@greensecurity/javascript-sdk 0.46.0-beta.1 → 0.46.0-beta.10

package/dist/esm/react-query/appsListAppVersions.js

@@ -0,0 +1,97 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+import { useQuery, useSuspenseQuery, } from "@tanstack/react-query";
+import { useGreenSecurityContext } from "./_context.js";
+import { buildAppsListAppVersionsQuery, prefetchAppsListAppVersions, queryKeyAppsListAppVersions, } from "./appsListAppVersions.core.js";
+export { buildAppsListAppVersionsQuery, prefetchAppsListAppVersions, queryKeyAppsListAppVersions, };
+/**
+ * List app versions with installation counts
+ *
+ * @remarks
+ * Lists every uploaded version of the app, with the review status of each and the number of
+ * installations that run it. `apps-cli status` shows the same information.
+ *
+ * The response is an object keyed by version string, in the order the versions were first
+ * uploaded. Every version is listed, including versions that are in review or
+ * rejected, which no installation runs. An app that hasn't been uploaded since review began has
+ * no versions yet, and the response is `{}`.
+ *
+ * A version that's uploaded more than once has one key. Its `status` is the status of the
+ * latest upload, and its counts cover every installation that runs an accepted upload of that
+ * version. A manifest without a `version` is listed under the key `""`.
+ *
+ * Each installation counts under the version it runs, which is the version its administrators
+ * last approved (see [Existing installations keep their version](/apps/security-and-review#existing-installations-keep-their-version)).
+ * **Site-wide installations aren't counted.** An installation for a whole site covers every
+ * user, company, facility, and health system in it, so the counts leave it out.
+ *
+ * **Permissions.** Accepts the app service account's permanent token, or the developer CLI
+ * token (`gsd_`, from `apps-cli login`) of an `owner` or `developer` of the app, as
+ * `Authorization: Bearer`. Any other app token gets `403`. Anyone else gets `404`, the same
+ * response as for an app id that doesn't exist. That includes a developer signed in with a
+ * browser session.
+ */
+export function useAppsListAppVersions(request, options) {
+    const client = useGreenSecurityContext();
+    return useQuery({
+        ...buildAppsListAppVersionsQuery(client, request, options),
+        ...options,
+    });
+}
+/**
+ * List app versions with installation counts
+ *
+ * @remarks
+ * Lists every uploaded version of the app, with the review status of each and the number of
+ * installations that run it. `apps-cli status` shows the same information.
+ *
+ * The response is an object keyed by version string, in the order the versions were first
+ * uploaded. Every version is listed, including versions that are in review or
+ * rejected, which no installation runs. An app that hasn't been uploaded since review began has
+ * no versions yet, and the response is `{}`.
+ *
+ * A version that's uploaded more than once has one key. Its `status` is the status of the
+ * latest upload, and its counts cover every installation that runs an accepted upload of that
+ * version. A manifest without a `version` is listed under the key `""`.
+ *
+ * Each installation counts under the version it runs, which is the version its administrators
+ * last approved (see [Existing installations keep their version](/apps/security-and-review#existing-installations-keep-their-version)).
+ * **Site-wide installations aren't counted.** An installation for a whole site covers every
+ * user, company, facility, and health system in it, so the counts leave it out.
+ *
+ * **Permissions.** Accepts the app service account's permanent token, or the developer CLI
+ * token (`gsd_`, from `apps-cli login`) of an `owner` or `developer` of the app, as
+ * `Authorization: Bearer`. Any other app token gets `403`. Anyone else gets `404`, the same
+ * response as for an app id that doesn't exist. That includes a developer signed in with a
+ * browser session.
+ */
+export function useAppsListAppVersionsSuspense(request, options) {
+    const client = useGreenSecurityContext();
+    return useSuspenseQuery({
+        ...buildAppsListAppVersionsQuery(client, request, options),
+        ...options,
+    });
+}
+export function setAppsListAppVersionsData(client, queryKeyBase, data) {
+    const key = queryKeyAppsListAppVersions(...queryKeyBase);
+    return client.setQueryData(key, data);
+}
+export function invalidateAppsListAppVersions(client, queryKeyBase, filters) {
+    return client.invalidateQueries({
+        ...filters,
+        queryKey: [
+            "@greensecurity/javascript-sdk",
+            "apps",
+            "listAppVersions",
+            ...queryKeyBase,
+        ],
+    });
+}
+export function invalidateAllAppsListAppVersions(client, filters) {
+    return client.invalidateQueries({
+        ...filters,
+        queryKey: ["@greensecurity/javascript-sdk", "apps", "listAppVersions"],
+    });
+}
+//# sourceMappingURL=appsListAppVersions.js.map

