@sylphx/management 0.1.0 → 0.2.0

package/dist/projects.js

@@ -0,0 +1,22 @@
+/**
+ * Projects — create / list / delete.
+ *
+ * Wire shape sourced from `@sylphx/contract` (ADR-084). Paths + methods
+ * come from `projectsEndpoints`; hand-written types are forbidden here.
+ */
+import { projectsEndpoints } from '@sylphx/contract';
+import { interpolatePath, request } from './http.js';
+export const list = async (client) => {
+    const { method, path } = projectsEndpoints.list;
+    const res = await request(client, method, path);
+    return Array.isArray(res) ? res : (res.data ?? []);
+};
+export const create = (client, input) => {
+    const { method, path } = projectsEndpoints.create;
+    return request(client, method, path, { body: input });
+};
+const _delete = (client, id) => {
+    const { method, path } = projectsEndpoints.delete;
+    return request(client, method, interpolatePath(path, { id }));
+};
+export { _delete as delete };

package/dist/realtime.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Realtime pub/sub — per-project Redis Streams backing SSE channels.
+ *
+ *   GET    /realtime/status?projectId=         — availability + provider
+ *   GET    /realtime/channels?projectId=       — list active channels
+ *   POST   /realtime/channels                  — reserve a channel name
+ *   DELETE /realtime/channels/:channelName     — free a channel
+ *
+ * Channels are Redis-backed per-project streams; no external Soketi/Pusher
+ * service. Consumers open SSE connections to the runtime directly — this
+ * SDK module only manages the channel registry (create / list / delete).
+ */
+import type { Client } from './client.js';
+export interface RealtimeStatus {
+    readonly available: boolean;
+    readonly provider: string;
+}
+export declare const status: (client: Client, projectId: string) => Promise<RealtimeStatus>;
+export interface RealtimeChannel {
+    readonly name: string;
+    readonly activeConnections: number;
+    readonly messagesPerHour: number;
+    readonly status: 'active' | 'empty';
+}
+export declare const listChannels: (client: Client, projectId: string) => Promise<{
+    channels: readonly RealtimeChannel[];
+    count: number;
+}>;
+export declare const createChannel: (client: Client, projectId: string, name: string) => Promise<{
+    name: string;
+}>;
+export declare const deleteChannel: (client: Client, projectId: string, channelName: string) => Promise<void>;
+//# sourceMappingURL=realtime.d.ts.map

package/dist/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../src/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CACzB;AAED,eAAO,MAAM,MAAM,GAAI,QAAQ,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,cAAc,CACZ,CAAA;AAErE,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAA;CACnC;AAED,eAAO,MAAM,YAAY,GACxB,QAAQ,MAAM,EACd,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CACK,CAAA;AAEvE,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,MAAM,MAAM,KACV,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CACkD,CAAA;AAE7E,eAAO,MAAM,aAAa,GACzB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,aAAa,MAAM,KACjB,OAAO,CAAC,IAAI,CAGZ,CAAA"}

package/dist/realtime.js

@@ -0,0 +1,19 @@
+/**
+ * Realtime pub/sub — per-project Redis Streams backing SSE channels.
+ *
+ *   GET    /realtime/status?projectId=         — availability + provider
+ *   GET    /realtime/channels?projectId=       — list active channels
+ *   POST   /realtime/channels                  — reserve a channel name
+ *   DELETE /realtime/channels/:channelName     — free a channel
+ *
+ * Channels are Redis-backed per-project streams; no external Soketi/Pusher
+ * service. Consumers open SSE connections to the runtime directly — this
+ * SDK module only manages the channel registry (create / list / delete).
+ */
+import { request } from './http.js';
+export const status = (client, projectId) => request(client, 'GET', '/realtime/status', { query: { projectId } });
+export const listChannels = (client, projectId) => request(client, 'GET', '/realtime/channels', { query: { projectId } });
+export const createChannel = (client, projectId, name) => request(client, 'POST', '/realtime/channels', { body: { projectId, name } });
+export const deleteChannel = (client, projectId, channelName) => request(client, 'DELETE', `/realtime/channels/${encodeURIComponent(channelName)}`, {
+    query: { projectId },
+});

