@tryfinch/finch-api 8.2.1 → 9.8.0

package/src/client.ts

@@ -11,7 +11,7 @@ import type { APIResponseProps } from './internal/parse';
 import { getPlatformHeaders } from './internal/detect-platform';
 import * as Shims from './internal/shims';
 import * as Opts from './internal/request-options';
-import * as qs from './internal/qs';
+import { stringifyQuery } from './internal/utils/query';
 import { VERSION } from './version';
 import * as Errors from './core/error';
 import * as Pagination from './core/pagination';
@@ -241,6 +241,18 @@ export class Finch {
     this.fetch = options.fetch ?? Shims.getDefaultFetch();
     this.#encoder = Opts.FallbackEncoder;
 
+    const customHeadersEnv = readEnv('FINCH_CUSTOM_HEADERS');
+    if (customHeadersEnv) {
+      const parsed: Record<string, string> = {};
+      for (const line of customHeadersEnv.split('\n')) {
+        const colon = line.indexOf(':');
+        if (colon >= 0) {
+          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
+        }
+      }
+      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };
+    }
+
     this._options = options;
 
     this.accessToken = accessToken;
@@ -302,8 +314,14 @@ export class Finch {
     );
   }
 
-  protected async authHeaders(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
-    return buildHeaders([await this.bearerAuth(opts), await this.basicAuth(opts)]);
+  protected async authHeaders(
+    opts: FinalRequestOptions,
+    schemes: { bearerAuth?: boolean; basicAuth?: boolean },
+  ): Promise<NullableHeaders | undefined> {
+    return buildHeaders([
+      schemes.bearerAuth ? await this.bearerAuth(opts) : null,
+      schemes.basicAuth ? await this.basicAuth(opts) : null,
+    ]);
   }
 
   protected async bearerAuth(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
@@ -327,8 +345,8 @@ export class Finch {
     return buildHeaders([{ Authorization }]);
   }
 
-  protected stringifyQuery(query: Record<string, unknown>): string {
-    return qs.stringify(query, { arrayFormat: 'brackets' });
+  protected stringifyQuery(query: object | Record<string, unknown>): string {
+    return stringifyQuery(query);
   }
 
   private getUserAgent(): string {
@@ -360,12 +378,13 @@ export class Finch {
       : new URL(baseURL + (baseURL.endsWith('/') && path.startsWith('/') ? path.slice(1) : path));
 
     const defaultQuery = this.defaultQuery();
-    if (!isEmptyObj(defaultQuery)) {
-      query = { ...defaultQuery, ...query };
+    const pathQuery = Object.fromEntries(url.searchParams);
+    if (!isEmptyObj(defaultQuery) || !isEmptyObj(pathQuery)) {
+      query = { ...pathQuery, ...defaultQuery, ...query };
     }
 
     if (typeof query === 'object' && query && !Array.isArray(query)) {
-      url.search = this.stringifyQuery(query as Record<string, unknown>);
+      url.search = this.stringifyQuery(query);
     }
 
     return url.toString();
@@ -549,7 +568,7 @@ export class Finch {
       loggerFor(this).info(`${responseInfo} - ${retryMessage}`);
 
       const errText = await response.text().catch((err: any) => castToError(err).message);
-      const errJSON = safeJSON(errText);
+      const errJSON = safeJSON(errText) as any;
       const errMessage = errJSON ? undefined : errText;
 
       loggerFor(this).debug(
@@ -586,9 +605,14 @@ export class Finch {
   getAPIList<Item, PageClass extends Pagination.AbstractPage<Item> = Pagination.AbstractPage<Item>>(
     path: string,
     Page: new (...args: any[]) => PageClass,
-    opts?: RequestOptions,
+    opts?: PromiseOrValue<RequestOptions>,
   ): Pagination.PagePromise<PageClass, Item> {
-    return this.requestAPIList(Page, { method: 'get', path, ...opts });
+    return this.requestAPIList(
+      Page,
+      opts && 'then' in opts ?
+        opts.then((opts) => ({ method: 'get', path, ...opts }))
+      : { method: 'get', path, ...opts },
+    );
   }
 
