@noresponse/node 8.4.1 → 9.1.0

package/dist/esm/sdk/erasures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erasures.d.ts","sourceRoot":"","sources":["../../../src/sdk/erasures.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,QAAS,SAAQ,SAAS;IACrC;;;;;OAKG;IACG,GAAG,CACP,OAAO,EAAE,UAAU,CAAC,wBAAwB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAM/C;CACF"}

package/dist/esm/sdk/erasures.js

@@ -0,0 +1,15 @@
+import { erasuresGet } from "../funcs/erasures-get.js";
+import { ClientSDK } from "../lib/sdks.js";
+import { unwrapAsync } from "../types/fp.js";
+export class Erasures extends ClientSDK {
+    /**
+     * Read an erasure receipt
+     *
+     * @remarks
+     * Read retained erasure progress and downstream acknowledgements. Completion does not certify deletion from backups.
+     */
+    async get(request, options) {
+        return unwrapAsync(erasuresGet(this, request, options));
+    }
+}
+//# sourceMappingURL=erasures.js.map

package/dist/esm/sdk/erasures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erasures.js","sourceRoot":"","sources":["../../../src/sdk/erasures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,QAAS,SAAQ,SAAS;IACrC;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,OAA4C,EAC5C,OAAwB,EACuB;QAC/C,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/esm/sdk/evaluations.d.ts

@@ -0,0 +1,50 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+import { PageIterator } from "../types/operations.js";
+export declare class Evaluations extends ClientSDK {
+    /**
+     * List retained policy evaluation jobs.
+     *
+     * @remarks
+     * List retained policy evaluation jobs for this environment, newest first. At most five jobs are retained for their 24-hour evidence lifetime. Use next_before as before on the next page.
+     */
+    list(request: operations.ListPolicyEvaluationsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListPolicyEvaluationsResponse, {
+        cursor: string;
+    }>>;
+    /**
+     * Freeze an evaluation cohort and queue a bounded job.
+     *
+     * @remarks
+     * Create a bounded evaluation with an Idempotency-Key, expected policy version, fixed candidates, cohort, seed and cost assumptions. Evidence is frozen before evaluation and recorded by hashes. Limits are 1000 accounts, 50000 request attempts and 64 MiB. Capture completeness is currently unknown, so results are no_change and cannot be published. The evaluation fetches no new source evidence and changes no live policy.
+     */
+    create(request: operations.CreatePolicyEvaluationRequest, options?: RequestOptions): Promise<operations.CreatePolicyEvaluationResponse>;
+    /**
+     * Read evaluation state and provenance.
+     *
+     * @remarks
+     * Read a retained evaluation job and its capture and provenance metadata. Cancellation, source erasure, retention reduction and expiry can make a result unavailable.
+     */
+    get(request: operations.GetPolicyEvaluationRequest, options?: RequestOptions): Promise<operations.GetPolicyEvaluationResponse>;
+    /**
+     * Read the bounded completed evaluator report.
+     *
+     * @remarks
+     * Read the completed evaluation report, including coverage, uncertainty and candidate results. Unknown capture completeness produces no_change. A completed result is not an automatic policy change.
+     */
+    getResult(request: operations.GetPolicyEvaluationResultRequest, options?: RequestOptions): Promise<operations.GetPolicyEvaluationResultResponse>;
+    /**
+     * Cancel processing and destroy retained evidence and report.
+     *
+     * @remarks
+     * Cancel a queued or running evaluation and invalidate its stored evidence. The operation does not change policy. Send an empty JSON object.
+     */
+    cancel(request: operations.CancelPolicyEvaluationRequest, options?: RequestOptions): Promise<operations.CancelPolicyEvaluationResponse>;
+    /**
+     * Publish an explicitly reviewed proposal with exact provenance.
+     *
+     * @remarks
+     * Publish an explicitly reviewed candidate with its exact manifest, input and result hashes and unchanged baseline policy version. Requires settings plus policy_publish, or legacy management. Publication creates a fresh policy version and immutable provenance. no_change, expired or invalidated results are refused.
+     */
+    publish(request: operations.PublishPolicyEvaluationRequest, options?: RequestOptions): Promise<operations.PublishPolicyEvaluationResponse>;
+}
+//# sourceMappingURL=evaluations.d.ts.map