package/dist/referrals.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Referrals — per-project referral codes + conversion tracking.
+ *
+ *   GET  /referrals                  — list (projectId required)
+ *   GET  /referrals/stats            — aggregated conversion stats
+ *   GET  /referrals/:id              — detail (projectId required as query)
+ *   POST /referrals                  — create (optional custom code)
+ *   POST /referrals/:id/expire       — mark pending referral expired
+ *
+ * Referral data is sharded into per-project databases; the `projectId`
+ * routes the request to the correct shard and is required on every call.
+ */
+import type { Client } from './client.js';
+export type ReferralStatus = 'pending' | 'completed' | 'expired' | 'cancelled';
+export type RewardType = 'points' | 'credit' | 'discount' | 'custom';
+export interface UserRef {
+    readonly id: string;
+    readonly email: string;
+    readonly name: string | null;
+}
+export interface Referral {
+    readonly id: string;
+    readonly projectId: string;
+    readonly projectName: string;
+    readonly code: string;
+    readonly referrer: UserRef | null;
+    readonly referredUser: UserRef | null;
+    readonly status: ReferralStatus;
+    readonly rewardType: RewardType;
+    readonly createdAt: string;
+    readonly completedAt: string | null;
+}
+export interface ReferralDetail extends Referral {
+    readonly metadata: Readonly<Record<string, unknown>> | null;
+}
+export interface ListOptions {
+    readonly environmentId?: string;
+    readonly limit?: number;
+    readonly offset?: number;
+}
+export declare const list: (client: Client, projectId: string, options?: ListOptions) => Promise<readonly Referral[]>;
+export declare const get: (client: Client, id: string, projectId: string) => Promise<ReferralDetail>;
+export interface CreateInput {
+    readonly projectId: string;
+    readonly referrerId: string;
+    readonly code?: string;
+    readonly rewardType?: RewardType;
+}
+export interface CreateResult {
+    readonly id: string;
+    readonly code: string;
+}
+export declare const create: (client: Client, input: CreateInput) => Promise<CreateResult>;
+export interface StatsOptions {
+    readonly environmentId?: string;
+    readonly days?: number;
+}
+export interface ReferralStats {
+    readonly overall: {
+        readonly total: number;
+        readonly completed: number;
+        readonly pending: number;
+        readonly expired: number;
+        readonly conversionRate: number;
+    };
+    readonly period: {
+        readonly days: number;
+        readonly since: string;
+        readonly created: number;
+        readonly completed: number;
+        readonly conversionRate: number;
+    };
+    readonly byRewardType: readonly {
+        readonly rewardType: RewardType;
+        readonly total: number;
+        readonly completed: number;
+        readonly conversionRate: number;
+    }[];
+    readonly byProject: readonly {
+        readonly projectId: string;
+        readonly total: number;
+        readonly completed: number;
+        readonly conversionRate: number;
+    }[];
+    readonly dailyTrend: readonly {
+        readonly date: string;
+        readonly created: number;
+        readonly completed: number;
+    }[];
+    readonly topReferrers: readonly {
+        readonly referrerId: string;
+        readonly totalReferrals: number;
+        readonly completedReferrals: number;
+    }[];
+}
+export declare const stats: (client: Client, projectId: string, options?: StatsOptions) => Promise<ReferralStats>;
+export declare const expire: (client: Client, id: string, projectId: string) => Promise<{
+    success: boolean;
+}>;
+//# sourceMappingURL=referrals.d.ts.map

package/dist/referrals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"referrals.d.ts","sourceRoot":"","sources":["../src/referrals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,CAAA;AAC9E,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAA;AAEpE,MAAM,WAAW,OAAO;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,cAAe,SAAQ,QAAQ;IAC/C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAA;CAC3D;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU,WAAW,KACnB,OAAO,CAAC,SAAS,QAAQ,EAAE,CAQ3B,CAAA;AAEH,eAAO,MAAM,GAAG,GAAI,QAAQ,MAAM,EAAE,IAAI,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,cAAc,CACD,CAAA;AAEzF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAA;CAChC;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,eAAO,MAAM,MAAM,GAAI,QAAQ,MAAM,EAAE,OAAO,WAAW,KAAG,OAAO,CAAC,YAAY,CACzB,CAAA;AAEvD,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAC/B,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAC/B,CAAA;IACD,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;QAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAC/B,EAAE,CAAA;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS;QAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;KAC/B,EAAE,CAAA;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAC1B,EAAE,CAAA;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;QAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;KACnC,EAAE,CAAA;CACH;AAED,eAAO,MAAM,KAAK,GACjB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU,YAAY,KACpB,OAAO,CAAC,aAAa,CAOrB,CAAA;AAEH,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,IAAI,MAAM,EACV,WAAW,MAAM,KACf,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAG5B,CAAA"}

