@greensecurity/javascript-sdk 0.44.0-beta.6 → 0.44.0-beta.60

package/dist/esm/sdk/webhooks.js

@@ -1,26 +1,65 @@
 /*
  * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
  */
+import { webhooksCreateWebhookEndpoint } from "../funcs/webhooksCreateWebhookEndpoint.js";
+import { webhooksDeleteWebhookEndpoint } from "../funcs/webhooksDeleteWebhookEndpoint.js";
 import { webhooksGetWebhookEndpoint } from "../funcs/webhooksGetWebhookEndpoint.js";
 import { webhooksListAllWebhookEndpoints } from "../funcs/webhooksListAllWebhookEndpoints.js";
 import { webhooksUpdatesTheWebhookEndpointWithTheGivenId } from "../funcs/webhooksUpdatesTheWebhookEndpointWithTheGivenId.js";
 import { ClientSDK } from "../lib/sdks.js";
 import { unwrapAsync } from "../types/fp.js";
+import { unwrapResultIterator } from "../types/operations.js";
 export class Webhooks extends ClientSDK {
     /**
      * List all webhook endpoints
      *
      * @remarks
-     * Returns a list of your webhook endpoints.
+     * Returns the webhook endpoints you can see: the ones you registered, plus the ones scoped
+     * to an entity you belong to. `secrets` is never included here, it is only returned once by
+     * `POST /webhooks`.
+     *
+     * Sortable by `id`, `webhook_url`, `created_at` and `updated_at`.
+     *
+     * Requires the `webhook` / `view` permission.
      */
     async listAllWebhookEndpoints(request, options) {
-        return unwrapAsync(webhooksListAllWebhookEndpoints(this, request, options));
+        return unwrapResultIterator(webhooksListAllWebhookEndpoints(this, request, options));
+    }
+    /**
+     * Register a webhook endpoint
+     *
+     * @remarks
+     * Registers a URL to receive one or more events, and returns the endpoint together with its
+     * signing secret. **The secret is only ever returned by this call** — store it before you
+     * move on, it cannot be read back afterwards.
+     *
+     * `subscriptions` takes event names, objects naming a `model`, an `action` and their own
+     * `expands`, or a mix of the two. Only the pair of URL and event has to be unique, so the
+     * events may be split over as many endpoints as you like, sharing a URL or not, as long as
+     * no URL hears the same event twice. A receiver taking several events on one path routes on
+     * the `Green-Security-Event` header.
+     *
+     * `consumers` decides which entities you hear about and is validated against your own
+     * access: naming a facility, system, company or user you cannot reach is rejected with a
+     * `401`. Omit it and the endpoint is scoped to your own entity — for administrators and
+     * site-wide marketplace app installations, to every event of the site.
+     *
+     * Requires the `webhook` / `add` permission.
+     */
+    async createWebhookEndpoint(request, options) {
+        return unwrapAsync(webhooksCreateWebhookEndpoint(this, request, options));
     }
     /**
      * Retrieves the webhook endpoint with the given ID.
      *
      * @remarks
-     * Returns the definition of a webhook endpoint by ID.
+     * Returns the definition of a webhook endpoint by ID. `secrets` is not included: the signing
+     * secret is only returned by `POST /webhooks`.
+     *
+     * An endpoint you cannot see is reported as `404`, so an ID belonging to somebody else is
+     * indistinguishable from one that does not exist.
+     *
+     * Requires the `webhook` / `view` permission.
      */
     async getWebhookEndpoint(request, options) {
         return unwrapAsync(webhooksGetWebhookEndpoint(this, request, options));
@@ -29,10 +68,49 @@ export class Webhooks extends ClientSDK {
      * Updates the webhook endpoint with the given ID.
      *
      * @remarks
-     * Updates the webhook endpoint with the given ID.
+     * Changes the URL, the events, their expansion scopes or the consumers of an endpoint.
+     * Anything you leave out keeps its current value.
+     *
+     * Two properties replace rather than merge: naming any consumer clears the others, and
+     * `subscriptions` replaces every event, so an event you do not list again is dropped along
+     * with its scopes. `expand` on its own, without `subscriptions`, re-scopes the events the
+     * endpoint already receives — each one takes the scopes that name its own entity, so an
+     * endpoint receiving two models can be re-scoped in a single request (send `[]` to clear every
+     * scope). A scope naming an entity the endpoint does not receive applies to nothing and is
+     * rejected. New consumers are re-authorized against your own access, so an endpoint cannot be
+     * pointed at an entity you could not have registered it for in the first place.
+     *
+     * Changing `webhook_url` is reserved to whoever registered the endpoint, and to admins.
+     * Deliveries are filtered by the registering user's access, so a new destination would receive
+     * whatever that access reaches — if you did not register it, register your own instead.
+     *
+     * Changing the URL or the consumers withdraws the deliveries still queued for this endpoint.
+     * Their payloads were serialized for the previous configuration, so they would otherwise
+     * arrive at the new destination describing the old one. Changing only `subscriptions` or
+     * `expand` leaves queued deliveries alone.
+     *
+     * The signing secret cannot be rotated here, and `id`, `signature_algo` and `secrets` are
+     * ignored if you send them back.
+     *
+     * Requires the `webhook` / `edit` permission.
      */
     async updatesTheWebhookEndpointWithTheGivenId(request, options) {
         return unwrapAsync(webhooksUpdatesTheWebhookEndpointWithTheGivenId(this, request, options));
     }
+    /**
+     * Deletes the webhook endpoint with the given ID.
+     *
+     * @remarks
+     * Stops the deliveries and removes the endpoint together with its delivery history.
+     *
+     * Endpoints are also removed on your behalf when the marketplace app installation they were
+     * registered under is narrowed or uninstalled, so an integration never keeps receiving
+     * events for entities it lost access to.
+     *
+     * Requires the `webhook` / `delete` permission.
+     */
+    async deleteWebhookEndpoint(request, options) {
+        return unwrapAsync(webhooksDeleteWebhookEndpoint(this, request, options));
+    }
 }
 //# sourceMappingURL=webhooks.js.map

