@epilot/sdk 2.20.15 → 2.20.17

package/definitions/access-token.json

@@ -94,7 +94,6 @@
                     "portal_id": "portal_abc123",
                     "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",
                     "surface_id": "website-journeys",
-                    "origin": "END_CUSTOMER_PORTAL",
                     "allowed_operations": [
                       "getContact",
                       "getContracts"
@@ -665,14 +664,6 @@
         "description": "Contact entity ID for access token type \"contact_identification\"",
         "example": "5da0a718-c822-403d-9f5d-20d4584e0528"
       },
-      "PortalOrigin": {
-        "type": "string",
-        "enum": [
-          "END_CUSTOMER_PORTAL",
-          "INSTALLER_PORTAL"
-        ],
-        "description": "Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is."
-      },
       "AllowedOperations": {
         "type": "array",
         "description": "openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.",
@@ -928,9 +919,6 @@
             "description": "Portal surface the token is issued for (see `surfaces` on the portal config in customer-portal-api). Carried as the `custom:surface_id` claim; the consuming API resolves the surface's data access from the portal config on every request.",
             "example": "website-journeys"
           },
-          "origin": {
-            "$ref": "#/components/schemas/PortalOrigin"
-          },
           "allowed_operations": {
             "$ref": "#/components/schemas/AllowedOperations"
           },
@@ -984,9 +972,6 @@
           "contact_id": {
             "$ref": "#/components/schemas/ContactId"
           },
-          "origin": {
-            "$ref": "#/components/schemas/PortalOrigin"
-          },
           "allowed_operations": {
             "$ref": "#/components/schemas/AllowedOperations"
           },

package/definitions/file.json

@@ -2961,9 +2961,10 @@
             "enum": [
               "completed",
               "pending",
-              "failed"
+              "failed",
+              "skipped"
             ],
-            "description": "`completed` when every rule was evaluated. `pending` is reserved for check levels that\nneed asynchronous content extraction; `failed` when the observation could not be produced.\n"
+            "description": "`completed` when every rule was evaluated. `pending` is reserved for check levels that\nneed asynchronous content extraction; `failed` when the observation could not be produced;\n`skipped` when document validation is not enabled for the organisation - the file was not\nread and `results` is empty, so callers treat the file as accepted.\n"
           },
           "file": {
             "$ref": "#/components/schemas/FileValidationFile"

