@smplkit/sdk 3.0.33 → 3.0.35

package/dist/index.js

@@ -16619,6 +16619,122 @@ import createClient6 from "openapi-fetch";
 // src/audit/client.ts
 import createClient from "openapi-fetch";
 
+// src/errors.ts
+var SmplError = class extends Error {
+  /** The HTTP status code, if the error originated from an HTTP response. */
+  statusCode;
+  /** The raw response body, if available. */
+  responseBody;
+  /** Structured JSON:API error objects from the server response, if available. */
+  errors;
+  constructor(message, statusCode, responseBody, errors) {
+    super(message);
+    this.name = "SmplError";
+    this.statusCode = statusCode;
+    this.responseBody = responseBody;
+    this.errors = errors ?? [];
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+  toString() {
+    if (this.errors.length === 0) {
+      return `${this.name}: ${this.message}`;
+    }
+    if (this.errors.length === 1) {
+      return `${this.name}: ${this.message}
+Error: ${JSON.stringify(this.errors[0])}`;
+    }
+    const lines = this.errors.map((e, i) => `  [${i}] ${JSON.stringify(e)}`);
+    return `${this.name}: ${this.message}
+Errors:
+${lines.join("\n")}`;
+  }
+};
+var SmplConnectionError = class extends SmplError {
+  constructor(message, statusCode, responseBody, errors) {
+    super(message, statusCode, responseBody, errors);
+    this.name = "SmplConnectionError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var SmplTimeoutError = class extends SmplError {
+  constructor(message, statusCode, responseBody, errors) {
+    super(message, statusCode, responseBody, errors);
+    this.name = "SmplTimeoutError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var SmplNotFoundError = class extends SmplError {
+  constructor(message, statusCode, responseBody, errors) {
+    super(message, statusCode ?? 404, responseBody, errors);
+    this.name = "SmplNotFoundError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var SmplConflictError = class extends SmplError {
+  constructor(message, statusCode, responseBody, errors) {
+    super(message, statusCode ?? 409, responseBody, errors);
+    this.name = "SmplConflictError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var SmplValidationError = class extends SmplError {
+  constructor(message, statusCode, responseBody, errors) {
+    super(message, statusCode ?? 422, responseBody, errors);
+    this.name = "SmplValidationError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var SmplPaymentRequiredError = class extends SmplError {
+  constructor(message, statusCode, responseBody, errors) {
+    super(message, statusCode ?? 402, responseBody, errors);
+    this.name = "SmplPaymentRequiredError";
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+function parseJsonApiErrors(body) {
+  try {
+    const parsed = JSON.parse(body);
+    if (parsed && Array.isArray(parsed.errors)) {
+      return parsed.errors.map((e) => ({
+        ...e.status !== void 0 ? { status: String(e.status) } : {},
+        ...e.title !== void 0 ? { title: String(e.title) } : {},
+        ...e.detail !== void 0 ? { detail: String(e.detail) } : {},
+        ...e.source !== void 0 && typeof e.source === "object" && e.source !== null ? { source: e.source } : {}
+      }));
+    }
+  } catch {
+  }
+  return [];
+}
+function deriveMessage(errors, statusCode, body) {
+  if (errors.length === 0) {
+    return body ? `HTTP ${statusCode}: ${body}` : `HTTP ${statusCode}`;
+  }
+  const first = errors[0];
+  const base = first.detail ?? first.title ?? (first.status ? `HTTP ${first.status}` : `HTTP ${statusCode}`);
+  if (errors.length > 1) {
+    return `${base} (and ${errors.length - 1} more error${errors.length - 1 > 1 ? "s" : ""})`;
+  }
+  return base;
+}
+function throwForStatus(statusCode, body) {
+  const errors = parseJsonApiErrors(body);
+  const message = deriveMessage(errors, statusCode, body);
+  switch (statusCode) {
+    case 400:
+    case 422:
+      throw new SmplValidationError(message, statusCode, body, errors);
+    case 402:
+      throw new SmplPaymentRequiredError(message, statusCode, body, errors);
+    case 404:
+      throw new SmplNotFoundError(message, statusCode, body, errors);
+    case 409:
+      throw new SmplConflictError(message, statusCode, body, errors);
+    default:
+      throw new SmplError(message, statusCode, body, errors);
+  }
+}
+
 // src/audit/buffer.ts
 var MAX_BUFFER_SIZE = 1e3;
 var PERIODIC_FLUSH_INTERVAL_MS = 5e3;
@@ -16762,83 +16878,14 @@ function _eventFromResource(resource) {
     doNotForward: Boolean(attrs.do_not_forward ?? false)
   };
 }
-function _httpToWire(http) {
-  return {
-    method: http.method,
-    url: http.url,
-    headers: http.headers.map((h) => ({ name: h.name, value: h.value })),
-    body: http.body,
-    success_status: http.successStatus
-  };
-}
-function _httpFromWire(raw) {
-  const r = raw ?? {};
-  const headers = (r.headers ?? []).map((h) => ({
-    name: String(h.name ?? ""),
-    value: String(h.value ?? "")
-  }));
