@numa-tech/numa 1.19.0 → 1.20.1

package/dist/authorization/application-client.d.ts

@@ -0,0 +1,1271 @@
+import type { AuthConfig } from "../config.js";
+import { type KeycloakTokenProvider } from "../oauth.js";
+export type Kind = "clients" | "groups";
+export type Pagination = {
+    page?: number;
+    size?: number;
+    q?: string;
+};
+export type CredentialScope = {
+    environmentId: string;
+    referenceId: string;
+    instanceId: string;
+};
+export interface ApplicationClientDependencies {
+    fetch?: typeof fetch;
+    tokenProvider?: KeycloakTokenProvider;
+}
+export declare class ApplicationClient {
+    private readonly config;
+    private readonly dependencies;
+    readonly applicationId: number;
+    private readonly base;
+    constructor(config: AuthConfig, applicationId: number, dependencies?: ApplicationClientDependencies);
+    private request;
+    private json;
+    private failure;
+    private scoped;
+    sources(): Promise<{
+        [x: string]: unknown;
+        environmentId: string;
+        environmentCode: string;
+        environmentName: string;
+        identityKey: string;
+        issuerUrl: string;
+        realm: string;
+        issuerId: string | null;
+    }[]>;
+    private source;
+    catalog(p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    definition(): Promise<{
+        [x: string]: unknown;
+        applicationId: number;
+        applicationCode: string;
+        name: string;
+        kind: "CATALOG" | "DOCUMENT";
+        editable: boolean;
+        defaultRoleClientId: string;
+        draftVersion: number;
+        definition: Record<string, unknown>;
+        versions: {
+            [x: string]: unknown;
+            version: number;
+            createdAt: string;
+            digest: string;
+        }[];
+    }>;
+    saveDefinition(input: unknown): Promise<{
+        [x: string]: unknown;
+        applicationId: number;
+        applicationCode: string;
+        name: string;
+        kind: "CATALOG" | "DOCUMENT";
+        editable: boolean;
+        defaultRoleClientId: string;
+        draftVersion: number;
+        definition: Record<string, unknown>;
+        versions: {
+            [x: string]: unknown;
+            version: number;
+            createdAt: string;
+            digest: string;
+        }[];
+    }>;
+    freeze(input: unknown): Promise<{
+        [x: string]: unknown;
+        applicationId: number;
+        version: number;
+        default_role_client_id: string;
+        created_at: string;
+        definition: Record<string, unknown>;
+        digest: string;
+        kind: string;
+    }>;
+    definitionVersion(n: number): Promise<{
+        [x: string]: unknown;
+        applicationId: number;
+        version: number;
+        default_role_client_id: string;
+        created_at: string;
+        definition: Record<string, unknown>;
+        digest: string;
+        kind: string;
+    }>;
+    targets(p?: Pagination, filters?: {
+        issuerId?: string;
+        identitySource?: string;
+    }): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    environments(p?: Pagination): Promise<{
+        [x: string]: unknown;
+        total: number;
+        page: number;
+        size: number;
+        items: {
+            [x: string]: unknown;
+            code: string;
+            name: string;
+            enforcementMode: "APPLICATION" | "GATEWAY";
+            identitySource: "PLATFORM" | "REGISTERED";
+            issuerId?: string | null | undefined;
+            resourceClientId: string;
+            roleClientId: string;
+            pathRoot: string;
+            objectNamespace: string;
+            definitionVersion: number;
+            status: "ACTIVE" | "DISABLED";
+            version: number;
+            gatewayId?: string | null | undefined;
+            gatewayBindingId?: string | null | undefined;
+            id: string;
+            applicationId: number;
+            issuerUrl: string;
+            ready?: boolean | undefined;
+        }[];
+    }>;
+    environment(environmentId: string): Promise<{
+        [x: string]: unknown;
+        code: string;
+        name: string;
+        enforcementMode: "APPLICATION" | "GATEWAY";
+        identitySource: "PLATFORM" | "REGISTERED";
+        issuerId?: string | null | undefined;
+        resourceClientId: string;
+        roleClientId: string;
+        pathRoot: string;
+        objectNamespace: string;
+        definitionVersion: number;
+        status: "ACTIVE" | "DISABLED";
+        version: number;
+        gatewayId?: string | null | undefined;
+        gatewayBindingId?: string | null | undefined;
+        id: string;
+        applicationId: number;
+        issuerUrl: string;
+        ready?: boolean | undefined;
+    }>;
+    saveEnvironment(input: unknown, environmentId?: string): Promise<{
+        [x: string]: unknown;
+        code: string;
+        name: string;
+        enforcementMode: "APPLICATION" | "GATEWAY";
+        identitySource: "PLATFORM" | "REGISTERED";
+        issuerId?: string | null | undefined;
+        resourceClientId: string;
+        roleClientId: string;
+        pathRoot: string;
