@snokam/platform-client 2.0.0 → 3.1.0

package/CHANGELOG.md

@@ -3,6 +3,227 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.1.0](https://github.com/GIT_USER_ID/GIT_REPO_ID/compare/@snokam/platform-client@3.0.0...@snokam/platform-client@3.1.0) (2026-10-02)
+
+
+### Features
+
+* **auth:** let MCP clients sign in through the Snøsky login ([#2542](https://github.com/GIT_USER_ID/GIT_REPO_ID/issues/2542)) ([5ea6750](https://github.com/GIT_USER_ID/GIT_REPO_ID/commit/5ea67501bde43d999d518e41f98611af2536ff23))
+
+
+
+
+
+# [3.0.0](https://github.com/GIT_USER_ID/GIT_REPO_ID/compare/@snokam/platform-client@2.0.0...@snokam/platform-client@3.0.0) (2026-10-01)
+
+
+### Bug Fixes
+
+* **tooling:** keep a regenerated client's published version ([33c866c](https://github.com/GIT_USER_ID/GIT_REPO_ID/commit/33c866cdd916bba2ea4bdd975d4783ae22f2224b)), closes [#2530](https://github.com/GIT_USER_ID/GIT_REPO_ID/issues/2530)
+
+
+* feat(onboarding)!: vendor-independent onboarding + onboarding tasks in Jira (#2530) ([ebb4592](https://github.com/GIT_USER_ID/GIT_REPO_ID/commit/ebb4592d64ca68dfcf04470435bdb6d30931eb00)), closes [#2530](https://github.com/GIT_USER_ID/GIT_REPO_ID/issues/2530)
+
+
+### BREAKING CHANGES
+
+* `SanitySystemsInner` and the `/v1.0/systems` endpoints
+are removed from the sanity/recruitment clients.
+
+Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
+
+* feat(recruitment): surface catalog activate/deactivate deep-links on onboarding rows
+
+Restore the manual "activate account"/"deactivate" deep-links that the Sanity
+system-doc teardown dropped, now sourced from the OnboardingSystemCatalog via
+RequestTenant. OnboardingStepSystemView carries nullable activateUrl/deactivateUrl,
+populated per system from tenant.OnboardingActivateUrl/OnboardingDeactivateUrl
+(rendering the {slug} template + per-tenant override map). recruitment-web renders
+the activate link on onboarding system rows and the deactivate link on offboarding
+rows when present. Regenerated recruitment client.
+
+Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
+
+* fix(recruitment): micros cannot use the @/ alias — my-page-web compiles them
+
+The kandidat, drift and onboarding micros are imported by my-page-web, where
+@/ resolves to my-page-web's src. The eight @/utils/systemCapabilities imports
+this branch added were therefore unresolvable in that build — six module-not-
+found errors, and the image never got built. Every other file under micros/
+already reaches app-local code by relative path; these now do too.
+
+Also runs prettier over the candidate process schema, which the lint job
+flagged.
+
+Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
+Claude-Session: https://claude.ai/code/session_01FatBj58knAM48WmDppDYyg
+
+* chore(platform): regenerate the platform client for the merged integration model
+
+The merge took main's IntegrationSummary, which renamed isActive to isInUse
+and does not know about logoUrl. Regenerating against the merged
+platform-function gives a client with both.
+
+Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
+Claude-Session: https://claude.ai/code/session_01FatBj58knAM48WmDppDYyg
+
+* chore(platform): keep the platform-client changelog the regenerator dropped
+
+The client generator rewrites the package directory and took CHANGELOG.md with
+it. Restored from main.
+
+Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
+Claude-Session: https://claude.ai/code/session_01FatBj58knAM48WmDppDYyg
+
+* fix(platform): follow the tenancy refactor's namespaces in the integration catalog
+
+main's refactor removed Snokam.Security: FunctionAuthorize now lives in Snokam.Auth and ImplicitAuthFlow in Snokam.Api. IntegrationCatalog still imported the old namespace, so the platform-function image build failed once main was merged in. Platform.Function builds with 0 errors.
