@lucern/sdk 1.0.29 → 1.0.30

package/dist/harnessClient.js

@@ -1,5 +1,8 @@
-import { createGatewayRequestClient, LucernApiError, randomIdempotencyKey, toQueryString, } from "./coreClient.js";
-import { createListResult, mapGatewayData, normalizeTopicQuery } from "./sdkSurface.js";
+// biome-ignore-all lint/style/useFilenamingConvention: This file is an @lucern/sdk public import ABI / package subpath compatibility surface; the camelCase filename is intentional.
+import { createGatewayRequestClient, 
+// biome-ignore lint/style/noExportedImports: harnessClient preserves this legacy compatibility re-export while package root also exports coreClient.
+LucernApiError, randomIdempotencyKey, toQueryString, } from "./coreClient.js";
+import { createListResult, mapGatewayData, normalizeTopicQuery, } from "./sdkSurface.js";
 export { LucernApiError };
 /**
  * Create the harness client for agent and tool registry operations.
@@ -10,15 +13,17 @@ export function createHarnessClient(config = {}) {
         /**
          * List agent definitions.
          */
-        async listAgentDefinitions(scope = {}) {
-            return gateway.request({
+        listAgentDefinitions(scope = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/harness/agents${toQueryString(scope)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "agents")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "agents")));
         },
         /**
          * Get an agent definition.
          */
-        async getAgentDefinition(agentId, scope = {}) {
+        getAgentDefinition(agentId, scope = {}) {
             return gateway.request({
                 path: `/api/platform/v1/harness/agents/${encodeURIComponent(agentId)}${toQueryString(scope)}`,
             });
@@ -26,7 +31,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Create an agent definition.
          */
-        async createAgentDefinition(input, idempotencyKey) {
+        createAgentDefinition(input, idempotencyKey) {
             return gateway.request({
                 path: "/api/platform/v1/harness/agents",
                 method: "POST",
@@ -37,7 +42,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Update an agent definition.
          */
-        async updateAgentDefinition(agentId, input, idempotencyKey) {
+        updateAgentDefinition(agentId, input, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/harness/agents/${encodeURIComponent(agentId)}`,
                 method: "PUT",
@@ -48,7 +53,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Invoke a managed agent definition.
          */
-        async invokeManagedAgentDefinition(agentId, input, idempotencyKey) {
+        invokeManagedAgentDefinition(agentId, input, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/harness/agents/${encodeURIComponent(agentId)}/runs`,
                 method: "POST",
@@ -62,23 +67,27 @@ export function createHarnessClient(config = {}) {
         /**
          * List runs for an agent definition.
          */
-        async listAgentRuns(agentId, scope = {}) {
-            return gateway.request({
+        listAgentRuns(agentId, scope = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/harness/agents/${encodeURIComponent(agentId)}/runs${toQueryString(scope)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "runs")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "runs")));
         },
         /**
          * List tool definitions.
          */
-        async listToolDefinitions(scope = {}) {
-            return gateway.request({
+        listToolDefinitions(scope = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/harness/tools${toQueryString(scope)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "tools")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "tools")));
         },
         /**
          * Get a tool definition.
          */
-        async getToolDefinition(toolId, scope = {}) {
+        getToolDefinition(toolId, scope = {}) {
             return gateway.request({
                 path: `/api/platform/v1/harness/tools/${encodeURIComponent(toolId)}${toQueryString(scope)}`,
             });
@@ -86,7 +95,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Create a tool definition.
          */
-        async createToolDefinition(input, idempotencyKey) {
+        createToolDefinition(input, idempotencyKey) {
             return gateway.request({
                 path: "/api/platform/v1/harness/tools",
                 method: "POST",
@@ -97,7 +106,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Update a tool definition.
          */
-        async updateToolDefinition(toolId, input, idempotencyKey) {
+        updateToolDefinition(toolId, input, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/harness/tools/${encodeURIComponent(toolId)}`,
                 method: "PUT",
@@ -108,7 +117,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Execute a tool definition.
