@greensecurity/javascript-sdk 0.46.0-beta.8 → 0.46.0-beta.9

package/dist/commonjs/models/components/tokenintrospection.js

@@ -0,0 +1,76 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenIntrospection$inboundSchema = exports.TokenIntrospectionActor$inboundSchema = void 0;
+exports.tokenIntrospectionActorFromJSON = tokenIntrospectionActorFromJSON;
+exports.tokenIntrospectionFromJSON = tokenIntrospectionFromJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const schemas_js_1 = require("../../lib/schemas.js");
+const types = __importStar(require("../../types/primitives.js"));
+const apptokenkind_js_1 = require("./apptokenkind.js");
+/** @internal */
+exports.TokenIntrospectionActor$inboundSchema = z.object({
+    sub: types.string(),
+});
+function tokenIntrospectionActorFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.TokenIntrospectionActor$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'TokenIntrospectionActor' from JSON`);
+}
+/** @internal */
+exports.TokenIntrospection$inboundSchema = z.object({
+    active: types.boolean(),
+    sub: types.optional(types.string()),
+    app_id: types.optional(types.number()),
+    activation_id: types.optional(types.number()),
+    scope: types.optional(types.string()),
+    exp: types.optional(types.number()),
+    iat: types.optional(types.number()),
+    kind: types.optional(apptokenkind_js_1.AppTokenKind$inboundSchema),
+    token_type: types.optional(types.literal("Bearer")),
+    act: types.optional(z.lazy(() => exports.TokenIntrospectionActor$inboundSchema)),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        "app_id": "appId",
+        "activation_id": "activationId",
+        "token_type": "tokenType",
+    });
+});
+function tokenIntrospectionFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.TokenIntrospection$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'TokenIntrospection' from JSON`);
+}
+//# sourceMappingURL=tokenintrospection.js.map

package/dist/commonjs/models/components/tokenintrospection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospection.js","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospection.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuFH,0EAQC;AA0BD,gEAQC;AA/HD,0CAA4B;AAC5B,2DAA0D;AAC1D,qDAAiD;AAEjD,iEAAmD;AAEnD,uDAA6E;AAsE7E,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,CAAC,CAAC,MAAM,CAAC;IACX,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAEH,SAAgB,+BAA+B,CAC7C,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,6CAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjE,qDAAqD,CACtD,CAAC;AACJ,CAAC;AAED,gBAAgB;AACH,QAAA,gCAAgC,GAIzC,CAAC,CAAC,MAAM,CAAC;IACX,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE;IACvB,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACtC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,4CAA0B,CAAC;IAChD,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,6CAAqC,CAAC,CAAC;CACzE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,QAAQ,EAAE,OAAO;QACjB,eAAe,EAAE,cAAc;QAC/B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,0BAA0B,CACxC,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,wCAAgC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC5D,gDAAgD,CACjD,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/tokenintrospectionrequest.d.ts

@@ -0,0 +1,21 @@
+import * as z from "zod/v3";
+import { OAuthTokenTypeHint } from "./oauthtokentypehint.js";
+export type TokenIntrospectionRequest = {
+    /**
+     * The token to check, typically an app user token your app's UI sent to your backend.
+     */
+    token: string;
+    /**
+     * Optional hint about the kind of token. Tokens are recognised by prefix, so this is informational.
+     */
+    tokenTypeHint?: OAuthTokenTypeHint | undefined;
+};
+/** @internal */
+export type TokenIntrospectionRequest$Outbound = {
+    token: string;
+    token_type_hint?: string | undefined;
+};
+/** @internal */
+export declare const TokenIntrospectionRequest$outboundSchema: z.ZodType<TokenIntrospectionRequest$Outbound, z.ZodTypeDef, TokenIntrospectionRequest>;
+export declare function tokenIntrospectionRequestToJSON(tokenIntrospectionRequest: TokenIntrospectionRequest): string;
+//# sourceMappingURL=tokenintrospectionrequest.d.ts.map