package/definitions/pricing.json

@@ -3547,6 +3547,35 @@
                         }
                       ]
                     }
+                  },
+                  "A variant carrying overrides that did not apply": {
+                    "summary": "`unit_amount_currency` reads as the entity's own value rather than the variant's, and `_inert_overrides` says why each stored override was passed over",
+                    "value": {
+                      "results": [
+                        {
+                          "_id": "price-sp26d1yo",
+                          "_variant_id": "var-46045",
+                          "_version_valid_from": "2027-01-01T00:00:00.000Z",
+                          "_conditions": {
+                            "postal_code": "46045",
+                            "default": false
+                          },
+                          "_inert_overrides": [
+                            {
+                              "attribute": "unit_amount_currency",
+                              "reason": "ATTRIBUTE_NOT_OVERRIDABLE"
+                            },
+                            {
+                              "attribute": "legacy_surcharge",
+                              "reason": "ATTRIBUTE_UNDECLARED"
+                            }
+                          ],
+                          "_schema": "price",
+                          "unit_amount": 2499,
+                          "unit_amount_currency": "EUR"
+                        }
+                      ]
+                    }
                   }
                 }
               }
@@ -3597,7 +3626,7 @@
     },
     "/v1/conditional-pricing/{slug}/entities/{entity_id}/variants": {
       "post": {
-        "description": "Creates one variant of a conditional entity, together with the first version carrying its\nvalues: a variant always has at least one version.\n\nThe body pins the situation the variant applies to. Pins are exact values only — predicates\nare a read-side concept and are rejected here — and are stored canonicalized for their\ncondition's type, so two spellings of one instant, or one town written two ways, are one\nvariant rather than two that no context can tell apart.\n\nThree write rules are worth knowing before the first call:\n\n- A variant must pin at least one condition or be marked `default`. A variant pinning nothing\n  would be a universal wildcard matching every resolve, which is a far more dangerous thing\n  than a fallback and far easier to create by accident.\n- `default` is a property of the variant, set by the `default` flag, and is never a value in\n  `conditions` — not even `false`. A `default` variant cannot pin anything else, and an entity\n  can have only one; a second is refused as `TUPLE_CONFLICT`. Any entity may have one;\n  nothing is declared in the schema to allow it.\n- Condition values are immutable afterwards. A variant's identity is the situation it applies\n  to, and orders and contracts pin it. **A condition added to a schema that already has\n  variants is effectively one-way**: every existing variant is a wildcard on the new\n  dimension, but the first variant that pins it is ambiguous against all of them, and\n  retro-pinning the others is blocked by this same rule.\n\nAttribute values are applied only for attributes currently carrying `overridable_attribute`.\nMetadata and non-overridable fields present in the body are not applied rather than rejected,\nand each one is named in the response's `warnings`, so a client working from a slightly stale\nschema snapshot still succeeds and still learns which fields did not land. The reporting half\nis published ahead of the behaviour: this operation is dispatched, so until the\n`ATTRIBUTES_NOT_APPLIED` warning starts being emitted a field that is not applied is dropped\nwith nothing in the response naming it. Applying only overridable attributes is today's\nbehaviour; being told which ones did not land is not yet.\n\n`variant_id` is always server-generated and returned, and is not accepted in the body — the\nrequest schema admits no such property. It is the durable key orders and contracts pin.\n",
+        "description": "Creates one variant of a conditional entity, together with the first version carrying its\nvalues: a variant always has at least one version.\n\nThe body pins the situation the variant applies to. Pins are exact values only — predicates\nare a read-side concept and are rejected here — and are stored canonicalized for their\ncondition's type, so two spellings of one instant, or one town written two ways, are one\nvariant rather than two that no context can tell apart.\n\nThree write rules are worth knowing before the first call:\n\n- A variant must pin at least one condition or be marked `default`. A variant pinning nothing\n  would be a universal wildcard matching every resolve, which is a far more dangerous thing\n  than a fallback and far easier to create by accident.\n- `default` is a property of the variant, set by the `default` flag, and is never a value in\n  `conditions` — not even `false`. A `default` variant cannot pin anything else, and an entity\n  can have only one; a second is refused as `TUPLE_CONFLICT`. Any entity may have one;\n  nothing is declared in the schema to allow it.\n- Condition values are immutable afterwards. A variant's identity is the situation it applies\n  to, and orders and contracts pin it. **A condition added to a schema that already has\n  variants is effectively one-way**: every existing variant is a wildcard on the new\n  dimension, but the first variant that pins it is ambiguous against all of them, and\n  retro-pinning the others is blocked by this same rule.\n\nAttribute values are applied only for attributes currently carrying `overridable_attribute`.\nMetadata and non-overridable fields present in the body are not applied rather than rejected,\nand every one but the metadata is named in the response's `warnings`, so a client working from\na slightly stale schema snapshot still succeeds and still learns which fields did not land.\nMetadata is never named, since a client echoing back a payload it read carries it in every\nbody.\n\n`variant_id` is always server-generated and returned, and is not accepted in the body — the\nrequest schema admits no such property. It is the durable key orders and contracts pin.\n",
         "operationId": "$createConditionalVariant",
         "summary": "$createConditionalVariant",
         "tags": [
@@ -3642,12 +3671,51 @@
               "application/json": {
                 "schema": {
                   "$ref": "#/components/schemas/CreatedVariant"
+                },
+                "examples": {
+                  "A body naming attributes this variant may not override": {
+                    "summary": "The write succeeded and `values` holds what was stored, so the two attributes the warning names are absent from it",
+                    "value": {
+                      "variant_id": "var-46045",
+                      "entity_id": "price-sp26d1yo",
+                      "schema": "price",
+                      "conditions": {
+                        "postal_code": "46045",
+                        "default": false
+                      },
+                      "valid_from": "2027-01-01T00:00:00.000Z",
+                      "values": {
+                        "unit_amount": 2499
+                      },
+                      "_created_at": "2026-12-01T09:15:00.000Z",
+                      "_updated_at": "2026-12-01T09:15:00.000Z",
+                      "_revision": 1,
+                      "warnings": [
+                        {
+                          "code": "ATTRIBUTES_NOT_APPLIED",
+                          "message": "The values sent for 2 attributes were not applied: unit_amount_currency, legacy_surcharge",
+                          "details": {
+                            "attributes": [
+                              {
+                                "attribute": "unit_amount_currency",
+                                "reason": "ATTRIBUTE_NOT_OVERRIDABLE"
+                              },
+                              {
+                                "attribute": "legacy_surcharge",
+                                "reason": "ATTRIBUTE_UNDECLARED"
+                              }
+                            ]
+                          }
+                        }
+                      ]
+                    }
+                  }
                 }
               }
             }
           },
           "400": {
-            "description": "The variant cannot be created as described: it pins nothing and is not the default\n(`VARIANT_UNPINNED`), pins a condition the schema does not declare\n(`CONDITION_UNDEFINED`), pins a `select` value outside the vocabulary the condition\ndeclares (`CONDITION_VALUE_INVALID`), carries a value malformed for its condition's type\n(`PIN_FORMAT_INVALID`), or the entity already holds every variant it may hold\n(`VARIANT_LIMIT_REACHED`).\n\nSeveral refusals on this response carry no code, and testing `code` for absence is how\nthey are told from the five above: pinning the fallback marker directly under either of\nits names (`default` or `_default`), marking a variant `default` while it also pins a\nreal condition, pinning a condition whose declared type this deploy cannot read, and a\n`valid_from` this store cannot sort by. Each is an integration mistake rather than one\nbad row in a source file.\n\nAlso refused here: an entity id belonging to another type than the slug names\n(`ENTITY_TYPE_MISMATCH`), and an entity that was never created as a conditional one\n(`ENTITY_NOT_CONDITIONAL`).\n",
