@greensecurity/javascript-sdk 0.46.0-beta.7 → 0.46.0-beta.9

package/dist/commonjs/models/components/tokenintrospection.d.ts

@@ -0,0 +1,77 @@
+import * as z from "zod/v3";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+import { AppTokenKind } from "./apptokenkind.js";
+/**
+ * RFC 8693 actor claim: who caused the token to be issued. Present only on an
+ *
+ * @remarks
+ * installation token obtained by token exchange, where `sub` is the service account and
+ * `act.sub` is the signed-in user whose view requested it.
+ */
+export type TokenIntrospectionActor = {
+    /**
+     * The user id, as a string.
+     */
+    sub: string;
+};
+/**
+ * RFC 7662 section 2.2. When `active` is `false` no other field is returned: the token is
+ *
+ * @remarks
+ * unknown, expired or revoked, was issued to a different app than the caller's, is a
+ * developer CLI token, or belongs to a user who has since been locked.
+ */
+export type TokenIntrospection = {
+    /**
+     * Whether the token is currently valid for your app.
+     */
+    active: boolean;
+    /**
+     * The id of the user the token acts as, as a string (RFC 7662). For an app user token
+     *
+     * @remarks
+     * this is the viewer; for an installation token it is the app's service account.
+     */
+    sub?: string | undefined;
+    /**
+     * The marketplace app the token was issued to.
+     */
+    appId?: number | undefined;
+    /**
+     * The activation the token is bound to.
+     */
+    activationId?: number | undefined;
+    /**
+     * Space-delimited scopes, as in `TokenResponse.scope`.
+     */
+    scope?: string | undefined;
+    /**
+     * Expiry, in seconds since the Unix epoch.
+     */
+    exp?: number | undefined;
+    /**
+     * When the token was issued, in seconds since the Unix epoch.
+     */
+    iat?: number | undefined;
+    /**
+     * `app_user` tokens act as a user; `app_installation` tokens act as the app's service account within one activation.
+     */
+    kind?: AppTokenKind | undefined;
+    tokenType?: "Bearer" | undefined;
+    /**
+     * RFC 8693 actor claim: who caused the token to be issued. Present only on an
+     *
+     * @remarks
+     * installation token obtained by token exchange, where `sub` is the service account and
+     * `act.sub` is the signed-in user whose view requested it.
+     */
+    act?: TokenIntrospectionActor | undefined;
+};
+/** @internal */
+export declare const TokenIntrospectionActor$inboundSchema: z.ZodType<TokenIntrospectionActor, z.ZodTypeDef, unknown>;
+export declare function tokenIntrospectionActorFromJSON(jsonString: string): SafeParseResult<TokenIntrospectionActor, SDKValidationError>;
+/** @internal */
+export declare const TokenIntrospection$inboundSchema: z.ZodType<TokenIntrospection, z.ZodTypeDef, unknown>;
+export declare function tokenIntrospectionFromJSON(jsonString: string): SafeParseResult<TokenIntrospection, SDKValidationError>;
+//# sourceMappingURL=tokenintrospection.d.ts.map

package/dist/commonjs/models/components/tokenintrospection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospection.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospection.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,YAAY,EAA8B,MAAM,mBAAmB,CAAC;AAE7E;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;OAEG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB;;OAEG;IACH,IAAI,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAChC,SAAS,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACjC;;;;;;OAMG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC3C,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,uBAAuB,EACvB,CAAC,CAAC,UAAU,EACZ,OAAO,CAGP,CAAC;AAEH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAM9D;AAED,gBAAgB;AAChB,eAAO,MAAM,gCAAgC,EAAE,CAAC,CAAC,OAAO,CACtD,kBAAkB,EAClB,CAAC,CAAC,UAAU,EACZ,OAAO,CAkBP,CAAC;AAEH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAMzD"}