package/dist/esm/sdk/evaluations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluations.d.ts","sourceRoot":"","sources":["../../../src/sdk/evaluations.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAwB,MAAM,wBAAwB,CAAC;AAE5E,qBAAa,WAAY,SAAQ,SAAS;IACxC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,4BAA4B,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CACR,YAAY,CAAC,UAAU,CAAC,6BAA6B,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAC3E,CAMA;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAMpD;IAED;;;;;OAKG;IACG,GAAG,CACP,OAAO,EAAE,UAAU,CAAC,0BAA0B,EAC9C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAMjD;IAED;;;;;OAKG;IACG,SAAS,CACb,OAAO,EAAE,UAAU,CAAC,gCAAgC,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAMvD;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAMpD;IAED;;;;;OAKG;IACG,OAAO,CACX,OAAO,EAAE,UAAU,CAAC,8BAA8B,EAClD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAMrD;CACF"}

package/dist/esm/sdk/evaluations.js

@@ -0,0 +1,66 @@
+import { evaluationsCancel } from "../funcs/evaluations-cancel.js";
+import { evaluationsCreate } from "../funcs/evaluations-create.js";
+import { evaluationsGetResult } from "../funcs/evaluations-get-result.js";
+import { evaluationsGet } from "../funcs/evaluations-get.js";
+import { evaluationsList } from "../funcs/evaluations-list.js";
+import { evaluationsPublish } from "../funcs/evaluations-publish.js";
+import { ClientSDK } from "../lib/sdks.js";
+import { unwrapAsync } from "../types/fp.js";
+import { unwrapResultIterator } from "../types/operations.js";
+export class Evaluations extends ClientSDK {
+    /**
+     * List retained policy evaluation jobs.
+     *
+     * @remarks
+     * List retained policy evaluation jobs for this environment, newest first. At most five jobs are retained for their 24-hour evidence lifetime. Use next_before as before on the next page.
+     */
+    async list(request, options) {
+        return unwrapResultIterator(evaluationsList(this, request, options));
+    }
+    /**
+     * Freeze an evaluation cohort and queue a bounded job.
+     *
+     * @remarks
+     * Create a bounded evaluation with an Idempotency-Key, expected policy version, fixed candidates, cohort, seed and cost assumptions. Evidence is frozen before evaluation and recorded by hashes. Limits are 1000 accounts, 50000 request attempts and 64 MiB. Capture completeness is currently unknown, so results are no_change and cannot be published. The evaluation fetches no new source evidence and changes no live policy.
+     */
+    async create(request, options) {
+        return unwrapAsync(evaluationsCreate(this, request, options));
+    }
+    /**
+     * Read evaluation state and provenance.
+     *
+     * @remarks
+     * Read a retained evaluation job and its capture and provenance metadata. Cancellation, source erasure, retention reduction and expiry can make a result unavailable.
+     */
+    async get(request, options) {
+        return unwrapAsync(evaluationsGet(this, request, options));
+    }
+    /**
+     * Read the bounded completed evaluator report.
+     *
+     * @remarks
+     * Read the completed evaluation report, including coverage, uncertainty and candidate results. Unknown capture completeness produces no_change. A completed result is not an automatic policy change.
+     */
+    async getResult(request, options) {
+        return unwrapAsync(evaluationsGetResult(this, request, options));
+    }
+    /**
+     * Cancel processing and destroy retained evidence and report.
+     *
+     * @remarks
+     * Cancel a queued or running evaluation and invalidate its stored evidence. The operation does not change policy. Send an empty JSON object.
+     */
+    async cancel(request, options) {
+        return unwrapAsync(evaluationsCancel(this, request, options));
+    }
+    /**
+     * Publish an explicitly reviewed proposal with exact provenance.
+     *
+     * @remarks
+     * Publish an explicitly reviewed candidate with its exact manifest, input and result hashes and unchanged baseline policy version. Requires settings plus policy_publish, or legacy management. Publication creates a fresh policy version and immutable provenance. no_change, expired or invalidated results are refused.
+     */
+    async publish(request, options) {
+        return unwrapAsync(evaluationsPublish(this, request, options));
+    }
+}
+//# sourceMappingURL=evaluations.js.map

package/dist/esm/sdk/evaluations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluations.js","sourceRoot":"","sources":["../../../src/sdk/evaluations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAgB,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,MAAM,OAAO,WAAY,SAAQ,SAAS;IACxC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAgD,EAChD,OAAwB,EAGxB;QACA,OAAO,oBAAoB,CAAC,eAAe,CACzC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAiD,EACjD,OAAwB,EAC4B;QACpD,OAAO,WAAW,CAAC,iBAAiB,CAClC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,OAA8C,EAC9C,OAAwB,EACyB;QACjD,OAAO,WAAW,CAAC,cAAc,CAC/B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CACb,OAAoD,EACpD,OAAwB,EAC+B;QACvD,OAAO,WAAW,CAAC,oBAAoB,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAiD,EACjD,OAAwB,EAC4B;QACpD,OAAO,WAAW,CAAC,iBAAiB,CAClC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,OAAkD,EAClD,OAAwB,EAC6B;QACrD,OAAO,WAAW,CAAC,kBAAkB,CACnC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/esm/sdk/exports.d.ts

