@greensecurity/javascript-sdk 0.46.0-beta.1 → 0.46.0-beta.11

package/src/__tests__/appsApproveDevice.test.ts

@@ -0,0 +1,55 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { doPostMock } = vi.hoisted(() => ({
+  doPostMock: vi.fn((_route: string, _body: unknown, _options?: unknown) =>
+    Promise.resolve([{ ok: true }, { status: "complete" }])
+  ),
+}));
+
+vi.mock("../admin-funcs/doAdmin.js", () => ({
+  $doPost: doPostMock,
+}));
+
+import { appsApproveDevice } from "../admin-funcs/appsApproveDevice.js";
+import { __internal } from "../index.extras.js";
+
+describe("appsApproveDevice", () => {
+  beforeEach(() => {
+    doPostMock.mockClear();
+  });
+
+  it("posts the code in the body to the approval route", () => {
+    appsApproveDevice({ userCode: "BCDF-GHJK" });
+
+    expect(doPostMock).toHaveBeenCalledWith(
+      "/oauth/device/approve",
+      { user_code: "BCDF-GHJK" },
+      { retries: { strategy: "none" } }
+    );
+  });
+
+  it("sends a deny decision only when asked", () => {
+    appsApproveDevice({ userCode: "BCDFGHJK", decision: "deny" });
+
+    const [, body] = doPostMock.mock.calls.at(-1) ?? [];
+    expect(body).toEqual({ user_code: "BCDFGHJK", decision: "deny" });
+  });
+
+  // Every attempt counts against the server's rate limits, and a retried approval that landed
+  // answers 404 because the code is no longer pending.
+  it("is not retried unless the caller asks", () => {
+    appsApproveDevice({ userCode: "BCDF-GHJK" }, { timeoutMs: 5000 });
+    expect(doPostMock.mock.calls.at(-1)?.[2]).toEqual({ retries: { strategy: "none" }, timeoutMs: 5000 });
+
+    const backoff = {
+      strategy: "backoff" as const,
+      backoff: { initialInterval: 1, maxInterval: 2, exponent: 1, maxElapsedTime: 3 },
+    };
+    appsApproveDevice({ userCode: "BCDF-GHJK" }, { retries: backoff });
+    expect(doPostMock.mock.calls.at(-1)?.[2]).toEqual({ retries: backoff });
+  });
+
+  it("is exposed to the host as __internal.apps.approveDevice", () => {
+    expect(__internal.apps.approveDevice).toBe(appsApproveDevice);
+  });
+});

package/src/__tests__/companies.test.ts

@@ -103,6 +103,7 @@ test("Companies List Company Managers", async () => {
       itemsPerPage: 598575,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -159,6 +160,7 @@ test("Companies Lookup Companies", async () => {
       itemsPerPage: 371915,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -194,6 +196,7 @@ test("Companies List Company Credits", async () => {
       itemsPerPage: 223549,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {},
@@ -230,6 +233,7 @@ test("Companies List Company Credentials", async () => {
       itemsPerPage: 695175,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
   });
 });

package/src/__tests__/events.test.ts

@@ -36,6 +36,7 @@ test("Events List Or Search Vendor Invitees", async () => {
       itemsPerPage: 801598,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -179,6 +180,7 @@ test("Events List Locations", async () => {
       itemsPerPage: 192898,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
   });
 });
@@ -210,6 +212,7 @@ test("Events List Pending Invitations", async () => {
       itemsPerPage: 165687,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {},
@@ -244,6 +247,7 @@ test("Events List Feed", async () => {
       itemsPerPage: 428684,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -276,6 +280,7 @@ test("Events List Standing Appointments", async () => {
       itemsPerPage: 850564,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {},

package/src/__tests__/fhirconfigs.test.ts

@@ -33,6 +33,7 @@ test("Fhir Configs List Of Fhir Configurations", async () => {
       itemsPerPage: 19984,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {

package/src/__tests__/invoices.test.ts

@@ -97,6 +97,7 @@ test("Invoices List Invoices", async () => {
       itemsPerPage: 80477,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
   });
 });