package/dist/commonjs/models/components/tokenintrospection.js

@@ -0,0 +1,76 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenIntrospection$inboundSchema = exports.TokenIntrospectionActor$inboundSchema = void 0;
+exports.tokenIntrospectionActorFromJSON = tokenIntrospectionActorFromJSON;
+exports.tokenIntrospectionFromJSON = tokenIntrospectionFromJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const schemas_js_1 = require("../../lib/schemas.js");
+const types = __importStar(require("../../types/primitives.js"));
+const apptokenkind_js_1 = require("./apptokenkind.js");
+/** @internal */
+exports.TokenIntrospectionActor$inboundSchema = z.object({
+    sub: types.string(),
+});
+function tokenIntrospectionActorFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.TokenIntrospectionActor$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'TokenIntrospectionActor' from JSON`);
+}
+/** @internal */
+exports.TokenIntrospection$inboundSchema = z.object({
+    active: types.boolean(),
+    sub: types.optional(types.string()),
+    app_id: types.optional(types.number()),
+    activation_id: types.optional(types.number()),
+    scope: types.optional(types.string()),
+    exp: types.optional(types.number()),
+    iat: types.optional(types.number()),
+    kind: types.optional(apptokenkind_js_1.AppTokenKind$inboundSchema),
+    token_type: types.optional(types.literal("Bearer")),
+    act: types.optional(z.lazy(() => exports.TokenIntrospectionActor$inboundSchema)),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        "app_id": "appId",
+        "activation_id": "activationId",
+        "token_type": "tokenType",
+    });
+});
+function tokenIntrospectionFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.TokenIntrospection$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'TokenIntrospection' from JSON`);
+}
+//# sourceMappingURL=tokenintrospection.js.map

package/dist/commonjs/models/components/tokenintrospection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospection.js","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospection.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFH,0EAQC;AA0BD,gEAQC;AA/HD,0CAA4B;AAC5B,2DAA0D;AAC1D,qDAAiD;AAEjD,iEAAmD;AAEnD,uDAA6E;AAsE7E,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,CAAC,CAAC,MAAM,CAAC;IACX,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,SAAgB,+BAA+B,CAC7C,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,6CAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjE,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAED,gBAAgB;AACH,QAAA,gCAAgC,GAIzC,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE;IACvB,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACtC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,4CAA0B,CAAC;IAChD,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,6CAAqC,CAAC,CAAC;CACzE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,QAAQ,EAAE,OAAO;QACjB,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,0BAA0B,CACxC,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,wCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC5D,gDAAgD,CACjD,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/tokenintrospectionrequest.d.ts

@@ -0,0 +1,21 @@
+import * as z from "zod/v3";
+import { OAuthTokenTypeHint } from "./oauthtokentypehint.js";
+export type TokenIntrospectionRequest = {
+    /**
+     * The token to check, typically an app user token your app's UI sent to your backend.
+     */
+    token: string;
+    /**
+     * Optional hint about the kind of token. Tokens are recognised by prefix, so this is informational.
+     */
+    tokenTypeHint?: OAuthTokenTypeHint | undefined;
+};
+/** @internal */
+export type TokenIntrospectionRequest$Outbound = {
+    token: string;
+    token_type_hint?: string | undefined;
+};
+/** @internal */
+export declare const TokenIntrospectionRequest$outboundSchema: z.ZodType<TokenIntrospectionRequest$Outbound, z.ZodTypeDef, TokenIntrospectionRequest>;
+export declare function tokenIntrospectionRequestToJSON(tokenIntrospectionRequest: TokenIntrospectionRequest): string;
+//# sourceMappingURL=tokenintrospectionrequest.d.ts.map

package/dist/commonjs/models/components/tokenintrospectionrequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospectionrequest.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospectionrequest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,yBAAyB,GAAG;IACtC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,aAAa,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAChD,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,kCAAkC,GAAG;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,wCAAwC,EAAE,CAAC,CAAC,OAAO,CAC9D,kCAAkC,EAClC,CAAC,CAAC,UAAU,EACZ,yBAAyB,CAQzB,CAAC;AAEH,wBAAgB,+BAA+B,CAC7C,yBAAyB,EAAE,yBAAyB,GACnD,MAAM,CAIR"}

package/dist/commonjs/models/components/tokenintrospectionrequest.js

@@ -0,0 +1,56 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenIntrospectionRequest$outboundSchema = void 0;
+exports.tokenIntrospectionRequestToJSON = tokenIntrospectionRequestToJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const oauthtokentypehint_js_1 = require("./oauthtokentypehint.js");
+/** @internal */
+exports.TokenIntrospectionRequest$outboundSchema = z.object({
+    token: z.string(),
+    tokenTypeHint: oauthtokentypehint_js_1.OAuthTokenTypeHint$outboundSchema.optional(),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        tokenTypeHint: "token_type_hint",
+    });
+});
+function tokenIntrospectionRequestToJSON(tokenIntrospectionRequest) {
+    return JSON.stringify(exports.TokenIntrospectionRequest$outboundSchema.parse(tokenIntrospectionRequest));
+}
+//# sourceMappingURL=tokenintrospectionrequest.js.map

