@secureport/sdk 0.5.0

package/dist/resources/runs.js

@@ -0,0 +1,281 @@
+import { parseSnapshot } from '@secureport/core';
+import { paginate } from '../pagination.js';
+const DEFAULT_POLL_INTERVAL_MS = 5_000;
+const DEFAULT_WAIT_TIMEOUT_MS = 900_000;
+/**
+ * Runs — one execution against a target, and the scan lifecycle around it
+ * (`00-DOMAIN.md` §3): started, evidence attached, finished, then
+ * reconciled into a summary and a snapshot.
+ */
+export class RunsResource {
+    request;
+    constructor(request) {
+        this.request = request;
+    }
+    list(query) {
+        return this.request({ method: 'GET', path: '/runs', query: { ...query } });
+    }
+    /** Every run matching `filters`, across every page, as an async iterator. */
+    listAll(filters) {
+        return paginate((page) => this.list({ ...filters, page }));
+    }
+    /**
+     * Starts a run against a target. It is created `running` and stays that way
+     * until {@link RunsResource.finish}: upload scanner output in between with
+     * {@link RunsResource.import}.
+     *
+     * @throws {SecureportError} `terms_required` for every kind if the
+     * organisation has not accepted the current terms — a human accepts them at
+     * `POST /orgs/{orgId}/terms`; an API key cannot. `verification_required` for
+     * `kind: 'scan'` if the target has no currently-passing verification,
+     * re-checked fresh as part of this same request rather than trusted from a
+     * stored flag. Neither is retried by the transport: both are settled
+     * refusals, not transient ones.
+     */
+    create(input) {
+        return this.request({ method: 'POST', path: '/runs', body: input });
+    }
+    /**
+     * One run by id. What it found is {@link RunsResource.summary}, once it has finished —
+     * this method never carries a summary or findings itself.
+     */
+    get(id) {
+        return this.request({ method: 'GET', path: `/runs/${encodeURIComponent(id)}` });
+    }
+    /**
+     * Ends a run and, for `status: 'finished'`, reconciles it: the findings
+     * uploaded against it become new, still-open, resolved or regressed
+     * issues, and the run gets a summary. **`status: 'failed'` reconciles
+     * nothing** — see {@link FinishRunInput.status}.
+     *
+     * @remarks Uploads and manual runs only: a `kind: 'scan'` run is refused here — its engine reports its own end, with evidence this route cannot supply. Stop a scan early with {@link RunsResource.cancel} instead.
+     * @throws {SecureportError} `conflict` if any upload is still being
+     * parsed — poll {@link RunsResource.listArtifacts} and finish once every
+     * one is `done` or `failed` — or if the run had already ended;
+     * `validation` for a `kind: 'scan'` run.
+     */
+    finish(id, input) {
+        return this.request({
+            method: 'POST',
+            path: `/runs/${encodeURIComponent(id)}/finish`,
+            body: input,
+        });
+    }
+    /**
+     * Stops a running scan: the run ends as `'cancelled'` immediately, and the
+     * scan job behind it is cancelled best-effort.
+     *
+     * @remarks If the job cancel fails, the engine simply runs out its time budget and its late reports are discarded, so `'cancelled'` is final either way. Nothing is reconciled — a cancelled run resolves no issues, and findings already ingested stay recorded as partial evidence. That intent is what distinguishes it from `'failed'`, which means the scan itself went wrong.
+     * @throws {SecureportError} `conflict` if the run had already ended;
+     * `validation` for a run that is not a `kind: 'scan'` — an upload is ended
+     * by its own caller via {@link RunsResource.finish}.
+     */
+    cancel(id) {
+        return this.request({ method: 'POST', path: `/runs/${encodeURIComponent(id)}/cancel` });
+    }
+    /**
+     * Where a scan is: its phase, how long it has run, its time budget, and
+     * when it will have ended by — see {@link ScanProgress} for why no percentage.
+     *
+     * @remarks Combine with {@link RunsResource.waitUntilFinished} for a poll that also knows when to give up: `expectedBy` is the honest bound.
+     * @throws {SecureportError} `validation` for a run that is not a
+     * `kind: 'scan'` — an upload's progress is whatever its caller is doing.
+     */
+    progress(id) {
+        return this.request({ method: 'GET', path: `/runs/${encodeURIComponent(id)}/progress` });
+    }
+    /**
+     * Archives a raw scanner artifact against a run. Nothing is parsed on the
+     * client side — the whole file is handed to the API as `input.body`, with
+     * `input.contentType` sent verbatim, and the API decides how (and when) to
+     * parse it.
+     *
+     * **The response shape depends on size, not just success or failure.** A
+     * file under 5 MiB is parsed inline and answers `201` with
+     * `processingStatus: 'done'` and `findingCount`/`skippedLines` filled in. At
+     * or over 5 MiB the parse is queued and the API answers `202` with
+     * `processingStatus: 'queued'` instead — poll {@link RunsResource.listArtifacts}
+     * for the outcome. Both are success: check `processingStatus` on the result rather
+     * than assuming the synchronous shape. **25 MiB is a hard cap**, refused
+     * with `payload_too_large` rather than accepted and truncated.
+     *
+     * **Idempotent by content, not by request.** Re-uploading the exact same
+     * bytes against the same run answers `200` with the original row, verbatim
+     * — no re-parse — so a retried upload after a flaky network is never
+     * double-counted.
+     *
+     * @throws {SecureportError} `conflict` if the run has already ended;
+     * `payload_too_large` over 25 MiB; `unsupported_media_type` for a
+     * `contentType` the API does not accept, or a compressed body.
+     */
+    import(id, input) {
+        return this.request({
+            method: 'POST',
+            path: `/runs/${encodeURIComponent(id)}/import`,
+            query: { engine: input.engine, filename: input.filename },
+            rawBody: { data: input.body, contentType: input.contentType },
+        });
+    }
+    /**
+     * The first half of the signed-URL upload path for a file too large for
+     * {@link RunsResource.import} — Cloud Run caps that route's request body at
+     * 32 MiB whatever the API wants, so a genuinely large scan (a big Nessus or
+     * Burp export) goes here instead: mint a URL, `PUT` the file straight to
+     * the bucket yourself, then {@link RunsResource.completeUpload}.
+     *
+     * **Returns one of two shapes, told apart structurally.** If the same
+     * `sha256` is already archived on this run, this resolves with the
+     * existing {@link RunArtifact} directly — nothing minted, nothing to
+     * upload. Otherwise it resolves with a {@link RunUploadUrl}. Check for
+     * `'uploadUrl' in result` (or any field {@link RunUploadUrl} has and
+     * {@link RunArtifact} does not) to tell them apart.
+     *
+     * **You must `PUT` the bytes yourself, with a plain `fetch` — not through