package/src/__tests__/medicalproducts.test.ts

@@ -31,6 +31,7 @@ test("Medical Products List All Medical Products", async () => {
       itemsPerPage: 237587,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -378,6 +379,7 @@ test("Medical Products List All Medical Product Families", async () => {
       itemsPerPage: 14932,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -527,6 +529,7 @@ test("Medical Products List All Medical Product Categories", async () => {
       itemsPerPage: 758419,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -675,6 +678,7 @@ test("Medical Products List All Manufacturers", async () => {
       itemsPerPage: 347097,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {
@@ -861,6 +865,7 @@ test("Medical Products List All Distributors", async () => {
       itemsPerPage: 570797,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {

package/src/__tests__/oauth.test.ts

@@ -0,0 +1,108 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { expect, test } from "vitest";
+import { GreenSecurity } from "../index.js";
+import { createTestHTTPClient } from "./testclient.js";
+
+test("Oauth Create Token", async () => {
+  const testHttpClient = createTestHTTPClient("createToken");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.oauth.createToken({
+    grantType: "refresh_token",
+    refreshToken: "gsdr_Qm9vZ2xlLWlzLW5vdC1hLXJlYWwtdG9rZW4tZXhhbXBsZQ",
+    clientId: "greensecurity-apps-cli",
+    scope: "vendors.view",
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    accessToken: "gsu_3kq9Xw7V0bY2mT8cLr5nPzQ1aB4dE6fG8hJ0kL2mN4pR6s",
+    tokenType: "Bearer",
+    expiresIn: 900,
+    scope: "vendors.view vendor_credentials.view",
+    activationId: 1087,
+    refreshToken: "gsdr_Qm9vZ2xlLWlzLW5vdC1hLXJlYWwtdG9rZW4tZXhhbXBsZQ",
+    refreshTokenExpiresIn: 2592000,
+  });
+});
+
+test("Oauth Create Device Authorization", async () => {
+  const testHttpClient = createTestHTTPClient("createDeviceAuthorization");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+  });
+
+  const result = await greenSecurity.oauth.createDeviceAuthorization({
+    clientId: "greensecurity-apps-cli",
+    scope: "apps:develop",
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    deviceCode: "<value>",
+    userCode: "WDJB-MJHT",
+    verificationUri: "https://www.greensecurityllc.com/v3/apps/device",
+    verificationUriComplete:
+      "https://www.greensecurityllc.com/v3/apps/device?user_code=WDJB-MJHT",
+    expiresIn: 600,
+    interval: 5,
+  });
+});
+
+test("Oauth Introspect Token", async () => {
+  const testHttpClient = createTestHTTPClient("introspectToken");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.oauth.introspectToken({
+    token: "<value>",
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({
+    active: true,
+    sub: "5123",
+    appId: 42,
+    activationId: 1087,
+    scope: "vendors.view vendor_credentials.view",
+    exp: 1790000000,
+    iat: 1789999100,
+    tokenType: "Bearer",
+    act: {
+      sub: "5123",
+    },
+  });
+});
+
+test("Oauth Revoke Token", async () => {
+  const testHttpClient = createTestHTTPClient("revokeToken");
+
+  const greenSecurity = new GreenSecurity({
+    serverURL: process.env["TEST_SERVER_URL"] ?? "https://localhost:3000/api",
+    httpClient: testHttpClient,
+    security: {
+      token: process.env["GREEN_SECURITY_TOKEN"] ?? "value",
+    },
+  });
+
+  const result = await greenSecurity.oauth.revokeToken({
+    token: "<value>",
+  });
+  expect(result).toBeDefined();
+  expect(result).toEqual({});
+});

package/src/__tests__/organizations.test.ts

@@ -34,6 +34,7 @@ test("Organizations List Or Search Departments", async () => {
       itemsPerPage: 357325,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -71,6 +72,7 @@ test("Organizations List Or Search Department Contacts", async () => {
       itemsPerPage: 834563,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {
@@ -114,6 +116,7 @@ test("Organizations List Company Target Facilities", async () => {
       itemsPerPage: 112555,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -266,6 +269,7 @@ test("Organizations List Facility Vendors", async () => {
       itemsPerPage: 557,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });

package/src/__tests__/systems.test.ts

@@ -36,6 +36,7 @@ test("Systems List Systems", async () => {
       itemsPerPage: 286465,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {

package/src/__tests__/vendors.test.ts

@@ -121,7 +121,7 @@ test("Vendors List Vendor Credits", async () => {
       page: 1,
       useUrlParams: false,
     },
-    creditBalance: 473.87,
+    creditBalance: 7787.66,
   });
 });
 