@@ -0,0 +1,50 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+import { PageIterator } from "../types/operations.js";
+export declare class Exports extends ClientSDK {
+    /**
+     * Request an asynchronous customer export.
+     *
+     * @remarks
+     * Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope; detailed account data also needs evidence or detailed scope. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.
+     */
+    create(request: operations.CreateCustomerExportRequest, options?: RequestOptions): Promise<operations.CreateCustomerExportResponse>;
+    /**
+     * List exports for one collection.
+     *
+     * @remarks
+     * List authorised jobs for one kind and environment. Detailed jobs require current detailed-data permission and are filtered before pagination. Keep the kind and environment unchanged when following next_cursor.
+     */
+    list(request: operations.ListCustomerExportsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListCustomerExportsResponse, {
+        cursor: string;
+    }>>;
+    /**
+     * Read export state and progress.
+     *
+     * @remarks
+     * Read the status of an authorised export. Records and bytes describe committed progress in the current generation. Only completed, unexpired artifacts can be downloaded. Source erasure, retention changes and workspace removal can invalidate a job.
+     */
+    get(request: operations.GetCustomerExportRequest, options?: RequestOptions): Promise<operations.GetCustomerExportResponse>;
+    /**
+     * Cancel and remove an export artifact.
+     *
+     * @remarks
+     * Cancel an export and remove its stored chunks. Repeating cancellation is safe. An already admitted download may finish; bytes already returned cannot be recalled. Send an empty JSON object.
+     */
+    cancel(request: operations.CancelCustomerExportRequest, options?: RequestOptions): Promise<operations.CancelCustomerExportResponse>;
+    /**
+     * Retry a failed export.
+     *
+     * @remarks
+     * Start a new generation of a failed export before its original expiry, up to ten generations. The request criteria stay fixed and the new generation takes a fresh source snapshot. Cancelled, erased and expired jobs cannot be retried. Send an empty JSON object.
+     */
+    retry(request: operations.RetryCustomerExportRequest, options?: RequestOptions): Promise<operations.RetryCustomerExportResponse>;
+    /**
+     * Download one authorized export chunk.
+     *
+     * @remarks
+     * Download one chunk of a completed, unexpired export after a fresh permission and privacy check. The response contains base64-encoded JSON Lines, a SHA-256, generation and next index. Decode and concatenate chunks in order from one generation. Audit storage failure withholds the bytes.
+     */
+    downloadChunk(request: operations.DownloadCustomerExportChunkRequest, options?: RequestOptions): Promise<operations.DownloadCustomerExportChunkResponse>;
+}
+//# sourceMappingURL=exports.d.ts.map

package/dist/esm/sdk/exports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../../src/sdk/exports.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAwB,MAAM,wBAAwB,CAAC;AAE5E,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,2BAA2B,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAMlD;IAED;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,0BAA0B,EAC9C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CACR,YAAY,CAAC,UAAU,CAAC,2BAA2B,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CACzE,CAMA;IAED;;;;;OAKG;IACG,GAAG,CACP,OAAO,EAAE,UAAU,CAAC,wBAAwB,EAC5C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAM/C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,2BAA2B,EAC/C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAMlD;IAED;;;;;OAKG;IACG,KAAK,CACT,OAAO,EAAE,UAAU,CAAC,0BAA0B,EAC9C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAMjD;IAED;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,UAAU,CAAC,kCAAkC,EACtD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mCAAmC,CAAC,CAMzD;CACF"}