          */
-        async executeToolDefinition(toolId, input = {}) {
+        executeToolDefinition(toolId, input = {}) {
             return gateway.request({
                 path: `/api/platform/v1/harness/tools/${encodeURIComponent(toolId)}/execute`,
                 method: "POST",
@@ -118,15 +127,17 @@ export function createHarnessClient(config = {}) {
         /**
          * List run ledger entries.
          */
-        async listRunEntries(scope = {}) {
-            return gateway.request({
+        listRunEntries(scope = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/harness/runs${toQueryString(scope)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "runs")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "runs")));
         },
         /**
          * Create a harness run.
          */
-        async startHarnessRun(input, idempotencyKey) {
+        startHarnessRun(input, idempotencyKey) {
             return gateway.request({
                 path: "/api/platform/v1/harness/runs",
                 method: "POST",
@@ -137,7 +148,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Get a run ledger entry.
          */
-        async getRunLedgerEntry(runId) {
+        getRunLedgerEntry(runId) {
             return gateway.request({
                 path: `/api/platform/v1/harness/runs/${encodeURIComponent(runId)}`,
             });
@@ -145,7 +156,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Update a harness run with a ledger event.
          */
-        async reportHarnessRunEvent(runId, input, idempotencyKey) {
+        reportHarnessRunEvent(runId, input, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/harness/runs/${encodeURIComponent(runId)}/report`,
                 method: "POST",
@@ -156,7 +167,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Update a harness run heartbeat.
          */
-        async heartbeatHarnessRun(runId, input, idempotencyKey) {
+        heartbeatHarnessRun(runId, input, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/harness/runs/${encodeURIComponent(runId)}/heartbeat`,
                 method: "POST",
@@ -167,7 +178,7 @@ export function createHarnessClient(config = {}) {
         /**
          * Complete a harness run.
          */
-        async completeHarnessRun(runId, input, idempotencyKey) {
+        completeHarnessRun(runId, input, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/harness/runs/${encodeURIComponent(runId)}/complete`,
                 method: "POST",
@@ -178,15 +189,17 @@ export function createHarnessClient(config = {}) {
         /**
          * List prompt resolutions.
          */
-        async listPromptResolutions(query = {}) {
-            return gateway.request({
+        listPromptResolutions(query = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/harness/prompts${toQueryString(query)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "prompts")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "prompts")));
         },
         /**
          * Get the harness scope taxonomy.
          */
-        async getScopeTaxonomy() {
+        getScopeTaxonomy() {
             return gateway.request({
                 path: "/api/platform/v1/harness/scopes",
             });

package/dist/identityClient.d.ts

@@ -1,69 +1,69 @@
-import { type GatewayClientConfig, type GatewayScope, type PlatformGatewaySuccess, LucernApiError } from "./coreClient";
+import { type ResolvedInteractivePrincipalContext, type ResolveInteractivePrincipalInput } from "./control-plane";
+import { type GatewayClientConfig, type GatewayScope, LucernApiError, type PlatformGatewaySuccess } from "./coreClient";
 import type { JsonObject, ListResult, SdkPrincipalContext } from "./types";
-import { type ResolveInteractivePrincipalInput, type ResolvedInteractivePrincipalContext } from "./control-plane";
 /** Summary of the currently authenticated principal and their scopes. */
 export type IdentitySummary = SdkPrincipalContext;
 /** Gateway response wrapping an identity summary payload. */
 export type IdentityWhoamiResponse = PlatformGatewaySuccess<IdentitySummary>;
-export { LucernApiError };
 export type { GatewayScope, PlatformGatewaySuccess } from "./coreClient";
+export { LucernApiError };
 /** Configuration for the identity client. */
 export type IdentityClientConfig = GatewayClientConfig;
-export type ClerkUserSearchResult = {
+export interface ClerkUserSearchResult {