package/dist/esm/react-query/appsListAppVersions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsListAppVersions.js","sourceRoot":"","sources":["../../../src/react-query/appsListAppVersions.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAGL,QAAQ,EAER,gBAAgB,GAEjB,MAAM,uBAAuB,CAAC;AAa/B,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAMxD,OAAO,EAEL,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,GAC5B,CAAC;AAcF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA0C,EAC1C,OAGC;IAED,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,QAAQ,CAAC;QACd,GAAG,6BAA6B,CAC9B,MAAM,EACN,OAAO,EACP,OAAO,CACR;QACD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAA0C,EAC1C,OAGC;IAKD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,gBAAgB,CAAC;QACtB,GAAG,6BAA6B,CAC9B,MAAM,EACN,OAAO,EACP,OAAO,CACR;QACD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAmB,EACnB,YAA6B,EAC7B,IAAkC;IAElC,MAAM,GAAG,GAAG,2BAA2B,CAAC,GAAG,YAAY,CAAC,CAAC;IAEzD,OAAO,MAAM,CAAC,YAAY,CAA+B,GAAG,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,MAAmB,EACnB,YAA8C,EAC9C,OAA0E;IAE1E,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAC9B,GAAG,OAAO;QACV,QAAQ,EAAE;YACR,+BAA+B;YAC/B,MAAM;YACN,iBAAiB;YACjB,GAAG,YAAY;SAChB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAAmB,EACnB,OAA0E;IAE1E,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAC9B,GAAG,OAAO;QACV,QAAQ,EAAE,CAAC,+BAA+B,EAAE,MAAM,EAAE,iBAAiB,CAAC;KACvE,CAAC,CAAC;AACL,CAAC"}

package/dist/esm/react-query/appsPublishAppManifest.d.ts

@@ -0,0 +1,63 @@
+import { MutationKey, UseMutationResult } from "@tanstack/react-query";
+import { GreenSecurityCore } from "../core.js";
+import { RequestOptions } from "../lib/sdks.js";
+import * as components from "../models/components/index.js";
+import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
+import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { MutationHookOptions } from "./_types.js";
+export type AppsPublishAppManifestMutationVariables = {
+    request: components.AppManifest;
+    options?: RequestOptions;
+};
+export type AppsPublishAppManifestMutationData = operations.PublishAppManifestPublishAppManifestOk;
+export type AppsPublishAppManifestMutationError = errors.ApiErrorResponse | errors.UnprocessableEntityOrValidationError | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
+/**
+ * Publish an app manifest
+ *
+ * @remarks
+ * Publishes a new version of your marketplace app's manifest: its listing, the permissions
+ * it requests, its UI bundle and views, and the extra origins its sandbox may reach.
+ * `apps-cli upload` calls it after checking that the hosted bundle matches your local
+ * build.
+ *
+ * Every submission is reviewed against the app's last accepted version, and the response's
+ * `status` says what became of it: `accepted`, `screening` (the network sources it adds are
+ * being checked), `pending_review` (it adds a sensitive permission and waits for a Green
+ * Security admin) or `rejected`, with `review_reasons`. A rejection still answers `200`, with
+ * `success` false. Only an accepted version replaces the permissions granted to the app, and
+ * new installations get it. An installation it adds nothing for uses it from the next time
+ * its views are opened; one it adds permissions or network sources for keeps its version
+ * until one of its admins approves the new ones. So publish only once the bundle at
+ * `ui_extensions.bundle.url` is live and matches `integrity`, and keep earlier bundles
+ * hosted. An upload that repeats the last accepted manifest exactly changes nothing.
+ *
+ * Leave out `ui_extensions` to publish a back-end-only app, one with no views that works
+ * only through its service account (see the second example). With a `version`, the
+ * manifest may only send installers to a view it has: `post_install_action.type`
+ * `app_settings_view` needs a `settings` view, and `app_main_view` needs a view for a
+ * viewport other than `settings`, or the manifest is refused with `422`. So an app whose
+ * only view is `settings` uses `app_settings_view`, and a back-end-only app uses `url` or
+ * leaves `post_install_action` out. Left out, the action follows the app's views:
+ * `app_main_view`, `app_settings_view` for a settings-only app, or no post-install step for
+ * a back-end-only app.
+ *
+ * Each permission must be an existing Green Security permission or a platform permission
+ * such as `app_secrets.write` (see `AppManifestPermission`). A manifest that names any
+ * other permission is refused with `400` "Permission '<name>' not found." and writes
+ * nothing: the app, its role and its role's permissions are left as they were.
+ *
+ * **Permissions.** Accepts the app service account's permanent token, or a developer CLI
+ * token (`gsd_`) of a user who is an `owner` or `developer` of the app, as
+ * `Authorization: Bearer`. App user and installation tokens are refused.
+ */
+export declare function useAppsPublishAppManifestMutation(options?: MutationHookOptions<AppsPublishAppManifestMutationData, AppsPublishAppManifestMutationError, AppsPublishAppManifestMutationVariables>): UseMutationResult<AppsPublishAppManifestMutationData, AppsPublishAppManifestMutationError, AppsPublishAppManifestMutationVariables>;
+export declare function mutationKeyAppsPublishAppManifest(): MutationKey;
+export declare function buildAppsPublishAppManifestMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
+    mutationKey: MutationKey;
+    mutationFn: (variables: AppsPublishAppManifestMutationVariables) => Promise<AppsPublishAppManifestMutationData>;
+};
+//# sourceMappingURL=appsPublishAppManifest.d.ts.map