   requestAPIList<
@@ -596,7 +620,7 @@ export class Finch {
     PageClass extends Pagination.AbstractPage<Item> = Pagination.AbstractPage<Item>,
   >(
     Page: new (...args: ConstructorParameters<typeof Pagination.AbstractPage>) => PageClass,
-    options: FinalRequestOptions,
+    options: PromiseOrValue<FinalRequestOptions>,
   ): Pagination.PagePromise<PageClass, Item> {
     const request = this.makeRequest(options, null, undefined);
     return new Pagination.PagePromise<PageClass, Item>(this as any as Finch, request, Page);
@@ -609,9 +633,10 @@ export class Finch {
     controller: AbortController,
   ): Promise<Response> {
     const { signal, method, ...options } = init || {};
-    if (signal) signal.addEventListener('abort', () => controller.abort());
+    const abort = this._makeAbort(controller);
+    if (signal) signal.addEventListener('abort', abort, { once: true });
 
-    const timeout = setTimeout(() => controller.abort(), ms);
+    const timeout = setTimeout(abort, ms);
 
     const isReadableBody =
       ((globalThis as any).ReadableStream && options.body instanceof (globalThis as any).ReadableStream) ||
@@ -688,9 +713,9 @@ export class Finch {
       }
     }
 
-    // If the API asks us to wait a certain amount of time (and it's a reasonable amount),
-    // just do what it says, but otherwise calculate a default
-    if (!(timeoutMillis && 0 <= timeoutMillis && timeoutMillis < 60 * 1000)) {
+    // If the API asks us to wait a certain amount of time, just do what it
+    // says, but otherwise calculate a default
+    if (timeoutMillis === undefined) {
       const maxRetries = options.maxRetries ?? this.maxRetries;
       timeoutMillis = this.calculateDefaultRetryTimeoutMillis(retriesRemaining, maxRetries);
     }
@@ -768,7 +793,7 @@ export class Finch {
         ...getPlatformHeaders(),
         'Finch-API-Version': '2020-09-17',
       },
-      await this.authHeaders(options),
+      await this.authHeaders(options, options.__security ?? { bearerAuth: true, basicAuth: true }),
       this._options.defaultHeaders,
       bodyHeaders,
       options.headers,
@@ -779,6 +804,12 @@ export class Finch {
     return headers.values;
   }
 
+  private _makeAbort(controller: AbortController) {
+    // note: we can't just inline this method inside `fetchWithTimeout()` because then the closure
+    //       would capture all request options, and cause a memory leak.
+    return () => controller.abort();
+  }
+
   private buildBody({ options: { body, headers: rawHeaders } }: { options: FinalRequestOptions }): {
     bodyHeaders: HeadersLike;
     body: BodyInit | undefined;
@@ -811,6 +842,14 @@ export class Finch {
         (Symbol.iterator in body && 'next' in body && typeof body.next === 'function'))
     ) {
       return { bodyHeaders: undefined, body: Shims.ReadableStreamFrom(body as AsyncIterable<Uint8Array>) };
+    } else if (
+      typeof body === 'object' &&
+      headers.values.get('content-type') === 'application/x-www-form-urlencoded'
+    ) {
+      return {
+        bodyHeaders: { 'content-type': 'application/x-www-form-urlencoded' },
+        body: this.stringifyQuery(body),
+      };
     } else {
       return this.#encoder({ body, headers });
     }

package/src/internal/parse.ts

@@ -29,6 +29,12 @@ export async function defaultParseResponse<T>(client: Finch, props: APIResponseP
     const mediaType = contentType?.split(';')[0]?.trim();
     const isJSON = mediaType?.includes('application/json') || mediaType?.endsWith('+json');
     if (isJSON) {
+      const contentLength = response.headers.get('content-length');
+      if (contentLength === '0') {
+        // if there is no content we can't do anything
+        return undefined as T;
+      }
+
       const json = await response.json();
       return json as T;
     }

package/src/internal/request-options.ts

@@ -75,6 +75,8 @@ export type RequestOptions = {
    */
   defaultBaseURL?: string | undefined;
 
+  __security?: { bearerAuth?: boolean; basicAuth?: boolean };
+
   __binaryResponse?: boolean | undefined;
 };
 

package/src/internal/types.ts

@@ -40,7 +40,6 @@ type OverloadedParameters<T> =
   : T extends (...args: infer A) => unknown ? A
   : never;
 
