@nangohq/types 0.71.4 → 0.71.6

package/dist/audit-trail/event.d.ts

@@ -1,27 +1,101 @@
+import type { ApiKeyUpdatedMetadata, AppAuthLoginMetadata, AuditTrailFiltersMetadata, AuditTrailQueriedMetadata, BillingPaymentMethodRemovedMetadata, BillingPlanChangedMetadata, BillingSpendAlertChangedMetadata, ConnectionMetadata, ConnectionUpdatedMetadata, EnvironmentCreatedMetadata, EnvironmentUpdatedMetadata, EnvironmentVariablesChangedMetadata, EnvironmentWebhookMetadata, FunctionDeletedMetadata, FunctionDeployedMetadata, FunctionUpgradedMetadata, IntegrationProviderMetadata, IntegrationUpdatedMetadata, MemberInvitedMetadata, MemberRoleChangedMetadata, MfaVerifiedMetadata, SyncBaseMetadata, SyncFrequencyChangedMetadata, SyncTriggeredMetadata, SyncVariantMetadata, TeamUpdatedMetadata, UserUpdatedMetadata } from './metadata.js';
 export type AuditTrailVersion = '2026-07-16';
-export type AuditActorType = 'user' | 'api_key' | 'system' | 'anonymous';
+export type AuditActorType = 'user' | 'api_key' | 'public_key' | 'connect_session' | 'anonymous' | 'unknown';
 export type AuditOutcome = 'success' | 'failure' | 'denied';
+export type AuditViaType = 'impersonation';
 export type AuditInterface = 'api' | 'mcp';
 interface AuditEventTable {
-    connection: 'created' | 'updated' | 'metadata_updated' | 'refreshed' | 'deleted';
-    sync: 'enabled' | 'disabled' | 'paused' | 'started' | 'triggered' | 'cancelled' | 'frequency_changed' | 'variant_created' | 'variant_deleted';
-    function: 'deployed' | 'upgraded' | 'deleted';
-    integration: 'created' | 'updated' | 'deleted';
-    api_key: 'created' | 'updated' | 'deleted';
-    member: 'invited' | 'invite_accepted' | 'invite_declined' | 'invite_revoked' | 'role_changed' | 'removed';
-    team: 'updated';
-    user: 'updated';
-    environment: 'created' | 'updated' | 'variables_changed' | 'webhook_urls_changed' | 'deleted';
-    app_auth: 'login' | 'logout' | 'signup' | 'password_changed' | 'password_reset';
-    mfa: 'enrolled' | 'enabled' | 'disabled' | 'verified' | 'recovery_regenerated';
-    billing: 'plan_changed' | 'trial_extended' | 'details_changed' | 'payment_method_added' | 'payment_method_removed';
+    connection: {
+        created: ConnectionMetadata;
+        updated: ConnectionUpdatedMetadata;
+        metadata_updated: ConnectionMetadata;
+        refreshed: ConnectionMetadata;
+        deleted: ConnectionMetadata;
+    };
+    sync: {
+        enabled: SyncBaseMetadata;
+        disabled: SyncBaseMetadata;
+        paused: SyncBaseMetadata;
+        started: SyncBaseMetadata;
+        triggered: SyncTriggeredMetadata;
+        cancelled: SyncBaseMetadata;
+        frequency_changed: SyncFrequencyChangedMetadata;
+        variant_created: SyncVariantMetadata;
+        variant_deleted: SyncVariantMetadata;
+    };
+    function: {
+        deployed: FunctionDeployedMetadata;
+        upgraded: FunctionUpgradedMetadata;
+        deleted: FunctionDeletedMetadata;
+    };
+    integration: {
+        created: IntegrationProviderMetadata;
+        updated: IntegrationProviderMetadata & IntegrationUpdatedMetadata;
+        deleted: IntegrationProviderMetadata;
+    };
+    api_key: {
+        created: ApiKeyUpdatedMetadata;
+        updated: ApiKeyUpdatedMetadata;
+        deleted: never;
+    };
+    member: {
+        invited: MemberInvitedMetadata;
+        invite_accepted: never;
+        invite_declined: never;
+        invite_revoked: never;
+        role_changed: MemberRoleChangedMetadata;
+        removed: never;
+    };
+    team: {
+        updated: TeamUpdatedMetadata;
+    };
+    user: {
+        updated: UserUpdatedMetadata;
+    };
+    environment: {
+        created: EnvironmentCreatedMetadata;