package/dist/esm/react-query/appsPublishAppManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsPublishAppManifest.d.ts","sourceRoot":"","sources":["../../../src/react-query/appsPublishAppManifest.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,uCAAuC,GAAG;IACpD,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC;IAChC,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAC5C,UAAU,CAAC,sCAAsC,CAAC;AAEpD,MAAM,MAAM,mCAAmC,GAC3C,MAAM,CAAC,gBAAgB,GACvB,MAAM,CAAC,oCAAoC,GAC3C,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,CAAC,EAAE,mBAAmB,CAC3B,kCAAkC,EAClC,mCAAmC,EACnC,uCAAuC,CACxC,GACA,iBAAiB,CAClB,kCAAkC,EAClC,mCAAmC,EACnC,uCAAuC,CACxC,CAMA;AAED,wBAAgB,iCAAiC,IAAI,WAAW,CAE/D;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,uCAAuC,KAC/C,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAClD,CA0BA"}

package/dist/esm/react-query/appsPublishAppManifest.js

@@ -0,0 +1,75 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+import { useMutation, } from "@tanstack/react-query";
+import { appsPublishAppManifest } from "../funcs/appsPublishAppManifest.js";
+import { combineSignals } from "../lib/primitives.js";
+import { unwrapAsync } from "../types/fp.js";
+import { useGreenSecurityContext } from "./_context.js";
+/**
+ * Publish an app manifest
+ *
+ * @remarks
+ * Publishes a new version of your marketplace app's manifest: its listing, the permissions
+ * it requests, its UI bundle and views, and the extra origins its sandbox may reach.
+ * `apps-cli upload` calls it after checking that the hosted bundle matches your local
+ * build.
+ *
+ * Every submission is reviewed against the app's last accepted version, and the response's
+ * `status` says what became of it: `accepted`, `screening` (the network sources it adds are
+ * being checked), `pending_review` (it adds a sensitive permission and waits for a Green
+ * Security admin) or `rejected`, with `review_reasons`. A rejection still answers `200`, with
+ * `success` false. Only an accepted version replaces the permissions granted to the app, and
+ * new installations get it. An installation it adds nothing for uses it from the next time
+ * its views are opened; one it adds permissions or network sources for keeps its version
+ * until one of its admins approves the new ones. So publish only once the bundle at
+ * `ui_extensions.bundle.url` is live and matches `integrity`, and keep earlier bundles
+ * hosted. An upload that repeats the last accepted manifest exactly changes nothing.
+ *
+ * Leave out `ui_extensions` to publish a back-end-only app, one with no views that works
+ * only through its service account (see the second example). With a `version`, the
+ * manifest may only send installers to a view it has: `post_install_action.type`
+ * `app_settings_view` needs a `settings` view, and `app_main_view` needs a view for a
+ * viewport other than `settings`, or the manifest is refused with `422`. So an app whose
+ * only view is `settings` uses `app_settings_view`, and a back-end-only app uses `url` or
+ * leaves `post_install_action` out. Left out, the action follows the app's views:
+ * `app_main_view`, `app_settings_view` for a settings-only app, or no post-install step for
+ * a back-end-only app.
+ *
+ * Each permission must be an existing Green Security permission or a platform permission
+ * such as `app_secrets.write` (see `AppManifestPermission`). A manifest that names any
+ * other permission is refused with `400` "Permission '<name>' not found." and writes
+ * nothing: the app, its role and its role's permissions are left as they were.
+ *
+ * **Permissions.** Accepts the app service account's permanent token, or a developer CLI
+ * token (`gsd_`) of a user who is an `owner` or `developer` of the app, as
+ * `Authorization: Bearer`. App user and installation tokens are refused.
+ */
+export function useAppsPublishAppManifestMutation(options) {
+    const client = useGreenSecurityContext();
+    return useMutation({
+        ...buildAppsPublishAppManifestMutation(client, options),
+        ...options,
+    });
+}
+export function mutationKeyAppsPublishAppManifest() {
+    return ["@greensecurity/javascript-sdk", "apps", "publishAppManifest"];
+}
+export function buildAppsPublishAppManifestMutation(client$, hookOptions) {
+    return {
+        mutationKey: mutationKeyAppsPublishAppManifest(),
+        mutationFn: function appsPublishAppManifestMutationFn({ request, options, }) {
+            const mergedOptions = {
+                ...hookOptions,
+                ...options,
+                fetchOptions: {
+                    ...hookOptions?.fetchOptions,
+                    ...options?.fetchOptions,
+                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
+                },
+            };
+            return unwrapAsync(appsPublishAppManifest(client$, request, mergedOptions));
+        },
+    };
+}
+//# sourceMappingURL=appsPublishAppManifest.js.map

package/dist/esm/react-query/appsPublishAppManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsPublishAppManifest.js","sourceRoot":"","sources":["../../../src/react-query/appsPublishAppManifest.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAetD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAuBxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,mCAAmC,CAAC,MAAM,EAAE,OAAO,CAAC;QACvD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,CAAC,+BAA+B,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,iCAAiC,EAAE;QAChD,UAAU,EAAE,SAAS,gCAAgC,CAAC,EACpD,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,sBAAsB,CACvC,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/react-query/appsRemoveAppDeveloper.d.ts