package/dist/referrals.js

@@ -0,0 +1,33 @@
+/**
+ * Referrals — per-project referral codes + conversion tracking.
+ *
+ *   GET  /referrals                  — list (projectId required)
+ *   GET  /referrals/stats            — aggregated conversion stats
+ *   GET  /referrals/:id              — detail (projectId required as query)
+ *   POST /referrals                  — create (optional custom code)
+ *   POST /referrals/:id/expire       — mark pending referral expired
+ *
+ * Referral data is sharded into per-project databases; the `projectId`
+ * routes the request to the correct shard and is required on every call.
+ */
+import { request } from './http.js';
+export const list = (client, projectId, options) => request(client, 'GET', '/referrals', {
+    query: {
+        projectId,
+        environmentId: options?.environmentId,
+        limit: options?.limit !== undefined ? String(options.limit) : undefined,
+        offset: options?.offset !== undefined ? String(options.offset) : undefined,
+    },
+});
+export const get = (client, id, projectId) => request(client, 'GET', `/referrals/${encodeURIComponent(id)}`, { query: { projectId } });
+export const create = (client, input) => request(client, 'POST', '/referrals', { body: input });
+export const stats = (client, projectId, options) => request(client, 'GET', '/referrals/stats', {
+    query: {
+        projectId,
+        environmentId: options?.environmentId,
+        days: options?.days !== undefined ? String(options.days) : undefined,
+    },
+});
+export const expire = (client, id, projectId) => request(client, 'POST', `/referrals/${encodeURIComponent(id)}/expire`, {
+    body: { projectId },
+});

package/dist/refresh.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Refresh token lifecycle (Platform-audience OAuth rotation).
+ *
+ *   POST /auth/refresh   — rotate a refresh token and mint a new access JWT
+ *   POST /auth/logout    — revoke the presented refresh token (sign out)
+ *
+ * The refresh endpoint is PUBLIC (no platformAuth middleware) because it
+ * authenticates via the refresh token itself in the JSON body.
+ *
+ * Note (ADR-089 Phase 5.1): these endpoints currently live on the
+ * Platform host but authenticate BaaS-issued refresh tokens. When Phase
+ * 5.1 consolidates the full OAuth AS on the runtime/BaaS plane, these
+ * methods will move to `@sylphx/sdk.auth.oauth`. Until then, Management
+ * exposes them so Console / CLI have a single type-safe surface.
+ *
+ * @see docs/adr/ADR-059-unified-credentials.md §1.1
+ * @see docs/adr/ADR-089-platform-as-first-customer-of-baas.md
+ */
+import type { Client } from './client.js';
+export interface RefreshResult {
+    readonly accessToken: string;
+    readonly refreshToken: string;
+    readonly expiresIn: number;
+    readonly tokenType: 'Bearer';
+}
+/**
+ * Rotate a refresh token. Returns a fresh access+refresh pair; the
+ * presented refresh token is invalidated server-side (single-use
+ * rotation per ADR-059 §1.1).
+ */
+export declare const rotate: (client: Client, refreshToken: string) => Promise<RefreshResult>;
+/**
+ * Revoke a refresh token (sign out). Idempotent — revoking an already-
+ * revoked or unknown token still returns success to prevent side-channel
+ * token-existence probing.
+ */
+export declare const signOut: (client: Client, refreshToken: string) => Promise<{
+    success: boolean;
+}>;
+/** Backwards-compat alias used by some Console flows. */
+export declare const revoke: (client: Client, refreshToken: string) => Promise<{
+    success: boolean;
+}>;
+//# sourceMappingURL=refresh.d.ts.map

package/dist/refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../src/refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAA;CAC5B;AAED;;;;GAIG;AACH,eAAO,MAAM,MAAM,GAAI,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,OAAO,CAAC,aAAa,CACd,CAAA;AAErE;;;;GAIG;AACH,eAAO,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CACvB,CAAA;AAEpE,yDAAyD;AACzD,eAAO,MAAM,MAAM,WAJa,MAAM,gBAAgB,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAI9D,CAAA"}