package/dist/esm/sdk/exports.js

@@ -0,0 +1,66 @@
+import { exportsCancel } from "../funcs/exports-cancel.js";
+import { exportsCreate } from "../funcs/exports-create.js";
+import { exportsDownloadChunk } from "../funcs/exports-download-chunk.js";
+import { exportsGet } from "../funcs/exports-get.js";
+import { exportsList } from "../funcs/exports-list.js";
+import { exportsRetry } from "../funcs/exports-retry.js";
+import { ClientSDK } from "../lib/sdks.js";
+import { unwrapAsync } from "../types/fp.js";
+import { unwrapResultIterator } from "../types/operations.js";
+export class Exports extends ClientSDK {
+    /**
+     * Request an asynchronous customer export.
+     *
+     * @remarks
+     * Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope; detailed account data also needs evidence or detailed scope. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.
+     */
+    async create(request, options) {
+        return unwrapAsync(exportsCreate(this, request, options));
+    }
+    /**
+     * List exports for one collection.
+     *
+     * @remarks
+     * List authorised jobs for one kind and environment. Detailed jobs require current detailed-data permission and are filtered before pagination. Keep the kind and environment unchanged when following next_cursor.
+     */
+    async list(request, options) {
+        return unwrapResultIterator(exportsList(this, request, options));
+    }
+    /**
+     * Read export state and progress.
+     *
+     * @remarks
+     * Read the status of an authorised export. Records and bytes describe committed progress in the current generation. Only completed, unexpired artifacts can be downloaded. Source erasure, retention changes and workspace removal can invalidate a job.
+     */
+    async get(request, options) {
+        return unwrapAsync(exportsGet(this, request, options));
+    }
+    /**
+     * Cancel and remove an export artifact.
+     *
+     * @remarks
+     * Cancel an export and remove its stored chunks. Repeating cancellation is safe. An already admitted download may finish; bytes already returned cannot be recalled. Send an empty JSON object.
+     */
+    async cancel(request, options) {
+        return unwrapAsync(exportsCancel(this, request, options));
+    }
+    /**
+     * Retry a failed export.
+     *
+     * @remarks
+     * Start a new generation of a failed export before its original expiry, up to ten generations. The request criteria stay fixed and the new generation takes a fresh source snapshot. Cancelled, erased and expired jobs cannot be retried. Send an empty JSON object.
+     */
+    async retry(request, options) {
+        return unwrapAsync(exportsRetry(this, request, options));
+    }
+    /**
+     * Download one authorized export chunk.
+     *
+     * @remarks
+     * Download one chunk of a completed, unexpired export after a fresh permission and privacy check. The response contains base64-encoded JSON Lines, a SHA-256, generation and next index. Decode and concatenate chunks in order from one generation. Audit storage failure withholds the bytes.
+     */
+    async downloadChunk(request, options) {
+        return unwrapAsync(exportsDownloadChunk(this, request, options));
+    }
+}
+//# sourceMappingURL=exports.js.map

package/dist/esm/sdk/exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../../src/sdk/exports.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAgB,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA+C,EAC/C,OAAwB,EAC0B;QAClD,OAAO,WAAW,CAAC,aAAa,CAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAA8C,EAC9C,OAAwB,EAGxB;QACA,OAAO,oBAAoB,CAAC,WAAW,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,OAA4C,EAC5C,OAAwB,EACuB;QAC/C,OAAO,WAAW,CAAC,UAAU,CAC3B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA+C,EAC/C,OAAwB,EAC0B;QAClD,OAAO,WAAW,CAAC,aAAa,CAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CACT,OAA8C,EAC9C,OAAwB,EACyB;QACjD,OAAO,WAAW,CAAC,YAAY,CAC7B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,OAAsD,EACtD,OAAwB,EACiC;QACzD,OAAO,WAAW,CAAC,oBAAoB,CACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/esm/sdk/invites.d.ts

@@ -0,0 +1,33 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+export declare class Invites extends ClientSDK {
+    /**
+     * Invite a member.
+     *
+     * @remarks
+     * Create a workspace-bound invite for a non-owner role with a live members_manage key. The new token is returned once. Set external_user_id to bind acceptance to an exact verified provider subject; email is contact information. Creating a token does not send an email.
+     */
+    create(request: operations.CreateInviteRequest, options?: RequestOptions): Promise<operations.CreateInviteResponse>;
+    /**
+     * List pending invites.
+     *
+     * @remarks
+     * Read pending workspace invitations with a live members_manage key. Tokens are excluded. Expiry and token reissue timestamps describe invitation state; they do not establish email delivery.
+     */
+    list(request: operations.ListInvitesRequest, options?: RequestOptions): Promise<operations.ListInvitesResponse>;
+    /**
+     * Revoke an invite.
+     *
+     * @remarks
+     * Revoke a pending invitation with a live members_manage key. A revoked token cannot be accepted. Owner-role invitations remain outside machine delegation.
+     */
+    revoke(request: operations.RevokeInviteRequest, options?: RequestOptions): Promise<operations.RevokeInviteResponse | undefined>;
+    /**
+     * Reissue an invitation for delivery.
+     *
+     * @remarks
+     * Reissue a pending non-owner invitation with a live members_manage key. The old token is invalidated and the new token is returned once with renewed expiry. Its role and permissions are preserved. This operation does not prove email delivery and is not automatically retried.
+     */
+    resend(request: operations.ResendInviteRequest, options?: RequestOptions): Promise<operations.ResendInviteResponse>;
+}
+//# sourceMappingURL=invites.d.ts.map