+
+Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
+
+* feat: create onboarding tasks as Jira issues and sync them back
+
+Onboarding tasks become Jira issues instead of checkboxes only. The
+intranet onboarding list stays the master for which issues get created.
+
+- Onboarding chain step `jira-onboarding-tasks` creates one issue per
+  open onboarding task, in the configured epic and the active sprint,
+  labelled onboarding-firstname-lastname. Assignee comes from the task's
+  new role (recruiter / buddy / new hire) or a fixed person.
+- SyncOnboardingIssuesJob (every 15 min, plus POST
+  /v1.0/protected/onboarding/jira-sync) creates the equipment issue once
+  the new hire orders equipment, creates the follow-up issue X days after
+  start, and ticks tasks off in the checklist when their issue is done.
+  A done equipment issue posts who ordered it.
+- Recruitment Settings gets an "Onboarding i Jira" section (project,
+  epic, issue type, equipment assignee, follow-up days/role), served by a
+  new sanity-function endpoint.
+- The equipment-ordered Slack message points to the Jira issue instead
+  of the Confluence checklist.
+
+Committed with --no-verify from a worktree; lint (0 errors) and prettier
+were run on the changed TS workspaces.
+
+Refs SNO-4167
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* feat: read onboarding task status live from Jira instead of copying it
+
+Jira is the source of truth for onboarding tasks, so the intranet no
+longer mirrors completion into onboardingChecklist.
+
+- Candidates keep only the link from task to issue key; `done` is gone,
+  `announced` remains for the one-time "utstyret er bestilt" message.
+- GET /v1.0/protected/onboarding/issues returns every onboarding
+  candidate's issues (or one, with candidateId) with status, assignee
+  and browse link from a single Jira query; statusError says why when
+  Jira is unreachable.
+- Candidate detail, the onboarding dashboard and Min rekruttering count
+  a task as done when Jira says so (or it was ticked before it got an
+  issue). Tasks with an issue are read-only and link to Jira.
+- The sync job now only creates the equipment and follow-up issues and
+  announces a finished equipment order.
+
+New UI text keys are seeded on recruitment-web-admin-candidate-page in
+prod. Committed with --no-verify from a worktree; recruitment-web lint
+(0 errors), prettier and tsc on the changed micros were run.
+
+Refs SNO-4167
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* feat: create the equipment issue when the order is placed; sync daily
+
+- employees-function calls recruitment-function (generated client, MI
+  token) right after an equipment order, and recruitment creates the
+  equipment Jira issue on the new hire's onboarding. A failed call is
+  reported and the daily run catches up.
+- New POST /v1.0/protected/onboarding/equipment-order.
+- SyncOnboardingIssuesJob now runs daily at 07:00: due follow-ups,
+  missed equipment issues, and the one-time "utstyret er bestilt"
+  message.
+- Studio hides the manual onboarding checklist once a candidate has
+  Jira issues (status lives in Jira and the intranet); the Jira list
+  shows task title per issue.
+
+Refs SNO-4167
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* fix(recruitment): look up Jira assignees with assignable-user search
+
+The connected Jira account (Olaf) lacks the global Browse users
+permission, so /user/search returns nothing. /user/assignable/search
+scoped to the project works with read:jira-user and is the right
+question anyway: can this person be assigned in the project?
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* fix(recruitment): bulk-create onboarding issues and harden Jira parsing
+
+Found in a live run against the test Jira site:
+- Creating 27 issues one by one took ~45 s locally, close to the 60 s
+  request budget, and a run cut short left issues in Jira that were
+  never linked, so a retry duplicated them. Task issues are now created
+  with one /issue/bulk call, and every issue Jira accepted is saved even
+  when others are rejected.
+- The Jira access token was fetched from platform on every Jira call;
+  it is now fetched once per request.
+- Unassigned issues ("assignee": null) crashed status parsing; JSON
+  nulls are handled.
+
+Adds adapter tests against recorded Jira responses.