-  return {
-    method: String(r.method ?? "POST"),
-    url: String(r.url ?? ""),
-    headers,
-    body: r.body ?? null,
-    successStatus: String(r.success_status ?? "2xx")
-  };
-}
-function _forwarderAttributes(input) {
-  const attrs = {
-    name: input.name,
-    forwarder_type: input.forwarderType,
-    enabled: input.enabled ?? true,
-    http: _httpToWire(input.http)
-  };
-  if (input.filter !== void 0) {
-    attrs.filter = input.filter;
-  }
-  if (input.transform !== void 0) attrs.transform = input.transform;
-  if (input.data !== void 0) {
-    attrs.data = input.data;
-  }
-  return attrs;
-}
-function _forwarderFromResource(resource) {
-  const a = resource.attributes;
-  return {
-    id: resource.id,
-    name: String(a.name ?? ""),
-    slug: String(a.slug ?? ""),
-    forwarderType: a.forwarder_type,
-    enabled: Boolean(a.enabled ?? true),
-    filter: a.filter ?? null,
-    transform: a.transform ?? null,
-    http: _httpFromWire(a.http),
-    data: a.data ?? {},
-    createdAt: a.created_at ?? null,
-    updatedAt: a.updated_at ?? null,
-    deletedAt: a.deleted_at ?? null,
-    version: a.version ?? null
-  };
-}
-function _deliveryFromResource(resource) {
-  const a = resource.attributes;
-  return {
-    id: resource.id,
-    forwarderId: String(a.forwarder_id ?? ""),
-    eventId: String(a.event_id ?? ""),
-    attemptNumber: Number(a.attempt_number ?? 1),
-    status: a.status ?? "FAILED",
-    request: a.request ?? null,
-    responseStatus: a.response_status ?? null,
-    responseBody: a.response_body ?? null,
-    latencyMs: a.latency_ms ?? null,
-    error: a.error ?? null,
-    createdAt: a.created_at ?? null
-  };
-}
 function _nextCursorFromLinks(body) {
   const next = body.links?.next;
   if (typeof next !== "string" || !next.includes("page[after]=")) return null;
-  return next.split("page[after]=")[1];
+  return next.split("page[after]=")[1].split("&")[0];
+}
+async function _throwForResponse(response) {
+  const body = await response.text().catch(() => "");
+  throwForStatus(response.status, body);
 }
 var EventsClient = class {
   /** @internal */
@@ -16895,31 +16942,26 @@ var EventsClient = class {
     if (params.pageAfter !== void 0) query["page[after]"] = params.pageAfter;
     const result = await this._http.GET("/api/v1/events", {
       // openapi-fetch's typed query map is constrained by the spec's
-      // exact param names (filteraction etc.); the JSON:API filter[*]
-      // / page[*] format isn't expressible in that shape, so we cast
-      // and let openapi-fetch URL-encode the literal keys.
+      // exact param names; the JSON:API filter[*] / page[*] format isn't
+      // expressible in that shape, so we cast and let openapi-fetch
+      // URL-encode the literal keys.
       params: { query }
     });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(`audit list failed: ${result.response.status} ${result.response.statusText}`);
-    }
+    if (!result.response.ok) await _throwForResponse(result.response);
+    if (result.data === void 0) throw new SmplError("Unexpected empty response from audit");
     const body = result.data;
-    const events = (body.data ?? []).map(_eventFromResource);
-    let nextCursor = null;
-    const nextLink = body.links?.next;
-    if (typeof nextLink === "string" && nextLink.includes("page[after]=")) {
-      nextCursor = nextLink.split("page[after]=")[1];
-    }
-    return { events, nextCursor };
+    const rows = body.data ?? [];
+    return { events: rows.map(_eventFromResource), nextCursor: _nextCursorFromLinks(body) };
   }
   async get(eventId) {
     const result = await this._http.GET("/api/v1/events/{event_id}", {
       params: { path: { event_id: eventId } }
     });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(`audit get failed: ${result.response.status} ${result.response.statusText}`);
-    }
-    return _eventFromResource(result.data.data);
+    if (!result.response.ok) await _throwForResponse(result.response);
+    if (result.data === void 0) throw new SmplError("Unexpected empty response from audit");
+    return _eventFromResource(
+      result.data.data
+    );
   }
   /** Block until the in-memory buffer is drained or `timeoutMs` elapses. */
   async flush(timeoutMs = 5e3) {
@@ -16930,332 +16972,86 @@ var EventsClient = class {
     await this._buffer.close();
   }
 };
-var DeliveryActionsClient = class {
-  constructor(_http) {
-    this._http = _http;
-  }
-  /** Retry a single failed delivery. Records a new attempt row with
-   *  attempt_number = prior + 1; the prior row is unchanged. */
-  async retry(forwarderId, deliveryId) {
-    const result = await this._http.POST(
-      "/api/v1/forwarders/{forwarder_id}/deliveries/{delivery_id}/actions/retry",
-      { params: { path: { forwarder_id: forwarderId, delivery_id: deliveryId } } }
-    );
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit retry delivery failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    return _deliveryFromResource(result.data.data);