+        objectNamespace: string;
+        definitionVersion: number;
+        status: "ACTIVE" | "DISABLED";
+        version: number;
+        gatewayId?: string | null | undefined;
+        gatewayBindingId?: string | null | undefined;
+        id: string;
+        applicationId: number;
+        issuerUrl: string;
+        ready?: boolean | undefined;
+    }>;
+    configuration(environmentId: string): Promise<Record<string, unknown>>;
+    gatewayHistory(bindingId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    environmentRuns(environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    directory(kind: string, environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        page: number;
+        size: number;
+        total?: number | undefined;
+        hasMore: boolean;
+    }>;
+    private kind;
+    objects(kind: Kind, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        total: number;
+        page: number;
+        size: number;
+        hasMore: boolean;
+        items: {
+            [x: string]: unknown;
+            referenceId: string;
+            definitionId: string;
+            applicationId: number;
+            definitionVersion: number;
+            referenceVersion: number;
+            status: string;
+            referenceStatus: string;
+            publishedRevision: number | null;
+            ownerApplicationId: number | null;
+            ownership: string;
+            configurationReadOnly: boolean;
+            draftStatus: string;
+            definition: Record<string, unknown>;
+            affectedApplications: Record<string, unknown>[];
+            instances: {
+                [x: string]: unknown;
+                instanceId: string;
+                identityKey: string;
+                issuerUrl: string;
+                instanceVersion: number;
+                targetVersion: number;
+                targetStatus: string;
+                instanceStatus: string;
+                appliedRevision: number | null;
+                mode: string | null;
+            }[];
+        }[];
+    }>;
+    object(kind: Kind, referenceId: string, environmentId: string): Promise<{
+        [x: string]: unknown;
+        referenceId: string;
+        definitionId: string;
+        applicationId: number;
+        definitionVersion: number;
+        referenceVersion: number;
+        status: string;
+        referenceStatus: string;
+        publishedRevision: number | null;
+        ownerApplicationId: number | null;
+        ownership: string;
+        configurationReadOnly: boolean;
+        draftStatus: string;
+        definition: Record<string, unknown>;
+        affectedApplications: Record<string, unknown>[];
+        instances: {
+            [x: string]: unknown;
+            instanceId: string;
+            identityKey: string;
+            issuerUrl: string;
+            instanceVersion: number;
+            targetVersion: number;
+            targetStatus: string;
+            instanceStatus: string;
+            appliedRevision: number | null;
+            mode: string | null;
+        }[];
+        source: {
+            [x: string]: unknown;
+            environmentId: string;
+            environmentCode: string;
+            environmentName: string;
+            identityKey: string;
+            issuerUrl: string;
+            realm: string;
+            issuerId: string | null;
+        };
+    }>;
+    private verifyInstances;
+    saveObject(kind: Kind, input: unknown, referenceId?: string): Promise<{
+        [x: string]: unknown;
+        referenceId: string;
+        definitionId: string;
+        applicationId: number;
+        definitionVersion: number;
+        referenceVersion: number;
+        status: string;
+        referenceStatus: string;
+        publishedRevision: number | null;
+        ownerApplicationId: number | null;
+        ownership: string;
+        configurationReadOnly: boolean;
+        draftStatus: string;
+        definition: Record<string, unknown>;
+        affectedApplications: Record<string, unknown>[];
+        instances: {
+            [x: string]: unknown;
+            instanceId: string;
+            identityKey: string;
+            issuerUrl: string;
+            instanceVersion: number;
+            targetVersion: number;
+            targetStatus: string;
+            instanceStatus: string;
+            appliedRevision: number | null;
+            mode: string | null;
+        }[];
+    }>;
+    registered(kind: Kind, definitionId: string, environmentId: string, instanceId?: string): Promise<{
+        [x: string]: unknown;
+        applicationId: number;
+        source: {
+            [x: string]: unknown;
+            environmentId: string;
+            environmentCode: string;
+            environmentName: string;
+            identityKey: string;
+            issuerUrl: string;
+            realm: string;
+            issuerId: string | null;
+        };
+        definitionId: string;
+        definition: {
+            [x: string]: unknown;
+            id: string;
+            version: number;
+            status: string;
+            ownerApplicationId: number | null;
+        };