package/dist/refresh.js

@@ -0,0 +1,33 @@
+/**
+ * Refresh token lifecycle (Platform-audience OAuth rotation).
+ *
+ *   POST /auth/refresh   — rotate a refresh token and mint a new access JWT
+ *   POST /auth/logout    — revoke the presented refresh token (sign out)
+ *
+ * The refresh endpoint is PUBLIC (no platformAuth middleware) because it
+ * authenticates via the refresh token itself in the JSON body.
+ *
+ * Note (ADR-089 Phase 5.1): these endpoints currently live on the
+ * Platform host but authenticate BaaS-issued refresh tokens. When Phase
+ * 5.1 consolidates the full OAuth AS on the runtime/BaaS plane, these
+ * methods will move to `@sylphx/sdk.auth.oauth`. Until then, Management
+ * exposes them so Console / CLI have a single type-safe surface.
+ *
+ * @see docs/adr/ADR-059-unified-credentials.md §1.1
+ * @see docs/adr/ADR-089-platform-as-first-customer-of-baas.md
+ */
+import { request } from './http.js';
+/**
+ * Rotate a refresh token. Returns a fresh access+refresh pair; the
+ * presented refresh token is invalidated server-side (single-use
+ * rotation per ADR-059 §1.1).
+ */
+export const rotate = (client, refreshToken) => request(client, 'POST', '/auth/refresh', { body: { refreshToken } });
+/**
+ * Revoke a refresh token (sign out). Idempotent — revoking an already-
+ * revoked or unknown token still returns success to prevent side-channel
+ * token-existence probing.
+ */
+export const signOut = (client, refreshToken) => request(client, 'POST', '/auth/logout', { body: { refreshToken } });
+/** Backwards-compat alias used by some Console flows. */
+export const revoke = signOut;

package/dist/remoteConfig.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Remote config — server-persisted non-secret key-value store per env.
+ *
+ * Renamed from `config.ts` in the old OOP SDK to `remoteConfig.ts` (ADR-077
+ * Rule D) — disambiguates from the CLI-side local JSON store (`config.ts`)
+ * and the billing `plan`/`subscription` surface.
+ */
+import type { Client } from './client.js';
+import type { ConfigEntry } from './types.js';
+export declare const list: (client: Client, projectId: string, envType?: string) => Promise<ConfigEntry[]>;
+export declare const get: (client: Client, projectId: string, key: string, envType?: string) => Promise<ConfigEntry>;
+export declare const set: (client: Client, projectId: string, key: string, value: string, envType?: string) => Promise<ConfigEntry>;
+declare const _delete: (client: Client, projectId: string, key: string, envType?: string) => Promise<void>;
+export { _delete as delete };
+//# sourceMappingURL=remoteConfig.d.ts.map

package/dist/remoteConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteConfig.d.ts","sourceRoot":"","sources":["../src/remoteConfig.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAY7C,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,EAAE,CASvB,CAAA;AAED,eAAO,MAAM,GAAG,GACf,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,KAAK,MAAM,EACX,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,CAQrB,CAAA;AAED,eAAO,MAAM,GAAG,GACf,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,KAAK,MAAM,EACX,OAAO,MAAM,EACb,UAAU,MAAM,KACd,OAAO,CAAC,WAAW,CAKrB,CAAA;AAED,QAAA,MAAM,OAAO,GACZ,QAAQ,MAAM,EACd,WAAW,MAAM,EACjB,KAAK,MAAM,EACX,UAAU,MAAM,KACd,OAAO,CAAC,IAAI,CAQd,CAAA;AACD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA"}

package/dist/remoteConfig.js

@@ -0,0 +1,35 @@
+/**
+ * Remote config — server-persisted non-secret key-value store per env.
+ *
+ * Renamed from `config.ts` in the old OOP SDK to `remoteConfig.ts` (ADR-077
+ * Rule D) — disambiguates from the CLI-side local JSON store (`config.ts`)
+ * and the billing `plan`/`subscription` surface.
+ */
+import { resolveId as resolveEnvId } from './environments.js';
+import { request } from './http.js';
+const resolveEnv = async (client, projectId, envType) => {
+    if (!envType)
+        return undefined;
+    const envId = await resolveEnvId(client, projectId, envType);
+    return envId ?? undefined;
+};
+export const list = async (client, projectId, envType) => {
+    const env = await resolveEnv(client, projectId, envType);
+    const res = await request(client, 'GET', `/projects/${encodeURIComponent(projectId)}/config`, { query: { env } });
+    return Array.isArray(res) ? res : (res.data ?? []);
+};
+export const get = async (client, projectId, key, envType) => {
+    const env = await resolveEnv(client, projectId, envType);
+    return request(client, 'GET', `/projects/${encodeURIComponent(projectId)}/config/${encodeURIComponent(key)}`, { query: { env } });
+};
+export const set = async (client, projectId, key, value, envType) => {
+    const environmentId = envType ? await resolveEnvId(client, projectId, envType) : null;
+    return request(client, 'POST', `/projects/${encodeURIComponent(projectId)}/config`, {
+        body: { key, value, environmentId },
+    });
+};
+const _delete = async (client, projectId, key, envType) => {
+    const env = await resolveEnv(client, projectId, envType);
+    return request(client, 'DELETE', `/projects/${encodeURIComponent(projectId)}/config/${encodeURIComponent(key)}`, { query: { env } });
+};
+export { _delete as delete };