package/dist/esm/sdk/webhooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/sdk/webhooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,+CAA+C,EAAE,MAAM,6DAA6D,CAAC;AAC9H,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,QAAS,SAAQ,SAAS;IACrC;;;;;OAKG;IACH,KAAK,CAAC,uBAAuB,CAC3B,OAAkD,EAClD,OAAwB;QAExB,OAAO,WAAW,CAAC,+BAA+B,CAChD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,uCAAuC,CAC3C,OAAkE,EAClE,OAAwB;QAExB,OAAO,WAAW,CAAC,+CAA+C,CAChE,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/sdk/webhooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,+BAA+B,EAAE,MAAM,6CAA6C,CAAC;AAC9F,OAAO,EAAE,+CAA+C,EAAE,MAAM,6DAA6D,CAAC;AAC9H,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAgB,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,MAAM,OAAO,QAAS,SAAQ,SAAS;IACrC;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,uBAAuB,CAC3B,OAAkD,EAClD,OAAwB;QAIxB,OAAO,oBAAoB,CAAC,+BAA+B,CACzD,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAyC,EACzC,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,kBAAkB,CACtB,OAA6C,EAC7C,OAAwB;QAExB,OAAO,WAAW,CAAC,0BAA0B,CAC3C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,KAAK,CAAC,uCAAuC,CAC3C,OAAkE,EAClE,OAAwB;QAExB,OAAO,WAAW,CAAC,+CAA+C,CAChE,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,qBAAqB,CACzB,OAAgD,EAChD,OAAwB;QAExB,OAAO,WAAW,CAAC,6BAA6B,CAC9C,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/esm/types/index.d.ts

@@ -7,4 +7,6 @@ export { createPageIterator } from "./operations.js";
 export * from "./primitives.js";
 export { RFCDate } from "./rfcdate.js";
 export * from "./unrecognized.js";
+export type { WebhookRecipient } from "./webhooks.js";
+export type { WebhookAuthenticationError } from "./webhooks.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/esm/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxD,cAAc,yBAAyB,CAAC;AACxC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACvD,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxD,cAAc,yBAAyB,CAAC;AACxC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACvD,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtC,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,YAAY,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC"}