     clerkId: string;
+    displayName: string | null;
     email: string | null;
     firstName: string | null;
-    lastName: string | null;
-    displayName: string | null;
     imageUrl: string | null;
-};
+    lastName: string | null;
+}
 export declare const TENANT_IDENTITY_FIELDS: readonly ["tenantId", "workspaceId", "principalId", "integrationKey", "secretRef", "policySubject", "policyAction", "policyResource", "decision", "config", "configKey", "configValue", "provider", "status", "metadata", "limit", "cursor"];
-export type TenantIdentityConfigRecord = {
-    tenantId: string;
-    workspaceId?: string;
+export interface TenantIdentityConfigRecord {
     config?: JsonObject | null;
     metadata?: JsonObject | null;
+    tenantId: string;
     updatedAt?: number;
     updatedBy?: string;
-};
-export type TenantIntegrationRecord = {
-    tenantId: string;
     workspaceId?: string;
+}
+export interface TenantIntegrationRecord {
+    createdAt?: number;
     integrationKey: string;
+    metadata?: JsonObject | null;
     provider?: string;
     status?: string;
-    metadata?: JsonObject | null;
-    createdAt?: number;
-    updatedAt?: number;
-};
-export type TenantSecretReference = {
     tenantId: string;
+    updatedAt?: number;
     workspaceId?: string;
+}
+export interface TenantSecretReference {
     integrationKey?: string;
+    metadata?: JsonObject | null;
     secretRef: string;
     status?: string;
-    metadata?: JsonObject | null;
-    updatedAt?: number;
-};
-export type PolicyDecisionRecord = {
     tenantId: string;
+    updatedAt?: number;
     workspaceId?: string;
-    principalId?: string;
-    policySubject: string;
+}
+export interface PolicyDecisionRecord {
+    createdAt?: number;
+    decision: "allow" | "deny" | string;
+    metadata?: JsonObject | null;
     policyAction: string;
     policyResource: string;
-    decision: "allow" | "deny" | string;
+    policySubject: string;
+    principalId?: string;
     reason?: string;
-    metadata?: JsonObject | null;
-    createdAt?: number;
-};
-export type TenantIdentityScope = {
     tenantId: string;
     workspaceId?: string;
-    principalId?: string;
-    limit?: number;
+}
+export interface TenantIdentityScope {
     cursor?: string;
-};
+    limit?: number;
+    principalId?: string;
+    tenantId: string;
+    workspaceId?: string;
+}
 export type UpdateTenantConfigInput = TenantIdentityScope & {
     config?: JsonObject;
     configKey?: string;
@@ -102,33 +102,7 @@ export declare function createIdentityClient(config?: IdentityClientConfig): {
     /**
      * Resolve the current authenticated identity summary.
      */
-    whoami(): Promise<PlatformGatewaySuccess<{
-        principalId: string;
-        principalType: "user" | "group" | "human" | "service" | "agent" | "external_viewer";
-        clerkId: string | undefined;
-        tenantId: string | null;
-        workspaceId: string | null;
-        scopes: string[];
-        roles: string[];
-        groupIds: string[];
-        permittedToolNames: string[];
-        permittedPackKeys: string[];
-        principalStatus: string | undefined;
-        tenantStatus: string | undefined;
-        workspaceStatus: string | undefined;
-        isPlatformAdmin: boolean;
-        isTenantAdmin: boolean;
-        isWorkspaceAdmin: boolean;
-        permit: {
-            subject: string;
-            tenant: string;
-            workspace?: string;
-        } | undefined;
-        authMode: string | undefined;
-        sessionId: string | undefined;
-        delegatedBy: string | undefined;
-        expiresAt: number | undefined;
-    }>>;
+    whoami(): Promise<PlatformGatewaySuccess<SdkPrincipalContext>>;
     /**
      * Resolve a Clerk subject through the tenant control-plane Permit projection.
      * @deprecated Prefer lucern.controlPlane.identity.resolveInteractivePrincipal().

package/dist/identityClient.js

@@ -1,11 +1,14 @@
-import { createGatewayRequestClient, LucernApiError, randomIdempotencyKey, toQueryString, } from "./coreClient.js";
-import { cleanRequiredString, knownPayload, listResultFromEnvelope, } from "./boundaryClientSurface.js";
-import { createListResult, mapGatewayData } from "./sdkSurface.js";
+// biome-ignore-all lint/style/useFilenamingConvention: This file is an @lucern/sdk public import ABI / package subpath compatibility surface; the camelCase filename is intentional.