-/* eslint-disable */
 /**
  * These imports attempt to get types from a parent package's dependencies.
  * Unresolved bare specifiers can trigger [automatic type acquisition][1] in some projects, which
@@ -63,19 +62,18 @@ type OverloadedParameters<T> =
  *
  * [1]: https://www.typescriptlang.org/tsconfig/#typeAcquisition
  */
-/** @ts-ignore For users with \@types/node */
+/** @ts-ignore For users with \@types/node */ /* prettier-ignore */
 type UndiciTypesRequestInit = NotAny<import('../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../../node_modules/undici-types/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../../../node_modules/undici-types/index.d.ts').RequestInit>;
-/** @ts-ignore For users with undici */
+/** @ts-ignore For users with undici */ /* prettier-ignore */
 type UndiciRequestInit = NotAny<import('../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../../node_modules/undici/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../../../node_modules/undici/index.d.ts').RequestInit>;
-/** @ts-ignore For users with \@types/bun */
+/** @ts-ignore For users with \@types/bun */ /* prettier-ignore */
 type BunRequestInit = globalThis.FetchRequestInit;
-/** @ts-ignore For users with node-fetch@2 */
+/** @ts-ignore For users with node-fetch@2 */ /* prettier-ignore */
 type NodeFetch2RequestInit = NotAny<import('../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit> | NotAny<import('../../../../../../../../../../node_modules/@types/node-fetch/index.d.ts').RequestInit>;
-/** @ts-ignore For users with node-fetch@3, doesn't need file extension because types are at ./@types/index.d.ts */
+/** @ts-ignore For users with node-fetch@3, doesn't need file extension because types are at ./@types/index.d.ts */ /* prettier-ignore */
 type NodeFetch3RequestInit =  NotAny<import('../node_modules/node-fetch').RequestInit> | NotAny<import('../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../../../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../../../../../../node_modules/node-fetch').RequestInit> | NotAny<import('../../../../../../../../../../node_modules/node-fetch').RequestInit>;
-/** @ts-ignore For users who use Deno */
+/** @ts-ignore For users who use Deno */ /* prettier-ignore */
 type FetchRequestInit = NonNullable<OverloadedParameters<typeof fetch>[1]>;
-/* eslint-enable */
 
 type RequestInits =
   | NotAny<UndiciTypesRequestInit>

package/src/internal/utils/env.ts

@@ -9,10 +9,10 @@
  */
 export const readEnv = (env: string): string | undefined => {
   if (typeof (globalThis as any).process !== 'undefined') {
-    return (globalThis as any).process.env?.[env]?.trim() ?? undefined;
+    return (globalThis as any).process.env?.[env]?.trim() || undefined;
   }
   if (typeof (globalThis as any).Deno !== 'undefined') {
-    return (globalThis as any).Deno.env?.get?.(env)?.trim();
+    return (globalThis as any).Deno.env?.get?.(env)?.trim() || undefined;
   }
   return undefined;
 };

package/src/internal/utils/log.ts

@@ -107,6 +107,8 @@ export const formatRequestDetails = (details: {
           name,
           (
             name.toLowerCase() === 'authorization' ||
+            name.toLowerCase() === 'api-key' ||
+            name.toLowerCase() === 'x-api-key' ||
             name.toLowerCase() === 'cookie' ||
             name.toLowerCase() === 'set-cookie'
           ) ?

package/src/internal/utils/query.ts

@@ -0,0 +1,7 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+
+import * as qs from '../qs/stringify';
+
+export function stringifyQuery(query: object | Record<string, unknown>) {
+  return qs.stringify(query, { arrayFormat: 'brackets' });
+}

package/src/internal/utils.ts

@@ -6,3 +6,4 @@ export * from './utils/env';
 export * from './utils/log';
 export * from './utils/uuid';
 export * from './utils/sleep';
+export * from './utils/query';

package/src/resources/access-tokens.ts

@@ -32,6 +32,7 @@ export class AccessTokens extends APIResource {
       body: bodyWithReplacements,
       ...options,
       headers: headersWithReplacements,
+      __security: {},
     });
   }
 }
@@ -97,6 +98,12 @@ export interface CreateAccessTokenResponse {
    * for this connection
    */
   customer_id?: string | null;
+
+  /**
+   * The name of your customer you provided to Finch when a connect session was
+   * created for this connection
+   */
+  customer_name?: string | null;
 }
 
 export interface AccessTokenCreateParams {

package/src/resources/account.ts

@@ -10,14 +10,14 @@ export class Account extends APIResource {
    * Disconnect one or more `access_token`s from your application.
    */
   disconnect(options?: RequestOptions): APIPromise<DisconnectResponse> {
-    return this._client.post('/disconnect', options);
+    return this._client.post('/disconnect', { ...options, __security: { bearerAuth: true } });
   }
 