package/dist/resourceBindings.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Resource bindings — link a managed resource (DB / storage / volume) to a
+ * project environment.
+ *
+ * Renamed from `resources.ts` (class: `ResourceBindingsResource`) in the old
+ * OOP SDK — the module name now matches the capability (ADR-077 Rule D).
+ */
+import type { Client } from './client.js';
+import type { ResourceBinding } from './types.js';
+export declare const list: (client: Client, resourceId: string) => Promise<ResourceBinding[]>;
+export interface BindInput {
+    readonly projectId: string;
+    readonly envType: string;
+    readonly role?: string;
+}
+export declare const create: (client: Client, resourceId: string, input: BindInput) => Promise<ResourceBinding>;
+declare const _delete: (client: Client, resourceId: string, bindingId: string) => Promise<void>;
+export { _delete as delete };
+//# sourceMappingURL=resourceBindings.d.ts.map

package/dist/resourceBindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceBindings.d.ts","sourceRoot":"","sources":["../src/resourceBindings.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAEjD,eAAO,MAAM,IAAI,GAAU,QAAQ,MAAM,EAAE,YAAY,MAAM,KAAG,OAAO,CAAC,eAAe,EAAE,CAOxF,CAAA;AAED,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,YAAY,MAAM,EAClB,OAAO,SAAS,KACd,OAAO,CAAC,eAAe,CAQzB,CAAA;AAED,QAAA,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,YAAY,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,IAAI,CAKnF,CAAA;AACF,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA"}

package/dist/resourceBindings.js

@@ -0,0 +1,24 @@
+/**
+ * Resource bindings — link a managed resource (DB / storage / volume) to a
+ * project environment.
+ *
+ * Renamed from `resources.ts` (class: `ResourceBindingsResource`) in the old
+ * OOP SDK — the module name now matches the capability (ADR-077 Rule D).
+ */
+import { resolveId as resolveEnvId } from './environments.js';
+import { request } from './http.js';
+export const list = async (client, resourceId) => {
+    const res = await request(client, 'GET', `/resources/${encodeURIComponent(resourceId)}/bindings`);
+    return res.bindings ?? [];
+};
+export const create = async (client, resourceId, input) => {
+    const projectEnvironmentId = await resolveEnvId(client, input.projectId, input.envType);
+    if (!projectEnvironmentId) {
+        throw new Error(`Environment '${input.envType}' not found for project '${input.projectId}'`);
+    }
+    return request(client, 'POST', `/resources/${encodeURIComponent(resourceId)}/bindings`, {
+        body: { projectEnvironmentId, role: input.role ?? 'primary' },
+    });
+};
+const _delete = (client, resourceId, bindingId) => request(client, 'DELETE', `/resources/${encodeURIComponent(resourceId)}/bindings/${encodeURIComponent(bindingId)}`);
+export { _delete as delete };

package/dist/runners.d.ts

@@ -0,0 +1,60 @@
+/**
+ * CI runners — self-hosted machines that execute build / deploy jobs.
+ *
+ *   POST   /runners                    — register (returns one-time install token)
+ *   GET    /runners                    — list
+ *   GET    /runners/:id/jobs           — recent jobs for a runner
+ *   DELETE /runners/:id                — unregister
+ *
+ * The `registrationToken` returned by `register()` is shown ONCE — the
+ * server only keeps a hash. Runners exchange it for a long-lived
+ * credential during bootstrap.
+ */
+import type { Client } from './client.js';
+export type RunnerPlatform = 'linux' | 'macos' | 'windows';
+export type RunnerArch = 'x64' | 'arm64';
+export interface RunnerView {
+    readonly id: string;
+    readonly name: string;
+    readonly platform: RunnerPlatform;
+    readonly arch: RunnerArch;
+    readonly version: string | null;
+    readonly status: string;
+    readonly lastSeenAt: string | null;
+    readonly createdAt: string;
+    readonly labels?: readonly string[];
+    readonly maxJobs?: number;
+}
+export interface RunnerJob {
+    readonly id: string;
+    readonly runnerId: string | null;
+    readonly status: string;
+    readonly gitRepo: string;
+    readonly gitBranch: string;
+    readonly gitCommit: string | null;
+    readonly startedAt: string | null;
+    readonly finishedAt: string | null;
+}
+export interface RegisterInput {
+    readonly name: string;
+    readonly platform: RunnerPlatform;
+    readonly arch: RunnerArch;
+    readonly labels?: readonly string[];
+    readonly maxJobs?: number;
+}
+export interface RegisterResult {
+    readonly runnerId: string;
+    /** One-time install token — shown ONCE. */
+    readonly registrationToken: string;
+}
+export declare const register: (client: Client, input: RegisterInput) => Promise<RegisterResult>;
+export declare const list: (client: Client) => Promise<{
+    runners: readonly RunnerView[];
+}>;
+export declare const listJobs: (client: Client, runnerId: string) => Promise<{
+    jobs: readonly RunnerJob[];
+}>;
+export declare const unregister: (client: Client, runnerId: string) => Promise<{
+    success: boolean;
+}>;
+//# sourceMappingURL=runners.d.ts.map

