@smplkit/sdk 3.0.32 → 3.0.34

package/dist/index.d.ts

@@ -57,6 +57,36 @@ interface ListEventsPage {
     /** Opaque cursor for the next page, or null if this is the last page. */
     nextCursor: string | null;
 }
+interface ResourceType {
+    /** The resource_type slug. */
+    id: string;
+    createdAt: string;
+}
+interface ListResourceTypesParams {
+    pageSize?: number;
+    pageAfter?: string;
+}
+interface ListResourceTypesPage {
+    resourceTypes: ResourceType[];
+    /** Opaque cursor for the next page, or null if this is the last page. */
+    nextCursor: string | null;
+}
+interface Action {
+    /** The action slug. */
+    id: string;
+    createdAt: string;
+}
+interface ListActionsParams {
+    /** When set, returns only the actions seen with this resource_type. */
+    filterResourceType?: string;
+    pageSize?: number;
+    pageAfter?: string;
+}
+interface ActionListPage {
+    actions: Action[];
+    /** Opaque cursor for the next page, or null if this is the last page. */
+    nextCursor: string | null;
+}
 interface HttpHeader {
     name: string;
     value: string;
@@ -91,7 +121,6 @@ interface Forwarder {
     transform: string | null;
     /** Header values are returned redacted on reads. */
     http: ForwarderHttp;
-    data: Record<string, unknown>;
     createdAt: string | null;
     updatedAt: string | null;
     deletedAt: string | null;
@@ -104,7 +133,6 @@ interface CreateForwarderInput {
     enabled?: boolean;
     filter?: Record<string, unknown>;
     transform?: string;
-    data?: Record<string, unknown>;
 }
 interface UpdateForwarderInput extends CreateForwarderInput {
 }
@@ -118,73 +146,31 @@ interface ListForwardersPage {
     forwarders: Forwarder[];
     nextCursor: string | null;
 }
-type ForwarderDeliveryStatus = "SUCCEEDED" | "FAILED" | "FILTERED_OUT" | "SKIPPED_DO_NOT_FORWARD";
-interface ForwarderDelivery {
-    id: string;
-    forwarderId: string;
-    eventId: string;
-    attemptNumber: number;
-    status: ForwarderDeliveryStatus;
-    request: Record<string, unknown> | null;
-    responseStatus: number | null;
-    responseBody: string | null;
-    latencyMs: number | null;
-    error: string | null;
-    createdAt: string | null;
-}
-interface ListDeliveriesParams {
-    status?: ForwarderDeliveryStatus;
-    /** Range notation per ADR-014, e.g. `[2026-01-01T00:00:00Z,*)`. */
-    createdAtRange?: string;
-    eventId?: string;
-    pageSize?: number;
-    pageAfter?: string;
-}
-interface ListDeliveriesPage {
-    deliveries: ForwarderDelivery[];
-    nextCursor: string | null;
-}
-interface RetryFailedDeliveriesSummary {
-    attempted: number;
-    succeeded: number;
-    failed: number;
-}
-interface TestForwarderRequest {
-    url: string;
-    method?: string;
-    headers?: HttpHeader[];
-    body?: string | null;
-    successStatus?: string;
-    /** Capped at 30s server-side. */
-    timeoutMs?: number;
-}
-interface TestForwarderResult {
-    succeeded: boolean;
-    responseStatus: number | null;
-    responseHeaders: Record<string, string>;
-    responseBody: string;
-    latencyMs: number | null;
-    error: string | null;
-}
 
 /**
- * Audit namespace — `client.audit.events.{record,list,get}`.
+ * Audit namespace — runtime client.
+ *
+ * Public surface:
+ *   client.audit.events.{record,list,get,flush}
+ *   client.audit.resourceTypes.list(...)
+ *   client.audit.actions.list(...)
  *
- * ADR-047 §2.6. Writes are fire-and-forget by default: `record` enqueues the
- * event onto an in-memory bounded buffer and returns immediately. The buffer
- * worker flushes on a timer or when depth crosses a watermark, and retries
- * transient failures with exponential backoff. Reads are async and return
- * Promises that resolve to typed `AuditEvent` instances.