+import { cleanRequiredString, knownPayload, listResultFromEnvelope, } from "./boundary-client-surface.js";
 import { normalizeResolvedInteractivePrincipal, } from "./control-plane.js";
+import { createGatewayRequestClient, 
+// biome-ignore lint/style/noExportedImports: identityClient preserves this legacy compatibility re-export while package root also exports coreClient.
+LucernApiError, randomIdempotencyKey, toQueryString, } from "./coreClient.js";
+import { createListResult, mapGatewayData } from "./sdkSurface.js";
 function createIdentityWhoamiClient(config = {}) {
     const gateway = createGatewayRequestClient(config);
     return {
-        async whoami() {
+        whoami() {
             return gateway.request({
                 path: "/api/platform/v1/identity/whoami",
             });
@@ -44,6 +47,44 @@ function tenantIdentityQuery(input) {
 function tenantIdentityBody(input, operation) {
     return knownPayload(input, TENANT_IDENTITY_FIELDS, operation);
 }
+function identityStringList(value) {
+    return Array.isArray(value) ? value : [];
+}
+function fallbackPermit(data) {
+    if (!data.tenantId) {
+        return;
+    }
+    return {
+        subject: data.principalId,
+        tenant: data.tenantId,
+        ...(data.workspaceId ? { workspace: data.workspaceId } : {}),
+    };
+}
+function normalizeIdentitySummary(data) {
+    return {
+        principalId: data.principalId,
+        principalType: data.principalType,
+        clerkId: data.clerkId,
+        tenantId: data.tenantId ?? null,
+        workspaceId: data.workspaceId ?? null,
+        scopes: identityStringList(data.scopes),
+        roles: identityStringList(data.roles),
+        groupIds: identityStringList(data.groupIds),
+        permittedToolNames: identityStringList(data.permittedToolNames),
+        permittedPackKeys: identityStringList(data.permittedPackKeys),
+        principalStatus: data.principalStatus,
+        tenantStatus: data.tenantStatus,
+        workspaceStatus: data.workspaceStatus,
+        isPlatformAdmin: data.isPlatformAdmin === true,
+        isTenantAdmin: data.isTenantAdmin === true,
+        isWorkspaceAdmin: data.isWorkspaceAdmin === true,
+        permit: data.permit ?? fallbackPermit(data),
+        authMode: data.authMode,
+        sessionId: data.sessionId,
+        delegatedBy: data.delegatedBy,
+        expiresAt: data.expiresAt,
+    };
+}
 /**
  * Create the identity client for principals and API keys.
  * @param config - Gateway transport configuration.
@@ -69,47 +110,16 @@ export function createIdentityClient(config = {}) {
         /**
          * Resolve the current authenticated identity summary.
          */
-        async whoami() {
-            return whoamiClient.whoami().then((response) => mapGatewayData(response, (data) => ({
-                principalId: data.principalId,
-                principalType: data.principalType,
-                clerkId: data.clerkId,
-                tenantId: data.tenantId ?? null,
-                workspaceId: data.workspaceId ?? null,
-                scopes: Array.isArray(data.scopes) ? data.scopes : [],
-                roles: Array.isArray(data.roles) ? data.roles : [],
-                groupIds: Array.isArray(data.groupIds) ? data.groupIds : [],
-                permittedToolNames: Array.isArray(data.permittedToolNames)
-                    ? data.permittedToolNames
-                    : [],
-                permittedPackKeys: Array.isArray(data.permittedPackKeys)
-                    ? data.permittedPackKeys
-                    : [],
-                principalStatus: data.principalStatus,
-                tenantStatus: data.tenantStatus,
-                workspaceStatus: data.workspaceStatus,
-                isPlatformAdmin: data.isPlatformAdmin === true,
-                isTenantAdmin: data.isTenantAdmin === true,
-                isWorkspaceAdmin: data.isWorkspaceAdmin === true,
-                permit: data.permit ??