package/dist/commonjs/models/components/tokenintrospectionrequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospectionrequest.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospectionrequest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,yBAAyB,GAAG;IACtC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,aAAa,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAChD,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,kCAAkC,GAAG;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,wCAAwC,EAAE,CAAC,CAAC,OAAO,CAC9D,kCAAkC,EAClC,CAAC,CAAC,UAAU,EACZ,yBAAyB,CAQzB,CAAC;AAEH,wBAAgB,+BAA+B,CAC7C,yBAAyB,EAAE,yBAAyB,GACnD,MAAM,CAIR"}

package/dist/commonjs/models/components/tokenintrospectionrequest.js

@@ -0,0 +1,56 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenIntrospectionRequest$outboundSchema = void 0;
+exports.tokenIntrospectionRequestToJSON = tokenIntrospectionRequestToJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const oauthtokentypehint_js_1 = require("./oauthtokentypehint.js");
+/** @internal */
+exports.TokenIntrospectionRequest$outboundSchema = z.object({
+    token: z.string(),
+    tokenTypeHint: oauthtokentypehint_js_1.OAuthTokenTypeHint$outboundSchema.optional(),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        tokenTypeHint: "token_type_hint",
+    });
+});
+function tokenIntrospectionRequestToJSON(tokenIntrospectionRequest) {
+    return JSON.stringify(exports.TokenIntrospectionRequest$outboundSchema.parse(tokenIntrospectionRequest));
+}
+//# sourceMappingURL=tokenintrospectionrequest.js.map

package/dist/commonjs/models/components/tokenintrospectionrequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenintrospectionrequest.js","sourceRoot":"","sources":["../../../../src/models/components/tokenintrospectionrequest.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCH,0EAMC;AA5CD,0CAA4B;AAC5B,2DAA0D;AAC1D,mEAGiC;AAmBjC,gBAAgB;AACH,QAAA,wCAAwC,GAIjD,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,aAAa,EAAE,yDAAiC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,aAAa,EAAE,iBAAiB;KACjC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,+BAA+B,CAC7C,yBAAoD;IAEpD,OAAO,IAAI,CAAC,SAAS,CACnB,gDAAwC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/tokenresponse.d.ts