-  }
-};
-var DeliveriesClient = class {
-  constructor(_http) {
-    this._http = _http;
-    this.actions = new DeliveryActionsClient(_http);
-  }
-  actions;
-  async list(forwarderId, params = {}) {
-    const query = {};
-    if (params.status !== void 0) query["filter[status]"] = params.status;
-    if (params.createdAtRange !== void 0) query["filter[created_at]"] = params.createdAtRange;
-    if (params.eventId !== void 0) query["filter[event_id]"] = params.eventId;
-    if (params.pageSize !== void 0) query["page[size]"] = params.pageSize;
-    if (params.pageAfter !== void 0) query["page[after]"] = params.pageAfter;
-    const result = await this._http.GET("/api/v1/forwarders/{forwarder_id}/deliveries", {
-      params: {
-        path: { forwarder_id: forwarderId },
-        query
-      }
-    });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit list deliveries failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    const body = result.data;
-    return {
-      deliveries: (body.data ?? []).map(_deliveryFromResource),
-      nextCursor: _nextCursorFromLinks(body)
-    };
-  }
-};
-var ForwarderActionsClient = class {
+var ResourceTypesClient = class {
   constructor(_http) {
     this._http = _http;
   }
-  /** Retry every failed delivery for a forwarder. Returns a count summary. */
-  async retryFailedDeliveries(forwarderId) {
-    const result = await this._http.POST(
-      "/api/v1/forwarders/{forwarder_id}/actions/retry_failed_deliveries",
-      { params: { path: { forwarder_id: forwarderId } } }
-    );
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit bulk retry failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    const d = result.data;
-    return {
-      attempted: Number(d.attempted ?? 0),
-      succeeded: Number(d.succeeded ?? 0),
-      failed: Number(d.failed ?? 0)
-    };
-  }
-};
-var ForwardersClient = class {
-  constructor(_http) {
-    this._http = _http;
-    this.deliveries = new DeliveriesClient(_http);
-    this.actions = new ForwarderActionsClient(_http);
-  }
-  deliveries;
-  actions;
-  async create(input) {
-    const body = {
-      data: { id: "", type: "forwarder", attributes: _forwarderAttributes(input) }
-    };
-    const result = await this._http.POST("/api/v1/forwarders", { body });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit create forwarder failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    return _forwarderFromResource(result.data.data);
-  }
+  /**
+   * List the distinct `resource_type` slugs recorded for this account.
+   *
+   * Backed by a maintain-by-write side table (ADR-047 §2.5), so the
+   * response time is independent of event volume. Sorted alphabetically;
+   * cursor pagination via `pageAfter`.
+   */
   async list(params = {}) {
     const query = {};
-    if (params.forwarderType !== void 0) query["filter[forwarder_type]"] = params.forwarderType;
-    if (params.enabled !== void 0) query["filter[enabled]"] = params.enabled;
     if (params.pageSize !== void 0) query["page[size]"] = params.pageSize;
     if (params.pageAfter !== void 0) query["page[after]"] = params.pageAfter;
-    const result = await this._http.GET("/api/v1/forwarders", {
-      params: { query }
-    });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit list forwarders failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    const body = result.data;
-    return {
-      forwarders: (body.data ?? []).map(_forwarderFromResource),
-      nextCursor: _nextCursorFromLinks(body)
-    };
-  }
-  async get(forwarderId) {
-    const result = await this._http.GET("/api/v1/forwarders/{forwarder_id}", {
-      params: { path: { forwarder_id: forwarderId } }
-    });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit get forwarder failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    return _forwarderFromResource(result.data.data);
-  }
-  async update(forwarderId, input) {
-    const body = {
-      data: { id: forwarderId, type: "forwarder", attributes: _forwarderAttributes(input) }
-    };
-    const result = await this._http.PUT("/api/v1/forwarders/{forwarder_id}", {
-      params: { path: { forwarder_id: forwarderId } },
-      body
-    });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit update forwarder failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    return _forwarderFromResource(result.data.data);
-  }
-  async delete(forwarderId) {
-    const result = await this._http.DELETE("/api/v1/forwarders/{forwarder_id}", {
-      params: { path: { forwarder_id: forwarderId } }
-    });
-    if (result.response.status !== 204) {
-      throw new Error(
-        `audit delete forwarder failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-  }
-};
-var TestForwarderActionsClient = class {
-  constructor(_http) {
-    this._http = _http;
-  }
-  /** Server-side proxy to a customer-supplied URL. SSRF-guarded; the
-   *  audit service rejects private/loopback/link-local addresses (incl.
