@rippling/rippling-sdk 0.2.0-alpha.62 → 0.2.0-alpha.63

package/lib/manifest/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/lib/manifest/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EACL,UAAU,GAaX,uBAAmB;AAEpB,OAAO,EAAE,GAAG,EAA6C,kBAAc;AAEvE,OAAO,EAAE,QAAQ,EAAsB,uBAAmB;AAE1D,OAAO,EACL,YAAY,GAQb,4BAAwB;AAEzB,OAAO,EACL,wBAAwB,GAGzB,0CAAsC;AAEvC,OAAO,EACL,sBAAsB,GA0DvB,wCAAoC;AAErC,OAAO,EACL,KAAK;AAML,0EAA0E;AAC1E,qEAAqE;AACrE,SAAS,EAET,aAAa,EAEb,UAAU,EAEV,QAAQ,EAER,UAAU,EAEV,WAAW,EAEX,aAAa,EAEb,eAAe,EAEf,SAAS,EAET,aAAa,EAEb,SAAS,EAET,WAAW,EAEX,UAAU,EAEV,YAAY,EAEZ,SAAS,EAET,WAAW,EAEX,gBAAgB,EAEhB,YAAY,EAEZ,YAAY,GAEb,oBAAgB;AAEjB,OAAO,EACL,uBAAuB,GAIxB,wCAAoC;AAErC,OAAO,EACL,WAAW,GAKZ,wBAAoB;AAErB,OAAO,EACL,eAAe,GAQhB,+BAA2B;AAE5B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,IAAI,QAAQ,GAG7B,gCAA4B;AAE7B,OAAO,EACL,IAAI,GAKL,mBAAe;AAEhB,OAAO,EAAE,QAAQ,EAAsB,wBAAoB;AAE3D,OAAO,EACL,UAAU,GAIX,yBAAqB;AAEtB,OAAO,EACL,QAAQ,GAuBT,uBAAmB"}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/lib/manifest/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,OAAO,EACL,UAAU,GAaX,uBAAmB;AAEpB,OAAO,EAAE,GAAG,EAA6C,kBAAc;AAEvE,OAAO,EAAE,QAAQ,EAAsB,uBAAmB;AAE1D,OAAO,EACL,YAAY,GAQb,4BAAwB;AAEzB,OAAO,EACL,wBAAwB,GAGzB,0CAAsC;AAEvC,OAAO,EACL,sBAAsB,GAwDvB,wCAAoC;AAErC,OAAO,EACL,KAAK;AAML,0EAA0E;AAC1E,qEAAqE;AACrE,SAAS,EAET,aAAa,EAEb,UAAU,EAEV,QAAQ,EAER,UAAU,EAEV,WAAW,EAEX,aAAa,EAEb,eAAe,EAEf,SAAS,EAET,aAAa,EAEb,SAAS,EAET,WAAW,EAEX,UAAU,EAEV,YAAY,EAEZ,SAAS,EAET,WAAW,EAEX,gBAAgB,EAEhB,YAAY,EAEZ,YAAY,GAEb,oBAAgB;AAEjB,OAAO,EACL,uBAAuB,GAIxB,wCAAoC;AAErC,OAAO,EACL,WAAW,GAKZ,wBAAoB;AAErB,OAAO,EACL,eAAe,GAQhB,+BAA2B;AAE5B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,IAAI,QAAQ,GAG7B,gCAA4B;AAE7B,OAAO,EACL,IAAI,GAKL,mBAAe;AAEhB,OAAO,EAAE,QAAQ,EAAsB,wBAAoB;AAE3D,OAAO,EACL,UAAU,GAIX,yBAAqB;AAEtB,OAAO,EACL,QAAQ,GAuBT,uBAAmB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rippling/rippling-sdk",
-  "version": "0.2.0-alpha.62",
+  "version": "0.2.0-alpha.63",
   "description": "The official TypeScript library for the Rippling SDK API",
   "author": "Rippling SDK <no-reply@rippling.com>",
   "types": "./index.d.ts",