package/dist/esm/types/webhooks.d.ts

@@ -0,0 +1,8 @@
+export type WebhookRecipient = {
+    url: string;
+    secret: string;
+};
+export declare class WebhookAuthenticationError extends Error {
+    name: string;
+}
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/esm/types/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/types/webhooks.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,qBAAa,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,SAAgC;CAC9C"}

package/dist/esm/types/webhooks.js

@@ -0,0 +1,10 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+export class WebhookAuthenticationError extends Error {
+    constructor() {
+        super(...arguments);
+        this.name = "WebhookAuthenticationError";
+    }
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/esm/types/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../../../src/types/webhooks.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAArD;;QACW,SAAI,GAAG,4BAA4B,CAAC;IAC/C,CAAC;CAAA"}

package/jsr.json

@@ -2,7 +2,7 @@
 
 {
   "name": "@greensecurity/javascript-sdk",
-  "version": "0.44.0-beta.6",
+  "version": "0.44.0-beta.60",
   "exports": {
     ".": "./src/index.ts",    
     "./models/errors": "./src/models/errors/index.ts",    

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@greensecurity/javascript-sdk",
-  "version": "0.44.0-beta.6",
+  "version": "0.44.0-beta.60",
   "author": "Green Security LLC",
   "type": "module",
   "tshy": {
@@ -14,6 +14,7 @@
       "./models/errors": "./src/models/errors/index.ts",
       "./models/components": "./src/models/components/index.ts",
       "./models/operations": "./src/models/operations/index.ts",
+      "./models/webhooks": "./src/models/webhooks/index.ts",
       "./react-query": "./src/react-query/index.ts",
       "./*.js": "./src/*.ts",
       "./*": "./src/*.ts"
@@ -51,14 +52,14 @@
   "devDependencies": {
     "@eslint/js": "^9.26.0",
     "@tanstack/react-query": "^5.61.4",
-    "@types/node": "^18.19.3",
+    "@types/node": "^22.12.0",
     "@types/react": "^18.3.12",
     "eslint": "^9.26.0",
     "globals": "^15.14.0",
     "tshy": "^3.3.2",
     "typescript": "~5.8.3",
     "typescript-eslint": "^8.26.0",
-    "vitest": "^3.0.5"
+    "vitest": "^3.2.6"
   },
   "dependencies": {
     "zod": "^3.25.0 || ^4.0.0"
@@ -120,6 +121,17 @@
         "default": "./dist/commonjs/models/operations/index.js"
       }
     },
+    "./models/webhooks": {
+      "import": {
+        "@greensecurity/javascript-sdk/source": "./src/models/webhooks/index.ts",
+        "types": "./dist/esm/models/webhooks/index.d.ts",
+        "default": "./dist/esm/models/webhooks/index.js"
+      },
+      "require": {
+        "types": "./dist/commonjs/models/webhooks/index.d.ts",
+        "default": "./dist/commonjs/models/webhooks/index.js"
+      }
+    },
     "./react-query": {
       "import": {
         "@greensecurity/javascript-sdk/source": "./src/react-query/index.ts",

package/src/__tests__/companies.test.ts

@@ -198,6 +198,7 @@ test("Companies List Company Credits", async () => {
     items: [
       {},
     ],
+    creditBalance: 7634.4,
   });
 });
 

package/src/__tests__/fhirconfigs.test.ts

@@ -86,8 +86,11 @@ test("Fhir Configs Create A Fhir Config", async () => {
       clientId: "<id>",
       baseUrl: "https://fhir.epic.com/v4",
       tokenUrl: "https://fhir.epic.com/token",
+      jkuPath: "/fhir/42/jwk-sets",
+    },
+    nonProductionProfile: {
+      jkuPathNp: "/fhir/42/jwk-sets-np",
     },
-    nonProductionProfile: {},
     appliesTo: {
       facilityId: 630331,
     },
@@ -119,8 +122,11 @@ test("Fhir Configs Get Fhir Config", async () => {
       clientId: "<id>",
       baseUrl: "https://fhir.epic.com/v4",
       tokenUrl: "https://fhir.epic.com/token",
+      jkuPath: "/fhir/42/jwk-sets",
+    },
+    nonProductionProfile: {
+      jkuPathNp: "/fhir/42/jwk-sets-np",
     },
-    nonProductionProfile: {},
     appliesTo: {
       facilityId: 410051,
     },
@@ -153,8 +159,11 @@ test("Fhir Configs Update Fhir Config By Id", async () => {
       clientId: "<id>",
       baseUrl: "https://fhir.epic.com/v4",
       tokenUrl: "https://fhir.epic.com/token",
+      jkuPath: "/fhir/42/jwk-sets",
+    },
+    nonProductionProfile: {
+      jkuPathNp: "/fhir/42/jwk-sets-np",
     },
-    nonProductionProfile: {},
     appliesTo: {
       facilityId: 773569,
     },