+        updated: EnvironmentUpdatedMetadata;
+        variables_changed: EnvironmentVariablesChangedMetadata;
+        webhook_urls_changed: EnvironmentWebhookMetadata;
+        webhook_signing_key_rotated: never;
+        deleted: never;
+    };
+    app_auth: {
+        login: AppAuthLoginMetadata;
+        logout: never;
+        signup: never;
+        password_changed: never;
+        password_reset: never;
+    };
+    mfa: {
+        enrolled: never;
+        enabled: never;
+        disabled: never;
+        verified: MfaVerifiedMetadata;
+        recovery_regenerated: never;
+    };
+    billing: {
+        plan_changed: BillingPlanChangedMetadata;
+        trial_extended: never;
+        details_changed: never;
+        payment_method_added: never;
+        payment_method_removed: BillingPaymentMethodRemovedMetadata;
+        spend_alert_changed: BillingSpendAlertChangedMetadata;
+        spend_alert_removed: never;
+    };
+    audit_trail: {
+        exported: AuditTrailFiltersMetadata;
+        queried: AuditTrailQueriedMetadata;
+    };
 }
 export type AuditResource = keyof AuditEventTable;
-export type AuditActionOf<R extends AuditResource> = AuditEventTable[R];
+export type AuditActionOf<R extends AuditResource> = R extends AuditResource ? keyof AuditEventTable[R] & string : never;
 export type AuditAction = AuditActionOf<AuditResource>;
 export type AuditEventKey = {
-    [R in AuditResource]: `${R}.${AuditEventTable[R]}`;
+    [R in AuditResource]: `${R}.${AuditActionOf<R>}`;
 }[AuditResource];
+/** The metadata an action may carry. `never` for the actions that carry none. */
+export type AuditMetadataFor<R extends AuditResource, A> = A extends keyof AuditEventTable[R] ? AuditEventTable[R][A] : never;
 export type AuditScope = 'account' | 'environment';
 export type AuditTargetType = 'connection' | 'sync' | 'function' | 'integration' | 'api_key' | 'member' | 'team' | 'user' | 'environment';
 export interface AuditActor {
@@ -29,6 +103,12 @@ export interface AuditActor {
     id: string;
     display?: string;
 }
+export interface AuditVia {
+    type: AuditViaType;
+    id: string;
+    display?: string;
+    actorId?: string;
+}
 export interface AuditTarget {
     type: AuditTargetType;
     id: string;
@@ -39,6 +119,15 @@ export interface AuditContext {
     ip?: string;
     userAgent?: string;
 }
+export interface AuditAttribution {
+    kind: 'request';
+    actor: AuditActor;
+    context: AuditContext;
+}
+export interface NoAttribution {
+    kind: 'no-attribution';
+    reason: string;
+}
 export interface AuditPolicy<R extends AuditResource = AuditResource, A extends AuditActionOf<R> = AuditActionOf<R>, S extends AuditScope = AuditScope> {
     kind: 'audit';
     resource: R;
@@ -53,4 +142,35 @@ export type EndpointAudit = AuditPolicy | NoAudit<string>;
 export type SerializedAuditEvent = {
     event: string;
 };
+export type AuditResourceAction = {
+    [R in AuditResource]: {
+        [A in AuditActionOf<R>]: [AuditMetadataFor<R, A>] extends [never] ? {
+            resource: R;
+            action: A;
+        } : {
+            resource: R;
+            action: A;
+            metadata?: AuditMetadataFor<R, A>;
+        };
+    }[AuditActionOf<R>];
+}[AuditResource];
+interface AuditEventCommon {
+    occurredAt: string;
+    accountId: number;
+    scope: AuditScope;
+    environment: {
+        id: string;
+        display: string;
+    } | null;
+    actor: AuditActor;
+    via?: AuditVia[];
+    targets: AuditTarget[];
+    context: AuditContext;
+    outcome: AuditOutcome;
+}
+export type AuditEvent = AuditEventCommon & AuditResourceAction;
+export type StoredAuditEvent = AuditEvent & {
+    id: string;
+    version: AuditTrailVersion;
+};
 export {};