+            "description": "The variant cannot be created as described: it pins nothing and is not the default\n(`VARIANT_UNPINNED`), pins a condition the schema does not declare\n(`CONDITION_UNDEFINED`), pins a `select` value the condition's vocabulary does not admit\n(`CONDITION_VALUE_INVALID`), carries a value malformed for its condition's type\n(`PIN_FORMAT_INVALID`), or the entity already holds every variant it may hold\n(`VARIANT_LIMIT_REACHED`).\n\nSeveral refusals on this response carry no code, and testing `code` for absence is how\nthey are told from the five above: pinning the fallback marker directly under either of\nits names (`default` or `_default`), marking a variant `default` while it also pins a\nreal condition, pinning a condition whose declared type this deploy cannot read, and a\n`valid_from` this store cannot sort by. Each is an integration mistake rather than one\nbad row in a source file.\n\nAlso refused here: an entity id belonging to another type than the slug names\n(`ENTITY_TYPE_MISMATCH`), and an entity that was never created as a conditional one\n(`ENTITY_NOT_CONDITIONAL`).\n",
             "content": {
               "application/json": {
                 "schema": {
@@ -5153,7 +5221,7 @@
                           "warnings": [
                             {
                               "code": "ATTRIBUTES_NOT_APPLIED",
-                              "message": "description was not applied",
+                              "message": "The value sent for description was not applied",
                               "details": {
                                 "attributes": [
                                   {
@@ -5170,7 +5238,7 @@
                           "entity_id": "price-sp26d1yo",
                           "warnings": [],
                           "error": {
-                            "message": "segment cannot be pinned to industrial",
+                            "message": "The value pinned for condition segment is not one of its declared options",
                             "code": "CONDITION_VALUE_INVALID",
                             "details": {
                               "condition_name": "segment",
@@ -5451,7 +5519,7 @@
           },
           "options": {
             "type": "array",
-            "description": "The declared vocabulary of a `select` condition. Absent for every other type.\n\nThe same shape a `select` condition's `options` has on the Entity API, item for item: an\nentry is either the value itself or an object carrying that value and an optional display\n`title`. A `title` is never pinned by a variant and never matched — two entries differing\nonly in their title are one vocabulary entry.\n\nThe vocabulary is always closed: a condition carries no flag widening it, so a pinned\nvalue outside a declared vocabulary is rejected with `CONDITION_VALUE_INVALID`. It is\n*not* enforced on resolve — a vocabulary says what may be stored, not what may be asked\nfor, so a context value outside it is a query that simply matches nothing.\n",
+            "description": "The declared vocabulary of a `select` condition. Absent for every other type.\n\nThe same shape a `select` condition's `options` has on the Entity API, item for item: an\nentry is either the value itself or an object carrying that value and an optional display\n`title`. A `title` is never pinned by a variant and never matched — two entries differing\nonly in their title are one vocabulary entry.\n\nThe vocabulary is always closed: a condition carries no flag widening it, so a pinned\nvalue outside a declared vocabulary is rejected with `CONDITION_VALUE_INVALID`. A\nvocabulary that declares nothing is closed too — while `options` is absent or empty, or\nholds nothing this deploy can read, the condition admits no pin at all and the same code\nis returned with an empty `options`. It is *not* enforced on resolve — a vocabulary says\nwhat may be stored, not what may be asked for, so a context value outside it is a query\nthat simply matches nothing.\n",
             "items": {
               "anyOf": [
                 {
@@ -5541,7 +5609,7 @@
       },
       "ConditionalPricingErrorCode": {
         "type": "string",
-        "description": "Machine-readable failure mode of a conditional-pricing operation, allowing clients\nto branch on the kind of failure instead of parsing the error message.\n\n- `SCHEMA_NOT_FOUND` (404): no conditional entity type by that slug\n- `ENTITY_NOT_FOUND` (404): the schema holds no entity with that id\n- `ENTITY_TYPE_MISMATCH` (400): that id belongs to an entity of another type than the slug named\n- `ENTITY_NOT_CONDITIONAL` (400): the entity is of the right type but was not created as a conditional one\n- `VARIANT_NOT_FOUND` (404): the entity has no such variant\n- `VERSION_NOT_FOUND` (404): the variant has no version at that `valid_from`\n- `NO_MATCHES` (404): nothing applied to the context and the entity has no `default` variant\n- `NO_ACTIVE_VERSION` (404): the variant has no version in effect at the instant asked about\n- `AMBIGUOUS_RESOLUTION` (409): several variants match the given context while a single result was requested\n- `TUPLE_CONFLICT` (409): the condition tuple is already claimed by another variant\n- `VERSION_CONFLICT` (409): a version already exists at the given `valid_from` on that variant\n- `CONDITION_UNDEFINED` (400): a resolve context, a listing filter or a variant's pins name a condition the entity's schema does not define\n- `OPERATOR_UNSUPPORTED` (400): the requested operator is not applicable to the condition's type\n- `CONTEXT_FORMAT_INVALID` (400): a resolve context or listing filter value is malformed for its condition type\n- `CONDITION_VALUE_INVALID` (400): a variant write pins a `select` value the condition's declared `options` do not contain\n- `TOO_MANY_MATCHES` (400): a multi-match resolve exceeded its result cap\n- `WRITE_CONFLICT` (409): transient write contention, retryable unlike `TUPLE_CONFLICT`\n- `OFFSET_WINDOW_EXCEEDED` (400): a listing's `from` plus `size` reaches past the offset window the search index allows\n- `CURSOR_INVALID` (400): a paging cursor cannot be read, or does not belong to the read it was sent with\n- `VARIANT_LIMIT_REACHED` (400): the entity already holds every variant it may hold\n- `PIN_FORMAT_INVALID` (400): a variant pins a value malformed for its condition's type\n- `VARIANT_UNPINNED` (400): a variant write pins no condition and is not marked `default`, or a batch delete item addresses no variant\n- `LAST_VERSION_UNDELETABLE` (400): the delete would leave the variant with no version at all\n\nIn a batch, the last four are the refusals an importer branches on: `VARIANT_LIMIT_REACHED`\nmeans stop the import, `PIN_FORMAT_INVALID` means one bad row, `LAST_VERSION_UNDELETABLE`\nmeans delete the variant instead.\n\nNot every refusal has a code. These carry a message and neither `code` nor `details`, and\neach operation's `400` names its own: a write pinning the reserved marker (`default` or\n`_default`), a variant marked `default` that also pins a real condition, a pin on a condition\nwhose declared type this deploy cannot read, an id this store cannot key by, a `valid_from`\nthis store cannot sort by, and a version write or delete with no `_revision`. Testing `code`\nfor absence is how a client tells them from the coded failures.\n\nFour of the 404s say that something the request addressed does not exist, and are fixed by\ncorrecting an id or accepting the thing is gone. The other two say the opposite: everything\naddressed exists and there is still nothing to serve — no variant applies to this situation,\nor none of a variant's versions is in effect yet. Those are ordinary business outcomes, told\napart from a wrong id by their code.\n\n`ENTITY_TYPE_MISMATCH` and `ENTITY_NOT_CONDITIONAL` are `400`s, not 404s: the entity the\nrequest addressed **was** found, and the fix is the slug beside it. A slug that names no\nconditional entity type at all is a `400` too.\n\nEach code is emitted with the HTTP status shown above, and only with that status, and each\none is pinned by a member of `ConditionalPricingError` — which is where the structured data\nthat code carries is declared.\n",
