;

package/dist/apis/webhooks.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-2LP3UTEA.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/webhooks.ts

package/dist/apis/workflow-definition.cjs

@@ -6,25 +6,25 @@ var _chunkADX7IYB3cjs = require('../chunk-ADX7IYB3.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('../chunk-BV7UB72B.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/workflow-definition.ts
 var loadDefinition = () => {
   const mod = _chunkADX7IYB3cjs.require_workflow_definition_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "workflowDefinition" });
+    _instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: def, apiName: "workflowDefinition" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "workflowDefinition" }),
+  createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "workflowDefinition" }),
   apiName: "workflowDefinition"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var workflowDefinition = _handle;
 
 
 
-exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.workflowDefinition = workflowDefinition;
+exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.workflowDefinition = workflowDefinition;

package/dist/apis/workflow-definition.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-2LP3UTEA.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/workflow-definition.ts

package/dist/apis/workflow.cjs

@@ -6,25 +6,25 @@ var _chunkPM25LLETcjs = require('../chunk-PM25LLET.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('../chunk-BV7UB72B.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/workflow.ts
 var loadDefinition = () => {
   const mod = _chunkPM25LLETcjs.require_workflow_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "workflow" });
+    _instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: def, apiName: "workflow" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "workflow" }),
+  createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "workflow" }),
   apiName: "workflow"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var workflow = _handle;
 
 
 
-exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.workflow = workflow;
+exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createClient = createClient; exports.getClient = getClient; exports.workflow = workflow;

package/dist/apis/workflow.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-2LP3UTEA.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/workflow.ts

package/dist/{chunk-YFFICVOA.js → chunk-2LP3UTEA.js}

@@ -29,7 +29,7 @@ var authorize = (client, token) => {
 var globImport_docs = __glob({
   "./docs/README.json": () => import("./README-NBWAQWQS.js"),
   "./docs/_index.json": () => import("./_index-UY46ZN47.js"),
-  "./docs/access-token.json": () => import("./access-token-IBKEXWNA.js"),
+  "./docs/access-token.json": () => import("./access-token-ADVHFJ63.js"),
   "./docs/address-suggestions.json": () => import("./address-suggestions-74244BAJ.js"),
   "./docs/address.json": () => import("./address-QVJUGMOG.js"),
   "./docs/ai-agents.json": () => import("./ai-agents-MY4QE4CP.js"),

package/dist/{chunk-FXIH3QBV.cjs → chunk-BV7UB72B.cjs}

@@ -29,7 +29,7 @@ var authorize = (client, token) => {
 var globImport_docs = _chunkNJK5F5TFcjs.__glob.call(void 0, {
   "./docs/README.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./README-XCIDDEAE.cjs"))),
   "./docs/_index.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./_index-D5TTZP5F.cjs"))),
-  "./docs/access-token.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./access-token-E2XEMQMG.cjs"))),
+  "./docs/access-token.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./access-token-CQMYWZIG.cjs"))),
   "./docs/address-suggestions.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./address-suggestions-IUQMYF27.cjs"))),
   "./docs/address.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./address-HA4RMRNQ.cjs"))),
   "./docs/ai-agents.json": () => Promise.resolve().then(() => _interopRequireWildcard(require("./ai-agents-ME5VRKMY.cjs"))),

package/dist/index.cjs

@@ -158,7 +158,7 @@ var _chunkWOUASZJWcjs = require('./chunk-WOUASZJW.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('./chunk-FXIH3QBV.cjs');
+var _chunkBV7UB72Bcjs = require('./chunk-BV7UB72B.cjs');
 
 
 var _chunkNJK5F5TFcjs = require('./chunk-NJK5F5TF.cjs');
@@ -225,7 +225,7 @@ var resolveClient = (params) => {
   }
   if (!entry.instance) {
     const definition = entry.loader();
-    entry.instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, {
+    entry.instance = _chunkBV7UB72Bcjs.createApiClient.call(void 0, {
       definition,
       token: state.token,
       headers: state.globalHeaders,
@@ -258,7 +258,7 @@ var resetAllClients = (registry) => {
 };
 