+ * The runtime audit client owns event recording and read-side queries —
+ * fire-and-forget `record`, plus the audit-log list/get and the
+ * distinct-value listings that back the Activity tab filter dropdowns.
+ *
+ * Management-plane operations (SIEM forwarder CRUD) live on
+ * `SmplManagementClient` under `mgmt.audit.*`. ADR-047 §2.7.
  *
  * All HTTP work is delegated to the auto-generated openapi-fetch client
  * over `../generated/audit.d.ts` — the wrapper does not issue raw fetch
  * calls.
  */
 
-type AuditHttp = ReturnType<typeof createClient<paths>>;
+type AuditHttp$1 = ReturnType<typeof createClient<paths>>;
 declare class EventsClient {
     /** @internal */
-    readonly _http: AuditHttp;
+    readonly _http: AuditHttp$1;
     private readonly _buffer;
     constructor(opts: {
         apiKey: string;
@@ -209,56 +195,35 @@ declare class EventsClient {
     /** @internal */
     _close(): Promise<void>;
 }
-declare class DeliveryActionsClient {
+declare class ResourceTypesClient {
     private readonly _http;
-    constructor(_http: AuditHttp);
-    /** Retry a single failed delivery. Records a new attempt row with
-     *  attempt_number = prior + 1; the prior row is unchanged. */
-    retry(forwarderId: string, deliveryId: string): Promise<ForwarderDelivery>;
-}
-declare class DeliveriesClient {
-    private readonly _http;
-    readonly actions: DeliveryActionsClient;
-    constructor(_http: AuditHttp);
-    list(forwarderId: string, params?: ListDeliveriesParams): Promise<ListDeliveriesPage>;
-}
-declare class ForwarderActionsClient {
-    private readonly _http;
-    constructor(_http: AuditHttp);
-    /** Retry every failed delivery for a forwarder. Returns a count summary. */
-    retryFailedDeliveries(forwarderId: string): Promise<RetryFailedDeliveriesSummary>;
-}
-declare class ForwardersClient {
-    private readonly _http;
-    readonly deliveries: DeliveriesClient;
-    readonly actions: ForwarderActionsClient;
-    constructor(_http: AuditHttp);
-    create(input: CreateForwarderInput): Promise<Forwarder>;
-    list(params?: ListForwardersParams): Promise<ListForwardersPage>;
-    get(forwarderId: string): Promise<Forwarder>;
-    update(forwarderId: string, input: UpdateForwarderInput): Promise<Forwarder>;
-    delete(forwarderId: string): Promise<void>;
+    constructor(_http: AuditHttp$1);
+    /**
+     * List the distinct `resource_type` slugs recorded for this account.
+     *
+     * Backed by a maintain-by-write side table (ADR-047 §2.5), so the
+     * response time is independent of event volume. Sorted alphabetically;
+     * cursor pagination via `pageAfter`.
+     */
+    list(params?: ListResourceTypesParams): Promise<ListResourceTypesPage>;
 }
-declare class TestForwarderActionsClient {
+declare class ActionsClient {
     private readonly _http;
-    constructor(_http: AuditHttp);
-    /** Server-side proxy to a customer-supplied URL. SSRF-guarded; the
-     *  audit service rejects private/loopback/link-local addresses (incl.
-     *  the EC2 IMDS at 169.254.169.254) and ports outside the allowlist. */
-    execute(input: TestForwarderRequest): Promise<TestForwarderResult>;
-}
-declare class TestForwarderClient {
-    readonly actions: TestForwarderActionsClient;
-    constructor(http: AuditHttp);
-}
-declare class FunctionsClient {
-    readonly test_forwarder: TestForwarderClient;
-    constructor(http: AuditHttp);
+    constructor(_http: AuditHttp$1);
+    /**
+     * List the distinct `action` slugs recorded for this account.
+     *
+     * Without `filterResourceType`, returns one row per distinct action.