-                    (data.tenantId
-                        ? {
-                            subject: data.principalId,
-                            tenant: data.tenantId,
-                            ...(data.workspaceId ? { workspace: data.workspaceId } : {}),
-                        }
-                        : undefined),
-                authMode: data.authMode,
-                sessionId: data.sessionId,
-                delegatedBy: data.delegatedBy,
-                expiresAt: data.expiresAt,
-            })));
+        whoami() {
+            return whoamiClient
+                .whoami()
+                .then((response) => mapGatewayData(response, normalizeIdentitySummary));
         },
         /**
          * Resolve a Clerk subject through the tenant control-plane Permit projection.
          * @deprecated Prefer lucern.controlPlane.identity.resolveInteractivePrincipal().
          */
-        async resolveInteractivePrincipal(input) {
+        resolveInteractivePrincipal(input) {
             return gateway
                 .request({
                 path: "/api/platform/v1/control-plane/identity/resolve-interactive-principal",
@@ -121,15 +131,17 @@ export function createIdentityClient(config = {}) {
         /**
          * List principals in the current identity scope.
          */
-        async listPrincipals(query = {}) {
-            return gateway.request({
+        listPrincipals(query = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/identity/principals${toQueryString(query)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "principals")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "principals")));
         },
         /**
          * Create a principal.
          */
-        async createPrincipal(input, idempotencyKey) {
+        createPrincipal(input, idempotencyKey) {
             return requestPrincipalWrite("POST", input, idempotencyKey);
         },
         /**
@@ -143,15 +155,17 @@ export function createIdentityClient(config = {}) {
         /**
          * List keys in the current identity scope.
          */
-        async listKeys(query = {}) {
-            return gateway.request({
+        listKeys(query = {}) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/identity/keys${toQueryString(query)}`,
-            }).then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "keys")));
+            })
+                .then((response) => mapGatewayData(response, (data) => createListResult(Array.isArray(data) ? data : [], "keys")));
         },
         /**
          * Create an API key.
          */
-        async createKey(input, idempotencyKey) {
+        createKey(input, idempotencyKey) {
             return gateway.request({
                 path: "/api/platform/v1/identity/keys",
                 method: "POST",
@@ -162,7 +176,7 @@ export function createIdentityClient(config = {}) {
         /**
          * Rotate an API key.
          */
-        async rotateKey(keyId, input = {}, idempotencyKey) {
+        rotateKey(keyId, input = {}, idempotencyKey) {
             return gateway.request({
                 path: `/api/platform/v1/identity/keys/${encodeURIComponent(keyId)}/rotate`,
                 method: "POST",
@@ -181,75 +195,89 @@ export function createIdentityClient(config = {}) {
         /**
          * Search Clerk users by email or display attributes.
          */
-        async searchClerkUsers(q) {
+        searchClerkUsers(q) {
             return gateway.request({
                 path: `/api/platform/v1/identity/clerk-users${toQueryString({ q })}`,
             });
         },
-        async getTenantConfig(input) {
+        getTenantConfig(input) {
             return gateway.request({
                 path: `/api/platform/v1/identity/tenant-config${toQueryString(tenantIdentityQuery(input))}`,
             });
         },
-        async updateTenantConfig(input, idempotencyKey) {
-            cleanRequiredString(input.tenantId, "tenantId");
-            return gateway.request({
-                path: "/api/platform/v1/identity/tenant-config",
-                method: "PATCH",
-                body: tenantIdentityBody(input, "identity.updateTenantConfig"),
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+        updateTenantConfig(input, idempotencyKey) {
+            return Promise.resolve().then(() => {
+                cleanRequiredString(input.tenantId, "tenantId");
+                return gateway.request({
+                    path: "/api/platform/v1/identity/tenant-config",
+                    method: "PATCH",
+                    body: tenantIdentityBody(input, "identity.updateTenantConfig"),
+                    idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+                });
             });
         },
-        async listIntegrations(input) {
-            return gateway.request({
+        listIntegrations(input) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/identity/integrations${toQueryString(tenantIdentityQuery(input))}`,
-            }).then((response) => mapGatewayData(response, (data) => listResultFromEnvelope(data, "integrations")));
+            })