 // src/apis/_registry.ts
-var expandDef = (mod) => _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+var expandDef = (mod) => _chunkBV7UB72Bcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 var registerBuiltinApis = (registry) => {
   registerApi({
     registry,
@@ -601,9 +601,9 @@ var createSDK = () => {
       const available = [...registry.keys()].join(", ");
       throw new Error(`Unknown API: "${name}". Available: ${available}`);
     }
-    return _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+    return _chunkBV7UB72Bcjs.createApiHandle.call(void 0, {
       resolveClient: () => resolveClient({ registry, name, state }),
-      createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: entry.loader(), apiName: name }),
+      createClient: () => _chunkBV7UB72Bcjs.createApiClient.call(void 0, { definition: entry.loader(), apiName: name }),
       apiName: name
     });
   };
@@ -651,9 +651,9 @@ var createSDK = () => {
           return interceptorUse;
         }
         case "help":
-          return (apiName) => _chunkFXIH3QBVcjs.help.call(void 0, apiName);
+          return (apiName) => _chunkBV7UB72Bcjs.help.call(void 0, apiName);
         case "openapi":
-          return (apiName) => _chunkFXIH3QBVcjs.openapi.call(void 0, apiName);
+          return (apiName) => _chunkBV7UB72Bcjs.openapi.call(void 0, apiName);
         case "then":
         case "catch":
         case "finally":
@@ -683,4 +683,4 @@ var epilot = createSDK();
 
 
 
-exports.applyLargeResponseInterceptor = applyLargeResponseInterceptor; exports.applyRetryInterceptor = applyRetryInterceptor; exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createSDK = createSDK; exports.epilot = epilot; exports.help = _chunkFXIH3QBVcjs.help; exports.openapi = _chunkFXIH3QBVcjs.openapi;
+exports.applyLargeResponseInterceptor = applyLargeResponseInterceptor; exports.applyRetryInterceptor = applyRetryInterceptor; exports.authorize = _chunkBV7UB72Bcjs.authorize; exports.createSDK = createSDK; exports.epilot = epilot; exports.help = _chunkBV7UB72Bcjs.help; exports.openapi = _chunkBV7UB72Bcjs.openapi;

package/dist/index.d.cts

@@ -3,7 +3,7 @@ import { Document } from 'openapi-client-axios';
 import { AxiosInstance, InternalAxiosRequestConfig, AxiosResponse } from 'axios';
 import { T as TokenArg, H as HeadersConfig, A as ApiHandle } from './types-ChU9Acbv.cjs';
 export { I as Interceptor, O as OverridesConfig, a as authorize } from './types-ChU9Acbv.cjs';
-import { C as Client } from './access-token.d-OiCg1gnT.cjs';
+import { C as Client } from './access-token.d-Yy-yrft_.cjs';
 import { C as Client$1 } from './address.d-CwAPOVxa.cjs';
 import { C as Client$2 } from './address-suggestions.d-_YwTOR-9.cjs';
 import { C as Client$3 } from './ai-agents.d-B3TkP4mo.cjs';

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import { Document } from 'openapi-client-axios';
 import { AxiosInstance, InternalAxiosRequestConfig, AxiosResponse } from 'axios';
 import { T as TokenArg, H as HeadersConfig, A as ApiHandle } from './types-ChU9Acbv.js';
 export { I as Interceptor, O as OverridesConfig, a as authorize } from './types-ChU9Acbv.js';
-import { C as Client } from './access-token.d-OiCg1gnT.js';
+import { C as Client } from './access-token.d-Yy-yrft_.js';
 import { C as Client$1 } from './address.d-CwAPOVxa.js';
 import { C as Client$2 } from './address-suggestions.d-_YwTOR-9.js';
 import { C as Client$3 } from './ai-agents.d-B3TkP4mo.js';

package/dist/index.js

@@ -158,7 +158,7 @@ import {
   expand,
   help,
   openapi
-} from "./chunk-YFFICVOA.js";
+} from "./chunk-2LP3UTEA.js";
 import {
   __require
 } from "./chunk-YPSWSI3M.js";