@@ -0,0 +1,129 @@
+import * as z from "zod/v3";
+import { OpenEnum } from "../../types/enums.js";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { SDKValidationError } from "../errors/sdkvalidationerror.js";
+/**
+ * What kind of token was issued. Returned for app user, app installation and developer
+ *
+ * @remarks
+ * CLI tokens, including every CLI refresh; absent from the plain API token that
+ * `client_credentials` without `activation_id` and a service account's
+ * `refresh_token` return.
+ */
+export declare const IssuedTokenType: {
+    readonly UrnGreensecurityTokenTypeAppUser: "urn:greensecurity:token-type:app_user";
+    readonly UrnGreensecurityTokenTypeAppInstallation: "urn:greensecurity:token-type:app_installation";
+    readonly UrnGreensecurityTokenTypeDeveloperCli: "urn:greensecurity:token-type:developer_cli";
+};
+/**
+ * What kind of token was issued. Returned for app user, app installation and developer
+ *
+ * @remarks
+ * CLI tokens, including every CLI refresh; absent from the plain API token that
+ * `client_credentials` without `activation_id` and a service account's
+ * `refresh_token` return.
+ */
+export type IssuedTokenType = OpenEnum<typeof IssuedTokenType>;
+/**
+ * A successful `POST /oauth/token` response (RFC 6749 section 5.1, RFC 8693 section 2.2.1).
+ *
+ * @remarks
+ * Send `access_token` as `Authorization: Bearer <access_token>`; app and developer tokens
+ * are refused as a `?token=` query parameter.
+ *
+ * Which fields are present depends on the grant:
+ *
+ * | Grant | Fields |
+ * | --- | --- |
+ * | Token exchange, and `client_credentials` with `activation_id` | `access_token`, `issued_token_type`, `token_type`, `expires_in`, `scope`, `activation_id` |
+ * | Device code, and the apps CLI's `refresh_token` | `access_token`, `issued_token_type`, `token_type`, `expires_in`, `scope`, `refresh_token`, `refresh_token_expires_in` |
+ * | `client_credentials` without `activation_id` | `access_token`, `token_type`, `expires_in`, and `scope` only when the request sent one |
+ * | A service account's `refresh_token` | As `client_credentials` without `activation_id`, plus `refresh_token` |
+ */
+export type TokenResponse = {
+    /**
+     * The token. An app or developer token's prefix names its kind: `gsu_` for an app user
+     *
+     * @remarks
+     * token, `gsi_` for an app installation token, `gsd_` for a developer CLI token. These
+     * are shown only once and cannot be retrieved later. The access
+     * token of a `client_credentials` grant without `activation_id`, or of a service
+     * account's `refresh_token` grant, is an ordinary API token with no prefix.
+     */
+    accessToken: string;
+    /**
+     * What kind of token was issued. Returned for app user, app installation and developer
+     *
+     * @remarks
+     * CLI tokens, including every CLI refresh; absent from the plain API token that
+     * `client_credentials` without `activation_id` and a service account's
+     * `refresh_token` return.
+     */
+    issuedTokenType?: IssuedTokenType | undefined;
+    tokenType: "Bearer";
+    /**
+     * Seconds until the token expires: 900 (15 minutes) for every kind. A developer CLI
+     *
+     * @remarks
+     * token is capped at the end of its login (90 days after the device authorization), so
+     * near that end it can be less. Request a new token before then. Only the device grant
+     * and the `refresh_token` grant return a `refresh_token`.
+     */
+    expiresIn: number;
+    /**
+     * Space-delimited scopes the token carries. For an app user token these are the
+     *
+     * @remarks
+     * manifest permissions (`resource.action`) that the user's own role also grants; for an
+     * installation token, the app's manifest permissions; for a developer CLI token,
+     * `apps:develop`. A `scope` in the request narrows this further.
+     *
+     * A plain API access token (`client_credentials` without `activation_id`, or
+     * `refresh_token`) carries `scope` only when it was narrowed: when the request sent a
+     * `scope`, or when the refresh token it replaces was itself narrowed. Without it the
+     * token has every permission of the service account.
+     *
+     * A narrowed token (any app or developer token, or a plain API access token that
+     * carries `scope`) can only use its scope. An endpoint that names a permission
+     * outside it answers `403` ("App token doesn't have permission" for an app token,
+     * "Token scope doesn't permit this." for a plain one); an endpoint that checks no
+     * named permission answers `403` "This endpoint does not accept scoped tokens."
+     * unless it applies the scope itself. `GET /users/{id}` does, but returns no
+     * `user_token` to a narrowed token and refuses `expand=user.payment_profile` with
+     * `403`. A narrowed token is also refused as the `client_credentials` Bearer, as a
+     * `subject_token`, and as the credential for `POST /oauth/introspect` and
+     * `POST /oauth/revoke`.
+     */
+    scope?: string | undefined;
+    /**
+     * The activation an app user or app installation token is bound to. Not returned for any other token.
+     */
+    activationId?: number | undefined;
+    /**
+     * A single-use refresh token. Keep it as secret as a password; it is never a Bearer
+     *
+     * @remarks
+     * credential.
+     *
+     * - **Apps CLI** (`gsdr_…`): returned by the device grant and by every CLI refresh.
+     *   Each refresh spends it and returns a new one (see `OAuthCliRefreshTokenGrant`).
+     * - **Service account** (no prefix): returned by a service account's `refresh_token`
+     *   grant, replacing the token just spent. It expires after 30 days.
+     */
+    refreshToken?: string | undefined;
+    /**
+     * Apps CLI only: seconds until `refresh_token` expires if it is not used, normally
+     *
+     * @remarks
+     * 2592000 (30 days). A CLI login ends 90 days after the device authorization however
+     * often it is refreshed, so in its last 30 days this is capped at that end (for
+     * example 259200 on day 87).
+     */
+    refreshTokenExpiresIn?: number | undefined;
+};
+/** @internal */
+export declare const IssuedTokenType$inboundSchema: z.ZodType<IssuedTokenType, z.ZodTypeDef, unknown>;
+/** @internal */
+export declare const TokenResponse$inboundSchema: z.ZodType<TokenResponse, z.ZodTypeDef, unknown>;
+export declare function tokenResponseFromJSON(jsonString: string): SafeParseResult<TokenResponse, SDKValidationError>;
+//# sourceMappingURL=tokenresponse.d.ts.map

