@thunderid/javascript 1.0.6 → 1.1.0

package/dist/models/agent-resource.d.ts

@@ -0,0 +1,96 @@
+import { AssertionConfig, OAuth2Config } from './application';
+/**
+ * Inbound authentication configuration of an agent.
+ */
+export interface AgentInboundAuthConfig {
+    config?: OAuth2Config;
+    type: 'oauth2';
+}
+/**
+ * Login consent configuration of an agent.
+ */
+export interface AgentLoginConsentConfig {
+    validityPeriod?: number;
+}
+/**
+ * An agent registered in ThunderID.
+ */
+export interface Agent {
+    allowedAgentTypes?: string[];
+    allowedUserTypes?: string[];
+    assertion?: AssertionConfig;
+    attributes?: Record<string, unknown>;
+    /**
+     * Populated only when the agent has an inbound client.
+     */
+    authFlowId?: string;
+    clientId?: string;
+    description?: string;
+    id: string;
+    inboundAuthConfig?: AgentInboundAuthConfig[];
+    isReadOnly?: boolean;
+    isRegistrationFlowEnabled?: boolean;
+    loginConsent?: AgentLoginConsentConfig;
+    logoUrl?: string;
+    name: string;
+    ouHandle?: string;
+    ouId: string;
+    owner?: string;
+    registrationFlowId?: string;
+    type: string;
+}
+/**
+ * The summary of an agent returned in list responses.
+ */
+export interface BasicAgent {
+    clientId?: string;
+    description?: string;
+    id: string;
+    isReadOnly?: boolean;
+    logoUrl?: string;
+    name: string;
+    ouHandle?: string;
+    ouId: string;
+    type: string;
+}
+/**
+ * A page of agents.
+ */
+export interface AgentListResponse {
+    agents: BasicAgent[];
+    count: number;
+    startIndex: number;
+    totalResults: number;
+}
+/**
+ * The payload used to create an agent.
+ */
+export interface CreateAgentRequest {
+    attributes?: Record<string, unknown>;
+    description?: string;
+    inboundAuthConfig?: AgentInboundAuthConfig[];
+    logoUrl?: string;
+    name: string;
+    ouId: string;
+    owner?: string;
+    type: string;
+}
+/**
+ * The payload used to update an agent.
+ */
+export interface UpdateAgentRequest {
+    allowedAgentTypes?: string[];
+    allowedUserTypes?: string[];
+    attributes?: Record<string, unknown>;
+    authFlowId?: string;
+    description?: string;
+    inboundAuthConfig?: AgentInboundAuthConfig[];
+    isRegistrationFlowEnabled?: boolean;
+    logoUrl?: string;
+    name?: string;
+    ouId?: string;
+    owner?: string;
+    registrationFlowId?: string;
+    type?: string;
+}
+//# sourceMappingURL=agent-resource.d.ts.map

package/dist/models/agent-resource.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-resource.d.ts","sourceRoot":"","sources":["../../src/models/agent-resource.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,eAAe,EAAE,YAAY,EAAC,MAAM,eAAe,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,QAAQ,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC7C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC7C,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/models/api.d.ts