+     * this SDK's own transport.** `uploadUrl` is a signed Cloud Storage URL:
+     * this client's `request`/`requestRaw` always attach your API key as a
+     * bearer token and always resolve paths against the API's own base URL,
+     * neither of which belongs on a request to Cloud Storage. Send every
+     * header in `result.requiredHeaders` verbatim — the bucket's signature
+     * check refuses the upload otherwise, silently from this SDK's point of
+     * view (it never sees that request).
+     *
+     * @throws {SecureportError} `conflict` if the run has already ended;
+     * `unsupported_media_type` for a `contentType` the API does not accept.
+     */
+    createUploadUrl(id, input) {
+        return this.request({
+            method: 'POST',
+            path: `/runs/${encodeURIComponent(id)}/import-url`,
+            body: input,
+        });
+    }
+    /**
+     * The second half of the signed-URL upload path — call once your own
+     * `PUT` to {@link RunUploadUrl.uploadUrl} has succeeded. Archives the
+     * object as a run artifact and queues it for parsing; unlike
+     * {@link RunsResource.import}, the result is never parsed synchronously
+     * here — anything that needed a signed URL is already well past the size
+     * the API parses inline. Poll {@link RunsResource.listArtifacts} (or use
+     * {@link RunsResource.waitForArtifact}) the same way a `202` from
+     * {@link RunsResource.import} is polled.
+     *
+     * **Idempotent by content, same as {@link RunsResource.import}.** Calling
+     * this twice for the same object answers `200` with the original row the
+     * second time.
+     *
+     * @throws {SecureportError} `conflict` if the run has already ended, or if
+     * nothing was actually uploaded to the signed URL (it may have expired).
+     */
+    completeUpload(id, input) {
+        return this.request({
+            method: 'POST',
+            path: `/runs/${encodeURIComponent(id)}/import-url/complete`,
+            body: input,
+        });
+    }
+    /**
+     * The uploads archived against a run, with where each parse stands — what
+     * a client polls after a `202` from {@link RunsResource.import}. Not
+     * paginated: a run holds the handful of files one scan produced.
+     */
+    listArtifacts(id) {
+        return this.request({ method: 'GET', path: `/runs/${encodeURIComponent(id)}/artifacts` });
+    }
+    /**
+     * What the run did, in the terms a report opens with.
+     *
+     * @throws {SecureportError} `conflict` if the run has not been reconciled
+     * — still running, or ended `failed` — rather than a zeroed summary that
+     * would read as "nothing found".
+     */
+    summary(id) {
+        return this.request({ method: 'GET', path: `/runs/${encodeURIComponent(id)}/summary` });
+    }
+    /**
+     * The snapshot a report is rendered from: the run summary, the target,
+     * every issue with what this run changed about it, and the suppressed
+     * appendix.
+     *
+     * **Returns `@secureport/core`'s own `Snapshot` type, with real `Date`s —
+     * the one method in this resource that does.** Every other method here
+     * returns ISO 8601 strings, mirroring the wire exactly; this one instead
+     * runs the response text through core's own `parseSnapshot`, since that
+     * is the exact function a `Snapshot` written to disk is read back
+     * with, and the API's wire shape is asserted `Exact<>` against core's type
+     * server-side. That is what makes `@secureport/core` this package's first
+     * real dependency, rather than a structural mirror.
+     *
+     * @throws {SecureportError} `conflict` if the run has not been reconciled
+     * — still running, or ended `failed`.
+     */
+    async snapshot(id) {
+        const body = await this.request({
+            method: 'GET',
+            path: `/runs/${encodeURIComponent(id)}/snapshot`,
+        });
+        return parseSnapshot(JSON.stringify(body));
+    }
+    /**
+     * Polls {@link RunsResource.get} until the run leaves `'running'`,
+     * resolving with whatever it finished as. **Does not itself call
+     * {@link RunsResource.summary} or {@link RunsResource.snapshot}** — those
+     * still 409 until reconciliation completes, which is why this only
+     * watches `status`.
+     *
+     * Shaped for a long-running hosted scan from the start: today an upload
+     * run is finished by the caller directly, so this helper's payoff is
+     * mostly forward-looking until scans actually execute.
+     *
+     * @throws {Error} if `status` is still `'running'` once `timeoutMs` elapses.
+     */
+    async waitUntilFinished(id, options) {
+        const pollIntervalMs = options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+        const timeoutMs = options?.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            const run = await this.get(id);
+            if (run.status !== 'running')
+                return run;
+            if (Date.now() + pollIntervalMs > deadline) {
+                throw new Error(`run ${id} did not finish within ${String(timeoutMs)}ms (still running).`);
+            }
+            await sleep(pollIntervalMs);
+        }
+    }
+    /**
+     * Polls {@link RunsResource.listArtifacts} until one artifact's
+     * `processingStatus` leaves `'queued'`/`'processing'`, resolving with it —
+     * the artifact-level completion {@link RunsResource.finish} itself waits
+     * on (its own TSDoc: "poll listArtifacts and finish once every one is done
+     * or failed"). A large upload answers {@link RunsResource.import} with
+     * `202 queued` before the parse has even started; this is what a caller
+     * that started one polls instead of hand-rolling the same loop.
+     *
+     * @throws {Error} if the artifact never appears on the run (id mismatch),
+     * or if it is still `queued`/`processing` once `timeoutMs` elapses.
+     */
+    async waitForArtifact(runId, artifactId, options) {
+        const pollIntervalMs = options?.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
+        const timeoutMs = options?.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
+        const deadline = Date.now() + timeoutMs;
+        for (;;) {
+            const { data } = await this.listArtifacts(runId);
+            const artifact = data.find((a) => a.id === artifactId);
+            if (artifact === undefined) {
+                throw new Error(`artifact ${artifactId} not found on run ${runId}.`);
+            }
+            if (artifact.processingStatus !== 'queued' && artifact.processingStatus !== 'processing') {
+                return artifact;
+            }
+            if (Date.now() + pollIntervalMs > deadline) {
+                throw new Error(`artifact ${artifactId} did not finish processing within ${String(timeoutMs)}ms ` +
+                    `(still ${artifact.processingStatus}).`);
+            }
+            await sleep(pollIntervalMs);
+        }
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=runs.js.map

