@workos-inc/node 10.9.0 → 10.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1503,7 +1503,7 @@ interface CreateUserResponseResponse extends UserResponse {
1503
1503
  }
1504
1504
  //#endregion
1505
1505
  //#region src/user-management/interfaces/authentication-response.interface.d.ts
1506
- type AuthenticationMethod = 'SSO' | 'Password' | 'Passkey' | 'AppleOAuth' | 'BitbucketOAuth' | 'DiscordOAuth' | 'GitHubOAuth' | 'GitLabOAuth' | 'GoogleOAuth' | 'IntuitOAuth' | 'LinkedInOAuth' | 'MicrosoftOAuth' | 'SalesforceOAuth' | 'SlackOAuth' | 'VercelMarketplaceOAuth' | 'VercelOAuth' | 'XeroOAuth' | 'MagicAuth' | 'CrossAppAuth' | 'ExternalAuth' | 'MigratedSession' | 'Impersonation';
1506
+ type AuthenticationMethod = 'SSO' | 'Password' | 'Passkey' | 'AppleOAuth' | 'BitbucketOAuth' | 'DiscordOAuth' | 'GitHubOAuth' | 'GitLabOAuth' | 'GoogleOAuth' | 'GrokOAuth' | 'XOAuth' | 'IntuitOAuth' | 'LinkedInOAuth' | 'MicrosoftOAuth' | 'SalesforceOAuth' | 'SlackOAuth' | 'VercelMarketplaceOAuth' | 'VercelOAuth' | 'XeroOAuth' | 'MagicAuth' | 'CrossAppAuth' | 'ExternalAuth' | 'MigratedSession' | 'Impersonation';
1507
1507
  interface AuthenticationResponse {
1508
1508
  user: User;
1509
1509
  organizationId?: string;
@@ -2695,10 +2695,38 @@ interface AddFlagTargetOptions {
2695
2695
  }
2696
2696
  //#endregion
2697
2697
  //#region src/feature-flags/interfaces/evaluation-context.interface.d.ts
2698
- interface EvaluationContext {
2698
+ /**
2699
+ * A single resource in a typed evaluation context. V1 carries only the exact
2700
+ * resource ID; attribute matching is a future capability layered onto this
2701
+ * same shape.
2702
+ */
2703
+ interface EvaluationResource {
2704
+ id: string;
2705
+ }
2706
+ /**
2707
+ * Legacy evaluation context, accepted for backward compatibility and
2708
+ * normalized internally to the typed form: `userId` matches `user` targets
2709
+ * and `organizationId` matches `organization` targets.
2710
+ */
2711
+ type LegacyEvaluationContext = {
2699
2712
  userId?: string;
2700
2713
  organizationId?: string;
2701
- }
2714
+ };
2715
+ /**
2716
+ * Typed evaluation context: a direct map of target type slug to the resource
2717
+ * being evaluated, e.g.
2718
+ * `{ user: { id: 'user_123' }, workspace: { id: 'ws_1' } }`.
2719
+ * A context contains at most one resource of each type; callers needing a
2720
+ * decision per resource should evaluate once per resource.
2721
+ */
2722
+ type TypedEvaluationContext = Record<string, EvaluationResource>;
2723
+ /**
2724
+ * Either evaluation context form. The two shapes cannot be mixed in a single
2725
+ * call: a hybrid context (a legacy key alongside a typed resource entry) is
2726
+ * rejected at evaluation time with a logged warning and matches no targets,
2727
+ * so the flag falls back to its default value.
2728
+ */
2729
+ type EvaluationContext = LegacyEvaluationContext | TypedEvaluationContext;
2702
2730
  //#endregion
2703
2731
  //#region src/feature-flags/interfaces/feature-flag.interface.d.ts
2704
2732
  interface FeatureFlag {
@@ -2741,6 +2769,11 @@ interface FlagTarget {
2741
2769
  id: string;
2742
2770
  enabled: boolean;
2743
2771
  }
2772
+ interface FlagCustomTarget {
2773
+ type: string;
2774
+ id: string;
2775
+ enabled: boolean;
2776
+ }
2744
2777
  interface FlagPollEntry {
2745
2778
  slug: string;
2746
2779
  enabled: boolean;
@@ -2748,6 +2781,8 @@ interface FlagPollEntry {
2748
2781
  targets: {
2749
2782
  users: FlagTarget[];
2750
2783
  organizations: FlagTarget[];
2784
+ /** Absent until the API's custom-targets rollout flag is enabled. */
2785
+ custom_targets?: FlagCustomTarget[];
2751
2786
  };
2752
2787
  }
2753
2788
  type FlagPollResponse = Record<string, FlagPollEntry>;
@@ -3880,6 +3915,7 @@ interface AuthenticationActionContext {
3880
3915
  user: User;
3881
3916
  organization?: Organization;
3882
3917
  organizationMembership?: OrganizationMembership;
3918
+ authenticationMethod?: AuthenticationMethod;
3883
3919
  ipAddress?: string;
3884
3920
  userAgent?: string;
3885
3921
  deviceFingerprint?: string;
@@ -3897,6 +3933,7 @@ interface UserRegistrationActionContext {
3897
3933
  object: 'user_registration_action_context';
3898
3934
  userData: UserData;
3899
3935
  invitation?: Invitation;
3936
+ authenticationMethod?: AuthenticationMethod;
3900
3937
  ipAddress?: string;
3901
3938
  userAgent?: string;
3902
3939
  deviceFingerprint?: string;
@@ -3908,6 +3945,7 @@ interface AuthenticationActionPayload {
3908
3945
  user: UserResponse;
3909
3946
  organization?: OrganizationResponse;
3910
3947
  organization_membership?: OrganizationMembershipResponse;
3948
+ authentication_method?: AuthenticationMethod;
3911
3949
  ip_address?: string;
3912
3950
  user_agent?: string;
3913
3951
  device_fingerprint?: string;
@@ -3925,6 +3963,7 @@ interface UserRegistrationActionPayload {
3925
3963
  object: 'user_registration_action_context';
3926
3964
  user_data: UserDataPayload;
3927
3965
  invitation?: InvitationResponse;
3966
+ authentication_method?: AuthenticationMethod;
3928
3967
  ip_address?: string;
3929
3968
  user_agent?: string;
3930
3969
  device_fingerprint?: string;
@@ -6849,22 +6888,43 @@ declare class AuditLogs {
6849
6888
  }
6850
6889
  //#endregion
6851
6890
  //#region node_modules/jose/dist/types/types.d.ts
6852
- /** Generic JSON Web Key Parameters. */
6853
- interface JWKParameters {
6891
+ /**
6892
+ * JWS "alg" (Algorithm) Header Parameter values supported by this module. Availability of a given
6893
+ * identifier additionally depends on the runtime.