+        "description": "Machine-readable failure mode of a conditional-pricing operation, allowing clients\nto branch on the kind of failure instead of parsing the error message.\n\n- `SCHEMA_NOT_FOUND` (404): no conditional entity type by that slug\n- `ENTITY_NOT_FOUND` (404): the schema holds no entity with that id\n- `ENTITY_TYPE_MISMATCH` (400): that id belongs to an entity of another type than the slug named\n- `ENTITY_NOT_CONDITIONAL` (400): the entity is of the right type but was not created as a conditional one\n- `VARIANT_NOT_FOUND` (404): the entity has no such variant\n- `VERSION_NOT_FOUND` (404): the variant has no version at that `valid_from`\n- `NO_MATCHES` (404): nothing applied to the context and the entity has no `default` variant\n- `NO_ACTIVE_VERSION` (404): the variant has no version in effect at the instant asked about\n- `AMBIGUOUS_RESOLUTION` (409): several variants match the given context while a single result was requested\n- `TUPLE_CONFLICT` (409): the condition tuple is already claimed by another variant\n- `VERSION_CONFLICT` (409): a version already exists at the given `valid_from` on that variant\n- `CONDITION_UNDEFINED` (400): a resolve context, a listing filter or a variant's pins name a condition the entity's schema does not define\n- `OPERATOR_UNSUPPORTED` (400): the requested operator is not applicable to the condition's type\n- `CONTEXT_FORMAT_INVALID` (400): a resolve context or listing filter value is malformed for its condition type\n- `CONDITION_VALUE_INVALID` (400): a variant write pins a `select` value the condition's `options` do not admit, including every pin on a condition whose `options` are absent, empty or unreadable\n- `TOO_MANY_MATCHES` (400): a multi-match resolve exceeded its result cap\n- `WRITE_CONFLICT` (409): transient write contention, retryable unlike `TUPLE_CONFLICT`\n- `OFFSET_WINDOW_EXCEEDED` (400): a listing's `from` plus `size` reaches past the offset window the search index allows\n- `CURSOR_INVALID` (400): a paging cursor cannot be read, or does not belong to the read it was sent with\n- `VARIANT_LIMIT_REACHED` (400): the entity already holds every variant it may hold\n- `PIN_FORMAT_INVALID` (400): a variant pins a value malformed for its condition's type\n- `VARIANT_UNPINNED` (400): a variant write pins no condition and is not marked `default`, or a batch delete item addresses no variant\n- `LAST_VERSION_UNDELETABLE` (400): the delete would leave the variant with no version at all\n\nIn a batch, the last four are the refusals an importer branches on: `VARIANT_LIMIT_REACHED`\nmeans stop the import, `PIN_FORMAT_INVALID` means one bad row, `LAST_VERSION_UNDELETABLE`\nmeans delete the variant instead.\n\nNot every refusal has a code. These carry a message and neither `code` nor `details`, and\neach operation's `400` names its own: a write pinning the reserved marker (`default` or\n`_default`), a variant marked `default` that also pins a real condition, a pin on a condition\nwhose declared type this deploy cannot read, an id this store cannot key by, a `valid_from`\nthis store cannot sort by, and a version write or delete with no `_revision`. Testing `code`\nfor absence is how a client tells them from the coded failures.\n\nFour of the 404s say that something the request addressed does not exist, and are fixed by\ncorrecting an id or accepting the thing is gone. The other two say the opposite: everything\naddressed exists and there is still nothing to serve — no variant applies to this situation,\nor none of a variant's versions is in effect yet. Those are ordinary business outcomes, told\napart from a wrong id by their code.\n\n`ENTITY_TYPE_MISMATCH` and `ENTITY_NOT_CONDITIONAL` are `400`s, not 404s: the entity the\nrequest addressed **was** found, and the fix is the slug beside it. A slug that names no\nconditional entity type at all is a `400` too.\n\nEach code is emitted with the HTTP status shown above, and only with that status, and each\none is pinned by a member of `ConditionalPricingError` — which is where the structured data\nthat code carries is declared.\n",
         "enum": [
           "SCHEMA_NOT_FOUND",
           "ENTITY_NOT_FOUND",
@@ -5795,7 +5863,7 @@
       "VariantValues": {
         "type": "object",
         "additionalProperties": true,
-        "description": "The attribute values this version overrides on the base entity, keyed by attribute name.\n\nOnly attributes currently declaring `overridable_attribute` are applied. Metadata fields\n(anything underscore-prefixed), readonly attributes, hidden attributes, computed attributes\nand non-overridable attributes present here are not applied rather than rejected, and each one\nis named in the write's `warnings`, so a client working from a slightly stale schema snapshot\nstill succeeds instead of failing on fields it could not have known to drop, and still learns\nwhich of them did not land — the naming half published ahead of the behaviour, so until the\n`ATTRIBUTES_NOT_APPLIED` warning is emitted an unapplied attribute is dropped silently. An attribute's `render_condition` says when to show it and has no\nbearing on whether a variant may override it.\n\nNot applied means *not updated*, never *removed*: a value already stored for an attribute that\nis not currently overridable is preserved, so removing and restoring the flag deactivates and\nthen reactivates the same override. An append seeds the attributes the variant may not\noverride from the version in effect at its own `valid_from`, so its stored values are not a\npure function of the body that wrote it; a variant's first version, and an append dated before\nthe variant's earliest version, inherit nothing.\n\nA composite price's `price_components` is an ordinary overridable relation attribute. A\ncomposite variant's override references different component *entities*, never a variant or a\nversion of one, and holds whatever a relation attribute ordinarily holds — this API defines no\nreference shape of its own.\n",
+        "description": "The attribute values this version overrides on the base entity, keyed by attribute name.\n\nOnly attributes currently declaring `overridable_attribute` are applied. Metadata fields\n(anything underscore-prefixed), readonly attributes, hidden attributes, computed attributes,\nattributes of a type no variant may override and non-overridable attributes present here are\nnot applied rather than rejected, and every one but the metadata is named in the write's\n`warnings`, so a client working from a slightly stale schema snapshot still succeeds instead\nof failing on fields it could not have known to drop, and still learns which of them did not\nland. Metadata is never named, since a client echoing back a payload it read carries it in\nevery body. An attribute's `render_condition` says when to show it and has no\nbearing on whether a variant may override it.\n\nNot applied means *not updated*, never *removed*: a value already stored for an attribute that\nis not currently overridable is preserved, so removing and restoring the flag deactivates and\nthen reactivates the same override. An append seeds the attributes the variant may not\noverride from the version in effect at its own `valid_from`, so its stored values are not a\npure function of the body that wrote it; a variant's first version, and an append dated before\nthe variant's earliest version, inherit nothing.\n\nA composite price's `price_components` is an ordinary overridable relation attribute. A\ncomposite variant's override references different component *entities*, never a variant or a\nversion of one, and holds whatever a relation attribute ordinarily holds — this API defines no\nreference shape of its own.\n",
         "example": {
           "unit_amount": 2499,
           "unit_amount_decimal": "24.99"
@@ -7533,7 +7601,7 @@
               },
               {
                 "type": "object",
-                "description": "A variant write pins a `select` value the condition's declared `options` do not\ncontain.\n\nOne of the two codes that report the submitted value back — `PIN_FORMAT_INVALID` is\nthe other. A resolve context value is never quoted back.\n",
+                "description": "A variant write pins a `select` value the condition's `options` do not admit — either\na value a declared vocabulary does not contain, or any value at all where the\ncondition declares no vocabulary for it to be in.\n\nOne of the two codes that report the submitted value back — `PIN_FORMAT_INVALID` is\nthe other. A resolve context value is never quoted back.\n",
                 "required": [
                   "code",
                   "details"
@@ -7564,7 +7632,7 @@
                       },
                       "options": {
                         "type": "array",
-                        "description": "The vocabulary *as enforced* — after the entries this deploy cannot read have\nbeen dropped, so a tenant whose `options` holds a title-only entry is told\nwhat the API actually checked against rather than what they believe they\nwrote.\n",
+                        "description": "The vocabulary *as enforced* — after the entries this deploy cannot read have\nbeen dropped, so a tenant whose `options` holds a title-only entry is told\nwhat the API actually checked against rather than what they believe they\nwrote. Empty when the condition declares no vocabulary at all, which is\nitself the reason the pin was refused; the message says which of the two\n(unconfigured, or unreadable) applies.\n",
                         "items": {
                           "type": "string"
                         },

