@smartytalent/openai-tools 0.6.0 → 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/tools.json +277 -0
- package/package.json +1 -1
package/dist/tools.json
CHANGED
|
@@ -181,6 +181,66 @@
|
|
|
181
181
|
"type": "object",
|
|
182
182
|
"description": "Tenant-level outbound-sync defaults (ATS integrations): {syncStage, syncNotes, syncRatings, syncTags, syncReports, syncConversationReports, syncMessages} - overridden per job by job.settings.operation. NOTE: the generated model whitelists keys, so this property MUST be declared for the SDK to carry it."
|
|
183
183
|
},
|
|
184
|
+
"sso": {
|
|
185
|
+
"type": "object",
|
|
186
|
+
"description": "Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).",
|
|
187
|
+
"properties": {
|
|
188
|
+
"enabled": {
|
|
189
|
+
"type": "boolean",
|
|
190
|
+
"description": "Whether enterprise SSO is provisioned for this tenant"
|
|
191
|
+
},
|
|
192
|
+
"provider": {
|
|
193
|
+
"type": "string",
|
|
194
|
+
"enum": [
|
|
195
|
+
"microsoft"
|
|
196
|
+
],
|
|
197
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
198
|
+
},
|
|
199
|
+
"entraTenantId": {
|
|
200
|
+
"type": "string",
|
|
201
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match."
|
|
202
|
+
},
|
|
203
|
+
"idpName": {
|
|
204
|
+
"type": "string",
|
|
205
|
+
"description": "Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning."
|
|
206
|
+
},
|
|
207
|
+
"domains": {
|
|
208
|
+
"type": "array",
|
|
209
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.",
|
|
210
|
+
"items": {
|
|
211
|
+
"type": "object",
|
|
212
|
+
"properties": {
|
|
213
|
+
"name": {
|
|
214
|
+
"type": "string"
|
|
215
|
+
},
|
|
216
|
+
"verifiedAt": {
|
|
217
|
+
"type": "string"
|
|
218
|
+
},
|
|
219
|
+
"method": {
|
|
220
|
+
"type": "string",
|
|
221
|
+
"enum": [
|
|
222
|
+
"ops-confirmed",
|
|
223
|
+
"dns-txt",
|
|
224
|
+
"entra-verified"
|
|
225
|
+
]
|
|
226
|
+
}
|
|
227
|
+
}
|
|
228
|
+
}
|
|
229
|
+
},
|
|
230
|
+
"defaultRole": {
|
|
231
|
+
"type": "string",
|
|
232
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP."
|
|
233
|
+
},
|
|
234
|
+
"required": {
|
|
235
|
+
"type": "boolean",
|
|
236
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
237
|
+
},
|
|
238
|
+
"autoApprove": {
|
|
239
|
+
"type": "boolean",
|
|
240
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
241
|
+
}
|
|
242
|
+
}
|
|
243
|
+
},
|
|
184
244
|
"language": {
|
|
185
245
|
"type": "string"
|
|
186
246
|
},
|
|
@@ -575,6 +635,66 @@
|
|
|
575
635
|
"type": "object",
|
|
576
636
|
"description": "Tenant-level outbound-sync defaults (ATS integrations): {syncStage, syncNotes, syncRatings, syncTags, syncReports, syncConversationReports, syncMessages} - overridden per job by job.settings.operation. NOTE: the generated model whitelists keys, so this property MUST be declared for the SDK to carry it."
|
|
577
637
|
},
|
|
638
|
+
"sso": {
|
|
639
|
+
"type": "object",
|
|
640
|
+
"description": "Enterprise SSO configuration. READ-ONLY here: the generic tenant PATCH strips this key, the only writers are the /v1/tenants/{tenantId}/sso doors. Sending it in a PATCH is ignored (not an error).",
|
|
641
|
+
"properties": {
|
|
642
|
+
"enabled": {
|
|
643
|
+
"type": "boolean",
|
|
644
|
+
"description": "Whether enterprise SSO is provisioned for this tenant"
|
|
645
|
+
},
|
|
646
|
+
"provider": {
|
|
647
|
+
"type": "string",
|
|
648
|
+
"enum": [
|
|
649
|
+
"microsoft"
|
|
650
|
+
],
|
|
651
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
652
|
+
},
|
|
653
|
+
"entraTenantId": {
|
|
654
|
+
"type": "string",
|
|
655
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer, and Entra mints iss per tenant, so a multi-tenant issuer can never match."
