@vertesia/common 1.3.0 → 1.4.0-dev.20260614.160504Z

package/LICENSE

@@ -1,13 +1,201 @@
-Copyright 2024 Composable
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
 
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 
-    http://www.apache.org/licenses/LICENSE-2.0
+   1. Definitions.
 
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Vertesia
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/lib/{types/Progress.d.ts → Progress.d.ts}

@@ -19,3 +19,4 @@ export declare class Progress {
     span(units: number, spanUnits?: number): ProgressSpan;
 }
 export {};
+//# sourceMappingURL=Progress.d.ts.map

package/lib/Progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Progress.d.ts","sourceRoot":"","sources":["../src/Progress.ts"],"names":[],"mappings":"AAAA,cAAM,YAAY;IAGH,MAAM,EAAE,QAAQ;IAChB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,MAAM;IAJ5B,SAAS,EAAE,MAAM,CAAC;gBAEP,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM;IAK5B,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM;IAUnB,IAAI,eAAe,WAElB;IAED,IAAI,MAAM,YAET;CACJ;AAED,qBAAa,QAAQ;IAGE,KAAK,EAAE,MAAM;IAFhC,SAAS,EAAE,MAAM,CAAK;gBAEH,KAAK,EAAE,MAAM;IAEhC,IAAI,QAAQ,WAEX;IAED,IAAI,OAAO,WAEV;IAED,IAAI,MAAM,YAET;IAED,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM;IASnB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY;CAGxD"}

package/lib/{esm/Progress.js → Progress.js}

@@ -17,10 +17,10 @@ class ProgressSpan {
             units = remaining;
         }
         this.unitsDone += units;
-        this.parent.done(units * this.parentUnits / this.spanUnits);
+        this.parent.done((units * this.parentUnits) / this.spanUnits);
     }
     get parentUnitsDone() {
-        return Math.round(this.unitsDone * this.parentUnits / this.spanUnits);
+        return Math.round((this.unitsDone * this.parentUnits) / this.spanUnits);
     }
     get isDone() {
         return this.unitsDone >= this.spanUnits;

package/lib/Progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Progress.js","sourceRoot":"","sources":["../src/Progress.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY;IAGH;IACA;IACA;IAJX,SAAS,CAAS;IAClB,YACW,MAAgB,EAChB,WAAmB,EACnB,SAAiB;QAFjB,WAAM,GAAN,MAAM,CAAU;QAChB,gBAAW,GAAX,WAAW,CAAQ;QACnB,cAAS,GAAT,SAAS,CAAQ;QAExB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,KAAc;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAClD,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,yBAAyB;QACjD,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YAC9B,KAAK,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,eAAe;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,MAAM;QACN,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,OAAO,QAAQ;IAGE;IAFnB,SAAS,GAAW,CAAC,CAAC;IAEtB,YAAmB,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAEpC,IAAI,QAAQ;QACR,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;IACvC,CAAC;IAED,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,MAAM;QACN,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC;IACxC,CAAC;IAED,IAAI,CAAC,KAAc;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9C,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,yBAAyB;QACjD,IAAI,CAAC,KAAK,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YAC9B,KAAK,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,SAAkB;QAClC,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC;IAC7D,CAAC;CACJ"}