package/dist/audit-trail/metadata.d.ts

@@ -0,0 +1,99 @@
+import type { FunctionSource } from '../syncConfigs/db.js';
+export interface ConnectionMetadata {
+    providerConfigKey?: string;
+}
+export interface ConnectionUpdatedMetadata {
+    providerConfigKey?: string;
+    changedFields?: string[];
+}
+export interface IntegrationProviderMetadata {
+    provider?: string;
+}
+export interface IntegrationUpdatedMetadata {
+    changedFields?: string[];
+}
+export interface EnvironmentCreatedMetadata {
+    name?: string;
+}
+export interface AuditTrailFiltersMetadata {
+    from?: string;
+    to?: string;
+    resources?: string[];
+    actions?: string[];
+}
+export interface AuditTrailQueriedMetadata extends AuditTrailFiltersMetadata {
+    continued?: boolean;
+}
+export interface MemberInvitedMetadata {
+    role?: string;
+}
+export interface FunctionDeployedMetadata {
+    source?: FunctionSource;
+    type?: string;
+}
+export interface FunctionUpgradedMetadata {
+    upgradeVersion?: string;
+}
+export interface FunctionDeletedMetadata {
+    type?: string;
+}
+export interface ApiKeyUpdatedMetadata {
+    displayName?: string;
+    scopes?: string[];
+}
+export interface SyncBaseMetadata {
+    providerConfigKey?: string;
+    connectionId?: string;
+}
+export interface SyncFrequencyChangedMetadata extends SyncBaseMetadata {
+    frequency?: string;
+}
+export interface SyncVariantMetadata extends SyncBaseMetadata {
+    variant?: string;
+}
+export interface SyncTriggeredMetadata extends SyncBaseMetadata {
+    reset?: boolean;
+    emptyCache?: boolean;
+}
+export interface MemberRoleChangedMetadata {
+    fromRole?: string;
+    toRole?: string;
+}
+export interface TeamUpdatedMetadata {
+    name?: string;
+}
+export interface UserUpdatedMetadata {
+    name?: string;
+    gettingStartedClosed?: boolean;
+}
+export interface EnvironmentUpdatedMetadata {
+    name?: string;
+    changedFields?: string[];
+}
+export interface EnvironmentVariablesChangedMetadata {
+    variableCount?: number;
+    variableNames?: string[];
+}
+export interface EnvironmentWebhookMetadata {
+    changedFields?: string[];
+    primaryUrl?: string;
+    secondaryUrl?: string;
+}
+export interface BillingPlanChangedMetadata {
+    fromPlan?: string;
+    toPlan?: string;
+}
+export type AppAuthLoginMethod = 'local' | 'sso' | 'managed';
+export interface AppAuthLoginMetadata {
+    mfaRequired?: boolean;
+    method?: AppAuthLoginMethod;
+}
+export interface BillingPaymentMethodRemovedMetadata {
+    paymentMethodId?: string;
+}
+export interface MfaVerifiedMetadata {
+    method?: 'totp' | 'recovery_code';
+}
+export interface BillingSpendAlertChangedMetadata {
+    thresholdInCents?: number;
+}