+        ownerApplicationId: number | null;
+        configurationReadOnly: boolean;
+        instance: {
+            [x: string]: unknown;
+            id: string;
+            definitionId: string;
+            identityKey: string;
+            issuerUrl: string;
+            version: number;
+            status: string;
+        } | null;
+        reference: {
+            [x: string]: unknown;
+            referenceId: string;
+            referenceVersion: number;
+            status: string;
+        } | null;
+        target: {
+            [x: string]: unknown;
+            instanceId: string;
+            identityKey: string;
+            issuerUrl: string;
+            instanceVersion: number;
+            targetVersion: number;
+            targetStatus: string;
+            instanceStatus: string;
+            appliedRevision: number | null;
+            mode: string | null;
+        } | null;
+        association: "BOUND" | "NO_INSTANCE" | "REFERENCE_WITHOUT_TARGET" | "UNREFERENCED";
+    }>;
+    versions(kind: Kind, definitionId: string, environmentId: string, p?: Pagination, instanceId?: string): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    history(kind: Kind, referenceId: string, instanceId: string, environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+        hasMore: boolean;
+    }>;
+    members(referenceId: string, instanceId: string, environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+        hasMore: boolean;
+    }>;
+    blacklist(referenceId: string, instanceId: string, environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+        hasMore: boolean;
+    }>;
+    private instanceReader;
+    providers(environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    provider(providerApplicationId: number, environmentId: string): Promise<Record<string, unknown>>;
+    machines(environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        items: Record<string, unknown>[];
+        total: number;
+        page: number;
+        size: number;
+    }>;
+    relations(environmentId: string, p?: Pagination): Promise<{
+        [x: string]: unknown;
+        revision: number;
+        relations: Record<string, unknown>[];
+        total: number;
+        hasMore: boolean;
+        page: number;
+        size: number;
+    }>;
+    saveRelations(environmentId: string, input: unknown): Promise<{
+        [x: string]: unknown;
+        revision: number;
+        relations: Record<string, unknown>[];
+        total: number;
+        hasMore: boolean;
+        page: number;
+        size: number;
+    }>;
+    subjectAccess(subject: string, environmentId: string): Promise<Record<string, unknown>>;
+    plan(input: unknown): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "IDENTITY_PUBLICATION";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            definitionVersion: number;
+            definitionDigest: string;
+            targets: Record<string, unknown>[];
+            instances: Record<string, Record<string, unknown>>;
+            steps: Record<string, unknown>[];
+        };
+    } | {
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "CREDENTIAL_ROTATION";
+        plan: {
+            [x: string]: unknown;
+            operation: "CREDENTIAL_ROTATION";
+            schemaVersion: 1;
+            applicationId: number;
+            credentialContext: {
+                [x: string]: unknown;
+                schemaVersion: 1;
+                applicationId: number;
+                environmentId: string;
+                referenceId: string;
+                definitionId: string;
+                instanceId: string;
+                identityKey: string;
+                issuerId: string | null;
+                issuerUrl: string;
+                issuerVersion: number;
+                environmentVersion: number;
+                gatewayId: string | null;
+                gatewayVersion: number | null;
+                gatewayBindingId: string | null;
+                gatewayBindingVersion: number | null;
+                referenceVersion: number;
+                targetVersion: number;
+                definitionVersion: number;
+                publishedRevision: number | null;
+                appliedRevision: number | null;
+                instanceVersion: number;
+                clientId: string;
+                remoteUuid: string | null;
+                credentialState: string;
+                publicClient: boolean;
+                enabled: boolean;
+                verified: boolean;
+                locked: boolean;
+                affectedApplications: {
+                    [x: string]: unknown;
+                    applicationId: number;
+                    code: string;
+                    name: string;
+                    referenceId: string;
+                    referenceVersion: number;
+                    targetVersion: number;
+                }[];
+            };
+            steps: {
+                [x: string]: unknown;
+                kind: "CREDENTIAL_ROTATE";
+                targetId: string;
+            }[];
+        };
+        credentialOperation: Record<string, unknown>;
+    }>;
+    jobs(p?: Pagination): Promise<{