@@ -0,0 +1,35 @@
+import { MutationKey, UseMutationResult } from "@tanstack/react-query";
+import { GreenSecurityCore } from "../core.js";
+import { RequestOptions } from "../lib/sdks.js";
+import * as components from "../models/components/index.js";
+import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
+import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { MutationHookOptions } from "./_types.js";
+export type AppsRemoveAppDeveloperMutationVariables = {
+    request: operations.RemoveAppDeveloperRequest;
+    options?: RequestOptions;
+};
+export type AppsRemoveAppDeveloperMutationData = components.DeleteApiResponse;
+export type AppsRemoveAppDeveloperMutationError = errors.ApiErrorResponse | errors.UnprocessableEntityOrValidationError | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
+/**
+ * Remove an app developer
+ *
+ * @remarks
+ * Removes a user from the app's developers and closes their dev sessions for it. The app's
+ * last `owner` cannot be removed (`409`).
+ *
+ * **Permissions.** Accepts the app service account's permanent token, or a developer CLI
+ * token (`gsd_`) of an `owner` of the app, as `Authorization: Bearer`. Anyone else is told
+ * the app does not exist (`404`).
+ */
+export declare function useAppsRemoveAppDeveloperMutation(options?: MutationHookOptions<AppsRemoveAppDeveloperMutationData, AppsRemoveAppDeveloperMutationError, AppsRemoveAppDeveloperMutationVariables>): UseMutationResult<AppsRemoveAppDeveloperMutationData, AppsRemoveAppDeveloperMutationError, AppsRemoveAppDeveloperMutationVariables>;
+export declare function mutationKeyAppsRemoveAppDeveloper(): MutationKey;
+export declare function buildAppsRemoveAppDeveloperMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
+    mutationKey: MutationKey;
+    mutationFn: (variables: AppsRemoveAppDeveloperMutationVariables) => Promise<AppsRemoveAppDeveloperMutationData>;
+};
+//# sourceMappingURL=appsRemoveAppDeveloper.d.ts.map

package/dist/esm/react-query/appsRemoveAppDeveloper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsRemoveAppDeveloper.d.ts","sourceRoot":"","sources":["../../../src/react-query/appsRemoveAppDeveloper.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,uCAAuC,GAAG;IACpD,OAAO,EAAE,UAAU,CAAC,yBAAyB,CAAC;IAC9C,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG,UAAU,CAAC,iBAAiB,CAAC;AAE9E,MAAM,MAAM,mCAAmC,GAC3C,MAAM,CAAC,gBAAgB,GACvB,MAAM,CAAC,oCAAoC,GAC3C,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,CAAC,EAAE,mBAAmB,CAC3B,kCAAkC,EAClC,mCAAmC,EACnC,uCAAuC,CACxC,GACA,iBAAiB,CAClB,kCAAkC,EAClC,mCAAmC,EACnC,uCAAuC,CACxC,CAMA;AAED,wBAAgB,iCAAiC,IAAI,WAAW,CAE/D;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,uCAAuC,KAC/C,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAClD,CA0BA"}

package/dist/esm/react-query/appsRemoveAppDeveloper.js

@@ -0,0 +1,47 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+import { useMutation, } from "@tanstack/react-query";
+import { appsRemoveAppDeveloper } from "../funcs/appsRemoveAppDeveloper.js";
+import { combineSignals } from "../lib/primitives.js";
+import { unwrapAsync } from "../types/fp.js";
+import { useGreenSecurityContext } from "./_context.js";
+/**
+ * Remove an app developer
+ *
+ * @remarks
+ * Removes a user from the app's developers and closes their dev sessions for it. The app's
+ * last `owner` cannot be removed (`409`).
+ *
+ * **Permissions.** Accepts the app service account's permanent token, or a developer CLI
+ * token (`gsd_`) of an `owner` of the app, as `Authorization: Bearer`. Anyone else is told
+ * the app does not exist (`404`).
+ */
+export function useAppsRemoveAppDeveloperMutation(options) {
+    const client = useGreenSecurityContext();
+    return useMutation({
+        ...buildAppsRemoveAppDeveloperMutation(client, options),
+        ...options,
+    });
+}
+export function mutationKeyAppsRemoveAppDeveloper() {
+    return ["@greensecurity/javascript-sdk", "apps", "removeAppDeveloper"];
+}
+export function buildAppsRemoveAppDeveloperMutation(client$, hookOptions) {
+    return {
+        mutationKey: mutationKeyAppsRemoveAppDeveloper(),
+        mutationFn: function appsRemoveAppDeveloperMutationFn({ request, options, }) {
+            const mergedOptions = {
+                ...hookOptions,
+                ...options,
+                fetchOptions: {
+                    ...hookOptions?.fetchOptions,
+                    ...options?.fetchOptions,
+                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
+                },
+            };
+            return unwrapAsync(appsRemoveAppDeveloper(client$, request, mergedOptions));
+        },
+    };
+}
+//# sourceMappingURL=appsRemoveAppDeveloper.js.map