package/dist/commonjs/models/components/tokenresponse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenresponse.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenresponse.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;CAMlB,CAAC;AACX;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,eAAe,CAAC,CAAC;AAE/D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B;;;;;;;;OAQG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C,SAAS,EAAE,QAAQ,CAAC;IACpB;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5C,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,OAAO,CACnD,eAAe,EACf,CAAC,CAAC,UAAU,EACZ,OAAO,CACmC,CAAC;AAE7C,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CAoBP,CAAC;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAMpD"}

package/dist/commonjs/models/components/tokenresponse.js

@@ -0,0 +1,85 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenResponse$inboundSchema = exports.IssuedTokenType$inboundSchema = exports.IssuedTokenType = void 0;
+exports.tokenResponseFromJSON = tokenResponseFromJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const schemas_js_1 = require("../../lib/schemas.js");
+const openEnums = __importStar(require("../../types/enums.js"));
+const types = __importStar(require("../../types/primitives.js"));
+/**
+ * What kind of token was issued. Returned for app user, app installation and developer
+ *
+ * @remarks
+ * CLI tokens, including every CLI refresh; absent from the plain API token that
+ * `client_credentials` without `activation_id` and a service account's
+ * `refresh_token` return.
+ */
+exports.IssuedTokenType = {
+    UrnGreensecurityTokenTypeAppUser: "urn:greensecurity:token-type:app_user",
+    UrnGreensecurityTokenTypeAppInstallation: "urn:greensecurity:token-type:app_installation",
+    UrnGreensecurityTokenTypeDeveloperCli: "urn:greensecurity:token-type:developer_cli",
+};
+/** @internal */
+exports.IssuedTokenType$inboundSchema = openEnums.inboundSchema(exports.IssuedTokenType);
+/** @internal */
+exports.TokenResponse$inboundSchema = z.object({
+    access_token: types.string(),
+    issued_token_type: types.optional(exports.IssuedTokenType$inboundSchema),
+    token_type: types.literal("Bearer"),
+    expires_in: types.number(),
+    scope: types.optional(types.string()),
+    activation_id: types.optional(types.number()),
+    refresh_token: types.optional(types.string()),
+    refresh_token_expires_in: types.optional(types.number()),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        "access_token": "accessToken",
+        "issued_token_type": "issuedTokenType",
+        "token_type": "tokenType",
+        "expires_in": "expiresIn",
+        "activation_id": "activationId",
+        "refresh_token": "refreshToken",
+        "refresh_token_expires_in": "refreshTokenExpiresIn",
+    });
+});
+function tokenResponseFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.TokenResponse$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'TokenResponse' from JSON`);
+}
+//# sourceMappingURL=tokenresponse.js.map

package/dist/commonjs/models/components/tokenresponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenresponse.js","sourceRoot":"","sources":["../../../../src/models/components/tokenresponse.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuKH,sDAQC;AA7KD,0CAA4B;AAC5B,2DAA0D;AAC1D,qDAAiD;AACjD,gEAAkD;AAGlD,iEAAmD;AAGnD;;;;;;;GAOG;AACU,QAAA,eAAe,GAAG;IAC7B,gCAAgC,EAAE,uCAAuC;IACzE,wCAAwC,EACtC,+CAA+C;IACjD,qCAAqC,EACnC,4CAA4C;CACtC,CAAC;AA6GX,gBAAgB;AACH,QAAA,6BAA6B,GAItC,SAAS,CAAC,aAAa,CAAC,uBAAe,CAAC,CAAC;AAE7C,gBAAgB;AACH,QAAA,2BAA2B,GAIpC,CAAC,CAAC,MAAM,CAAC;IACX,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;IAC5B,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,qCAA6B,CAAC;IAChE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE;IAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC7C,wBAAwB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;CACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,cAAc,EAAE,aAAa;QAC7B,mBAAmB,EAAE,iBAAiB;QACtC,YAAY,EAAE,WAAW;QACzB,YAAY,EAAE,WAAW;QACzB,eAAe,EAAE,cAAc;QAC/B,eAAe,EAAE,cAAc;QAC/B,0BAA0B,EAAE,uBAAuB;KACpD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,qBAAqB,CACnC,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,mCAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,2CAA2C,CAC5C,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/components/tokenrevocationrequest.d.ts