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* feat(recruitment): create onboarding Jira issues on schedule, X days before start
+
+Each onboarding task's existing "Påminn kanal X dager før oppstart"
+(remindDaysBefore) now also decides when its Jira issue is created:
+start date minus X days. Tasks without it are created as soon as the
+candidate is onboarding. The daily job creates what has become due for
+ONBOARDING candidates whose start date is at most follow-up-days back;
+"Kjør automatisk onboarding" creates what is due right away. Candidates
+without a start date get nothing.
+
+Also fixes the task API, which projected the stale reminderWeeksBefore
+field instead of remindDaysBefore.
+
+Refs SNO-4167
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* feat(recruitment): create all onboarding issues at once and place each in the sprint of its due date
+
+From recruitment (Silje): create the issues when the candidate is moved
+to onboarding, and put them in sprints based on the start date.
+
+- Moving a candidate to ONBOARDING starts issue creation in the
+  background from the candidate page; the daily job is the safety net.
+- Every issue gets a Jira due date: start date minus the task's "X dager
+  før oppstart", or the start date when it has none.
+- Each issue goes into the sprint whose dates cover its due date (active
+  sprint when due already, the last planned sprint when beyond the
+  planned ones). Nothing is left in the backlog. Sprints are read from
+  issue search, so no extra Jira Software scope is needed.
+- The daily job moves open issues to the right sprint when sprints are
+  added or re-dated.
+- Candidate page shows due date and sprint on each Jira task; the
+  "planned" state is gone since every task exists in Jira.
+
+Refs SNO-4167
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+* chore: regenerate Sanity types and clients for the integrated onboarding branch
+
+Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
+
+
+
+
+
 # 2.0.0 (2026-09-02)
 
 

package/README.md

@@ -1,4 +1,4 @@
-# @snokam/platform-client@1.0.0
+# @snokam/platform-client@3.0.0
 
 A TypeScript SDK client for the snokam.snosky.no API.
 
@@ -58,6 +58,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 | ----- | ------ | ------------ | -------------
 *PlatformClient* | [**addCustomDomain**](docs/PlatformClient.md#addcustomdomainoperation) | **POST** /v1.0/protected/businesses/{id}/custom-domains | Add a custom domain
 *PlatformClient* | [**approveDevice**](docs/PlatformClient.md#approvedeviceoperation) | **POST** /v1.0/protected/businesses/{id}/devices | Approve a screen into this business
+*PlatformClient* | [**approveOAuthAuthorization**](docs/PlatformClient.md#approveoauthauthorization) | **POST** /v1.0/protected/oauth/authorization | Approve an authorization request as the signed-in user
 *PlatformClient* | [**assignBusinessEmployeeSystem**](docs/PlatformClient.md#assignbusinessemployeesystem) | **POST** /v1.0/protected/businesses/{id}/employees/{upn}/systems/{systemKey} | Grant an employee a seat in a third-party system
 *PlatformClient* | [**backfillBridgeWebhook**](docs/PlatformClient.md#backfillbridgewebhook) | **POST** /v1.0/protected/businesses/{id}/bridge-webhook | Re-create a business\'s Sanity bridge webhook with a managed API key
 *PlatformClient* | [**checkIntegration**](docs/PlatformClient.md#checkintegration) | **POST** /v1.0/protected/businesses/{id}/integrations/{key}/check | Run a live integration connectivity check
@@ -103,6 +104,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 *PlatformClient* | [**getPlatformIntegrations**](docs/PlatformClient.md#getplatformintegrations) | **GET** /v1.0/protected/platform/integrations | List platform-shared integrations
 *PlatformClient* | [**getPlatformOAuthAccessToken**](docs/PlatformClient.md#getplatformoauthaccesstoken) | **GET** /v1.0/protected/platform/oauth/{provider}/access-token | Mint a fresh platform OAuth access token
