@grantex/sdk 0.6.0 → 0.7.0

package/dist/resources/anomalies.js

@@ -3,6 +3,12 @@ export class AnomaliesClient {
     constructor(http) {
         this.#http = http;
     }
+    getResponsePolicy() {
+        return this.#http.get('/v1/irregularities/response-policy');
+    }
+    setResponsePolicy(mode) {
+        return this.#http.patch('/v1/irregularities/response-policy', { mode });
+    }
     /** Run anomaly detection across all agents and return detected anomalies. */
     detect() {
         return this.#http.post('/v1/anomalies/detect', {});
@@ -14,7 +20,7 @@ export class AnomaliesClient {
     }
     /** Acknowledge an anomaly by ID. */
     acknowledge(anomalyId) {
-        return this.#http.patch(`/v1/anomalies/${anomalyId}/acknowledge`, {});
+        return this.#http.patch(`/v1/anomalies/${encodeURIComponent(anomalyId)}/acknowledge`, {});
     }
 }
 //# sourceMappingURL=anomalies.js.map

package/dist/resources/anomalies.js.map

@@ -1 +1 @@
-{"version":3,"file":"anomalies.js","sourceRoot":"","sources":["../../src/resources/anomalies.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,eAAe;IACjB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,0FAA0F;IAC1F,IAAI,CAAC,MAAqC;QACxC,MAAM,EAAE,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,oCAAoC;IACpC,WAAW,CAAC,SAAiB;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAU,iBAAiB,SAAS,cAAc,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}
+{"version":3,"file":"anomalies.js","sourceRoot":"","sources":["../../src/resources/anomalies.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,eAAe;IACjB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,oCAAoC,CAAC,CAAC;IAC1F,CAAC;IAED,iBAAiB,CAAC,IAA8B;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAA6B,oCAAoC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,6EAA6E;IAC7E,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,0FAA0F;IAC1F,IAAI,CAAC,MAAqC;QACxC,MAAM,EAAE,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,oCAAoC;IACpC,WAAW,CAAC,SAAiB;QAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAU,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACrG,CAAC;CACF"}

package/dist/resources/audit.js

@@ -12,7 +12,7 @@ export class AuditClient {
         return this.#http.get(path);
     }
     get(entryId) {
-        return this.#http.get(`/v1/audit/${entryId}`);
+        return this.#http.get(`/v1/audit/${encodeURIComponent(entryId)}`);
     }
     checkpoint() {
         return this.#http.post('/v1/audit/checkpoints');

package/dist/resources/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,WAAW;IACb,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,MAAsB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,MAAwB;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,aAAa,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,uBAAuB,CAAC,CAAC;IACnE,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAAwB;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CACL,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/resources/audit.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,WAAW;IACb,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,MAAsB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,CAAC,MAAwB;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACxE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,aAAa,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,uBAAuB,CAAC,CAAC;IACnE,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAAwB;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CACL,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/resources/budgets.js

@@ -13,7 +13,7 @@ export class BudgetsClient {
     }
     /** Get the current budget balance for a grant. */
     balance(grantId) {
-        return this.#http.get(`/v1/budget/balance/${grantId}`);
+        return this.#http.get(`/v1/budget/balance/${encodeURIComponent(grantId)}`);
     }
     /** List budget transactions for a grant. */
     transactions(grantId, params) {
@@ -23,7 +23,7 @@ export class BudgetsClient {
         if (params?.pageSize !== undefined)
             query.set('pageSize', String(params.pageSize));
         const qs = query.toString();
-        return this.#http.get(`/v1/budget/transactions/${grantId}${qs ? `?${qs}` : ''}`);
+        return this.#http.get(`/v1/budget/transactions/${encodeURIComponent(grantId)}${qs ? `?${qs}` : ''}`);
     }
 }
 //# sourceMappingURL=budgets.js.map

package/dist/resources/budgets.js.map

@@ -1 +1 @@
-{"version":3,"file":"budgets.js","sourceRoot":"","sources":["../../src/resources/budgets.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,aAAa;IACf,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,MAA4B;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,MAAyB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,kDAAkD;IAClD,OAAO,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,sBAAsB,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,4CAA4C;IAC5C,YAAY,CACV,OAAe,EACf,MAA6C;QAE7C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,2BAA2B,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1D,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"budgets.js","sourceRoot":"","sources":["../../src/resources/budgets.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,aAAa;IACf,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,MAA4B;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,MAAyB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,kDAAkD;IAClD,OAAO,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,4CAA4C;IAC5C,YAAY,CACV,OAAe,EACf,MAA6C;QAE7C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,EAAE,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,EAAE,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACnF,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,2BAA2B,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9E,CAAC;IACJ,CAAC;CACF"}