package/dist/runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runners.d.ts","sourceRoot":"","sources":["../src/runners.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAGzC,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAA;AAC1D,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,OAAO,CAAA;AAExC,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,2CAA2C;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAClC;AAED,eAAO,MAAM,QAAQ,GAAI,QAAQ,MAAM,EAAE,OAAO,aAAa,KAAG,OAAO,CAAC,cAAc,CACjC,CAAA;AAErD,eAAO,MAAM,IAAI,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,UAAU,EAAE,CAAA;CAAE,CAC7C,CAAA;AAEnC,eAAO,MAAM,QAAQ,GACpB,QAAQ,MAAM,EACd,UAAU,MAAM,KACd,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE,CAC+B,CAAA;AAExE,eAAO,MAAM,UAAU,GAAI,QAAQ,MAAM,EAAE,UAAU,MAAM,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CACpB,CAAA"}

package/dist/runners.js

@@ -0,0 +1,17 @@
+/**
+ * CI runners — self-hosted machines that execute build / deploy jobs.
+ *
+ *   POST   /runners                    — register (returns one-time install token)
+ *   GET    /runners                    — list
+ *   GET    /runners/:id/jobs           — recent jobs for a runner
+ *   DELETE /runners/:id                — unregister
+ *
+ * The `registrationToken` returned by `register()` is shown ONCE — the
+ * server only keeps a hash. Runners exchange it for a long-lived
+ * credential during bootstrap.
+ */
+import { request } from './http.js';
+export const register = (client, input) => request(client, 'POST', '/runners', { body: input });
+export const list = (client) => request(client, 'GET', '/runners');
+export const listJobs = (client, runnerId) => request(client, 'GET', `/runners/${encodeURIComponent(runnerId)}/jobs`);
+export const unregister = (client, runnerId) => request(client, 'DELETE', `/runners/${encodeURIComponent(runnerId)}`);