@@ -0,0 +1,30 @@
+import * as z from "zod/v3";
+import { OAuthTokenTypeHint } from "./oauthtokentypehint.js";
+export type TokenRevocationRequest = {
+    /**
+     * The token to revoke. Revoking any token of an apps CLI login (`gsd_` or `gsdr_`) revokes the whole login.
+     */
+    token: string;
+    /**
+     * Optional hint about the kind of token. Tokens are recognised by prefix, so this is informational.
+     */
+    tokenTypeHint?: OAuthTokenTypeHint | undefined;
+    /**
+     * The apps CLI's public client id (RFC 7009 section 2.1). With a `gsdr_` refresh token
+     *
+     * @remarks
+     * as `token`, no `Authorization` is needed: holding the refresh token entitles the
+     * caller to revoke its login. Ignored with any other token.
+     */
+    clientId?: "greensecurity-apps-cli" | undefined;
+};
+/** @internal */
+export type TokenRevocationRequest$Outbound = {
+    token: string;
+    token_type_hint?: string | undefined;
+    client_id?: "greensecurity-apps-cli" | undefined;
+};
+/** @internal */
+export declare const TokenRevocationRequest$outboundSchema: z.ZodType<TokenRevocationRequest$Outbound, z.ZodTypeDef, TokenRevocationRequest>;
+export declare function tokenRevocationRequestToJSON(tokenRevocationRequest: TokenRevocationRequest): string;
+//# sourceMappingURL=tokenrevocationrequest.d.ts.map

package/dist/commonjs/models/components/tokenrevocationrequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenrevocationrequest.d.ts","sourceRoot":"","sources":["../../../../src/models/components/tokenrevocationrequest.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,sBAAsB,GAAG;IACnC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,aAAa,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF,gBAAgB;AAChB,MAAM,MAAM,+BAA+B,GAAG;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,SAAS,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CAClD,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,+BAA+B,EAC/B,CAAC,CAAC,UAAU,EACZ,sBAAsB,CAUtB,CAAC;AAEH,wBAAgB,4BAA4B,CAC1C,sBAAsB,EAAE,sBAAsB,GAC7C,MAAM,CAIR"}

package/dist/commonjs/models/components/tokenrevocationrequest.js

@@ -0,0 +1,58 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenRevocationRequest$outboundSchema = void 0;
+exports.tokenRevocationRequestToJSON = tokenRevocationRequestToJSON;
+const z = __importStar(require("zod/v3"));
+const primitives_js_1 = require("../../lib/primitives.js");
+const oauthtokentypehint_js_1 = require("./oauthtokentypehint.js");
+/** @internal */
+exports.TokenRevocationRequest$outboundSchema = z.object({
+    token: z.string(),
+    tokenTypeHint: oauthtokentypehint_js_1.OAuthTokenTypeHint$outboundSchema.optional(),
+    clientId: z.literal("greensecurity-apps-cli").optional(),
+}).transform((v) => {
+    return (0, primitives_js_1.remap)(v, {
+        tokenTypeHint: "token_type_hint",
+        clientId: "client_id",
+    });
+});
+function tokenRevocationRequestToJSON(tokenRevocationRequest) {
+    return JSON.stringify(exports.TokenRevocationRequest$outboundSchema.parse(tokenRevocationRequest));
+}
+//# sourceMappingURL=tokenrevocationrequest.js.map