package/src/__tests__/invoices.test.ts

@@ -112,7 +112,9 @@ test("Invoices Invoices Export", async () => {
     },
   });
 
-  const result = await greenSecurity.invoices.invoicesExport({});
+  const result = await greenSecurity.invoices.invoicesExport({
+    desc: true,
+  });
   expect(result).toBeDefined();
   expect(result).toEqual({
     statusUrl: "https://optimistic-skean.info",

package/src/__tests__/organizations.test.ts

@@ -167,3 +167,172 @@ test("Organizations Delete Company Target Facility", async () => {
   expect(result).toBeDefined();
   expect(result).toEqual(true);
 });
+
+test("Organizations Export Company Target Facilities", async () => {
+  const testHttpClient = createTestHTTPClient("exportCompanyTargetFacilities");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations
+    .exportCompanyTargetFacilities({
+      companyId: 927960,
+    });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    statusUrl: "https://important-edge.name",
+    downloadUrl: "https://vengeful-coliseum.com",
+    statusId: "<id>",
+  });
+});
+
+test("Organizations Get Company Target Facilities Export Status", async () => {
+  const testHttpClient = createTestHTTPClient(
+    "getCompanyTargetFacilitiesExportStatus",
+  );
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations
+    .getCompanyTargetFacilitiesExportStatus({
+      companyId: 157147,
+      id: "<id>",
+    });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    ready: false,
+    statusId: "<id>",
+  });
+});
+
+test("Organizations Download Company Target Facilities Export", async () => {
+  const testHttpClient = createTestHTTPClient(
+    "downloadCompanyTargetFacilitiesExport",
+  );
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations
+    .downloadCompanyTargetFacilitiesExport({
+      companyId: 673655,
+      id: "<id>",
+    });
+  expect(result).toBeDefined();
+  expect(result!.result).toBeDefined();
+  expect(result!.result).toEqual({});
+});
+
+test("Organizations List Facility Vendors", async () => {
+  const testHttpClient = createTestHTTPClient("listFacilityVendors");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations.listFacilityVendors({
+    id: 970801,
+    itemsPerPage: 25,
+    desc: true,
+  });
+  expect(result).toBeDefined();
+  expect(result!.result).toBeDefined();
+  expect(result!.result).toEqual({
+    pager: {
+      baseUrl: "api/vendors/job_titles",
+      sort: "job,title",
+      desc: 0,
+      itemCount: 228,
+      itemsPerPage: 557,
+      page: 1,
+      useUrlParams: true,
+    },
+    items: [],
+  });
+});
+
+test("Organizations Export Facility Vendors", async () => {
+  const testHttpClient = createTestHTTPClient("exportFacilityVendors");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations.exportFacilityVendors({
+    id: 657024,
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    statusUrl: "https://classic-nectarine.net",
+    downloadUrl: "https://smooth-custody.org/",
+    statusId: "<id>",
+  });
+});
+
+test("Organizations Get Facility Vendors Export Status", async () => {
+  const testHttpClient = createTestHTTPClient("getFacilityVendorsExportStatus");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations
+    .getFacilityVendorsExportStatus({
+      id: 453991,
+      exportId: "<id>",
+    });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    ready: true,
+    statusId: "<id>",
+  });
+});
+
+test("Organizations Download Facility Vendors Export", async () => {
+  const testHttpClient = createTestHTTPClient("downloadFacilityVendorsExport");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.organizations
+    .downloadFacilityVendorsExport({
+      id: 615627,
+      exportId: "<id>",
+    });
+  expect(result).toBeDefined();
+  expect(result!.result).toBeDefined();
+  expect(result!.result).toEqual({});
+});