package/dist/esm/react-query/appsRemoveAppDeveloper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsRemoveAppDeveloper.js","sourceRoot":"","sources":["../../../src/react-query/appsRemoveAppDeveloper.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAetD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAsBxD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,mCAAmC,CAAC,MAAM,EAAE,OAAO,CAAC;QACvD,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,CAAC,+BAA+B,EAAE,MAAM,EAAE,oBAAoB,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,iCAAiC,EAAE;QAChD,UAAU,EAAE,SAAS,gCAAgC,CAAC,EACpD,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,sBAAsB,CACvC,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/react-query/appsRotateAppWebhookEndpointSecret.d.ts

@@ -0,0 +1,49 @@
+import { MutationKey, UseMutationResult } from "@tanstack/react-query";
+import { GreenSecurityCore } from "../core.js";
+import { RequestOptions } from "../lib/sdks.js";
+import * as components from "../models/components/index.js";
+import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
+import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import * as operations from "../models/operations/index.js";
+import { MutationHookOptions } from "./_types.js";
+export type AppsRotateAppWebhookEndpointSecretMutationVariables = {
+    request: operations.RotateAppWebhookEndpointSecretRotateAppWebhookEndpointSecretRequest;
+    options?: RequestOptions;
+};
+export type AppsRotateAppWebhookEndpointSecretMutationData = components.AppWebhookEndpointSecret;
+export type AppsRotateAppWebhookEndpointSecretMutationError = errors.ApiErrorResponse | errors.UnprocessableEntityOrValidationError | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
+/**
+ * Rotate your app's webhook signing secret
+ *
+ * @remarks
+ * Issues a new signing secret for your app's own webhook endpoint (the one its manifest's
+ * `webhooks` declares) and returns it. This is the only way to obtain the secret, and the only
+ * response that ever carries it.
+ *
+ * Call it once after the first publish that adds `webhooks`: the endpoint is created with a
+ * secret nobody has seen, so deliveries fail your signature check until you rotate. Each retry
+ * is signed again when it is sent, so a delivery still being retried (for about 50 minutes after
+ * it was first sent) verifies once you have the new secret; reconcile anything older with
+ * `GET /marketplace/activations`. Call it again whenever you want to replace the secret or have lost it. After the
+ * first rotation, the secret being replaced keeps signing for 24 hours, next to the new one, so
+ * you can deploy the new secret without rejecting deliveries already on their way.
+ *
+ * Changing `webhooks.url` or `webhooks.events` in a later publish keeps the secret.
+ *
+ * **Permissions.** Accepts only the app service account's own unscoped token, as
+ * `Authorization: Bearer`: its permanent token, or an access token from `client_credentials`
+ * issued without `activation_id` or `scope`. App tokens (`gsu_`, `gsi_`, `gsd_`, and the
+ * `gsdr_` refresh token) and a token narrowed with `scope` are refused with `403`. A `token`
+ * query parameter is refused with `401`, even alongside the header. An app the caller is not the
+ * service account of reads as `404`, the same as one that does not exist.
+ */
+export declare function useAppsRotateAppWebhookEndpointSecretMutation(options?: MutationHookOptions<AppsRotateAppWebhookEndpointSecretMutationData, AppsRotateAppWebhookEndpointSecretMutationError, AppsRotateAppWebhookEndpointSecretMutationVariables>): UseMutationResult<AppsRotateAppWebhookEndpointSecretMutationData, AppsRotateAppWebhookEndpointSecretMutationError, AppsRotateAppWebhookEndpointSecretMutationVariables>;
+export declare function mutationKeyAppsRotateAppWebhookEndpointSecret(): MutationKey;
+export declare function buildAppsRotateAppWebhookEndpointSecretMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
+    mutationKey: MutationKey;
+    mutationFn: (variables: AppsRotateAppWebhookEndpointSecretMutationVariables) => Promise<AppsRotateAppWebhookEndpointSecretMutationData>;
+};
+//# sourceMappingURL=appsRotateAppWebhookEndpointSecret.d.ts.map

package/dist/esm/react-query/appsRotateAppWebhookEndpointSecret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsRotateAppWebhookEndpointSecret.d.ts","sourceRoot":"","sources":["../../../src/react-query/appsRotateAppWebhookEndpointSecret.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,mDAAmD,GAAG;IAChE,OAAO,EACL,UAAU,CAAC,mEAAmE,CAAC;IACjF,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,8CAA8C,GACxD,UAAU,CAAC,wBAAwB,CAAC;AAEtC,MAAM,MAAM,+CAA+C,GACvD,MAAM,CAAC,gBAAgB,GACvB,MAAM,CAAC,oCAAoC,GAC3C,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,6CAA6C,CAC3D,OAAO,CAAC,EAAE,mBAAmB,CAC3B,8CAA8C,EAC9C,+CAA+C,EAC/C,mDAAmD,CACpD,GACA,iBAAiB,CAClB,8CAA8C,EAC9C,+CAA+C,EAC/C,mDAAmD,CACpD,CAMA;AAED,wBAAgB,6CAA6C,IAAI,WAAW,CAM3E;AAED,wBAAgB,+CAA+C,CAC7D,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,mDAAmD,KAC3D,OAAO,CAAC,8CAA8C,CAAC,CAAC;CAC9D,CA0BA"}