@@ -908,6 +908,7 @@ test("Vendors List Vendor Types", async () => {
       itemsPerPage: 224781,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {},
@@ -1133,6 +1134,7 @@ test("Vendors List Vendors", async () => {
       itemsPerPage: 999117,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -1195,6 +1197,7 @@ test("Vendors Get Vendor Upload History", async () => {
       itemsPerPage: 183457,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {
@@ -1335,6 +1338,7 @@ test("Vendors Get Vendor Target Facilities", async () => {
       itemsPerPage: 570346,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
   });
@@ -1365,6 +1369,7 @@ test("Vendors Get Vendor Screening Questions", async () => {
       itemsPerPage: 860787,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [],
     facilityName: "<value>",

package/src/__tests__/vendorscans.test.ts

@@ -100,6 +100,7 @@ test("Vendor Scans List Vendor Scans", async () => {
       itemsPerPage: 411928,
       page: 1,
       useUrlParams: true,
+      scope: null,
     },
     items: [
       {},

package/src/__tests__/webhooks.test.ts

@@ -20,7 +20,7 @@ test("Webhooks List All Webhook Endpoints", async () => {
   const testWebhookListForVendorUserResult = await greenSecurity.webhooks
     .listAllWebhookEndpoints({
       itemsPerPage: 25,
-      desc: 0,
+      desc: true,
       sort: "",
     });
   expect(testWebhookListForVendorUserResult).toBeDefined();
@@ -62,10 +62,11 @@ test("Webhooks Updates The Webhook Endpoint With The Given Id", async () => {
       id: 220782,
       webhookEndpointUpdate: {
         webhookUrl: "https://example.com/webhook/incoming",
-        subscriptions: [
-          "Vendor.updated",
-          "Vendor.created",
-        ],
+        subscriptions: {
+          model: "Vendor",
+          action: "updated",
+          expands: "vendor.company,vendor.user",
+        },
         consumers: {
           systemId: 1,
           facilityId: 1,

package/src/__tests__/zoneDevicesList.test.ts

@@ -0,0 +1,37 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const { doGetSingleMock } = vi.hoisted(() => ({
+  doGetSingleMock: vi.fn((_route: string, _query?: unknown) =>
+    Promise.resolve([{ ok: true }, { status: "complete" }])
+  ),
+}));
+
+vi.mock("../admin-funcs/doAdmin.js", () => ({
+  $doGetSingle: doGetSingleMock,
+}));
+
+import { networksCreate } from "../admin-funcs/networksCreate.js";
+import { networksGet } from "../admin-funcs/networksGet.js";
+import { networksList } from "../admin-funcs/networksList.js";
+import { zoneDevicesGet } from "../admin-funcs/zoneDevicesGet.js";
+import { zoneDevicesList } from "../admin-funcs/zoneDevicesList.js";
+import { __internal } from "../index.extras.js";
+
+describe("zoneDevicesList", () => {
+  beforeEach(() => {
+    doGetSingleMock.mockClear();
+  });
+
+  it("sends the zone filter as zone_id", () => {
+    zoneDevicesList({ zoneId: 7, itemsPerPage: 1 });
+
+    expect(doGetSingleMock).toHaveBeenCalledWith("/zone-devices", { zone_id: 7, items_per_page: 1 });
+  });
+
+  // Gatekeeper's Networks and Devices tabs call these; dropping them from `__internal` once
+  // broke both without failing a build here.
+  it("keeps the gatekeeper funcs on __internal", () => {
+    expect(__internal.zoneDevices).toEqual({ list: zoneDevicesList, get: zoneDevicesGet });
+    expect(__internal.networks).toEqual({ list: networksList, get: networksGet, create: networksCreate });
+  });
+});

package/src/__tests__/zones.test.ts

@@ -36,35 +36,7 @@ test("Zones List Or Search Security Zones", async () => {
     },
     items: [
       {
-        facility: {
-          contacts: {
-            contact: {
-              status: "Active",
-              department: 123,
-            },
-            adminContact: {
-              status: "Active",
-              department: 123,
-            },
-            techContact: {
-              status: "Inactive",
-              department: 123,
-            },
-            greenSecurityCsm: {
-              status: "Deleted",
-              department: 123,
-            },
-            accountManager: {
-              status: "Inactive",
-              department: 123,
-            },
-          },
-          vendorGuestPolicy: {
-            enabled: true,
-            vendorGuestLimitAndOr: "and",
-            vendorGuestRequireEmail: false,
-          },
-        },
+        facility: {},
       },
       {
         facility: {},
@@ -85,9 +57,8 @@ test("Zones Security Zone Checkin", async () => {
   });
 