+        [x: string]: unknown;
+        total: number;
+        page: number;
+        size: number;
+        items: ({
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "IDENTITY_PUBLICATION";
+            plan: {
+                [x: string]: unknown;
+                applicationId: number;
+                definitionVersion: number;
+                definitionDigest: string;
+                targets: Record<string, unknown>[];
+                instances: Record<string, Record<string, unknown>>;
+                steps: Record<string, unknown>[];
+            };
+        } | {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "CREDENTIAL_ROTATION";
+            plan: {
+                [x: string]: unknown;
+                operation: "CREDENTIAL_ROTATION";
+                schemaVersion: 1;
+                applicationId: number;
+                credentialContext: {
+                    [x: string]: unknown;
+                    schemaVersion: 1;
+                    applicationId: number;
+                    environmentId: string;
+                    referenceId: string;
+                    definitionId: string;
+                    instanceId: string;
+                    identityKey: string;
+                    issuerId: string | null;
+                    issuerUrl: string;
+                    issuerVersion: number;
+                    environmentVersion: number;
+                    gatewayId: string | null;
+                    gatewayVersion: number | null;
+                    gatewayBindingId: string | null;
+                    gatewayBindingVersion: number | null;
+                    referenceVersion: number;
+                    targetVersion: number;
+                    definitionVersion: number;
+                    publishedRevision: number | null;
+                    appliedRevision: number | null;
+                    instanceVersion: number;
+                    clientId: string;
+                    remoteUuid: string | null;
+                    credentialState: string;
+                    publicClient: boolean;
+                    enabled: boolean;
+                    verified: boolean;
+                    locked: boolean;
+                    affectedApplications: {
+                        [x: string]: unknown;
+                        applicationId: number;
+                        code: string;
+                        name: string;
+                        referenceId: string;
+                        referenceVersion: number;
+                        targetVersion: number;
+                    }[];
+                };
+                steps: {
+                    [x: string]: unknown;
+                    kind: "CREDENTIAL_ROTATE";
+                    targetId: string;
+                }[];
+            };
+            credentialOperation: Record<string, unknown>;
+        })[];
+    }>;
+    job(jobId: string): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "IDENTITY_PUBLICATION";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            definitionVersion: number;
+            definitionDigest: string;
+            targets: Record<string, unknown>[];
+            instances: Record<string, Record<string, unknown>>;
+            steps: Record<string, unknown>[];
+        };
+    } | {
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "CREDENTIAL_ROTATION";
+        plan: {
+            [x: string]: unknown;
+            operation: "CREDENTIAL_ROTATION";
+            schemaVersion: 1;
+            applicationId: number;
+            credentialContext: {
+                [x: string]: unknown;
+                schemaVersion: 1;
+                applicationId: number;
+                environmentId: string;
+                referenceId: string;
+                definitionId: string;
+                instanceId: string;
+                identityKey: string;
+                issuerId: string | null;
+                issuerUrl: string;
+                issuerVersion: number;
+                environmentVersion: number;
+                gatewayId: string | null;
+                gatewayVersion: number | null;
+                gatewayBindingId: string | null;
+                gatewayBindingVersion: number | null;
+                referenceVersion: number;
+                targetVersion: number;
+                definitionVersion: number;
+                publishedRevision: number | null;
+                appliedRevision: number | null;
+                instanceVersion: number;
+                clientId: string;
+                remoteUuid: string | null;
+                credentialState: string;
+                publicClient: boolean;
+                enabled: boolean;
+                verified: boolean;
+                locked: boolean;
+                affectedApplications: {
+                    [x: string]: unknown;
+                    applicationId: number;
+                    code: string;
+                    name: string;
+                    referenceId: string;
+                    referenceVersion: number;
+                    targetVersion: number;
+                }[];
+            };
+            steps: {
+                [x: string]: unknown;