6894
+ */
6895
+ type JWSAlgorithm = 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'PS256' | 'PS384' | 'PS512' | 'ES256' | 'ES384' | 'ES512' | 'EdDSA' | 'Ed25519' | 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87' | (string & {});
6896
+ /**
6897
+ * JWE "alg" (Algorithm) Header Parameter values supported by this module. Availability of a given
6898
+ * identifier additionally depends on the runtime.
6899
+ */
6900
+ type JWEKeyManagementAlgorithm = 'dir' | 'A128KW' | 'A192KW' | 'A256KW' | 'A128GCMKW' | 'A192GCMKW' | 'A256GCMKW' | 'ECDH-ES' | 'ECDH-ES+A128KW' | 'ECDH-ES+A192KW' | 'ECDH-ES+A256KW' | 'RSA-OAEP' | 'RSA-OAEP-256' | 'RSA-OAEP-384' | 'RSA-OAEP-512' | 'PBES2-HS256+A128KW' | 'PBES2-HS384+A192KW' | 'PBES2-HS512+A256KW' | (string & {});
6901
+ /**
6902
+ * JWE "enc" (Encryption Algorithm) Header Parameter values supported by this module. Availability
6903
+ * of a given identifier additionally depends on the runtime.
6904
+ */
6905
+ type JWEContentEncryptionAlgorithm = 'A128CBC-HS256' | 'A192CBC-HS384' | 'A256CBC-HS512' | 'A128GCM' | 'A192GCM' | 'A256GCM' | (string & {});
6906
+ /** JWK "kty" (Key Type) Parameter values supported by this module. */
6907
+ type JWKKeyType = 'EC' | 'RSA' | 'OKP' | 'AKP' | 'oct' | (string & {});
6908
+ /**
6909
+ * JSON Web Key ({@link https://www.rfc-editor.org/info/rfc7517/ JWK}). "RSA", "EC", "OKP", "AKP",
6910
+ * and "oct" key types are supported.
6911
+ *
6912
+ * > Note: This is declared as a type alias rather than an interface so that it satisfies the implicit index
6913
+ * > signature of the `JsonWebKey` types shipped by `@types/node` and `lib.dom`. It spells out the
6914
+ * > {@link JWKParameters} members rather than intersecting them so that every JWK member is documented
6915
+ * > in one place.
6916
+ */
6917
+ type JWK = {
6854
6918
  /** JWK "kty" (Key Type) Parameter */
6855
- kty?: string;
6856
- /**
6857
- * JWK "alg" (Algorithm) Parameter
6858
- *
6859
- * @see {@link https://github.com/panva/jose/issues/210 Algorithm Key Requirements}
6860
- */
6861
- alg?: string;
6919
+ kty?: JWKKeyType;
6920
+ /** JWK "alg" (Algorithm) Parameter */
6921
+ alg?: JWSAlgorithm | JWEKeyManagementAlgorithm | JWEContentEncryptionAlgorithm;
6862
6922
  /** JWK "key_ops" (Key Operations) Parameter */
6863
6923
  key_ops?: string[];
6864
6924
  /** JWK "ext" (Extractable) Parameter */
6865
6925
  ext?: boolean;
6866
6926
  /** JWK "use" (Public Key Use) Parameter */
6867
- use?: string;
6927
+ use?: 'sig' | 'enc' | (string & {});
6868
6928
  /** JWK "x5c" (X.509 Certificate Chain) Parameter */
6869
6929
  x5c?: string[];
6870
6930
  /** JWK "x5t" (X.509 Certificate SHA-1 Thumbprint) Parameter */
@@ -6875,22 +6935,6 @@ interface JWKParameters {
6875
6935
  x5u?: string;
6876
6936
  /** JWK "kid" (Key ID) Parameter */
6877
6937
  kid?: string;
6878
- }
6879
- /**
6880
- * JSON Web Key ({@link https://www.rfc-editor.org/rfc/rfc7517 JWK}). "RSA", "EC", "OKP", "AKP", and
6881
- * "oct" key types are supported.
6882
- *
6883
- * @see {@link JWK_AKP_Public}
6884
- * @see {@link JWK_AKP_Private}
6885
- * @see {@link JWK_OKP_Public}
6886
- * @see {@link JWK_OKP_Private}
6887
- * @see {@link JWK_EC_Public}
6888
- * @see {@link JWK_EC_Private}
6889
- * @see {@link JWK_RSA_Public}
6890
- * @see {@link JWK_RSA_Private}
6891
- * @see {@link JWK_oct}
6892
- */
6893
- interface JWK extends JWKParameters {
6894
6938
  /**
6895
6939
  * - EC JWK "crv" (Curve) Parameter
6896
6940
  * - OKP JWK "crv" (The Subtype of Key Pair) Parameter
@@ -6929,7 +6973,20 @@ interface JWK extends JWKParameters {
6929
6973
  pub?: string;
6930
6974
  /** AKP JWK "priv" (Private key) Parameter */
6931
6975
  priv?: string;
6932
- }
6976
+ /**
6977
+ * RSA JWK "oth" (Other Primes Info) Parameter
6978
+ *
6979
+ * > Note: Multi-prime RSA keys are not supported; importing a JWK with this parameter present throws.
6980
+ */
6981
+ oth?: Array<{
6982
+ /** The Factor CRT Exponent */
6983
+ d?: string;
6984
+ /** The Prime Factor */
6985
+ r?: string;
6986
+ /** The Factor CRT Coefficient */
6987
+ t?: string;
6988
+ }>;
6989
+ };
6933
6990
  /**
6934
6991
  * Flattened JWS definition for verify function inputs, allows payload as {@link !Uint8Array} for
6935
6992
  * detached signature validation.
@@ -6968,8 +7025,11 @@ interface JoseHeaderParameters {
6968
7025
  x5u?: string;
6969
7026
  /** "jku" (JWK Set URL) Header Parameter */
6970
7027
  jku?: string;
6971
- /** "jwk" (JSON Web Key) Header Parameter */
6972
- jwk?: Pick<JWK, 'kty' | 'crv' | 'x' | 'y' | 'e' | 'n' | 'alg' | 'pub'>;
7028
+ /**
7029
+ * "jwk" (JSON Web Key) Header Parameter. This must be a public JSON Web Key; private and
7030
+ * symmetric key parameters are not permitted.