package/dist/commonjs/models/components/tokenintrospectionrequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospectionrequest.js","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospectionrequest.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCH,0EAMC;AA5CD,0CAA4B;AAC5B,2DAA0D;AAC1D,mEAGiC;AAmBjC,gBAAgB;AACH,QAAA,wCAAwC,GAIjD,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,aAAa,EAAE,yDAAiC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,+BAA+B,CAC7C,yBAAoD;IAEpD,OAAO,IAAI,CAAC,SAAS,CACnB,gDAAwC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/tokenresponse.d.ts

@@ -0,0 +1,129 @@
+import * as z from "zod/v3";
+import { OpenEnum } from "../../types/enums.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+/**
+ * What kind of token was issued. Returned for app user, app installation and developer
+ *
+ * @remarks
+ * CLI tokens, including every CLI refresh; absent from the plain API token that
+ * `client_credentials` without `activation_id` and a service account's
+ * `refresh_token` return.
+ */
+export declare const IssuedTokenType: {
+    readonly UrnGreensecurityTokenTypeAppUser: "urn:greensecurity:token-type:app_user";
+    readonly UrnGreensecurityTokenTypeAppInstallation: "urn:greensecurity:token-type:app_installation";
+    readonly UrnGreensecurityTokenTypeDeveloperCli: "urn:greensecurity:token-type:developer_cli";
+};
+/**
+ * What kind of token was issued. Returned for app user, app installation and developer
+ *
+ * @remarks
+ * CLI tokens, including every CLI refresh; absent from the plain API token that
+ * `client_credentials` without `activation_id` and a service account's
+ * `refresh_token` return.
+ */
+export type IssuedTokenType = OpenEnum<typeof IssuedTokenType>;
+/**
+ * A successful `POST /oauth/token` response (RFC 6749 section 5.1, RFC 8693 section 2.2.1).
+ *
+ * @remarks
+ * Send `access_token` as `Authorization: Bearer <access_token>`; app and developer tokens
+ * are refused as a `?token=` query parameter.
+ *
+ * Which fields are present depends on the grant:
+ *
+ * | Grant | Fields |
+ * | --- | --- |
+ * | Token exchange, and `client_credentials` with `activation_id` | `access_token`, `issued_token_type`, `token_type`, `expires_in`, `scope`, `activation_id` |
+ * | Device code, and the apps CLI's `refresh_token` | `access_token`, `issued_token_type`, `token_type`, `expires_in`, `scope`, `refresh_token`, `refresh_token_expires_in` |
+ * | `client_credentials` without `activation_id` | `access_token`, `token_type`, `expires_in`, and `scope` only when the request sent one |
+ * | A service account's `refresh_token` | As `client_credentials` without `activation_id`, plus `refresh_token` |
+ */
+export type TokenResponse = {
+    /**
+     * The token. An app or developer token's prefix names its kind: `gsu_` for an app user
+     *
+     * @remarks
+     * token, `gsi_` for an app installation token, `gsd_` for a developer CLI token. These
+     * are shown only once and cannot be retrieved later. The access
+     * token of a `client_credentials` grant without `activation_id`, or of a service
+     * account's `refresh_token` grant, is an ordinary API token with no prefix.
+     */
+    accessToken: string;
+    /**
+     * What kind of token was issued. Returned for app user, app installation and developer
+     *
+     * @remarks
+     * CLI tokens, including every CLI refresh; absent from the plain API token that
+     * `client_credentials` without `activation_id` and a service account's
+     * `refresh_token` return.
+     */