package/dist/auth/api.d.ts

@@ -20,7 +20,7 @@ export interface AuthModes {
     AwsSigV4: 'AWS_SIGV4';
 }
 export type AuthModeType = AuthModes[keyof AuthModes];
-export type AuthOperationType = 'creation' | 'override' | 'refresh' | 'unknown';
+export type AuthOperationType = 'creation' | 'override' | 'refresh' | 'deletion' | 'unknown';
 export interface OAuthAuthorizationMethod {
     BODY: 'body';
     HEADER: 'header';

package/dist/auth/http.api.d.ts

@@ -1,4 +1,5 @@
 import type { ApiEndpoint, ApiError } from '../api.js';
+import type { AuditPolicy } from '../audit-trail/event.js';
 export type ConnectionQueryString = {
     connection_id?: string | undefined;
     params?: Record<string, any> | undefined;
@@ -35,10 +36,7 @@ export interface WebSocketConnectionResponseSuccess {
 }
 type AuthErrors = ApiError<'invalid_body'> | ApiError<'invalid_query_params'> | ApiError<'unknown_provider_config'> | ApiError<'unknown_provider_template'> | ApiError<'invalid_auth_mode'> | ApiError<'invalid_credentials'> | ApiError<'integration_not_allowed'> | ApiError<'invalid_connection'> | ApiError<'connection_test_failed'> | ApiError<'connection_validation_failed'>;
 export type PostPublicApiKeyAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         apiKey: string;
@@ -52,10 +50,7 @@ export type PostPublicApiKeyAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicBasicAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         username: string;
@@ -70,10 +65,7 @@ export type PostPublicBasicAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicTbaAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         token_id: string;
@@ -91,10 +83,7 @@ export type PostPublicTbaAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicJwtAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: Record<string, any>;
     Querystring: ConnectionQueryString;
@@ -106,10 +95,7 @@ export type PostPublicJwtAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicUnauthenticatedAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Querystring: ConnectionQueryString;
     Params: {
@@ -120,10 +106,7 @@ export type PostPublicUnauthenticatedAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicBillAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         username: string;
@@ -140,10 +123,7 @@ export type PostPublicBillAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicTwoStepAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: Record<string, any>;
     Querystring: ConnectionQueryString;
@@ -155,10 +135,7 @@ export type PostPublicTwoStepAuthorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicSignatureAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         username: string;
@@ -174,10 +151,7 @@ export type PostPublicSignatureAuthorization = ApiEndpoint<{
 }>;
 type AwsSigV4AuthErrors = AuthErrors | ApiError<'invalid_aws_sigv4_config'> | ApiError<'missing_aws_sigv4_service'> | ApiError<'missing_aws_sigv4_sts_endpoint'> | ApiError<'missing_aws_sigv4_builtin_credentials'> | ApiError<'missing_aws_sigv4_region'> | ApiError<'aws_sigv4_sts_request_failed'>;
 export type PostPublicAwsSigV4Authorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         role_arn: string;
@@ -192,10 +166,7 @@ export type PostPublicAwsSigV4Authorization = ApiEndpoint<{
     Success: ConnectionResponseSuccess;
 }>;
 export type PostPublicOauthOutboundAuthorization = ApiEndpoint<{
-    Audit: {
-        kind: 'no-audit';
-        reason: 'TODO: audit coverage pending';
-    };
+    Audit: AuditPolicy<'connection', 'created', 'environment'>;
     Method: 'POST';
     Body: {
         username: string;

package/dist/authz/types.d.ts

@@ -1,6 +1,6 @@
 import type { Role } from '../user/db.js';
 export type Action = 'create' | 'read' | 'update' | 'delete' | '*';
-export type Resource = 'team' | 'team_member' | 'invite' | 'connect_ui_settings' | 'billing' | 'plan' | 'environment' | 'environment_production_flag' | 'environment_key' | 'environment_variable' | 'webhook' | 'integration' | 'connection' | 'flow' | 'sync_command' | 'secret_key' | 'connection_credential' | 'log' | 'audit_trail' | '*';
+export type Resource = 'team' | 'team_member' | 'invite' | 'connect_ui_settings' | 'billing' | 'plan' | 'environment' | 'environment_production_flag' | 'environment_key' | 'account_key' | 'environment_variable' | 'webhook' | 'integration' | 'connection' | 'flow' | 'sync_command' | 'secret_key' | 'connection_credential' | 'log' | 'audit_trail' | '*';
 export type Scope = 'production' | 'non-production' | 'global';
 export interface Permission {
     action: Action;