@@ -0,0 +1,57 @@
+/**
+ * A fetch-compatible function used to perform HTTP requests. Supply one to route a request through
+ * your own transport (for example an authenticated HTTP client) instead of the global `fetch`.
+ */
+export type ApiFetcher = (url: string, config: RequestInit) => Promise<Response>;
+/**
+ * Common options accepted by every management API function.
+ */
+export interface ManagementRequestConfig extends Omit<RequestInit, 'method' | 'body'> {
+    /**
+     * The base URL of the ThunderID resource server. Used to derive the collection URL
+     * (e.g. `{baseUrl}/applications`) when `url` is not provided.
+     */
+    baseUrl?: string;
+    /**
+     * Optional custom fetcher function. If not provided, the global `fetch` is used.
+     */
+    fetcher?: ApiFetcher;
+    /**
+     * The absolute URL of the resource collection (e.g. `https://rs.example.com/applications`).
+     * Takes precedence over `baseUrl`. A single resource is addressed by appending its identifier.
+     */
+    url?: string;
+}
+/**
+ * Pagination and filtering parameters accepted by list endpoints.
+ */
+export interface ApiFilteringParams {
+    /**
+     * An expression understood by the server to narrow the results.
+     */
+    filter?: string;
+    /**
+     * Maximum number of records to return.
+     */
+    limit?: number;
+    /**
+     * Number of records to skip.
+     */
+    offset?: number;
+}
+/**
+ * A pagination link returned alongside a list response.
+ */
+export interface ApiPaginationLink {
+    href: string;
+    rel: string;
+}
+/**
+ * The error envelope returned by the ThunderID management API.
+ */
+export interface ApiError {
+    code: string;
+    description: string;
+    message: string;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/models/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/models/api.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,MAAM,CAAC;IACnF;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/models/application.d.ts