-   *  the EC2 IMDS at 169.254.169.254) and ports outside the allowlist. */
-  async execute(input) {
-    const body = {
-      method: input.method ?? "POST",
-      url: input.url,
-      headers: (input.headers ?? []).map((h) => ({ name: h.name, value: h.value })),
-      body: input.body ?? null,
-      success_status: input.successStatus ?? "2xx"
-    };
-    if (input.timeoutMs !== void 0) body.timeout_ms = input.timeoutMs;
-    const result = await this._http.POST("/api/v1/functions/test_forwarder/actions/execute", {
-      // This endpoint serves and accepts plain JSON, NOT JSON:API. The
-      // openapi-fetch client adds its default JSON:API content-type
-      // header; we override here so the server's strict validator
-      // doesn't reject the request.
-      headers: { "Content-Type": "application/json", Accept: "application/json" },
-      body
-    });
-    if (!result.response.ok || result.data === void 0) {
-      throw new Error(
-        `audit test_forwarder failed: ${result.response.status} ${result.response.statusText}`
-      );
-    }
-    const d = result.data;
-    return {
-      succeeded: Boolean(d.succeeded),
-      responseStatus: d.response_status ?? null,
-      responseHeaders: d.response_headers ?? {},
-      responseBody: String(d.response_body ?? ""),
-      latencyMs: d.latency_ms ?? null,
-      error: d.error ?? null
-    };
-  }
-};
-var TestForwarderClient = class {
-  actions;
-  constructor(http) {
-    this.actions = new TestForwarderActionsClient(http);
-  }
-};
-var FunctionsClient = class {
-  test_forwarder;
-  constructor(http) {
-    this.test_forwarder = new TestForwarderClient(http);
-  }
-};
-var AuditClient = class {
-  events;
-  forwarders;
-  functions;
-  constructor(opts) {
-    this.events = new EventsClient(opts);
-    this.forwarders = new ForwardersClient(this.events._http);
-    this.functions = new FunctionsClient(this.events._http);
-  }
-  /** @internal */
-  async _close() {
-    await this.events._close();
-  }
-};
-
-// src/config/client.ts
-import createClient2 from "openapi-fetch";
-
-// src/errors.ts
-var SmplError = class extends Error {
-  /** The HTTP status code, if the error originated from an HTTP response. */
-  statusCode;
-  /** The raw response body, if available. */
-  responseBody;
-  /** Structured JSON:API error objects from the server response, if available. */
-  errors;
-  constructor(message, statusCode, responseBody, errors) {
-    super(message);
-    this.name = "SmplError";
-    this.statusCode = statusCode;
-    this.responseBody = responseBody;
-    this.errors = errors ?? [];
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-  toString() {
-    if (this.errors.length === 0) {
-      return `${this.name}: ${this.message}`;
-    }
-    if (this.errors.length === 1) {
-      return `${this.name}: ${this.message}
-Error: ${JSON.stringify(this.errors[0])}`;
-    }
-    const lines = this.errors.map((e, i) => `  [${i}] ${JSON.stringify(e)}`);
-    return `${this.name}: ${this.message}
-Errors:
-${lines.join("\n")}`;
-  }
-};
-var SmplConnectionError = class extends SmplError {
-  constructor(message, statusCode, responseBody, errors) {
-    super(message, statusCode, responseBody, errors);
-    this.name = "SmplConnectionError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var SmplTimeoutError = class extends SmplError {
-  constructor(message, statusCode, responseBody, errors) {
-    super(message, statusCode, responseBody, errors);
-    this.name = "SmplTimeoutError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var SmplNotFoundError = class extends SmplError {
-  constructor(message, statusCode, responseBody, errors) {
-    super(message, statusCode ?? 404, responseBody, errors);
-    this.name = "SmplNotFoundError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var SmplConflictError = class extends SmplError {
-  constructor(message, statusCode, responseBody, errors) {
-    super(message, statusCode ?? 409, responseBody, errors);
-    this.name = "SmplConflictError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-var SmplValidationError = class extends SmplError {
-  constructor(message, statusCode, responseBody, errors) {
-    super(message, statusCode ?? 422, responseBody, errors);
-    this.name = "SmplValidationError";
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
-};
-function parseJsonApiErrors(body) {
-  try {
-    const parsed = JSON.parse(body);
-    if (parsed && Array.isArray(parsed.errors)) {
-      return parsed.errors.map((e) => ({
-        ...e.status !== void 0 ? { status: String(e.status) } : {},
-        ...e.title !== void 0 ? { title: String(e.title) } : {},
-        ...e.detail !== void 0 ? { detail: String(e.detail) } : {},
-        ...e.source !== void 0 && typeof e.source === "object" && e.source !== null ? { source: e.source } : {}
-      }));
-    }
-  } catch {
+    const result = await this._http.GET("/api/v1/resource_types", {
+      params: { query }
+    });
+    if (!result.response.ok) await _throwForResponse(result.response);
+    if (result.data === void 0) throw new SmplError("Unexpected empty response from audit");
+    const body = result.data;
+    const resourceTypes = (body.data ?? []).map(
+      (r) => ({
+        id: r.id,
+        createdAt: String(r.attributes.created_at ?? "")
+      })
+    );
+    return { resourceTypes, nextCursor: _nextCursorFromLinks(body) };
   }
-  return [];
-}
-function deriveMessage(errors, statusCode, body) {
-  if (errors.length === 0) {
-    return body ? `HTTP ${statusCode}: ${body}` : `HTTP ${statusCode}`;
+};
+var ActionsClient = class {
+  constructor(_http) {
+    this._http = _http;
   }
-  const first = errors[0];
-  const base = first.detail ?? first.title ?? (first.status ? `HTTP ${first.status}` : `HTTP ${statusCode}`);
-  if (errors.length > 1) {
-    return `${base} (and ${errors.length - 1} more error${errors.length - 1 > 1 ? "s" : ""})`;
+  /**
+   * List the distinct `action` slugs recorded for this account.