package/dist/billing/types.d.ts

@@ -8,6 +8,14 @@ export interface BillingClient {
     getCustomer: (accountId: number) => Promise<Result<BillingCustomer>>;
     putCustomer: (accountId: number, invoicingDetails: BillingInvoicingDetails) => Promise<Result<BillingCustomer>>;
     getSubscription: (accountId: number) => Promise<Result<BillingSubscription | null>>;
+    getOverdueInvoices: (accountId: number) => Promise<Result<BillingOverdueInvoices>>;
+    getUpcomingInvoice: (subscriptionId: string) => Promise<Result<BillingUpcomingInvoice | null>>;
+    getPeriodCosts: (subscriptionId: string) => Promise<Result<BillingPeriodCosts | null>>;
+    getSpendAlert: (subscriptionId: string) => Promise<Result<BillingSpendAlert | null>>;
+    setSpendAlert: (subscriptionId: string, opts: {
+        thresholdInCents: number;
+    }) => Promise<Result<BillingSpendAlert>>;
+    removeSpendAlert: (subscriptionId: string) => Promise<Result<void>>;
     createSubscription: (team: DBTeam, planExternalId: string) => Promise<Result<BillingSubscription>>;
     getUsage: (subscriptionId: string, opts?: GetBillingUsageOpts) => Promise<Result<BillingUsageMetrics>>;
     upgrade: (opts: {
@@ -24,16 +32,16 @@ export interface BillingClient {
     applyPendingChanges: (opts: {
         pendingChangeId: string;
         /**
-         * Stripe PaymentIntent ID, used to cross-reference the payment in Orb.
+         * Payment collected up front.
+         *
+         * Omitted for a plan billed fully in arrears, where nothing is collected when the change is applied.
          */
-        paymentExternalId: string;
-        /**
-         * Amount collected via Stripe in dollars (e.g. "25.00"). Orb uses this
-         * to credit the customer the difference vs. the actual invoice amount,
-         * so overcharges (e.g. when falling back to the base fee) are corrected
-         * automatically. No credit is issued if the amounts match exactly.
-         */
-        amountCollected: string;
+        payment?: {
+            /** The external payment ID; for Stripe, it's the PaymentIntent ID. */
+            externalId: string;
+            /** Amount collected in dollars. */
+            amountCollected: string;
+        } | undefined;
     }) => Promise<Result<BillingSubscription>>;
     cancelPendingChanges: (opts: {
         pendingChangeId: string;
@@ -49,6 +57,7 @@ export interface BillingCustomer {
 export interface BillingInvoicingDetails {
     legalEntityName: string;
     email: string;
+    additionalEmails: string[];
     address: BillingAddress | null;
     taxId: BillingTaxId | null;
 }
@@ -70,6 +79,42 @@ export interface BillingSubscription {
     pendingChangeId?: string | undefined;
     planExternalId: string;
 }
+export interface BillingOverdueInvoices {
+    hasOverdue: boolean;
+}
+/** Orb's upcoming invoice for a subscription — the whole invoice, not a month's slice of it. */
+export interface BillingUpcomingInvoice {
+    amountInCents: number;
+    /** ISO 4217, uppercased. Orb's `credits` is rejected upstream. */
+    currency: string;
+}
+/** Orb's single `cost_exceeded` alert for a subscription; Orb holds all of its state. */
+export interface BillingSpendAlert {
+    id: string;
+    thresholdInCents: number;
+    /** ISO 4217, uppercased. Null when Orb reports a unit that isn't a currency. */
+    currency: string | null;
+}
+export interface BillingPeriodCosts {
+    /** Integer cents charged this billing period per metric, excluding every fixed price. A metric is
+     *  absent when the subscription carries no price for it, which is not the same as being charged 0. */
+    metrics: Partial<Record<UsageMetric, number>>;
+    /** Metrics with a real price whose charge we couldn't read — an unparseable amount, or a currency
+     *  other prices don't share. A charge exists; we just can't state it, so it reads as a dash, not $0. */
+    malformedMetrics: UsageMetric[];
+    /** False when a price maps to no metric of ours, so an unpriced row can't safely claim $0 — the
+     *  money might be one of theirs. */
+    fullyAttributed: boolean;
+    /** The individual prices behind `malformedMetrics` and a false `fullyAttributed`, for alerting —
+     *  not sent over HTTP. */
+    flagged: {
+        priceId: string;
+        priceName: string;
+        metric: UsageMetric | null;
+        amountInCents: number | null;
+    }[];
+    currency: string;
+}
 export type CounterUsageMetric = Exclude<UsageMetric, 'records' | 'connections'>;
 export type AvgUsageMetric = Extract<UsageMetric, 'records' | 'connections'>;
 export interface BreakdownDimensions {
@@ -77,10 +122,11 @@ export interface BreakdownDimensions {
     function_executions: 'environment_id' | 'integration_id' | 'connection_id' | 'function_name' | 'function_type' | 'success';
     function_logs: 'environment_id' | 'integration_id' | 'connection_id' | 'function_name' | 'function_type' | 'success';
     function_compute_gbms: 'environment_id' | 'integration_id' | 'connection_id' | 'function_name' | 'function_type' | 'success';
+    function_duration_seconds: 'environment_id' | 'integration_id' | 'connection_id' | 'function_name' | 'function_type' | 'success';
     webhook_forwards: 'environment_id' | 'integration_id' | 'connection_id' | 'success';
     records: 'environment_id' | 'integration_id' | 'connection_id' | 'model';
     connections: 'environment_id' | 'integration_id';
-    data_transfer: 'environment_id' | 'integration_id' | 'connection_id' | 'package' | 'callsite';
+    data_transfer: 'environment_id' | 'integration_id' | 'connection_id' | 'source';
 }
 export type DimensionFor<M extends UsageMetric> = 'none' | BreakdownDimensions[M];
 export interface GetBillingUsageOpts {