@@ -0,0 +1,271 @@
+/**
+ * The kind of client an application represents.
+ */
+export type ApplicationType = 'browser' | 'fullstack' | 'mobile' | 'm2m' | 'mcp' | 'custom';
+/**
+ * Base token configuration shared by the tokens an application issues.
+ */
+export interface TokenConfig {
+    /**
+     * User attributes to include in the token.
+     */
+    userAttributes: string[];
+    /**
+     * Token validity period, in seconds.
+     */
+    validityPeriod: number;
+}
+/**
+ * Configuration of the assertion issued for an application.
+ */
+export type AssertionConfig = TokenConfig;
+/**
+ * Access token settings for one kind of subject (a user or the client itself).
+ */
+export interface AccessTokenSubConfig {
+    attributes?: string[];
+    validityPeriod?: number;
+}
+/**
+ * Access token configuration.
+ */
+export interface AccessTokenConfig {
+    clientConfig?: AccessTokenSubConfig;
+    defaultAudience?: string;
+    userConfig?: AccessTokenSubConfig;
+}
+/**
+ * OAuth 2.0 grant types an application can be configured with.
+ */
+export type OAuth2GrantType = 'authorization_code' | 'refresh_token' | 'client_credentials' | 'password' | 'implicit' | 'urn:openid:params:grant-type:ciba' | 'urn:ietf:params:oauth:grant-type:token-exchange' | 'urn:ietf:params:oauth:grant-type:jwt-bearer';
+/**
+ * OAuth 2.0 grant type values.
+ */
+export declare const OAuth2GrantTypes: {
+    readonly AUTHORIZATION_CODE: "authorization_code";
+    readonly CIBA: "urn:openid:params:grant-type:ciba";
+    readonly CLIENT_CREDENTIALS: "client_credentials";
+    readonly IMPLICIT: "implicit";
+    readonly JWT_BEARER: "urn:ietf:params:oauth:grant-type:jwt-bearer";
+    readonly PASSWORD: "password";
+    readonly REFRESH_TOKEN: "refresh_token";
+    readonly TOKEN_EXCHANGE: "urn:ietf:params:oauth:grant-type:token-exchange";
+};
+/**
+ * Grant types that can issue a refresh token.
+ */
+export declare const REFRESH_TOKEN_ISSUING_GRANTS: readonly string[];
+/**
+ * OAuth 2.0 response types an application can be configured with.
+ */
+export type OAuth2ResponseType = 'code' | 'token' | 'id_token' | 'code token' | 'code id_token' | 'token id_token';
+/**
+ * OAuth 2.0 response type values.
+ */
+export declare const OAuth2ResponseTypes: {
+    readonly CODE: "code";
+    readonly CODE_ID_TOKEN: "code id_token";
+    readonly CODE_TOKEN: "code token";
+    readonly ID_TOKEN: "id_token";
+    readonly TOKEN: "token";
+    readonly TOKEN_ID_TOKEN: "token id_token";
+};
+/**
+ * Token endpoint authentication methods an application can be configured with.
+ */
+export declare const TokenEndpointAuthMethods: {
+    readonly CLIENT_SECRET_BASIC: "client_secret_basic";
+    readonly CLIENT_SECRET_JWT: "client_secret_jwt";
+    readonly CLIENT_SECRET_POST: "client_secret_post";
+    readonly NONE: "none";
+    readonly PRIVATE_KEY_JWT: "private_key_jwt";
+};
+/**
+ * Claims released for each scope.
+ */
+export interface ScopeClaims {
+    [key: string]: string[] | undefined;
+    email?: string[];
+    group?: string[];
+    phone?: string[];
+    profile?: string[];
+}
+/**
+ * Format of the issued ID token.
+ */
+export type IDTokenResponseType = 'JWT' | 'JWE' | 'NESTED_JWT';
+/**
+ * ID token configuration.
+ */
+export interface IDTokenConfig extends TokenConfig {
+    encryptionAlg?: string;
+    encryptionEnc?: string;
+    responseType?: IDTokenResponseType;
+}
+/**
+ * Refresh token configuration.
+ */
+export interface RefreshTokenConfig {
+    validityPeriod: number;
+}
+/**
+ * Identity assertion JWT authorization grant (ID-JAG) configuration.
+ */
+export interface IDJAGConfig {
+    allowedAudiences?: string[];
+    enabled: boolean;
+    validityPeriod?: number;
+}
+/**
+ * Token settings of an OAuth 2.0 application.
+ */
+export interface OAuth2Token {
+    accessToken: AccessTokenConfig;
+    idJag?: IDJAGConfig;
+    idToken: IDTokenConfig;
+    refreshToken?: RefreshTokenConfig;
+}
+/**
+ * Format of the userinfo response.
+ */
+export type UserInfoResponseType = 'JSON' | 'JWS' | 'JWE' | 'NESTED_JWT';
+/**
+ * Userinfo endpoint configuration.
+ */
+export interface UserInfoConfig {
+    encryptionAlg?: string;
+    encryptionEnc?: string;
+    responseType?: UserInfoResponseType;
+    signingAlg?: string;
+    userAttributes: string[];
+}
+/**
+ * OAuth 2.0 / OIDC configuration of an application.
+ */
+export interface OAuth2Config {
+    acrValues?: string[];
+    certificate?: {
+        type: string;
+        value?: string;
+    } | null;
+    clientId?: string;
+    clientSecret?: string;
+    grantTypes: string[];
+    pkceRequired?: boolean;
+    postLogoutRedirectUris?: string[];
+    publicClient?: boolean;
+    redirectUris?: string[];
+    requirePushedAuthorizationRequests?: boolean;
+    responseTypes: string[];
+    scopeClaims?: ScopeClaims;
+    scopes?: string[];
+    token?: OAuth2Token & Partial<TokenConfig>;
+    tokenEndpointAuthMethod?: string;
+    userInfo?: UserInfoConfig;
+}
+/**
+ * Android app attestation configuration.
+ */
+export interface AndroidAttestationConfig {
+    certificateSha256Digests?: string[];
+    packageName?: string;
+    serviceAccountCredentials?: string;
+}
+/**
+ * Apple app attestation configuration.
+ */
+export interface AppleAttestationConfig {
+    bundleId: string;
+    teamId: string;
+}
+/**
+ * App attestation configuration. At most one platform can be configured.
+ */
+export type AttestationConfig = {
+    devMode?: boolean;
+} & ({
+    android?: undefined;
+    apple?: undefined;
+} | {
+    android: AndroidAttestationConfig;
+    apple?: undefined;
+} | {
+    android?: undefined;
+    apple: AppleAttestationConfig;
+});
+/**
+ * Inbound authentication protocols an application can be configured with.
+ */
+export type InboundAuthType = 'oauth2';
+/**
+ * Inbound authentication protocol values.
+ */
+export declare const InboundAuthTypes: {
+    readonly OAUTH2: "oauth2";
+};
+/**
+ * Inbound authentication configuration of an application.
+ */
+export interface InboundAuthConfig {
+    config: OAuth2Config;
+    type: string;
+}
+/**
+ * An application registered in ThunderID.
+ */
+export interface Application {
+    [key: string]: unknown;
+    allowedAgentTypes?: string[];
+    allowedUserTypes?: string[];
+    assertion?: AssertionConfig;
+    attestation?: AttestationConfig | null;
+    authFlowId?: string;
+    contacts?: string[];
+    createdAt?: string;
+    description?: string;
+    flowSecret?: string;
+    id: string;
+    inboundAuthConfig?: InboundAuthConfig[];
+    isReadOnly?: boolean;
+    isRecoveryFlowEnabled?: boolean;
+    isRegistrationFlowEnabled?: boolean;
+    layoutId?: string;
+    logoUrl?: string;
+    name: string;
+    ouId?: string;
+    passkeyAllowedOrigins?: string[];
+    policyUri?: string;
+    recoveryFlowId?: string;
+    registrationFlowId?: string;
+    signOutFlowId?: string;
+    template?: string;
+    themeId?: string;
+    tosUri?: string;
+    type?: ApplicationType;
+    updatedAt?: string;
+    url?: string;
+    userAttributes?: string[];
+}
+/**
+ * The summary of an application returned in list responses.
+ */
+export type BasicApplication = Pick<Application, 'id' | 'name' | 'description' | 'logoUrl' | 'authFlowId' | 'registrationFlowId' | 'isRegistrationFlowEnabled' | 'type' | 'template' | 'isReadOnly'> & {
+    clientId?: string;
+};
+/**
+ * A page of applications.
+ */
+export interface ApplicationListResponse {
+    applications: BasicApplication[];
+    count: number;
+    totalResults: number;
+}
+/**
+ * The payload used to create or update an application. The server generates `id` and timestamps.
+ */
+export type CreateApplicationRequest = Omit<Application, 'id' | 'createdAt' | 'updatedAt'>;
+/**
+ * The payload used to update an application.
+ */
+export type UpdateApplicationRequest = CreateApplicationRequest;
+//# sourceMappingURL=application.d.ts.map