package/dist/esm/react-query/appsRotateAppWebhookEndpointSecret.js

@@ -0,0 +1,65 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+import { useMutation, } from "@tanstack/react-query";
+import { appsRotateAppWebhookEndpointSecret } from "../funcs/appsRotateAppWebhookEndpointSecret.js";
+import { combineSignals } from "../lib/primitives.js";
+import { unwrapAsync } from "../types/fp.js";
+import { useGreenSecurityContext } from "./_context.js";
+/**
+ * Rotate your app's webhook signing secret
+ *
+ * @remarks
+ * Issues a new signing secret for your app's own webhook endpoint (the one its manifest's
+ * `webhooks` declares) and returns it. This is the only way to obtain the secret, and the only
+ * response that ever carries it.
+ *
+ * Call it once after the first publish that adds `webhooks`: the endpoint is created with a
+ * secret nobody has seen, so deliveries fail your signature check until you rotate. Each retry
+ * is signed again when it is sent, so a delivery still being retried (for about 50 minutes after
+ * it was first sent) verifies once you have the new secret; reconcile anything older with
+ * `GET /marketplace/activations`. Call it again whenever you want to replace the secret or have lost it. After the
+ * first rotation, the secret being replaced keeps signing for 24 hours, next to the new one, so
+ * you can deploy the new secret without rejecting deliveries already on their way.
+ *
+ * Changing `webhooks.url` or `webhooks.events` in a later publish keeps the secret.
+ *
+ * **Permissions.** Accepts only the app service account's own unscoped token, as
+ * `Authorization: Bearer`: its permanent token, or an access token from `client_credentials`
+ * issued without `activation_id` or `scope`. App tokens (`gsu_`, `gsi_`, `gsd_`, and the
+ * `gsdr_` refresh token) and a token narrowed with `scope` are refused with `403`. A `token`
+ * query parameter is refused with `401`, even alongside the header. An app the caller is not the
+ * service account of reads as `404`, the same as one that does not exist.
+ */
+export function useAppsRotateAppWebhookEndpointSecretMutation(options) {
+    const client = useGreenSecurityContext();
+    return useMutation({
+        ...buildAppsRotateAppWebhookEndpointSecretMutation(client, options),
+        ...options,
+    });
+}
+export function mutationKeyAppsRotateAppWebhookEndpointSecret() {
+    return [
+        "@greensecurity/javascript-sdk",
+        "apps",
+        "rotateAppWebhookEndpointSecret",
+    ];
+}
+export function buildAppsRotateAppWebhookEndpointSecretMutation(client$, hookOptions) {
+    return {
+        mutationKey: mutationKeyAppsRotateAppWebhookEndpointSecret(),
+        mutationFn: function appsRotateAppWebhookEndpointSecretMutationFn({ request, options, }) {
+            const mergedOptions = {
+                ...hookOptions,
+                ...options,
+                fetchOptions: {
+                    ...hookOptions?.fetchOptions,
+                    ...options?.fetchOptions,
+                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
+                },
+            };
+            return unwrapAsync(appsRotateAppWebhookEndpointSecret(client$, request, mergedOptions));
+        },
+    };
+}
+//# sourceMappingURL=appsRotateAppWebhookEndpointSecret.js.map

package/dist/esm/react-query/appsRotateAppWebhookEndpointSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsRotateAppWebhookEndpointSecret.js","sourceRoot":"","sources":["../../../src/react-query/appsRotateAppWebhookEndpointSecret.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAEL,WAAW,GAEZ,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAetD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAwBxD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,6CAA6C,CAC3D,OAIC;IAMD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;IACzC,OAAO,WAAW,CAAC;QACjB,GAAG,+CAA+C,CAAC,MAAM,EAAE,OAAO,CAAC;QACnE,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6CAA6C;IAC3D,OAAO;QACL,+BAA+B;QAC/B,MAAM;QACN,gCAAgC;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+CAA+C,CAC7D,OAA0B,EAC1B,WAA4B;IAO5B,OAAO;QACL,WAAW,EAAE,6CAA6C,EAAE;QAC5D,UAAU,EAAE,SAAS,4CAA4C,CAAC,EAChE,OAAO,EACP,OAAO,GACR;YACC,MAAM,aAAa,GAAG;gBACpB,GAAG,WAAW;gBACd,GAAG,OAAO;gBACV,YAAY,EAAE;oBACZ,GAAG,WAAW,EAAE,YAAY;oBAC5B,GAAG,OAAO,EAAE,YAAY;oBACxB,MAAM,EAAE,cAAc,CACpB,WAAW,EAAE,YAAY,EAAE,MAAM,EACjC,OAAO,EAAE,YAAY,EAAE,MAAM,CAC9B;iBACF;aACF,CAAC;YACF,OAAO,WAAW,CAAC,kCAAkC,CACnD,OAAO,EACP,OAAO,EACP,aAAa,CACd,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/esm/react-query/appsSetAppSecret.d.ts

