@nangohq/types 0.71.2 → 0.71.3

package/dist/mfa/api.d.ts

@@ -1,6 +1,12 @@
-import type { ApiError, Endpoint } from '../api.js';
+import type { ApiEndpoint, ApiError } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
+import type { ApiUser } from '../user/api.js';
 type MFAError = ApiError<'invalid_mfa_code'> | ApiError<'mfa_already_enabled'> | ApiError<'mfa_enrollment_not_found'> | ApiError<'mfa_not_enabled'>;
-export type GetMFAStatus = Endpoint<{
+export type GetMFAStatus = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/account/mfa';
     Success: {
@@ -9,7 +15,8 @@ export type GetMFAStatus = Endpoint<{
         };
     };
 }>;
-export type PostMFAEnrollment = Endpoint<{
+export type PostMFAEnrollment = ApiEndpoint<{
+    Audit: AuditPolicy<'mfa', 'enrolled', 'account'>;
     Method: 'POST';
     Path: '/api/v1/account/mfa/enroll';
     Error: ApiError<'mfa_already_enabled'>;
@@ -19,7 +26,8 @@ export type PostMFAEnrollment = Endpoint<{
         };
     };
 }>;
-export type PostMFAActivation = Endpoint<{
+export type PostMFAActivation = ApiEndpoint<{
+    Audit: AuditPolicy<'mfa', 'enabled', 'account'>;
     Method: 'POST';
     Path: '/api/v1/account/mfa/activate';
     Body: {
@@ -32,7 +40,8 @@ export type PostMFAActivation = Endpoint<{
         };
     };
 }>;
-export type PostMFARecoveryCodes = Endpoint<{
+export type PostMFARecoveryCodes = ApiEndpoint<{
+    Audit: AuditPolicy<'mfa', 'recovery_regenerated', 'account'>;
     Method: 'POST';
     Path: '/api/v1/account/mfa/recovery-codes';
     Body: {
@@ -45,7 +54,8 @@ export type PostMFARecoveryCodes = Endpoint<{
         };
     };
 }>;
-export type DeleteMFA = Endpoint<{
+export type DeleteMFA = ApiEndpoint<{
+    Audit: AuditPolicy<'mfa', 'disabled', 'account'>;
     Method: 'DELETE';
     Path: '/api/v1/account/mfa';
     Body: {
@@ -57,4 +67,23 @@ export type DeleteMFA = Endpoint<{
     };
 }>;
 export type MFAEndpointError = MFAError;
+export type PostMFALoginVerification = ApiEndpoint<{
+    Audit: AuditPolicy<'mfa', 'verified', 'account'>;
+    Method: 'POST';
+    Path: '/api/v1/account/mfa/login/verify';
+    Body: {
+        type: 'code';
+        code: string;
+    } | {
+        type: 'recoveryCode';
+        recoveryCode: string;
+    };
+    Error: ApiError<'invalid_mfa_code'> | ApiError<'mfa_login_expired'>;
+    Success: {
+        data: {
+            user: ApiUser;
+            url: string;
+        };
+    };
+}>;
 export {};

package/dist/plain/api.d.ts

@@ -1,5 +1,9 @@
-import type { ApiError, Endpoint } from '../api.js';
-export type GetPlainHmac = Endpoint<{
+import type { ApiEndpoint, ApiError } from '../api.js';
+export type GetPlainHmac = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/api/v1/plain`;
     Success: {