7031
+ */
7032
+ jwk?: Omit<JWK, 'd' | 'dp' | 'dq' | 'k' | 'p' | 'q' | 'qi' | 'priv' | 'oth'>;
6973
7033
  /** "typ" (Type) Header Parameter */
6974
7034
  typ?: string;
6975
7035
  /** "cty" (Content Type) Header Parameter */
@@ -6977,15 +7037,11 @@ interface JoseHeaderParameters {
6977
7037
  }
6978
7038
  /** Recognized JWS Header Parameters, any other Header Members may also be present. */
6979
7039
  interface JWSHeaderParameters extends JoseHeaderParameters {
6980
- /**
6981
- * JWS "alg" (Algorithm) Header Parameter
6982
- *
6983
- * @see {@link https://github.com/panva/jose/issues/210#jws-alg Algorithm Key Requirements}
6984
- */
6985
- alg?: string;
7040
+ /** JWS "alg" (Algorithm) Header Parameter */
7041
+ alg?: JWSAlgorithm;
6986
7042
  /**
6987
7043
  * This JWS Extension Header Parameter modifies the JWS Payload representation and the JWS Signing
6988
- * Input computation as per {@link https://www.rfc-editor.org/rfc/rfc7797 RFC7797}.
7044
+ * Input computation as per {@link https://www.rfc-editor.org/info/rfc7797/ RFC7797}.
6989
7045
  */
6990
7046
  b64?: boolean;
6991
7047
  /** JWS "crit" (Critical) Header Parameter */
@@ -7003,103 +7059,37 @@ interface JSONWebKeySet {
7003
7059
  * {@link !SubtleCrypto.importKey} API to obtain a {@link !CryptoKey} from your existing key
7004
7060
  * material.
7005
7061
  */
7006
- type CryptoKey = Extract<Awaited<ReturnType<typeof crypto.subtle.generateKey>>, {
7062
+ type CryptoKey = typeof globalThis extends {
7063
+ crypto: {
7064
+ subtle: {
7065
+ generateKey(...args: any[]): Promise<infer R>;
7066
+ };
7067
+ };
7068
+ } ? Extract<R, {
7007
7069
  type: string;
7008
- }>;
7070
+ }> : CryptoKeyStructuralFallback;
7071
+ /**
7072
+ * Used as {@link CryptoKey} when the host runtime's `crypto` global is not exposed on `typeof
7073
+ * globalThis`, including when it is absent from ambient types or declared with `const` or `let`. It
7074
+ * remains structurally compatible with host {@link !CryptoKey} declarations so values flow freely to
7075
+ * and from {@link !SubtleCrypto} APIs.
7076
+ */
7077
+ interface CryptoKeyStructuralFallback {
7078
+ readonly algorithm: {
7079
+ name: string;
7080
+ };
7081
+ readonly extractable: boolean;
7082
+ readonly type: string;
7083
+ readonly usages: string[];
7084
+ }
7009
7085
  //#endregion
7010
7086
  //#region node_modules/jose/dist/types/jwks/remote.d.ts
7011
7087
  /**
7012
7088
  * When passed to {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} this allows the resolver
7013
7089
  * to make use of advanced fetch configurations, HTTP Proxies, retry on network errors, etc.
7014
7090
  *
7015
- * > [!NOTE]\
7016
- * > Known caveat: Expect Type-related issues when passing the inputs through to fetch-like modules,
7091
+ * > Note: Known caveat: Expect Type-related issues when passing the inputs through to fetch-like modules,
7017
7092
  * > they hardly ever get their typings inline with actual fetch, you should `@ts-expect-error` them.
7018
- *
7019
- * import ky from 'ky'
7020
- *
7021
- * let logRequest!: (request: Request) => void
7022
- * let logResponse!: (request: Request, response: Response) => void
7023
- * let logRetry!: (request: Request, error: Error, retryCount: number) => void
7024
- *
7025
- * const JWKS = jose.createRemoteJWKSet(url, {
7026
- * [jose.customFetch]: (...args) =>
7027
- * ky(args[0], {
7028
- * ...args[1],
7029
- * hooks: {
7030
- * beforeRequest: [
7031
- * (request) => {
7032
- * logRequest(request)
7033
- * },
7034
- * ],
7035
- * beforeRetry: [
7036
- * ({ request, error, retryCount }) => {
7037
- * logRetry(request, error, retryCount)
7038
- * },
7039
- * ],
7040
- * afterResponse: [
7041
- * (request, _, response) => {
7042
- * logResponse(request, response)
7043
- * },
7044
- * ],
7045
- * },
7046
- * }),
7047
- * })
7048
- * ```
7049
- *
7050
- * import * as undici from 'undici'
7051
- *
7052
- * // see https://undici.nodejs.org/#/docs/api/EnvHttpProxyAgent
7053
- * let envHttpProxyAgent = new undici.EnvHttpProxyAgent()
7054
- *
7055
- * // @ts-ignore
7056
- * const JWKS = jose.createRemoteJWKSet(url, {
7057
- * [jose.customFetch]: (...args) => {
7058
- * // @ts-ignore
7059
- * return undici.fetch(args[0], { ...args[1], dispatcher: envHttpProxyAgent }) // prettier-ignore
7060
- * },
7061
- * })
7062
- * ```
7063
- *
7064
- * import * as undici from 'undici'
7065
- *
7066
- * // see https://undici.nodejs.org/#/docs/api/RetryAgent
7067
- * let retryAgent = new undici.RetryAgent(new undici.Agent(), {
7068
- * statusCodes: [],
7069
- * errorCodes: [
7070
- * 'ECONNRESET',
7071
- * 'ECONNREFUSED',
7072
- * 'ENOTFOUND',
7073
- * 'ENETDOWN',
7074
- * 'ENETUNREACH',
7075
- * 'EHOSTDOWN',
7076
- * 'UND_ERR_SOCKET',
7077
- * ],
7078
- * })
7079
- *
7080
- * // @ts-ignore
7081
- * const JWKS = jose.createRemoteJWKSet(url, {
7082
- * [jose.customFetch]: (...args) => {
7083
- * // @ts-ignore
7084
- * return undici.fetch(args[0], { ...args[1], dispatcher: retryAgent }) // prettier-ignore
7085
- * },
7086
- * })
7087
- * ```
7088
- *
7089
- * import * as undici from 'undici'
7090
- *
7091
- * // see https://undici.nodejs.org/#/docs/api/MockAgent
7092
- * let mockAgent = new undici.MockAgent()
7093
- * mockAgent.disableNetConnect()
7094
- *
7095
- * // @ts-ignore
7096
- * const JWKS = jose.createRemoteJWKSet(url, {
7097
- * [jose.customFetch]: (...args) => {
7098
- * // @ts-ignore
7099
- * return undici.fetch(args[0], { ...args[1], dispatcher: mockAgent }) // prettier-ignore
7100
- * },
7101
- * })
7102
- * ```
7103
7093
  */
7104
7094
  declare const customFetch: unique symbol;
7105
7095
  /** See {@link customFetch}. */
@@ -7117,55 +7107,14 @@ options: {
7117
7107
  signal: AbortSignal;
7118
7108
  }) => Promise<Response>;
7119
7109
  /**
7120
- * > [!WARNING]\
7121
- * > This option has security implications that must be understood, assessed for applicability, and
7110
+ * > Warning: This option has security implications that must be understood, assessed for applicability, and
7122
7111
  * > accepted before use. It is critical that the JSON Web Key Set cache only be writable by your own
7123
7112
  * > code.