@@ -0,0 +1,70 @@
+import { MutationKey, UseMutationResult } from "@tanstack/react-query";
+import { GreenSecurityCore } from "../core.js";
+import { RequestOptions } from "../lib/sdks.js";
+import * as components from "../models/components/index.js";
+import { GreenSecurityError } from "../models/errors/greensecurityerror.js";
+import { ConnectionError, InvalidRequestError, RequestAbortedError, RequestTimeoutError, UnexpectedClientError } from "../models/errors/httpclienterrors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
+import { SDKValidationError } from "../models/errors/sdkvalidationerror.js";
+import { MutationHookOptions } from "./_types.js";
+export type AppsSetAppSecretMutationVariables = {
+    request: components.AppSecretSetRequest;
+    options?: RequestOptions;
+};
+export type AppsSetAppSecretMutationData = components.AppSecret;
+export type AppsSetAppSecretMutationError = errors.ApiErrorResponse | errors.AppSecretsUnprocessable | GreenSecurityError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError;
+/**
+ * Set an app secret
+ *
+ * @remarks
+ * Creates a secret, or replaces the payload and expiry of the secret with the same `name`
+ * in the same scope. Secrets are encrypted at rest and belong to one activation of your
+ * app: the app token's own activation, or the `activation_id` the service account sends.
+ * Removing that activation, or changing what it covers (its app, or the site, system,
+ * facility, company or user it is installed for), deletes all of its secrets.
+ *
+ * Each scope holds at most 25 secrets, and a payload is at most 8192 bytes once UTF-8
+ * encoded (fewer characters than that if it has multi-byte ones). `expires_at`, when
+ * given, must be in the future and less than 100 years away.
+ *
+ * **Permissions.** Send one of these as `Authorization: Bearer`; any other token is refused
+ * with `403`.
+ *
+ * - **An app token**: an app user token (`gsu_`) or an app installation token (`gsi_`). The
+ *   activation comes from the token, so leave `activation_id` out; if you send it, it must be
+ *   the token's own activation (`403` otherwise). Either token may write to the `installation`
+ *   scope. For the `user` scope:
+ *   - an app user token reaches only its own user (`user_id` may be left out);
+ *   - an installation token the host minted for one of your views reaches only that view's
+ *     viewer (`user_id` may be left out);
+ *   - an installation token from `client_credentials` reaches any user its activation
+ *     covers, and `user_id` is required.
+ * - **Your app's service account**: its permanent token, or a short-lived OAuth access token
+ *   issued to it without `scope` (by `client_credentials` without `activation_id`, or by the
+ *   `refresh_token` grant). A token issued with `scope` is refused with `403`, and any other
+ *   kind of token, such as a one-time sign-in link token, with `403` "This kind of token may
+ *   not access app secrets". It has no activation of its own, so `activation_id` is required
+ *   (`422` without it) and must be one of your app's activations (`403` otherwise). Its `user`
+ *   scope reaches any user the activation covers, and `user_id` is required.
+ *
+ * A `user_id` that does not exist and one the token may not reach get the same `403` "This
+ * credential may not access secrets of that user", so the endpoint never reveals which user
+ * ids exist.
+ *
+ * Whatever the token, your app must hold the platform permission `app_secrets.write`: list
+ * it in the manifest's `permissions` and upload. Until then every Secret Store call is
+ * refused with `403` "This app has not been granted app_secrets.write." For the service
+ * account this is checked before `activation_id` is looked at, so an app without the
+ * permission gets that answer whether or not it sent an `activation_id`.
+ *
+ * Every response carries `Cache-Control: no-store`, errors included, so no cache keeps a
+ * secret.
+ */
+export declare function useAppsSetAppSecretMutation(options?: MutationHookOptions<AppsSetAppSecretMutationData, AppsSetAppSecretMutationError, AppsSetAppSecretMutationVariables>): UseMutationResult<AppsSetAppSecretMutationData, AppsSetAppSecretMutationError, AppsSetAppSecretMutationVariables>;
+export declare function mutationKeyAppsSetAppSecret(): MutationKey;
+export declare function buildAppsSetAppSecretMutation(client$: GreenSecurityCore, hookOptions?: RequestOptions): {
+    mutationKey: MutationKey;
+    mutationFn: (variables: AppsSetAppSecretMutationVariables) => Promise<AppsSetAppSecretMutationData>;
+};
+//# sourceMappingURL=appsSetAppSecret.d.ts.map