package/resources/app-users.d.mts

@@ -0,0 +1,186 @@
+import { APIResource } from "../core/resource.mjs";
+import * as BusinessPartnersAPI from "./business-partners.mjs";
+import * as WorkersAPI from "./workers.mjs";
+import { APIPromise } from "../core/api-promise.mjs";
+import { PageCursorURL, PagePromise } from "../core/pagination.mjs";
+import { RequestOptions } from "../internal/request-options.mjs";
+/**
+ * Mappings between Rippling workers and their user accounts in third-party apps
+ */
+export declare class AppUsers extends APIResource {
+    /**
+     * A list of app users.
+     *
+     * - Requires: `API Tier 1`
+     * - Filterable fields: `worker_id`, `spoke_user_identifier`, `app_handle`,
+     *   `created_at`, `updated_at`
+     * - Expandable fields: `worker`
+     * - Sortable fields: `id`, `created_at`, `updated_at`
+     */
+    list(query?: AppUserListParams | null | undefined, options?: RequestOptions): PagePromise<AppUserListResponsesPageCursorURL, AppUserListResponse>;
+    /**
+     * Retrieve a specific app user
+     */
+    retrieve(id: string, query?: AppUserRetrieveParams | null | undefined, options?: RequestOptions): APIPromise<AppUserRetrieveResponse>;
+}
+export type AppUserListResponsesPageCursorURL = PageCursorURL<AppUserListResponse>;
+/**
+ * Maps a Rippling worker (if any) to their user account in a third-party
+ *     app (e.g. Slack, Jira, GitHub). Sourced from SpokeUser records.
+ *
+ *     Includes orphan accounts — third-party app accounts with no matching
+ *     Rippling worker (`worker_id=None`, `match_state=NOT_MATCHED`). These are
+ *     the primary signal for IT-admin triage. Uses `BaseResourceDTO` rather
+ *     than `BaseEmployeeResourceDTO` so the platform's role-based auto-filter
+ *     does not silently drop orphans for non-admin tokens. Company scoping is
+ *     enforced explicitly in `AppUsersAPIViewSet.get_queryset`; the `app-users.read`
+ *     scope is the access gate.
+ *
+ *     Resource name aligns with how the product surfaces these in the UI
+ *     ("Slack account", "GitHub account") and matches the equivalent concept
+ *     in Okta's IAM API (AppUser).
+ *
+ *     Designed for point lookups: list endpoint requires at least one filter
+ *     on `worker_id` or `spoke_user_identifier` to prevent bulk enumeration of the
+ *     org's identity graph across connected apps.
+ *
+ *     `spoke_user_identifier` reads `SpokeUser.spokeId` — the user identifier
+ *     stored for the third-party account. Depending on the integration, this may
+ *     be an email, username, account handle, or app-specific user id.
+ */
+export interface AppUserListResponse {
+    /**
+     * Identifier field
+     */
+    id: string;
+    /**
+     * Record creation date
+     */
+    created_at: string;
+    /**
+     * Record update date
+     */
+    updated_at: string;
+    /**
+     * Human-readable display name for the third-party app (e.g. 'Slack', 'GitHub').
+     * Sourced from the customer-configured SpokeOwner.app_display_name; falls back to
+     * a title-cased app handle when the customer hasn't set one.
+     */
+    app_display_name?: string;
+    /**
+     * Machine-readable identifier for the third-party app (e.g. 'slack', 'jira',
+     * 'asana'). Stable across the App Shop catalog.
+     */
+    app_handle?: string;
+    /**
+     * The user's email address in the third-party app, if known. Null when the app
+     * does not expose an email or Rippling did not capture one.
+     */
+    external_email?: string;
+    /**
+     * The user's display name in the third-party app, if known. Null when the app does
+     * not surface a separate username.
+     */
+    external_username?: string;
+    /**
+     * Whether this third-party account has been matched to a Rippling worker.
+     */
+    match_state?: 'MATCHED' | 'NOT_MATCHED' | 'IGNORED';
+    /**
+     * Provisioning lifecycle state of this account in the third-party app.
+     */
