@flintpay/node 5.0.0 → 5.1.0

package/resources/specification.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/specification.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/specification.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["getOpenAPISpec"]:r0});
 export class Client {

package/resources/subscriptionDeliveryMigrations.d.ts

@@ -25,7 +25,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type {
     CreateSubscriptionDeliveryMigrationRequestInput,

package/resources/subscriptionDeliveryMigrations.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/subscriptionDeliveryMigrations.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/subscriptionDeliveryMigrations.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createSubscriptionDeliveryMigration"]:r0,["getSubscriptionDeliveryMigration"]:r0,["listSubscriptionDeliveryMigrationFailures"]:r0,["listSubscriptionDeliveryMigrations"]:r0});
 export class Client {

package/resources/subscriptionOffers.d.ts

@@ -25,7 +25,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { CreateSubscriptionOfferRequestInput, Credentials } from '../declarations/types-9.js';
 export type { RequestOptions, ResponseMeta, ResponseWarning } from '../declarations/types-40.js';

package/resources/subscriptionOffers.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/subscriptionOffers.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/subscriptionOffers.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createSubscriptionOffer"]:r0,["deleteSubscriptionOffer"]:r0,["getSubscriptionOffer"]:r0,["listSubscriptionOffers"]:r0,["updateSubscriptionOffer"]:r0});
 export class Client {

package/resources/subscriptionPlans.d.ts

@@ -25,7 +25,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { CreateSubscriptionPlanRequestInput, Credentials } from '../declarations/types-9.js';
 export type { RequestOptions, ResponseMeta, ResponseWarning } from '../declarations/types-40.js';

package/resources/subscriptionPlans.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/subscriptionPlans.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/subscriptionPlans.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createSubscriptionPlan"]:r0,["deleteSubscriptionPlan"]:r0,["getSubscriptionPlan"]:r0,["listSubscriptionPlans"]:r0,["updateSubscriptionPlan"]:r0});
 export class Client {

package/resources/subscriptionPreviews.d.ts

@@ -20,7 +20,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type {
     SubscriptionPreviewsCreateInput,
@@ -199,10 +201,10 @@ export {
     makeDeliveryDistanceUnitPriceRequest,
     makeDeliveryEligibilityExpression,
     makeDeliveryFixedPricingStrategyRequest,
-    makeDeliveryMethodConfigurationPatchRequest,
-    makeDeliveryMethodOriginSelectorInputAllocatedOriginGroup
+    makeDeliveryMethodConfigurationPatchRequest
 } from '../declarations/types-65.js';
 export {
+    makeDeliveryMethodOriginSelectorInputAllocatedOriginGroup,
     makeDeliveryMethodOriginSelectorInputFixedLocation,
     makeDeliveryMethodOriginSelectorInputPickupLocationCollection,
     makeDeliveryMethodOriginSelectorRequest,

package/resources/subscriptionPreviews.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/subscriptionPreviews.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/subscriptionPreviews.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createSubscriptionPreview"]:r0});
 export class Client {

package/resources/subscriptions.d.ts

@@ -57,7 +57,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type {
     CancelSubscriptionRequestInput,
@@ -311,8 +313,9 @@ export {
 } from '../declarations/types-65.js';
 export { makeDeliverySelectionRecipientRequest, makeDimensions } from '../declarations/types-66.js';
 export { makeGiftCardCustomAmountBounds, makeGiftCardProductConfiguration } from '../declarations/types-67.js';
-export { makeMoneyValue, makeOrderCalculatedChargeTax } from '../declarations/types-68.js';
+export { makeMoneyValue } from '../declarations/types-68.js';
 export {
+    makeOrderCalculatedChargeTax,
     makeOrderCalculatedLineItemTax,
     makeOrderDeliveryDestinationAddressRequest,
     makeOrderLineItemTax,
@@ -332,10 +335,10 @@ export {
     makeSubscriptionBillingScheduleInputFlint,
     makeSubscriptionBillingScheduleRequest,
     makeSubscriptionBillingScheduleUpdateInputExternal,
-    makeSubscriptionBillingScheduleUpdateInputFlint,
-    makeSubscriptionBillingScheduleUpdateRequest
+    makeSubscriptionBillingScheduleUpdateInputFlint
 } from '../declarations/types-71.js';
 export {
+    makeSubscriptionBillingScheduleUpdateRequest,
     makeSubscriptionBillingStartInputImmediate,
     makeSubscriptionBillingStartInputImported,
     makeSubscriptionBillingStartInputScheduled,