   /**
    * Read account information associated with an `access_token`
    */
   introspect(options?: RequestOptions): APIPromise<Introspection> {
-    return this._client.get('/introspect', options);
+    return this._client.get('/introspect', { ...options, __security: { bearerAuth: true } });
   }
 }
 
@@ -180,6 +180,18 @@ export namespace Introspection {
      * The source ID of the entity
      */
     source_id: string | null;
+
+    /**
+     * The status of the entity connection
+     */
+    status:
+      | 'pending'
+      | 'processing'
+      | 'connected'
+      | 'error_no_account_setup'
+      | 'error_permissions'
+      | 'reauth'
+      | 'disconnected';
   }
 }
 

package/src/resources/connect/sessions.ts

@@ -9,7 +9,7 @@ export class Sessions extends APIResource {
    * Create a new connect session for an employer
    */
   new(body: SessionNewParams, options?: RequestOptions): APIPromise<SessionNewResponse> {
-    return this._client.post('/connect/sessions', { body, ...options });
+    return this._client.post('/connect/sessions', { body, ...options, __security: { basicAuth: true } });
   }
 
   /**
@@ -19,7 +19,11 @@ export class Sessions extends APIResource {
     body: SessionReauthenticateParams,
     options?: RequestOptions,
   ): APIPromise<SessionReauthenticateResponse> {
-    return this._client.post('/connect/sessions/reauthenticate', { body, ...options });
+    return this._client.post('/connect/sessions/reauthenticate', {
+      body,
+      ...options,
+      __security: { basicAuth: true },
+    });
   }
 }
 
@@ -59,7 +63,9 @@ export interface SessionNewParams {
   customer_name: string;
 
   /**
-   * The Finch products to request access to
+   * The Finch products to request access to. Use `benefits` to access deductions
+   * endpoints — `deduction` is a deprecated alias that is still accepted but should
+   * not be combined with `benefits`.
    */
   products: Array<
     | 'benefits'
@@ -136,7 +142,9 @@ export interface SessionReauthenticateParams {
   minutes_to_expire?: number;
 
   /**
-   * The products to request access to (optional for reauthentication)
+   * The products to request access to (optional for reauthentication). Use
+   * `benefits` to access deductions endpoints — `deduction` is a deprecated alias
+   * that is still accepted but should not be combined with `benefits`.
    */
   products?: Array<
     | 'benefits'

package/src/resources/hris/benefits/benefits.ts

@@ -38,7 +38,12 @@ export class Benefits extends APIResource {
     options?: RequestOptions,
   ): APIPromise<CreateCompanyBenefitsResponse> {
     const { entity_ids, ...body } = params ?? {};
-    return this._client.post('/employer/benefits', { query: { entity_ids }, body, ...options });
+    return this._client.post('/employer/benefits', {
+      query: { entity_ids },
+      body,
+      ...options,
+      __security: { bearerAuth: true },
+    });
   }
 
   /**
@@ -56,7 +61,11 @@ export class Benefits extends APIResource {
     query: BenefitRetrieveParams | null | undefined = {},
     options?: RequestOptions,
   ): APIPromise<CompanyBenefit> {
-    return this._client.get(path`/employer/benefits/${benefitID}`, { query, ...options });
+    return this._client.get(path`/employer/benefits/${benefitID}`, {
+      query,
+      ...options,
+      __security: { bearerAuth: true },
+    });
   }
 