package/dist/esm/react-query/appsSetAppSecret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsSetAppSecret.d.ts","sourceRoot":"","sources":["../../../src/react-query/appsSetAppSecret.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EAEX,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,KAAK,MAAM,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6CAA6C,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAG5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC;IACxC,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,UAAU,CAAC,SAAS,CAAC;AAEhE,MAAM,MAAM,6BAA6B,GACrC,MAAM,CAAC,gBAAgB,GACvB,MAAM,CAAC,uBAAuB,GAC9B,kBAAkB,GAClB,uBAAuB,GACvB,eAAe,GACf,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,CAAC,EAAE,mBAAmB,CAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,CAClC,GACA,iBAAiB,CAClB,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,CAClC,CAMA;AAED,wBAAgB,2BAA2B,IAAI,WAAW,CAEzD;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,iBAAiB,EAC1B,WAAW,CAAC,EAAE,cAAc,GAC3B;IACD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,CACV,SAAS,EAAE,iCAAiC,KACzC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC5C,CA0BA"}

package/dist/esm/react-query/appsSetAppSecret.js

@@ -0,0 +1,83 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+import { useMutation, } from "@tanstack/react-query";
+import { appsSetAppSecret } from "../funcs/appsSetAppSecret.js";
+import { combineSignals } from "../lib/primitives.js";
+import { unwrapAsync } from "../types/fp.js";
+import { useGreenSecurityContext } from "./_context.js";
+/**
+ * Set an app secret
+ *
+ * @remarks
+ * Creates a secret, or replaces the payload and expiry of the secret with the same `name`
+ * in the same scope. Secrets are encrypted at rest and belong to one activation of your
+ * app: the app token's own activation, or the `activation_id` the service account sends.
+ * Removing that activation, or changing what it covers (its app, or the site, system,
+ * facility, company or user it is installed for), deletes all of its secrets.
+ *
+ * Each scope holds at most 25 secrets, and a payload is at most 8192 bytes once UTF-8
+ * encoded (fewer characters than that if it has multi-byte ones). `expires_at`, when
+ * given, must be in the future and less than 100 years away.
+ *
+ * **Permissions.** Send one of these as `Authorization: Bearer`; any other token is refused
+ * with `403`.
+ *
+ * - **An app token**: an app user token (`gsu_`) or an app installation token (`gsi_`). The
+ *   activation comes from the token, so leave `activation_id` out; if you send it, it must be
+ *   the token's own activation (`403` otherwise). Either token may write to the `installation`
+ *   scope. For the `user` scope:
+ *   - an app user token reaches only its own user (`user_id` may be left out);
+ *   - an installation token the host minted for one of your views reaches only that view's
+ *     viewer (`user_id` may be left out);
+ *   - an installation token from `client_credentials` reaches any user its activation
+ *     covers, and `user_id` is required.
+ * - **Your app's service account**: its permanent token, or a short-lived OAuth access token
+ *   issued to it without `scope` (by `client_credentials` without `activation_id`, or by the
+ *   `refresh_token` grant). A token issued with `scope` is refused with `403`, and any other
+ *   kind of token, such as a one-time sign-in link token, with `403` "This kind of token may
+ *   not access app secrets". It has no activation of its own, so `activation_id` is required
+ *   (`422` without it) and must be one of your app's activations (`403` otherwise). Its `user`
+ *   scope reaches any user the activation covers, and `user_id` is required.
+ *
+ * A `user_id` that does not exist and one the token may not reach get the same `403` "This
+ * credential may not access secrets of that user", so the endpoint never reveals which user
+ * ids exist.
+ *
+ * Whatever the token, your app must hold the platform permission `app_secrets.write`: list
+ * it in the manifest's `permissions` and upload. Until then every Secret Store call is
+ * refused with `403` "This app has not been granted app_secrets.write." For the service
+ * account this is checked before `activation_id` is looked at, so an app without the
+ * permission gets that answer whether or not it sent an `activation_id`.
+ *
+ * Every response carries `Cache-Control: no-store`, errors included, so no cache keeps a
+ * secret.
+ */
+export function useAppsSetAppSecretMutation(options) {
+    const client = useGreenSecurityContext();
+    return useMutation({
+        ...buildAppsSetAppSecretMutation(client, options),
+        ...options,
+    });
+}
+export function mutationKeyAppsSetAppSecret() {
+    return ["@greensecurity/javascript-sdk", "apps", "setAppSecret"];
+}
+export function buildAppsSetAppSecretMutation(client$, hookOptions) {
+    return {
+        mutationKey: mutationKeyAppsSetAppSecret(),
+        mutationFn: function appsSetAppSecretMutationFn({ request, options, }) {
+            const mergedOptions = {
+                ...hookOptions,
+                ...options,
+                fetchOptions: {
+                    ...hookOptions?.fetchOptions,
+                    ...options?.fetchOptions,
+                    signal: combineSignals(hookOptions?.fetchOptions?.signal, options?.fetchOptions?.signal),
+                },
+            };
+            return unwrapAsync(appsSetAppSecret(client$, request, mergedOptions));
+        },
+    };
+}
+//# sourceMappingURL=appsSetAppSecret.js.map