package/resources/subscriptions.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/subscriptions.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/subscriptions.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["cancelSubscription"]:r0,["changeSubscriptionPaymentMethod"]:r0,["changeSubscriptionPlan"]:r0,["createSubscription"]:r0,["createSubscriptionAccessLink"]:r0,["createSubscriptionLineItem"]:r0,["createSubscriptionPaymentRetry"]:r0,["deleteSubscriptionLineItem"]:r0,["getSubscription"]:r0,["getSubscriptionPaymentRetry"]:r0,["listSubscriptionPaymentRetries"]:r0,["listSubscriptions"]:r0,["pauseSubscription"]:r0,["reactivateSubscription"]:r0,["renewSubscription"]:r0,["resumeSubscription"]:r0,["skipSubscriptionCycle"]:r0,["updateSubscription"]:r0,["updateSubscriptionBillingSchedule"]:r0,["updateSubscriptionLineItem"]:r0});
 export class Client {

package/resources/webhookDeliveries.d.ts

@@ -26,7 +26,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { CreateWebhookDeliveryRequestInput, Credentials, CreateWebhookDeliveryRequest } from '../declarations/types-9.js';
 export type {

package/resources/webhookDeliveries.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/webhookDeliveries.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/webhookDeliveries.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createWebhookDelivery"]:r0,["getWebhookDelivery"]:r0,["listWebhookDeliveryAttempts"]:r0,["resendWebhookDelivery"]:r0});
 export class Client {

package/resources/webhookEndpoints.d.ts

@@ -32,7 +32,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { CreateWebhookEndpointRequestInput, CreateWebhookTestEventRequestInput, Credentials } from '../declarations/types-9.js';
 export type { RequestOptions, ResponseMeta, ResponseWarning } from '../declarations/types-40.js';

package/resources/webhookEndpoints.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/webhookEndpoints.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/webhookEndpoints.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createWebhookEndpoint"]:r0,["createWebhookTestEvent"]:r0,["deleteWebhookEndpoint"]:r0,["getWebhookEndpoint"]:r0,["listWebhookEndpoints"]:r0,["rotateWebhookEndpointSecret"]:r0,["updateWebhookEndpoint"]:r0});
 export class Client {

package/resources/webhookEventTypes.d.ts

@@ -14,7 +14,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { _SdkWithoutIdempotency } from '../declarations/types-62.js';
 export type { RequestOptions, ResponseMeta, ResponseWarning, ResourceType } from '../declarations/types-40.js';

package/resources/webhookEventTypes.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/webhookEventTypes.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/webhookEventTypes.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["listWebhookEventTypes"]:r0});
 export class Client {

package/resources/webhookEvents.d.ts

@@ -23,7 +23,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { _SdkWithoutIdempotency } from '../declarations/types-62.js';
 export type { RequestOptions, ResourceType, ResponseMeta, ResponseWarning } from '../declarations/types-40.js';

package/resources/webhookEvents.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/webhookEvents.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/webhookEvents.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["getWebhookEvent"]:r0,["listWebhookDeliveries"]:r0,["listWebhookEvents"]:r0,["streamWebhookEvents"]:r0});
 export class Client {

package/resources/workloadIdentities.d.ts

@@ -23,7 +23,9 @@ export type {
     CredentialProvider,
     ServerSentEvent,
     SdkErrorCode,
-    SdkErrorDetails
+    SdkErrorDetails,
+    WorkloadIdentityOptions,
+    WorkloadIdentitySource
 } from '../runtime.js';
 export type { CreateWorkloadIdentityRequestInput, Credentials } from '../declarations/types-9.js';
 export type { RequestOptions, ResourceReference, ResourceType, ResponseMeta, ResponseWarning } from '../declarations/types-40.js';