+    push_state?: 'INIT' | 'EMPLOYEE_CONFIRMATION_PENDING' | 'EMPLOYEE_CONFIRMATION_ACCEPTED' | 'EMPLOYEE_CONFIRMATION_REJECTED' | 'INVITE_PENDING' | 'INVITE_CONFIRMED' | 'INVITE_FAILED' | 'CREATE_PENDING' | 'CREATE_CONFIRMED' | 'CREATE_FAILED' | 'DELETE_PENDING' | 'DELETE_CONFIRMED' | 'DELETE_FAILED' | 'SUSPEND_PENDING' | 'SUSPEND_CONFIRMED' | 'SUSPEND_FAILED';
+    /**
+     * Identifier for the user's account in the third-party app workspace. Depending on
+     * the integration, this may be an email, username, account handle, or app-specific
+     * user id.
+     */
+    spoke_user_identifier?: string;
+    /**
+     * The Rippling worker associated with this external app account. Expanding this
+     * field requires both `app-users.read` and `workers.read` scopes.
+     *
+     * Expandable field
+     */
+    worker?: WorkersAPI.Worker;
+    /**
+     * ID of the Rippling worker associated with this external app account.
+     */
+    worker_id?: string;
+}
+/**
+ * Meta information for the response.
+ */
+export interface AppUserRetrieveResponse extends BusinessPartnersAPI.Meta {
+    /**
+     * Identifier field
+     */
+    id: string;
+    /**
+     * Record creation date
+     */
+    created_at: string;
+    /**
+     * Record update date
+     */
+    updated_at: string;
+    /**
+     * Human-readable display name for the third-party app (e.g. 'Slack', 'GitHub').
+     * Sourced from the customer-configured SpokeOwner.app_display_name; falls back to
+     * a title-cased app handle when the customer hasn't set one.
+     */
+    app_display_name?: string;
+    /**
+     * Machine-readable identifier for the third-party app (e.g. 'slack', 'jira',
+     * 'asana'). Stable across the App Shop catalog.
+     */
+    app_handle?: string;
+    /**
+     * The user's email address in the third-party app, if known. Null when the app
+     * does not expose an email or Rippling did not capture one.
+     */
+    external_email?: string;
+    /**
+     * The user's display name in the third-party app, if known. Null when the app does
+     * not surface a separate username.
+     */
+    external_username?: string;
+    /**
+     * Whether this third-party account has been matched to a Rippling worker.
+     */
+    match_state?: 'MATCHED' | 'NOT_MATCHED' | 'IGNORED';
+    /**
+     * Provisioning lifecycle state of this account in the third-party app.
+     */
+    push_state?: 'INIT' | 'EMPLOYEE_CONFIRMATION_PENDING' | 'EMPLOYEE_CONFIRMATION_ACCEPTED' | 'EMPLOYEE_CONFIRMATION_REJECTED' | 'INVITE_PENDING' | 'INVITE_CONFIRMED' | 'INVITE_FAILED' | 'CREATE_PENDING' | 'CREATE_CONFIRMED' | 'CREATE_FAILED' | 'DELETE_PENDING' | 'DELETE_CONFIRMED' | 'DELETE_FAILED' | 'SUSPEND_PENDING' | 'SUSPEND_CONFIRMED' | 'SUSPEND_FAILED';
+    /**
+     * Identifier for the user's account in the third-party app workspace. Depending on
+     * the integration, this may be an email, username, account handle, or app-specific
+     * user id.
+     */
+    spoke_user_identifier?: string;
+    /**
+     * The Rippling worker associated with this external app account. Expanding this
+     * field requires both `app-users.read` and `workers.read` scopes.
+     *
+     * Expandable field
+     */
+    worker?: WorkersAPI.Worker;
+    /**
+     * ID of the Rippling worker associated with this external app account.
+     */
+    worker_id?: string;
+}
+export interface AppUserListParams {
+    cursor?: string;
+    expand?: string;
+    filter?: string;
+    order_by?: string;
+}
+export interface AppUserRetrieveParams {
+    expand?: string;
+}
+export declare namespace AppUsers {
+    export { type AppUserListResponse as AppUserListResponse, type AppUserRetrieveResponse as AppUserRetrieveResponse, type AppUserListResponsesPageCursorURL as AppUserListResponsesPageCursorURL, type AppUserListParams as AppUserListParams, type AppUserRetrieveParams as AppUserRetrieveParams, };
+}
+//# sourceMappingURL=app-users.d.mts.map