package/dist/models/application.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application.d.ts","sourceRoot":"","sources":["../../src/models/application.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE5F;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,eAAe,GACf,oBAAoB,GACpB,UAAU,GACV,UAAU,GACV,mCAAmC,GACnC,iDAAiD,GACjD,6CAA6C,CAAC;AAElD;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;CASnB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAGzD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,YAAY,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEnH;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;CAOtB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;CAM3B,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IACpC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,KAAK,GAAG,YAAY,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,aAAa,CAAC;IACvB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,YAAY,CAAC;AAEzE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAC,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,kCAAkC,CAAC,EAAE,OAAO,CAAC;IAC7C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,CACA;IAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAC,GACxC;IAAC,OAAO,EAAE,wBAAwB,CAAC;IAAC,KAAK,CAAC,EAAE,SAAS,CAAA;CAAC,GACtD;IAAC,OAAO,CAAC,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,sBAAsB,CAAA;CAAC,CACvD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;AAEvC;;GAEG;AACH,eAAO,MAAM,gBAAgB;;CAEnB,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,WAAW,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACxC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,WAAW,EACT,IAAI,GACJ,MAAM,GACN,aAAa,GACb,SAAS,GACT,YAAY,GACZ,oBAAoB,GACpB,2BAA2B,GAC3B,MAAM,GACN,UAAU,GACV,YAAY,CACf,GAAG;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC;AAE3F;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,wBAAwB,CAAC"}