package/resources/workloadIdentities.js

@@ -1,10 +1,13 @@
 import { responsePayload as _sdkPayload, sdkResponse as _sdkResponse, payloadPages as _sdkPayloadPages, sdkResponsePages as _sdkResponsePages } from '../response.js';
 import { requestInput as _sdkRequestInput } from '../request.js';
+import { configuredDefaultCredentials, configuredWorkloadIdentityCredentials } from '../runtime.js';
+export function defaultCredentials() { return configuredDefaultCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, "https://api.withflintpay.com" ?? undefined); }
+export function workloadIdentityCredentials(options) { return configuredWorkloadIdentityCredentials({"environment":{"apiKey":"FLINT_API_KEY","token":"FLINT_ACCESS_TOKEN"},"mode":"merchant","scheme":"BearerAuth","workloadIdentity":{"credentialParameter":"workload_identity_id","envPrefix":"FLINT","tokenPath":"/v1/oauth/token"}}, options, "https://api.withflintpay.com" ?? undefined); }
 import { runtimeFromPlan, modelFromCodec, isKnownCodec, verifyWebhookFromPlan } from '../runtime.js';
 export { SdkError, errors, Model, EventStream, ExactNumber, serialize, parseExact, redact } from '../runtime.js';
-import r0 from '../descriptors/resources/workloadIdentities.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import r0 from '../descriptors/resources/workloadIdentities.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 import { DescriptorSource } from '../descriptor-source.js';
-import settings from '../descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from '../descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 
 const _sdkDescriptors = new DescriptorSource(settings, {["createWorkloadIdentity"]:r0,["deleteWorkloadIdentity"]:r0,["getWorkloadIdentity"]:r0,["listWorkloadIdentities"]:r0,["updateWorkloadIdentity"]:r0});
 export class Client {

package/runtime.d.ts

@@ -152,7 +152,7 @@ export interface CredentialProvider {
     }>;
     invalidate?(): void;
 }
-export type WorkloadIdentitySource = 'auto' | 'none' | 'token' | 'token_file';
+export type WorkloadIdentitySource = 'auto' | 'none' | 'token' | 'token_file' | 'github_actions';
 export interface WorkloadIdentityOptions {
     workloadIdentityId: string;
     source?: WorkloadIdentitySource;