+                kind: "CREDENTIAL_ROTATE";
+                targetId: string;
+            }[];
+        };
+        credentialOperation: Record<string, unknown>;
+    }>;
+    jobAction(jobId: string, action: "validate" | "cancel" | "prepare" | "review" | "apply" | "recheck" | "terminate" | "repreview", input: unknown): Promise<{
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "IDENTITY_PUBLICATION";
+        plan: {
+            [x: string]: unknown;
+            applicationId: number;
+            definitionVersion: number;
+            definitionDigest: string;
+            targets: Record<string, unknown>[];
+            instances: Record<string, Record<string, unknown>>;
+            steps: Record<string, unknown>[];
+        };
+    } | {
+        [x: string]: unknown;
+        id: string;
+        applicationId: number;
+        status: string;
+        version: number;
+        planDigest: string;
+        predecessorId: string | null;
+        createdAt: string;
+        updatedAt: string;
+        steps: {
+            [x: string]: unknown;
+            ordinal: number;
+            kind: string;
+            targetId: string;
+            status: string;
+            version: number;
+            stepDigest: string;
+            childEvidence?: Record<string, unknown> | null | undefined;
+        }[];
+        collaboration: {
+            [x: string]: unknown;
+            state: string;
+            allowedActions: string[];
+        };
+        operation: "CREDENTIAL_ROTATION";
+        plan: {
+            [x: string]: unknown;
+            operation: "CREDENTIAL_ROTATION";
+            schemaVersion: 1;
+            applicationId: number;
+            credentialContext: {
+                [x: string]: unknown;
+                schemaVersion: 1;
+                applicationId: number;
+                environmentId: string;
+                referenceId: string;
+                definitionId: string;
+                instanceId: string;
+                identityKey: string;
+                issuerId: string | null;
+                issuerUrl: string;
+                issuerVersion: number;
+                environmentVersion: number;
+                gatewayId: string | null;
+                gatewayVersion: number | null;
+                gatewayBindingId: string | null;
+                gatewayBindingVersion: number | null;
+                referenceVersion: number;
+                targetVersion: number;
+                definitionVersion: number;
+                publishedRevision: number | null;
+                appliedRevision: number | null;
+                instanceVersion: number;
+                clientId: string;
+                remoteUuid: string | null;
+                credentialState: string;
+                publicClient: boolean;
+                enabled: boolean;
+                verified: boolean;
+                locked: boolean;
+                affectedApplications: {
+                    [x: string]: unknown;
+                    applicationId: number;
+                    code: string;
+                    name: string;
+                    referenceId: string;
+                    referenceVersion: number;
+                    targetVersion: number;
+                }[];
+            };
+            steps: {
+                [x: string]: unknown;
+                kind: "CREDENTIAL_ROTATE";
+                targetId: string;
+            }[];
+        };
+        credentialOperation: Record<string, unknown>;
+    }>;
+    private credentialPath;
+    private credentialScope;
+    credentialTarget(scope: CredentialScope): Promise<{
+        [x: string]: unknown;
+        context: {
+            [x: string]: unknown;
+            schemaVersion: 1;
+            applicationId: number;
+            environmentId: string;
+            referenceId: string;
+            definitionId: string;
+            instanceId: string;
+            identityKey: string;
+            issuerId: string | null;
+            issuerUrl: string;
+            issuerVersion: number;
+            environmentVersion: number;
+            gatewayId: string | null;
+            gatewayVersion: number | null;
+            gatewayBindingId: string | null;
+            gatewayBindingVersion: number | null;
+            referenceVersion: number;
+            targetVersion: number;
+            definitionVersion: number;
+            publishedRevision: number | null;
+            appliedRevision: number | null;
+            instanceVersion: number;
+            clientId: string;
+            remoteUuid: string | null;
+            credentialState: string;
+            publicClient: boolean;
+            enabled: boolean;
+            verified: boolean;
+            locked: boolean;
+            affectedApplications: {
+                [x: string]: unknown;
+                applicationId: number;
+                code: string;
+                name: string;
+                referenceId: string;
+                referenceVersion: number;
+                targetVersion: number;
+            }[];
+        };
+        contextDigest: string;
+        available: boolean;