package/dist/plans/http.api.d.ts

@@ -1,10 +1,12 @@
-import type { Endpoint } from '../api.js';
+import type { ApiEndpoint } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
 import type { ApiBillingUsageMetrics, BillingCustomer, BillingInvoicingDetails, BreakdownDimensions } from '../billing/types.js';
 import type { MetricUsageSummary, UsageMetric } from '../usage/index.js';
 import type { ReplaceInObject } from '../utils.js';
 import type { DBPlan } from './db.js';
 export type ApiPlan = ReplaceInObject<DBPlan, Date, string>;
-export type PostPlanExtendTrial = Endpoint<{
+export type PostPlanExtendTrial = ApiEndpoint<{
+    Audit: AuditPolicy<'billing', 'trial_extended', 'account'>;
     Method: 'POST';
     Path: '/api/v1/plans/trial/extension';
     Querystring: {
@@ -31,7 +33,11 @@ export interface PlanDefinition {
     hidden?: boolean;
     flags: Omit<Partial<DBPlan>, 'id' | 'account_id' | 'name'>;
 }
-export type GetPlans = Endpoint<{
+export type GetPlans = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/plans';
     Querystring: {
@@ -41,7 +47,11 @@ export type GetPlans = Endpoint<{
         data: PlanDefinition[];
     };
 }>;
-export type GetPlan = Endpoint<{
+export type GetPlan = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/plans/current';
     Querystring: {
@@ -51,7 +61,11 @@ export type GetPlan = Endpoint<{
         data: ApiPlan;
     };
 }>;
-export type GetUsage = Endpoint<{
+export type GetUsage = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/plans/usage';
     Querystring: {
@@ -61,7 +75,11 @@ export type GetUsage = Endpoint<{
         data: Record<UsageMetric, MetricUsageSummary>;
     };
 }>;
-export type GetBillingUsageTopDimensionValues = Endpoint<{
+export type GetBillingUsageTopDimensionValues = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/plans/billing-usage/top-dimension-values';
     Querystring: {
@@ -89,7 +107,11 @@ export type GetBillingUsageTopDimensionValues = Endpoint<{
         };
     };
 }>;
-export type GetBillingUsage = Endpoint<{
+export type GetBillingUsage = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/plans/billing-usage';
     Querystring: {
@@ -112,7 +134,8 @@ export type GetBillingUsage = Endpoint<{
         };
     };
 }>;
-export type PutBillingInvoicingDetails = Endpoint<{
+export type PutBillingInvoicingDetails = ApiEndpoint<{
+    Audit: AuditPolicy<'billing', 'details_changed', 'account'>;
     Method: 'PUT';
     Path: '/api/v1/plans/billing/invoicing';
     Querystring: {
@@ -123,7 +146,8 @@ export type PutBillingInvoicingDetails = Endpoint<{
         data: BillingCustomer;
     };
 }>;
-export type PostPlanChange = Endpoint<{
+export type PostPlanChange = ApiEndpoint<{
+    Audit: AuditPolicy<'billing', 'plan_changed', 'account'>;
     Method: 'POST';
     Path: '/api/v1/plans/change';
     Querystring: {

package/dist/providers/api.d.ts

@@ -1,7 +1,11 @@
-import type { Endpoint } from '../api.js';
+import type { ApiEndpoint } from '../api.js';
 import type { AuthModeType } from '../auth/api.js';
 import type { McpOAuth2ClientRegistration, Provider, SimplifiedJSONSchema } from './provider.js';
-export type GetPublicProviders = Endpoint<{
+export type GetPublicProviders = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/providers`;
     Querystring: {
@@ -16,7 +20,11 @@ export type ApiProvider = Provider & {
     name: string;
     logo_url: string;
 };
-export type GetPublicProvider = Endpoint<{
+export type GetPublicProvider = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/providers/:provider`;
     Params: {
@@ -43,14 +51,22 @@ export interface ApiProviderListItem {
     clientRegistration?: McpOAuth2ClientRegistration;
     integration_config?: Record<string, SimplifiedJSONSchema> | undefined;
 }
-export type GetProviders = Endpoint<{
+export type GetProviders = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/providers';
     Success: {
         data: ApiProviderListItem[];
     };
 }>;
-export type GetProvider = Endpoint<{
+export type GetProvider = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/providers/:providerConfigKey';
     Params: {

package/dist/providers/provider.d.ts

@@ -7,7 +7,6 @@ export interface TokenUrlObject {
     OAUTH2CC?: string;
     BASIC?: string;
     API_KEY?: string;
-    APP_STORE?: string;
     CUSTOM?: string;
     APP?: string;
     NONE?: string;
@@ -146,7 +145,7 @@ export interface ProviderMcpOAuth2Generic extends Omit<BaseProvider, 'body_forma
 export interface ProviderJwt extends BaseProvider {
     auth_mode: 'JWT';
     signature: {
-        protocol: 'RSA' | 'HMAC';
+        protocol: 'RSA' | 'HMAC' | 'EC';
         hmac_secret_encoding?: 'hex' | 'utf8';
     };
     token: {
@@ -155,18 +154,16 @@ export interface ProviderJwt extends BaseProvider {
         header: {
             alg: string;
             typ?: string;
+            kid?: string;
         };
         payload: {
             aud?: string;
             iss?: string;
             sub?: string;
+            scope?: string | string[];
         };
     };
 }
-export interface ProviderAppleAppStore extends BaseProvider {
-    auth_mode: 'APP_STORE';
-    token_url: string;
-}
 export interface ProviderBill extends BaseProvider {
     auth_mode: 'BILL';
 }
@@ -248,6 +245,6 @@ export interface ProviderInstallPlugin extends BaseProvider {
     auth_mode: 'INSTALL_PLUGIN';
     auth_type: 'BASIC';
 }
-export type Provider = BaseProvider | ProviderOAuth1 | ProviderOAuth2 | ProviderJwt | ProviderTwoStep | ProviderSignature | ProviderAwsSigV4 | ProviderApiKey | ProviderBill | ProviderGithubApp | ProviderAppleAppStore | ProviderCustom | ProviderMcpOAUTH2 | ProviderMcpOAuth2Generic | ProviderInstallPlugin;
+export type Provider = BaseProvider | ProviderOAuth1 | ProviderOAuth2 | ProviderJwt | ProviderTwoStep | ProviderSignature | ProviderAwsSigV4 | ProviderApiKey | ProviderBill | ProviderGithubApp | ProviderCustom | ProviderMcpOAUTH2 | ProviderMcpOAuth2Generic | ProviderInstallPlugin;
 export type RefreshableProvider = ProviderTwoStep | ProviderJwt | ProviderSignature | ProviderOAuth2 | ProviderMcpOAuth2Generic | ProviderAwsSigV4;
 export type TestableProvider = ProviderApiKey;