package/dist/saml.d.ts

@@ -0,0 +1,44 @@
+/**
+ * SAML SSO — enterprise Identity Provider configuration per organization.
+ *
+ *   GET    /saml                          — provider for org (null if unconfigured)
+ *   POST   /saml                          — create provider
+ *   PATCH  /saml                          — update provider
+ *   POST   /saml/status                   — enable / disable
+ *   DELETE /saml                          — delete provider + accounts
+ *   GET    /saml/metadata                 — SP metadata XML (for IdP wiring)
+ *   GET    /saml/logs                     — authentication logs
+ *   POST   /saml/test                     — validate cert + reach SSO URL
+ *   GET    /saml/templates                — IdP setup templates (Okta/Azure/...)
+ *   GET    /saml/name-id-formats          — enum options + URIs
+ *   GET    /saml/signature-algorithms     — enum options + URIs
+ *
+ * Wire shape sourced from `@sylphx/contract` (ADR-084). Paths + methods
+ * come from `samlEndpoints`; types come from the matching schemas.
+ * Hand-written types are forbidden here.
+ *
+ * Admin-only. Certificate is PEM — `create()` / `update()` accept it as-is;
+ * the server validates the chain and stores the fingerprint. The raw IdP
+ * metadata XML returned by `metadata()` is feed-ready for the IdP's
+ * "Add Service Provider" flow — no post-processing required.
+ */
+import type { CreateSAMLProviderInput, CreateSAMLProviderResult, DeleteSAMLProviderResult, GetSAMLLogsResult, GetSAMLMetadataResult, GetSAMLProviderResult, ListSAMLIdPTemplatesResult, ListSAMLNameIdFormatsResult, ListSAMLSignatureAlgorithmsResult, SAMLAttributeMapping, SAMLAuthLog, SAMLIdPTemplate, SAMLNameIdFormat, SAMLNameIdFormatOption, SAMLProvider, SAMLProviderStatus, SAMLProviderType, SAMLSignatureAlgorithm, SAMLSignatureAlgorithmOption, SetSAMLProviderStatusResult, TestSAMLConfigInput, TestSAMLConfigResult, UpdateSAMLProviderInput, UpdateSAMLProviderResult } from '@sylphx/contract';
+import type { Client } from './client.js';
+export type { CreateSAMLProviderInput, CreateSAMLProviderResult, GetSAMLMetadataResult as MetadataResult, SAMLAttributeMapping, SAMLAuthLog as AuthLog, SAMLIdPTemplate as IdPTemplate, SAMLNameIdFormat, SAMLNameIdFormatOption as NameIdFormatOption, SAMLProvider, SAMLProviderStatus, SAMLProviderType, SAMLSignatureAlgorithm, SAMLSignatureAlgorithmOption as SignatureAlgorithmOption, TestSAMLConfigInput as TestConfigInput, TestSAMLConfigResult as TestConfigResult, UpdateSAMLProviderInput, };
+/**
+ * `Promise`-typed CRUD wrappers. Each routes through the contract endpoint
+ * descriptor so the path / method live in `@sylphx/contract` only.
+ */
+export declare const get: (client: Client, organizationId: string) => Promise<GetSAMLProviderResult>;
+export declare const create: (client: Client, input: CreateSAMLProviderInput) => Promise<CreateSAMLProviderResult>;
+export declare const update: (client: Client, input: UpdateSAMLProviderInput) => Promise<UpdateSAMLProviderResult>;
+export declare const setStatus: (client: Client, providerId: string, enabled: boolean) => Promise<SetSAMLProviderStatusResult>;
+declare const _delete: (client: Client, providerId: string) => Promise<DeleteSAMLProviderResult>;
+export { _delete as delete };
+export declare const metadata: (client: Client, organizationId: string) => Promise<GetSAMLMetadataResult>;
+export declare const logs: (client: Client, providerId: string, limit?: number) => Promise<GetSAMLLogsResult>;
+export declare const testConfig: (client: Client, input: TestSAMLConfigInput) => Promise<TestSAMLConfigResult>;
+export declare const templates: (client: Client) => Promise<ListSAMLIdPTemplatesResult>;
+export declare const nameIdFormats: (client: Client) => Promise<ListSAMLNameIdFormatsResult>;
+export declare const signatureAlgorithms: (client: Client) => Promise<ListSAMLSignatureAlgorithmsResult>;
+//# sourceMappingURL=saml.d.ts.map

package/dist/saml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml.d.ts","sourceRoot":"","sources":["../src/saml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EACX,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,EAC3B,iCAAiC,EACjC,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAMzC,YAAY,EACX,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,IAAI,cAAc,EACvC,oBAAoB,EACpB,WAAW,IAAI,OAAO,EACtB,eAAe,IAAI,WAAW,EAC9B,gBAAgB,EAChB,sBAAsB,IAAI,kBAAkB,EAC5C,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,4BAA4B,IAAI,wBAAwB,EACxD,mBAAmB,IAAI,eAAe,EACtC,oBAAoB,IAAI,gBAAgB,EACxC,uBAAuB,GACvB,CAAA;AAED;;;GAGG;AAEH,eAAO,MAAM,GAAG,GAAI,QAAQ,MAAM,EAAE,gBAAgB,MAAM,KAAG,OAAO,CAAC,qBAAqB,CAGzF,CAAA;AAED,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,OAAO,uBAAuB,KAC5B,OAAO,CAAC,wBAAwB,CAGlC,CAAA;AAED,eAAO,MAAM,MAAM,GAClB,QAAQ,MAAM,EACd,OAAO,uBAAuB,KAC5B,OAAO,CAAC,wBAAwB,CAGlC,CAAA;AAED,eAAO,MAAM,SAAS,GACrB,QAAQ,MAAM,EACd,YAAY,MAAM,EAClB,SAAS,OAAO,KACd,OAAO,CAAC,2BAA2B,CAGrC,CAAA;AAED,QAAA,MAAM,OAAO,GAAI,QAAQ,MAAM,EAAE,YAAY,MAAM,KAAG,OAAO,CAAC,wBAAwB,CAGrF,CAAA;AACD,OAAO,EAAE,OAAO,IAAI,MAAM,EAAE,CAAA;AAE5B,eAAO,MAAM,QAAQ,GACpB,QAAQ,MAAM,EACd,gBAAgB,MAAM,KACpB,OAAO,CAAC,qBAAqB,CAG/B,CAAA;AAED,eAAO,MAAM,IAAI,GAChB,QAAQ,MAAM,EACd,YAAY,MAAM,EAClB,QAAQ,MAAM,KACZ,OAAO,CAAC,iBAAiB,CAK3B,CAAA;AAED,eAAO,MAAM,UAAU,GACtB,QAAQ,MAAM,EACd,OAAO,mBAAmB,KACxB,OAAO,CAAC,oBAAoB,CAG9B,CAAA;AAED,eAAO,MAAM,SAAS,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,0BAA0B,CAG5E,CAAA;AAED,eAAO,MAAM,aAAa,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,2BAA2B,CAGjF,CAAA;AAED,eAAO,MAAM,mBAAmB,GAAI,QAAQ,MAAM,KAAG,OAAO,CAAC,iCAAiC,CAG7F,CAAA"}