   const result = await greenSecurity.zones.securityZoneCheckin({
-    longitude: 8706.45,
-    latitude: 7315.87,
-    zoneId: 944641,
+    qrCode: "<value>",
+    zoneId: 997849,
   });
   expect(result).toBeDefined();
   expect(result).toEqual({});

package/src/admin-funcs/appsApproveDevice.ts

@@ -0,0 +1,38 @@
+import { APIPromise } from "../types/async.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+// RFC 8628 device-login approval for the apps CLI (third-party app platform,
+// docs/third-party-apps/plan.md C2/C16): the signed-in user confirms the code `gs-apps login`
+// printed, and the CLI polling `POST /api/oauth/token` then receives its developer token.
+//
+// Internal: only Green Security's own approval screen (`/v3/apps/device`) calls it, with the
+// user's session token as the Bearer credential. App tokens are refused by the endpoint.
+//
+// Request: `{ user_code, decision? }`, `decision` being `approve` (the default) or `deny`. The
+// server forgives case, spaces and hyphens in the code.
+//
+// Success: `{ success: true, status: "approved" | "denied", client_id, scope }`.
+// Failure (`render_api_error` envelope): 400 when the code is not a well-formed code, 404 for any
+// code that names no pending authorization (unknown, expired or already used, one answer for all),
+// 403 for a service account, 429 when too many attempts were made for the code, the address or
+// the user.
+//
+// Never retried unless the caller asks: every attempt counts against those rate limits, and a
+// retried approval that did land answers 404, because the code is no longer pending.
+export type appsApproveDeviceRequest = {
+  /** The code the CLI shows, e.g. `BCDF-GHJK`. */
+  userCode: string;
+  /** `deny` answers the CLI with `access_denied`. Defaults to `approve`. */
+  decision?: "approve" | "deny";
+};
+
+export function appsApproveDevice(
+  request: appsApproveDeviceRequest,
+  options?: RequestOptions,
+): internalApiResult {
+  const body: Record<string, string> = { user_code: request.userCode };
+  if (request.decision !== undefined) body["decision"] = request.decision;
+
+  return new APIPromise($doPost("/oauth/device/approve", body, { retries: { strategy: "none" }, ...options }));
+}

package/src/admin-funcs/appsExchangeToken.ts

@@ -0,0 +1,55 @@
+import { APIPromise } from "../types/async.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+// RFC 8693 token exchange for the third-party app platform (docs/third-party-apps/plan.md C2/C8):
+// the signed-in viewer's session token becomes a short-lived app token for one activation of one
+// app, which the host injects into the app's sandboxed view.
+//
+// `POST /api/oauth/token` itself is public (the client_credentials and device grants are
+// documented in openapi.yaml); this call is the host's own use of it, so it lives with the
+// internal functions. Every OAuth parameter travels in the JSON body: the endpoint refuses them
+// in a query string, which would end up in access logs.
+//
+// Success: `{ access_token, issued_token_type, token_type: "Bearer", expires_in, scope,
+// activation_id }`. Failure: RFC 6749 `{ error, error_description }` (e.g. `invalid_target` when
+// the app is not installed for the viewer). Neither the request nor the response may be logged:
+// both carry a token.
+
+export const APP_TOKEN_EXCHANGE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:token-exchange";
+export const APP_TOKEN_SUBJECT_TOKEN_TYPE = "urn:ietf:params:oauth:token-type:access_token";
+
+export const APP_TOKEN_REQUESTED_TYPES = {
+  user: "urn:greensecurity:token-type:app_user",
+  installation: "urn:greensecurity:token-type:app_installation",
+} as const;
+
+export type appsExchangeTokenRequest = {
+  /** The viewer's session token. Sent in the body only. */
+  subjectToken: string;
+  appId: number;
+  /** `user` → an `app_user` token (`gsu_`); `installation` → an `app_installation` token (`gsi_`). */
+  kind: keyof typeof APP_TOKEN_REQUESTED_TYPES;
+  /** The activation the token is for. Without it the server picks the one covering the viewer. */
+  activationId?: number;
+  /** Space-separated subset of the app's permissions. Defaults to all it may have. */
+  scope?: string;
+};
+
+export function appsExchangeToken(
+  request: appsExchangeTokenRequest,
+  options?: RequestOptions,
+): internalApiResult {
+  const body: Record<string, string> = {
+    grant_type: APP_TOKEN_EXCHANGE_GRANT_TYPE,
+    subject_token: request.subjectToken,
+    subject_token_type: APP_TOKEN_SUBJECT_TOKEN_TYPE,
+    audience: `app:${request.appId}`,
+    requested_token_type: APP_TOKEN_REQUESTED_TYPES[request.kind],
+  };
+  // A string: the endpoint parses `activation_id` itself and refuses anything but digits.
+  if (request.activationId !== undefined) body["activation_id"] = String(request.activationId);
+  if (request.scope !== undefined) body["scope"] = request.scope;
+
+  return new APIPromise($doPost("/oauth/token", body, options));
+}