package/dist/proxy/http.api.d.ts

@@ -1,5 +1,9 @@
-import type { Endpoint } from '../api.js';
-export type AllPublicProxy = Endpoint<{
+import type { ApiEndpoint } from '../api.js';
+export type AllPublicProxy = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/proxy/:anyPath`;
     Params: any;

package/dist/pubsub/events.d.ts

@@ -1,3 +1,4 @@
+import type { SerializedAuditEvent } from '../audit-trail/event.js';
 import type { FunctionRuntime } from '../runner/sdk.js';
 import type { DBTeam } from '../team/db.js';
 import type { DBUser } from '../user/db.js';
@@ -18,7 +19,8 @@ export type LambdaKeepWarmInvokeEvent = EventBase<'lambda_keep_warm', 'lambda_ke
     environmentId: number;
     provisionedConcurrency: number;
 }>;
-export type Event = EnforceEventBase<UserCreatedEvent | UsageEvent | TeamUpdatedEvent | LambdaKeepWarmInvokeEvent>;
+export type Event = EnforceEventBase<UserCreatedEvent | UsageEvent | TeamUpdatedEvent | LambdaKeepWarmInvokeEvent | AuditRecordedEvent>;
+export type AuditRecordedEvent = EventBase<'audit', 'audit.recorded', SerializedAuditEvent>;
 export type UserCreatedEvent = EventBase<'user', 'user.created', {
     userId: DBUser['id'];
     teamId: DBTeam['id'];

package/dist/record/api.d.ts

@@ -1,4 +1,4 @@
-import type { ApiError, Endpoint } from '../api.js';
+import type { ApiEndpoint, ApiError } from '../api.js';
 export type RecordLastAction = 'ADDED' | 'UPDATED' | 'DELETED' | 'added' | 'updated' | 'deleted';
 export type CombinedFilterAction = `${RecordLastAction},${RecordLastAction}`;
 export interface RecordMetadata {
@@ -21,7 +21,11 @@ export type MergingStrategy = {
     cursor?: string | undefined;
 };
 export type CursorOffset = 'first' | 'last';
-export type GetPublicRecords = Endpoint<{
+export type GetPublicRecords = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/records`;
     Headers: {
@@ -44,7 +48,11 @@ export type GetPublicRecords = Endpoint<{
         records: NangoRecord[];
     };
 }>;
-export type PatchPublicPruneRecords = Endpoint<{
+export type PatchPublicPruneRecords = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'TODO: audit coverage pending';
+    };
     Method: 'PATCH';
     Path: `/records/prune`;
     Headers: {
@@ -70,7 +78,11 @@ export interface ConnectionRecordModel {
     size_bytes: number;
     updated_at: string;
 }
-export type GetConnectionRecordModels = Endpoint<{
+export type GetConnectionRecordModels = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/connections/:connectionId/records/models';
     Params: {
@@ -84,7 +96,11 @@ export type GetConnectionRecordModels = Endpoint<{
         data: ConnectionRecordModel[];
     };
 }>;
-export type GetConnectionRecords = Endpoint<{
+export type GetConnectionRecords = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/connections/:connectionId/records';
     Params: {