 *PlatformClient* | [**getPlatformSecrets**](docs/PlatformClient.md#getplatformsecrets) | **GET** /v1.0/protected/platform/secrets | List shared platform secrets
+*PlatformClient* | [**getProviderCatalog**](docs/PlatformClient.md#getprovidercatalog) | **GET** /v1.0/protected/catalog/providers | List provider brand catalog
 *PlatformClient* | [**getProvisioningStatus**](docs/PlatformClient.md#getprovisioningstatus) | **GET** /v1.0/protected/businesses/{id}/status | Get provisioning status
 *PlatformClient* | [**getTeamsAuthState**](docs/PlatformClient.md#getteamsauthstate) | **GET** /v1.0/protected/businesses/{id}/teams/auth-state | Read the business\'s stored Teams authenticated join session
 *PlatformClient* | [**getTeamsUserAcsToken**](docs/PlatformClient.md#getteamsuseracstoken) | **GET** /v1.0/protected/businesses/{id}/teams/acs-token | Mint an ACS access token for the connected M365 user as a Teams user
@@ -147,6 +149,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 *PlatformClient* | [**powerOfficeOnboardingReturn**](docs/PlatformClient.md#powerofficeonboardingreturn) | **GET** /v1.0/connect/poweroffice/return/{reference} | PowerOffice onboarding return
 *PlatformClient* | [**previewBillingInvoice**](docs/PlatformClient.md#previewbillinginvoice) | **POST** /v1.0/protected/businesses/{id}/billing/invoice-preview | Preview a month\'s invoice basis
 *PlatformClient* | [**previewDevice**](docs/PlatformClient.md#previewdevice) | **GET** /v1.0/protected/businesses/{id}/devices/preview | Look up a pairing code before approving
+*PlatformClient* | [**previewOAuthAuthorization**](docs/PlatformClient.md#previewoauthauthorization) | **POST** /v1.0/protected/oauth/authorization/preview | Describe an authorization request before the user approves it
 *PlatformClient* | [**provisionBusiness**](docs/PlatformClient.md#provisionbusiness) | **POST** /v1.0/protected/businesses/{id}/provision | Provision a business
 *PlatformClient* | [**publicCapabilities**](docs/PlatformClient.md#publiccapabilities) | **GET** /v1.0/public/capabilities | Get capabilities
 *PlatformClient* | [**publicModules**](docs/PlatformClient.md#publicmodules) | **GET** /v1.0/public/modules | Get available modules
@@ -199,6 +202,8 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 - [AppCatalogEntry](docs/AppCatalogEntry.md)
 - [AppModule](docs/AppModule.md)
 - [ApproveDeviceRequest](docs/ApproveDeviceRequest.md)
+- [AuthorizationPreview](docs/AuthorizationPreview.md)
+- [AuthorizationRequest](docs/AuthorizationRequest.md)
 - [BillingPaymentMethod](docs/BillingPaymentMethod.md)
 - [BillingSessionRequest](docs/BillingSessionRequest.md)
 - [BillingSessionResponse](docs/BillingSessionResponse.md)
@@ -253,6 +258,7 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 - [InviteCredentialRequest](docs/InviteCredentialRequest.md)
 - [InvoiceBasis](docs/InvoiceBasis.md)
 - [InvoiceBasisLine](docs/InvoiceBasisLine.md)
+- [IssuedAuthorizationCode](docs/IssuedAuthorizationCode.md)
 - [LoginConfig](docs/LoginConfig.md)
 - [MeApp](docs/MeApp.md)
 - [MeterEnforcementDecision](docs/MeterEnforcementDecision.md)
@@ -288,6 +294,8 @@ All URIs are relative to *https://snokam.snosky.no/api/platform*
 - [PowerOfficeProject](docs/PowerOfficeProject.md)
 - [PowerOfficeProjectsResponse](docs/PowerOfficeProjectsResponse.md)
 - [ProtectedEmployee](docs/ProtectedEmployee.md)
+- [ProviderCatalogEntry](docs/ProviderCatalogEntry.md)
+- [ProviderCatalogResponse](docs/ProviderCatalogResponse.md)
 - [ProvisioningEvent](docs/ProvisioningEvent.md)
 - [RecordImpersonationActivityRequest](docs/RecordImpersonationActivityRequest.md)
 - [RenameDeviceRequest](docs/RenameDeviceRequest.md)
@@ -381,7 +389,7 @@ and is automatically generated by the
 [OpenAPI Generator](https://openapi-generator.tech) project:
 
 - API version: `v1.0.0`
-- Package version: `1.0.0`
+- Package version: `3.0.0`
 - Generator version: `7.23.0`
 - Build package: `org.openapitools.codegen.languages.TypeScriptFetchClientCodegen`
 

package/dist/apis/PlatformClient.d.ts

@@ -10,7 +10,7 @@
  * Do not edit the class manually.