package/lib/{types/access-control.d.ts → access-control.d.ts}

@@ -3,7 +3,7 @@
  * @description
  * Access control interfaces
  */
-import { ProjectRoles } from "./project.js";
+import type { ProjectRoles } from './project.js';
 export declare enum Permission {
     int_read = "interaction:read",
     int_write = "interaction:write",
@@ -12,11 +12,13 @@ export declare enum Permission {
     run_read = "run:read",
     run_write = "run:write",
     env_admin = "environment:admin",
+    app_manage = "app:manage",
     project_admin = "project:admin",
     project_integration_read = "project:integration_read",
     project_settings_write = "project:settings_write",
     api_key_create = "api_key:create",
     api_key_read = "api_key:read",
+    api_key_secret_read = "api_key:secret_read",
     api_key_update = "api_key:update",
     api_key_delete = "api_key:delete",
     account_read = "account:read",
@@ -25,15 +27,22 @@ export declare enum Permission {
     manage_billing = "account:billing",
     /** View cost and usage analytics */
     billing_read = "billing:read",
+    /** View account and project audit events. */
+    audit_read = "audit:read",
     account_member = "account:member",
     content_read = "content:read",
+    content_read_all = "content:read_all",
     content_write = "content:write",
     content_delete = "content:delete",
     content_admin = "content:admin",//manage schemas
     content_superadmin = "content:superadmin",// list all objects and collections
+    workflow_read = "workflow:read",
     workflow_run = "workflow:run",
     workflow_admin = "workflow:admin",
     workflow_superadmin = "workflow:superadmin",
+    agent_run_read = "agent_run:read",
+    task_read = "task:read",
+    task_manage = "task:manage",
     iam_impersonate = "iam:impersonate",
     /** whether the user has access to Sutdio App. */
     studio_access = "studio:access"
@@ -57,7 +66,7 @@ export declare enum AccessControlPrincipalType {
 /**
  * MongoDB query syntax subset for matching properties.
  * Keys are property names, values are either direct match values or operator objects.
- * Supported operators: `$eq`, `$ne`, `$gt`, `$gte`, `$lt`, `$lte`, `$in`, `$nin`, `$exists`.
+ * Supported operators: `$eq`, `$ne`, `$gt`, `$gte`, `$lt`, `$lte`, `$in`, `$nin`, `$exists`, `$empty`, `$like`.
  *
  * In `resource_props`, values can reference principal properties using the `$principal.` prefix.
  * These are resolved at token time by substituting the user's merged property value.
@@ -69,8 +78,8 @@ export declare enum AccessControlPrincipalType {
  * { region: { $in: ["us-east", "eu-west"] } }               // set membership (literal)
  * { security_level: { $lte: "$principal.access_level" } }   // cross-reference (resolved at token time)
  */
-/** A single condition value: literal, or operator object (e.g. { $lte: 3 }) */
-export type PropertyConditionValue = string | number | boolean | Record<string, any>;
+/** A single condition value. Resolved and evaluated dynamically by token/content security code. */
+export type PropertyConditionValue = unknown;
 export type PropertyConditions = Record<string, PropertyConditionValue>;
 /**
  * Conditions attached to an ACE for dynamic matching.
@@ -101,7 +110,7 @@ export interface AccessControlEntry {
     updated_at?: string;
     id: string;
 }
-export interface ACECreatePayload extends Omit<AccessControlEntry, "created_at" | "updated_at" | "id"> {
+export interface ACECreatePayload extends Omit<AccessControlEntry, 'created_at' | 'updated_at' | 'id'> {
 }
 export interface ACEUpdatePayload extends Partial<ACECreatePayload> {
 }
@@ -132,3 +141,4 @@ export interface AcesQueryOptions {
     role?: string;
     type?: AccessControlResourceType;
 }
+//# sourceMappingURL=access-control.d.ts.map

package/lib/access-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../src/access-control.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,oBAAY,UAAU;IAClB,QAAQ,qBAAqB;IAC7B,SAAS,sBAAsB;IAC/B,UAAU,uBAAuB;IAEjC,WAAW,wBAAwB;IACnC,QAAQ,aAAa;IACrB,SAAS,cAAc;IAEvB,SAAS,sBAAsB;IAE/B,UAAU,eAAe;IACzB,aAAa,kBAAkB;IAC/B,wBAAwB,6BAA6B;IACrD,sBAAsB,2BAA2B;IAEjD,cAAc,mBAAmB;IACjC,YAAY,iBAAiB;IAC7B,mBAAmB,wBAAwB;IAC3C,cAAc,mBAAmB;IACjC,cAAc,mBAAmB;IAEjC,YAAY,iBAAiB;IAC7B,aAAa,kBAAkB;IAC/B,aAAa,kBAAkB;IAC/B,cAAc,oBAAoB;IAClC,oCAAoC;IACpC,YAAY,iBAAiB;IAC7B,6CAA6C;IAC7C,UAAU,eAAe;IACzB,cAAc,mBAAmB;IAEjC,YAAY,iBAAiB;IAC7B,gBAAgB,qBAAqB;IACrC,aAAa,kBAAkB;IAC/B,cAAc,mBAAmB;IACjC,aAAa,kBAAkB,CAAE,gBAAgB;IACjD,kBAAkB,uBAAuB,CAAE,mCAAmC;IAE9E,aAAa,kBAAkB;IAC/B,YAAY,iBAAiB;IAC7B,cAAc,mBAAmB;IACjC,mBAAmB,wBAAwB;IAE3C,cAAc,mBAAmB;IAEjC,SAAS,cAAc;IACvB,WAAW,gBAAgB;IAE3B,eAAe,oBAAoB;IAEnC,iDAAiD;IACjD,aAAa,kBAAkB;CAClC;AAED,oBAAY,yBAAyB;IACjC,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,OAAO,YAAY;IACnB,WAAW,gBAAgB;IAC3B,GAAG,gBAAgB;IACnB,qEAAqE;IACrE,WAAW,gBAAgB;CAC9B;AAED,oBAAY,0BAA0B;IAClC,IAAI,SAAS;IACb,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,yEAAyE;IACzE,aAAa,kBAAkB;CAClC;AAED;;;;;;;;;;;;;;GAcG;AACH,mGAAmG;AACnG,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE7C,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC1B,8FAA8F;IAC9F,eAAe,CAAC,EAAE,kBAAkB,CAAC;IACrC,yFAAyF;IACzF,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,YAAY,CAAC;IACnB,aAAa,EAAE,yBAAyB,CAAC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,0BAA0B,CAAC;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,kBAAkB,EAAE,YAAY,GAAG,YAAY,GAAG,IAAI,CAAC;CAAG;AAEzG,MAAM,WAAW,gBAAiB,SAAQ,OAAO,CAAC,gBAAgB,CAAC;CAAG;AAEtE,MAAM,WAAW,cAAc;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC7B;AAMD;;;;GAIG;AACH,oBAAY,aAAa;IACrB,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,YAAY,IAAI;IAChB,UAAU,IAAI;IACd,MAAM,IAAI;CACb;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAAmE,CAAC;AAErH,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,MAAM,WAAW,gBAAgB;IAC7B,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,yBAAyB,CAAC;CACpC"}