+     * With `filterResourceType`, returns only the actions recorded with
+     * that resource_type, powering cascading-filter UIs (ADR-047 §2.5).
+     * Sorted alphabetically; cursor pagination via `pageAfter`.
+     */
+    list(params?: ListActionsParams): Promise<ActionListPage>;
 }
 declare class AuditClient {
     readonly events: EventsClient;
-    readonly forwarders: ForwardersClient;
-    readonly functions: FunctionsClient;
+    readonly resourceTypes: ResourceTypesClient;
+    readonly actions: ActionsClient;
     constructor(opts: {
         apiKey: string;
         baseUrl: string;
@@ -981,6 +946,15 @@ interface components {
     schemas: {
         /**
          * Flag
+         * @description A feature flag whose value is resolved at runtime from environment
+         *     rules and a default.
+         *
+         *     A flag has a value type (`BOOLEAN`, `STRING`, `NUMERIC`, or `JSON`)
+         *     and either a fixed set of allowed values (constrained) or accepts
+         *     any value matching the type (unconstrained). Each environment can
+         *     enable or disable the flag, set its own default, and define
+         *     targeting rules that override the default for specific evaluation
+         *     contexts.
          * @example {
          *       "created_at": "2026-03-27T10:00:00Z",
          *       "default": false,
@@ -993,9 +967,12 @@ interface components {
          *             {
          *               "description": "Beta users get dark mode",
          *               "logic": {
-         *                 "attribute": "beta",
-         *                 "op": "eq",
-         *                 "value": true
+         *                 "==": [
+         *                   {
+         *                     "var": "customer.beta"
+         *                   },
+         *                   true
+         *                 ]
          *               },
          *               "value": true
          *             }
@@ -1026,46 +1003,61 @@ interface components {
         Flag: {
             /**
              * Name
-             * @description Human-readable display name
+             * @description Human-readable display name for the flag.
              */
             name: string;
-            /** Description */
+            /**
+             * Description
+             * @description Human-readable description of the flag's purpose.
+             */
             description?: string | null;
             /**
              * Type
-             * @description Value type: STRING, BOOLEAN, NUMERIC, or JSON
+             * @description Value type of the flag. Accepted case-insensitively. Changing the type cascades to `values`, `default`, and every environment's rules and default.
+             * @enum {string}
              */
-            type: string;
+            type: "BOOLEAN" | "STRING" | "NUMERIC" | "JSON";
             /**
              * Default
-             * @description Default value; must reference a value in the values array (constrained) or match the flag type (unconstrained)
+             * @description Default value returned when no environment rule fires and the environment has no `default`. For constrained flags (non-null `values`), must equal one of the entries in the `values` array. For unconstrained flags, must match `type`.
              */
             default: unknown;
             /**
              * Values
-             * @description Ordered set of allowed values (constrained), or null (unconstrained)
+             * @description Ordered set of allowed values for a constrained flag, or `null` for an unconstrained flag. `BOOLEAN` flags, if constrained, must declare exactly two values.
              */
             values?: components["schemas"]["FlagValue"][] | null;
-            /** Environments */
+            /**
+             * Environments
+             * @description Per-environment configuration keyed by environment name (`production`, `staging`, etc.). Environments not listed fall back to the flag's global `default`.
+             */
             environments?: {
                 [key: string]: components["schemas"]["FlagEnvironment"];
             };
             /**
              * Managed
-             * @description True if admin-managed, false if auto-discovered
+             * @description `true` when the flag was created through the API, `false` when it was auto-discovered from a bulk-register call. Auto-discovered flags can be edited and converted to managed by setting this to `true`.
              */
             managed?: boolean | null;
-            /** Sources */
-            readonly sources?: {
-                [key: string]: unknown;
-            }[] | null;
-            /** Created At */
+            /**
+             * Sources
+             * @description SDK-reported observations of this flag, grouped by service and environment. Populated automatically by the bulk-register endpoint.
+             */
+            readonly sources?: components["schemas"]["FlagSource"][] | null;
+            /**
+             * Created At
+             * @description When the flag was created.