7124
7113
  *
7125
7114
  * This option is intended for cloud computing runtimes that cannot keep an in memory cache between
7126
- * their code's invocations. Use in runtimes where an in memory cache between requests is available
7127
- * is not desirable.
7128
- *
7129
- * When passed to {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} this allows the passed in
7130
- * object to:
7131
- *
7132
- * - Serve as an initial value for the JSON Web Key Set that the module would otherwise need to
7133
- * trigger an HTTP request for
7134
- * - Have the JSON Web Key Set the function optionally ended up triggering an HTTP request for
7135
- * assigned to it as properties
7136
- *
7137
- * The intended use pattern is:
7138
- *
7139
- * - Before verifying with {@link jwks/remote.createRemoteJWKSet createRemoteJWKSet} you pull the
7140
- * previously cached object from a low-latency key-value store offered by the cloud computing
7141
- * runtime it is executed on;
7142
- * - Default to an empty object `{}` instead when there's no previously cached value;
7143
- * - Pass it in as {@link RemoteJWKSetOptions[jwksCache]};
7144
- * - Afterwards, update the key-value storage if the {@link ExportedJWKSCache.uat `uat`} property of
7145
- * the object has changed.
7146
- *
7147
- * // Prerequisites
7148
- * let url!: URL
7149
- * let jwt!: string
7150
- * let getPreviouslyCachedJWKS!: () => Promise<jose.ExportedJWKSCache>
7151
- * let storeNewJWKScache!: (cache: jose.ExportedJWKSCache) => Promise<void>
7152
- *
7153
- * // Load JSON Web Key Set cache
7154
- * const jwksCache: jose.JWKSCacheInput = (await getPreviouslyCachedJWKS()) || {}
7155
- * const { uat } = jwksCache
7156
- *
7157
- * const JWKS = jose.createRemoteJWKSet(url, {
7158
- * [jose.jwksCache]: jwksCache,
7159
- * })
7160
- *
7161
- * // Use JSON Web Key Set cache
7162
- * await jose.jwtVerify(jwt, JWKS)
7163
- *
7164
- * if (uat !== jwksCache.uat) {
7165
- * // Update JSON Web Key Set cache
7166
- * await storeNewJWKScache(jwksCache)
7167
- * }
7168
- * ```
7115
+ * their code's invocations. The supplied writable object seeds the resolver's cache and is updated
7116
+ * with `jwks` and `uat` after a successful fetch; persist it whenever `uat` changes. Using this in
7117
+ * runtimes that can keep an in-memory cache between requests is not desirable.
7169
7118
  */
7170
7119
  declare const jwksCache: unique symbol;
7171
7120
  /** Options for the remote JSON Web Key Set. */
@@ -7201,44 +7150,45 @@ interface ExportedJWKSCache {
7201
7150
  }
7202
7151
  /** See {@link jwksCache}. */
7203
7152
  type JWKSCacheInput = ExportedJWKSCache | Record<string, never>;
7153
+ /** The key resolution function returned by {@link createRemoteJWKSet}. */
7154
+ interface RemoteJWKSet {
7155
+ (protectedHeader?: JWSHeaderParameters, token?: FlattenedJWSInput): Promise<CryptoKey>;
7156
+ /** Whether the cooldown window following the last successful fetch is still in effect. */
7157
+ readonly coolingDown: boolean;
7158
+ /**
7159
+ * Whether the currently cached JSON Web Key Set is within its
7160
+ * {@link RemoteJWKSetOptions.cacheMaxAge}.
7161
+ */
7162
+ readonly fresh: boolean;
7163
+ /** Whether a JSON Web Key Set fetch is currently in flight. */
7164
+ readonly reloading: boolean;
7165
+ /**
7166
+ * Triggers a JSON Web Key Set fetch, bypassing
7167
+ * {@link RemoteJWKSetOptions.cooldownDuration the cooldown}.
7168
+ */
7169
+ reload: () => Promise<void>;
7170
+ /**
7171
+ * The currently cached JSON Web Key Set, or `undefined` when none has been fetched or seeded via
7172
+ * {@link jwksCache} yet.
7173
+ */
7174
+ jwks: () => JSONWebKeySet | undefined;
7175
+ }
7204
7176
  /**
7205
7177
  * Returns a function that resolves a JWS JOSE Header to a public key object downloaded from a
7206
7178
  * remote endpoint returning a JSON Web Key Set, that is, for example, an OAuth 2.0 or OIDC
7207
7179
  * jwks_uri. The JSON Web Key Set is fetched when no key matches the selection process but only as
7208
- * frequently as the `cooldownDuration` option allows to prevent abuse.
7209
- *
7210
- * It uses the "alg" (JWS Algorithm) Header Parameter to determine the right JWK "kty" (Key Type),
7211
- * then proceeds to match the JWK "kid" (Key ID) with one found in the JWS Header Parameters (if
7212
- * there is one) while also respecting the JWK "use" (Public Key Use) and JWK "key_ops" (Key
7213
- * Operations) Parameters (if they are present on the JWK).
7180
+ * frequently as the `cooldownDuration` option allows to prevent abuse. Selection respects the
7181
+ * header's "alg" (Algorithm) and "kid" (Key ID) as well as the JWK's "use" (Public Key Use) and
7182
+ * "key_ops" (Key Operations). Exactly one key must match; if multiple keys match, the thrown
7183
+ * `JWKSMultipleMatchingKeys` can be iterated.
7214
7184
  *
7215
- * Only a single public key must match the selection process. As shown in the example below when
7216
- * multiple keys get matched it is possible to opt-in to iterate over the matched keys and attempt
7217
- * verification in an iterative manner.
7218
- *
7219
- * > [!NOTE]\
7220
- * > The function's purpose is to resolve public keys used for verifying signatures and will not work
7185
+ * > Note: The function's purpose is to resolve public keys used for verifying signatures and will not work
7221
7186
  * > for public encryption keys.