+   *
+   * Without `filterResourceType`, returns one row per distinct action.
+   * With `filterResourceType`, returns only the actions recorded with
+   * that resource_type, powering cascading-filter UIs (ADR-047 §2.5).
+   * Sorted alphabetically; cursor pagination via `pageAfter`.
+   */
+  async list(params = {}) {
+    const query = {};
+    if (params.filterResourceType !== void 0)
+      query["filter[resource_type]"] = params.filterResourceType;
+    if (params.pageSize !== void 0) query["page[size]"] = params.pageSize;
+    if (params.pageAfter !== void 0) query["page[after]"] = params.pageAfter;
+    const result = await this._http.GET("/api/v1/actions", {
+      params: { query }
+    });
+    if (!result.response.ok) await _throwForResponse(result.response);
+    if (result.data === void 0) throw new SmplError("Unexpected empty response from audit");
+    const body = result.data;
+    const actions = (body.data ?? []).map(
+      (r) => ({
+        id: r.id,
+        createdAt: String(r.attributes.created_at ?? "")
+      })
+    );
+    return { actions, nextCursor: _nextCursorFromLinks(body) };
   }
-  return base;
-}
-function throwForStatus(statusCode, body) {
-  const errors = parseJsonApiErrors(body);
-  const message = deriveMessage(errors, statusCode, body);
-  switch (statusCode) {
-    case 400:
-    case 422:
-      throw new SmplValidationError(message, statusCode, body, errors);
-    case 404:
-      throw new SmplNotFoundError(message, statusCode, body, errors);
-    case 409:
-      throw new SmplConflictError(message, statusCode, body, errors);
-    default:
-      throw new SmplError(message, statusCode, body, errors);
+};
+var AuditClient = class {
+  events;
+  resourceTypes;
+  actions;
+  constructor(opts) {
+    this.events = new EventsClient(opts);
+    this.resourceTypes = new ResourceTypesClient(this.events._http);
+    this.actions = new ActionsClient(this.events._http);
   }
-}
+  /** @internal */
+  async _close() {
+    await this.events._close();
+  }
+};
+
+// src/config/client.ts
+import createClient2 from "openapi-fetch";
 
 // src/config/resolve.ts
 function deepMerge(base, override) {
@@ -19954,6 +19750,177 @@ var LogGroupsClient = class {
   }
 };
 
+// src/management/audit.ts
+async function checkError4(response) {
+  const body = await response.text().catch(() => "");
+  throwForStatus(response.status, body);
+}
+function wrapFetchError4(err) {
+  if (err instanceof SmplError) throw err;
+  if (err instanceof TypeError) {
+    throw new SmplConnectionError(`Network error: ${err.message}`);
+  }
+  throw new SmplConnectionError(
+    `Request failed: ${err instanceof Error ? err.message : String(err)}`
+  );
+}
+function _nextCursorFromLinks2(body) {
+  const next = body.links?.next;
+  if (typeof next !== "string" || !next.includes("page[after]=")) return null;
+  return next.split("page[after]=")[1].split("&")[0];
+}
+function _httpToWire(http) {
+  return {
+    method: http.method,
+    url: http.url,
+    headers: http.headers.map((h) => ({ name: h.name, value: h.value })),
+    body: http.body,
+    success_status: http.successStatus
+  };
+}
+function _httpFromWire(raw) {
+  const r = raw ?? {};
+  const headers = (r.headers ?? []).map((h) => ({
+    name: String(h.name ?? ""),
+    value: String(h.value ?? "")
+  }));
+  return {
+    method: String(r.method ?? "POST"),
+    url: String(r.url ?? ""),
+    headers,
+    body: r.body ?? null,
+    successStatus: String(r.success_status ?? "2xx")
+  };
+}
+function _forwarderAttributes(input) {
+  const attrs = {
+    name: input.name,
+    forwarder_type: input.forwarderType,
+    enabled: input.enabled ?? true,
+    http: _httpToWire(input.http)
+  };
+  if (input.filter !== void 0) {
+    attrs.filter = input.filter;
+  }
+  if (input.transform !== void 0) attrs.transform = input.transform;
+  return attrs;
+}
+function _forwarderFromResource(resource) {
+  const a = resource.attributes;
+  return {
+    id: resource.id,
+    name: String(a.name ?? ""),
+    slug: String(a.slug ?? ""),
+    forwarderType: a.forwarder_type,
+    enabled: Boolean(a.enabled ?? true),
+    filter: a.filter ?? null,
+    transform: a.transform ?? null,
+    http: _httpFromWire(a.http),
+    createdAt: a.created_at ?? null,
+    updatedAt: a.updated_at ?? null,
+    deletedAt: a.deleted_at ?? null,
+    version: a.version ?? null