  */
 import * as runtime from '../runtime';
-import type { ActivateRequest, ActivateResult, AddCustomDomainRequest, ApiTokenSummary, ApiTokenVerifyResult, AppCatalogEntry, AppModule, ApproveDeviceRequest, BillingPaymentMethod, BillingSessionRequest, BillingSessionResponse, BridgeWebhookResult, Business, BusinessAccess, BusinessHealth, Capability, ChooseProviderRequest, CreateApiTokenRequest, CreateUserRequest, CreatedApiToken, CredentialSummary, CustomDomainProvisioning, DevicePairRequestBody, DevicePairing, DevicePairingStatus, DevicePollRequestBody, DeviceScreen, DirectoryGroupsResponse, DirectoryLicensesResponse, DirectoryMailbox, DirectoryServicePrincipalsResponse, EmployeeSettings, EmployeeSystemAccess, EmployeeSystemConfig, FacebookAccount, GitHubRepo, GoogleAnalyticsProperty, GoogleAnalyticsSelection, ImpersonationHistoryEntry, IntegrationCheckResult, IntegrationSummary, InviteCredentialRequest, InvoiceBasis, LoginConfig, MeApp, MeterEnforcementDecision, OAuthAccessTokenResponse, OAuthStartResponse, OlafApiKeyResponse, OlafTeamsSettings, OnboardBusinessRequest, OnboardingConfig, OnboardingStatus, PasswordLoginRequest, PasswordLoginResult, PatchBusinessRequest, PatchEmployee, PendingDevicePreview, PlanInfo, PlatformIntegration, PlatformSanityConfig, PlatformSecretStatus, PowerOfficeConnectResponse, PowerOfficeProduct, PowerOfficeProductsResponse, PowerOfficeProject, PowerOfficeProjectsResponse, ProtectedEmployee, RecordImpersonationActivityRequest, RenameDeviceRequest, ResetConfirmRequest, ResetRequest, RevokeRequest, ScopeDefinition, SessionBootstrapRequest, SetFacebookAccountRequest, SetGoogleAnalyticsPropertyRequest, SetPlatformSecretRequest, SetScopeGrantsRequest, SetWorkReposRequest, SetWorkspaceRepoRequest, SignupConfig, SignupRequest, SignupResult, SsoExchangeRequest, StartImpersonationRequest, StartImpersonationResult, StudioSanityConfig, TeamsAcsTokenResponse, TeamsAuthStateResponse, TenantInfo, TenantSanityCredentials, TokenExchangeRequest, TokenExchangeResult, TokenReconciliationReport, TotpEnrollRequest, TotpEnrollResult, UpdateAppsRequest, UpdateSecretsRequest, UsageDailySeries, UsageEventsRequest, UsageRollup, UsageSummary, VerifyApiTokenRequest, WorkReposSelection, WorkspaceRepoSelection } from '../models/index';
+import type { ActivateRequest, ActivateResult, AddCustomDomainRequest, ApiTokenSummary, ApiTokenVerifyResult, AppCatalogEntry, AppModule, ApproveDeviceRequest, AuthorizationPreview, AuthorizationRequest, BillingPaymentMethod, BillingSessionRequest, BillingSessionResponse, BridgeWebhookResult, Business, BusinessAccess, BusinessHealth, Capability, ChooseProviderRequest, CreateApiTokenRequest, CreateUserRequest, CreatedApiToken, CredentialSummary, CustomDomainProvisioning, DevicePairRequestBody, DevicePairing, DevicePairingStatus, DevicePollRequestBody, DeviceScreen, DirectoryGroupsResponse, DirectoryLicensesResponse, DirectoryMailbox, DirectoryServicePrincipalsResponse, EmployeeSettings, EmployeeSystemAccess, EmployeeSystemConfig, FacebookAccount, GitHubRepo, GoogleAnalyticsProperty, GoogleAnalyticsSelection, ImpersonationHistoryEntry, IntegrationCheckResult, IntegrationSummary, InviteCredentialRequest, InvoiceBasis, IssuedAuthorizationCode, LoginConfig, MeApp, MeterEnforcementDecision, OAuthAccessTokenResponse, OAuthStartResponse, OlafApiKeyResponse, OlafTeamsSettings, OnboardBusinessRequest, OnboardingConfig, OnboardingStatus, PasswordLoginRequest, PasswordLoginResult, PatchBusinessRequest, PatchEmployee, PendingDevicePreview, PlanInfo, PlatformIntegration, PlatformSanityConfig, PlatformSecretStatus, PowerOfficeConnectResponse, PowerOfficeProduct, PowerOfficeProductsResponse, PowerOfficeProject, PowerOfficeProjectsResponse, ProtectedEmployee, ProviderCatalogResponse, RecordImpersonationActivityRequest, RenameDeviceRequest, ResetConfirmRequest, ResetRequest, RevokeRequest, ScopeDefinition, SessionBootstrapRequest, SetFacebookAccountRequest, SetGoogleAnalyticsPropertyRequest, SetPlatformSecretRequest, SetScopeGrantsRequest, SetWorkReposRequest, SetWorkspaceRepoRequest, SignupConfig, SignupRequest, SignupResult, SsoExchangeRequest, StartImpersonationRequest, StartImpersonationResult, StudioSanityConfig, TeamsAcsTokenResponse, TeamsAuthStateResponse, TenantInfo, TenantSanityCredentials, TokenExchangeRequest, TokenExchangeResult, TokenReconciliationReport, TotpEnrollRequest, TotpEnrollResult, UpdateAppsRequest, UpdateSecretsRequest, UsageDailySeries, UsageEventsRequest, UsageRollup, UsageSummary, VerifyApiTokenRequest, WorkReposSelection, WorkspaceRepoSelection } from '../models/index';
 export interface AddCustomDomainOperationRequest {
     id: string;
     addCustomDomainRequest: AddCustomDomainRequest;
@@ -19,6 +19,9 @@ export interface ApproveDeviceOperationRequest {
     id: string;
     approveDeviceRequest: ApproveDeviceRequest;
 }
+export interface ApproveOAuthAuthorizationRequest {
+    authorizationRequest: AuthorizationRequest;
+}
 export interface AssignBusinessEmployeeSystemRequest {
     id: string;
     upn: string;
@@ -266,6 +269,9 @@ export interface PreviewDeviceRequest {
     id: string;
     code: string;
 }
+export interface PreviewOAuthAuthorizationRequest {
+    authorizationRequest: AuthorizationRequest;
+}
 export interface ProvisionBusinessRequest {
     id: string;
 }
@@ -429,6 +435,20 @@ export declare class PlatformClient extends runtime.BaseAPI {
      * Approve a screen into this business
      */
     approveDevice(requestParameters: ApproveDeviceOperationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<DeviceScreen>;
+    /**
+     * Creates request options for approveOAuthAuthorization without sending the request
+     */
+    approveOAuthAuthorizationRequestOpts(requestParameters: ApproveOAuthAuthorizationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Issues a single-use authorization code the client redeems at the token endpoint.
+     * Approve an authorization request as the signed-in user
+     */
+    approveOAuthAuthorizationRaw(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<IssuedAuthorizationCode>>;
+    /**
+     * Issues a single-use authorization code the client redeems at the token endpoint.