+                .then((response) => mapGatewayData(response, (data) => listResultFromEnvelope(data, "integrations")));
         },
-        async upsertIntegration(input, idempotencyKey) {
-            cleanRequiredString(input.tenantId, "tenantId");
-            cleanRequiredString(input.integrationKey, "integrationKey");
-            return gateway.request({
-                path: "/api/platform/v1/identity/integrations",
-                method: "PUT",
-                body: tenantIdentityBody(input, "identity.upsertIntegration"),
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+        upsertIntegration(input, idempotencyKey) {
+            return Promise.resolve().then(() => {
+                cleanRequiredString(input.tenantId, "tenantId");
+                cleanRequiredString(input.integrationKey, "integrationKey");
+                return gateway.request({
+                    path: "/api/platform/v1/identity/integrations",
+                    method: "PUT",
+                    body: tenantIdentityBody(input, "identity.upsertIntegration"),
+                    idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+                });
             });
         },
-        async listSecrets(input) {
-            return gateway.request({
+        listSecrets(input) {
+            return gateway
+                .request({
                 path: `/api/platform/v1/identity/secrets${toQueryString(tenantIdentityQuery(input))}`,
-            }).then((response) => mapGatewayData(response, (data) => listResultFromEnvelope(data, "secrets")));
+            })
+                .then((response) => mapGatewayData(response, (data) => listResultFromEnvelope(data, "secrets")));
         },
-        async putSecretReference(input, idempotencyKey) {
-            cleanRequiredString(input.tenantId, "tenantId");
-            cleanRequiredString(input.secretRef, "secretRef");
-            return gateway.request({
-                path: "/api/platform/v1/identity/secrets",
-                method: "PUT",
-                body: tenantIdentityBody(input, "identity.putSecretReference"),
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+        putSecretReference(input, idempotencyKey) {
+            return Promise.resolve().then(() => {
+                cleanRequiredString(input.tenantId, "tenantId");
+                cleanRequiredString(input.secretRef, "secretRef");
+                return gateway.request({
+                    path: "/api/platform/v1/identity/secrets",
+                    method: "PUT",
+                    body: tenantIdentityBody(input, "identity.putSecretReference"),
+                    idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+                });
             });
         },
-        async evaluatePolicy(input, idempotencyKey) {
-            cleanRequiredString(input.tenantId, "tenantId");
-            cleanRequiredString(input.policySubject, "policySubject");
-            cleanRequiredString(input.policyAction, "policyAction");
-            cleanRequiredString(input.policyResource, "policyResource");
-            return gateway.request({
-                path: "/api/platform/v1/identity/policy/evaluate",
-                method: "POST",
-                body: tenantIdentityBody(input, "identity.evaluatePolicy"),
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+        evaluatePolicy(input, idempotencyKey) {
+            return Promise.resolve().then(() => {
+                cleanRequiredString(input.tenantId, "tenantId");
+                cleanRequiredString(input.policySubject, "policySubject");
+                cleanRequiredString(input.policyAction, "policyAction");
+                cleanRequiredString(input.policyResource, "policyResource");
+                return gateway.request({
+                    path: "/api/platform/v1/identity/policy/evaluate",
+                    method: "POST",
+                    body: tenantIdentityBody(input, "identity.evaluatePolicy"),
+                    idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+                });
             });
         },
-        async recordPolicyDecision(input, idempotencyKey) {
-            cleanRequiredString(input.tenantId, "tenantId");
-            cleanRequiredString(input.decision, "decision");
-            return gateway.request({
-                path: "/api/platform/v1/identity/policy/decisions",
-                method: "POST",
-                body: tenantIdentityBody(input, "identity.recordPolicyDecision"),
-                idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+        recordPolicyDecision(input, idempotencyKey) {
+            return Promise.resolve().then(() => {
+                cleanRequiredString(input.tenantId, "tenantId");
+                cleanRequiredString(input.decision, "decision");
+                return gateway.request({
+                    path: "/api/platform/v1/identity/policy/decisions",
+                    method: "POST",
+                    body: tenantIdentityBody(input, "identity.recordPolicyDecision"),
+                    idempotencyKey: idempotencyKey ?? randomIdempotencyKey(),
+                });
             });
         },
     };