package/dist/models/config.d.ts

@@ -188,7 +188,8 @@ export interface BaseConfig<T = unknown> extends WithPreferences, WithExtensions
      *   `endSession`, `wellKnown`) — by default derived from the well-known discovery document at
      *   `{baseUrl}/oauth2/token/.well-known/openid-configuration`. Individual overrides take
      *   precedence over values resolved from the discovery document.
-     * - **Resource-server endpoints** (`flowExecute`, `flowMeta`, `usersMe`) —
+     * - **Resource-server endpoints** (`flowExecute`, `flowMeta`, `usersMe`, `usersMeCredentials`, and the
+     *   management collections `applications`, `users`, `agents`) —
      *   by default derived by concatenating `baseUrl` with a fixed path (e.g. `{baseUrl}/flow/execute`).
      *   These do not participate in OIDC discovery.
      *
@@ -215,6 +216,18 @@ export interface BaseConfig<T = unknown> extends WithPreferences, WithExtensions
      * }
      */
     endpoints?: {
+        /**
+         * The agents collection URL used by the agent management operations.
+         * A single agent is addressed as `{agents}/{id}`.
+         * If not provided, defaults to `{baseUrl}/agents`.
+         */
+        agents?: string;
+        /**
+         * The applications collection URL used by the application management operations.
+         * A single application is addressed as `{applications}/{id}`.
+         * If not provided, defaults to `{baseUrl}/applications`.
+         */
+        applications?: string;
         /**
          * The authorization endpoint URL.
          * If not provided, resolved from the well-known discovery document.
@@ -256,11 +269,23 @@ export interface BaseConfig<T = unknown> extends WithPreferences, WithExtensions
          * If not provided, resolved from the well-known discovery document.
          */
         userInfo?: string;
+        /**
+         * The users collection URL used by the user management operations.
+         * A single user is addressed as `{users}/{id}`.
+         * If not provided, defaults to `{baseUrl}/users`.
+         */
+        users?: string;
         /**
          * The current-user profile endpoint URL used to fetch and update the signed-in user's profile.
          * If not provided, defaults to `{baseUrl}/users/me`.
          */
         usersMe?: string;
+        /**
+         * The self-service credential update endpoint URL used to change one of the signed-in
+         * user's own credentials (for example `password` or `pin`).
+         * If not provided, defaults to `{baseUrl}/users/me/update-credentials`.
+         */
+        usersMeCredentials?: string;
         /**
          * The user profile schema metadata endpoint URL used to fetch profile schema attributes.
          * If not provided, defaults to `{baseUrl}/users/me/meta`.