package/dist/scripts/http.api.d.ts

@@ -1,4 +1,4 @@
-import type { Endpoint } from '../api.js';
+import type { ApiEndpoint } from '../api.js';
 import type { StandardNangoConfig } from '../flow/index.js';
 export interface OpenAIFunction {
     name: string;
@@ -12,7 +12,11 @@ export interface OpenAIFunction {
         required: string[];
     };
 }
-export type GetPublicScriptsConfig = Endpoint<{
+export type GetPublicScriptsConfig = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/scripts/config`;
     Query: {

package/dist/stripe/http.api.d.ts

@@ -1,5 +1,7 @@
-import type { Endpoint } from '../api.js';
-export type PostStripeCollectPayment = Endpoint<{
+import type { ApiEndpoint } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
+export type PostStripeCollectPayment = ApiEndpoint<{
+    Audit: AuditPolicy<'billing', 'payment_method_added', 'account'>;
     Method: 'POST';
     Path: '/api/v1/stripe/payment_methods';
     Success: {
@@ -12,14 +14,19 @@ export interface StripePaymentMethod {
     id: string;
     last4: string;
 }
-export type GetStripePaymentMethods = Endpoint<{
+export type GetStripePaymentMethods = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/stripe/payment_methods';
     Success: {
         data: StripePaymentMethod[];
     };
 }>;
-export type DeleteStripePayment = Endpoint<{
+export type DeleteStripePayment = ApiEndpoint<{
+    Audit: AuditPolicy<'billing', 'payment_method_removed', 'account'>;
     Method: 'DELETE';
     Path: '/api/v1/stripe/payment_methods';
     Querystring: {
@@ -31,7 +38,11 @@ export type DeleteStripePayment = Endpoint<{
         };
     };
 }>;
-export type PostStripeWebhooks = Endpoint<{
+export type PostStripeWebhooks = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'POST';
     Path: '/api/v1/stripe/webhooks';
     Body: any;

package/dist/sync/api.d.ts

@@ -1,6 +1,11 @@
-import type { ApiError, Endpoint } from '../api.js';
+import type { ApiEndpoint, ApiError } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
 import type { ReportedSyncJobStatus } from './index.js';
-export type PostPublicTrigger = Endpoint<{
+export type PostPublicTrigger = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'TODO: audit coverage pending';
+    };
     Method: 'POST';
     Path: '/sync/trigger';
     Body: {
@@ -26,7 +31,8 @@ export type PostPublicTrigger = Endpoint<{
     };
     Error: ApiError<'missing_provider_config_key' | 'unknown_provider_config' | 'unknown_connection' | 'no_syncs_found'>;
 }>;
-export type PostSyncVariant = Endpoint<{
+export type PostSyncVariant = ApiEndpoint<{
+    Audit: AuditPolicy<'sync', 'variant_created', 'environment'>;
     Method: 'POST';
     Path: '/sync/:name/variant/:variant';
     Body: {
@@ -44,7 +50,8 @@ export type PostSyncVariant = Endpoint<{
         variant: string;
     };
 }>;
-export type DeleteSyncVariant = Endpoint<{
+export type DeleteSyncVariant = ApiEndpoint<{
+    Audit: AuditPolicy<'sync', 'variant_deleted', 'environment'>;
     Method: 'DELETE';
     Path: '/sync/:name/variant/:variant';
     Body: {
@@ -60,7 +67,8 @@ export type DeleteSyncVariant = Endpoint<{
         success: boolean;
     };
 }>;
-export type PutPublicSyncConnectionFrequency = Endpoint<{
+export type PutPublicSyncConnectionFrequency = ApiEndpoint<{
+    Audit: AuditPolicy<'sync', 'frequency_changed', 'environment'>;
     Method: 'PUT';
     Path: '/sync/update-connection-frequency';
     Body: {
@@ -75,7 +83,8 @@ export type PutPublicSyncConnectionFrequency = Endpoint<{
     };
     Error: ApiError<'unknown_connection' | 'unknown_sync'>;
 }>;
-export type PostPublicSyncPause = Endpoint<{
+export type PostPublicSyncPause = ApiEndpoint<{
+    Audit: AuditPolicy<'sync', 'paused', 'environment'>;
     Method: 'POST';
     Path: '/sync/pause';
     Body: {
@@ -91,7 +100,8 @@ export type PostPublicSyncPause = Endpoint<{
     };
     Error: ApiError<'no_syncs_found' | 'unknown_connection' | 'unknown_provider_config'>;
 }>;
-export type PostPublicSyncStart = Endpoint<{
+export type PostPublicSyncStart = ApiEndpoint<{
+    Audit: AuditPolicy<'sync', 'started', 'environment'>;
     Method: 'POST';
     Path: '/sync/start';
     Body: {
@@ -107,7 +117,11 @@ export type PostPublicSyncStart = Endpoint<{
     };
     Error: ApiError<'no_syncs_found' | 'unknown_connection' | 'unknown_provider_config'>;
 }>;
-export type GetPublicSyncStatus = Endpoint<{
+export type GetPublicSyncStatus = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/sync/status';
     Querystring: {