package/dist/resources/credentials.js

@@ -4,7 +4,7 @@ export class CredentialsClient {
         this.#http = http;
     }
     get(credentialId) {
-        return this.#http.get(`/v1/credentials/${credentialId}`);
+        return this.#http.get(`/v1/credentials/${encodeURIComponent(credentialId)}`);
     }
     list(params) {
         const searchParams = new URLSearchParams();

package/dist/resources/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/resources/credentials.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,mBAAmB,YAAY,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,MAA8B;QACjC,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,wBAAwB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,CAAC,MAA0B;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;CACF"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/resources/credentials.ts"],"names":[],"mappings":"AAUA,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,mBAAmB,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,IAAI,CAAC,MAA8B;QACjC,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC3C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,IAAI,KAAK,KAAK,SAAS;oBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,wBAAwB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,CAAC,MAA0B;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,yBAAyB,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/resources/decisions.d.ts

@@ -0,0 +1,69 @@
+import type { HttpClient } from '../http.js';
+import { type DecisionAction } from '../decisions/action.js';
+import { type DecisionGrantSet } from '../decisions/verify.js';
+/** The issuer's record that decision grants were consumed for one action. */
+export interface ConsumedDecision {
+    requestId: string;
+    jtis: string[];
+    actionHash: string;
+    approvers: Record<string, unknown>[];
+}
+/** Consumes decision grants atomically at their issuer. */
+export interface DecisionConsumer {
+    consume(grants: DecisionGrantSet, options?: {
+        agentId?: string;
+        grantId?: string;
+    }): Promise<ConsumedDecision>;
+}
+export interface CreateDecisionRequestParams {
+    action: DecisionAction;
+    connector: string;
+    caseVersion: string;
+    /** The manifest's `four_eyes_on`; two approvals are required when it lists the decision. */
+    /** The memo the approver reviews (text). Stored with its hash and bound into the grant. */
+    memo: {
+        content: string;
+        ref?: string;
+    };
+    /** The policy score the approver reviews (a JSON object). Stored with its hash and bound into the grant. */
+    policyScore: {
+        content: Record<string, unknown>;
+        ref?: string;
+    };
+    fourEyesOn?: string[];
+    approvalsRequired?: 1 | 2;
+    expiresInSeconds?: number;
+    agentId?: string;
+    grantId?: string;
+}
+export interface ConsumeDecisionParams {
+    agentId?: string;
+    grantId?: string;
+}
+export declare class DecisionsClient {
+    #private;
+    constructor(http: HttpClient);
+    /** Register the case's current version; unconsumed grants for other versions are revoked. */
+    setCaseVersion(caseId: string, caseVersion: string): Promise<Record<string, unknown>>;
+    /** Ask a person to decide one semantic action. Idempotent while the request is open. */
+    createRequest(params: CreateDecisionRequestParams): Promise<Record<string, unknown>>;
+    /** Status and approvals; `decisionGrants` once fully approved and still usable. */
+    getRequest(requestId: string): Promise<Record<string, unknown>>;
+    cancelRequest(requestId: string): Promise<Record<string, unknown>>;
+    /**
+     * Consume decision grants atomically at the auth service. Pass a verified
+     * `DecisionGrantSet`, or the tokens with the action and case version.
+     * Throws `DecisionGrantError` with the issuer's sub-reason when refused and
+     * `consume_unavailable` when the issuer cannot be reached or answers
+     * unexpectedly: an unconfirmed consumption is never treated as success.
+     *
+     * Consumption spends the grants. If the response is lost after the auth
+     * service consumed them, or the tool call fails afterwards, they stay spent
+     * and a person has to approve again.
+     */
+    consume(grants: DecisionGrantSet | readonly string[], options?: ConsumeDecisionParams & {
+        action?: DecisionAction;
+        caseVersion?: string;
+    }): Promise<ConsumedDecision>;
+}
+//# sourceMappingURL=decisions.d.ts.map

package/dist/resources/decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.d.ts","sourceRoot":"","sources":["../../src/resources/decisions.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAInF,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACtC;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAChH;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,4FAA4F;IAC5F,2FAA2F;IAC3F,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,4GAA4G;IAC5G,WAAW,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,qBAAa,eAAe;;IAG1B,YAAY,IAAI,EAAE,UAAU,EAE3B;IAED,6FAA6F;IAC7F,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAEpF;IAED,wFAAwF;IACxF,aAAa,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAEnF;IAED,mFAAmF;IACnF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAE9D;IAED,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAEjE;IAED;;;;;;;;;;OAUG;IACG,OAAO,CACX,MAAM,EAAE,gBAAgB,GAAG,SAAS,MAAM,EAAE,EAC5C,OAAO,GAAE,qBAAqB,GAAG;QAAE,MAAM,CAAC,EAAE,cAAc,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GACtF,OAAO,CAAC,gBAAgB,CAAC,CAgE3B;CACF"}