+             */
             readonly created_at?: string | null;
-            /** Updated At */
+            /**
+             * Updated At
+             * @description When the flag was last modified.
+             */
             readonly updated_at?: string | null;
         };
         /**
          * FlagBulkItem
+         * @description One flag declaration reported by an SDK during bulk registration.
          * @example {
          *       "default": false,
          *       "environment": "production",
@@ -1077,32 +1069,34 @@ interface components {
         FlagBulkItem: {
             /**
              * Id
-             * @description Flag key as declared in code
+             * @description Flag key as declared in code. URL-safe and stable for the lifetime of the flag.
              */
             id: string;
             /**
              * Type
-             * @description Flag type: BOOLEAN, STRING, NUMERIC, or JSON
+             * @description Value type the SDK declared for the flag. Accepted case-insensitively.
+             * @enum {string}
              */
-            type: string;
+            type: "BOOLEAN" | "STRING" | "NUMERIC" | "JSON";
             /**
              * Default
-             * @description Default value declared in code
+             * @description Default value the SDK declared for the flag. Used to create the flag if it does not already exist.
              */
             default: unknown;
             /**
              * Service
-             * @description Service that declared this flag
+             * @description Service reporting the declaration. Defaults to `unknown`.
              */
             service?: string | null;
             /**
              * Environment
-             * @description Environment where observed
+             * @description Environment reporting the declaration. Defaults to `unknown`.
              */
             environment?: string | null;
         };
         /**
          * FlagBulkRequest
+         * @description Inputs to the bulk-register-flags action.
          * @example {
          *       "flags": [
          *         {
@@ -1123,38 +1117,70 @@ interface components {
          *     }
          */
         FlagBulkRequest: {
-            /** Flags */
+            /**
+             * Flags
+             * @description Flags reported by the SDK in this batch.
+             */
             flags: components["schemas"]["FlagBulkItem"][];
         };
         /**
          * FlagBulkResponse
+         * @description Result of a bulk-register-flags action.
          * @example {
          *       "registered": 5
          *     }
          */
         FlagBulkResponse: {
-            /** Registered */
+            /**
+             * Registered
+             * @description Number of items in the batch that were registered or refreshed.
+             */
             registered: number;
         };
-        /** FlagEnvironment */
+        /**
+         * FlagEnvironment
+         * @description Per-environment evaluation configuration for a flag.
+         */
         FlagEnvironment: {
             /**
              * Enabled
+             * @description Whether the flag is active in this environment. When `false`, evaluation skips rules and returns the flag's global `default`.
              * @default true
              */
             enabled: boolean;
-            /** Default */
+            /**
+             * Default
+             * @description Environment-level default returned when no rule fires. If `null`, evaluation falls back to the flag's global `default`.
+             */
             default?: unknown | null;
-            /** Rules */
+            /**
+             * Rules
+             * @description Targeting rules evaluated top-down. The first rule whose logic returns truthy provides the result.
+             */
             rules?: components["schemas"]["FlagRule"][];
         };
-        /** FlagListResponse */
+        /**
+         * FlagListResponse
+         * @description JSON:API collection response envelope for flags.
+         */
         FlagListResponse: {
             /** Data */
             data: components["schemas"]["FlagResource"][];
         };
+        /**
+         * FlagRequest
+         * @description JSON:API request envelope for creating or updating a flag.
+         */
+        FlagRequest: {
+            data: components["schemas"]["FlagResource"];
+        };
         /**
          * FlagResource
+         * @description JSON:API resource envelope for a flag.
+         *
+         *     `id` is the flag key. For create requests, `id` is required and is
+         *     chosen by the caller. For update requests, `id` may be omitted (the
+         *     server reads the key from the URL) or supplied to rename the flag.