package/docs/access-token.md

@@ -48,7 +48,6 @@ const { data } = await accessTokenClient.createAccessToken(...)
 - [`PortalId`](#portalid)
 - [`PortalUserId`](#portaluserid)
 - [`ContactId`](#contactid)
-- [`PortalOrigin`](#portalorigin)
 - [`AllowedOperations`](#allowedoperations)
 - [`TokenParameters`](#tokenparameters)
 - [`ExpiresIn`](#expiresin)
@@ -99,7 +98,6 @@ const { data } = await client.createAccessToken(
   "portal_id": "string",
   "portal_user_id": "string",
   "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",
-  "origin": "END_CUSTOMER_PORTAL",
   "allowed_operations": ["getContact", "getContracts"],
   "assignments": ["123:owner"],
   "read_only": true,
@@ -139,7 +137,6 @@ const { data } = await client.listAccessTokens({
     "portal_id": "string",
     "portal_user_id": "string",
     "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",
-    "origin": "END_CUSTOMER_PORTAL",
     "allowed_operations": ["getContact", "getContracts"],
     "assignments": ["123:owner"],
     "read_only": true,
@@ -179,7 +176,6 @@ const { data } = await client.revokeAccessToken({
   "portal_id": "string",
   "portal_user_id": "string",
   "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",
-  "origin": "END_CUSTOMER_PORTAL",
   "allowed_operations": ["getContact", "getContracts"],
   "assignments": ["123:owner"],
   "read_only": true,
@@ -481,14 +477,6 @@ Contact entity ID for access token type "contact_identification"
 type ContactId = string
 ```
 
-### `PortalOrigin`
-
-Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is.
-
-```ts
-type PortalOrigin = "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"
-```
-
 ### `AllowedOperations`
 
 openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
@@ -541,7 +529,6 @@ type TokenParameters = {
   portal_id: string
   contact_id: string
   surface_id: string
-  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"
   allowed_operations: string[]
   expires_in: number
   email?: string
@@ -652,7 +639,6 @@ type ContactIdentificationTokenParameters = {
   portal_id: string
   contact_id: string
   surface_id: string
-  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"
   allowed_operations: string[]
   expires_in: number
   email?: string
@@ -671,7 +657,6 @@ type AccessTokenItem = {
   portal_id?: string
   portal_user_id?: string
   contact_id?: string
-  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"
   allowed_operations?: string[]
   assignments?: string[]
   read_only?: boolean

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/sdk",
-  "version": "2.20.15",
+  "version": "2.20.16",
   "description": "JavaScript/TypeScript SDK for epilot APIs",
   "type": "module",
   "main": "./dist/index.cjs",

package/dist/access-token-E2XEMQMG.cjs

@@ -1,7 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-NJK5F5TF.cjs');
-
-// src/docs/access-token.json
-var access_token_default = '# Access Token API\n\n- **Base URL:** `https://access-token.sls.epilot.io`\n- **Full API Docs:** [https://docs.epilot.io/api/access-token](https://docs.epilot.io/api/access-token)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.accessToken.createAccessToken(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/access-token\'\n\nconst accessTokenClient = getClient()\nauthorize(accessTokenClient, () => \'<token>\')\nconst { data } = await accessTokenClient.createAccessToken(...)\n```\n\n## Operations\n\n**Access Tokens**\n- [`createAccessToken`](#createaccesstoken)\n- [`listAccessTokens`](#listaccesstokens)\n- [`revokeAccessToken`](#revokeaccesstoken)\n\n**Public**\n- [`getAccessTokenJwks`](#getaccesstokenjwks)\n- [`getAccessTokenOIDC`](#getaccesstokenoidc)\n- [`getPublicTokenJwks`](#getpublictokenjwks)\n- [`getPortalPreviewTokenJwks`](#getportalpreviewtokenjwks)\n- [`getPublicTokenOIDC`](#getpublictokenoidc)\n- [`getPortalPreviewTokenOIDC`](#getportalpreviewtokenoidc)\n- [`getContactIdentificationTokenJwks`](#getcontactidentificationtokenjwks)\n- [`getContactIdentificationTokenOIDC`](#getcontactidentificationtokenoidc)\n\n**Schemas**\n- [`AccessToken`](#accesstoken)\n- [`AccessTokenId`](#accesstokenid)\n- [`AccessTokenName`](#accesstokenname)\n- [`AccessTokenType`](#accesstokentype)\n- [`AccessTokenJourneyId`](#accesstokenjourneyid)\n- [`PortalId`](#portalid)\n- [`PortalUserId`](#portaluserid)\n- [`ContactId`](#contactid)\n- [`PortalOrigin`](#portalorigin)\n- [`AllowedOperations`](#allowedoperations)\n- [`TokenParameters`](#tokenparameters)\n- [`ExpiresIn`](#expiresin)\n- [`ReadOnly`](#readonly)\n- [`Anonymize`](#anonymize)\n- [`AccessTokenParameters`](#accesstokenparameters)\n- [`JourneyTokenParameters`](#journeytokenparameters)\n- [`PortalTokenParameters`](#portaltokenparameters)\n- [`AssumeTokenParameters`](#assumetokenparameters)\n- [`AppTokenParameters`](#apptokenparameters)\n- [`PortalPreviewTokenParameters`](#portalpreviewtokenparameters)\n- [`ContactIdentificationTokenParameters`](#contactidentificationtokenparameters)\n- [`AccessTokenItem`](#accesstokenitem)\n- [`RoleId`](#roleid)\n- [`Assignments`](#assignments)\n\n### `createAccessToken`\n\n**Access Token type: `API`** (default if not specified):\n\n`POST /v1/access-tokens`\n\n```ts\nconst { data } = await client.createAccessToken(\n  null,\n  {\n    name: \'Postman Access Token\',\n    token_type: \'api\',\n    assignments: [\'123:owner\'],\n    expires_in: 3600,\n    read_only: true,\n    anonymize: true\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp...",\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "origin": "END_CUSTOMER_PORTAL",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `listAccessTokens`\n\nLists all Access Tokens for current user (by default excludes system generated tokens)\n\n`GET /v1/access-tokens`\n\n```ts\nconst { data } = await client.listAccessTokens({\n  token_type: [\'...\'],\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n[\n  {\n    "id": "api_5ZugdRXasLfWBypHi93Fk",\n    "created_at": "1970-01-01T00:00:00.000Z",\n    "name": "Postman Access Token",\n    "token_type": "api",\n    "journey_id": "string",\n    "portal_id": "string",\n    "portal_user_id": "string",\n    "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n    "origin": "END_CUSTOMER_PORTAL",\n    "allowed_operations": ["getContact", "getContracts"],\n    "assignments": ["123:owner"],\n    "read_only": true,\n    "anonymize": true,\n    "last_used": "2026-02-24",\n    "expires_at": "2026-03-01T12:00:00.000Z"\n  }\n]\n```\n\n</details>\n\n---\n\n### `revokeAccessToken`\n\nRevokes an Access Token so it can\'t be used anymore.\n\n`DELETE /v1/access-tokens/{id}`\n\n```ts\nconst { data } = await client.revokeAccessToken({\n  id: \'123e4567-e89b-12d3-a456-426614174000\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "origin": "END_CUSTOMER_PORTAL",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenJwks`\n\nGet jwks public key set to verify access tokens generated by this API\n\n`GET /v1/access-tokens/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getAccessTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenOIDC`\n\nOpenID Connect configuration for Access Token API as identity provider\n\n`GET /v1/access-tokens/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getAccessTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenJwks`\n\nGet jwks public key set to verify public tokens generated by this API\n\n`GET /v1/access-tokens/public/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPublicTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenJwks`\n\nGet jwks public key set to verify portal preview tokens generated by this API\n\n`GET /v1/access-tokens/portal-preview/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a public identity provider\n\n`GET /v1/access-tokens/public/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPublicTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a portal preview identity provider\n\n`GET /v1/access-tokens/portal-preview/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenJwks`\n\nGet jwks public key set to verify contact identification tokens generated by this API\n\n`GET /v1/access-tokens/contact-identification/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenOIDC`\n\nOpenID Connect configuration for Access Token API as a contact identification identity provider\n\n`GET /v1/access-tokens/contact-identification/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `AccessToken`\n\nA JWT Access Token\n\n```ts\ntype AccessToken = string\n```\n\n### `AccessTokenId`\n\n```ts\ntype AccessTokenId = string\n```\n\n### `AccessTokenName`\n\nHuman readable name for access token\n\n```ts\ntype