package/dist/esm/sdk/invites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invites.d.ts","sourceRoot":"","sources":["../../../src/sdk/invites.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAM1C;IAED;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAMtD;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAM1C;CACF"}

package/dist/esm/sdk/invites.js

@@ -0,0 +1,45 @@
+import { invitesCreate } from "../funcs/invites-create.js";
+import { invitesList } from "../funcs/invites-list.js";
+import { invitesResend } from "../funcs/invites-resend.js";
+import { invitesRevoke } from "../funcs/invites-revoke.js";
+import { ClientSDK } from "../lib/sdks.js";
+import { unwrapAsync } from "../types/fp.js";
+export class Invites extends ClientSDK {
+    /**
+     * Invite a member.
+     *
+     * @remarks
+     * Create a workspace-bound invite for a non-owner role with a live members_manage key. The new token is returned once. Set external_user_id to bind acceptance to an exact verified provider subject; email is contact information. Creating a token does not send an email.
+     */
+    async create(request, options) {
+        return unwrapAsync(invitesCreate(this, request, options));
+    }
+    /**
+     * List pending invites.
+     *
+     * @remarks
+     * Read pending workspace invitations with a live members_manage key. Tokens are excluded. Expiry and token reissue timestamps describe invitation state; they do not establish email delivery.
+     */
+    async list(request, options) {
+        return unwrapAsync(invitesList(this, request, options));
+    }
+    /**
+     * Revoke an invite.
+     *
+     * @remarks
+     * Revoke a pending invitation with a live members_manage key. A revoked token cannot be accepted. Owner-role invitations remain outside machine delegation.
+     */
+    async revoke(request, options) {
+        return unwrapAsync(invitesRevoke(this, request, options));
+    }
+    /**
+     * Reissue an invitation for delivery.
+     *
+     * @remarks
+     * Reissue a pending non-owner invitation with a live members_manage key. The old token is invalidated and the new token is returned once with renewed expiry. Its role and permissions are preserved. This operation does not prove email delivery and is not automatically retried.
+     */
+    async resend(request, options) {
+        return unwrapAsync(invitesResend(this, request, options));
+    }
+}
+//# sourceMappingURL=invites.js.map

package/dist/esm/sdk/invites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invites.js","sourceRoot":"","sources":["../../../src/sdk/invites.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EACkB;QAC1C,OAAO,WAAW,CAAC,aAAa,CAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EAC8B;QACtD,OAAO,WAAW,CAAC,aAAa,CAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EACkB;QAC1C,OAAO,WAAW,CAAC,aAAa,CAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/esm/sdk/keys.d.ts

@@ -13,7 +13,7 @@ export declare class Keys extends ClientSDK {
      * Create an API key.
      *
      * @remarks
-     * Creates an API key in the environment of the key that signs the request, with scopes that key holds itself, and returns its secret once in key. Requires the management scope; the new key may hold it too. A scope the signing key lacks answers 403 workspace_forbidden, and the other environment 404 not_found. An environment holds at most 100 keys that authenticate (409 key_limit_reached). created_by is the signing key's prefix. Not idempotent: a retry after a lost answer creates a second key, which you can list and revoke.
+     * Create an API key in the signing key environment with authority no greater than the issuer holds. Requires management. Optional name, purpose, kind and expiry describe its lifecycle. Send request_id for safe issuance retries: the first successful response returns the secret once; a repeat returns existing metadata without the secret, and changed parameters conflict. Without request_id a retry can create another key. A service credential is independent of its issuer; personal credentials require an authenticated member and retire when that member loses authority.
      */
     create(request: operations.CreateKeyRequest, options?: RequestOptions): Promise<operations.CreateKeyResponse>;
     /**