package/src/__tests__/reports.test.ts

@@ -0,0 +1,57 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { expect, test } from "vitest";
+import { GreenSecurity } from "../index.js";
+import { createTestHTTPClient } from "./testclient.js";
+
+test("Reports Initiate Scheduled Report", async () => {
+  const testHttpClient = createTestHTTPClient("initiateScheduledReport");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.reports.initiateScheduledReport({
+    scheduledReportId: 298326,
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    pollUrl: "https://vivid-spring.info/",
+    success: true,
+  });
+});
+
+test("Reports Get Full Report", async () => {
+  const testHttpClient = createTestHTTPClient("getFullReport");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.reports.getFullReport({
+    fullReportId: 350249,
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    fullReport: {
+      id: 833364,
+      reportClass: "<value>",
+      dataType: "blob",
+      dateSubmitted: new Date("2025-11-10T00:32:20.213Z"),
+      userId: 751048,
+      status: "completed",
+      reportUrl: "https://upright-litter.info/",
+    },
+    success: true,
+  });
+});

package/src/__tests__/smartBadgeGetPsks.test.ts

@@ -0,0 +1,76 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+// The parameters are declared, rather than `vi.fn(() => ...)`, so that mock.calls is typed as the
+// argument tuple. Without them it is typed `[][]`, destructuring `[route]` off it is a TS2493 error, and
+// tshy compiles this directory even though tsconfig.json excludes it — so it breaks SDK generation
+// rather than anything a local `tsc -p tsconfig.json` or `npm run lint` would report.
+const { doGetSingleMock } = vi.hoisted(() => ({
+  doGetSingleMock: vi.fn((_route: string, _options: unknown) =>
+    Promise.resolve([{ ok: true }, { status: "complete" }])
+  ),
+}));
+
+vi.mock("../admin-funcs/doAdmin.js", () => ({
+  $doGetSingle: doGetSingleMock,
+}));
+
+import { smartBadgeGetPsks } from "../admin-funcs/smartBadgeGetPsks.js";
+
+describe("smartBadgeGetPsks", () => {
+  beforeEach(() => {
+    doGetSingleMock.mockClear();
+  });
+
+  it("calls the badge-specific PSK endpoint with no query parameters", () => {
+    const request = smartBadgeGetPsks("c3000083ba4d");
+
+    expect(doGetSingleMock).toHaveBeenCalledWith("/smart-badges/c3000083ba4d/psks", {});
+    expect(request).toBeDefined();
+  });
+
+  // The MAC address is what scopes the response, so it has to reach the path rather than being
+  // dropped or sent as a query parameter. Percent-encoded, because this is interpolated into the path
+  // rather than passed through pathToFunc.
+  it("puts the MAC address in the path, percent-encoded", () => {
+    smartBadgeGetPsks("C3:00:00:83:BA:4D");
+
+    expect(doGetSingleMock).toHaveBeenLastCalledWith("/smart-badges/C3%3A00%3A00%3A83%3ABA%3A4D/psks", {});
+  });
+
+  // Encoding alone did not close this. `.` is in encodeURIComponent's unreserved set, so a bare `..`
+  // passed through untouched and _createRequest's `new URL(path, baseURL)` then canonicalized
+  // `/api/smart-badges/../psks` down to `/api/psks` — off the route entirely, before the backend saw
+  // anything. `.` collapsed to `/api/smart-badges/psks` the same way. Hence validation, not encoding.
+  it.each([["..", "dot-dot"], [".", "single dot"], ["../badge-firmware?x=", "traversal with query"], ["", "empty"]])(
+    "refuses to build a route from %s (%s)",
+    (macAddress) => {
+      expect(() => smartBadgeGetPsks(macAddress)).toThrow(/Invalid smart badge MAC address/);
+      expect(doGetSingleMock).not.toHaveBeenCalled();
+    }
+  );
+
+  it("refuses a MAC address with mixed separators", () => {
+    expect(() => smartBadgeGetPsks("c3:00-00:83:ba:4d")).toThrow(/Invalid smart badge MAC address/);
+  });
+
+  // The dot-separated form normalize_mac_address accepts, which cannot survive a Rails path segment.
+  it("refuses the dot-separated form", () => {
+    expect(() => smartBadgeGetPsks("c300.0083.ba4d")).toThrow(/Invalid smart badge MAC address/);
+  });
+
+  // Asserted on the URL the SDK actually requests, not just the argument handed to the helper, because
+  // the canonicalization that caused this happens in `new URL(path, baseURL)` rather than here.
+  it("survives URL resolution unchanged for every accepted form", () => {
+    const base = new URL("https://api.example.com/api/");
+
+    for (const mac of ["c3000083ba4d", "C3:00:00:83:BA:4D", "c3-00-00-83-ba-4d"]) {
+      doGetSingleMock.mockClear();
+      smartBadgeGetPsks(mac);
+      const [route] = doGetSingleMock.mock.calls.at(-1) ?? [];
+
+      const resolved = new URL(`/api${route}`, base);
+      expect(resolved.pathname).toBe(`/api/smart-badges/${encodeURIComponent(mac)}/psks`);
+      expect(resolved.pathname).toContain("/smart-badges/");
+    }
+  });
+});