package/resources/app-users.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.d.mts","sourceRoot":"","sources":["../src/resources/app-users.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAC/C,OAAO,KAAK,mBAAmB,gCAA4B;AAC3D,OAAO,KAAK,UAAU,sBAAkB;AACxC,OAAO,EAAE,UAAU,EAAE,gCAA4B;AACjD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,+BAA2B;AAChE,OAAO,EAAE,cAAc,EAAE,wCAAoC;AAG7D;;GAEG;AACH,qBAAa,QAAS,SAAQ,WAAW;IACvC;;;;;;;;OAQG;IACH,IAAI,CACF,KAAK,GAAE,iBAAiB,GAAG,IAAI,GAAG,SAAc,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,iCAAiC,EAAE,mBAAmB,CAAC;IAItE;;OAEG;IACH,QAAQ,CACN,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,qBAAqB,GAAG,IAAI,GAAG,SAAc,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,uBAAuB,CAAC;CAGvC;AAED,MAAM,MAAM,iCAAiC,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EACP,MAAM,GACN,+BAA+B,GAC/B,gCAAgC,GAChC,gCAAgC,GAChC,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,CAAC;IAErB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAE3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB,CAAC,IAAI;IACvE;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EACP,MAAM,GACN,+BAA+B,GAC/B,gCAAgC,GAChC,gCAAgC,GAChC,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,CAAC;IAErB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAE3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC,OAAO,EACL,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,iCAAiC,IAAI,iCAAiC,EAC3E,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}