package/dist/esm/sdk/keys.js

@@ -18,7 +18,7 @@ export class Keys extends ClientSDK {
      * Create an API key.
      *
      * @remarks
-     * Creates an API key in the environment of the key that signs the request, with scopes that key holds itself, and returns its secret once in key. Requires the management scope; the new key may hold it too. A scope the signing key lacks answers 403 workspace_forbidden, and the other environment 404 not_found. An environment holds at most 100 keys that authenticate (409 key_limit_reached). created_by is the signing key's prefix. Not idempotent: a retry after a lost answer creates a second key, which you can list and revoke.
+     * Create an API key in the signing key environment with authority no greater than the issuer holds. Requires management. Optional name, purpose, kind and expiry describe its lifecycle. Send request_id for safe issuance retries: the first successful response returns the secret once; a repeat returns existing metadata without the secret, and changed parameters conflict. Without request_id a retry can create another key. A service credential is independent of its issuer; personal credentials require an authenticated member and retire when that member loses authority.
      */
     async create(request, options) {
         return unwrapAsync(keysCreate(this, request, options));

package/dist/esm/sdk/lists.d.ts

@@ -1,26 +1,50 @@
 import { ClientSDK, RequestOptions } from "../lib/sdks.js";
 import * as operations from "../models/operations/index.js";
+import { PageIterator } from "../types/operations.js";
 export declare class Lists extends ClientSDK {
     /**
      * List an environment's list entries.
      *
      * @remarks
-     * Lists every entry of the signing key's environment's list, newest first: each an email or an email domain that decides the accounts it matches, block or allow, whatever their score. Requires the management scope; the other environment answers 404 not_found. Read-only and safe to retry.
+     * Page through this environment allow and block entries, with canonical values, reasons and optional expiry. Requires settings or management. Follow the returned cursor until exhausted; a page is not the complete list. The cursor is bound to the environment and current filters.
      */
-    list(request: operations.ListListEntriesRequest, options?: RequestOptions): Promise<operations.ListListEntriesResponse>;
+    list(request: operations.ListListEntriesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListListEntriesResponse, {
+        cursor: string;
+    }>>;
     /**
      * Add an entry to an environment's list.
      *
      * @remarks
-     * Adds an exact email (kind email) or an email domain (kind email_domain) to the signing key's environment's list with the action block or allow, and answers the entry with its value in canonical form. An account matches when one of its assessments sent the email, or an email of the domain: a block entry decides block for every flow and an allow entry allow, block winning when both match, and the account's risk carries list_match with the entry's id while its score is unchanged. Every matching account is re-decided at once and sends account.risk_changed when its decision changes. A value already on the list answers 409 list_entry_exists, a full list 409 list_limit_reached, and an entry matching more than 5,000 accounts 409 list_entry_too_broad. Requires the management scope; the other environment answers 404 not_found.
+     * Add a canonical email or email-domain override with a reason and optional expiry. Requires settings plus policy_publish, or legacy management. Block wins over allow when both match. A small single-entry change retains the documented synchronous match budget; use lists.change for larger changes, whose account propagation is durable and resumable.
      */
     create(request: operations.CreateListEntryRequest, options?: RequestOptions): Promise<operations.CreateListEntryResponse>;
     /**
      * Remove an entry from an environment's list.
      *
      * @remarks
-     * Removes an entry from the signing key's environment's list and re-decides the accounts it matched, the 5,000 most recently assessed at most, each sending account.risk_changed when its decision changes. An unknown or already removed entry answers 404 not_found. Requires the management scope.
+     * Remove an override with settings plus policy_publish, or legacy management. The removal takes effect for new decisions and schedules resumable propagation across matching retained accounts. An unknown or already removed entry answers404. Account risk events announce changed decisions as propagation runs.
      */
     delete(request: operations.DeleteListEntryRequest, options?: RequestOptions): Promise<operations.DeleteListEntryResponse | undefined>;
+    /**
+     * Preview a list override change without side effects.
+     *
+     * @remarks
+     * Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.
+     */
+    preview(request: operations.PreviewListRequest, options?: RequestOptions): Promise<operations.PreviewListResponse>;
+    /**
+     * Apply an idempotent atomic bulk list change.
+     *
+     * @remarks
+     * Atomically add and remove a bounded batch of entries with an idempotency key. Requires settings plus policy_publish, or legacy management. The receipt exposes durable account propagation beyond the synchronous single-entry budget; poll lists.getChange until completion.
+     */
+    change(request: operations.ChangeListsRequest, options?: RequestOptions): Promise<operations.ChangeListsResponse>;
+    /**
+     * Read a bulk list change and propagation progress.
+     *
+     * @remarks
+     * Read retained propagation progress for a list change with settings or management.
+     */
+    getChange(request: operations.GetListChangeRequest, options?: RequestOptions): Promise<operations.GetListChangeResponse>;
 }
 //# sourceMappingURL=lists.d.ts.map