package/dist/resources/decisions.js

@@ -0,0 +1,115 @@
+/**
+ * Auth-service API for decision grants (PRD G-3): `grantex.decisions`.
+ *
+ * A platform creates decision requests and consumes decision grants with its
+ * API key. It cannot approve: a person approves on the auth service's approval
+ * page (`approvalPage` in the request) after signing in with an identity
+ * provider the service administrator allow-listed. The auth service must run
+ * with `DECISION_GRANTS_ENABLED=true`.
+ */
+import { decodeJwt } from 'jose';
+import { GrantexApiError, GrantexError } from '../errors.js';
+import { DecisionSubReason } from '../denials.js';
+import { parseDecisionAction } from '../decisions/action.js';
+import { DecisionGrantError } from '../decisions/verify.js';
+const KNOWN_SUB_REASONS = new Set(Object.values(DecisionSubReason));
+function strip(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, v]) => v !== undefined));
+}
+export class DecisionsClient {
+    #http;
+    constructor(http) {
+        this.#http = http;
+    }
+    /** Register the case's current version; unconsumed grants for other versions are revoked. */
+    setCaseVersion(caseId, caseVersion) {
+        return this.#http.put(`/v1/decisions/cases/${encodeURIComponent(caseId)}`, { caseVersion });
+    }
+    /** Ask a person to decide one semantic action. Idempotent while the request is open. */
+    createRequest(params) {
+        return this.#http.post('/v1/decisions/requests', strip({ ...params, action: parseDecisionAction(params.action) }));
+    }
+    /** Status and approvals; `decisionGrants` once fully approved and still usable. */
+    getRequest(requestId) {
+        return this.#http.get(`/v1/decisions/requests/${encodeURIComponent(requestId)}`);
+    }
+    cancelRequest(requestId) {
+        return this.#http.post(`/v1/decisions/requests/${encodeURIComponent(requestId)}/cancel`);
+    }
+    /**
+     * Consume decision grants atomically at the auth service. Pass a verified
+     * `DecisionGrantSet`, or the tokens with the action and case version.
+     * Throws `DecisionGrantError` with the issuer's sub-reason when refused and
+     * `consume_unavailable` when the issuer cannot be reached or answers
+     * unexpectedly: an unconfirmed consumption is never treated as success.
+     *
+     * Consumption spends the grants. If the response is lost after the auth
+     * service consumed them, or the tool call fails afterwards, they stay spent
+     * and a person has to approve again.
+     */
+    async consume(grants, options = {}) {
+        let tokens;
+        let action;
+        let caseVersion;
+        let expectedJtis;
+        if (Array.isArray(grants)) {
+            if (options.action === undefined || options.caseVersion === undefined) {
+                throw new Error('consume needs action and caseVersion when given tokens');
+            }
+            tokens = [...grants];
+            action = parseDecisionAction(options.action);
+            caseVersion = options.caseVersion;
+            expectedJtis = tokens.map((t) => {
+                try {
+                    const jti = decodeJwt(t).jti;
+                    return typeof jti === 'string' ? jti : '';
+                }
+                catch {
+                    return '';
+                }
+            });
+        }
+        else {
+            const set = grants;
+            tokens = set.grants.map((g) => g.token);
+            action = set.action;
+            caseVersion = set.caseVersion;
+            expectedJtis = set.grants.map((g) => g.jti);
+        }
+        let data;
+        try {
+            data = await this.#http.post('/v1/decisions/consume', strip({ decisionGrants: tokens, action, caseVersion, agentId: options.agentId, grantId: options.grantId }), { retry: false });
+        }
+        catch (err) {
+            if (err instanceof GrantexApiError) {
+                const body = err.body;
+                const subReason = body?.['subReason'];
+                if ([400, 404, 409, 410].includes(err.statusCode) && typeof subReason === 'string' && KNOWN_SUB_REASONS.has(subReason)) {
+                    throw new DecisionGrantError(subReason, err.message);
+                }
+            }
+            if (err instanceof GrantexError) {
+                throw new DecisionGrantError(DecisionSubReason.CONSUME_UNAVAILABLE, `decision grant could not be consumed: ${err.message}`);
+            }
+            throw err;
+        }
+        const record = data;
+        if (!record || record['consumed'] !== true || !Array.isArray(record['jtis'])) {
+            throw new DecisionGrantError(DecisionSubReason.CONSUME_UNAVAILABLE, 'unexpected response from the auth service');
+        }
+        const jtis = record['jtis'].map(String);
+        if ([...jtis].sort().join(',') !== [...expectedJtis].sort().join(',')) {
+            throw new DecisionGrantError(DecisionSubReason.CONSUME_UNAVAILABLE, 'the auth service consumed different decision grants');
+        }
+        const approvers = Array.isArray(record['approvers'])
+            ? record['approvers'].filter((a) => typeof a === 'object' && a !== null)
+            : [];
+        return {
+            requestId: String(record['requestId'] ?? ''),
+            jtis,
+            actionHash: String(record['actionHash'] ?? ''),
+            approvers,
+        };
+    }
+}
+//# sourceMappingURL=decisions.js.map