|
|
656
|
+
},
|
|
657
|
+
"idpName": {
|
|
658
|
+
"type": "string",
|
|
659
|
+
"description": "Name of the Cognito identity provider, ms-{shortCode}. Carries the tenant, which is how the auth triggers resolve it without scanning."
|
|
660
|
+
},
|
|
661
|
+
"domains": {
|
|
662
|
+
"type": "array",
|
|
663
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership.",
|
|
664
|
+
"items": {
|
|
665
|
+
"type": "object",
|
|
666
|
+
"properties": {
|
|
667
|
+
"name": {
|
|
668
|
+
"type": "string"
|
|
669
|
+
},
|
|
670
|
+
"verifiedAt": {
|
|
671
|
+
"type": "string"
|
|
672
|
+
},
|
|
673
|
+
"method": {
|
|
674
|
+
"type": "string",
|
|
675
|
+
"enum": [
|
|
676
|
+
"ops-confirmed",
|
|
677
|
+
"dns-txt",
|
|
678
|
+
"entra-verified"
|
|
679
|
+
]
|
|
680
|
+
}
|
|
681
|
+
}
|
|
682
|
+
}
|
|
683
|
+
},
|
|
684
|
+
"defaultRole": {
|
|
685
|
+
"type": "string",
|
|
686
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP."
|
|
687
|
+
},
|
|
688
|
+
"required": {
|
|
689
|
+
"type": "boolean",
|
|
690
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
691
|
+
},
|
|
692
|
+
"autoApprove": {
|
|
693
|
+
"type": "boolean",
|
|
694
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
695
|
+
}
|
|
696
|
+
}
|
|
697
|
+
},
|
|
578
698
|
"language": {
|
|
579
699
|
"type": "string"
|
|
580
700
|
},
|
|
@@ -1073,6 +1193,123 @@
|
|
|
1073
1193
|
}
|
|
1074
1194
|
}
|
|
1075
1195
|
},
|
|
1196
|
+
{
|
|
1197
|
+
"type": "function",
|
|
1198
|
+
"function": {
|
|
1199
|
+
"name": "show_tenant_sso",
|
|
1200
|
+
"description": "Show Tenant Enterprise SSO",
|
|
1201
|
+
"parameters": {
|
|
1202
|
+
"type": "object",
|
|
1203
|
+
"properties": {}
|
|
1204
|
+
}
|
|
1205
|
+
}
|
|
1206
|
+
},
|
|
1207
|
+
{
|
|
1208
|
+
"type": "function",
|
|
1209
|
+
"function": {
|
|
1210
|
+
"name": "configure_tenant_sso",
|
|
1211
|
+
"description": "Configure Tenant Enterprise SSO",
|
|
1212
|
+
"parameters": {
|
|
1213
|
+
"type": "object",
|
|
1214
|
+
"properties": {
|
|
1215
|
+
"data": {
|
|
1216
|
+
"type": "object",
|
|
1217
|
+
"properties": {
|
|
1218
|
+
"type": {
|
|
1219
|
+
"type": "string",
|
|
1220
|
+
"enum": [
|
|
1221
|
+
"tenant-sso"
|
|
1222
|
+
]
|
|
1223
|
+
},
|
|
1224
|
+
"attributes": {
|
|
1225
|
+
"title": "TenantSsoAttributesSchema",
|
|
1226
|
+
"type": "object",
|
|
1227
|
+
"description": "Enterprise SSO configuration for one tenant. Written only by the /v1/tenants/{tenantId}/sso doors (sysowner); the generic tenant PATCH strips settings.sso.",
|
|
1228
|
+
"properties": {
|
|
1229
|
+
"provider": {
|
|
1230
|
+
"type": "string",
|
|
1231
|
+
"enum": [
|
|
1232
|
+
"microsoft"
|
|
1233
|
+
],
|
|
1234
|
+
"description": "Identity provider family behind the tenant's IdP"
|
|
1235
|
+
},
|
|
1236
|
+
"entraTenantId": {
|
|
1237
|
+
"type": "string",
|
|
1238
|
+
"description": "GUID of the customer's Entra tenant. One Cognito IdP serves exactly one Entra tenant: Cognito compares the token iss to a single configured issuer and Entra mints iss per tenant, so a multi-tenant issuer can never match. NOTE: CreateIdentityProvider accepts a /common issuer without error and only sign-in fails, which is why 'common' is rejected here."