package/dist/access-token-ADVHFJ63.js

@@ -0,0 +1,7 @@
+import "./chunk-YPSWSI3M.js";
+
+// src/docs/access-token.json
+var access_token_default = '# Access Token API\n\n- **Base URL:** `https://access-token.sls.epilot.io`\n- **Full API Docs:** [https://docs.epilot.io/api/access-token](https://docs.epilot.io/api/access-token)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.accessToken.createAccessToken(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/access-token\'\n\nconst accessTokenClient = getClient()\nauthorize(accessTokenClient, () => \'<token>\')\nconst { data } = await accessTokenClient.createAccessToken(...)\n```\n\n## Operations\n\n**Access Tokens**\n- [`createAccessToken`](#createaccesstoken)\n- [`listAccessTokens`](#listaccesstokens)\n- [`revokeAccessToken`](#revokeaccesstoken)\n\n**Public**\n- [`getAccessTokenJwks`](#getaccesstokenjwks)\n- [`getAccessTokenOIDC`](#getaccesstokenoidc)\n- [`getPublicTokenJwks`](#getpublictokenjwks)\n- [`getPortalPreviewTokenJwks`](#getportalpreviewtokenjwks)\n- [`getPublicTokenOIDC`](#getpublictokenoidc)\n- [`getPortalPreviewTokenOIDC`](#getportalpreviewtokenoidc)\n- [`getContactIdentificationTokenJwks`](#getcontactidentificationtokenjwks)\n- [`getContactIdentificationTokenOIDC`](#getcontactidentificationtokenoidc)\n\n**Schemas**\n- [`AccessToken`](#accesstoken)\n- [`AccessTokenId`](#accesstokenid)\n- [`AccessTokenName`](#accesstokenname)\n- [`AccessTokenType`](#accesstokentype)\n- [`AccessTokenJourneyId`](#accesstokenjourneyid)\n- [`PortalId`](#portalid)\n- [`PortalUserId`](#portaluserid)\n- [`ContactId`](#contactid)\n- [`AllowedOperations`](#allowedoperations)\n- [`TokenParameters`](#tokenparameters)\n- [`ExpiresIn`](#expiresin)\n- [`ReadOnly`](#readonly)\n- [`Anonymize`](#anonymize)\n- [`AccessTokenParameters`](#accesstokenparameters)\n- [`JourneyTokenParameters`](#journeytokenparameters)\n- [`PortalTokenParameters`](#portaltokenparameters)\n- [`AssumeTokenParameters`](#assumetokenparameters)\n- [`AppTokenParameters`](#apptokenparameters)\n- [`PortalPreviewTokenParameters`](#portalpreviewtokenparameters)\n- [`ContactIdentificationTokenParameters`](#contactidentificationtokenparameters)\n- [`AccessTokenItem`](#accesstokenitem)\n- [`RoleId`](#roleid)\n- [`Assignments`](#assignments)\n\n### `createAccessToken`\n\n**Access Token type: `API`** (default if not specified):\n\n`POST /v1/access-tokens`\n\n```ts\nconst { data } = await client.createAccessToken(\n  null,\n  {\n    name: \'Postman Access Token\',\n    token_type: \'api\',\n    assignments: [\'123:owner\'],\n    expires_in: 3600,\n    read_only: true,\n    anonymize: true\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp...",\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `listAccessTokens`\n\nLists all Access Tokens for current user (by default excludes system generated tokens)\n\n`GET /v1/access-tokens`\n\n```ts\nconst { data } = await client.listAccessTokens({\n  token_type: [\'...\'],\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n[\n  {\n    "id": "api_5ZugdRXasLfWBypHi93Fk",\n    "created_at": "1970-01-01T00:00:00.000Z",\n    "name": "Postman Access Token",\n    "token_type": "api",\n    "journey_id": "string",\n    "portal_id": "string",\n    "portal_user_id": "string",\n    "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n    "allowed_operations": ["getContact", "getContracts"],\n    "assignments": ["123:owner"],\n    "read_only": true,\n    "anonymize": true,\n    "last_used": "2026-02-24",\n    "expires_at": "2026-03-01T12:00:00.000Z"\n  }\n]\n```\n\n</details>\n\n---\n\n### `revokeAccessToken`\n\nRevokes an Access Token so it can\'t be used anymore.\n\n`DELETE /v1/access-tokens/{id}`\n\n```ts\nconst { data } = await client.revokeAccessToken({\n  id: \'123e4567-e89b-12d3-a456-426614174000\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenJwks`\n\nGet jwks public key set to verify access tokens generated by this API\n\n`GET /v1/access-tokens/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getAccessTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenOIDC`\n\nOpenID Connect configuration for Access Token API as identity provider\n\n`GET /v1/access-tokens/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getAccessTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenJwks`\n\nGet jwks public key set to verify public tokens generated by this API\n\n`GET /v1/access-tokens/public/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPublicTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenJwks`\n\nGet jwks public key set to verify portal preview tokens generated by this API\n\n`GET /v1/access-tokens/portal-preview/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a public identity provider\n\n`GET /v1/access-tokens/public/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPublicTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a portal preview identity provider\n\n`GET /v1/access-tokens/portal-preview/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenJwks`\n\nGet jwks public key set to verify contact identification tokens generated by this API\n\n`GET /v1/access-tokens/contact-identification/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenOIDC`\n\nOpenID Connect configuration for Access Token API as a contact identification identity provider\n\n`GET /v1/access-tokens/contact-identification/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `AccessToken`\n\nA JWT Access Token\n\n```ts\ntype AccessToken = string\n```\n\n### `AccessTokenId`\n\n```ts\ntype AccessTokenId = string\n```\n\n### `AccessTokenName`\n\nHuman readable name for access token\n\n```ts\ntype AccessTokenName = string\n```\n\n### `AccessTokenType`\n\nAccess token type\n\n```ts\ntype AccessTokenType = "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n```\n\n### `AccessTokenJourneyId`\n\nJourney ID for access token type "journey"\n\n```ts\ntype AccessTokenJourneyId = string\n```\n\n### `PortalId`\n\nPortal ID for access token type "portal"\n\n```ts\ntype PortalId = string\n```\n\n### `PortalUserId`\n\nPortal User ID for access token type "portal_preview"\n\n```ts\ntype PortalUserId = string\n```\n\n### `ContactId`\n\nContact entity ID for access token type "contact_identification"\n\n```ts\ntype ContactId = string\n```\n\n### `AllowedOperations`\n\nopenapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer\'s own allowlist later cannot retroactively widen a token that is already in circulation.\n\n```ts\ntype AllowedOperations = string[]\n```\n\n### `TokenParameters`\n\n```ts\ntype TokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n} | {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `ExpiresIn`\n\n```ts\ntype ExpiresIn = number | string\n```\n\n### `ReadOnly`\n\nWhen true, the issued token may only perform read-only actions. Any action guarded by permissions that is not read-only (i.e. not a view/export/download action) is denied, regardless of the roles the token carries.\n\n```ts\ntype ReadOnly = boolean\n```\n\n### `Anonymize`\n\nForces PII anonymization on all entity data returned to this token. Cannot be disabled by the token bearer. See entity-api anonymized responses.\n\n```ts\ntype Anonymize = boolean\n```\n\n### `AccessTokenParameters`\n\n```ts\ntype AccessTokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `JourneyTokenParameters`\n\n```ts\ntype JourneyTokenParameters = {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n}\n```\n\n### `PortalTokenParameters`\n\n```ts\ntype PortalTokenParameters = {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n}\n```\n\n### `AssumeTokenParameters`\n\n```ts\ntype AssumeTokenParameters = {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `AppTokenParameters`\n\n```ts\ntype AppTokenParameters = {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `PortalPreviewTokenParameters`\n\n```ts\ntype PortalPreviewTokenParameters = {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n}\n```\n\n### `ContactIdentificationTokenParameters`\n\nA token that acts as one contact, issued after that contact was identified by a portal\'s registration identifiers rather than by logging in. Distinct from portal_preview, which impersonates an existing portal user for a 360 operator: this kind belongs to no user, is minted for an unauthenticated cal\n\n```ts\ntype ContactIdentificationTokenParameters = {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `AccessTokenItem`\n\n```ts\ntype AccessTokenItem = {\n  id: string\n  created_at: string // date-time\n  name: string\n  token_type?: "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n  journey_id?: string\n  portal_id?: string\n  portal_user_id?: string\n  contact_id?: string\n  allowed_operations?: string[]\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n  last_used?: string // date\n  expires_at?: string // date-time\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n';
+export {
+  access_token_default as default
+};