package/dist/commonjs/models/components/tokenrevocationrequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenrevocationrequest.js","sourceRoot":"","sources":["../../../../src/models/components/tokenrevocationrequest.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDH,oEAMC;AAvDD,0CAA4B;AAC5B,2DAA0D;AAC1D,mEAGiC;AA4BjC,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,CAAC,CAAC,MAAM,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,aAAa,EAAE,yDAAiC,CAAC,QAAQ,EAAE;IAC3D,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;IACjB,OAAO,IAAA,qBAAM,EAAC,CAAC,EAAE;QACf,aAAa,EAAE,iBAAiB;QAChC,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAgB,4BAA4B,CAC1C,sBAA8C;IAE9C,OAAO,IAAI,CAAC,SAAS,CACnB,6CAAqC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CACpE,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/errors/appsecretsunprocessable.d.ts

@@ -0,0 +1,19 @@
+import * as z from "zod/v3";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { ApiErrorResponse } from "./apierrorresponse.js";
+import { ApiValidationErrorResponse } from "./apivalidationerrorresponse.js";
+import { SDKValidationError } from "./sdkvalidationerror.js";
+/**
+ * A parameter failed validation, `activation_id` is missing with the service account's
+ *
+ * @remarks
+ * token, a `user` scope has no `user_id` with the service account or an installation
+ * token from `client_credentials`, an `installation` scope names a `user_id`, or the scope
+ * already holds 25 secrets.
+ * Carries either the standard error envelope or the validation envelope.
+ */
+export type AppSecretsUnprocessable = ApiErrorResponse | ApiValidationErrorResponse;
+/** @internal */
+export declare const AppSecretsUnprocessable$inboundSchema: z.ZodType<AppSecretsUnprocessable, z.ZodTypeDef, unknown>;
+export declare function appSecretsUnprocessableFromJSON(jsonString: string): SafeParseResult<AppSecretsUnprocessable, SDKValidationError>;
+//# sourceMappingURL=appsecretsunprocessable.d.ts.map

package/dist/commonjs/models/errors/appsecretsunprocessable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsecretsunprocessable.d.ts","sourceRoot":"","sources":["../../../../src/models/errors/appsecretsunprocessable.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,gBAAgB,EAEjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAE3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAC/B,gBAAgB,GAChB,0BAA0B,CAAC;AAE/B,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,uBAAuB,EACvB,CAAC,CAAC,UAAU,EACZ,OAAO,CAIP,CAAC;AAEH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,uBAAuB,EAAE,kBAAkB,CAAC,CAM9D"}

package/dist/commonjs/models/errors/appsecretsunprocessable.js

@@ -0,0 +1,20 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppSecretsUnprocessable$inboundSchema = void 0;
+exports.appSecretsUnprocessableFromJSON = appSecretsUnprocessableFromJSON;
+const schemas_js_1 = require("../../lib/schemas.js");
+const smartUnion_js_1 = require("../../types/smartUnion.js");
+const apierrorresponse_js_1 = require("./apierrorresponse.js");
+const apivalidationerrorresponse_js_1 = require("./apivalidationerrorresponse.js");
+/** @internal */
+exports.AppSecretsUnprocessable$inboundSchema = (0, smartUnion_js_1.smartUnion)([
+    apierrorresponse_js_1.ApiErrorResponse$inboundSchema,
+    apivalidationerrorresponse_js_1.ApiValidationErrorResponse$inboundSchema,
+]);
+function appSecretsUnprocessableFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.AppSecretsUnprocessable$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'AppSecretsUnprocessable' from JSON`);
+}
+//# sourceMappingURL=appsecretsunprocessable.js.map

package/dist/commonjs/models/errors/appsecretsunprocessable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appsecretsunprocessable.js","sourceRoot":"","sources":["../../../../src/models/errors/appsecretsunprocessable.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAuCH,0EAQC;AA5CD,qDAAiD;AAEjD,6DAAuD;AACvD,+DAG+B;AAC/B,mFAGyC;AAgBzC,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,IAAA,0BAAU,EAAC;IACb,oDAA8B;IAC9B,wEAAwC;CACzC,CAAC,CAAC;AAEH,SAAgB,+BAA+B,CAC7C,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,6CAAqC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACjE,qDAAqD,CACtD,CAAC;AACJ,CAAC"}

