@smartytalent/openai-tools 0.6.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/tools.json +158 -0
- package/package.json +1 -1
package/dist/tools.json
CHANGED
|
@@ -181,6 +181,65 @@
|
|
|
181
181
|
"type": "object",
|
|
182
182
|
"description": "Tenant-level outbound-sync defaults (ATS integrations): {syncStage, syncNotes, syncRatings, syncTags, syncReports, syncConversationReports, syncMessages} - overridden per job by job.settings.operation. NOTE: the generated model whitelists keys, so this property MUST be declared for the SDK to carry it."
|
|
183
183
|
},
|
|
184
|
+
"sso": {
|
|
185
|
+
"type": "object",
|
|
186
|
+
"description": "Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).",
|
|
187
|
+
"properties": {
|
|
188
|
+
"enabled": {
|
|
189
|
+
"type": "boolean",
|
|
190
|
+
"description": "Whether enterprise SSO is provisioned for this tenant"
|
|
191
|
+
},
|
|
192
|
+
"provider": {
|
|
193
|
+
"type": "string",
|
|
194
|
+
"enum": [
|
|
195
|
+
"microsoft"
|
|
196
|
+
],
|
|
197
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
198
|
+
},
|
|
199
|
+
"entraTenantId": {
|
|
200
|
+
"type": "string",
|
|
201
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match."
|
|
202
|
+
},
|
|
203
|
+
"idpName": {
|
|
204
|
+
"type": "string",
|
|
205
|
+
"description": "Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning."
|
|
206
|
+
},
|
|
207
|
+
"domains": {
|
|
208
|
+
"type": "array",
|
|
209
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.",
|
|
210
|
+
"items": {
|
|
211
|
+
"type": "object",
|
|
212
|
+
"properties": {
|
|
213
|
+
"name": {
|
|
214
|
+
"type": "string"
|
|
215
|
+
},
|
|
216
|
+
"verifiedAt": {
|
|
217
|
+
"type": "string"
|
|
218
|
+
},
|
|
219
|
+
"method": {
|
|
220
|
+
"type": "string",
|
|
221
|
+
"enum": [
|
|
222
|
+
"dns-txt",
|
|
223
|
+
"entra-verified"
|
|
224
|
+
]
|
|
225
|
+
}
|
|
226
|
+
}
|
|
227
|
+
}
|
|
228
|
+
},
|
|
229
|
+
"defaultRole": {
|
|
230
|
+
"type": "string",
|
|
231
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP."
|
|
232
|
+
},
|
|
233
|
+
"required": {
|
|
234
|
+
"type": "boolean",
|
|
235
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
236
|
+
},
|
|
237
|
+
"autoApprove": {
|
|
238
|
+
"type": "boolean",
|
|
239
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
240
|
+
}
|
|
241
|
+
}
|
|
242
|
+
},
|
|
184
243
|
"language": {
|
|
185
244
|
"type": "string"
|
|
186
245
|
},
|
|
@@ -575,6 +634,65 @@
|
|
|
575
634
|
"type": "object",
|
|
576
635
|
"description": "Tenant-level outbound-sync defaults (ATS integrations): {syncStage, syncNotes, syncRatings, syncTags, syncReports, syncConversationReports, syncMessages} - overridden per job by job.settings.operation. NOTE: the generated model whitelists keys, so this property MUST be declared for the SDK to carry it."
|
|
577
636
|
},
|
|
637
|
+
"sso": {
|
|
638
|
+
"type": "object",
|
|
639
|
+
"description": "Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).",
|
|
640
|
+
"properties": {
|
|
641
|
+
"enabled": {
|
|
642
|
+
"type": "boolean",
|
|
643
|
+
"description": "Whether enterprise SSO is provisioned for this tenant"
|
|
644
|
+
},
|
|
645
|
+
"provider": {
|
|
646
|
+
"type": "string",
|
|
647
|
+
"enum": [
|
|
648
|
+
"microsoft"
|
|
649
|
+
],
|
|
650
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
651
|
+
},
|
|
652
|
+
"entraTenantId": {
|
|
653
|
+
"type": "string",
|
|
654
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match."
|
|
655
|
+
},
|
|
656
|
+
"idpName": {
|
|
657
|
+
"type": "string",
|
|
658
|
+
"description": "Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning."