package/dist/esm/sdk/lists.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lists.d.ts","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,KAAM,SAAQ,SAAS;IAClC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAM7C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAM7C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAMzD;CACF"}
+{"version":3,"file":"lists.d.ts","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAwB,MAAM,wBAAwB,CAAC;AAE5E,qBAAa,KAAM,SAAQ,SAAS;IAClC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CACR,YAAY,CAAC,UAAU,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CACrE,CAMA;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAM7C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAMzD;IAED;;;;;OAKG;IACG,OAAO,CACX,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,SAAS,CACb,OAAO,EAAE,UAAU,CAAC,oBAAoB,EACxC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAM3C;CACF"}

package/dist/esm/sdk/lists.js

@@ -1,23 +1,27 @@
+import { listsChange } from "../funcs/lists-change.js";
 import { listsCreate } from "../funcs/lists-create.js";
 import { listsDelete } from "../funcs/lists-delete.js";
+import { listsGetChange } from "../funcs/lists-get-change.js";
 import { listsList } from "../funcs/lists-list.js";
+import { listsPreview } from "../funcs/lists-preview.js";
 import { ClientSDK } from "../lib/sdks.js";
 import { unwrapAsync } from "../types/fp.js";
+import { unwrapResultIterator } from "../types/operations.js";
 export class Lists extends ClientSDK {
     /**
      * List an environment's list entries.
      *
      * @remarks
-     * Lists every entry of the signing key's environment's list, newest first: each an email or an email domain that decides the accounts it matches, block or allow, whatever their score. Requires the management scope; the other environment answers 404 not_found. Read-only and safe to retry.
+     * Page through this environment allow and block entries, with canonical values, reasons and optional expiry. Requires settings or management. Follow the returned cursor until exhausted; a page is not the complete list. The cursor is bound to the environment and current filters.
      */
     async list(request, options) {
-        return unwrapAsync(listsList(this, request, options));
+        return unwrapResultIterator(listsList(this, request, options));
     }
     /**
      * Add an entry to an environment's list.
      *
      * @remarks
-     * Adds an exact email (kind email) or an email domain (kind email_domain) to the signing key's environment's list with the action block or allow, and answers the entry with its value in canonical form. An account matches when one of its assessments sent the email, or an email of the domain: a block entry decides block for every flow and an allow entry allow, block winning when both match, and the account's risk carries list_match with the entry's id while its score is unchanged. Every matching account is re-decided at once and sends account.risk_changed when its decision changes. A value already on the list answers 409 list_entry_exists, a full list 409 list_limit_reached, and an entry matching more than 5,000 accounts 409 list_entry_too_broad. Requires the management scope; the other environment answers 404 not_found.
+     * Add a canonical email or email-domain override with a reason and optional expiry. Requires settings plus policy_publish, or legacy management. Block wins over allow when both match. A small single-entry change retains the documented synchronous match budget; use lists.change for larger changes, whose account propagation is durable and resumable.
      */
     async create(request, options) {
         return unwrapAsync(listsCreate(this, request, options));
@@ -26,10 +30,37 @@ export class Lists extends ClientSDK {
      * Remove an entry from an environment's list.
      *
      * @remarks
-     * Removes an entry from the signing key's environment's list and re-decides the accounts it matched, the 5,000 most recently assessed at most, each sending account.risk_changed when its decision changes. An unknown or already removed entry answers 404 not_found. Requires the management scope.
+     * Remove an override with settings plus policy_publish, or legacy management. The removal takes effect for new decisions and schedules resumable propagation across matching retained accounts. An unknown or already removed entry answers404. Account risk events announce changed decisions as propagation runs.
      */
     async delete(request, options) {
         return unwrapAsync(listsDelete(this, request, options));
     }
+    /**
+     * Preview a list override change without side effects.
+     *
+     * @remarks
+     * Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.
+     */
+    async preview(request, options) {
+        return unwrapAsync(listsPreview(this, request, options));
+    }
+    /**
+     * Apply an idempotent atomic bulk list change.
+     *
+     * @remarks
+     * Atomically add and remove a bounded batch of entries with an idempotency key. Requires settings plus policy_publish, or legacy management. The receipt exposes durable account propagation beyond the synchronous single-entry budget; poll lists.getChange until completion.
+     */
+    async change(request, options) {
+        return unwrapAsync(listsChange(this, request, options));
+    }
+    /**
+     * Read a bulk list change and propagation progress.
+     *
+     * @remarks
+     * Read retained propagation progress for a list change with settings or management.
+     */
+    async getChange(request, options) {
+        return unwrapAsync(listsGetChange(this, request, options));
+    }
 }
 //# sourceMappingURL=lists.js.map