package/dist/resources/runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.js","sourceRoot":"","sources":["../../src/resources/runs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAyU5C,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAExC;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACM;IAA7B,YAA6B,OAAkB;QAAlB,YAAO,GAAP,OAAO,CAAW;IAAG,CAAC;IAEnD,IAAI,CAAC,KAA8B;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,OAAoB;QAC1B,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAU,EAAE,KAAqB;QACtC,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,SAAS;YAC9C,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,MAAM,CAAC,EAAU,EAAE,KAAmB;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,SAAS;YAC9C,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YACzD,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,eAAe,CAAC,EAAU,EAAE,KAAsB;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,aAAa;YAClD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,cAAc,CAAC,EAAU,EAAE,KAAwB;QACjD,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,sBAAsB;YAC3D,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAU;YACvC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,SAAS,kBAAkB,CAAC,EAAE,CAAC,WAAW;SACjD,CAAC,CAAC;QACH,OAAO,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,iBAAiB,CAAC,EAAU,EAAE,OAAkC;QACpE,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,wBAAwB,CAAC;QAC3E,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,uBAAuB,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAEzC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,0BAA0B,MAAM,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,UAAkB,EAClB,OAAgC;QAEhC,MAAM,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,wBAAwB,CAAC;QAC3E,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,uBAAuB,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,SAAS,CAAC;YACR,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,YAAY,UAAU,qBAAqB,KAAK,GAAG,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,KAAK,YAAY,EAAE,CAAC;gBACzF,OAAO,QAAQ,CAAC;YAClB,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,QAAQ,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,YAAY,UAAU,qCAAqC,MAAM,CAAC,SAAS,CAAC,KAAK;oBAC/E,UAAU,QAAQ,CAAC,gBAAgB,IAAI,CAC1C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/resources/suppression-rules.d.ts