          * @example {
          *       "attributes": {
          *         "created_at": "2026-03-27T10:00:00Z",
@@ -1168,9 +1194,12 @@ interface components {
          *               {
          *                 "description": "Beta users get dark mode",
          *                 "logic": {
-         *                   "attribute": "beta",
-         *                   "op": "eq",
-         *                   "value": true
+         *                   "==": [
+         *                     {
+         *                       "var": "customer.beta"
+         *                     },
+         *                     true
+         *                   ]
          *                 },
          *                 "value": true
          *               }
@@ -1206,68 +1235,110 @@ interface components {
             type: "flag";
             attributes: components["schemas"]["Flag"];
         };
-        /** FlagResponse */
+        /**
+         * FlagResponse
+         * @description JSON:API single-resource response envelope for a flag.
+         */
         FlagResponse: {
             data: components["schemas"]["FlagResource"];
         };
-        /** FlagRule */
+        /**
+         * FlagRule
+         * @description A targeting rule that overrides the default within an environment.
+         */
         FlagRule: {
-            /** Description */
+            /**
+             * Description
+             * @description Human-readable description of the rule.
+             */
             description?: string | null;
-            /** Logic */
+            /**
+             * Logic
+             * @description JSON Logic expression evaluated against the evaluation context. The rule fires when the expression is truthy.
+             */
             logic: {
                 [key: string]: unknown;
             };
-            /** Value */
+            /**
+             * Value
+             * @description Value returned when the rule fires. Must reference a value from the flag's `values` array (constrained flags) or match the flag's `type` (unconstrained flags).
+             */
             value: unknown;
         };
         /**
          * FlagSource
-         * @example {
-         *       "created_at": "2026-04-17T10:00:00Z",
-         *       "data": {
-         *         "default": true,
-         *         "type": "BOOLEAN"
-         *       },
-         *       "environment": "production",
-         *       "first_observed": "2026-04-17T10:00:00Z",
-         *       "last_seen": "2026-04-17T15:30:00Z",
-         *       "service": "api-gateway",
-         *       "updated_at": "2026-04-17T15:30:00Z"
-         *     }
+         * @description A record of an SDK observing a feature flag from a particular
+         *     service and environment.
+         *
+         *     The flags service auto-registers a source the first time an SDK
+         *     reports a flag from a given service/environment pair and refreshes
+         *     `last_seen` on every subsequent report. Each source captures the
+         *     value type and default value the SDK declared in source code at
+         *     that location, which makes it possible to detect when service code
+         *     has drifted from the flag's authoritative configuration.
          */
         FlagSource: {
-            /** Service */
-            readonly service?: string;
-            /** Environment */
-            readonly environment?: string;
-            /** First Observed */
+            /**
+             * Service
+             * @description Service that declared the flag.
+             */
+            readonly service?: string | null;
+            /**
+             * Environment
+             * @description Environment in which the service declared the flag.
+             */
+            readonly environment?: string | null;
+            /**
+             * Declared Type
+             * @description Value type the SDK reported when registering the flag from this service/environment. May differ from the flag's authoritative `type` if the service is running stale code.
+             */
+            readonly declared_type?: ("BOOLEAN" | "STRING" | "NUMERIC" | "JSON") | null;
+            /**
+             * Declared Default
+             * @description Default value the SDK reported when registering the flag from this service/environment. May differ from the flag's authoritative `default` if the service is running stale code.
+             */
+            readonly declared_default?: unknown;
+            /**
+             * First Observed
+             * @description When this source was first observed.
+             */
             readonly first_observed?: string | null;
-            /** Last Seen */
+            /**
+             * Last Seen
+             * @description Most recent time the SDK re-registered this source.
+             */
             readonly last_seen?: string | null;
-            /** Data */
-            readonly data?: {
-                [key: string]: unknown;
-            } | null;
-            /** Created At */
+            /**
+             * Created At
+             * @description When the source record was created.
+             */
             readonly created_at?: string | null;
-            /** Updated At */
+            /**
+             * Updated At
+             * @description When the source record was last modified.
+             */
             readonly updated_at?: string | null;
         };
-        /** FlagSourceListResponse */
+        /**
+         * FlagSourceListResponse
+         * @description JSON:API collection response envelope for flag sources.