7222
7187
  *
7223
- * This function is exported (as a named export) from the main `'jose'` module entry point as well
7224
- * as from its subpath export `'jose/jwks/remote'`.
7225
- *
7226
7188
  * @param url URL to fetch the JSON Web Key Set from.
7227
7189
  * @param options Options for the remote JSON Web Key Set.
7228
7190
  */
7229
- declare function createRemoteJWKSet(url: URL, options?: RemoteJWKSetOptions): {
7230
- (protectedHeader?: JWSHeaderParameters, token?: FlattenedJWSInput): Promise<CryptoKey>;
7231
- /** @ignore */
7232
- coolingDown: boolean;
7233
- /** @ignore */
7234
- fresh: boolean;
7235
- /** @ignore */
7236
- reloading: boolean;
7237
- /** @ignore */
7238
- reload: () => Promise<void>;
7239
- /** @ignore */
7240
- jwks: () => JSONWebKeySet | undefined;
7241
- };
7191
+ declare function createRemoteJWKSet(url: URL, options?: RemoteJWKSetOptions): RemoteJWKSet;
7242
7192
  //#endregion
7243
7193
  //#region src/user-management/interfaces/session-handler-options.interface.d.ts
7244
7194
  interface SessionHandlerOptions {
@@ -9909,5 +9859,5 @@ interface ConfidentialClientOptions extends WorkOSOptions {
9909
9859
  declare function createWorkOS(options: PublicClientOptions): PublicWorkOS;
9910
9860
  declare function createWorkOS(options: ConfidentialClientOptions): WorkOS;
9911
9861
  //#endregion
9912
- export { ReadObjectMetadataResponse as $, FlagDeletedEventResponse as $a, AuthMethod as $c, ConnectionResponse as $d, BaseAssignRoleOptions as $f, AuthenticationMfaSucceededEventResponse as $i, Invitation as $l, PasswordlessSessionResponse as $n, OrganizationUpdatedResponse as $o, AddEnvironmentRolePermissionOptions as $p, SerializedLinkClaimAttemptToExternalUserOptions as $r, ListGroupsOptions as $s, DataIntegrationsListResponseDataOwnership as $t, UserManagementAccessToken as $u, ApiKeyRequiredException as A, DsyncGroupDeletedEvent as Aa, SerializedCreateOrganizationApiKeyOptions as Ac, SerializedAuthenticateWithEmailVerificationOptions as Ad, RemoveGroupRoleAssignmentsOptionsWithResourceExternalId as Af, DomainData as Ai, MagicAuthResponse as Al, CryptoProvider as Am, ConnectedAccountState as An, OrganizationDomainCreatedEvent as Ao, AuthorizationResource as Ap, CompleteOAuth2Options as Ar, VaultDataCreatedEventResponse as As, SerializedAuditLogExportOptions as At, Factor as Au, ObjectSummaryResponse as B, DsyncUserDeletedEvent as Ba, SerializedCreateOrganizationDomainOptions as Bc, WithResolvedClientId as Bd, GetGroupRoleAssignmentOptions as Bf, GetOptions as Bi, ListOrganizationMembershipsOptions as Bl, UpdateCustomProviderDefinitionAuthenticateVia as Bn, OrganizationMembershipCreated as Bo, UpdatePermissionOptions as Bp, AgentCredentialValidation as Br, VaultDekReadEventResponse as Bs, RadarStandaloneResponse as Bt, SmsResponse as Bu, BadRequestException as C, ConnectionDeletedEventResponse as Ca, ValidateApiKeyOptions as Cc, AuthenticateWithRadarEmailChallengeOptions as Cd, GroupRoleAssignmentEntryWithResourceId as Cf, Organization as Ci, PasswordResetEventResponse as Cl, HttpClient as Cm, DataIntegrationCredential as Cn, InvitationRevokedEventResponse as Co, SerializedAuthorizationCheckOptions as Cp, CreateM2MApplication as Cr, UserDeletedEvent as Cs, AuditLogSchema as Ct, AuthenticationRadarRiskDetectedEventData as Cu, isAuthenticationErrorData as D, DsyncDeletedEventResponse as Da, SerializedCreatedApiKey as Dc, SerializedAuthenticateWithMagicAuthOptions as Dd, BaseRemoveGroupRoleAssignmentsOptions as Df, CreateOrganizationOptions as Di, MagicAuth as Dl, RequestOptions as Dm, DeleteUserConnectedAccountOptions as Dn, OrganizationCreatedResponse as Do, GetAuthorizationResourceByExternalIdOptions as Dp, RedirectUriInput as Dr, VaultByokKeyVerificationCompletedEvent as Ds, AuditLogExport as Dt, AuthenticationFactorType as Du, AuthenticationException as E, DsyncDeletedEvent as Ea, CreatedApiKey as Ec, AuthenticateWithMagicAuthOptions as Ed, SerializedReplaceGroupRoleAssignmentsOptions as Ef, ListOrganizationFeatureFlagsOptions as Ei, CreateMagicAuthResponseResponse as El, RequestHeaders as Em, ListUserDataProvidersOptions as En, OrganizationCreatedEvent as Eo, UpdateAuthorizationResourceByExternalIdOptions as Ep, CreateOAuthApplicationResponse as Er, UserUpdatedEventResponse as Es, AuditLogTargetSchema as Et, AuthenticationFactorResponse as Eu, UpdateWebhookEndpointEvents as F, DsyncGroupUserAddedEventResponse as Fa, OrganizationDomain as Fc, SerializedAuthenticateWithCodeOptions as Fd, CreateGroupRoleAssignmentOptions as Ff, PutOptions as Fi, ListUserApiKeysOptions as Fl, UpdateDataIntegrationApiKeyOptions as Fn, OrganizationDomainUpdatedEventResponse as Fo, SerializedCreateAuthorizationResourceOptions as Fp, UserObject as Fr, VaultDataUpdatedEvent as Fs, Challenge as Ft, Totp as Fu, ObjectMetadata as G, EmailVerificationCreatedEventResponse as Ga, SerializedUserApiKey as Gc, OauthTokens as Gd, BaseRemoveRoleOptions as Gf, ApiKeyRevokedEventResponse as Gi, BaseOrganizationMembershipResponse as Gl, CustomProviderDefinitionAuthenticateVia as Gn, OrganizationMembershipUpdatedResponse as Go, RemoveOrganizationRolePermissionOptions as Gp, ValidAgentCredential as Gr, VaultNamesListedEvent as Gs, RadarListAction as Gt, AuthenticateUserWithTotpCredentials as Gu, ObjectVersionResponse as H, DsyncUserUpdatedEvent as