package/resources/app-users.d.ts

@@ -0,0 +1,186 @@
+import { APIResource } from "../core/resource.js";
+import * as BusinessPartnersAPI from "./business-partners.js";
+import * as WorkersAPI from "./workers.js";
+import { APIPromise } from "../core/api-promise.js";
+import { PageCursorURL, PagePromise } from "../core/pagination.js";
+import { RequestOptions } from "../internal/request-options.js";
+/**
+ * Mappings between Rippling workers and their user accounts in third-party apps
+ */
+export declare class AppUsers extends APIResource {
+    /**
+     * A list of app users.
+     *
+     * - Requires: `API Tier 1`
+     * - Filterable fields: `worker_id`, `spoke_user_identifier`, `app_handle`,
+     *   `created_at`, `updated_at`
+     * - Expandable fields: `worker`
+     * - Sortable fields: `id`, `created_at`, `updated_at`
+     */
+    list(query?: AppUserListParams | null | undefined, options?: RequestOptions): PagePromise<AppUserListResponsesPageCursorURL, AppUserListResponse>;
+    /**
+     * Retrieve a specific app user
+     */
+    retrieve(id: string, query?: AppUserRetrieveParams | null | undefined, options?: RequestOptions): APIPromise<AppUserRetrieveResponse>;
+}
+export type AppUserListResponsesPageCursorURL = PageCursorURL<AppUserListResponse>;
+/**
+ * Maps a Rippling worker (if any) to their user account in a third-party
+ *     app (e.g. Slack, Jira, GitHub). Sourced from SpokeUser records.
+ *
+ *     Includes orphan accounts — third-party app accounts with no matching
+ *     Rippling worker (`worker_id=None`, `match_state=NOT_MATCHED`). These are
+ *     the primary signal for IT-admin triage. Uses `BaseResourceDTO` rather
+ *     than `BaseEmployeeResourceDTO` so the platform's role-based auto-filter
+ *     does not silently drop orphans for non-admin tokens. Company scoping is
+ *     enforced explicitly in `AppUsersAPIViewSet.get_queryset`; the `app-users.read`
+ *     scope is the access gate.
+ *
+ *     Resource name aligns with how the product surfaces these in the UI
+ *     ("Slack account", "GitHub account") and matches the equivalent concept
+ *     in Okta's IAM API (AppUser).
+ *
+ *     Designed for point lookups: list endpoint requires at least one filter
+ *     on `worker_id` or `spoke_user_identifier` to prevent bulk enumeration of the
+ *     org's identity graph across connected apps.
+ *
+ *     `spoke_user_identifier` reads `SpokeUser.spokeId` — the user identifier
+ *     stored for the third-party account. Depending on the integration, this may
+ *     be an email, username, account handle, or app-specific user id.
+ */
+export interface AppUserListResponse {
+    /**
+     * Identifier field
+     */
+    id: string;
+    /**
+     * Record creation date
+     */
+    created_at: string;
+    /**
+     * Record update date
+     */
+    updated_at: string;
+    /**
+     * Human-readable display name for the third-party app (e.g. 'Slack', 'GitHub').
+     * Sourced from the customer-configured SpokeOwner.app_display_name; falls back to
+     * a title-cased app handle when the customer hasn't set one.
+     */
+    app_display_name?: string;
+    /**
+     * Machine-readable identifier for the third-party app (e.g. 'slack', 'jira',
+     * 'asana'). Stable across the App Shop catalog.
+     */
+    app_handle?: string;
+    /**
+     * The user's email address in the third-party app, if known. Null when the app
+     * does not expose an email or Rippling did not capture one.
+     */
+    external_email?: string;
+    /**
+     * The user's display name in the third-party app, if known. Null when the app does
+     * not surface a separate username.
+     */
+    external_username?: string;
+    /**
+     * Whether this third-party account has been matched to a Rippling worker.
+     */
+    match_state?: 'MATCHED' | 'NOT_MATCHED' | 'IGNORED';
+    /**
+     * Provisioning lifecycle state of this account in the third-party app.
+     */
+    push_state?: 'INIT' | 'EMPLOYEE_CONFIRMATION_PENDING' | 'EMPLOYEE_CONFIRMATION_ACCEPTED' | 'EMPLOYEE_CONFIRMATION_REJECTED' | 'INVITE_PENDING' | 'INVITE_CONFIRMED' | 'INVITE_FAILED' | 'CREATE_PENDING' | 'CREATE_CONFIRMED' | 'CREATE_FAILED' | 'DELETE_PENDING' | 'DELETE_CONFIRMED' | 'DELETE_FAILED' | 'SUSPEND_PENDING' | 'SUSPEND_CONFIRMED' | 'SUSPEND_FAILED';
+    /**
+     * Identifier for the user's account in the third-party app workspace. Depending on
+     * the integration, this may be an email, username, account handle, or app-specific
+     * user id.
+     */
+    spoke_user_identifier?: string;
+    /**
+     * The Rippling worker associated with this external app account. Expanding this
+     * field requires both `app-users.read` and `workers.read` scopes.
+     *
+     * Expandable field
+     */
+    worker?: WorkersAPI.Worker;
+    /**
+     * ID of the Rippling worker associated with this external app account.
+     */
+    worker_id?: string;
+}
+/**
+ * Meta information for the response.
+ */
+export interface AppUserRetrieveResponse extends BusinessPartnersAPI.Meta {
+    /**
+     * Identifier field
+     */
+    id: string;
+    /**
+     * Record creation date
+     */
+    created_at: string;
+    /**
+     * Record update date
+     */
+    updated_at: string;
+    /**
+     * Human-readable display name for the third-party app (e.g. 'Slack', 'GitHub').
+     * Sourced from the customer-configured SpokeOwner.app_display_name; falls back to
+     * a title-cased app handle when the customer hasn't set one.
+     */
+    app_display_name?: string;
+    /**
+     * Machine-readable identifier for the third-party app (e.g. 'slack', 'jira',
+     * 'asana'). Stable across the App Shop catalog.
+     */
+    app_handle?: string;
+    /**
+     * The user's email address in the third-party app, if known. Null when the app
+     * does not expose an email or Rippling did not capture one.
+     */
+    external_email?: string;
+    /**
+     * The user's display name in the third-party app, if known. Null when the app does
+     * not surface a separate username.
+     */
+    external_username?: string;
+    /**
+     * Whether this third-party account has been matched to a Rippling worker.
+     */
+    match_state?: 'MATCHED' | 'NOT_MATCHED' | 'IGNORED';
+    /**
+     * Provisioning lifecycle state of this account in the third-party app.
+     */
+    push_state?: 'INIT' | 'EMPLOYEE_CONFIRMATION_PENDING' | 'EMPLOYEE_CONFIRMATION_ACCEPTED' | 'EMPLOYEE_CONFIRMATION_REJECTED' | 'INVITE_PENDING' | 'INVITE_CONFIRMED' | 'INVITE_FAILED' | 'CREATE_PENDING' | 'CREATE_CONFIRMED' | 'CREATE_FAILED' | 'DELETE_PENDING' | 'DELETE_CONFIRMED' | 'DELETE_FAILED' | 'SUSPEND_PENDING' | 'SUSPEND_CONFIRMED' | 'SUSPEND_FAILED';
+    /**
+     * Identifier for the user's account in the third-party app workspace. Depending on
+     * the integration, this may be an email, username, account handle, or app-specific
+     * user id.
+     */
+    spoke_user_identifier?: string;
+    /**
+     * The Rippling worker associated with this external app account. Expanding this
+     * field requires both `app-users.read` and `workers.read` scopes.
+     *
+     * Expandable field
+     */
+    worker?: WorkersAPI.Worker;
+    /**
+     * ID of the Rippling worker associated with this external app account.
+     */
+    worker_id?: string;
+}
+export interface AppUserListParams {
+    cursor?: string;
+    expand?: string;
+    filter?: string;
+    order_by?: string;
+}
+export interface AppUserRetrieveParams {
+    expand?: string;
+}
+export declare namespace AppUsers {
+    export { type AppUserListResponse as AppUserListResponse, type AppUserRetrieveResponse as AppUserRetrieveResponse, type AppUserListResponsesPageCursorURL as AppUserListResponsesPageCursorURL, type AppUserListParams as AppUserListParams, type AppUserRetrieveParams as AppUserRetrieveParams, };
+}
+//# sourceMappingURL=app-users.d.ts.map