package/lib/{esm/access-control.js → access-control.js}

@@ -12,11 +12,13 @@ export var Permission;
     Permission["run_read"] = "run:read";
     Permission["run_write"] = "run:write";
     Permission["env_admin"] = "environment:admin";
+    Permission["app_manage"] = "app:manage";
     Permission["project_admin"] = "project:admin";
     Permission["project_integration_read"] = "project:integration_read";
     Permission["project_settings_write"] = "project:settings_write";
     Permission["api_key_create"] = "api_key:create";
     Permission["api_key_read"] = "api_key:read";
+    Permission["api_key_secret_read"] = "api_key:secret_read";
     Permission["api_key_update"] = "api_key:update";
     Permission["api_key_delete"] = "api_key:delete";
     Permission["account_read"] = "account:read";
@@ -25,15 +27,22 @@ export var Permission;
     Permission["manage_billing"] = "account:billing";
     /** View cost and usage analytics */
     Permission["billing_read"] = "billing:read";
+    /** View account and project audit events. */
+    Permission["audit_read"] = "audit:read";
     Permission["account_member"] = "account:member";
     Permission["content_read"] = "content:read";
+    Permission["content_read_all"] = "content:read_all";
     Permission["content_write"] = "content:write";
     Permission["content_delete"] = "content:delete";
     Permission["content_admin"] = "content:admin";
     Permission["content_superadmin"] = "content:superadmin";
+    Permission["workflow_read"] = "workflow:read";
     Permission["workflow_run"] = "workflow:run";
     Permission["workflow_admin"] = "workflow:admin";
     Permission["workflow_superadmin"] = "workflow:superadmin";
+    Permission["agent_run_read"] = "agent_run:read";
+    Permission["task_read"] = "task:read";
+    Permission["task_manage"] = "task:manage";
     Permission["iam_impersonate"] = "iam:impersonate";
     /** whether the user has access to Sutdio App. */
     Permission["studio_access"] = "studio:access";
@@ -73,13 +82,7 @@ export var SecurityLevel;
     SecurityLevel[SecurityLevel["secret"] = 4] = "secret";
 })(SecurityLevel || (SecurityLevel = {}));
 /** Human-readable labels for each security level, indexed by numeric value. */
-export const SecurityLevelLabels = [
-    'Public',
-    'Internal',
-    'Confidential',
-    'Restricted',
-    'Secret',
-];
+export const SecurityLevelLabels = ['Public', 'Internal', 'Confidential', 'Restricted', 'Secret'];
 /** Get the label for a security level value. Returns "Unknown" for out-of-range values. */
 export function getSecurityLevelLabel(level) {
     return SecurityLevelLabels[level] ?? 'Unknown';