+         */
         FlagSourceListResponse: {
             /** Data */
             data: components["schemas"]["FlagSourceResource"][];
         };
         /**
          * FlagSourceResource
+         * @description JSON:API resource envelope for a flag source.
+         *
+         *     `id` is the source record's UUID. Sources are not created or
+         *     modified directly — the flags service registers and refreshes them
+         *     in response to SDK bulk-register requests.
          * @example {
          *       "attributes": {
          *         "created_at": "2026-04-17T10:00:00Z",
-         *         "data": {
-         *           "default": true,
-         *           "type": "BOOLEAN"
-         *         },
+         *         "declared_default": true,
+         *         "declared_type": "BOOLEAN",
          *         "environment": "production",
          *         "first_observed": "2026-04-17T10:00:00Z",
          *         "last_seen": "2026-04-17T15:30:00Z",
@@ -1288,46 +1359,99 @@ interface components {
             type: "flag_source";
             attributes: components["schemas"]["FlagSource"];
         };
-        /** FlagValue */
+        /**
+         * FlagValue
+         * @description A named value in a constrained flag's value set.
+         */
         FlagValue: {
-            /** Name */
+            /**
+             * Name
+             * @description Human-readable label for the value.
+             */
             name: string;
-            /** Value */
+            /**
+             * Value
+             * @description The value itself. Must match the flag's `type`.
+             */
             value: unknown;
         };
-        /** ManualReviewItem */
+        /**
+         * ManualReviewItem
+         * @description A flag rule that could not be safely modified by the bulk
+         *     remove-references action.
+         */
         ManualReviewItem: {
-            /** Flag */
+            /**
+             * Flag
+             * @description Key of the flag containing the rule.
+             */
             flag: string;
-            /** Environment */
+            /**
+             * Environment
+             * @description Environment containing the rule.
+             */
             environment: string;
-            /** Rule Index */
+            /**
+             * Rule Index
+             * @description Position of the rule within the environment's `rules` array.
+             */
             rule_index: number;
-            /** Reason */
+            /**
+             * Reason
+             * @description Why the rule needs manual review.
+             */
             reason: string;
         };
-        /** RemoveReferencesAttributes */
+        /**
+         * RemoveReferencesAttributes
+         * @description Counts and follow-ups returned by the remove-references action.
+         */
         RemoveReferencesAttributes: {
-            /** Flags Modified */
+            /**
+             * Flags Modified
+             * @description Keys of flags whose rules were modified.
+             */
             flags_modified: string[];
-            /** Rules Removed */
+            /**
+             * Rules Removed
+             * @description Total number of rules removed across all flags.
+             */
             rules_removed: number;
-            /** Rules Needing Manual Review */
+            /**
+             * Rules Needing Manual Review
+             * @description Rules that referenced the context but could not be removed automatically (typically because the reference is inside an `and` expression where removal would broaden the rule).
+             */
             rules_needing_manual_review: components["schemas"]["ManualReviewItem"][];
         };
-        /** RemoveReferencesRequest */
+        /**
+         * RemoveReferencesRequest
+         * @description Inputs to the remove-references action.
+         *
+         *     Exactly one of `context` or `context_type` must be provided.
+         */
         RemoveReferencesRequest: {
-            /** Context */
+            /**
+             * Context
+             * @description Identifier of the context instance to remove references to, formatted as `{type}:{key}` (e.g. `customer:c-123`).
+             */
             context?: string | null;
-            /** Context Type */
+            /**
+             * Context Type
+             * @description Context type to remove all references to (any attribute of this type).
+             */
             context_type?: string | null;
         };
-        /** RemoveReferencesResultEnvelope */
+        /**
+         * RemoveReferencesResultEnvelope
+         * @description JSON:API single-resource response envelope for the
+         *     remove-references action.
+         */
         RemoveReferencesResultEnvelope: {
             data: components["schemas"]["RemoveReferencesResultResource"];
         };
         /**
          * RemoveReferencesResultResource
+         * @description JSON:API resource envelope for the remove-references result.