package/dist/resources/decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions.js","sourceRoot":"","sources":["../../src/resources/decisions.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAuB,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAyB,MAAM,wBAAwB,CAAC;AAEnF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAoC5E,SAAS,KAAK,CAAoC,KAAQ;IACxD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAe,CAAC;AACpG,CAAC;AAED,MAAM,OAAO,eAAe;IACjB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,6FAA6F;IAC7F,cAAc,CAAC,MAAc,EAAE,WAAmB;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,wFAAwF;IACxF,aAAa,CAAC,MAAmC;QAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrH,CAAC;IAED,mFAAmF;IACnF,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,0BAA0B,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,kBAAkB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC3F,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CACX,MAA4C,EAC5C,OAAO,GAA8E,EAAE;QAEvF,IAAI,MAAgB,CAAC;QACrB,IAAI,MAAsB,CAAC;QAC3B,IAAI,WAAmB,CAAC;QACxB,IAAI,YAAsB,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;YACrB,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7C,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YAClC,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC9B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAA0B,CAAC;YACvC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;YAC9B,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAC1B,uBAAuB,EACvB,KAAK,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,EAC1G,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;gBACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAC;gBAC7D,MAAM,SAAS,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACvH,MAAM,IAAI,kBAAkB,CAAC,SAA8B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YACD,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;gBAChC,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,yCAAyC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9H,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,IAAsC,CAAC;QACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,IAAI,GAAI,MAAM,CAAC,MAAM,CAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,qDAAqD,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAClD,CAAC,CAAE,MAAM,CAAC,WAAW,CAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;YACrH,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI;YACJ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YAC9C,SAAS;SACV,CAAC;IACJ,CAAC;CACF"}

package/dist/resources/domains.js

@@ -13,11 +13,11 @@ export class DomainsClient {
     }
     /** Verify a custom domain via DNS. */
     verify(domainId) {
-        return this.#http.post(`/v1/domains/${domainId}/verify`);
+        return this.#http.post(`/v1/domains/${encodeURIComponent(domainId)}/verify`);
     }
     /** Delete a custom domain. */
     delete(domainId) {
-        return this.#http.delete(`/v1/domains/${domainId}`);
+        return this.#http.delete(`/v1/domains/${encodeURIComponent(domainId)}`);
     }
 }
 //# sourceMappingURL=domains.js.map

package/dist/resources/domains.js.map

@@ -1 +1 @@
-{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/resources/domains.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,aAAa;IACf,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,0DAA0D;IAC1D,MAAM,CAAC,MAA0B;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,aAAa,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,2BAA2B;IAC3B,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,sCAAsC;IACtC,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,eAAe,QAAQ,SAAS,CAAC,CAAC;IACjF,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;CACF"}
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../src/resources/domains.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,aAAa;IACf,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,0DAA0D;IAC1D,MAAM,CAAC,MAA0B;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,aAAa,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,2BAA2B;IAC3B,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,aAAa,CAAC,CAAC;IAC5D,CAAC;IAED,sCAAsC;IACtC,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,eAAe,kBAAkB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrG,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/dist/resources/dpdp.js

@@ -7,14 +7,14 @@ export class DpdpClient {
         return this.#http.post('/v1/dpdp/consent-records', params);
     }
     getConsentRecord(recordId) {
-        return this.#http.get(`/v1/dpdp/consent-records/${recordId}`);
+        return this.#http.get(`/v1/dpdp/consent-records/${encodeURIComponent(recordId)}`);
     }
     listConsentRecords(principalId) {
         const qs = principalId ? `?dataPrincipalId=${encodeURIComponent(principalId)}` : '';
         return this.#http.get(`/v1/dpdp/consent-records${qs}`);
     }
     withdrawConsent(recordId, params) {
-        return this.#http.post(`/v1/dpdp/consent-records/${recordId}/withdraw`, params);
+        return this.#http.post(`/v1/dpdp/consent-records/${encodeURIComponent(recordId)}/withdraw`, params);
     }
     listPrincipalRecords(principalId) {
         return this.#http.get(`/v1/dpdp/data-principals/${encodeURIComponent(principalId)}/records`);
@@ -31,13 +31,13 @@ export class DpdpClient {
         return this.#http.post('/v1/dpdp/grievances', params);
     }
     getGrievance(grievanceId) {
-        return this.#http.get(`/v1/dpdp/grievances/${grievanceId}`);
+        return this.#http.get(`/v1/dpdp/grievances/${encodeURIComponent(grievanceId)}`);
     }
     createExport(params) {
         return this.#http.post('/v1/dpdp/exports', params);
     }
     getExport(exportId) {
-        return this.#http.get(`/v1/dpdp/exports/${exportId}`);
+        return this.#http.get(`/v1/dpdp/exports/${encodeURIComponent(exportId)}`);
     }
 }
 //# sourceMappingURL=dpdp.js.map