package/src/admin-funcs/appsListInstalledApps.ts

@@ -0,0 +1,24 @@
+import { APIPromise } from "../types/async.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { $doGetSingle, hashToQueryString, internalApiResult } from "./doAdmin.js";
+
+// The sandboxed apps installed for the signed-in viewer, with what the host needs to load and
+// render each one in a portal (third-party app platform, docs/third-party-apps/plan.md C1/C8).
+//
+// Internal rather than part of the public spec: it describes how Green Security's own client
+// hosts apps (sandbox runtime URL, views per portal, the viewer's dev session), which no
+// third-party SDK consumer has any use for.
+//
+// Response: `{ apps: [{ id, name, icon_url, version, bundle, views, csp, constants, permissions,
+// activation_id, runtime_url, dev_session }] }`. `dev_session` carries a dev server's capability
+// token: callers keep the response in memory and never log it.
+export type appsInstalledAppsPortal = "company" | "vendor" | "facility" | "system";
+
+export function appsListInstalledApps(
+  portal: appsInstalledAppsPortal,
+  options?: RequestOptions,
+): internalApiResult {
+  const query = hashToQueryString({ portal });
+
+  return new APIPromise($doGetSingle(`/marketplace/installed-apps?${query}`, {}, options));
+}

package/src/admin-funcs/networksCreate.ts

@@ -2,7 +2,7 @@ import { APIPromise } from "../types/async.js";
 import { $doPost, $doPostForm, internalApiResult } from "./doAdmin.js";
 
 export type networkIpConfig = "DHCP" | "Static";
-export type networkEncryptionType = "WPA2-PSK" | "WPA2-EAP";
+export type networkEncryptionType = "WPA2-PSK" | "WPA2-EAP" | "None";
 export type networkAuthMethod = "EAP-TLS" | "PEAP" | "EAP-TTLS" | "EAP-GTC";
 
 export type networkEthernetSettings = {

package/src/admin-funcs/networksList.ts

@@ -15,6 +15,8 @@ export type networksListRequest = {
   itemsPerPage?: number;
   sort?: networksListSortField;
   desc?: boolean;
+  /** A partial, case-insensitive match on the network name. */
+  search?: string;
 };
 
 // The Wi-Fi/Ethernet configurations a facility hands to its Gatekeeper devices.
@@ -51,6 +53,9 @@ export function networksList(
   if (request.desc !== undefined) {
     query["desc"] = request.desc;
   }
+  if (request.search !== undefined) {
+    query["search"] = request.search;
+  }
 
   return new APIPromise($doGetSingle("/networks", query));
 }

package/src/admin-funcs/vendorCredentialCreateFormQuote.ts

@@ -0,0 +1,12 @@
+import { APIPromise } from "../types/async.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+export function vendorCredentialCreateFormQuote(
+  vendorCredentialId: number,
+  jsonData: string,
+): internalApiResult {
+  return new APIPromise($doPost(
+    `/vendors/credentials/${vendorCredentialId}/quote`,
+    { json_data: jsonData },
+  ));
+}

package/src/admin-funcs/vendorCredentialGetFormLineItems.ts

@@ -0,0 +1,12 @@
+import { APIPromise } from "../types/async.js";
+import { $doPost, internalApiResult } from "./doAdmin.js";
+
+export function vendorCredentialGetFormLineItems(
+  vendorCredentialId: number,
+  jsonData: string,
+): internalApiResult {
+  return new APIPromise($doPost(
+    `/vendors/credentials/${vendorCredentialId}/line-items`,
+    { json_data: jsonData },
+  ));
+}