          * @example {
          *       "attributes": {
          *         "flags_modified": [
@@ -1356,17 +1480,30 @@ interface components {
             type: "remove_references_result";
             attributes: components["schemas"]["RemoveReferencesAttributes"];
         };
-        /** UsageAttributes */
+        /**
+         * UsageAttributes
+         * @description Usage counter for a single metered limit.
+         */
         UsageAttributes: {
-            /** Limit Key */
+            /**
+             * Limit Key
+             * @description Identifier of the metered limit, e.g. `flags.items`.
+             */
             limit_key: string;
-            /** Period */
+            /**
+             * Period
+             * @description Period the counter covers. `current` is the only supported value.
+             */
             period: string;
-            /** Value */
+            /**
+             * Value
+             * @description Count for the period.
+             */
             value: number;
         };
         /**
          * UsageListResponse
+         * @description JSON:API collection response envelope for usage counters.
          * @example {
          *       "data": [
          *         {
@@ -1387,6 +1524,7 @@ interface components {
         };
         /**
          * UsageResource
+         * @description JSON:API resource envelope for a usage counter.
          * @example {
          *       "attributes": {
          *         "limit_key": "flags.items",
@@ -2631,6 +2769,44 @@ declare class LogGroupsClient {
     _updateGroup(group: LogGroup): Promise<LogGroup>;
 }
 
+/**
+ * Smpl Audit management surface — `mgmt.audit.*`.
+ *
+ * Counterpart to the runtime `AuditClient`. The runtime client owns event
+ * recording and read-side queries; this client owns SIEM forwarder CRUD:
+ *
+ *   mgmt.audit.forwarders.{create,get,list,update,delete}
+ *
+ * New audit-management capabilities should be added here, not in
+ * `src/audit/client.ts`.
+ */
+
+type AuditHttp = ReturnType<typeof createClient<paths>>;
+/** `mgmt.audit.forwarders.*` — CRUD for SIEM forwarders. */
+declare class ForwardersClient {
+    private readonly _http;
+    /** @internal */
+    constructor(_http: AuditHttp);
+    create(input: CreateForwarderInput): Promise<Forwarder>;
+    list(params?: ListForwardersParams): Promise<ListForwardersPage>;
+    get(forwarderId: string): Promise<Forwarder>;
+    /**
+     * Full-replace update. PUT semantics — every field is overwritten.
+     *
+     * Header values must be re-supplied as plaintext; the GET path
+     * returns them in plaintext for exactly this round-trip.
+     */
+    update(forwarderId: string, input: UpdateForwarderInput): Promise<Forwarder>;
+    delete(forwarderId: string): Promise<void>;
+}
+/** `mgmt.audit.*` — management surface for the audit service. */
+declare class ManagementAuditClient {
+    /** SIEM forwarder CRUD. */
+    readonly forwarders: ForwardersClient;
+    /** @internal */
+    constructor(http: AuditHttp);
+}
+
 type AppHttp = ReturnType<typeof createClient<___generated_app_d_ts.paths>>;
 type ConfigHttp = ReturnType<typeof createClient<___generated_config_d_ts.paths>>;
 type FlagsHttp = ReturnType<typeof createClient<___generated_flags_d_ts.paths>>;
@@ -2786,6 +2962,8 @@ declare class SmplManagementClient {
     readonly loggers: LoggersClient;
     /** Log group CRUD. */
     readonly logGroups: LogGroupsClient;
+    /** Audit SIEM forwarder CRUD. */
+    readonly audit: ManagementAuditClient;
     /** @internal — shared HTTP transports (so SmplClient can alias them). */
     readonly _appHttp: AppHttp;
     /** @internal */
@@ -2803,6 +2981,7 @@ declare class SmplManagementClient {
     private _flagsRef;