package/lib/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../src/access-control.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,CAAN,IAAY,UAqDX;AArDD,WAAY,UAAU;IAClB,2CAA6B,CAAA;IAC7B,6CAA+B,CAAA;IAC/B,+CAAiC,CAAA;IAEjC,iDAAmC,CAAA;IACnC,mCAAqB,CAAA;IACrB,qCAAuB,CAAA;IAEvB,6CAA+B,CAAA;IAE/B,uCAAyB,CAAA;IACzB,6CAA+B,CAAA;IAC/B,mEAAqD,CAAA;IACrD,+DAAiD,CAAA;IAEjD,+CAAiC,CAAA;IACjC,2CAA6B,CAAA;IAC7B,yDAA2C,CAAA;IAC3C,+CAAiC,CAAA;IACjC,+CAAiC,CAAA;IAEjC,2CAA6B,CAAA;IAC7B,6CAA+B,CAAA;IAC/B,6CAA+B,CAAA;IAC/B,gDAAkC,CAAA;IAClC,oCAAoC;IACpC,2CAA6B,CAAA;IAC7B,6CAA6C;IAC7C,uCAAyB,CAAA;IACzB,+CAAiC,CAAA;IAEjC,2CAA6B,CAAA;IAC7B,mDAAqC,CAAA;IACrC,6CAA+B,CAAA;IAC/B,+CAAiC,CAAA;IACjC,6CAA+B,CAAA;IAC/B,uDAAyC,CAAA;IAEzC,6CAA+B,CAAA;IAC/B,2CAA6B,CAAA;IAC7B,+CAAiC,CAAA;IACjC,yDAA2C,CAAA;IAE3C,+CAAiC,CAAA;IAEjC,qCAAuB,CAAA;IACvB,yCAA2B,CAAA;IAE3B,iDAAmC,CAAA;IAEnC,iDAAiD;IACjD,6CAA+B,CAAA;AACnC,CAAC,EArDW,UAAU,KAAV,UAAU,QAqDrB;AAED,MAAM,CAAN,IAAY,yBAQX;AARD,WAAY,yBAAyB;IACjC,gDAAmB,CAAA;IACnB,wDAA2B,CAAA;IAC3B,gDAAmB,CAAA;IACnB,wDAA2B,CAAA;IAC3B,gDAAmB,CAAA;IACnB,qEAAqE;IACrE,wDAA2B,CAAA;AAC/B,CAAC,EARW,yBAAyB,KAAzB,yBAAyB,QAQpC;AAED,MAAM,CAAN,IAAY,0BAMX;AAND,WAAY,0BAA0B;IAClC,2CAAa,CAAA;IACb,6CAAe,CAAA;IACf,+CAAiB,CAAA;IACjB,yEAAyE;IACzE,6DAA+B,CAAA;AACnC,CAAC,EANW,0BAA0B,KAA1B,0BAA0B,QAMrC;AA8DD,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAN,IAAY,aAMX;AAND,WAAY,aAAa;IACrB,qDAAU,CAAA;IACV,yDAAY,CAAA;IACZ,iEAAgB,CAAA;IAChB,6DAAc,CAAA;IACd,qDAAU,CAAA;AACd,CAAC,EANW,aAAa,KAAb,aAAa,QAMxB;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,mBAAmB,GAAsB,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;AAErH,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAC/C,OAAO,mBAAmB,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;AACnD,CAAC"}

package/lib/agent-request-template.d.ts

@@ -0,0 +1,4 @@
+export declare function renderAgentRequestTemplate(template: string, data: unknown): string;
+export declare function renderAgentRequestFallback(data: unknown): string;
+export declare function renderAgentRequestMessage(template: string | undefined, data: unknown): string;
+//# sourceMappingURL=agent-request-template.d.ts.map

package/lib/agent-request-template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-request-template.d.ts","sourceRoot":"","sources":["../src/agent-request-template.ts"],"names":[],"mappings":"AA0BA,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAIlF;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAIhE;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAM7F"}

package/lib/agent-request-template.js

@@ -0,0 +1,46 @@
+function isRecordValue(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+function getTemplatePathValue(data, path) {
+    if (path === '.' || path === 'json')
+        return data;
+    return path.split('.').reduce((current, part) => {
+        if (Array.isArray(current) && /^\d+$/.test(part))
+            return current[Number(part)];
+        if (!isRecordValue(current))
+            return undefined;
+        return current[part];
+    }, data);
+}
+function stringifyTemplateValue(value) {
+    if (value === null || value === undefined)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    try {
+        return JSON.stringify(value, null, 2);
+    }
+    catch {
+        return String(value);
+    }
+}
+export function renderAgentRequestTemplate(template, data) {
+    return template.replace(/\{\{\s*([\w.-]+|\.)\s*\}\}/g, (_match, path) => stringifyTemplateValue(getTemplatePathValue(data, path)));
+}
+export function renderAgentRequestFallback(data) {
+    if (typeof data === 'string')
+        return data;
+    if (data === null || data === undefined)
+        return '';
+    return stringifyTemplateValue(data);
+}
+export function renderAgentRequestMessage(template, data) {
+    const trimmedTemplate = template?.trim();
+    if (!trimmedTemplate)
+        return renderAgentRequestFallback(data);
+    const rendered = renderAgentRequestTemplate(trimmedTemplate, data).trim();
+    return rendered;
+}
+//# sourceMappingURL=agent-request-template.js.map