   /**
@@ -78,6 +87,7 @@ export class Benefits extends APIResource {
       query: { entity_ids },
       body,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 
@@ -96,7 +106,11 @@ export class Benefits extends APIResource {
     query: BenefitListParams | null | undefined = {},
     options?: RequestOptions,
   ): PagePromise<CompanyBenefitsSinglePage, CompanyBenefit> {
-    return this._client.getAPIList('/employer/benefits', SinglePage<CompanyBenefit>, { query, ...options });
+    return this._client.getAPIList('/employer/benefits', SinglePage<CompanyBenefit>, {
+      query,
+      ...options,
+      __security: { bearerAuth: true },
+    });
   }
 
   /**
@@ -117,6 +131,7 @@ export class Benefits extends APIResource {
     return this._client.getAPIList('/employer/benefits/meta', SinglePage<SupportedBenefit>, {
       query,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 }
@@ -126,12 +141,12 @@ export type CompanyBenefitsSinglePage = SinglePage<CompanyBenefit>;
 export type SupportedBenefitsSinglePage = SinglePage<SupportedBenefit>;
 
 export type BenefitContribution =
-  | BenefitContribution.UnionMember0
-  | BenefitContribution.UnionMember1
-  | BenefitContribution.UnionMember2;
+  | BenefitContribution.BenefitContributionFixed
+  | BenefitContribution.BenefitContributionPercent
+  | BenefitContribution.BenefitContributionTiered;
 
 export namespace BenefitContribution {
-  export interface UnionMember0 {
+  export interface BenefitContributionFixed {
     /**
      * Contribution amount in cents.
      */
@@ -143,7 +158,7 @@ export namespace BenefitContribution {
     type: 'fixed';
   }
 
-  export interface UnionMember1 {
+  export interface BenefitContributionPercent {
     /**
      * Contribution amount in basis points (1/100th of a percent).
      */
@@ -155,12 +170,12 @@ export namespace BenefitContribution {
     type: 'percent';
   }
 
-  export interface UnionMember2 {
+  export interface BenefitContributionTiered {
     /**
      * Array of tier objects defining employer match tiers based on employee
      * contribution thresholds.
      */
-    tiers: Array<UnionMember2.Tier>;
+    tiers: Array<BenefitContributionTiered.Tier>;
 
     /**
      * Tiered contribution type (only valid for company_contribution).
@@ -168,7 +183,7 @@ export namespace BenefitContribution {
     type: 'tiered';
   }
 
-  export namespace UnionMember2 {
+  export namespace BenefitContributionTiered {
     export interface Tier {
       match: number;
 

package/src/resources/hris/benefits/individuals.ts

@@ -31,6 +31,7 @@ export class Individuals extends APIResource {
       query: { entity_ids },
       body: individuals,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 
@@ -50,7 +51,11 @@ export class Individuals extends APIResource {
     query: IndividualEnrolledIDsParams | null | undefined = {},
     options?: RequestOptions,
   ): APIPromise<IndividualEnrolledIDsResponse> {
-    return this._client.get(path`/employer/benefits/${benefitID}/enrolled`, { query, ...options });
+    return this._client.get(path`/employer/benefits/${benefitID}/enrolled`, {
+      query,
+      ...options,
+      __security: { bearerAuth: true },
+    });
   }
 
   /**
@@ -74,7 +79,7 @@ export class Individuals extends APIResource {
     return this._client.getAPIList(
       path`/employer/benefits/${benefitID}/individuals`,
       SinglePage<IndividualBenefit>,
-      { query, ...options },
+      { query, ...options, __security: { bearerAuth: true } },
     );
   }
 
@@ -99,6 +104,7 @@ export class Individuals extends APIResource {
       query: { entity_ids },
       body,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 }
@@ -110,7 +116,7 @@ export interface EnrolledIndividualBenefitResponse {
 }
 
 export interface IndividualBenefit {
-  body: IndividualBenefit.UnionMember0 | IndividualBenefit.BatchError;
+  body: IndividualBenefit.IndividualBenefit | IndividualBenefit.BatchError;
 
   code: number;
 
@@ -118,7 +124,7 @@ export interface IndividualBenefit {
 }
 
 export namespace IndividualBenefit {
-  export interface UnionMember0 {
+  export interface IndividualBenefit {
     /**
      * If the benefit supports annual maximum, the amount in cents for this individual.
      */
@@ -136,16 +142,19 @@ export namespace IndividualBenefit {
      * matching structures.
      */
     company_contribution:
-      | UnionMember0.UnionMember0
-      | UnionMember0.UnionMember1
-      | UnionMember0.UnionMember2
+      | IndividualBenefit.CompanyContributionFixed
+      | IndividualBenefit.CompanyContributionPercent
+      | IndividualBenefit.CompanyContributionTiered
       | null;
 