AccessTokenName = string\n```\n\n### `AccessTokenType`\n\nAccess token type\n\n```ts\ntype AccessTokenType = "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n```\n\n### `AccessTokenJourneyId`\n\nJourney ID for access token type "journey"\n\n```ts\ntype AccessTokenJourneyId = string\n```\n\n### `PortalId`\n\nPortal ID for access token type "portal"\n\n```ts\ntype PortalId = string\n```\n\n### `PortalUserId`\n\nPortal User ID for access token type "portal_preview"\n\n```ts\ntype PortalUserId = string\n```\n\n### `ContactId`\n\nContact entity ID for access token type "contact_identification"\n\n```ts\ntype ContactId = string\n```\n\n### `PortalOrigin`\n\nPortal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is.\n\n```ts\ntype PortalOrigin = "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n```\n\n### `AllowedOperations`\n\nopenapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer\'s own allowlist later cannot retroactively widen a token that is already in circulation.\n\n```ts\ntype AllowedOperations = string[]\n```\n\n### `TokenParameters`\n\n```ts\ntype TokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n} | {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `ExpiresIn`\n\n```ts\ntype ExpiresIn = number | string\n```\n\n### `ReadOnly`\n\nWhen true, the issued token may only perform read-only actions. Any action guarded by permissions that is not read-only (i.e. not a view/export/download action) is denied, regardless of the roles the token carries.\n\n```ts\ntype ReadOnly = boolean\n```\n\n### `Anonymize`\n\nForces PII anonymization on all entity data returned to this token. Cannot be disabled by the token bearer. See entity-api anonymized responses.\n\n```ts\ntype Anonymize = boolean\n```\n\n### `AccessTokenParameters`\n\n```ts\ntype AccessTokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `JourneyTokenParameters`\n\n```ts\ntype JourneyTokenParameters = {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n}\n```\n\n### `PortalTokenParameters`\n\n```ts\ntype PortalTokenParameters = {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n}\n```\n\n### `AssumeTokenParameters`\n\n```ts\ntype AssumeTokenParameters = {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `AppTokenParameters`\n\n```ts\ntype AppTokenParameters = {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `PortalPreviewTokenParameters`\n\n```ts\ntype PortalPreviewTokenParameters = {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n}\n```\n\n### `ContactIdentificationTokenParameters`\n\nA token that acts as one contact, issued after that contact was identified by a portal\'s registration identifiers rather than by logging in. Distinct from portal_preview, which impersonates an existing portal user for a 360 operator: this kind belongs to no user, is minted for an unauthenticated cal\n\n```ts\ntype ContactIdentificationTokenParameters = {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `AccessTokenItem`\n\n```ts\ntype AccessTokenItem = {\n  id: string\n  created_at: string // date-time\n  name: string\n  token_type?: "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n  journey_id?: string\n  portal_id?: string\n  portal_user_id?: string\n  contact_id?: string\n  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n  allowed_operations?: string[]\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n  last_used?: string // date\n  expires_at?: string // date-time\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n';
-
-
-exports.default = access_token_default;

package/dist/access-token-IBKEXWNA.js

@@ -1,7 +0,0 @@
-import "./chunk-YPSWSI3M.js";
-
-// src/docs/access-token.json
-var access_token_default = '# Access Token API\n\n- **Base URL:** `https://access-token.sls.epilot.io`\n- **Full API Docs:** [https://docs.epilot.io/api/access-token](https://docs.epilot.io/api/access-token)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.accessToken.createAccessToken(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/access-token\'\n\nconst accessTokenClient = getClient()\nauthorize(accessTokenClient, () => \'<token>\')\nconst { data } = await accessTokenClient.createAccessToken(...)