Ha, VerifyEmailOptions as Hc, ProfileAndTokenResponse as Hd, GroupRoleAssignment as Hf, ApiKeyCreatedEvent as Hi, AuthorizationOrganizationMembership as Hl, CreateDataIntegrationOptions as Hn, OrganizationMembershipDeleted as Ho, SerializedCreatePermissionOptions as Hp, SerializedAgentAccessTokenClaims as Hr, VaultKekCreatedEventResponse as Hs, RadarStandaloneResponseBlocklistType as Ht, AuthenticationEventResponse as Hu, UpdateWebhookEndpointStatus as I, DsyncGroupUserRemovedEvent as Ia, OrganizationDomainResponse as Ic, AuthenticateWithOptionsBase as Id, CreateGroupRoleAssignmentOptionsForOrganization as If, PostOptions as Ii, SerializedListUserApiKeysOptions as Il, DeleteDataIntegrationOptions as In, OrganizationDomainVerificationFailedEvent as Io, SerializedUpdateAuthorizationResourceOptions as Ip, UserObjectResponse as Ir, VaultDataUpdatedEventResponse as Is, ChallengeResponse as It, TotpResponse as Iu, ActorResponse as J, EventName as Ja, UpdateUserPasswordOptions as Jc, SerializedListConnectionsOptions as Jd, RemoveRoleOptionsWithResourceId as Jf, AuthenticationMagicAuthFailedEvent as Ji, OrganizationMembershipStatus as Jl, DataIntegrationCredentialsType as Jn, OrganizationRoleDeletedEvent as Jo, SerializedUpdateOrganizationRoleOptions as Jp, ValidateAgentCredentialOptions as Jr, DataKeyPair as Js, RadarStandaloneAssessRequestAuthMethod as Jt, AuthenticateWithSessionCookieFailedResponse as Ju, ObjectMetadataResponse as K, Event as Ka, UserApiKey as Kc, OauthTokensResponse as Kd, RemoveRoleOptions as Kf, AuthenticationEmailVerificationSucceededEvent as Ki, OrganizationMembership as Kl, DataIntegrationCredentialsDto as Kn, OrganizationRoleCreatedEvent as Ko, AddOrganizationRolePermissionOptions as Kp, ValidateAgentAccessTokenOptions as Kr, VaultNamesListedEventResponse as Ks, RadarListType as Kt, AuthenticateWithTotpOptions as Ku, CreateWebhookEndpointEvents as L, DsyncGroupUserRemovedEventResponse as La, OrganizationDomainState as Lc, AuthenticateWithSessionOptions as Ld, CreateGroupRoleAssignmentOptionsWithResourceExternalId as Lf, PatchOptions as Li, ListUserFeatureFlagsOptions as Ll, UpdateDataIntegrationOptions as Ln, OrganizationDomainVerificationFailedEventResponse as Lo, UpdateAuthorizationResourceOptions as Lp, AutoPaginatable as Lr, VaultDekDecryptedEvent as Ls, ChallengeFactorOptions as Lt, TotpWithSecrets as Lu, WebhookEndpoint as M, DsyncGroupUpdatedEvent as Ma, SerializedApiKey as Mc, SerializedAuthenticateWithCodeAndVerifierOptions as Md, SerializedRemoveGroupRoleAssignmentsOptions as Mf, WorkOSResponseError as Mi, Locale as Ml, GetAccessTokenOptions as Mn, OrganizationDomainDeletedEvent as Mo, CreateAuthorizationResourceOptions as Mp, UserConsentOptionResponse as Mr, VaultDataDeletedEventResponse as Ms, VerifyResponseResponse as Mt, FactorType as Mu, WebhookEndpointResponse as N, DsyncGroupUpdatedEventResponse as Na, OrganizationDomainVerificationFailed as Nc, AuthenticateUserWithCodeCredentials as Nd, RemoveGroupRoleAssignmentOptions as Nf, WorkOSOptions as Ni, ListUsersOptions as Nl, CreateDataIntegrationCredentialOptions as Nn, OrganizationDomainDeletedEventResponse as No, CreateOptionsWithParentExternalId as Np, UserConsentOptionChoice as Nr, VaultDataReadEvent as Ns, VerifyChallengeOptions as Nt, FactorWithSecrets as Nu, GenericServerException as O, DsyncGroupCreatedEvent as Oa, CreateOrganizationApiKeyOptions as Oc, AuthenticateUserWithEmailVerificationCredentials as Od, RemoveGroupRoleAssignmentsOptions as Of, CreateOrganizationRequestOptions as Oi, MagicAuthEvent as Ol, ResponseHeaderValue as Om, UpdateUserConnectedAccountOptions as On, OrganizationDeletedEvent as Oo, ListAuthorizationResourcesOptions as Op, RedirectUriInputResponse as Or, VaultByokKeyVerificationCompletedEventResponse as Os, AuditLogExportResponse as Ot, AuthenticationFactorWithSecrets as Ou, WebhookEndpointStatus as P, DsyncGroupUserAddedEvent as Pa, OrganizationDomainVerificationFailedResponse as Pc, AuthenticateWithCodeOptions as Pd, BaseCreateGroupRoleAssignmentOptions as Pf, UnprocessableEntityError as Pi, SerializedListUsersOptions as Pl, AuthorizeDataIntegrationOptions as Pn, OrganizationDomainUpdatedEvent as Po, CreateOptionsWithParentResourceId as Pp, UserConsentOptionChoiceResponse as Pr, VaultDataReadEventResponse as Ps, EnrollFactorOptions as Pt, FactorWithSecretsResponse as Pu, UpdateObjectOptions as Q, FlagDeletedEvent as Qa, UpdateOrganizationMembershipOptions as Qc, ConnectionDomain as Qd, AssignRoleOptionsWithResourceId as Qf, AuthenticationMfaSucceededEvent as Qi, ListAuthFactorsOptions as Ql, PasswordlessSession as Qn, OrganizationUpdatedEvent as Qo, OrganizationRole as Qp, SerializedClaimAttemptResponse as Qr, RemoveGroupOrganizationMembershipOptions as Qs, DataIntegrationsListResponseDataResponse as Qt, SessionCookieData as Qu, WorkOS as R, DsyncUserCreatedEvent as Ra, OrganizationDomainVerificationStrategy as Rc, SerializedAuthenticatePublicClientBase as Rd, CreateGroupRoleAssignmentOptionsWithResourceId as Rf, List as Ri, ListSessionsOptions as Rl, UpdateCustomProviderDefinition as Rn, OrganizationDomainVerifiedEvent as Ro, ListPermissionsOptions as Rp, AgentAccessTokenClaims as Rr, VaultDekDecryptedEventResponse as Rs, RadarListEntryAlreadyPresentResponse as Rt, TotpWithSecretsResponse as Ru, ConflictException as S, ConnectionDeletedEvent