package/dist/access-token-CQMYWZIG.cjs

@@ -0,0 +1,7 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});require('./chunk-NJK5F5TF.cjs');
+
+// src/docs/access-token.json
+var access_token_default = '# Access Token API\n\n- **Base URL:** `https://access-token.sls.epilot.io`\n- **Full API Docs:** [https://docs.epilot.io/api/access-token](https://docs.epilot.io/api/access-token)\n\n## Usage\n\n```ts\nimport { epilot } from \'@epilot/sdk\'\n\nepilot.authorize(() => \'<token>\')\nconst { data } = await epilot.accessToken.createAccessToken(...)\n```\n\n### Tree-shakeable import\n\n```ts\nimport { getClient, authorize } from \'@epilot/sdk/access-token\'\n\nconst accessTokenClient = getClient()\nauthorize(accessTokenClient, () => \'<token>\')\nconst { data } = await accessTokenClient.createAccessToken(...)\n```\n\n## Operations\n\n**Access Tokens**\n- [`createAccessToken`](#createaccesstoken)\n- [`listAccessTokens`](#listaccesstokens)\n- [`revokeAccessToken`](#revokeaccesstoken)\n\n**Public**\n- [`getAccessTokenJwks`](#getaccesstokenjwks)\n- [`getAccessTokenOIDC`](#getaccesstokenoidc)\n- [`getPublicTokenJwks`](#getpublictokenjwks)\n- [`getPortalPreviewTokenJwks`](#getportalpreviewtokenjwks)\n- [`getPublicTokenOIDC`](#getpublictokenoidc)\n- [`getPortalPreviewTokenOIDC`](#getportalpreviewtokenoidc)\n- [`getContactIdentificationTokenJwks`](#getcontactidentificationtokenjwks)\n- [`getContactIdentificationTokenOIDC`](#getcontactidentificationtokenoidc)\n\n**Schemas**\n- [`AccessToken`](#accesstoken)\n- [`AccessTokenId`](#accesstokenid)\n- [`AccessTokenName`](#accesstokenname)\n- [`AccessTokenType`](#accesstokentype)\n- [`AccessTokenJourneyId`](#accesstokenjourneyid)\n- [`PortalId`](#portalid)\n- [`PortalUserId`](#portaluserid)\n- [`ContactId`](#contactid)\n- [`AllowedOperations`](#allowedoperations)\n- [`TokenParameters`](#tokenparameters)\n- [`ExpiresIn`](#expiresin)\n- [`ReadOnly`](#readonly)\n- [`Anonymize`](#anonymize)\n- [`AccessTokenParameters`](#accesstokenparameters)\n- [`JourneyTokenParameters`](#journeytokenparameters)\n- [`PortalTokenParameters`](#portaltokenparameters)\n- [`AssumeTokenParameters`](#assumetokenparameters)\n- [`AppTokenParameters`](#apptokenparameters)\n- [`PortalPreviewTokenParameters`](#portalpreviewtokenparameters)\n- [`ContactIdentificationTokenParameters`](#contactidentificationtokenparameters)\n- [`AccessTokenItem`](#accesstokenitem)\n- [`RoleId`](#roleid)\n- [`Assignments`](#assignments)\n\n### `createAccessToken`\n\n**Access Token type: `API`** (default if not specified):\n\n`POST /v1/access-tokens`\n\n```ts\nconst { data } = await client.createAccessToken(\n  null,\n  {\n    name: \'Postman Access Token\',\n    token_type: \'api\',\n    assignments: [\'123:owner\'],\n    expires_in: 3600,\n    read_only: true,\n    anonymize: true\n  },\n)\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp...",\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `listAccessTokens`\n\nLists all Access Tokens for current user (by default excludes system generated tokens)\n\n`GET /v1/access-tokens`\n\n```ts\nconst { data } = await client.listAccessTokens({\n  token_type: [\'...\'],\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n[\n  {\n    "id": "api_5ZugdRXasLfWBypHi93Fk",\n    "created_at": "1970-01-01T00:00:00.000Z",\n    "name": "Postman Access Token",\n    "token_type": "api",\n    "journey_id": "string",\n    "portal_id": "string",\n    "portal_user_id": "string",\n    "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n    "allowed_operations": ["getContact", "getContracts"],\n    "assignments": ["123:owner"],\n    "read_only": true,\n    "anonymize": true,\n    "last_used": "2026-02-24",\n    "expires_at": "2026-03-01T12:00:00.000Z"\n  }\n]\n```\n\n</details>\n\n---\n\n### `revokeAccessToken`\n\nRevokes an Access Token so it can\'t be used anymore.\n\n`DELETE /v1/access-tokens/{id}`\n\n```ts\nconst { data } = await client.revokeAccessToken({\n  id: \'123e4567-e89b-12d3-a456-426614174000\',\n})\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "id": "api_5ZugdRXasLfWBypHi93Fk",\n  "created_at": "1970-01-01T00:00:00.000Z",\n  "name": "Postman Access Token",\n  "token_type": "api",\n  "journey_id": "string",\n  "portal_id": "string",\n  "portal_user_id": "string",\n  "contact_id": "5da0a718-c822-403d-9f5d-20d4584e0528",\n  "allowed_operations": ["getContact", "getContracts"],\n  "assignments": ["123:owner"],\n  "read_only": true,\n  "anonymize": true,\n  "last_used": "2026-02-24",\n  "expires_at": "2026-03-01T12:00:00.000Z"\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenJwks`\n\nGet jwks public key set to verify access tokens generated by this API\n\n`GET /v1/access-tokens/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getAccessTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getAccessTokenOIDC`\n\nOpenID Connect configuration for Access Token API as identity provider\n\n`GET /v1/access-tokens/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getAccessTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenJwks`\n\nGet jwks public key set to verify public tokens generated by this API\n\n`GET /v1/access-tokens/public/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPublicTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenJwks`\n\nGet jwks public key set to verify portal preview tokens generated by this API\n\n`GET /v1/access-tokens/portal-preview/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getPublicTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a public identity provider\n\n`GET /v1/access-tokens/public/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPublicTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getPortalPreviewTokenOIDC`\n\nOpenID Connect configuration for Access Token API a a portal preview identity provider\n\n`GET /v1/access-tokens/portal-preview/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getPortalPreviewTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/portal-preview/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenJwks`\n\nGet jwks public key set to verify contact identification tokens generated by this API\n\n`GET /v1/access-tokens/contact-identification/.well-known/jwks.json`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenJwks()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "keys": [\n    {\n      "alg": "RS256",\n      "e": "AQAB",\n      "kid": "tXWU5mPMbRPczpbQwi6vbhLF4GgF3wlMDSyqo7pfeiw=",\n      "kty": "RSA",\n      "n": "h_QDoCjZ8W_trtYXaP7_S22wf5r5Wd9XBLED78oT44bJjQXn8ddcFV8Hik65_4IYXVX_hTTU4zpxe3H8vx2j7-Zz3O59mYMp5S0MzODNEdf5Y_2o19eis0brmAJniixsNlQ9LlYkdrVamrgaxHu3ZpP_99zkfFybYeuYoQNzb3PyrT8xVnz_USs_nlFMHpGUxvvz7gfKPqxcLvgLJr4cwI9yzaSY9CD4qW181QVcnL_WzpQ8xx6AuhhHZQ1l_3GG4InTk8ahE7U2ZHVu8RrX6d01pMgc3piEcet9RgFLnhbTg3YIiKGoAbN42wJn_x3lgIAC42T9mbmTsHyUdS6nUQ",\n      "use": "sig"\n    }\n  ]\n}\n```\n\n</details>\n\n---\n\n### `getContactIdentificationTokenOIDC`\n\nOpenID Connect configuration for Access Token API as a contact identification identity provider\n\n`GET /v1/access-tokens/contact-identification/.well-known/openid-configuration`\n\n```ts\nconst { data } = await client.getContactIdentificationTokenOIDC()\n```\n\n<details>\n<summary>Response</summary>\n\n```json\n{\n  "issuer": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification",\n  "jwks_uri": "https://access-token.sls.epilot.io/v1/access-tokens/contact-identification/.well-known/jwks.json"\n}\n```\n\n</details>\n\n---\n\n## Schemas\n\n### `AccessToken`\n\nA JWT Access Token\n\n```ts\ntype AccessToken = string\n```\n\n### `AccessTokenId`\n\n```ts\ntype AccessTokenId = string\n```\n\n### `AccessTokenName`\n\nHuman readable name for access token\n\n```ts\ntype AccessTokenName = string\n```\n\n### `AccessTokenType`\n\nAccess token type\n\n```ts\ntype AccessTokenType = "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n```\n\n### `AccessTokenJourneyId`\n\nJourney ID for access token type "journey"\n\n```ts\ntype AccessTokenJourneyId = string\n```\n\n### `PortalId`\n\nPortal ID for access token type "portal"\n\n```ts\ntype PortalId = string\n```\n\n### `PortalUserId`\n\nPortal User ID for access token type "portal_preview"\n\n```ts\ntype PortalUserId = string\n```\n\n### `ContactId`\n\nContact entity ID for access token type "contact_identification"\n\n```ts\ntype ContactId = string\n```\n\n### `AllowedOperations`\n\nopenapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer\'s own allowlist later cannot retroactively widen a token that is already in circulation.\n\n```ts\ntype AllowedOperations = string[]\n```\n\n### `TokenParameters`\n\n```ts\ntype TokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n} | {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n} | {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n} | {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `ExpiresIn`\n\n```ts\ntype ExpiresIn = number | string\n```\n\n### `ReadOnly`\n\nWhen true, the issued token may only perform read-only actions. Any action guarded by permissions that is not read-only (i.e. not a view/export/download action) is denied, regardless of the roles the token carries.\n\n```ts\ntype ReadOnly = boolean\n```\n\n### `Anonymize`\n\nForces PII anonymization on all entity data returned to this token. Cannot be disabled by the token bearer. See entity-api anonymized responses.\n\n```ts\ntype Anonymize = boolean\n```\n\n### `AccessTokenParameters`\n\n```ts\ntype AccessTokenParameters = {\n  name: string\n  token_type?: "api"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `JourneyTokenParameters`\n\n```ts\ntype JourneyTokenParameters = {\n  name: string\n  token_type?: "journey"\n  journey_id: string\n  expires_in?: number | string\n}\n```\n\n### `PortalTokenParameters`\n\n```ts\ntype PortalTokenParameters = {\n  name: string\n  token_type?: "portal"\n  portal_id: string\n  expires_in?: number | string\n}\n```\n\n### `AssumeTokenParameters`\n\n```ts\ntype AssumeTokenParameters = {\n  name: string\n  token_type?: "assume"\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `AppTokenParameters`\n\n```ts\ntype AppTokenParameters = {\n  name: string\n  token_type?: "app"\n  assignments?: string[]\n  expires_in?: number | string\n  read_only?: boolean\n  anonymize?: boolean\n}\n```\n\n### `PortalPreviewTokenParameters`\n\n```ts\ntype PortalPreviewTokenParameters = {\n  name: string\n  token_type?: "portal_preview"\n  portal_id: string\n  portal_user_id: string\n}\n```\n\n### `ContactIdentificationTokenParameters`\n\nA token that acts as one contact, issued after that contact was identified by a portal\'s registration identifiers rather than by logging in. Distinct from portal_preview, which impersonates an existing portal user for a 360 operator: this kind belongs to no user, is minted for an unauthenticated cal\n\n```ts\ntype ContactIdentificationTokenParameters = {\n  name: string\n  token_type?: "contact_identification"\n  portal_id: string\n  contact_id: string\n  surface_id: string\n  allowed_operations: string[]\n  expires_in: number\n  email?: string\n}\n```\n\n### `AccessTokenItem`\n\n```ts\ntype AccessTokenItem = {\n  id: string\n  created_at: string // date-time\n  name: string\n  token_type?: "api" | "journey" | "portal" | "assume" | "app" | "portal_preview" | "contact_identification"\n  journey_id?: string\n  portal_id?: string\n  portal_user_id?: string\n  contact_id?: string\n  allowed_operations?: string[]\n  assignments?: string[]\n  read_only?: boolean\n  anonymize?: boolean\n  last_used?: string // date\n  expires_at?: string // date-time\n}\n```\n\n### `RoleId`\n\nFormat: `<organization_id>`:`<slug>`\n\n```ts\ntype RoleId = string\n```\n\n### `Assignments`\n\nList of role ids attached to an user\n\n```ts\ntype Assignments = string[]\n```\n';
+
+
+exports.default = access_token_default;