package/dist/esm/sdk/lists.js.map

@@ -1 +1 @@
-{"version":3,"file":"lists.js","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,OAAO,KAAM,SAAQ,SAAS;IAClC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAA0C,EAC1C,OAAwB,EACqB;QAC7C,OAAO,WAAW,CAAC,SAAS,CAC1B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACqB;QAC7C,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACiC;QACzD,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}
+{"version":3,"file":"lists.js","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAkB,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAgB,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,MAAM,OAAO,KAAM,SAAQ,SAAS;IAClC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAA0C,EAC1C,OAAwB,EAGxB;QACA,OAAO,oBAAoB,CAAC,SAAS,CACnC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACqB;QAC7C,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACiC;QACzD,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,WAAW,CAAC,YAAY,CAC7B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,WAAW,CAAC,WAAW,CAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CACb,OAAwC,EACxC,OAAwB,EACmB;QAC3C,OAAO,WAAW,CAAC,cAAc,CAC/B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/esm/sdk/members.d.ts

@@ -0,0 +1,26 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+export declare class Members extends ClientSDK {
+    /**
+     * List a workspace's members.
+     *
+     * @remarks
+     * Read the workspace directory with a live key carrying members or members_manage. Member identities and grants belong to this workspace. Owner-controlled issuance limits team automation to authorised service credentials.
+     */
+    list(request: operations.ListMembersRequest, options?: RequestOptions): Promise<operations.ListMembersResponse>;
+    /**
+     * Change a member's role.
+     *
+     * @remarks
+     * Update a non-owner member role, environment access or sensitive permission exclusions with a live members_manage key. Owner changes, identity binding and support access remain outside this scope. The current delegation ceiling is checked within the change transaction.
+     */
+    update(request: operations.UpdateMemberRequest, options?: RequestOptions): Promise<operations.UpdateMemberResponse>;
+    /**
+     * Remove a member.
+     *
+     * @remarks
+     * Remove a non-owner member with a live members_manage key. Subsequent access is refused and personal credentials are revoked. Independently owned service credentials follow their own lifecycle.
+     */
+    remove(request: operations.RemoveMemberRequest, options?: RequestOptions): Promise<operations.RemoveMemberResponse | undefined>;
+}
+//# sourceMappingURL=members.d.ts.map

package/dist/esm/sdk/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../../src/sdk/members.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAM1C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAMtD;CACF"}

package/dist/esm/sdk/members.js

@@ -0,0 +1,35 @@
+import { membersList } from "../funcs/members-list.js";
+import { membersRemove } from "../funcs/members-remove.js";
+import { membersUpdate } from "../funcs/members-update.js";
+import { ClientSDK } from "../lib/sdks.js";
+import { unwrapAsync } from "../types/fp.js";
+export class Members extends ClientSDK {
+    /**
+     * List a workspace's members.
+     *
+     * @remarks
+     * Read the workspace directory with a live key carrying members or members_manage. Member identities and grants belong to this workspace. Owner-controlled issuance limits team automation to authorised service credentials.
+     */
+    async list(request, options) {
+        return unwrapAsync(membersList(this, request, options));
+    }
+    /**
+     * Change a member's role.
+     *
+     * @remarks
+     * Update a non-owner member role, environment access or sensitive permission exclusions with a live members_manage key. Owner changes, identity binding and support access remain outside this scope. The current delegation ceiling is checked within the change transaction.
+     */
+    async update(request, options) {
+        return unwrapAsync(membersUpdate(this, request, options));
+    }
+    /**
+     * Remove a member.
+     *
+     * @remarks
+     * Remove a non-owner member with a live members_manage key. Subsequent access is refused and personal credentials are revoked. Independently owned service credentials follow their own lifecycle.
+     */
+    async remove(request, options) {
+        return unwrapAsync(membersRemove(this, request, options));
+    }
+}
+//# sourceMappingURL=members.js.map