     private _loggersRef;
     private _logGroupsRef;
+    private _auditRef;
     private _appHttpRef;
     private _configHttpRef;
     private _flagsHttpRef;
@@ -3346,8 +3525,12 @@ declare class SmplConflictError extends SmplError {
 declare class SmplValidationError extends SmplError {
     constructor(message: string, statusCode?: number, responseBody?: string, errors?: ApiErrorDetail[]);
 }
+/** Raised when the server requires a higher plan tier (HTTP 402). */
+declare class SmplPaymentRequiredError extends SmplError {
+    constructor(message: string, statusCode?: number, responseBody?: string, errors?: ApiErrorDetail[]);
+}
 
 /** @deprecated Use {@link ApiErrorDetail}. */
 type ApiErrorObject = ApiErrorDetail;
 
-export { AccountSettings, AccountSettingsClient, type ApiErrorDetail, type ApiErrorObject, AuditClient, type AuditEvent, type ListEventsPage as AuditEventListPage, type ListEventsParams as AuditEventListParams, BooleanFlag, Color, Config, ConfigChangeEvent, ConfigClient, ConfigEnvironment, ConfigItem, Context, ContextType, ContextTypesClient, ContextsClient, type CreateEventInput as CreateAuditEventInput, Environment, EnvironmentClassification, EnvironmentsClient, Flag, FlagChangeEvent, FlagDeclaration, FlagEnvironment, FlagRule, FlagStats, FlagValue, FlagsClient, ItemType, JsonFlag, LiveConfigProxy, LogGroup, LogLevel, Logger, LoggerChangeEvent, LoggerEnvironment, LoggerSource, type LoggingAdapter, LoggingClient, NumberFlag, Op, PinoAdapter, type PinoAdapterConfig, Rule, SharedWebSocket, SmplClient, type SmplClientOptions, SmplConflictError, SmplConnectionError, SmplError, SmplManagementClient, type SmplManagementClientOptions, SmplNotFoundError, SmplTimeoutError, SmplValidationError, SmplConflictError as SmplkitConflictError, SmplConnectionError as SmplkitConnectionError, SmplError as SmplkitError, SmplNotFoundError as SmplkitNotFoundError, SmplTimeoutError as SmplkitTimeoutError, SmplValidationError as SmplkitValidationError, StringFlag, WinstonAdapter, type WinstonAdapterConfig };
+export { AccountSettings, AccountSettingsClient, type ApiErrorDetail, type ApiErrorObject, type Action as AuditAction, type ActionListPage as AuditActionListPage, AuditClient, type AuditEvent, type ListEventsPage as AuditEventListPage, type ListEventsParams as AuditEventListParams, ForwardersClient as AuditForwardersClient, type ListActionsParams as AuditListActionsParams, type ListResourceTypesParams as AuditListResourceTypesParams, type ResourceType as AuditResourceType, type ListResourceTypesPage as AuditResourceTypeListPage, BooleanFlag, Color, Config, ConfigChangeEvent, ConfigClient, ConfigEnvironment, ConfigItem, Context, ContextType, ContextTypesClient, ContextsClient, type CreateEventInput as CreateAuditEventInput, Environment, EnvironmentClassification, EnvironmentsClient, Flag, FlagChangeEvent, FlagDeclaration, FlagEnvironment, FlagRule, FlagStats, FlagValue, FlagsClient, ItemType, JsonFlag, LiveConfigProxy, LogGroup, LogLevel, Logger, LoggerChangeEvent, LoggerEnvironment, LoggerSource, type LoggingAdapter, LoggingClient, ManagementAuditClient, NumberFlag, Op, PinoAdapter, type PinoAdapterConfig, Rule, SharedWebSocket, SmplClient, type SmplClientOptions, SmplConflictError, SmplConnectionError, SmplError, SmplManagementClient, type SmplManagementClientOptions, SmplNotFoundError, SmplPaymentRequiredError, SmplTimeoutError, SmplValidationError, SmplConflictError as SmplkitConflictError, SmplConnectionError as SmplkitConnectionError, SmplError as SmplkitError, SmplNotFoundError as SmplkitNotFoundError, SmplPaymentRequiredError as SmplkitPaymentRequiredError, SmplTimeoutError as SmplkitTimeoutError, SmplValidationError as SmplkitValidationError, StringFlag, WinstonAdapter, type WinstonAdapterConfig };