package/dist/{access-token.d-OiCg1gnT.d.cts → access-token.d-Yy-yrft_.d.cts}

@@ -44,7 +44,6 @@ declare namespace Components {
              * 5da0a718-c822-403d-9f5d-20d4584e0528
              */
             ContactId;
-            origin?: /* Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is. */ PortalOrigin;
             allowed_operations?: /**
              * openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
              * example:
@@ -218,7 +217,6 @@ declare namespace Components {
              * website-journeys
              */
             surface_id: string;
-            origin?: /* Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is. */ PortalOrigin;
             allowed_operations: /**
              * openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
              * example:
@@ -255,10 +253,6 @@ declare namespace Components {
          * Portal ID for access token type "portal"
          */
         export type PortalId = string;
-        /**
-         * Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is.
-         */
-        export type PortalOrigin = "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL";
         export interface PortalPreviewTokenParameters {
             name: /**
              * Human readable name for access token
@@ -338,7 +332,6 @@ declare namespace Paths {
                  * 5da0a718-c822-403d-9f5d-20d4584e0528
                  */
                 Components.Schemas.ContactId;
-                origin?: /* Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is. */ Components.Schemas.PortalOrigin;
                 allowed_operations?: /**
                  * openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
                  * example:
@@ -956,7 +949,6 @@ type ContactIdentificationTokenParameters = Components.Schemas.ContactIdentifica
 type ExpiresIn = Components.Schemas.ExpiresIn;
 type JourneyTokenParameters = Components.Schemas.JourneyTokenParameters;
 type PortalId = Components.Schemas.PortalId;
-type PortalOrigin = Components.Schemas.PortalOrigin;
 type PortalPreviewTokenParameters = Components.Schemas.PortalPreviewTokenParameters;
 type PortalTokenParameters = Components.Schemas.PortalTokenParameters;
 type PortalUserId = Components.Schemas.PortalUserId;
@@ -964,4 +956,4 @@ type ReadOnly = Components.Schemas.ReadOnly;
 type RoleId = Components.Schemas.RoleId;
 type TokenParameters = Components.Schemas.TokenParameters;
 
-export { type AccessToken as A, type Client as C, type ExpiresIn as E, type JourneyTokenParameters as J, type OperationMethods as O, Paths as P, type ReadOnly as R, type TokenParameters as T, Components as a, type PathsDictionary as b, type AccessTokenId as c, type AccessTokenItem as d, type AccessTokenJourneyId as e, type AccessTokenName as f, type AccessTokenParameters as g, type AccessTokenType as h, type AllowedOperations as i, type Anonymize as j, type AppTokenParameters as k, type Assignments as l, type AssumeTokenParameters as m, type ContactId as n, type ContactIdentificationTokenParameters as o, type PortalId as p, type PortalOrigin as q, type PortalPreviewTokenParameters as r, type PortalTokenParameters as s, type PortalUserId as t, type RoleId as u };
+export { type AccessToken as A, type Client as C, type ExpiresIn as E, type JourneyTokenParameters as J, type OperationMethods as O, Paths as P, type ReadOnly as R, type TokenParameters as T, Components as a, type PathsDictionary as b, type AccessTokenId as c, type AccessTokenItem as d, type AccessTokenJourneyId as e, type AccessTokenName as f, type AccessTokenParameters as g, type AccessTokenType as h, type AllowedOperations as i, type Anonymize as j, type AppTokenParameters as k, type Assignments as l, type AssumeTokenParameters as m, type ContactId as n, type ContactIdentificationTokenParameters as o, type PortalId as p, type PortalPreviewTokenParameters as q, type PortalTokenParameters as r, type PortalUserId as s, type RoleId as t };

package/dist/{access-token.d-OiCg1gnT.d.ts → access-token.d-Yy-yrft_.d.ts}

@@ -44,7 +44,6 @@ declare namespace Components {
              * 5da0a718-c822-403d-9f5d-20d4584e0528
              */
             ContactId;
-            origin?: /* Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is. */ PortalOrigin;
             allowed_operations?: /**
              * openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
              * example:
@@ -218,7 +217,6 @@ declare namespace Components {
              * website-journeys
              */
             surface_id: string;
-            origin?: /* Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is. */ PortalOrigin;
             allowed_operations: /**
              * openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
              * example:
@@ -255,10 +253,6 @@ declare namespace Components {
          * Portal ID for access token type "portal"
          */
         export type PortalId = string;
-        /**
-         * Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is.
-         */
-        export type PortalOrigin = "END_CUSTOMER_PORTAL" | "INSTALLER_PORTAL";
         export interface PortalPreviewTokenParameters {
             name: /**
              * Human readable name for access token
@@ -338,7 +332,6 @@ declare namespace Paths {
                  * 5da0a718-c822-403d-9f5d-20d4584e0528
                  */
                 Components.Schemas.ContactId;
-                origin?: /* Portal origin the token assumes, so the bearer is permission-masked the same way the corresponding portal role is. */ Components.Schemas.PortalOrigin;
                 allowed_operations?: /**
                  * openapi operationIds the token may call. Enforced by the API that consumes the token, which must additionally deny any operation not on this list. Baked into the token at issue time so widening the consumer's own allowlist later cannot retroactively widen a token that is already in circulation.
                  * example:
@@ -956,7 +949,6 @@ type ContactIdentificationTokenParameters = Components.Schemas.ContactIdentifica
 type ExpiresIn = Components.Schemas.ExpiresIn;
 type JourneyTokenParameters = Components.Schemas.JourneyTokenParameters;
 type PortalId = Components.Schemas.PortalId;
-type PortalOrigin = Components.Schemas.PortalOrigin;
 type PortalPreviewTokenParameters = Components.Schemas.PortalPreviewTokenParameters;
 type PortalTokenParameters = Components.Schemas.PortalTokenParameters;
 type PortalUserId = Components.Schemas.PortalUserId;
@@ -964,4 +956,4 @@ type ReadOnly = Components.Schemas.ReadOnly;
 type RoleId = Components.Schemas.RoleId;
 type TokenParameters = Components.Schemas.TokenParameters;
 
-export { type AccessToken as A, type Client as C, type ExpiresIn as E, type JourneyTokenParameters as J, type OperationMethods as O, Paths as P, type ReadOnly as R, type TokenParameters as T, Components as a, type PathsDictionary as b, type AccessTokenId as c, type AccessTokenItem as d, type AccessTokenJourneyId as e, type AccessTokenName as f, type AccessTokenParameters as g, type AccessTokenType as h, type AllowedOperations as i, type Anonymize as j, type AppTokenParameters as k, type Assignments as l, type AssumeTokenParameters as m, type ContactId as n, type ContactIdentificationTokenParameters as o, type PortalId as p, type PortalOrigin as q, type PortalPreviewTokenParameters as r, type PortalTokenParameters as s, type PortalUserId as t, type RoleId as u };
+export { type AccessToken as A, type Client as C, type ExpiresIn as E, type JourneyTokenParameters as J, type OperationMethods as O, Paths as P, type ReadOnly as R, type TokenParameters as T, Components as a, type PathsDictionary as b, type AccessTokenId as c, type AccessTokenItem as d, type AccessTokenJourneyId as e, type AccessTokenName as f, type AccessTokenParameters as g, type AccessTokenType as h, type AllowedOperations as i, type Anonymize as j, type AppTokenParameters as k, type Assignments as l, type AssumeTokenParameters as m, type ContactId as n, type ContactIdentificationTokenParameters as o, type PortalId as p, type PortalPreviewTokenParameters as q, type PortalTokenParameters as r, type PortalUserId as s, type RoleId as t };

package/dist/apis/access-token.cjs

@@ -6,25 +6,25 @@ var _chunkZMBA3WV4cjs = require('../chunk-ZMBA3WV4.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkOZHARSW5cjs = require('../chunk-OZHARSW5.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/access-token.ts
 var loadDefinition = () => {
   const mod = _chunkZMBA3WV4cjs.require_access_token_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkOZHARSW5cjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "accessToken" });
+    _instance = _chunkOZHARSW5cjs.createApiClient.call(void 0, { definition: def, apiName: "accessToken" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkOZHARSW5cjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "accessToken" }),
+  createClient: () => _chunkOZHARSW5cjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "accessToken" }),
   apiName: "accessToken"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var accessToken = _handle;
 