\n```\n\n## Operations\n\n**Access Tokens**\n- [`createAccessToken`](#createaccesstoken)\n- [`listAccessTokens`](#listaccesstokens)\n- [`revokeAccessToken`](#revokeaccesstoken)\n\n**Public**\n- [`getAccessTokenJwks`](#getaccesstokenjwks)\n- [`getAccessTokenOIDC`](#getaccesstokenoidc)\n- [`getPublicTokenJwks`](#getpublictokenjwks)\n- [`getPortalPreviewTokenJwks`](#getportalpreviewtokenjwks)\n- [`getPublicTokenOIDC`](#getpublictokenoidc)\n- [`getPortalPreviewTokenOIDC`](#getportalpreviewtokenoidc)\n- [`getContactIdentificationTokenJwks`](#getcontactidentificationtokenjwks)\n- [`getContactIdentificationTokenOIDC`](#getcontactidentificationtokenoidc)\n\n**Schemas**\n- [`AccessToken`](#accesstoken)\n- [`AccessTokenId`](#accesstokenid)\n- [`AccessTokenName`](#accesstokenname)\n- [`AccessTokenType`](#accesstokentype)\n- [`AccessTokenJourneyId`](#accesstokenjourneyid)\n- [`PortalId`](#portalid)\n- [`PortalUserId`](#portaluserid)\n- [`ContactId`](#contactid)\n- [`PortalOrigin`](#portalorigin)\n- [`AllowedOperations`](#allowedoperations)\n- [`TokenParameters`](#tokenparameters)\n- [`ExpiresIn`](#expiresin)\n- [`ReadOnly`](#readonly)\n- [`Anonymize`](#anonymize)\n- [`AccessTokenParameters`](#accesstokenparameters)\n- [`JourneyTokenParameters`](#journeytokenparameters)\n- [`PortalTokenParameters`](#portaltokenparameters)\n- [`AssumeTokenParameters`](#assumetokenparameters)\n- [`AppTokenParameters`](#apptokenparameters)\n- [`PortalPreviewTokenParameters`](#portalpreviewtokenparameters)\n- [`ContactIdentificationTokenParameters`](#contactidentificationtokenparameters)\n- [`AccessTokenItem`](#accesstokenitem)\n- [`RoleId`](#roleid)\n- [`Assignments`](#assignments)\n\n### `createAccessToken`\n\n**Access Token type: `API`** (default if not specified):\n\n`POST /v1/access-tokens`\n\n```ts\nconst { data } = await client.createAccessToken(\n  null,\n  {\n    name: \'Postman Access Token\',\n    token_type: \'api\',\n    assignments: [\'123:owner\'],\n    expires_in: 3600,\n    read_only: true,\n    anonymize: true\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp...",\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "origin": "END_CUSTOMER_PORTAL",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `listAccessTokens`\n\nLists all Access Tokens for current user (by default excludes system generated tokens)\n\n`GET /v1/access-tokens`\n\n```ts\nconst { data } = await client.listAccessTokens({\n  token_type: [\'...\'],\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n[\n  {\n    "id": "api_5ZugdRXasLfWBypHi93Fk",\n    "created_at": "1970-01-01T00:00:00.000Z",\n    "name": "Postman Access Token",\n    "token_type": "api",\n    "journey_id": "string",\n    "portal_id": "string",\n    "portal_user_id": "string",\n    "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n    "origin": "END_CUSTOMER_PORTAL",\n    "allowed_operations": ["getContact", "getContracts"],\n    "assignments": ["123:owner"],\n    "read_only": true,\n    "anonymize": true,\n    "last_used": "2026-02-24",\n    "expires_at": "2026-03-01T12:00:00.000Z"\n  }\n]\n```\n\n</details>\n\n---\n\n### `revokeAccessToken`\n\nRevokes an Access Token so it can\'t be used anymore.\n\n`DELETE /v1/access-tokens/{id}`\n\n```ts\nconst { data } = await client.revokeAccessToken({\n  id: \'123e4567-e89b-12d3-a456-426614174000\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "origin": "END_CUSTOMER_PORTAL",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenJwks`\n\nGet jwks public key set to verify access tokens generated by this API\n\n`GET /v1/access-tokens/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getAccessTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenOIDC`\n\nOpenID Connect configuration for Access Token API as identity provider\n\n`GET /v1/access-tokens/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getAccessTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenJwks`\n\nGet jwks public key set to verify public tokens generated by this API\n\n`GET /v1/access-tokens/public/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPublicTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenJwks`\n\nGet jwks public key set to verify portal preview tokens generated by this API\n\n`GET /v1/access-tokens/portal-preview/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a public identity provider\n\n`GET /v1/access-tokens/public/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPublicTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a