as Sa, SerializedValidateApiKeyResponse as Sc, AuthenticateUserWithRadarEmailChallengeCredentials as Sd, GroupRoleAssignmentEntryWithResourceExternalId as Sf, UpdateOrganizationOptions as Si, PasswordResetEvent as Sl, EventDirectoryResponse as Sm, DataIntegrationCustomProviderAuthenticateVia as Sn, InvitationRevokedEvent as So, AuthorizationCheckResult as Sp, CreateApplicationOptions as Sr, UserCreatedEventResponse as Ss, AuditLogActorSchema as St, UserManagementAuthorizationURLOptions as Su, AuthenticationErrorData as T, DsyncActivatedEventResponse as Ta, ListOrganizationApiKeysOptions as Tc, AuthenticateUserWithMagicAuthCredentials as Td, SerializedGroupRoleAssignmentEntry as Tf, ListOrganizationsOptions as Ti, CreateMagicAuthResponse as Tl, HttpClientResponseInterface as Tm, DataIntegrationCredentialType as Tn, MagicAuthCreatedEventResponse as To, DeleteAuthorizationResourceByExternalIdOptions as Tp, CreateOAuthApplication as Tr, UserUpdatedEvent as Ts, AuditLogSchemaResponse as Tt, AuthenticationFactor as Tu, VaultObject as U, DsyncUserUpdatedEventResponse as Ua, SerializedUserApiKeyWithValue as Uc, Profile as Ud, GroupRoleAssignmentResponse as Uf, ApiKeyCreatedEventResponse as Ui, AuthorizationOrganizationMembershipResponse as Ul, CustomProviderDefinition as Un, OrganizationMembershipDeletedResponse as Uo, Permission as Up, SerializedAgentCredentialValidation as Ur, VaultMetadataReadEvent as Us, RadarStandaloneResponseControl as Ut, AuthenticationEventSso as Uu, ObjectVersion as V, DsyncUserDeletedEventResponse as Va, SerializedVerifyEmailOptions as Vc, ProfileAndToken as Vd, ListGroupRoleAssignmentsOptions as Vf, GenerateLinkIntent as Vi, SerializedListOrganizationMembershipsOptions as Vl, GetDataIntegrationOptions as Vn, OrganizationMembershipCreatedResponse as Vo, CreatePermissionOptions as Vp, InvalidAgentCredential as Vr, VaultKekCreatedEvent as Vs, RadarStandaloneResponseWire as Vt, AuthenticationEvent as Vu, VaultObjectResponse as W, EmailVerificationCreatedEvent as Wa, UserApiKeyWithValue as Wc, ProfileResponse as Wd, RemoveRoleAssignmentOptions as Wf, ApiKeyRevokedEvent as Wi, BaseOrganizationMembership as Wl, CustomProviderDefinitionResponse as Wn, OrganizationMembershipUpdated as Wo, PermissionResponse as Wp, SerializedValidateAgentCredentialOptions as Wr, VaultMetadataReadEventResponse as Ws, RadarStandaloneResponseVerdict as Wt, AuthenticationEventSsoResponse as Wu, CreateDataKeyResponseWire as X, FlagCreatedEvent as Xa, UpdateUserOptions as Xc, GetProfileOptions as Xd, AssignRoleOptions as Xf, AuthenticationMagicAuthSucceededEvent as Xi, SerializedListInvitationsOptions as Xl, CreatePasswordlessSessionOptions as Xn, OrganizationRoleUpdatedEvent as Xo, CreateOrganizationRoleOptions as Xp, ClaimAttemptResponse as Xr, SerializedUpdateGroupOptions as Xs, DataIntegrationsListResponseWire as Xt, AuthenticateWithSessionCookieOptions as Xu, CreateDataKeyResponse as Y, EventResponse as Ya, SerializedUpdateUserOptions as Yc, GetProfileAndTokenOptions as Yd, SerializedRemoveRoleOptions as Yf, AuthenticationMagicAuthFailedEventResponse as Yi, ListInvitationsOptions as Yl, SendSessionResponse as Yn, OrganizationRoleDeletedEventResponse as Yo, UpdateOrganizationRoleOptions as Yp, ClaimAttemptOrganization as Yr, KeyContext as Ys, DataIntegrationsListResponse as Yt, AuthenticateWithSessionCookieFailureReason as Yu, UpdateObjectEntity as Z, FlagCreatedEventResponse as Za, SerializedUpdateOrganizationMembershipOptions as Zc, Connection as Zd, AssignRoleOptionsWithResourceExternalId as Zf, AuthenticationMagicAuthSucceededEventResponse as Zi, ListGroupsForOrganizationMembershipOptions as Zl, SerializedCreatePasswordlessSessionOptions as Zn, OrganizationRoleUpdatedEventResponse as Zo, SerializedCreateOrganizationRoleOptions as Zp, LinkClaimAttemptToExternalUserOptions as Zr, UpdateGroupOptions as Zs, DataIntegrationsListResponseData as Zt, AuthenticateWithSessionCookieSuccessResponse as Zu, SignatureVerificationException as _, AuthenticationSSOSucceededEventResponse as _a, FlagTarget as _c, AuthenticateWithOrganizationSelectionOptions as _d, ListEffectivePermissionsByExternalIdOptions as _f, ActionPayload as _i, RefreshSessionFailureReason as _l, DirectoryResponse as _m, DataIntegration as _n, InvitationAcceptedEventResponse as _o, ListResourcesForMembershipOptionsWithParentId as _p, CreateApplicationClientSecretOptions as _r, SessionCreatedEventResponse as _s, AuditLogActor as _t, CreateOrganizationMembershipOptions as _u, PublicWorkOS as a, AuthenticationPasskeyFailedEventResponse as aa, CreateGroupOptions as ac, UserResponse as ad, DirectoryUserResponse as af, AgentRegistrationStatus as ai, SendRadarSmsChallengeResponse as al, EnvironmentRole as am, DataIntegrationAccessTokenResponse as an, GroupCreatedEventResponse as ao, SerializedListRoleAssignmentsOptions as ap, ApplicationCredentialsListItemResponse as ar, PermissionCreatedEventResponse as as, DecryptDataKeyResponse as at, SerializedEnrollUserInMfaFactorOptions as au, NotFoundException as b, ConnectionDeactivatedEvent as ba, EvaluationContext as bc, AuthenticateWithRadarSmsChallengeOptions as bd, GroupRoleAssignmentEntry as bf, UserRegistrationActionPayload as bi, TerminalRefreshSessionFailureReason as bl, DirectoryType as bm, DataIntegrationCustomProvider as bn, InvitationResentEvent