@@ -0,0 +1,43 @@
+import type { Requester } from '../client.js';
+import type { Page, PageQuery } from '../pagination.js';
+/**
+ * A pre-emptive suppression rule. `createdAt` is an ISO 8601 string, as the
+ * API sends it — parse it yourself if you need a `Date`.
+ */
+export interface SuppressionRule {
+    readonly id: string;
+    readonly orgId: string;
+    /** `null` means the rule covers every target in the organisation. */
+    readonly targetId: string | null;
+    /** Matched against an issue's vulnerability key; `*` is the only wildcard. */
+    readonly vulnKeyGlob: string;
+    readonly reason: string;
+    /** The authenticated actor that created it — never supplied by the caller. */
+    readonly createdBy: string;
+    readonly createdAt: string;
+}
+export type SuppressionRulePage = Page<SuppressionRule>;
+export interface NewSuppressionRule {
+    /** Omit to cover the whole organisation. */
+    readonly targetId?: string;
+    /** Anchored at both ends, so `xss-*` does not match `not-xss-reflected`. */
+    readonly vulnKeyGlob: string;
+    readonly reason: string;
+}
+/**
+ * Pre-emptive "never open an issue for this class" rules — the blunt
+ * instrument; per-issue ignore is the default. No update: delete and recreate.
+ */
+export declare class SuppressionRulesResource {
+    private readonly request;
+    constructor(request: Requester);
+    list(query?: PageQuery): Promise<SuppressionRulePage>;
+    /** Every rule, across every page, as an async iterator. */
+    listAll(): AsyncIterable<SuppressionRule>;
+    /** @throws {SecureportError} `not_found` if `targetId` names no target of yours. */
+    create(input: NewSuppressionRule): Promise<SuppressionRule>;
+    get(id: string): Promise<SuppressionRule>;
+    /** Issues the rule already caused to open as ignored stay ignored. */
+    delete(id: string): Promise<void>;
+}
+//# sourceMappingURL=suppression-rules.d.ts.map