package/dist/commonjs/models/errors/createappdevsession.d.ts

@@ -0,0 +1,17 @@
+import * as z from "zod/v3";
+import { Result as SafeParseResult } from "../../types/fp.js";
+import { ApiValidationErrorResponse } from "./apivalidationerrorresponse.js";
+import { DevSessionErrorResponse } from "./devsessionerrorresponse.js";
+import { SDKValidationError } from "./sdkvalidationerror.js";
+/**
+ * A field failed validation. A refused `manifest` also lists each problem in `errors`. A
+ *
+ * @remarks
+ * parameter that fails validation before the endpoint runs gets the validation envelope,
+ * whose `error` is an array.
+ */
+export type CreateAppDevSessionResponseBody = DevSessionErrorResponse | ApiValidationErrorResponse;
+/** @internal */
+export declare const CreateAppDevSessionResponseBody$inboundSchema: z.ZodType<CreateAppDevSessionResponseBody, z.ZodTypeDef, unknown>;
+export declare function createAppDevSessionResponseBodyFromJSON(jsonString: string): SafeParseResult<CreateAppDevSessionResponseBody, SDKValidationError>;
+//# sourceMappingURL=createappdevsession.d.ts.map

package/dist/commonjs/models/errors/createappdevsession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createappdevsession.d.ts","sourceRoot":"","sources":["../../../../src/models/errors/createappdevsession.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAE9D,OAAO,EACL,0BAA0B,EAE3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,uBAAuB,EAExB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,MAAM,+BAA+B,GACvC,uBAAuB,GACvB,0BAA0B,CAAC;AAE/B,gBAAgB;AAChB,eAAO,MAAM,6CAA6C,EAAE,CAAC,CAAC,OAAO,CACnE,+BAA+B,EAC/B,CAAC,CAAC,UAAU,EACZ,OAAO,CAIP,CAAC;AAEH,wBAAgB,uCAAuC,CACrD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,+BAA+B,EAAE,kBAAkB,CAAC,CAMtE"}

package/dist/commonjs/models/errors/createappdevsession.js

@@ -0,0 +1,20 @@
+"use strict";
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateAppDevSessionResponseBody$inboundSchema = void 0;
+exports.createAppDevSessionResponseBodyFromJSON = createAppDevSessionResponseBodyFromJSON;
+const schemas_js_1 = require("../../lib/schemas.js");
+const smartUnion_js_1 = require("../../types/smartUnion.js");
+const apivalidationerrorresponse_js_1 = require("./apivalidationerrorresponse.js");
+const devsessionerrorresponse_js_1 = require("./devsessionerrorresponse.js");
+/** @internal */
+exports.CreateAppDevSessionResponseBody$inboundSchema = (0, smartUnion_js_1.smartUnion)([
+    devsessionerrorresponse_js_1.DevSessionErrorResponse$inboundSchema,
+    apivalidationerrorresponse_js_1.ApiValidationErrorResponse$inboundSchema,
+]);
+function createAppDevSessionResponseBodyFromJSON(jsonString) {
+    return (0, schemas_js_1.safeParse)(jsonString, (x) => exports.CreateAppDevSessionResponseBody$inboundSchema.parse(JSON.parse(x)), `Failed to parse 'CreateAppDevSessionResponseBody' from JSON`);
+}
+//# sourceMappingURL=createappdevsession.js.map

package/dist/commonjs/models/errors/createappdevsession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createappdevsession.js","sourceRoot":"","sources":["../../../../src/models/errors/createappdevsession.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAqCH,0FAQC;AA1CD,qDAAiD;AAEjD,6DAAuD;AACvD,mFAGyC;AACzC,6EAGsC;AActC,gBAAgB;AACH,QAAA,6CAA6C,GAItD,IAAA,0BAAU,EAAC;IACb,kEAAqC;IACrC,wEAAwC;CACzC,CAAC,CAAC;AAEH,SAAgB,uCAAuC,CACrD,UAAkB;IAElB,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,qDAA6C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACzE,6DAA6D,CAC9D,CAAC;AACJ,CAAC"}