package/dist/team/api.d.ts

@@ -1,10 +1,15 @@
-import type { ApiError, ApiTimestamps, Endpoint } from '../api.js';
+import type { ApiEndpoint, ApiError, ApiTimestamps } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
 import type { DBInvitation } from '../invitations/db.js';
 import type { ApiUser } from '../user/api.js';
 import type { Role } from '../user/db.js';
 import type { DBTeam } from './db.js';
 import type { Merge } from 'type-fest';
-export type GetTeam = Endpoint<{
+export type GetTeam = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: '/api/v1/team';
     Querystring: {
@@ -13,15 +18,20 @@ export type GetTeam = Endpoint<{
     Success: {
         data: {
             account: ApiTeam;
-            users: ApiUser[];
+            users: ApiTeamUser[];
             invitedUsers: ApiInvitation[];
             isAdminTeam: boolean;
+            mfaFeatureEnabled: boolean;
         };
     };
 }>;
+export interface ApiTeamUser extends ApiUser {
+    mfaEnabled: boolean;
+}
 export type ApiInvitation = Merge<Omit<DBInvitation, 'token'>, ApiTimestamps>;
 export type ApiTeam = Merge<DBTeam, ApiTimestamps>;
-export type PutTeam = Endpoint<{
+export type PutTeam = ApiEndpoint<{
+    Audit: AuditPolicy<'team', 'updated', 'account'>;
     Method: 'PUT';
     Path: '/api/v1/team';
     Querystring: {
@@ -34,7 +44,8 @@ export type PutTeam = Endpoint<{
         data: ApiTeam;
     };
 }>;
-export type DeleteTeamUser = Endpoint<{
+export type DeleteTeamUser = ApiEndpoint<{
+    Audit: AuditPolicy<'member', 'removed', 'account'>;
     Method: 'DELETE';
     Path: '/api/v1/team/users/:id';
     Querystring: {
@@ -50,7 +61,8 @@ export type DeleteTeamUser = Endpoint<{
         };
     };
 }>;
-export type PatchTeamUser = Endpoint<{
+export type PatchTeamUser = ApiEndpoint<{
+    Audit: AuditPolicy<'member', 'role_changed', 'account'>;
     Method: 'PATCH';
     Path: '/api/v1/team/users/:id';
     Querystring: {

package/dist/user/api.d.ts

@@ -1,6 +1,11 @@
-import type { Endpoint } from '../api.js';
+import type { ApiEndpoint, Endpoint } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
 import type { Role } from './db.js';
-export type GetUser = Endpoint<{
+export type GetUser = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'GET';
     Path: `/api/v1/user`;
     Success: {
@@ -17,7 +22,8 @@ export type InternalGetUsers = Endpoint<{
         data: ApiUser[];
     };
 }>;
-export type PatchUser = Endpoint<{
+export type PatchUser = ApiEndpoint<{
+    Audit: AuditPolicy<'user', 'updated', 'account'>;
     Method: 'PATCH';
     Path: `/api/v1/user`;
     Body: {
@@ -42,7 +48,8 @@ export type ApiUserWithPermissions = ApiUser & {
     role: Role;
     permissions: AllowedPermissions;
 };
-export type PutUserPassword = Endpoint<{
+export type PutUserPassword = ApiEndpoint<{
+    Audit: AuditPolicy<'app_auth', 'password_changed', 'account'>;
     Method: 'PUT';
     Path: `/api/v1/user/password`;
     Body: {

package/dist/webhooks/http.api.d.ts

@@ -1,5 +1,9 @@
-import type { ApiError, Endpoint } from '../api.js';
-export type PostPublicWebhook = Endpoint<{
+import type { ApiEndpoint, ApiError } from '../api.js';
+export type PostPublicWebhook = ApiEndpoint<{
+    Audit: {
+        kind: 'no-audit';
+        reason: 'non-auditable';
+    };
     Method: 'POST';
     Path: '/webhook/:environmentUuid/:providerConfigKey';
     Params: {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@nangohq/types",
-    "version": "0.71.2",
+    "version": "0.71.3",
     "description": "Types used in Nango applications",
     "type": "module",
     "typings": "dist/index.d.ts",