package/dist/saml.js

@@ -0,0 +1,77 @@
+/**
+ * SAML SSO — enterprise Identity Provider configuration per organization.
+ *
+ *   GET    /saml                          — provider for org (null if unconfigured)
+ *   POST   /saml                          — create provider
+ *   PATCH  /saml                          — update provider
+ *   POST   /saml/status                   — enable / disable
+ *   DELETE /saml                          — delete provider + accounts
+ *   GET    /saml/metadata                 — SP metadata XML (for IdP wiring)
+ *   GET    /saml/logs                     — authentication logs
+ *   POST   /saml/test                     — validate cert + reach SSO URL
+ *   GET    /saml/templates                — IdP setup templates (Okta/Azure/...)
+ *   GET    /saml/name-id-formats          — enum options + URIs
+ *   GET    /saml/signature-algorithms     — enum options + URIs
+ *
+ * Wire shape sourced from `@sylphx/contract` (ADR-084). Paths + methods
+ * come from `samlEndpoints`; types come from the matching schemas.
+ * Hand-written types are forbidden here.
+ *
+ * Admin-only. Certificate is PEM — `create()` / `update()` accept it as-is;
+ * the server validates the chain and stores the fingerprint. The raw IdP
+ * metadata XML returned by `metadata()` is feed-ready for the IdP's
+ * "Add Service Provider" flow — no post-processing required.
+ */
+import { samlEndpoints } from '@sylphx/contract';
+import { request } from './http.js';
+/**
+ * `Promise`-typed CRUD wrappers. Each routes through the contract endpoint
+ * descriptor so the path / method live in `@sylphx/contract` only.
+ */
+export const get = (client, organizationId) => {
+    const { method, path } = samlEndpoints.getProvider;
+    return request(client, method, path, { query: { organizationId } });
+};
+export const create = (client, input) => {
+    const { method, path } = samlEndpoints.createProvider;
+    return request(client, method, path, { body: input });
+};
+export const update = (client, input) => {
+    const { method, path } = samlEndpoints.updateProvider;
+    return request(client, method, path, { body: input });
+};
+export const setStatus = (client, providerId, enabled) => {
+    const { method, path } = samlEndpoints.setProviderStatus;
+    return request(client, method, path, { body: { providerId, enabled } });
+};
+const _delete = (client, providerId) => {
+    const { method, path } = samlEndpoints.deleteProvider;
+    return request(client, method, path, { body: { providerId } });
+};
+export { _delete as delete };
+export const metadata = (client, organizationId) => {
+    const { method, path } = samlEndpoints.getMetadata;
+    return request(client, method, path, { query: { organizationId } });
+};
+export const logs = (client, providerId, limit) => {
+    const { method, path } = samlEndpoints.getLogs;
+    return request(client, method, path, {
+        query: { providerId, limit: limit !== undefined ? String(limit) : undefined },
+    });
+};
+export const testConfig = (client, input) => {
+    const { method, path } = samlEndpoints.testConfig;
+    return request(client, method, path, { body: input });
+};
+export const templates = (client) => {
+    const { method, path } = samlEndpoints.listTemplates;
+    return request(client, method, path);
+};
+export const nameIdFormats = (client) => {
+    const { method, path } = samlEndpoints.listNameIdFormats;
+    return request(client, method, path);
+};
+export const signatureAlgorithms = (client) => {
+    const { method, path } = samlEndpoints.listSignatureAlgorithms;
+    return request(client, method, path);
+};