package/resources/app-users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.d.ts","sourceRoot":"","sources":["../src/resources/app-users.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,4BAAyB;AAC/C,OAAO,KAAK,mBAAmB,+BAA4B;AAC3D,OAAO,KAAK,UAAU,qBAAkB;AACxC,OAAO,EAAE,UAAU,EAAE,+BAA4B;AACjD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,8BAA2B;AAChE,OAAO,EAAE,cAAc,EAAE,uCAAoC;AAG7D;;GAEG;AACH,qBAAa,QAAS,SAAQ,WAAW;IACvC;;;;;;;;OAQG;IACH,IAAI,CACF,KAAK,GAAE,iBAAiB,GAAG,IAAI,GAAG,SAAc,EAChD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CAAC,iCAAiC,EAAE,mBAAmB,CAAC;IAItE;;OAEG;IACH,QAAQ,CACN,EAAE,EAAE,MAAM,EACV,KAAK,GAAE,qBAAqB,GAAG,IAAI,GAAG,SAAc,EACpD,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,uBAAuB,CAAC;CAGvC;AAED,MAAM,MAAM,iCAAiC,GAAG,aAAa,CAAC,mBAAmB,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EACP,MAAM,GACN,+BAA+B,GAC/B,gCAAgC,GAChC,gCAAgC,GAChC,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,CAAC;IAErB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAE3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,mBAAmB,CAAC,IAAI;IACvE;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IAEX;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,WAAW,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,EACP,MAAM,GACN,+BAA+B,GAC/B,gCAAgC,GAChC,gCAAgC,GAChC,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,CAAC;IAErB;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;IAE3B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,CAAC,OAAO,WAAW,QAAQ,CAAC;IAChC,OAAO,EACL,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,iCAAiC,IAAI,iCAAiC,EAC3E,KAAK,iBAAiB,IAAI,iBAAiB,EAC3C,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH"}