 
 
-exports.accessToken = accessToken; exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient;
+exports.accessToken = accessToken; exports.authorize = _chunkOZHARSW5cjs.authorize; exports.createClient = createClient; exports.getClient = getClient;

package/dist/apis/access-token.d.cts

@@ -1,7 +1,7 @@
 import { A as ApiHandle } from '../types-ChU9Acbv.cjs';
 export { T as TokenArg, a as authorize } from '../types-ChU9Acbv.cjs';
-import { C as Client } from '../access-token.d-OiCg1gnT.cjs';
-export { A as AccessToken, c as AccessTokenId, d as AccessTokenItem, e as AccessTokenJourneyId, f as AccessTokenName, g as AccessTokenParameters, h as AccessTokenType, i as AllowedOperations, j as Anonymize, k as AppTokenParameters, l as Assignments, m as AssumeTokenParameters, a as Components, n as ContactId, o as ContactIdentificationTokenParameters, E as ExpiresIn, J as JourneyTokenParameters, O as OperationMethods, P as Paths, b as PathsDictionary, p as PortalId, q as PortalOrigin, r as PortalPreviewTokenParameters, s as PortalTokenParameters, t as PortalUserId, R as ReadOnly, u as RoleId, T as TokenParameters } from '../access-token.d-OiCg1gnT.cjs';
+import { C as Client } from '../access-token.d-Yy-yrft_.cjs';
+export { A as AccessToken, c as AccessTokenId, d as AccessTokenItem, e as AccessTokenJourneyId, f as AccessTokenName, g as AccessTokenParameters, h as AccessTokenType, i as AllowedOperations, j as Anonymize, k as AppTokenParameters, l as Assignments, m as AssumeTokenParameters, a as Components, n as ContactId, o as ContactIdentificationTokenParameters, E as ExpiresIn, J as JourneyTokenParameters, O as OperationMethods, P as Paths, b as PathsDictionary, p as PortalId, q as PortalPreviewTokenParameters, r as PortalTokenParameters, s as PortalUserId, R as ReadOnly, t as RoleId, T as TokenParameters } from '../access-token.d-Yy-yrft_.cjs';
 export { OpenAPIClient } from 'openapi-client-axios';
 import 'axios';
 

package/dist/apis/access-token.d.ts

@@ -1,7 +1,7 @@
 import { A as ApiHandle } from '../types-ChU9Acbv.js';
 export { T as TokenArg, a as authorize } from '../types-ChU9Acbv.js';
-import { C as Client } from '../access-token.d-OiCg1gnT.js';
-export { A as AccessToken, c as AccessTokenId, d as AccessTokenItem, e as AccessTokenJourneyId, f as AccessTokenName, g as AccessTokenParameters, h as AccessTokenType, i as AllowedOperations, j as Anonymize, k as AppTokenParameters, l as Assignments, m as AssumeTokenParameters, a as Components, n as ContactId, o as ContactIdentificationTokenParameters, E as ExpiresIn, J as JourneyTokenParameters, O as OperationMethods, P as Paths, b as PathsDictionary, p as PortalId, q as PortalOrigin, r as PortalPreviewTokenParameters, s as PortalTokenParameters, t as PortalUserId, R as ReadOnly, u as RoleId, T as TokenParameters } from '../access-token.d-OiCg1gnT.js';
+import { C as Client } from '../access-token.d-Yy-yrft_.js';
+export { A as AccessToken, c as AccessTokenId, d as AccessTokenItem, e as AccessTokenJourneyId, f as AccessTokenName, g as AccessTokenParameters, h as AccessTokenType, i as AllowedOperations, j as Anonymize, k as AppTokenParameters, l as Assignments, m as AssumeTokenParameters, a as Components, n as ContactId, o as ContactIdentificationTokenParameters, E as ExpiresIn, J as JourneyTokenParameters, O as OperationMethods, P as Paths, b as PathsDictionary, p as PortalId, q as PortalPreviewTokenParameters, r as PortalTokenParameters, s as PortalUserId, R as ReadOnly, t as RoleId, T as TokenParameters } from '../access-token.d-Yy-yrft_.js';
 export { OpenAPIClient } from 'openapi-client-axios';
 import 'axios';
 

package/dist/apis/access-token.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-HQJ5AG4I.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/access-token.ts

package/dist/apis/address-suggestions.cjs

@@ -6,25 +6,25 @@ var _chunkLKRBFBFNcjs = require('../chunk-LKRBFBFN.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkOZHARSW5cjs = require('../chunk-OZHARSW5.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/address-suggestions.ts
 var loadDefinition = () => {
   const mod = _chunkLKRBFBFNcjs.require_address_suggestions_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkOZHARSW5cjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "addressSuggestions" });
+    _instance = _chunkOZHARSW5cjs.createApiClient.call(void 0, { definition: def, apiName: "addressSuggestions" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkOZHARSW5cjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "addressSuggestions" }),
+  createClient: () => _chunkOZHARSW5cjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "addressSuggestions" }),
   apiName: "addressSuggestions"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var addressSuggestions = _handle;
 
 
 
-exports.addressSuggestions = addressSuggestions; exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient;
+exports.addressSuggestions = addressSuggestions; exports.authorize = _chunkOZHARSW5cjs.authorize; exports.createClient = createClient; exports.getClient = getClient;

package/dist/apis/address-suggestions.js

@@ -6,7 +6,7 @@ import {
   createApiClient,
   createApiHandle,
   expand
-} from "../chunk-YFFICVOA.js";
+} from "../chunk-HQJ5AG4I.js";
 import "../chunk-YPSWSI3M.js";
 
 // src/apis/address-suggestions.ts

package/dist/apis/address.cjs

@@ -6,25 +6,25 @@ var _chunkT67ZXTVGcjs = require('../chunk-T67ZXTVG.cjs');
 
 
 
-var _chunkFXIH3QBVcjs = require('../chunk-FXIH3QBV.cjs');
+var _chunkOZHARSW5cjs = require('../chunk-OZHARSW5.cjs');
 require('../chunk-NJK5F5TF.cjs');
 
 // src/apis/address.ts
 var loadDefinition = () => {
   const mod = _chunkT67ZXTVGcjs.require_address_runtime.call(void 0, );
-  return _chunkFXIH3QBVcjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
+  return _chunkOZHARSW5cjs.expand.call(void 0, _nullishCoalesce(mod.default, () => ( mod)));
 };
 var _instance = null;
 var resolve = () => {
   if (!_instance) {
     const def = loadDefinition();
-    _instance = _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: def, apiName: "address" });
+    _instance = _chunkOZHARSW5cjs.createApiClient.call(void 0, { definition: def, apiName: "address" });
   }
   return _instance;
 };
-var _handle = _chunkFXIH3QBVcjs.createApiHandle.call(void 0, {
+var _handle = _chunkOZHARSW5cjs.createApiHandle.call(void 0, {
   resolveClient: resolve,
-  createClient: () => _chunkFXIH3QBVcjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "address" }),
+  createClient: () => _chunkOZHARSW5cjs.createApiClient.call(void 0, { definition: loadDefinition(), apiName: "address" }),
   apiName: "address"
 });
 var getClient = _handle.getClient;
@@ -35,4 +35,4 @@ var address = _handle;
 
 
 
-exports.address = address; exports.authorize = _chunkFXIH3QBVcjs.authorize; exports.createClient = createClient; exports.getClient = getClient;
+exports.address = address; exports.authorize = _chunkOZHARSW5cjs.authorize; exports.createClient = createClient; exports.getClient = getClient;