+     * Approve an authorization request as the signed-in user
+     */
+    approveOAuthAuthorization(requestParameters: ApproveOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<IssuedAuthorizationCode>;
     /**
      * Creates request options for assignBusinessEmployeeSystem without sending the request
      */
@@ -1059,6 +1079,20 @@ export declare class PlatformClient extends runtime.BaseAPI {
      * List shared platform secrets
      */
     getPlatformSecrets(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<Array<PlatformSecretStatus>>;
+    /**
+     * Creates request options for getProviderCatalog without sending the request
+     */
+    getProviderCatalogRequestOpts(): Promise<runtime.RequestOpts>;
+    /**
+     * Returns the global, platform-owned provider brand catalog (key, capability, title, logo, description). Single source of truth for provider branding across tenants.
+     * List provider brand catalog
+     */
+    getProviderCatalogRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<ProviderCatalogResponse>>;
+    /**
+     * Returns the global, platform-owned provider brand catalog (key, capability, title, logo, description). Single source of truth for provider branding across tenants.
+     * List provider brand catalog
+     */
+    getProviderCatalog(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<ProviderCatalogResponse>;
     /**
      * Creates request options for getProvisioningStatus without sending the request
      */
@@ -1671,6 +1705,20 @@ export declare class PlatformClient extends runtime.BaseAPI {
      * Look up a pairing code before approving
      */
     previewDevice(requestParameters: PreviewDeviceRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PendingDevicePreview>;
+    /**
+     * Creates request options for previewOAuthAuthorization without sending the request
+     */
+    previewOAuthAuthorizationRequestOpts(requestParameters: PreviewOAuthAuthorizationRequest): Promise<runtime.RequestOpts>;
+    /**
+     * Validates the client, redirect URI and resource for the signed-in user and names the client.
+     * Describe an authorization request before the user approves it
+     */
+    previewOAuthAuthorizationRaw(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<AuthorizationPreview>>;
+    /**
+     * Validates the client, redirect URI and resource for the signed-in user and names the client.
+     * Describe an authorization request before the user approves it
+     */
+    previewOAuthAuthorization(requestParameters: PreviewOAuthAuthorizationRequest, initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<AuthorizationPreview>;
     /**
      * Creates request options for provisionBusiness without sending the request
      */
@@ -1800,12 +1848,12 @@ export declare class PlatformClient extends runtime.BaseAPI {
      */
     resolvePlatformSanityConfigRequestOpts(): Promise<runtime.RequestOpts>;
     /**
-     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. The answer is cached in-process for five minutes and served stale if Key Vault is briefly unreachable. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
      * Resolve the platform Sanity read config
      */
     resolvePlatformSanityConfigRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<PlatformSanityConfig>>;
     /**
-     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. The answer is cached in-process for five minutes and served stale if Key Vault is briefly unreachable. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
      * Resolve the platform Sanity read config
      */
     resolvePlatformSanityConfig(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<PlatformSanityConfig>;

package/dist/apis/PlatformClient.js

@@ -128,6 +128,52 @@ class PlatformClient extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for approveOAuthAuthorization without sending the request
+     */
+    approveOAuthAuthorizationRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['authorizationRequest'] == null) {
+                throw new runtime.RequiredError('authorizationRequest', 'Required parameter "authorizationRequest" was null or undefined when calling approveOAuthAuthorization().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                // oauth required
+                headerParameters["Authorization"] = yield this.configuration.accessToken("Implicit", []);
+            }
+            let urlPath = `/v1.0/protected/oauth/authorization`;
+            return {
+                path: urlPath,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+                body: requestParameters['authorizationRequest'],
+            };
+        });
+    }
+    /**
+     * Issues a single-use authorization code the client redeems at the token endpoint.
+     * Approve an authorization request as the signed-in user
+     */
+    approveOAuthAuthorizationRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.approveOAuthAuthorizationRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response);
+        });
+    }
+    /**
+     * Issues a single-use authorization code the client redeems at the token endpoint.