+  };
+}
+var ForwardersClient = class {
+  /** @internal */
+  constructor(_http) {
+    this._http = _http;
+  }
+  async create(input) {
+    const body = {
+      data: { id: "", type: "forwarder", attributes: _forwarderAttributes(input) }
+    };
+    let data;
+    try {
+      const result = await this._http.POST("/api/v1/forwarders", { body });
+      if (!result.response.ok) await checkError4(result.response);
+      data = result.data;
+    } catch (err) {
+      wrapFetchError4(err);
+    }
+    if (!data?.data) throw new SmplError("Unexpected empty response from audit");
+    return _forwarderFromResource(data.data);
+  }
+  async list(params = {}) {
+    const query = {};
+    if (params.forwarderType !== void 0) query["filter[forwarder_type]"] = params.forwarderType;
+    if (params.enabled !== void 0) query["filter[enabled]"] = params.enabled;
+    if (params.pageSize !== void 0) query["page[size]"] = params.pageSize;
+    if (params.pageAfter !== void 0) query["page[after]"] = params.pageAfter;
+    let data;
+    try {
+      const result = await this._http.GET("/api/v1/forwarders", {
+        params: { query }
+      });
+      if (!result.response.ok) await checkError4(result.response);
+      data = result.data;
+    } catch (err) {
+      wrapFetchError4(err);
+    }
+    return {
+      forwarders: (data?.data ?? []).map(_forwarderFromResource),
+      nextCursor: _nextCursorFromLinks2(data ?? {})
+    };
+  }
+  async get(forwarderId) {
+    let data;
+    try {
+      const result = await this._http.GET("/api/v1/forwarders/{forwarder_id}", {
+        params: { path: { forwarder_id: forwarderId } }
+      });
+      if (!result.response.ok) await checkError4(result.response);
+      data = result.data;
+    } catch (err) {
+      wrapFetchError4(err);
+    }
+    if (!data?.data) throw new SmplError("Unexpected empty response from audit");
+    return _forwarderFromResource(data.data);
+  }
+  /**
+   * Full-replace update. PUT semantics — every field is overwritten.
+   *
+   * Header values must be re-supplied as plaintext; the GET path
+   * returns them in plaintext for exactly this round-trip.
+   */
+  async update(forwarderId, input) {
+    const body = {
+      data: { id: forwarderId, type: "forwarder", attributes: _forwarderAttributes(input) }
+    };
+    let data;
+    try {
+      const result = await this._http.PUT("/api/v1/forwarders/{forwarder_id}", {
+        params: { path: { forwarder_id: forwarderId } },
+        body
+      });
+      if (!result.response.ok) await checkError4(result.response);
+      data = result.data;
+    } catch (err) {
+      wrapFetchError4(err);
+    }
+    if (!data?.data) throw new SmplError("Unexpected empty response from audit");
+    return _forwarderFromResource(data.data);
+  }
+  async delete(forwarderId) {
+    try {
+      const result = await this._http.DELETE("/api/v1/forwarders/{forwarder_id}", {
+        params: { path: { forwarder_id: forwarderId } }
+      });
+      if (result.response.status !== 204) await checkError4(result.response);
+    } catch (err) {
+      wrapFetchError4(err);
+    }
+  }
+};
+var ManagementAuditClient = class {
+  /** SIEM forwarder CRUD. */
+  forwarders;
+  /** @internal */
+  constructor(http) {
+    this.forwarders = new ForwardersClient(http);
+  }
+};
+
 // src/config.ts
 import { readFileSync } from "fs";
 import { homedir } from "os";
@@ -20095,11 +20062,11 @@ function splitContextId(idOrType, key) {
   }
   return [idOrType, key];
 }
-async function checkError4(response) {
+async function checkError5(response) {
   const body = await response.text().catch(() => "");
   throwForStatus(response.status, body);
 }
-function wrapFetchError4(err) {
+function wrapFetchError5(err) {
   if (err instanceof SmplError) throw err;
   if (err instanceof TypeError) {
     throw new SmplConnectionError(`Network error: ${err.message}`);
@@ -20182,10 +20149,10 @@ var EnvironmentsClient = class {
     let data;
     try {
       const result = await this._http.GET("/api/v1/environments", {});
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     const items = data?.data ?? [];
     return items.map((r) => envFromResource(r, this));
@@ -20196,10 +20163,10 @@ var EnvironmentsClient = class {
       const result = await this._http.GET("/api/v1/environments/{id}", {
         params: { path: { id } }