package/lib/agent-request-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-request-template.js","sourceRoot":"","sources":["../src/agent-request-template.ts"],"names":[],"mappings":"AAAA,SAAS,aAAa,CAAC,KAAc;IACjC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa,EAAE,IAAY;IACrD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAEjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAElF,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,IAAa;IACtE,OAAO,QAAQ,CAAC,OAAO,CAAC,6BAA6B,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAC5E,sBAAsB,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAC3D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACpD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAA4B,EAAE,IAAa;IACjF,MAAM,eAAe,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,eAAe;QAAE,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAE9D,MAAM,QAAQ,GAAG,0BAA0B,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/lib/{types/analytics.d.ts → analytics.d.ts}

@@ -23,8 +23,8 @@ export interface RunAnalyticsQuery {
     /** The field to sort by */
     virtual?: boolean;
 }
-export type RunAnalyticsGroupBy = "interaction" | "modelId" | "project" | "status" | "tags" | "environment";
-export type TimeResolution = "minute" | "hour" | "day" | "week" | "month" | "year";
+export type RunAnalyticsGroupBy = 'interaction' | 'modelId' | 'project' | 'status' | 'tags' | 'environment';
+export type TimeResolution = 'minute' | 'hour' | 'day' | 'week' | 'month' | 'year';
 export interface RunAnalyticsResult {
     date: string;
     timestamp: string;
@@ -91,3 +91,4 @@ export interface TokenUsageSummary {
         failed: number;
     };
 }
+//# sourceMappingURL=analytics.d.ts.map

package/lib/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAC9B,oCAAoC;IACpC,QAAQ,EAAE,aAAa,CAAC;IAExB,4BAA4B;IAC5B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAE9B,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,EAAE,CAAC,EAAE,MAAM,CAAC;IAEZ,sDAAsD;IACtD,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,+GAA+G;IAC/G,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,aAAa,CAAC;AAE5G,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEnF,MAAM,WAAW,kBAAkB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC;KACf,CAAC;CACL;AAED,mCAAmC;AACnC,MAAM,WAAW,kBAAkB;IAC/B,EAAE,EAAE,MAAM,CAAC;IAEX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACxC,+CAA+C;IAC/C,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,iCAAiC;AACjC,MAAM,WAAW,oBAAoB;IACjC,wEAAwE;IACxE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACxC,kDAAkD;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,kDAAkD;IAClD,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACzC,iDAAiD;IACjD,UAAU,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAClB,CAAC;CACL;AAED,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC3B,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2CAA2C;AAC3C,MAAM,WAAW,uBAAuB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,uHAAuH;AACvH,MAAM,WAAW,iBAAiB;IAC9B,aAAa,EAAE,uBAAuB,EAAE,CAAC;IACzC,UAAU,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;KAClB,CAAC;CACL"}

package/lib/{cjs/analytics.js.map → analytics.js.map}

@@ -1 +1 @@
-{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/analytics.ts"],"names":[],"mappings":""}
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../src/analytics.ts"],"names":[],"mappings":""}