package/dist/models/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/models/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAC,uBAAuB,EAAC,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAC,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAC,UAAU,EAAC,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,gBAAgB,CAAC;AAEtD;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,eAAe,EAAE,cAAc;IAC9E;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAEjC;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC;;;;;;;;;OASG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAErC;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE;QACV;;;WAGG;QACH,SAAS,CAAC,EAAE;YACV;;;eAGG;YACH,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,CAAC;KACH,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,SAAS,CAAC,EAAE;QACV;;;WAGG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;WAGG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;WAGG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;WAGG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;;WAGG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;WAGG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;WAGG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;WAGG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;WAGG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAE/B;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAAC;IAExD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE;QAClB;;;WAGG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B;;;WAGG;QACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IAEF;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAEvC;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B;;;OAGG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC;IAEZ;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,cAAc,CAAC,EAAE;QACf;;WAEG;QACH,YAAY,CAAC,EAAE;YACb;;eAEG;YACH,WAAW,CAAC,EAAE,OAAO,CAAC;SACvB,CAAC;QAEF;;WAEG;QACH,WAAW,CAAC,EAAE;YACZ;;;;;;;;;eASG;YACH,eAAe,CAAC,EAAE,OAAO,CAAC;SAC3B,CAAC;KACH,CAAC;IAEF;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;;;;;;;;;WAUG;QACH,UAAU,CAAC,EAAE,uBAAuB,CAAC;QACrC;;;;;;WAMG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IAEF;;;;;;OAMG;IACH,eAAe,CAAC,EAAE;QAChB;;WAEG;QACH,OAAO,CAAC,EAAE;YACR;;eAEG;YACH,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB;;eAEG;YACH,QAAQ,CAAC,EAAE,OAAO,CAAC;YACnB;;eAEG;YACH,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,MAAM,CAAC,CAAC,GAAG,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,cAAc,GAAG,MAAM,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE5C;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE7C;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG;IAAC,SAAS,CAAC,EAAE;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAC,CAAA;CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG;IAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CAAC,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/models/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,oBAAoB,EAAC,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAC,iBAAiB,EAAC,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAC,uBAAuB,EAAC,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAC,gBAAgB,EAAC,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAC,UAAU,EAAC,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAC,WAAW,EAAE,SAAS,EAAC,MAAM,gBAAgB,CAAC;AAEtD;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,eAAe,EAAE,cAAc;IAC9E;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAEjC;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC;;;;;;;;;OASG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEpC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAErC;;;;;;;;;;;;;;;OAeG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE/B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAElC;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE;QACV;;;WAGG;QACH,SAAS,CAAC,EAAE;YACV;;;eAGG;YACH,OAAO,CAAC,EAAE,OAAO,CAAC;SACnB,CAAC;KACH,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,SAAS,CAAC,EAAE;QACV;;;;WAIG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB;;;;WAIG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB;;;WAGG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;WAGG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;WAGG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB;;;WAGG;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;QACd;;;WAGG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;WAGG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;WAGG;QACH,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB;;;;WAIG;QACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B;;;WAGG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;WAGG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAE/B;;;;;;;;;;OAUG;IACH,SAAS,CAAC,EAAE,oBAAoB,GAAG,oBAAoB,CAAC;IAExD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE;QAClB;;;WAGG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B;;;WAGG;QACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IAEF;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAExC;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAEvC;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B;;;OAGG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/B;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,CAAC;IAEZ;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,cAAc,CAAC,EAAE;QACf;;WAEG;QACH,YAAY,CAAC,EAAE;YACb;;eAEG;YACH,WAAW,CAAC,EAAE,OAAO,CAAC;SACvB,CAAC;QAEF;;WAEG;QACH,WAAW,CAAC,EAAE;YACZ;;;;;;;;;eASG;YACH,eAAe,CAAC,EAAE,OAAO,CAAC;SAC3B,CAAC;KACH,CAAC;IAEF;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;;;;;;;;;WAUG;QACH,UAAU,CAAC,EAAE,uBAAuB,CAAC;QACrC;;;;;;WAMG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAClC,CAAC;IAEF;;;;;;OAMG;IACH,eAAe,CAAC,EAAE;QAChB;;WAEG;QACH,OAAO,CAAC,EAAE;YACR;;eAEG;YACH,cAAc,CAAC,EAAE,MAAM,CAAC;YACxB;;eAEG;YACH,QAAQ,CAAC,EAAE,OAAO,CAAC;YACnB;;eAEG;YACH,cAAc,CAAC,EAAE,OAAO,CAAC;SAC1B,CAAC;KACH,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,MAAM,CAAC,CAAC,GAAG,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,cAAc,GAAG,MAAM,CAAC;AAErE,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB;;OAEG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB;;;OAGG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE5C;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE7C;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG;IAAC,SAAS,CAAC,EAAE;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAC,CAAA;CAAC,CAAC;AAEpF;;GAEG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC;AAEjE;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG;IAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;CAAC,CAAC"}