|
|
1239
|
+
},
|
|
1240
|
+
"idpName": {
|
|
1241
|
+
"type": "string",
|
|
1242
|
+
"description": "Derived server-side as ms-{shortCode} and ignored if sent. The name carries the tenant, which is how the auth triggers resolve it without scanning; it must fit Cognito's 32-character IdP name limit."
|
|
1243
|
+
},
|
|
1244
|
+
"domains": {
|
|
1245
|
+
"type": "array",
|
|
1246
|
+
"description": "Email domains of the customer. A domain gates JIT and auto-link ONLY once it carries verifiedAt - uniqueness in the claim registry is not proof of ownership. Public mail providers (gmail.com and friends) are rejected: a shared domain can never prove its holder employs the person signing in.",
|
|
1247
|
+
"items": {
|
|
1248
|
+
"type": "object",
|
|
1249
|
+
"properties": {
|
|
1250
|
+
"name": {
|
|
1251
|
+
"type": "string"
|
|
1252
|
+
},
|
|
1253
|
+
"verifiedAt": {
|
|
1254
|
+
"type": "string"
|
|
1255
|
+
},
|
|
1256
|
+
"method": {
|
|
1257
|
+
"type": "string",
|
|
1258
|
+
"enum": [
|
|
1259
|
+
"ops-confirmed",
|
|
1260
|
+
"dns-txt",
|
|
1261
|
+
"entra-verified"
|
|
1262
|
+
]
|
|
1263
|
+
}
|
|
1264
|
+
}
|
|
1265
|
+
}
|
|
1266
|
+
},
|
|
1267
|
+
"defaultRole": {
|
|
1268
|
+
"type": "string",
|
|
1269
|
+
"description": "Role granted when a pending JIT user is APPROVED - never granted by the act of signing in. Domain-gated JIT makes the whole customer workforce eligible, so an automatic operational role would expose candidate data to anyone who can authenticate at the customer's IdP. Privileged roles (owner/admin/sysowner) are rejected."
|
|
1270
|
+
},
|
|
1271
|
+
"required": {
|
|
1272
|
+
"type": "boolean",
|
|
1273
|
+
"description": "When true, password login is refused for this tenant's users. Owner and sysowner are always exempt - a break-glass account, because an outage in the customer's Entra must not lock them out of the product."
|
|
1274
|
+
},
|
|
1275
|
+
"autoApprove": {
|
|
1276
|
+
"type": "boolean",
|
|
1277
|
+
"description": "When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default."
|
|
1278
|
+
},
|
|
1279
|
+
"enabled": {
|
|
1280
|
+
"type": "boolean",
|
|
1281
|
+
"description": "Whether a Cognito identity provider exists for this tenant. Owned by the provisioning step and ignored if sent."