package/dist/connection/api/get.d.ts

@@ -171,7 +171,7 @@ export type GetPublicConnection = ApiEndpoint<{
         refresh_github_app_jwt_token?: boolean | undefined;
     };
     Path: '/connection/:connectionId';
-    Error: ApiError<'unknown_provider_config' | 'invalid_credentials'>;
+    Error: ApiError<'unknown_provider_config' | 'not_found' | 'invalid_credentials' | 'server_error'>;
     Success: ApiPublicConnectionFull;
 }>;
 export type PatchPublicConnection = ApiEndpoint<{

package/dist/connection/api/metadata.d.ts

@@ -8,7 +8,10 @@ export interface MetadataBody {
 }
 type MetadataError = ApiError<'invalid_body'> | ApiError<'unknown_connection'>;
 export type SetMetadata = ApiEndpoint<{
-    Audit: AuditPolicy<'connection', 'metadata_updated', 'environment'>;
+    Audit: {
+        kind: 'no-audit';
+        reason: 'data-plane operation';
+    };
     Method: 'POST';
     Body: MetadataBody;
     Path: '/connection/metadata';
@@ -16,7 +19,10 @@ export type SetMetadata = ApiEndpoint<{
     Success: MetadataBody;
 }>;
 export type UpdateMetadata = ApiEndpoint<{
-    Audit: AuditPolicy<'connection', 'metadata_updated', 'environment'>;
+    Audit: {
+        kind: 'no-audit';
+        reason: 'data-plane operation';
+    };
     Method: 'PATCH';
     Path: '/connection/metadata';
     Body: MetadataBody;