package/dist/resources/suppression-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppression-rules.d.ts","sourceRoot":"","sources":["../../src/resources/suppression-rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGxD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjC,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;AAExD,MAAM,WAAW,kBAAkB;IACjC,4CAA4C;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,qBAAa,wBAAwB;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,SAAS;IAE/C,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIrD,2DAA2D;IAC3D,OAAO,IAAI,aAAa,CAAC,eAAe,CAAC;IAIzC,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3D,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzC,sEAAsE;IACtE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMlC"}

package/dist/resources/suppression-rules.js

@@ -0,0 +1,33 @@
+import { paginate } from '../pagination.js';
+/**
+ * Pre-emptive "never open an issue for this class" rules — the blunt
+ * instrument; per-issue ignore is the default. No update: delete and recreate.
+ */
+export class SuppressionRulesResource {
+    request;
+    constructor(request) {
+        this.request = request;
+    }
+    list(query) {
+        return this.request({ method: 'GET', path: '/suppression-rules', query: { ...query } });
+    }
+    /** Every rule, across every page, as an async iterator. */
+    listAll() {
+        return paginate((page) => this.list({ page }));
+    }
+    /** @throws {SecureportError} `not_found` if `targetId` names no target of yours. */
+    create(input) {
+        return this.request({ method: 'POST', path: '/suppression-rules', body: input });
+    }
+    get(id) {
+        return this.request({ method: 'GET', path: `/suppression-rules/${encodeURIComponent(id)}` });
+    }
+    /** Issues the rule already caused to open as ignored stay ignored. */
+    delete(id) {
+        return this.request({
+            method: 'DELETE',
+            path: `/suppression-rules/${encodeURIComponent(id)}`,
+        });
+    }
+}
+//# sourceMappingURL=suppression-rules.js.map

package/dist/resources/suppression-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suppression-rules.js","sourceRoot":"","sources":["../../src/resources/suppression-rules.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAiC5C;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,OAAkB;QAAlB,YAAO,GAAP,OAAO,CAAW;IAAG,CAAC;IAEnD,IAAI,CAAC,KAAiB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,2DAA2D;IAC3D,OAAO;QACL,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,KAAyB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,EAAE,CAAC,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/resources/targets.d.ts