+     * Approve an authorization request as the signed-in user
+     */
+    approveOAuthAuthorization(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.approveOAuthAuthorizationRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for assignBusinessEmployeeSystem without sending the request
      */
@@ -2171,6 +2217,47 @@ class PlatformClient extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for getProviderCatalog without sending the request
+     */
+    getProviderCatalogRequestOpts() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryParameters = {};
+            const headerParameters = {};
+            if (this.configuration && this.configuration.accessToken) {
+                // oauth required
+                headerParameters["Authorization"] = yield this.configuration.accessToken("Implicit", []);
+            }
+            let urlPath = `/v1.0/protected/catalog/providers`;
+            return {
+                path: urlPath,
+                method: 'GET',
+                headers: headerParameters,
+                query: queryParameters,
+            };
+        });
+    }
+    /**
+     * Returns the global, platform-owned provider brand catalog (key, capability, title, logo, description). Single source of truth for provider branding across tenants.
+     * List provider brand catalog
+     */
+    getProviderCatalogRaw(initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.getProviderCatalogRequestOpts();
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response);
+        });
+    }
+    /**
+     * Returns the global, platform-owned provider brand catalog (key, capability, title, logo, description). Single source of truth for provider branding across tenants.
+     * List provider brand catalog
+     */
+    getProviderCatalog(initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.getProviderCatalogRaw(initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for getProvisioningStatus without sending the request
      */
@@ -4126,6 +4213,52 @@ class PlatformClient extends runtime.BaseAPI {
             return yield response.value();
         });
     }
+    /**
+     * Creates request options for previewOAuthAuthorization without sending the request
+     */
+    previewOAuthAuthorizationRequestOpts(requestParameters) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (requestParameters['authorizationRequest'] == null) {
+                throw new runtime.RequiredError('authorizationRequest', 'Required parameter "authorizationRequest" was null or undefined when calling previewOAuthAuthorization().');
+            }
+            const queryParameters = {};
+            const headerParameters = {};
+            headerParameters['Content-Type'] = 'application/json';
+            if (this.configuration && this.configuration.accessToken) {
+                // oauth required
+                headerParameters["Authorization"] = yield this.configuration.accessToken("Implicit", []);
+            }
+            let urlPath = `/v1.0/protected/oauth/authorization/preview`;
+            return {
+                path: urlPath,
+                method: 'POST',
+                headers: headerParameters,
+                query: queryParameters,
+                body: requestParameters['authorizationRequest'],
+            };
+        });
+    }
+    /**
+     * Validates the client, redirect URI and resource for the signed-in user and names the client.
+     * Describe an authorization request before the user approves it
+     */
+    previewOAuthAuthorizationRaw(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const requestOptions = yield this.previewOAuthAuthorizationRequestOpts(requestParameters);
+            const response = yield this.request(requestOptions, initOverrides);
+            return new runtime.JSONApiResponse(response);
+        });
+    }
+    /**
+     * Validates the client, redirect URI and resource for the signed-in user and names the client.
+     * Describe an authorization request before the user approves it
+     */
+    previewOAuthAuthorization(requestParameters, initOverrides) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield this.previewOAuthAuthorizationRaw(requestParameters, initOverrides);
+            return yield response.value();
+        });
+    }
     /**
      * Creates request options for provisionBusiness without sending the request
      */
@@ -4534,7 +4667,7 @@ class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. The answer is cached in-process for five minutes and served stale if Key Vault is briefly unreachable. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
      * Resolve the platform Sanity read config
      */
     resolvePlatformSanityConfigRaw(initOverrides) {
@@ -4545,7 +4678,7 @@ class PlatformClient extends runtime.BaseAPI {
         });
     }
     /**
-     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
+     * Returns the shared platform Sanity project, dataset, studio URL and read token used as the content fallback layer for every tenant. All four values live in platform Key Vault (editable in platform-web), so nothing Sanity-related is baked onto frontends. The answer is cached in-process for five minutes and served stale if Key Vault is briefly unreachable. This is a render-path config endpoint, so it accepts any principal from the platform Entra tenant — the platform managed identity in production, or a Snøkam developer\'s az session locally — with no operator role required.
      * Resolve the platform Sanity read config
      */
     resolvePlatformSanityConfig(initOverrides) {