+    issuedTokenType?: IssuedTokenType | undefined;
+    tokenType: "Bearer";
+    /**
+     * Seconds until the token expires: 900 (15 minutes) for every kind. A developer CLI
+     *
+     * @remarks
+     * token is capped at the end of its login (90 days after the device authorization), so
+     * near that end it can be less. Request a new token before then. Only the device grant
+     * and the `refresh_token` grant return a `refresh_token`.
+     */
+    expiresIn: number;
+    /**
+     * Space-delimited scopes the token carries. For an app user token these are the
+     *
+     * @remarks
+     * manifest permissions (`resource.action`) that the user's own role also grants; for an
+     * installation token, the app's manifest permissions; for a developer CLI token,
+     * `apps:develop`. A `scope` in the request narrows this further.
+     *
+     * A plain API access token (`client_credentials` without `activation_id`, or
+     * `refresh_token`) carries `scope` only when it was narrowed: when the request sent a
+     * `scope`, or when the refresh token it replaces was itself narrowed. Without it the
+     * token has every permission of the service account.
+     *
+     * A narrowed token (any app or developer token, or a plain API access token that
+     * carries `scope`) can only use its scope. An endpoint that names a permission
+     * outside it answers `403` ("App token doesn't have permission" for an app token,
+     * "Token scope doesn't permit this." for a plain one); an endpoint that checks no
+     * named permission answers `403` "This endpoint does not accept scoped tokens."
+     * unless it applies the scope itself. `GET /users/{id}` does, but returns no
+     * `user_token` to a narrowed token and refuses `expand=user.payment_profile` with
+     * `403`. A narrowed token is also refused as the `client_credentials` Bearer, as a
+     * `subject_token`, and as the credential for `POST /oauth/introspect` and
+     * `POST /oauth/revoke`.
+     */
+    scope?: string | undefined;
+    /**
+     * The activation an app user or app installation token is bound to. Not returned for any other token.
+     */
+    activationId?: number | undefined;
+    /**
+     * A single-use refresh token. Keep it as secret as a password; it is never a Bearer
+     *
+     * @remarks
+     * credential.
+     *
+     * - **Apps CLI** (`gsdr_…`): returned by the device grant and by every CLI refresh.
+     *   Each refresh spends it and returns a new one (see `OAuthCliRefreshTokenGrant`).
+     * - **Service account** (no prefix): returned by a service account's `refresh_token`
+     *   grant, replacing the token just spent. It expires after 30 days.
+     */
+    refreshToken?: string | undefined;
+    /**
+     * Apps CLI only: seconds until `refresh_token` expires if it is not used, normally
+     *
+     * @remarks
+     * 2592000 (30 days). A CLI login ends 90 days after the device authorization however
+     * often it is refreshed, so in its last 30 days this is capped at that end (for
+     * example 259200 on day 87).
+     */
+    refreshTokenExpiresIn?: number | undefined;
+};
+/** @internal */
+export declare const IssuedTokenType$inboundSchema: z.ZodType<IssuedTokenType, z.ZodTypeDef, unknown>;
+/** @internal */
+export declare const TokenResponse$inboundSchema: z.ZodType<TokenResponse, z.ZodTypeDef, unknown>;
+export declare function tokenResponseFromJSON(jsonString: string): SafeParseResult<TokenResponse, SDKValidationError>;
+//# sourceMappingURL=tokenresponse.d.ts.map