package/lib/{types/apikey.d.ts → apikey.d.ts}

@@ -1,7 +1,7 @@
-import { PropertyConditions } from "./access-control.js";
-import { UserGroupRef } from "./group.js";
-import { ProjectRef, ProjectRoles } from "./project.js";
-import { AccountRef } from "./user.js";
+import type { PropertyConditions } from './access-control.js';
+import type { UserGroupRef } from './group.js';
+import type { ProjectRef, ProjectRoles } from './project.js';
+import type { AccountRef } from './user.js';
 /**
  * Content security conditions in the JWT, keyed by permission type.
  * Each key maps to an array of condition sets — at query time, any matching set grants access ($or).
@@ -33,7 +33,7 @@ export interface ApiKey {
 }
 export interface CreateOrUpdateApiKeyPayload extends Partial<ApiKey> {
 }
-export interface ApiKeyWithValue extends Omit<ApiKey, "maskedValue"> {
+export interface ApiKeyWithValue extends ApiKey {
     value: string;
 }
 export interface ApiKeyReadResponse extends ApiKey {
@@ -68,6 +68,19 @@ export interface AuthTokenPayload {
      * The app names enabled for this token. Defaults to an empty array if no apps are enabled.
      */
     apps: string[];
+    /**
+     * Apps in `apps[]` whose UI surface is restricted for this principal — present only on
+     * user tokens, and only when at least one app applies. Such apps grant functional access
+     * (tools, endpoints, contributions) but the portal must hide them from navigation unless
+     * the user holds an explicit app_member ACE.
+     *
+     * UI consumers should treat an app as visible when:
+     *   `apps.includes(name) && !ui_restrictions?.includes(name)`
+     *
+     * Omitted entirely when empty to keep the JWT compact. Not emitted on agent or service
+     * tokens — those carry only the functional `apps[]` set.
+     */
+    ui_restrictions?: string[];
     /**
      * The user ID (if any) attached to the token.
      * This is set when the token is a user token or an agent token running as a user.
@@ -88,6 +101,7 @@ export interface AuthTokenPayload {
         studio: string;
         store: string;
         token?: string;
+        git?: string;
     };
     iss: string;
     aud: string;
@@ -115,9 +129,11 @@ export interface AuthTokenPayload {
 }
 export declare enum PrincipalType {
     User = "user",
+    OAuthAccess = "oauth_access",
     Group = "group",
     ApiKey = "apikey",
     ServiceAccount = "service_account",
     Agent = "agent",
     Schedule = "schedule"
 }
+//# sourceMappingURL=apikey.d.ts.map

package/lib/apikey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikey.d.ts","sourceRoot":"","sources":["../src/apikey.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC5B,IAAI,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACjC;AAED,oBAAY,WAAW;IACnB,MAAM,OAAO;CAChB;AACD,MAAM,WAAW,MAAM;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,2BAA4B,SAAQ,OAAO,CAAC,MAAM,CAAC;CAAG;AAEvE,MAAM,WAAW,eAAgB,SAAQ,MAAM;IAC3C,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAmB,SAAQ,MAAM;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,sBAAsB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAC9B,KAAK,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC5B,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,UAAU,CAAC;IAEpB,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,QAAQ,EAAE,UAAU,EAAE,CAAC;IAEvB,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAE/B;;OAEG;IACH,IAAI,EAAE,MAAM,EAAE,CAAC;IAEf;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,aAAa;IACb,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IAExB;uFACmF;IACnF,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAEnC;;;;OAIG;IACH,SAAS,CAAC,EACJ,MAAM,GACN;QACI,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,GAAG,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IAER,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB;;;;OAIG;IACH,cAAc,CAAC,EAAE;QACb,8EAA8E;QAC9E,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf;;;WAGG;QACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;QAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KAC1B,CAAC;CACL;AAED,oBAAY,aAAa;IACrB,IAAI,SAAS;IACb,WAAW,iBAAiB;IAC5B,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,cAAc,oBAAoB;IAClC,KAAK,UAAU;IACf,QAAQ,aAAa;CACxB"}

package/lib/{esm/apikey.js → apikey.js}

@@ -5,6 +5,7 @@ export var ApiKeyTypes;
 export var PrincipalType;
 (function (PrincipalType) {
     PrincipalType["User"] = "user";
+    PrincipalType["OAuthAccess"] = "oauth_access";
     PrincipalType["Group"] = "group";
     PrincipalType["ApiKey"] = "apikey";
     PrincipalType["ServiceAccount"] = "service_account";

package/lib/apikey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apikey.js","sourceRoot":"","sources":["../src/apikey.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAN,IAAY,WAEX;AAFD,WAAY,WAAW;IACnB,4BAAa,CAAA;AACjB,CAAC,EAFW,WAAW,KAAX,WAAW,QAEtB;AAuID,MAAM,CAAN,IAAY,aAQX;AARD,WAAY,aAAa;IACrB,8BAAa,CAAA;IACb,6CAA4B,CAAA;IAC5B,gCAAe,CAAA;IACf,kCAAiB,CAAA;IACjB,mDAAkC,CAAA;IAClC,gCAAe,CAAA;IACf,sCAAqB,CAAA;AACzB,CAAC,EARW,aAAa,KAAb,aAAa,QAQxB"}