|
|
1282
|
+
}
|
|
1283
|
+
}
|
|
1284
|
+
}
|
|
1285
|
+
}
|
|
1286
|
+
}
|
|
1287
|
+
}
|
|
1288
|
+
}
|
|
1289
|
+
}
|
|
1290
|
+
},
|
|
1291
|
+
{
|
|
1292
|
+
"type": "function",
|
|
1293
|
+
"function": {
|
|
1294
|
+
"name": "delete_tenant_sso",
|
|
1295
|
+
"description": "Delete Tenant Enterprise SSO",
|
|
1296
|
+
"parameters": {
|
|
1297
|
+
"type": "object",
|
|
1298
|
+
"properties": {}
|
|
1299
|
+
}
|
|
1300
|
+
}
|
|
1301
|
+
},
|
|
1302
|
+
{
|
|
1303
|
+
"type": "function",
|
|
1304
|
+
"function": {
|
|
1305
|
+
"name": "tenant_sso_options",
|
|
1306
|
+
"description": "Tenant SSO Options",
|
|
1307
|
+
"parameters": {
|
|
1308
|
+
"type": "object",
|
|
1309
|
+
"properties": {}
|
|
1310
|
+
}
|
|
1311
|
+
}
|
|
1312
|
+
},
|
|
1076
1313
|
{
|
|
1077
1314
|
"type": "function",
|
|
1078
1315
|
"function": {
|
|
@@ -1285,6 +1522,26 @@
|
|
|
1285
1522
|
"type": "object",
|
|
1286
1523
|
"additionalProperties": true
|
|
1287
1524
|
},
|
|
1525
|
+
"identities": {
|
|
1526
|
+
"type": "array",
|
|
1527
|
+
"description": "Federated logins linked to this account. System-owned: written only by the auth triggers and the linking doors, never by a PATCH. Linking must happen BEFORE the first federated sign-in, otherwise Cognito mints a separate profile that has to be deleted.",
|
|
1528
|
+
"items": {
|
|
1529
|
+
"type": "object",
|
|
1530
|
+
"properties": {
|
|
1531
|
+
"provider": {
|
|
1532
|
+
"type": "string",
|
|
1533
|
+
"description": "Cognito identity provider name (Google, LinkedIn, or ms-{shortCode})"
|
|
1534
|
+
},
|
|
1535
|
+
"sub": {
|
|
1536
|
+
"type": "string",
|
|
1537
|
+
"description": "The provider's subject identifier. Pairwise per client_id at Entra, so it only matches tokens issued to the same app registration as the IdP."
|
|
1538
|
+
},
|
|
1539
|
+
"linkedAt": {
|
|
1540
|
+
"type": "string"
|
|
1541
|
+
}
|
|
1542
|
+
}
|
|
1543
|
+
}
|
|
1544
|
+
},
|
|
1288
1545
|
"avatarUrl": {
|
|
1289
1546
|
"type": "string",
|
|
1290
1547
|
"description": "CDN URL of the profile picture. Either a per-user upload (users/... key, minted via the upload door) or a shared gallery image (avatars/...). Must point at an existing CDN object - updateUser head-checks it."
|
|
@@ -1597,6 +1854,26 @@
|
|
|
1597
1854
|
"type": "object",
|
|
1598
1855
|
"additionalProperties": true
|
|
1599
1856
|
},
|
|
1857
|
+
"identities": {
|
|
1858
|
+
"type": "array",
|
|
1859
|
+
"description": "Federated logins linked to this account. System-owned: written only by the auth triggers and the linking doors, never by a PATCH. Linking must happen BEFORE the first federated sign-in, otherwise Cognito mints a separate profile that has to be deleted.",
|
|
1860
|
+
"items": {
|
|
1861
|
+
"type": "object",
|
|
1862
|
+
"properties": {
|
|
1863
|
+
"provider": {
|
|
1864
|
+
"type": "string",
|
|
1865
|
+
"description": "Cognito identity provider name (Google, LinkedIn, or ms-{shortCode})"
|
|
1866
|
+
},
|
|
1867
|
+
"sub": {
|
|
1868
|
+
"type": "string",
|
|
1869
|
+
"description": "The provider's subject identifier. Pairwise per client_id at Entra, so it only matches tokens issued to the same app registration as the IdP."
|
|
1870
|
+
},
|
|
1871
|
+
"linkedAt": {
|
|
1872
|
+
"type": "string"
|
|
1873
|
+
}
|
|
1874
|
+
}
|
|
1875
|
+
}
|
|
1876
|
+
},
|
|
1600
1877
|
"avatarUrl": {
|
|
1601
1878
|
"type": "string",
|
|
1602
1879
|
"description": "CDN URL of the profile picture. Either a per-user upload (users/... key, minted via the upload door) or a shared gallery image (avatars/...). Must point at an existing CDN object - updateUser head-checks it."
|