package/dist/resources/dpdp.js.map

@@ -1 +1 @@
-{"version":3,"file":"dpdp.js","sourceRoot":"","sources":["../../src/resources/dpdp.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,UAAU;IACZ,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,mBAAmB,CAAC,MAAiC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,kBAAkB,CAAC,WAAoB;QACrC,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,oBAAoB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,2BAA2B,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,MAA6B;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,4BAA4B,QAAQ,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3G,CAAC;IAED,oBAAoB,CAAC,WAAmB;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,4BAA4B,kBAAkB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACzH,CAAC;IAED,cAAc,CAAC,WAAmB;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,4BAA4B,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAAE;YAC7G,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAiC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,aAAa,CAAC,MAA2B;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,uBAAuB,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,YAAY,CAAC,MAA8B;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IACpE,CAAC;CACF"}
+{"version":3,"file":"dpdp.js","sourceRoot":"","sources":["../../src/resources/dpdp.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,UAAU;IACZ,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,mBAAmB,CAAC,MAAiC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,4BAA4B,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,kBAAkB,CAAC,WAAoB;QACrC,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,oBAAoB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,2BAA2B,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,MAA6B;QAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,4BAA4B,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/H,CAAC;IAED,oBAAoB,CAAC,WAAmB;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,4BAA4B,kBAAkB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACzH,CAAC;IAED,cAAc,CAAC,WAAmB;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,4BAA4B,kBAAkB,CAAC,WAAW,CAAC,UAAU,EAAE;YAC7G,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,MAAiC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;IAED,aAAa,CAAC,MAA2B;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,uBAAuB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,YAAY,CAAC,MAA8B;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;CACF"}

package/dist/resources/grants.js

@@ -6,7 +6,7 @@ export class GrantsClient {
         this.#http = http;
     }
     get(grantId) {
-        return this.#http.get(`/v1/grants/${grantId}`);
+        return this.#http.get(`/v1/grants/${encodeURIComponent(grantId)}`);
     }
     list(params) {
         const query = buildQuery(params);
@@ -14,7 +14,7 @@ export class GrantsClient {
         return this.#http.get(path);
     }
     revoke(grantId) {
-        return this.#http.delete(`/v1/grants/${grantId}`);
+        return this.#http.delete(`/v1/grants/${encodeURIComponent(grantId)}`);
     }
     /**
      * Create a delegated sub-agent grant (SPEC §9).

package/dist/resources/grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/resources/grants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUjD,MAAM,OAAO,YAAY;IACd,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAQ,cAAc,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,MAAyB;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,cAAc,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,MAAsB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAKpC,mBAAmB,EACnB,EAAE,KAAK,EAAE,CACV,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAAyB;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CACL,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/resources/grants.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUjD,MAAM,OAAO,YAAY;IACd,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,OAAe;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAQ,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,CAAC,MAAyB;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,cAAc,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,MAAsB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAKpC,mBAAmB,EACnB,EAAE,KAAK,EAAE,CACV,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAAyB;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CACL,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC"}

package/dist/resources/policies.js

@@ -13,15 +13,15 @@ export class PoliciesClient {
     }
     /** Get a single policy by ID. */
     get(policyId) {
-        return this.#http.get(`/v1/policies/${policyId}`);
+        return this.#http.get(`/v1/policies/${encodeURIComponent(policyId)}`);
     }
     /** Update a policy. */
     update(policyId, params) {
-        return this.#http.patch(`/v1/policies/${policyId}`, params);
+        return this.#http.patch(`/v1/policies/${encodeURIComponent(policyId)}`, params);
     }
     /** Delete a policy. */
     delete(policyId) {
-        return this.#http.delete(`/v1/policies/${policyId}`);
+        return this.#http.delete(`/v1/policies/${encodeURIComponent(policyId)}`);
     }
 }
 //# sourceMappingURL=policies.js.map