portal preview identity provider\n\n`GET /v1/access-tokens/portal-preview/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenJwks`\n\nGet jwks public key set to verify contact identification tokens generated by this API\n\n`GET /v1/access-tokens/contact-identification/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenOIDC`\n\nOpenID Connect configuration for Access Token API as a contact identification identity provider\n\n`GET /v1/access-tokens/contact-identification/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `AccessToken`\n\nA JWT Access Token\n\n```ts\ntype AccessToken = string\n```\n\n### `AccessTokenId`\n\n```ts\ntype AccessTokenId = string\n```\n\n### `AccessTokenName`\n\nHuman readable name for access token\n\n```ts\ntype AccessTokenName = string\n```\n\n### `AccessTokenType`\n\nAccess token type\n\n```ts\ntype AccessTokenType = "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n```\n\n### `AccessTokenJourneyId`\n\nJourney ID for access token type "journey"\n\n```ts\ntype AccessTokenJourneyId = string\n```\n\n### `PortalId`\n\nPortal ID for access token type "portal"\n\n```ts\ntype PortalId = string\n```\n\n### `PortalUserId`\n\nPortal User ID for access token type "portal_preview"\n\n```ts\ntype PortalUserId = string\n```\n\n### `ContactId`\n\nContact entity ID for access token type "contact_identification"\n\n```ts\ntype ContactId = string\n```\n\n### `PortalOrigin`\n\nPortal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is.\n\n```ts\ntype PortalOrigin = "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n```\n\n### `AllowedOperations`\n\nopenapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer\'s own allowlist later cannot retroactively widen a token that is already in circulation.\n\n```ts\ntype AllowedOperations = string[]\n```\n\n### `TokenParameters`\n\n```ts\ntype TokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n} | {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `ExpiresIn`\n\n```ts\ntype ExpiresIn = number | string\n```\n\n### `ReadOnly`\n\nWhen true, the issued token may only perform read-only actions. Any action guarded by permissions that is not read-only (i.e. not a view/export/download action) is denied, regardless of the roles the token carries.\n\n```ts\ntype ReadOnly = boolean\n```\n\n### `Anonymize`\n\nForces PII anonymization on all entity data returned to this token. Cannot be disabled by the token bearer. See entity-api anonymized responses.\n\n```ts\ntype Anonymize = boolean\n```\n\n### `AccessTokenParameters`\n\n```ts\ntype AccessTokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `JourneyTokenParameters`\n\n```ts\ntype JourneyTokenParameters = {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n}\n```\n\n### `PortalTokenParameters`\n\n```ts\ntype PortalTokenParameters = {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n}\n```\n\n### `AssumeTokenParameters`\n\n```ts\ntype AssumeTokenParameters = {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `AppTokenParameters`\n\n```ts\ntype AppTokenParameters = {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `PortalPreviewTokenParameters`\n\n```ts\ntype PortalPreviewTokenParameters = {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n}\n```\n\n### `ContactIdentificationTokenParameters`\n\nA token that acts as one contact, issued after that contact was identified by a portal\'s registration identifiers rather than by logging in. Distinct from portal_preview, which impersonates an existing portal user for a 360 operator: this kind belongs to no user, is minted for an unauthenticated cal\n\n```ts\ntype ContactIdentificationTokenParameters = {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `AccessTokenItem`\n\n```ts\ntype AccessTokenItem = {\n  id: string\n  created_at: string // date-time\n  name: string\n  token_type?: "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n  journey_id?: string\n  portal_id?: string\n  portal_user_id?: string\n  contact_id?: string\n  origin?: "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL"\n  allowed_operations?: string[]\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n  last_used?: string // date\n  expires_at?: string // date-time\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n';
-export {
-  access_token_default as default
-};