package/dist/commonjs/models/components/tokenresponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;CAMlB,CAAC;AACX;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B;;;;;;;;OAQG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C,SAAS,EAAE,QAAQ,CAAC;IACpB;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,OAAO,CACnD,eAAe,EACf,CAAC,CAAC,UAAU,EACZ,OAAO,CACmC,CAAC;AAE7C,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CAoBP,CAAC;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAMpD"}

package/dist/commonjs/models/components/tokenresponse.js

@@ -0,0 +1,85 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenResponse$inboundSchema = exports.IssuedTokenType$inboundSchema = exports.IssuedTokenType = void 0;
+exports.tokenResponseFromJSON = tokenResponseFromJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const schemas_js_1 = require("../../lib/schemas.js");
+const openEnums = __importStar(require("../../types/enums.js"));
+const types = __importStar(require("../../types/primitives.js"));
+/**
+ * What kind of token was issued. Returned for app user, app installation and developer
+ *
+ * @remarks
+ * CLI tokens, including every CLI refresh; absent from the plain API token that
+ * `client_credentials` without `activation_id` and a service account's
+ * `refresh_token` return.
+ */
+exports.IssuedTokenType = {
+    UrnGreensecurityTokenTypeAppUser: "urn:greensecurity:token-type:app_user",
+    UrnGreensecurityTokenTypeAppInstallation: "urn:greensecurity:token-type:app_installation",
+    UrnGreensecurityTokenTypeDeveloperCli: "urn:greensecurity:token-type:developer_cli",
+};
+/** @internal */
+exports.IssuedTokenType$inboundSchema = openEnums.inboundSchema(exports.IssuedTokenType);
+/** @internal */
+exports.TokenResponse$inboundSchema = z.object({
+    access_token: types.string(),
+    issued_token_type: types.optional(exports.IssuedTokenType$inboundSchema),
+    token_type: types.literal("Bearer"),
+    expires_in: types.number(),
+    scope: types.optional(types.string()),
+    activation_id: types.optional(types.number()),
+    refresh_token: types.optional(types.string()),
+    refresh_token_expires_in: types.optional(types.number()),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        "access_token": "accessToken",
+        "issued_token_type": "issuedTokenType",
+        "token_type": "tokenType",
+        "expires_in": "expiresIn",
+        "activation_id": "activationId",
+        "refresh_token": "refreshToken",
+        "refresh_token_expires_in": "refreshTokenExpiresIn",
+    });
+});
+function tokenResponseFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.TokenResponse$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'TokenResponse' from JSON`);
+}
+//# sourceMappingURL=tokenresponse.js.map

package/dist/commonjs/models/components/tokenresponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenresponse.js","sourceRoot":"","sources":["../../../../src/models/components/tokenresponse.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuKH,sDAQC;AA7KD,0CAA4B;AAC5B,2DAA0D;AAC1D,qDAAiD;AACjD,gEAAkD;AAGlD,iEAAmD;AAGnD;;;;;;;GAOG;AACU,QAAA,eAAe,GAAG;IAC7B,gCAAgC,EAAE,uCAAuC;IACzE,wCAAwC,EACtC,+CAA+C;IACjD,qCAAqC,EACnC,4CAA4C;CACtC,CAAC;AA6GX,gBAAgB;AACH,QAAA,6BAA6B,GAItC,SAAS,CAAC,aAAa,CAAC,uBAAe,CAAC,CAAC;AAE7C,gBAAgB;AACH,QAAA,2BAA2B,GAIpC,CAAC,CAAC,MAAM,CAAC;IACX,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;IAC5B,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,qCAA6B,CAAC;IAChE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,wBAAwB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,mBAAmB,EAAE,iBAAiB;QACtC,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,cAAc;QAC/B,eAAe,EAAE,cAAc;QAC/B,0BAA0B,EAAE,uBAAuB;KACpD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,qBAAqB,CACnC,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,mCAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,2CAA2C,CAC5C,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/tokenrevocationrequest.d.ts

@@ -0,0 +1,30 @@
+import * as z from "zod/v3";
+import { OAuthTokenTypeHint } from "./oauthtokentypehint.js";
+export type TokenRevocationRequest = {
+    /**
+     * The token to revoke. Revoking any token of an apps CLI login (`gsd_` or `gsdr_`) revokes the whole login.
+     */
+    token: string;
+    /**
+     * Optional hint about the kind of token. Tokens are recognised by prefix, so this is informational.
+     */
+    tokenTypeHint?: OAuthTokenTypeHint | undefined;
+    /**
+     * The apps CLI's public client id (RFC 7009 section 2.1). With a `gsdr_` refresh token
+     *
+     * @remarks
+     * as `token`, no `Authorization` is needed: holding the refresh token entitles the
+     * caller to revoke its login. Ignored with any other token.
+     */
+    clientId?: "greensecurity-apps-cli" | undefined;
+};
+/** @internal */
+export type TokenRevocationRequest$Outbound = {
+    token: string;
+    token_type_hint?: string | undefined;
+    client_id?: "greensecurity-apps-cli" | undefined;
+};
+/** @internal */
+export declare const TokenRevocationRequest$outboundSchema: z.ZodType<TokenRevocationRequest$Outbound, z.ZodTypeDef, TokenRevocationRequest>;
+export declare function tokenRevocationRequestToJSON(tokenRevocationRequest: TokenRevocationRequest): string;
+//# sourceMappingURL=tokenrevocationrequest.d.ts.map

package/dist/commonjs/models/components/tokenrevocationrequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenrevocationrequest.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenrevocationrequest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,sBAAsB,GAAG;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,aAAa,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,+BAA+B,GAAG;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CAClD,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,+BAA+B,EAC/B,CAAC,CAAC,UAAU,EACZ,sBAAsB,CAUtB,CAAC;AAEH,wBAAgB,4BAA4B,CAC1C,sBAAsB,EAAE,sBAAsB,GAC7C,MAAM,CAIR"}