package/dist/models/managed-user.d.ts

@@ -0,0 +1,44 @@
+import { ApiPaginationLink } from './api';
+/**
+ * A user record managed through the ThunderID management API.
+ *
+ * This is a server record, distinct from {@link User}, which describes the signed-in user.
+ */
+export interface ManagedUser {
+    attributes?: Record<string, unknown>;
+    display?: string;
+    id: string;
+    isReadOnly?: boolean;
+    ouHandle?: string;
+    ouId: string;
+    type: string;
+}
+/**
+ * A page of users.
+ */
+export interface ManagedUserListResponse {
+    count: number;
+    links?: ApiPaginationLink[];
+    startIndex: number;
+    totalResults: number;
+    users: ManagedUser[];
+}
+/**
+ * The payload used to create a user.
+ */
+export interface CreateManagedUserRequest {
+    attributes?: Record<string, unknown>;
+    groups?: string[];
+    ouId: string;
+    type: string;
+}
+/**
+ * The payload used to update a user.
+ */
+export interface UpdateManagedUserRequest {
+    attributes?: Record<string, unknown>;
+    groups?: string[];
+    ouId?: string;
+    type?: string;
+}
+//# sourceMappingURL=managed-user.d.ts.map

package/dist/models/managed-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-user.d.ts","sourceRoot":"","sources":["../../src/models/managed-user.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,iBAAiB,EAAC,MAAM,OAAO,CAAC;AAExC;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,WAAW,EAAE,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf"}

package/dist/utils/evaluateChangePasswordForm.d.ts

@@ -0,0 +1,64 @@
+import { PasswordPolicy, PasswordRuleResult } from './evaluatePasswordPolicy';
+/**
+ * The two values a change-password form collects.
+ *
+ * There is deliberately no `currentPassword` here. The self-service credential write
+ * endpoint does not verify the account's existing value today, so a field the server
+ * ignores would only teach the user a false sense of security; once server-side
+ * current-value verification ships, this form gains that field back.
+ */
+export interface ChangePasswordFormValues {
+    /**
+     * The re-typed new password, used only to catch typos client-side.
+     */
+    confirmPassword: string;
+    /**
+     * The password to set.
+     */
+    newPassword: string;
+}
+/**
+ * The derived state a change-password form needs to render and to gate submission.
+ */
+export interface ChangePasswordFormEvaluation {
+    /**
+     * Whether the new password and its confirmation match.
+     */
+    confirmMatches: boolean;
+    /**
+     * Whether the values are complete and internally consistent. Callers combine this with
+     * their own in-flight flag, since whether a request is pending is UI state rather than
+     * validation.
+     */
+    isValid: boolean;
+    /**
+     * Whether the new password satisfies every configured rule.
+     */
+    meetsPolicy: boolean;
+    /**
+     * Per-rule results, for the live requirement checklist.
+     */
+    ruleResults: PasswordRuleResult[];
+}
+/**
+ * Evaluates a change-password form against a policy.
+ *
+ * Every predicate a change-password UI needs is derived here so the React and Vue
+ * components stay pure rendering concerns and cannot drift apart on what counts as a
+ * submittable form.
+ *
+ * @param values - The current field values.
+ * @param policy - The rules the new password must satisfy.
+ * @returns The derived flags plus the per-rule results.
+ * @example
+ * ```typescript
+ * const {isValid, ruleResults} = evaluateChangePasswordForm(
+ *   {confirmPassword, newPassword},
+ *   {regex: '^.{12,}$'},
+ * );
+ * const canSubmit = !loading && isValid;
+ * ```
+ */
+declare const evaluateChangePasswordForm: (values: ChangePasswordFormValues, policy: PasswordPolicy) => ChangePasswordFormEvaluation;
+export default evaluateChangePasswordForm;
+//# sourceMappingURL=evaluateChangePasswordForm.d.ts.map

package/dist/utils/evaluateChangePasswordForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateChangePasswordForm.d.ts","sourceRoot":"","sources":["../../src/utils/evaluateChangePasswordForm.ts"],"names":[],"mappings":"AAGA,OAA+B,EAAC,cAAc,EAAE,kBAAkB,EAAC,MAAM,0BAA0B,CAAC;AAEpG;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,QAAA,MAAM,0BAA0B,GAC9B,QAAQ,wBAAwB,EAChC,QAAQ,cAAc,KACrB,4BAUF,CAAC;AAEF,eAAe,0BAA0B,CAAC"}