@insurance-broker/api-client 1.43.0 → 1.44.0

package/dist/schema.d.ts

@@ -4636,6 +4636,126 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/audit-entries": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * What happened to this broker's records, and who did it
+         * @description NFR-012's question — reconstruct who changed a sensitive record — over this broker's own trail and no one else's. Newest first, paged by an opaque cursor, with no total count. Filter by action, actor, entity, correlation identifier, outcome and period; every filter has an index behind it. An action this platform does not record is refused rather than answered with an empty page.
+         */
+        get: operations["SearchAuditTrail"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/audit-entries/actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The values the action filter accepts
+         * @description Built from the platform's audit action inventory rather than from a seeded catalogue (ADR-0014). The same list on every deployment. It is six values short while issue #313 is open, which the response says rather than leaves to be inferred.
+         */
+        get: operations["ListAuditTrailActions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/platform/audit-entries": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * What platform operations did, and who did it
+         * @description The platform's record of itself: credentials issued, rotated and revoked, administrators granted and withdrawn, and every cross-tenant read of a broker's trail. Newest first, paged by an opaque cursor, with no total count. Filter by action, operator, entity, correlation identifier, outcome, period and the broker an entry was about.
+         */
+        get: operations["SearchPlatformAuditTrail"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/platform/audit-entries/actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The values the action filter accepts
+         * @description Built from the platform's audit action inventory rather than from a seeded catalogue (ADR-0014). One list for both trails, because both carry one vocabulary and one check constraint. It is six values short while issue #313 is open.
+         */
+        get: operations["ListPlatformAuditTrailActions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/platform/tenants/{tenantKey}/audit-entries": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * What a named broker's staff did, read from platform scope
+         * @description The question support is asked after an incident and cannot otherwise answer. Every invocation writes a platform audit entry naming the broker read, the operator who read it and what they filtered for — ADR-0010's accountability rests on that entry, so the read is refused if it cannot be recorded. Newest first, paged by an opaque cursor, with no total count.
+         */
+        get: operations["SearchTenantAuditTrail"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/platform/tenants/{tenantKey}/audit-entries/actions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The values the action filter accepts
+         * @description Built from the platform's audit action inventory rather than from a seeded catalogue (ADR-0014). It discloses nothing about the broker named in the path — the vocabulary is a property of the software — so unlike the listing beside it, this route records no audit entry. It is six values short while issue #313 is open.
+         */
+        get: operations["ListTenantAuditTrailActions"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -4717,6 +4837,39 @@ export interface components {
             /** Format: uuid */
             insurerId: null | string;
         };
+        AuditActionsResponse: {
+            actions: string[];
+            incomplete: boolean;
+        };
+        AuditChangeResponse: {
+            property: string;
+            from: null | string;
+            to: null | string;
+        };
+        AuditEntryPage: {
+            items: components["schemas"]["AuditEntryResponse"][];
+            nextCursor: null | string;
+        };
+        AuditEntryResponse: {
+            /** Format: uuid */
+            id: string;
+            /** Format: date-time */
+            occurredAtUtc: string;
+            action: string;
+            outcome: string;
+            entityType: string;
+            entityId: string;
+            reference: null | string;
+            actorSubjectId: null | string;
+            /** Format: uuid */
+            actingPartyId: null | string;
+            source: string;
+            correlationId: null | string;
+            clientIpAddress: null | string;
+            clientUserAgent: null | string;
+            detail: null | string;
+            changes: components["schemas"]["AuditChangeResponse"][];
+        };
         BranchResponse: {
             /** Format: uuid */
             id: string;
@@ -5928,6 +6081,31 @@ export interface components {
             /** Format: date-time */
             updatedAtUtc: string;
         };
+        PlatformAuditEntryPage: {
+            items: components["schemas"]["PlatformAuditEntryResponse"][];
+            nextCursor: null | string;
+        };
+        PlatformAuditEntryResponse: {
+            /** Format: uuid */
+            id: string;
+            /** Format: date-time */
+            occurredAtUtc: string;
+            action: string;
+            outcome: string;
+            entityType: string;
+            entityId: string;
+            reference: null | string;
+            /** Format: uuid */
+            affectedTenantId: null | string;
+            affectedTenantKey: null | string;
+            actorSubjectId: null | string;
+            source: string;
+            correlationId: null | string;
+            clientIpAddress: null | string;
+            clientUserAgent: null | string;
+            detail: null | string;
+            changes: components["schemas"]["AuditChangeResponse"][];
+        };
         PlatformPlanFeatureResponse: {
             featureKey: string;
             value: string;
@@ -18402,4 +18580,231 @@ export interface operations {
             };
         };
     };
+    SearchAuditTrail: {
+        parameters: {
+            query?: {
+                action?: string;
+                actor?: string;
+                entityType?: string;
+                entityId?: string;
+                correlationId?: string;
+                outcome?: string;
+                from?: string;
+                to?: string;
+                cursor?: string;
+                limit?: number | string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuditEntryPage"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["HttpValidationProblemDetails"];
+                };
+            };
+        };
+    };
+    ListAuditTrailActions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuditActionsResponse"];
+                };
+            };
+        };
+    };
+    SearchPlatformAuditTrail: {
+        parameters: {
+            query?: {
+                action?: string;
+                actor?: string;
+                entityType?: string;
+                entityId?: string;
+                correlationId?: string;
+                outcome?: string;
+                from?: string;
+                to?: string;
+                affectedTenant?: string;
+                cursor?: string;
+                limit?: number | string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PlatformAuditEntryPage"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["HttpValidationProblemDetails"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListPlatformAuditTrailActions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuditActionsResponse"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    SearchTenantAuditTrail: {
+        parameters: {
+            query?: {
+                action?: string;
+                actor?: string;
+                entityType?: string;
+                entityId?: string;
+                correlationId?: string;
+                outcome?: string;
+                from?: string;
+                to?: string;
+                cursor?: string;
+                limit?: number | string;
+            };
+            header?: never;
+            path: {
+                tenantKey: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuditEntryPage"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["HttpValidationProblemDetails"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListTenantAuditTrailActions: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                tenantKey: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuditActionsResponse"];
+                };
+            };
+            /** @description Forbidden */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insurance-broker/api-client",
-  "version": "1.43.0",
+  "version": "1.44.0",
   "description": "Generated TypeScript client for the Insurance Broker Platform API. Do not edit by hand: regenerate with scripts/update-api-contract.",
   "license": "UNLICENSED",
   "private": false,