package/dist/commonjs/models/components/tokenrevocationrequest.js

@@ -0,0 +1,58 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenRevocationRequest$outboundSchema = void 0;
+exports.tokenRevocationRequestToJSON = tokenRevocationRequestToJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const oauthtokentypehint_js_1 = require("./oauthtokentypehint.js");
+/** @internal */
+exports.TokenRevocationRequest$outboundSchema = z.object({
+    token: z.string(),
+    tokenTypeHint: oauthtokentypehint_js_1.OAuthTokenTypeHint$outboundSchema.optional(),
+    clientId: z.literal("greensecurity-apps-cli").optional(),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        tokenTypeHint: "token_type_hint",
+        clientId: "client_id",
+    });
+});
+function tokenRevocationRequestToJSON(tokenRevocationRequest) {
+    return JSON.stringify(exports.TokenRevocationRequest$outboundSchema.parse(tokenRevocationRequest));
+}
+//# sourceMappingURL=tokenrevocationrequest.js.map

package/dist/commonjs/models/components/tokenrevocationrequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenrevocationrequest.js","sourceRoot":"","sources":["../../../../src/models/components/tokenrevocationrequest.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDH,oEAMC;AAvDD,0CAA4B;AAC5B,2DAA0D;AAC1D,mEAGiC;AA4BjC,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,aAAa,EAAE,yDAAiC,CAAC,QAAQ,EAAE;IAC3D,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,aAAa,EAAE,iBAAiB;QAChC,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,4BAA4B,CAC1C,sBAA8C;IAE9C,OAAO,IAAI,CAAC,SAAS,CACnB,6CAAqC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CACpE,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/user.d.ts

@@ -38,6 +38,10 @@ export type InventoryManager = {};
  * The User object describes a person or service account.
  */
 export type User = {
+    /**
+     * Whether the user may manage zone devices (the `zone_devices.view` permission, which the Zone Device Managers role grants). Returned only when the caller requests their own record.
+     */
+    canManageZoneDevices?: boolean | undefined;
     /**
      * Whether the user is a `gatekeeper`, a special type of service user assigned to Kiosks and Apps to verify vendors using APIs that have some access to facility data.
      */

package/dist/commonjs/models/components/user.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../src/models/components/user.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,WAAW,EAA6B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAElC;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAClB;;OAEG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;OAEG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAChD;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAC6B,CAAC;AAEvC,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAQP,CAAC;AAEH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAMhD;AAED,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,OAAO,CACpD,gBAAgB,EAChB,CAAC,CAAC,UAAU,EACZ,OAAO,CACO,CAAC;AAEjB,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAMvD;AAED,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAkBlE,CAAC;AAEL,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAM3C"}
+{"version":3,"file":"user.d.ts","sourceRoot":"","sources":["../../../../src/models/components/user.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAyB,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,WAAW,EAA6B,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAwB,MAAM,aAAa,CAAC;AAE3D;;GAEG;AACH,eAAO,MAAM,SAAS;;;CAGZ,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,SAAS,CAAC,CAAC;AAEnD;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAElC;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3C;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,IAAI,EAAE,WAAW,CAAC;IAClB;;OAEG;IACH,SAAS,EAAE,SAAS,CAAC;IACrB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;OAEG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAChD;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAC6B,CAAC;AAEvC,gBAAgB;AAChB,eAAO,MAAM,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAC7C,SAAS,EACT,CAAC,CAAC,UAAU,EACZ,OAAO,CAQP,CAAC;AAEH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAMhD;AAED,gBAAgB;AAChB,eAAO,MAAM,8BAA8B,EAAE,CAAC,CAAC,OAAO,CACpD,gBAAgB,EAChB,CAAC,CAAC,UAAU,EACZ,OAAO,CACO,CAAC;AAEjB,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAMvD;AAED,gBAAgB;AAChB,eAAO,MAAM,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAoBlE,CAAC;AAEL,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAM3C"}