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data)
       throw new SmplNotFoundError(`Environment with id ${JSON.stringify(id)} not found`);
@@ -20211,10 +20178,10 @@ var EnvironmentsClient = class {
         params: { path: { id } }
       });
       if (!result.response.ok && result.response.status !== 204) {
-        await checkError4(result.response);
+        await checkError5(result.response);
       }
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
   }
   /** @internal */
@@ -20233,10 +20200,10 @@ var EnvironmentsClient = class {
     let data;
     try {
       const result = await this._http.POST("/api/v1/environments", { body });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data) throw new SmplValidationError("Failed to create environment");
     return envFromResource(data.data, this);
@@ -20261,10 +20228,10 @@ var EnvironmentsClient = class {
         params: { path: { id: env.id } },
         body
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data) throw new SmplValidationError(`Failed to update environment ${env.id}`);
     return envFromResource(data.data, this);
@@ -20293,10 +20260,10 @@ var ContextTypesClient = class {
     let data;
     try {
       const result = await this._http.GET("/api/v1/context_types", {});
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     const items = data?.data ?? [];
     return items.map((r) => ctFromResource(r, this));
@@ -20307,10 +20274,10 @@ var ContextTypesClient = class {
       const result = await this._http.GET("/api/v1/context_types/{id}", {
         params: { path: { id } }
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data)
       throw new SmplNotFoundError(`ContextType with id ${JSON.stringify(id)} not found`);
@@ -20322,10 +20289,10 @@ var ContextTypesClient = class {
         params: { path: { id } }
       });
       if (!result.response.ok && result.response.status !== 204) {
-        await checkError4(result.response);
+        await checkError5(result.response);
       }
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
   }
   /** @internal */
@@ -20343,10 +20310,10 @@ var ContextTypesClient = class {
     let data;
     try {
       const result = await this._http.POST("/api/v1/context_types", { body });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data) throw new SmplValidationError("Failed to create context type");
     return ctFromResource(data.data, this);
@@ -20370,10 +20337,10 @@ var ContextTypesClient = class {
         params: { path: { id: ct.id } },
         body
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data) throw new SmplValidationError(`Failed to update context type ${ct.id}`);
     return ctFromResource(data.data, this);
@@ -20449,9 +20416,9 @@ var ContextsClient = class {
           }))
         }
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
   }
   /** Number of contexts awaiting flush. */
@@ -20465,10 +20432,10 @@ var ContextsClient = class {
       const result = await this._http.GET("/api/v1/contexts", {
         params: { query: { "filter[context_type]": type } }
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     const items = data?.data ?? [];
     return items.map((r) => ctxFromResource(r, this));
@@ -20482,10 +20449,10 @@ var ContextsClient = class {
       const result = await this._http.GET("/api/v1/contexts/{id}", {
         params: { path: { id: composite } }
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data)
       throw new SmplNotFoundError(`Context with id ${JSON.stringify(composite)} not found`);
@@ -20500,10 +20467,10 @@ var ContextsClient = class {
         params: { path: { id: composite } }
       });
       if (!result.response.ok && result.response.status !== 204) {
-        await checkError4(result.response);
+        await checkError5(result.response);
       }
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
   }
   /** @internal — called by `Context.save()`. */
@@ -20530,10 +20497,10 @@ var ContextsClient = class {
         params: { path: { id: ctx.id } },
         body
       });
-      if (!result.response.ok) await checkError4(result.response);
+      if (!result.response.ok) await checkError5(result.response);
       data = result.data;
     } catch (err) {
-      wrapFetchError4(err);
+      wrapFetchError5(err);
     }
     if (!data?.data) throw new SmplValidationError(`Failed to save context ${ctx.id}`);