     /**
      * Employee deduction configuration. Supports both fixed amounts (in cents) and
      * percentage-based contributions (in basis points where 100 = 1%).
      */
-    employee_deduction: UnionMember0.UnionMember0 | UnionMember0.UnionMember1 | null;
+    employee_deduction:
+      | IndividualBenefit.EmployeeDeductionContributionFixed
+      | IndividualBenefit.EmployeeDeductionContributionPercent
+      | null;
 
     /**
      * Type for HSA contribution limit if the benefit is a HSA.
@@ -153,8 +162,8 @@ export namespace IndividualBenefit {
     hsa_contribution_limit?: 'individual' | 'family' | null;
   }
 
-  export namespace UnionMember0 {
-    export interface UnionMember0 {
+  export namespace IndividualBenefit {
+    export interface CompanyContributionFixed {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%). Not used for type=tiered.
@@ -168,7 +177,7 @@ export namespace IndividualBenefit {
       type: 'fixed';
     }
 
-    export interface UnionMember1 {
+    export interface CompanyContributionPercent {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%). Not used for type=tiered.
@@ -182,12 +191,12 @@ export namespace IndividualBenefit {
       type: 'percent';
     }
 
-    export interface UnionMember2 {
+    export interface CompanyContributionTiered {
       /**
        * Array of tier objects defining employer match tiers based on employee
        * contribution thresholds. Required when type=tiered.
        */
-      tiers: Array<UnionMember2.Tier>;
+      tiers: Array<CompanyContributionTiered.Tier>;
 
       /**
        * Contribution type. Supported values: "fixed" (amount in cents), "percent"
@@ -196,7 +205,7 @@ export namespace IndividualBenefit {
       type: 'tiered';
     }
 
-    export namespace UnionMember2 {
+    export namespace CompanyContributionTiered {
       export interface Tier {
         match: number;
 
@@ -204,7 +213,7 @@ export namespace IndividualBenefit {
       }
     }
 
-    export interface UnionMember0 {
+    export interface EmployeeDeductionContributionFixed {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%).
@@ -218,7 +227,7 @@ export namespace IndividualBenefit {
       type: 'fixed';
     }
 
-    export interface UnionMember1 {
+    export interface EmployeeDeductionContributionPercent {
       /**
        * Contribution amount in cents (for type=fixed) or basis points (for type=percent,
        * where 100 = 1%).

package/src/resources/hris/company/company.ts

@@ -29,7 +29,7 @@ export class CompanyResource extends APIResource {
     query: CompanyRetrieveParams | null | undefined = {},
     options?: RequestOptions,
   ): APIPromise<Company> {
-    return this._client.get('/employer/company', { query, ...options });
+    return this._client.get('/employer/company', { query, ...options, __security: { bearerAuth: true } });
   }
 }
 

package/src/resources/hris/company/pay-statement-item/pay-statement-item.ts

@@ -39,7 +39,7 @@ export class PayStatementItem extends APIResource {
     return this._client.getAPIList(
       '/employer/pay-statement-item',
       ResponsesPage<PayStatementItemListResponse>,
-      { query, ...options },
+      { query, ...options, __security: { bearerAuth: true } },
     );
   }
 }

package/src/resources/hris/company/pay-statement-item/rules.ts

@@ -28,6 +28,7 @@ export class Rules extends APIResource {
       query: { entity_ids },
       body,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 
@@ -52,6 +53,7 @@ export class Rules extends APIResource {
       query: { entity_ids },
       body,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 
@@ -73,6 +75,7 @@ export class Rules extends APIResource {
     return this._client.getAPIList('/employer/pay-statement-item/rule', ResponsesPage<RuleListResponse>, {
       query,
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 
@@ -96,6 +99,7 @@ export class Rules extends APIResource {
     return this._client.delete(path`/employer/pay-statement-item/rule/${ruleID}`, {
       query: { entity_ids },
       ...options,
+      __security: { bearerAuth: true },
     });
   }
 }