|
|
659
|
+
},
|
|
660
|
+
"domains": {
|
|
661
|
+
"type": "array",
|
|
662
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.",
|
|
663
|
+
"items": {
|
|
664
|
+
"type": "object",
|
|
665
|
+
"properties": {
|
|
666
|
+
"name": {
|
|
667
|
+
"type": "string"
|
|
668
|
+
},
|
|
669
|
+
"verifiedAt": {
|
|
670
|
+
"type": "string"
|
|
671
|
+
},
|
|
672
|
+
"method": {
|
|
673
|
+
"type": "string",
|
|
674
|
+
"enum": [
|
|
675
|
+
"dns-txt",
|
|
676
|
+
"entra-verified"
|
|
677
|
+
]
|
|
678
|
+
}
|
|
679
|
+
}
|
|
680
|
+
}
|
|
681
|
+
},
|
|
682
|
+
"defaultRole": {
|
|
683
|
+
"type": "string",
|
|
684
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP."
|
|
685
|
+
},
|
|
686
|
+
"required": {
|
|
687
|
+
"type": "boolean",
|
|
688
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
689
|
+
},
|
|
690
|
+
"autoApprove": {
|
|
691
|
+
"type": "boolean",
|
|
692
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
693
|
+
}
|
|
694
|
+
}
|
|
695
|
+
},
|
|
578
696
|
"language": {
|
|
579
697
|
"type": "string"
|
|
580
698
|
},
|
|
@@ -1285,6 +1403,26 @@
|
|
|
1285
1403
|
"type": "object",
|
|
1286
1404
|
"additionalProperties": true
|
|
1287
1405
|
},
|
|
1406
|
+
"identities": {
|
|
1407
|
+
"type": "array",
|
|
1408
|
+
"description": "Federated logins linked to this account. System-owned: written only by the auth triggers and the linking doors, never by a PATCH. Linking must happen BEFORE the first federated sign-in, otherwise Cognito mints a separate profile that has to be deleted.",
|
|
1409
|
+
"items": {
|
|
1410
|
+
"type": "object",
|
|
1411
|
+
"properties": {
|
|
1412
|
+
"provider": {
|
|
1413
|
+
"type": "string",
|
|
1414
|
+
"description": "Cognito identity provider name (Google, LinkedIn, or ms-{shortCode})"
|
|
1415
|
+
},
|
|
1416
|
+
"sub": {
|
|
1417
|
+
"type": "string",
|
|
1418
|
+
"description": "The provider's subject identifier. Pairwise per client_id at Entra, so it only matches tokens issued to the same app registration as the IdP."
|
|
1419
|
+
},
|
|
1420
|
+
"linkedAt": {
|
|
1421
|
+
"type": "string"
|
|
1422
|
+
}
|
|
1423
|
+
}
|
|
1424
|
+
}
|
|
1425
|
+
},
|
|
1288
1426
|
"avatarUrl": {
|
|
1289
1427
|
"type": "string",
|
|
1290
1428
|
"description": "CDN URL of the profile picture. Either a per-user upload (users/... key, minted via the upload door) or a shared gallery image (avatars/...). Must point at an existing CDN object - updateUser head-checks it."
|
|
@@ -1597,6 +1735,26 @@
|
|
|
1597
1735
|
"type": "object",
|
|
1598
1736
|
"additionalProperties": true
|
|
1599
1737
|
},
|
|
1738
|
+
"identities": {
|
|
1739
|
+
"type": "array",
|
|
1740
|
+
"description": "Federated logins linked to this account. System-owned: written only by the auth triggers and the linking doors, never by a PATCH. Linking must happen BEFORE the first federated sign-in, otherwise Cognito mints a separate profile that has to be deleted.",
|
|
1741
|
+
"items": {
|
|
1742
|
+
"type": "object",
|
|
1743
|
+
"properties": {
|
|
1744
|
+
"provider": {
|
|
1745
|
+
"type": "string",
|
|
1746
|
+
"description": "Cognito identity provider name (Google, LinkedIn, or ms-{shortCode})"
|
|
1747
|
+
},
|
|
1748
|
+
"sub": {
|
|
1749
|
+
"type": "string",
|
|
1750
|
+
"description": "The provider's subject identifier. Pairwise per client_id at Entra, so it only matches tokens issued to the same app registration as the IdP."
|
|
1751
|
+
},
|
|
1752
|
+
"linkedAt": {
|
|
1753
|
+
"type": "string"
|
|
1754
|
+
}
|
|
1755
|
+
}
|
|
1756
|
+
}
|
|
1757
|
+
},
|
|
1600
1758
|
"avatarUrl": {
|
|
1601
1759
|
"type": "string",
|
|
1602
1760
|
"description": "CDN URL of the profile picture. Either a per-user upload (users/... key, minted via the upload door) or a shared gallery image (avatars/...). Must point at an existing CDN object - updateUser head-checks it."
|