package/src/__tests__/smartBadgeReportVerifiedPsk.test.ts

@@ -0,0 +1,61 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { doPostMock } = vi.hoisted(() => ({
+  doPostMock: vi.fn((_route: string, _body: unknown) => Promise.resolve([{ ok: true }, { status: "complete" }])),
+}));
+
+vi.mock("../admin-funcs/doAdmin.js", () => ({
+  $doPost: doPostMock,
+}));
+
+import { smartBadgeReportVerifiedPsk } from "../admin-funcs/smartBadgeReportVerifiedPsk.js";
+
+describe("smartBadgeReportVerifiedPsk", () => {
+  beforeEach(() => {
+    doPostMock.mockClear();
+  });
+
+  // Sending the key in the body rather than the query string is a security property of this change:
+  // query strings land in access and proxy logs. $doPost is what puts it in the body, so a switch to
+  // $doGetSingle-style query passing has to fail here.
+  it("sends the key in the request body, not the path or query", () => {
+    const psk = "d8e5f864952dfded7125ee61bd1d7925";
+
+    const request = smartBadgeReportVerifiedPsk("c3000083ba4d", { psk });
+
+    expect(doPostMock).toHaveBeenCalledWith("/smart-badges/c3000083ba4d/psk-verified", { psk });
+    expect(request).toBeDefined();
+  });
+
+  // This POST is authenticated, so a MAC that escapes the route redirects a write rather than a read.
+  // `..` is the case encoding could not catch: encodeURIComponent leaves `.` alone and _createRequest's
+  // `new URL(path, baseURL)` then canonicalizes `/api/smart-badges/../psk-verified` to
+  // `/api/psk-verified`.
+  it.each([["..", "dot-dot"], [".", "single dot"], ["../../zones/badge-write-failed", "traversal"], ["", "empty"]])(
+    "refuses to build a route from %s (%s)",
+    (macAddress) => {
+      expect(() => smartBadgeReportVerifiedPsk(macAddress, { psk: "d8e5f864952dfded7125ee61bd1d7925" })).toThrow(
+        /Invalid smart badge MAC address/
+      );
+      expect(doPostMock).not.toHaveBeenCalled();
+    }
+  );
+
+  // Asserted after URL resolution, since that is where the canonicalization happens.
+  it("keeps an accepted MAC address on the badge route through URL resolution", () => {
+    smartBadgeReportVerifiedPsk("c3:00:00:83:ba:4d", { psk: "d8e5f864952dfded7125ee61bd1d7925" });
+
+    const [route] = doPostMock.mock.calls.at(-1) ?? [];
+    const resolved = new URL(`/api${route}`, new URL("https://api.example.com/api/"));
+    expect(resolved.pathname).toBe("/api/smart-badges/c3%3A00%3A00%3A83%3Aba%3A4d/psk-verified");
+  });
+
+  it("does not put the key anywhere in the route", () => {
+    const psk = "d8e5f864952dfded7125ee61bd1d7925";
+
+    smartBadgeReportVerifiedPsk("c3000083ba4d", { psk });
+
+    const [route] = doPostMock.mock.calls.at(-1) ?? [];
+    expect(route).not.toContain(psk);
+  });
+});