+        unavailableCode: string | null;
+        allowedActions: ("download" | "rotate")[];
+    }>;
+    credentialOperation(scope: CredentialScope, requestId: string): Promise<{
+        [x: string]: unknown;
+        requestId: string;
+        action: "DOWNLOAD" | "ROTATE";
+        status: "RECOVERED" | "RUNNING" | "SUCCEEDED" | "UNKNOWN";
+        context: {
+            [x: string]: unknown;
+            schemaVersion: 1;
+            applicationId: number;
+            environmentId: string;
+            referenceId: string;
+            definitionId: string;
+            instanceId: string;
+            identityKey: string;
+            issuerId: string | null;
+            issuerUrl: string;
+            issuerVersion: number;
+            environmentVersion: number;
+            gatewayId: string | null;
+            gatewayVersion: number | null;
+            gatewayBindingId: string | null;
+            gatewayBindingVersion: number | null;
+            referenceVersion: number;
+            targetVersion: number;
+            definitionVersion: number;
+            publishedRevision: number | null;
+            appliedRevision: number | null;
+            instanceVersion: number;
+            clientId: string;
+            remoteUuid: string | null;
+            credentialState: string;
+            publicClient: boolean;
+            enabled: boolean;
+            verified: boolean;
+            locked: boolean;
+            affectedApplications: {
+                [x: string]: unknown;
+                applicationId: number;
+                code: string;
+                name: string;
+                referenceId: string;
+                referenceVersion: number;
+                targetVersion: number;
+            }[];
+        };
+        recoveredBy: string | null;
+        recoveryBasis: string | null;
+        errorCode: string | null;
+        createdAt: string;
+        updatedAt: string;
+        publicationJob: {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "IDENTITY_PUBLICATION";
+            plan: {
+                [x: string]: unknown;
+                applicationId: number;
+                definitionVersion: number;
+                definitionDigest: string;
+                targets: Record<string, unknown>[];
+                instances: Record<string, Record<string, unknown>>;
+                steps: Record<string, unknown>[];
+            };
+        } | {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "CREDENTIAL_ROTATION";
+            plan: {
+                [x: string]: unknown;
+                operation: "CREDENTIAL_ROTATION";
+                schemaVersion: 1;
+                applicationId: number;
+                credentialContext: {
+                    [x: string]: unknown;
+                    schemaVersion: 1;
+                    applicationId: number;
+                    environmentId: string;
+                    referenceId: string;
+                    definitionId: string;
+                    instanceId: string;
+                    identityKey: string;
+                    issuerId: string | null;
+                    issuerUrl: string;
+                    issuerVersion: number;
+                    environmentVersion: number;
+                    gatewayId: string | null;
+                    gatewayVersion: number | null;
+                    gatewayBindingId: string | null;
+                    gatewayBindingVersion: number | null;
+                    referenceVersion: number;
+                    targetVersion: number;
+                    definitionVersion: number;
+                    publishedRevision: number | null;
+                    appliedRevision: number | null;
+                    instanceVersion: number;
+                    clientId: string;
+                    remoteUuid: string | null;
+                    credentialState: string;
+                    publicClient: boolean;
+                    enabled: boolean;
+                    verified: boolean;
+                    locked: boolean;
+                    affectedApplications: {
+                        [x: string]: unknown;
+                        applicationId: number;
+                        code: string;
+                        name: string;
+                        referenceId: string;
+                        referenceVersion: number;
+                        targetVersion: number;
+                    }[];
+                };
+                steps: {
+                    [x: string]: unknown;
+                    kind: "CREDENTIAL_ROTATE";
+                    targetId: string;
+                }[];
+            };
+            credentialOperation: Record<string, unknown>;
+        } | null;
+    }>;
+    credentialAction(scope: CredentialScope, requestId: string, action: "recheck" | "terminate", input: unknown): Promise<{
+        [x: string]: unknown;
+        requestId: string;
+        action: "DOWNLOAD" | "ROTATE";
+        status: "RECOVERED" | "RUNNING" | "SUCCEEDED" | "UNKNOWN";
+        context: {
+            [x: string]: unknown;
+            schemaVersion: 1;
+            applicationId: number;
+            environmentId: string;
+            referenceId: string;