     return ctxFromResource(data.data, this);
@@ -20607,6 +20574,8 @@ var SmplManagementClient = class {
   loggers;
   /** Log group CRUD. */
   logGroups;
+  /** Audit SIEM forwarder CRUD. */
+  audit;
   /** @internal — shared HTTP transports (so SmplClient can alias them). */
   _appHttp;
   /** @internal */
@@ -20626,6 +20595,7 @@ var SmplManagementClient = class {
     this.flags = this._flagsRef;
     this.loggers = this._loggersRef;
     this.logGroups = this._logGroupsRef;
+    this.audit = this._auditRef;
     this._appHttp = this._appHttpRef;
     this._configHttp = this._configHttpRef;
     this._flagsHttp = this._flagsHttpRef;
@@ -20641,6 +20611,7 @@ var SmplManagementClient = class {
   _flagsRef;
   _loggersRef;
   _logGroupsRef;
+  _auditRef;
   _appHttpRef;
   _configHttpRef;
   _flagsHttpRef;
@@ -20651,10 +20622,16 @@ var SmplManagementClient = class {
     const configBaseUrl = serviceUrl(cfg.scheme, "config", cfg.baseDomain);
     const flagsBaseUrl = serviceUrl(cfg.scheme, "flags", cfg.baseDomain);
     const loggingBaseUrl = serviceUrl(cfg.scheme, "logging", cfg.baseDomain);
+    const auditBaseUrl = serviceUrl(cfg.scheme, "audit", cfg.baseDomain);
     const headers = {
       Authorization: `Bearer ${cfg.apiKey}`,
       Accept: "application/json"
     };
+    const auditHeaders = {
+      Authorization: `Bearer ${cfg.apiKey}`,
+      Accept: "application/vnd.api+json",
+      "Content-Type": "application/vnd.api+json"
+    };
     this._appHttpRef = createClient3({
       baseUrl: appBaseUrl,
       headers
@@ -20671,6 +20648,10 @@ var SmplManagementClient = class {
       baseUrl: loggingBaseUrl,
       headers
     });
+    const auditHttpRef = createClient3({
+      baseUrl: auditBaseUrl,
+      headers: auditHeaders
+    });
     this._sharedContextBuffer = new ContextRegistrationBuffer();
     this._environmentsRef = new EnvironmentsClient(this._appHttpRef);
     this._contextTypesRef = new ContextTypesClient(this._appHttpRef);
@@ -20680,6 +20661,7 @@ var SmplManagementClient = class {
     this._flagsRef = new ManagementFlagsClient(this._flagsHttpRef);
     this._loggersRef = new LoggersClient(this._loggingHttpRef);
     this._logGroupsRef = new LogGroupsClient(this._loggingHttpRef);
+    this._auditRef = new ManagementAuditClient(auditHttpRef);
   }
   /** @internal — used by SmplClient to share the buffer. */
   get _contextBuffer() {
@@ -20703,11 +20685,11 @@ var CACHE_MAX_SIZE = 1e4;
 var CONTEXT_BATCH_FLUSH_SIZE2 = 100;
 var FLAG_REGISTRATION_FLUSH_SIZE2 = 50;
 var FLAG_REGISTRATION_FLUSH_INTERVAL_MS = 3e4;
-async function checkError5(response, _context) {
+async function checkError6(response, _context) {
   const body = await response.text().catch(() => "");
   throwForStatus(response.status, body);
 }
-function wrapFetchError5(err) {
+function wrapFetchError6(err) {
   if (err instanceof SmplNotFoundError || err instanceof SmplConflictError || err instanceof SmplValidationError || err instanceof SmplError) {
     throw err;
   }
@@ -21483,10 +21465,10 @@ var FlagsClient = class {
     let data;
     try {
       const result = await this._http.GET("/api/v1/flags", {});
-      if (!result.response.ok) await checkError5(result.response, "Failed to list flags");
+      if (!result.response.ok) await checkError6(result.response, "Failed to list flags");
       data = result.data;
     } catch (err) {
-      wrapFetchError5(err);
+      wrapFetchError6(err);
     }
     if (!data) return [];
     const flags = data.data.map((r) => this._resourceToPlainDict(r));
@@ -22951,6 +22933,7 @@ export {
   AccountSettings,
   AccountSettingsClient,
   AuditClient,
+  ForwardersClient as AuditForwardersClient,
   BooleanFlag,
   Color,
   Config,
@@ -22982,6 +22965,7 @@ export {
   LoggerEnvironment,
   LoggerSource,
   LoggingClient,
+  ManagementAuditClient,
   NumberFlag,
   Op,
   PinoAdapter,
@@ -22993,12 +22977,14 @@ export {
   SmplError,
   SmplManagementClient,
   SmplNotFoundError,
+  SmplPaymentRequiredError,
   SmplTimeoutError,
   SmplValidationError,
   SmplConflictError as SmplkitConflictError,
   SmplConnectionError as SmplkitConnectionError,
   SmplError as SmplkitError,
   SmplNotFoundError as SmplkitNotFoundError,
+  SmplPaymentRequiredError as SmplkitPaymentRequiredError,
   SmplTimeoutError as SmplkitTimeoutError,
   SmplValidationError as SmplkitValidationError,
   StringFlag,