package/dist/resources/policies.js.map

@@ -1 +1 @@
-{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/resources/policies.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,cAAc;IAChB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,2BAA2B;IAC3B,MAAM,CAAC,MAA0B;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAS,cAAc,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,yDAAyD;IACzD,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,cAAc,CAAC,CAAC;IAC9D,CAAC;IAED,iCAAiC;IACjC,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,gBAAgB,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,QAAgB,EAAE,MAA0B;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAS,gBAAgB,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,gBAAgB,QAAQ,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF"}
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../src/resources/policies.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,cAAc;IAChB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,2BAA2B;IAC3B,MAAM,CAAC,MAA0B;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAS,cAAc,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,yDAAyD;IACzD,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,cAAc,CAAC,CAAC;IAC9D,CAAC;IAED,iCAAiC;IACjC,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,QAAgB,EAAE,MAA0B;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAS,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,uBAAuB;IACvB,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,gBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/resources/scim.js

@@ -14,7 +14,7 @@ export class ScimClient {
     }
     /** Revoke a SCIM token by ID. */
     revokeToken(tokenId) {
-        return this.#http.delete(`/v1/scim/tokens/${tokenId}`);
+        return this.#http.delete(`/v1/scim/tokens/${encodeURIComponent(tokenId)}`);
     }
     // ── SCIM 2.0 Users ────────────────────────────────────────────────────
     /** List provisioned users (SCIM 2.0 ListResponse). */
@@ -29,7 +29,7 @@ export class ScimClient {
     }
     /** Get a single provisioned user by ID. */
     getUser(userId) {
-        return this.#http.get(`/scim/v2/Users/${userId}`);
+        return this.#http.get(`/scim/v2/Users/${encodeURIComponent(userId)}`);
     }
     /** Provision a new user. */
     createUser(params) {
@@ -37,15 +37,15 @@ export class ScimClient {
     }
     /** Full replace of a user (PUT). */
     replaceUser(userId, params) {
-        return this.#http.put(`/scim/v2/Users/${userId}`, params);
+        return this.#http.put(`/scim/v2/Users/${encodeURIComponent(userId)}`, params);
     }
     /** Partial update via SCIM Operations (PATCH). */
     updateUser(userId, operations) {
-        return this.#http.patch(`/scim/v2/Users/${userId}`, { Operations: operations });
+        return this.#http.patch(`/scim/v2/Users/${encodeURIComponent(userId)}`, { Operations: operations });
     }
     /** Deprovision a user (DELETE). */
     deleteUser(userId) {
-        return this.#http.delete(`/scim/v2/Users/${userId}`);
+        return this.#http.delete(`/scim/v2/Users/${encodeURIComponent(userId)}`);
     }
 }
 //# sourceMappingURL=scim.js.map

package/dist/resources/scim.js.map

@@ -1 +1 @@
-{"version":3,"file":"scim.js","sourceRoot":"","sources":["../../src/resources/scim.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,UAAU;IACZ,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,yEAAyE;IAEzE,2EAA2E;IAC3E,WAAW,CAAC,MAA6B;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,yEAAyE;IACzE,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,iBAAiB,CAAC,CAAC;IACnE,CAAC;IAED,iCAAiC;IACjC,WAAW,CAAC,OAAe;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,mBAAmB,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,yEAAyE;IAEzE,sDAAsD;IACtD,SAAS,CAAC,MAAgD;QACxD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,KAAK,CAAC,CAAC,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAChG,CAAC;IAED,2CAA2C;IAC3C,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,kBAAkB,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,4BAA4B;IAC5B,UAAU,CAAC,MAA4B;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAW,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,oCAAoC;IACpC,WAAW,CAAC,MAAc,EAAE,MAA4B;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,kBAAkB,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,kDAAkD;IAClD,UAAU,CACR,MAAc,EACd,UAAgE;QAEhE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,kBAAkB,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,mCAAmC;IACnC,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,kBAAkB,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;CACF"}
+{"version":3,"file":"scim.js","sourceRoot":"","sources":["../../src/resources/scim.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,UAAU;IACZ,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,yEAAyE;IAEzE,2EAA2E;IAC3E,WAAW,CAAC,MAA6B;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,yEAAyE;IACzE,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,iBAAiB,CAAC,CAAC;IACnE,CAAC;IAED,iCAAiC;IACjC,WAAW,CAAC,OAAe;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,mBAAmB,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,yEAAyE;IAEzE,sDAAsD;IACtD,SAAS,CAAC,MAAgD;QACxD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,KAAK,CAAC,CAAC,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAChG,CAAC;IAED,2CAA2C;IAC3C,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,4BAA4B;IAC5B,UAAU,CAAC,MAA4B;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAW,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,oCAAoC;IACpC,WAAW,CAAC,MAAc,EAAE,MAA4B;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;IAED,kDAAkD;IAClD,UAAU,CACR,MAAc,EACd,UAAgE;QAEhE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,mCAAmC;IACnC,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/resources/tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/resources/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvH,qBAAa,YAAY;;IAIvB,YAAY,IAAI,EAAE,UAAU,EAE3B;IAED,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAEpE;IAEK,OAAO,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAexE;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAIlD;IAED,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErC;CACF"}
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/resources/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGvH,qBAAa,YAAY;;IAIvB,YAAY,IAAI,EAAE,UAAU,EAE3B;IAED,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAMpE;IAEK,OAAO,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAexE;IAED,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAIlD;IAED,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErC;CACF"}