package/dist/commonjs/models/components/user.js

@@ -78,6 +78,7 @@ function inventoryManagerFromJSON(jsonString) {
 /** @internal */
 exports.User$inboundSchema = z
     .object({
+    can_manage_zone_devices: types.optional(types.boolean()),
     is_gatekeeper: types.optional(types.boolean()),
     success: types.boolean(),
     user: userdetails_js_1.UserDetails$inboundSchema,
@@ -88,6 +89,7 @@ exports.User$inboundSchema = z
     company: z.nullable(company_js_1.Company$inboundSchema).optional(),
 }).transform((v) => {
     return (0, primitives_js_1.remap)(v, {
+        "can_manage_zone_devices": "canManageZoneDevices",
         "is_gatekeeper": "isGatekeeper",
         "user_token": "userToken",
         "inventory_manager": "inventoryManager",

package/dist/commonjs/models/components/user.js.map

@@ -1 +1 @@
-{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../../src/models/components/user.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyGH,8CAQC;AASD,4DAQC;AAuBD,oCAQC;AA/JD,0CAA4B;AAC5B,2DAA0D;AAC1D,qDAAiD;AACjD,gEAAkD;AAGlD,iEAAmD;AAEnD,6CAA8D;AAC9D,6CAA8D;AAC9D,qDAA0E;AAC1E,2CAA2D;AAE3D;;GAEG;AACU,QAAA,SAAS,GAAG;IACvB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,UAAU;CACX,CAAC;AA+DX,gBAAgB;AACH,QAAA,uBAAuB,GAIhC,SAAS,CAAC,aAAa,CAAC,iBAAS,CAAC,CAAC;AAEvC,gBAAgB;AACH,QAAA,uBAAuB,GAIhC,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,+BAAuB,CAAC,OAAO,CAAC,WAAW,CAAC;CACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,iBAAiB,CAC/B,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,+BAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,uCAAuC,CACxC,CAAC;AACJ,CAAC;AAED,gBAAgB;AACH,QAAA,8BAA8B,GAIvC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,SAAgB,wBAAwB,CACtC,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,sCAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC1D,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAED,gBAAgB;AACH,QAAA,kBAAkB,GAA2C,CAAC;KACxE,MAAM,CAAC;IACN,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,0CAAyB;IAC/B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+BAAuB,CAAC;IACjD,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,gCAAoB,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,sCAA8B,CAAC,CAC7C;IACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAqB,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;QACzB,mBAAmB,EAAE,kBAAkB;KACxC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,SAAgB,YAAY,CAC1B,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,0BAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9C,kCAAkC,CACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"user.js","sourceRoot":"","sources":["../../../../src/models/components/user.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6GH,8CAQC;AASD,4DAQC;AAyBD,oCAQC;AArKD,0CAA4B;AAC5B,2DAA0D;AAC1D,qDAAiD;AACjD,gEAAkD;AAGlD,iEAAmD;AAEnD,6CAA8D;AAC9D,6CAA8D;AAC9D,qDAA0E;AAC1E,2CAA2D;AAE3D;;GAEG;AACU,QAAA,SAAS,GAAG;IACvB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,UAAU;CACX,CAAC;AAmEX,gBAAgB;AACH,QAAA,uBAAuB,GAIhC,SAAS,CAAC,aAAa,CAAC,iBAAS,CAAC,CAAC;AAEvC,gBAAgB;AACH,QAAA,uBAAuB,GAIhC,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,+BAAuB,CAAC,OAAO,CAAC,WAAW,CAAC;CACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,iBAAiB,CAC/B,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,+BAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,uCAAuC,CACxC,CAAC;AACJ,CAAC;AAED,gBAAgB;AACH,QAAA,8BAA8B,GAIvC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjB,SAAgB,wBAAwB,CACtC,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,sCAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC1D,8CAA8C,CAC/C,CAAC;AACJ,CAAC;AAED,gBAAgB;AACH,QAAA,kBAAkB,GAA2C,CAAC;KACxE,MAAM,CAAC;IACN,uBAAuB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IACxD,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;IACxB,IAAI,EAAE,0CAAyB;IAC/B,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+BAAuB,CAAC;IACjD,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,gCAAoB,CAAC;IAC5C,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,sCAA8B,CAAC,CAC7C;IACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAqB,CAAC,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,kCAAqB,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,yBAAyB,EAAE,sBAAsB;QACjD,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;QACzB,mBAAmB,EAAE,kBAAkB;KACxC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,SAAgB,YAAY,CAC1B,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,0BAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9C,kCAAkC,CACnC,CAAC;AACJ,CAAC"}