+            definitionId: string;
+            instanceId: string;
+            identityKey: string;
+            issuerId: string | null;
+            issuerUrl: string;
+            issuerVersion: number;
+            environmentVersion: number;
+            gatewayId: string | null;
+            gatewayVersion: number | null;
+            gatewayBindingId: string | null;
+            gatewayBindingVersion: number | null;
+            referenceVersion: number;
+            targetVersion: number;
+            definitionVersion: number;
+            publishedRevision: number | null;
+            appliedRevision: number | null;
+            instanceVersion: number;
+            clientId: string;
+            remoteUuid: string | null;
+            credentialState: string;
+            publicClient: boolean;
+            enabled: boolean;
+            verified: boolean;
+            locked: boolean;
+            affectedApplications: {
+                [x: string]: unknown;
+                applicationId: number;
+                code: string;
+                name: string;
+                referenceId: string;
+                referenceVersion: number;
+                targetVersion: number;
+            }[];
+        };
+        recoveredBy: string | null;
+        recoveryBasis: string | null;
+        errorCode: string | null;
+        createdAt: string;
+        updatedAt: string;
+        publicationJob: {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "IDENTITY_PUBLICATION";
+            plan: {
+                [x: string]: unknown;
+                applicationId: number;
+                definitionVersion: number;
+                definitionDigest: string;
+                targets: Record<string, unknown>[];
+                instances: Record<string, Record<string, unknown>>;
+                steps: Record<string, unknown>[];
+            };
+        } | {
+            [x: string]: unknown;
+            id: string;
+            applicationId: number;
+            status: string;
+            version: number;
+            planDigest: string;
+            predecessorId: string | null;
+            createdAt: string;
+            updatedAt: string;
+            steps: {
+                [x: string]: unknown;
+                ordinal: number;
+                kind: string;
+                targetId: string;
+                status: string;
+                version: number;
+                stepDigest: string;
+                childEvidence?: Record<string, unknown> | null | undefined;
+            }[];
+            collaboration: {
+                [x: string]: unknown;
+                state: string;
+                allowedActions: string[];
+            };
+            operation: "CREDENTIAL_ROTATION";
+            plan: {
+                [x: string]: unknown;
+                operation: "CREDENTIAL_ROTATION";
+                schemaVersion: 1;
+                applicationId: number;
+                credentialContext: {
+                    [x: string]: unknown;
+                    schemaVersion: 1;
+                    applicationId: number;
+                    environmentId: string;
+                    referenceId: string;
+                    definitionId: string;
+                    instanceId: string;
+                    identityKey: string;
+                    issuerId: string | null;
+                    issuerUrl: string;
+                    issuerVersion: number;
+                    environmentVersion: number;
+                    gatewayId: string | null;
+                    gatewayVersion: number | null;
+                    gatewayBindingId: string | null;
+                    gatewayBindingVersion: number | null;
+                    referenceVersion: number;
+                    targetVersion: number;
+                    definitionVersion: number;
+                    publishedRevision: number | null;
+                    appliedRevision: number | null;
+                    instanceVersion: number;
+                    clientId: string;
+                    remoteUuid: string | null;
+                    credentialState: string;
+                    publicClient: boolean;
+                    enabled: boolean;
+                    verified: boolean;
+                    locked: boolean;
+                    affectedApplications: {
+                        [x: string]: unknown;
+                        applicationId: number;
+                        code: string;
+                        name: string;
+                        referenceId: string;
+                        referenceVersion: number;
+                        targetVersion: number;
+                    }[];
+                };
+                steps: {
+                    [x: string]: unknown;
+                    kind: "CREDENTIAL_ROTATE";
+                    targetId: string;
+                }[];
+            };
+            credentialOperation: Record<string, unknown>;
+        } | null;
+    }>;
+    deliverCredential(scope: CredentialScope, action: "download" | "rotate", input: unknown, outputPath: string): Promise<{
+        requestId: string;
+        outputPath: string;
+    }>;
+}