@@ -0,0 +1,126 @@
+import type { Requester } from '../client.js';
+import type { Page, PageQuery } from '../pagination.js';
+/** A target: one thing runs are executed against. */
+export interface Target {
+    readonly id: string;
+    readonly orgId: string;
+    /** As it appears on a report cover. */
+    readonly name: string;
+    /** A URL, host or repository. */
+    readonly url: string;
+}
+export type TargetPage = Page<Target>;
+export interface NewTarget {
+    readonly name: string;
+    readonly url: string;
+}
+/**
+ * At least one of `name`/`url` is required — the API answers `{}` with a
+ * `422 validation`, not a no-op.
+ */
+export interface TargetPatch {
+    readonly name?: string;
+    readonly url?: string;
+}
+export type VerificationMethod = 'dns_txt' | 'http_file';
+export type VerificationState = 'unverified' | 'verified';
+/**
+ * The target's current verification state. Never carries the token — see
+ * {@link IssuedTargetVerification}, the one response that does.
+ *
+ * Date fields are ISO 8601 strings, as the API sends them — this type is
+ * SDK-local (no `@secureport/core` equivalent exists), so there is no
+ * shared revival logic to lean on; parse them yourself if you need `Date`.
+ */
+export interface TargetVerification {
+    readonly method: VerificationMethod | null;
+    readonly state: VerificationState;
+    readonly issuedAt: string | null;
+    /** Set only while a rotated token's grace period is still active. */
+    readonly previousExpiresAt: string | null;
+}
+export interface NewTargetVerification {
+    readonly method: VerificationMethod;
+}
+/**
+ * The response to issuing (or rotating) a verification token.
+ *
+ * **The token appears here and nowhere else** — {@link TargetVerification}
+ * never carries it, and there is no recovery endpoint. Losing it means
+ * issuing a new one, which may reset `state` to `unverified` (see
+ * {@link TargetsResource.issueVerification}).
+ *
+ * `recordName`/`recordValue` are present for `method: 'dns_txt'`;
+ * `filePath`/`fileContents` for `method: 'http_file'` — a discriminated
+ * pair the wire schema does not enforce, so narrow on `method` yourself.
+ */
+export interface IssuedTargetVerification extends Omit<TargetVerification, 'method'> {
+    readonly method: VerificationMethod;
+    readonly token: string;
+    readonly summary: string;
+    readonly recordName?: string;
+    readonly recordValue?: string;
+    readonly filePath?: string;
+    readonly fileContents?: string;
+}
+/** The result of one verification check — evidence, not a status flag. */
+export interface TargetVerificationCheckResult {
+    /** This check's own evidence row id — a fresh one every call, whether it passed or failed. */
+    readonly id: string;
+    readonly verified: boolean;
+    readonly state: VerificationState;
+    readonly method: VerificationMethod;
+    readonly checkedAt: string;
+    readonly expected: string;
+    readonly observed: string | null;
+    readonly message: string;
+}
+/**
+ * Targets, and the per-target verification flow a hosted scan (`kind:
+ * 'scan'`) requires before it can start — see `POST /runs`'s
+ * `verification_required` gate.
+ */
+export declare class TargetsResource {
+    private readonly request;
+    constructor(request: Requester);
+    list(query?: PageQuery): Promise<TargetPage>;
+    /** Every target, across every page, as an async iterator. */
+    listAll(): AsyncIterable<Target>;
+    create(input: NewTarget): Promise<Target>;
+    get(id: string): Promise<Target>;
+    /**
+     * **Changing `url` silently un-verifies the target** — the stored
+     * verification named the old host, and the API drops `state` to
+     * `unverified` as part of this same call. A caller relying on the target
+     * staying verified across a URL change needs to re-verify afterwards.
+     */
+    update(id: string, patch: TargetPatch): Promise<Target>;
+    /** @throws {SecureportError} `conflict` if the target has run or issue history. */
+    delete(id: string): Promise<void>;
+    getVerification(id: string): Promise<TargetVerification>;
+    /**
+     * Issues a fresh verification token, or rotates the current one — decided
+     * server-side, not by this method: calling with the **same `method`** as
+     * an already-verified target **rotates** (the target stays `verified`,
+     * and the old token keeps working for a 24-hour grace period). Calling
+     * with any other method, or while unverified, **re-issues** and resets
+     * `state` to `unverified` until the new token is checked.
+     */
+    issueVerification(id: string, input: NewTargetVerification): Promise<IssuedTargetVerification>;
+    /**
+     * Runs the verification check now, fresh — never trusts a stored flag.
+     * **Promote-only**: a match sets `state: 'verified'`; a mismatch or
+     * unreachable record is recorded as evidence but never demotes a target
+     * that is already verified. Writes a new evidence row every call, whether
+     * it passes or fails — not a no-op check.
+     *
+     * @throws {SecureportError} `conflict` if no token has been issued yet.
+     */
+    verify(id: string): Promise<TargetVerificationCheckResult>;
+    /**
+     * Revokes the current token outright — idempotent; revoking an
+     * already-unverified target is a clean no-op, not an error.
+     */
+    revokeVerification(id: string): Promise<void>;
+}
+//# sourceMappingURL=targets.d.ts.map

package/dist/resources/targets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.d.ts","sourceRoot":"","sources":["../../src/resources/targets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGxD,qDAAqD;AACrD,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,WAAW,CAAC;AACzD,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,UAAU,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAEjC,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,wBAAyB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,0EAA0E;AAC1E,MAAM,WAAW,6BAA6B;IAC5C,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,SAAS;IAE/C,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAI5C,6DAA6D;IAC7D,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC;IAIhC,MAAM,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAQvD,mFAAmF;IACnF,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxD;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAQ9F;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAI1D;;;OAGG;IACH,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAM9C"}