package/dist/resources/tokens.js

@@ -6,7 +6,11 @@ export class TokensClient {
         this.#http = http;
     }
     exchange(params) {
-        return this.#http.post('/v1/token', params);
+        // Authorization codes are single-use and the server has no idempotent
+        // replay for the exchange (unlike refresh): a retried request whose first
+        // attempt committed would fail with "code already used" and lose the
+        // tokens. Never retry; let the caller surface the error.
+        return this.#http.post('/v1/token', params, { retry: false });
     }
     async refresh(params) {
         const now = Date.now();

package/dist/resources/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/resources/tokens.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,YAAY;IACd,KAAK,CAAa;IAClB,iBAAiB,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEnF,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,QAAQ,CAAC,MAA2B;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,WAAW,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA0B;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc;eACvC,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,EAAE,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,mBAAmB,EAAE,IAAI,EAAE;YACvF,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,mBAAmB,EAAE;YAC/D,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAO,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/resources/tokens.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,YAAY;IACd,KAAK,CAAa;IAClB,iBAAiB,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEnF,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,QAAQ,CAAC,MAA2B;QAClC,sEAAsE;QACtE,0EAA0E;QAC1E,qEAAqE;QACrE,yDAAyD;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA0B;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc;eACvC,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,EAAE,CAAC,CAAC;QACnG,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,mBAAmB,EAAE,IAAI,EAAE;YACvF,OAAO,EAAE,EAAE,iBAAiB,EAAE,cAAc,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAsB,mBAAmB,EAAE;YAC/D,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAO,mBAAmB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;CACF"}

package/dist/resources/vault.js

@@ -21,11 +21,11 @@ export class VaultClient {
     }
     /** Get credential metadata by ID (no raw token). */
     get(credentialId) {
-        return this.#http.get(`/v1/vault/credentials/${credentialId}`);
+        return this.#http.get(`/v1/vault/credentials/${encodeURIComponent(credentialId)}`);
     }
     /** Delete a credential from the vault. */
     delete(credentialId) {
-        return this.#http.delete(`/v1/vault/credentials/${credentialId}`);
+        return this.#http.delete(`/v1/vault/credentials/${encodeURIComponent(credentialId)}`);
     }
     /**
      * Exchange a grant token for an upstream credential.

package/dist/resources/vault.js.map

@@ -1 +1 @@
-{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/resources/vault.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,WAAW;IACb,KAAK,CAAa;IAClB,QAAQ,CAAS;IAE1B,YAAY,IAAgB,EAAE,OAAe;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,MAA6B;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC,MAAM,GAA+B,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,yBAAyB,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,0CAA0C;IAC1C,MAAM,CAAC,YAAoB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,YAAY,EAAE,CAAC,CAAC;IACpE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,UAAkB,EAClB,MAAgC;QAEhC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,gCAAgC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,OAAO,GACX,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI;gBACnD,CAAC,CAAC,MAAM,CAAE,IAAgC,CAAC,SAAS,CAAC,CAAC;gBACtD,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAyC,CAAC;IAChE,CAAC;CACF"}
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/resources/vault.ts"],"names":[],"mappings":"AAWA,MAAM,OAAO,WAAW;IACb,KAAK,CAAa;IAClB,QAAQ,CAAS;IAE1B,YAAY,IAAgB,EAAE,OAAe;QAC3C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,MAA6B;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACnF,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC,MAAM,GAA+B,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7C,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,yBAAyB,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,0CAA0C;IAC1C,MAAM,CAAC,YAAoB;QACzB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CACZ,UAAkB,EAClB,MAAgC;QAEhC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,gCAAgC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,EAAE;gBACrC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,OAAO,GACX,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,IAAI,IAAI;gBACnD,CAAC,CAAC,MAAM,CAAE,IAAgC,CAAC,SAAS,CAAC,CAAC;gBACtD,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAyC,CAAC;IAChE,CAAC;CACF"}