package/resources/app-users.js

@@ -0,0 +1,32 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppUsers = void 0;
+const resource_1 = require("../core/resource.js");
+const pagination_1 = require("../core/pagination.js");
+const path_1 = require("../internal/utils/path.js");
+/**
+ * Mappings between Rippling workers and their user accounts in third-party apps
+ */
+class AppUsers extends resource_1.APIResource {
+    /**
+     * A list of app users.
+     *
+     * - Requires: `API Tier 1`
+     * - Filterable fields: `worker_id`, `spoke_user_identifier`, `app_handle`,
+     *   `created_at`, `updated_at`
+     * - Expandable fields: `worker`
+     * - Sortable fields: `id`, `created_at`, `updated_at`
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/app-users/', (pagination_1.PageCursorURL), { query, ...options });
+    }
+    /**
+     * Retrieve a specific app user
+     */
+    retrieve(id, query = {}, options) {
+        return this._client.get((0, path_1.path) `/app-users/${id}/`, { query, ...options });
+    }
+}
+exports.AppUsers = AppUsers;
+//# sourceMappingURL=app-users.js.map

package/resources/app-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.js","sourceRoot":"","sources":["../src/resources/app-users.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;AAEtF,kDAA+C;AAI/C,sDAAgE;AAEhE,oDAA8C;AAE9C;;GAEG;AACH,MAAa,QAAS,SAAQ,sBAAW;IACvC;;;;;;;;OAQG;IACH,IAAI,CACF,QAA8C,EAAE,EAChD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,CAAA,0BAAkC,CAAA,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,EAAU,EACV,QAAkD,EAAE,EACpD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,WAAI,EAAA,cAAc,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;CACF;AA3BD,4BA2BC"}

package/resources/app-users.mjs

@@ -0,0 +1,28 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from "../core/resource.mjs";
+import { PageCursorURL } from "../core/pagination.mjs";
+import { path } from "../internal/utils/path.mjs";
+/**
+ * Mappings between Rippling workers and their user accounts in third-party apps
+ */
+export class AppUsers extends APIResource {
+    /**
+     * A list of app users.
+     *
+     * - Requires: `API Tier 1`
+     * - Filterable fields: `worker_id`, `spoke_user_identifier`, `app_handle`,
+     *   `created_at`, `updated_at`
+     * - Expandable fields: `worker`
+     * - Sortable fields: `id`, `created_at`, `updated_at`
+     */
+    list(query = {}, options) {
+        return this._client.getAPIList('/app-users/', (PageCursorURL), { query, ...options });
+    }
+    /**
+     * Retrieve a specific app user
+     */
+    retrieve(id, query = {}, options) {
+        return this._client.get(path `/app-users/${id}/`, { query, ...options });
+    }
+}
+//# sourceMappingURL=app-users.mjs.map

package/resources/app-users.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.mjs","sourceRoot":"","sources":["../src/resources/app-users.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,6BAAyB;AAI/C,OAAO,EAAE,aAAa,EAAe,+BAA2B;AAEhE,OAAO,EAAE,IAAI,EAAE,mCAA+B;AAE9C;;GAEG;AACH,MAAM,OAAO,QAAS,SAAQ,WAAW;IACvC;;;;;;;;OAQG;IACH,IAAI,CACF,QAA8C,EAAE,EAChD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,EAAE,CAAA,aAAkC,CAAA,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,EAAU,EACV,QAAkD,EAAE,EACpD,OAAwB;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,cAAc,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;CACF"}