package/dist/resources/targets.js

@@ -0,0 +1,83 @@
+import { paginate } from '../pagination.js';
+/**
+ * Targets, and the per-target verification flow a hosted scan (`kind:
+ * 'scan'`) requires before it can start — see `POST /runs`'s
+ * `verification_required` gate.
+ */
+export class TargetsResource {
+    request;
+    constructor(request) {
+        this.request = request;
+    }
+    list(query) {
+        return this.request({ method: 'GET', path: '/targets', query: { ...query } });
+    }
+    /** Every target, across every page, as an async iterator. */
+    listAll() {
+        return paginate((page) => this.list({ page }));
+    }
+    create(input) {
+        return this.request({ method: 'POST', path: '/targets', body: input });
+    }
+    get(id) {
+        return this.request({ method: 'GET', path: `/targets/${encodeURIComponent(id)}` });
+    }
+    /**
+     * **Changing `url` silently un-verifies the target** — the stored
+     * verification named the old host, and the API drops `state` to
+     * `unverified` as part of this same call. A caller relying on the target
+     * staying verified across a URL change needs to re-verify afterwards.
+     */
+    update(id, patch) {
+        return this.request({
+            method: 'PATCH',
+            path: `/targets/${encodeURIComponent(id)}`,
+            body: patch,
+        });
+    }
+    /** @throws {SecureportError} `conflict` if the target has run or issue history. */
+    delete(id) {
+        return this.request({ method: 'DELETE', path: `/targets/${encodeURIComponent(id)}` });
+    }
+    getVerification(id) {
+        return this.request({ method: 'GET', path: `/targets/${encodeURIComponent(id)}/verification` });
+    }
+    /**
+     * Issues a fresh verification token, or rotates the current one — decided
+     * server-side, not by this method: calling with the **same `method`** as
+     * an already-verified target **rotates** (the target stays `verified`,
+     * and the old token keeps working for a 24-hour grace period). Calling
+     * with any other method, or while unverified, **re-issues** and resets
+     * `state` to `unverified` until the new token is checked.
+     */
+    issueVerification(id, input) {
+        return this.request({
+            method: 'POST',
+            path: `/targets/${encodeURIComponent(id)}/verification`,
+            body: input,
+        });
+    }
+    /**
+     * Runs the verification check now, fresh — never trusts a stored flag.
+     * **Promote-only**: a match sets `state: 'verified'`; a mismatch or
+     * unreachable record is recorded as evidence but never demotes a target
+     * that is already verified. Writes a new evidence row every call, whether
+     * it passes or fails — not a no-op check.
+     *
+     * @throws {SecureportError} `conflict` if no token has been issued yet.
+     */
+    verify(id) {
+        return this.request({ method: 'POST', path: `/targets/${encodeURIComponent(id)}/verify` });
+    }
+    /**
+     * Revokes the current token outright — idempotent; revoking an
+     * already-unverified target is a clean no-op, not an error.
+     */
+    revokeVerification(id) {
+        return this.request({
+            method: 'DELETE',
+            path: `/targets/${encodeURIComponent(id)}/verification`,
+        });
+    }
+}
+//# sourceMappingURL=targets.js.map

package/dist/resources/targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.js","sourceRoot":"","sources":["../../src/resources/targets.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAyF5C;;;;GAIG;AACH,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,OAAkB;QAAlB,YAAO,GAAP,OAAO,CAAW;IAAG,CAAC;IAEnD,IAAI,CAAC,KAAiB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,6DAA6D;IAC7D,OAAO;QACL,OAAO,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,KAAgB;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,EAAU,EAAE,KAAkB;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE;YAC1C,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,eAAe,CAAC,EAAU;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC;IAClG,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAU,EAAE,KAA4B;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,eAAe;YACvD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED;;;OAGG;IACH,kBAAkB,CAAC,EAAU;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC;YAClB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,eAAe;SACxD,CAAC,CAAC;IACL,CAAC;CACF"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@secureport/sdk",
+  "version": "0.5.0",
+  "description": "Typed client for the Secureport hosted API.",
+  "keywords": [
+    "security",
+    "pentest",
+    "penetration-testing",
+    "vulnerability",
+    "vulnerability-management",
+    "appsec",
+    "devsecops",
+    "security-reporting",
+    "sdk",
+    "api-client"
+  ],
+  "homepage": "https://secureport.io/",
+  "bugs": {
+    "email": "hello@secureport.io"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@secureport/core": "^2.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.20.3",
+    "typescript": "^5.7.2"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agbjordan/secureport.git",
+    "directory": "packages/sdk"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "rm -rf dist && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit"
+  }
+}