package/dist/resources/webauthn.d.ts

@@ -1,8 +1,13 @@
 import type { HttpClient } from '../http.js';
-import type { WebAuthnRegistrationOptions, WebAuthnRegistrationVerifyParams, WebAuthnCredential, ListWebAuthnCredentialsResponse } from '../types.js';
+import type { WebAuthnRegistrationOptions, WebAuthnRegistrationVerifyParams, WebAuthnCredential, ListWebAuthnCredentialsResponse, WebAuthnEnrollmentSession } from '../types.js';
 export declare class WebAuthnClient {
     #private;
     constructor(http: HttpClient);
+    /** Issue a one-use hosted enrollment link after authenticating the principal in your application. */
+    createEnrollmentSession(params: {
+        principalId: string;
+        authRequestId?: string;
+    }): Promise<WebAuthnEnrollmentSession>;
     registerOptions(params: {
         principalId: string;
     }): Promise<WebAuthnRegistrationOptions>;

package/dist/resources/webauthn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../src/resources/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,kBAAkB,EAClB,+BAA+B,EAChC,MAAM,aAAa,CAAC;AAErB,qBAAa,cAAc;;IAGzB,YAAY,IAAI,EAAE,UAAU,EAE3B;IAED,eAAe,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAErF;IAED,cAAc,CAAC,MAAM,EAAE,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEpF;IAED,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAI7E;IAED,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpD;CACF"}
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../src/resources/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EACV,2BAA2B,EAC3B,gCAAgC,EAChC,kBAAkB,EAClB,+BAA+B,EAC/B,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAErB,qBAAa,cAAc;;IAGzB,YAAY,IAAI,EAAE,UAAU,EAE3B;IAED,qGAAqG;IACrG,uBAAuB,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAEnH;IAED,eAAe,CAAC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAErF;IAED,cAAc,CAAC,MAAM,EAAE,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEpF;IAED,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAI7E;IAED,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpD;CACF"}

package/dist/resources/webauthn.js

@@ -3,6 +3,10 @@ export class WebAuthnClient {
     constructor(http) {
         this.#http = http;
     }
+    /** Issue a one-use hosted enrollment link after authenticating the principal in your application. */
+    createEnrollmentSession(params) {
+        return this.#http.post('/v1/webauthn/enrollment-sessions', params);
+    }
     registerOptions(params) {
         return this.#http.post('/v1/webauthn/register/options', params);
     }
@@ -13,7 +17,7 @@ export class WebAuthnClient {
         return this.#http.get(`/v1/webauthn/credentials?principalId=${encodeURIComponent(principalId)}`);
     }
     deleteCredential(credentialId) {
-        return this.#http.delete(`/v1/webauthn/credentials/${credentialId}`);
+        return this.#http.delete(`/v1/webauthn/credentials/${encodeURIComponent(credentialId)}`);
     }
 }
 //# sourceMappingURL=webauthn.js.map

package/dist/resources/webauthn.js.map

@@ -1 +1 @@
-{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../src/resources/webauthn.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,cAAc;IAChB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,eAAe,CAAC,MAA+B;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8B,+BAA+B,EAAE,MAAM,CAAC,CAAC;IAC/F,CAAC;IAED,cAAc,CAAC,MAAwC;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,8BAA8B,EAAE,MAAM,CAAC,CAAC;IACrF,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,wCAAwC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC7E,CAAC;CACF"}
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../src/resources/webauthn.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,cAAc;IAChB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,qGAAqG;IACrG,uBAAuB,CAAC,MAAuD;QAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,kCAAkC,EAAE,MAAM,CAAC,CAAC;IAChG,CAAC;IAED,eAAe,CAAC,MAA+B;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8B,+BAA+B,EAAE,MAAM,CAAC,CAAC;IAC/F,CAAC;IAED,cAAc,CAAC,MAAwC;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,8BAA8B,EAAE,MAAM,CAAC,CAAC;IACrF,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CACnB,wCAAwC,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,YAAoB;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAO,4BAA4B,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;CACF"}

package/dist/resources/webhooks.js

@@ -10,7 +10,7 @@ export class WebhooksClient {
         return this.#http.get('/v1/webhooks');
     }
     delete(webhookId) {
-        return this.#http.delete(`/v1/webhooks/${webhookId}`);
+        return this.#http.delete(`/v1/webhooks/${encodeURIComponent(webhookId)}`);
     }
 }
 //# sourceMappingURL=webhooks.js.map

package/dist/resources/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/resources/webhooks.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,cAAc;IAChB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,MAA2B;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;CACF"}
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../src/resources/webhooks.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,cAAc;IAChB,KAAK,CAAa;IAE3B,YAAY,IAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,MAA2B;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;CACF"}