package/runtime.js

@@ -236,6 +236,7 @@ class AmbientCredentialProvider {
                 ...responseTokens,
                 process.env[env.apiKey],
                 process.env[env.token],
+                process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN,
             ])
                 if (token)
                     for (const encoded of [token, encodeURIComponent(token)])
@@ -265,7 +266,7 @@ class AmbientCredentialProvider {
                 return { value: apiKey || token || '' };
             }
             if (!id)
-                fail('no_credentials', `Set ${env.apiKey}, ${env.token}, or ${prefix}_WORKLOAD_IDENTITY_ID with ${prefix}_OIDC_TOKEN or ${prefix}_OIDC_TOKEN_FILE`);
+                fail('no_credentials', `Set ${env.apiKey}, ${env.token}, or ${prefix}_WORKLOAD_IDENTITY_ID with ${prefix}_OIDC_TOKEN, ${prefix}_OIDC_TOKEN_FILE, or GitHub Actions permissions: id-token: write`);
         }
         if (typeof id !== 'string' || !id || /[\r\n]/.test(id))
             fail('source_unavailable', 'A workload identity ID is required');
@@ -280,16 +281,32 @@ class AmbientCredentialProvider {
         const scope = this.identity?.scope ?? read('OIDC_SCOPE');
         const file = read('OIDC_TOKEN_FILE');
         if (source === 'auto')
-            source = read('OIDC_TOKEN') ? 'token' : file ? 'token_file' : 'none';
-        if (source !== 'token' && source !== 'token_file')
-            fail('source_unavailable', 'Supported sources: token, token_file');
+            source = read('OIDC_TOKEN')
+                ? 'token'
+                : file
+                    ? 'token_file'
+                    : process.env.GITHUB_ACTIONS === 'true'
+                        ? 'github_actions'
+                        : 'none';
+        if (!['token', 'token_file', 'github_actions'].includes(source))
+            fail('source_unavailable', 'Supported sources: token, token_file, github_actions');
+        const githubUrl = process.env.ACTIONS_ID_TOKEN_REQUEST_URL;
+        const githubToken = process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+        if (source === 'github_actions' && (!githubUrl || !githubToken))
+            fail('source_unavailable', 'GitHub Actions requires permissions: id-token: write');
         const sourceKey = source === 'token'
             ? process
                 .getBuiltinModule('crypto')
                 .createHash('sha256')
                 .update(read('OIDC_TOKEN') ?? '')
                 .digest('hex')
-            : file;
+            : source === 'github_actions'
+                ? process
+                    .getBuiltinModule('crypto')
+                    .createHash('sha256')
+                    .update(JSON.stringify([githubUrl, githubToken]))
+                    .digest('hex')
+                : file;
         const key = JSON.stringify([
             url.origin,
             this.config.workloadIdentity.tokenPath,
@@ -322,17 +339,66 @@ class AmbientCredentialProvider {
             return credential(value);
         }
         const exchange = async () => {
-            try {
-                subject =
-                    source === 'token'
-                        ? (read('OIDC_TOKEN') ?? '')
-                        : file
-                            ? (await process.getBuiltinModule('fs/promises').readFile(file, 'utf8')).trim()
-                            : '';
-            }
-            catch {
-                fail('subject_token_request_failed', 'Cannot read the configured token file');
+            const deadline = context?.deadline ?? performance.now() + 30000;
+            if (source === 'github_actions') {
+                let endpoint;
+                try {
+                    endpoint = new URL(githubUrl ?? '');
+                    if (endpoint.username ||
+                        endpoint.password ||
+                        endpoint.hash ||
+                        (endpoint.protocol !== 'https:' &&
+                            !(endpoint.protocol === 'http:' &&
+                                ['localhost', '127.0.0.1', '[::1]'].includes(endpoint.hostname))))
+                        throw new Error();
+                    endpoint.searchParams.set('audience', audience);
+                }
+                catch {
+                    return fail('source_unavailable', 'GitHub Actions identity endpoint requires HTTPS or loopback');
+                }
+                const controller = new AbortController();
+                const abort = () => controller.abort();
+                context?.signal?.addEventListener('abort', abort, { once: true });
+                if (context?.signal?.aborted || deadline <= performance.now())
+                    controller.abort();
+                const timer = schedule(abort, Math.max(0, deadline - performance.now()));
+                try {
+                    const response = await abortable((context?.transport ?? fetch)(endpoint, {
+                        method: 'GET',
+                        headers: { authorization: 'Bearer ' + githubToken, accept: 'application/json' },
+                        redirect: 'manual',
+                        signal: controller.signal,
+                    }), controller.signal);
+                    if (response.status !== 200)
+                        return fail('subject_token_request_failed', 'GitHub Actions identity request failed; check permissions: id-token: write');
+                    const payload = JSON.parse(await abortable(response.text(), controller.signal));
+                    if (!payload ||
+                        typeof payload !== 'object' ||
+                        !('value' in payload) ||
+                        typeof payload.value !== 'string')
+                        return fail('subject_token_request_failed', 'Invalid GitHub Actions identity response');
+                    subject = payload.value;
+                }
+                catch {
+                    return fail('subject_token_request_failed', 'GitHub Actions identity request failed; check permissions: id-token: write');
+                }
+                finally {
+                    timer.cancel();
+                    context?.signal?.removeEventListener('abort', abort);
+                }
             }
+            else
+                try {
+                    subject =
+                        source === 'token'
+                            ? (read('OIDC_TOKEN') ?? '')
+                            : file
+                                ? (await process.getBuiltinModule('fs/promises').readFile(file, 'utf8')).trim()
+                                : '';
+                }
+                catch {
+                    fail('subject_token_request_failed', 'Cannot read the configured token file');
+                }
             if (!subject)
                 fail('source_unavailable', 'The selected token source is empty');
             try {
@@ -364,7 +430,6 @@ class AmbientCredentialProvider {
                 [this.config.workloadIdentity.credentialParameter]: id ?? fail('source_unavailable'),
                 ...(scope === undefined ? {} : { scope }),
             });
-            const deadline = context?.deadline ?? performance.now() + 30000;
             for (let attempt = 0; attempt < 3; attempt++) {
                 const remaining = deadline - performance.now();
                 if (remaining <= 0)

package/webhooks.js

@@ -2,8 +2,8 @@ import { verifyWebhookFromPlan } from './runtime.js';
 export { parseExact } from './runtime.js';
 
 import { DescriptorSource } from './descriptor-source.js';
-import settings from './descriptors/settings.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
-import webhook from './descriptors/webhook.js?sdk=f95cd788a8ba3731ebe91694701a8a5cdceec0ac429cf23d16edc2f61220fbab';
+import settings from './descriptors/settings.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
+import webhook from './descriptors/webhook.js?sdk=ebff27e81aec9bdd0f095cae8c1add08bcdfa885028bf0eb87e3396a43a44aab';
 const _sdkDescriptors = new DescriptorSource(settings, {}, webhook);
 
 export function verifyWebhook(rawBody, headers, secrets, nowSeconds) { return verifyWebhookFromPlan(_sdkDescriptors, rawBody, headers, secrets, nowSeconds); }