as bo, AuthorizationCheckOptionsWithResourceExternalId as bp, UpdateApplicationOptions as br, UnknownEvent as bs, CreateAuditLogEventRequestOptions as bt, SerializedCreateMagicAuthOptions as bu, PortalLinkResponseWire as c, AuthenticationPasswordFailedEvent as ca, SerializedAddGroupOrganizationMembershipOptions as cc, AuthenticateWithRefreshTokenPublicClientOptions as cd, ListOrganizationRolesResponse as cf, SerializedAgentRegistrationClaim as ci, SendInvitationOptions as cl, EnvironmentRoleResponse as cm, DataIntegrationAccessTokenResponseAccessTokenResponse as cn, GroupMemberAddedEvent as co, RoleAssignmentResourceResponse as cp, ConnectApplicationM2MResponse as cr, PermissionUpdatedEvent as cs, WidgetSessionTokenResponseWire as ct, EmailVerificationEventResponse as cu, IntentOptions as d, AuthenticationPasswordSucceededEventResponse as da, RuntimeClientOptions as dc, AuthenticateWithRefreshTokenOptions as dd, OrganizationRoleResponse as df, PKCEPair as di, SerializedRevokeSessionOptions as dl, ListDirectoriesOptions as dm, DataIntegrationCredentialsResponseCredentialResponse as dn, GroupMemberEventResponseData as do, RoleAssignmentSource as dp, ConnectApplicationResponse as dr, RoleCreatedEventResponse as ds, FeatureFlagsRuntimeClient as dt, SerializedCreateUserOptions as du, AuthenticationOAuthFailedEvent as ea, ListGroupOrganizationMembershipsOptions as ec, AuthenticationResponse as ed, ConnectionType as ef, AgentIdentity as ei, Session as el, SetEnvironmentRolePermissionsOptions as em, DataIntegrationsListResponseDataAuthMethods as en, FlagRuleUpdatedEvent as eo, SerializedAssignRoleOptions as ep, ListEventOptions as er, PasswordResetCreatedEvent as es, ReadObjectOptions as et, InvitationEvent as eu, IntentOptionsResponse as f, AuthenticationRadarRiskDetectedEvent as fa, RemoveFlagTargetOptions as fc, SerializedAuthenticateWithRefreshTokenOptions as fd, Role as ff, Actions as fi, serializeRevokeSessionOptions as fl, SerializedListDirectoriesOptions as fm, DataIntegrationAuthorizeUrlResponse as fn, GroupMemberRemovedEvent as fo, RoleAssignmentSourceResponse as fp, ConnectApplicationRedirectUri as fr, RoleDeletedEvent as fs, CookieSession as ft, CreateUserApiKeyOptions as fu, UnauthorizedException as g, AuthenticationSSOSucceededEvent as ga, FlagPollResponse as gc, AuthenticateUserWithOrganizationSelectionCredentials as gd, RoleResponse as gf, ActionContext as gi, SerializedResendInvitationOptions as gl, Directory as gm, ConnectedAccountAuthMethod as gn, InvitationAcceptedEvent as go, ListResourcesForMembershipOptionsWithParentExternalId as gp, DeleteClientSecretOptions as gr, SessionCreatedEvent as gs, SerializedCreateAuditLogSchemaOptions as gt, SerializedCreatePasswordResetOptions as gu, UnprocessableEntityException as h, AuthenticationSSOFailedEventResponse as ha, FlagPollEntry as hc, SerializedAuthenticateWithPasswordOptions as hd, RoleList as hf, UserRegistrationActionResponseData as hi, ResendInvitationOptions as hl, DirectoryGroupResponse as hm, ConnectedAccountResponse as hn, GroupUpdatedEventResponse as ho, ListResourcesForMembershipOptions as hp, ExternalAuthCompleteResponseWire as hr, RoleUpdatedEventResponse as hs, CreateAuditLogSchemaResponse as ht, CreatePasswordResetOptions as hu, PublicUserManagement as i, AuthenticationPasskeyFailedEvent as ia, DeleteGroupOptions as ic, User as id, DirectoryUser as if, AgentRegistrationKind as ii, SendRadarSmsChallengeOptions as il, SerializedCreateEnvironmentRoleOptions as im, DataIntegrationsListResponseDataConnectedAccountAuthMethod as in, GroupCreatedEvent as io, ListRoleAssignmentsOptions as ip, ApplicationCredentialsListItem as ir, PermissionCreatedEvent as is, DecryptDataKeyOptions as it, EnrollAuthFactorOptions as iu, Webhooks as j, DsyncGroupDeletedEventResponse as ja, ApiKey as jc, AuthenticateWithCodeAndVerifierOptions as jd, RemoveGroupRoleAssignmentsOptionsWithResourceId as jf, DomainDataState as ji, LogoutURLOptions as jl, GetUserConnectedAccountOptions as jn, OrganizationDomainCreatedEventResponse as jo, AuthorizationResourceResponse as jp, UserConsentOption as jr, VaultDataDeletedEvent as js, VerifyResponse as jt, FactorResponse as ju, WorkOSErrorData as k, DsyncGroupCreatedEventResponse as ka, CreateOrganizationApiKeyRequestOptions as kc, AuthenticateWithEmailVerificationOptions as kd, RemoveGroupRoleAssignmentsOptionsForOrganization as kf, SerializedCreateOrganizationOptions as ki, MagicAuthEventResponse as kl, ResponseHeaders as km, CreateUserConnectedAccountOptions as kn, OrganizationDeletedResponse as ko, SerializedListAuthorizationResourcesOptions as kp, ListApplicationsOptions as kr, VaultDataCreatedEvent as ks, AuditLogExportOptions as kt, AuthenticationFactorWithSecretsResponse as ku, GenerateLink as l, AuthenticationPasswordFailedEventResponse as la, RuntimeClientStats as lc, SerializedAuthenticateWithRefreshTokenPublicClientOptions as ld, OrganizationRoleEvent as lf, SerializedAgentRegistrationClaimCompletion as li, SerializedSendInvitationOptions as ll, ListDirectoryUsersOptions as lm, DataIntegrationCredentialsResponseError as ln, GroupMemberAddedEventResponse as lo, RoleAssignmentResponse as lp, ConnectApplicationOAuth as lr, PermissionUpdatedEventResponse as ls, CreateTokenOptions as lt, EmailVerificationResponse as lu, SSOIntentOptionsResponse as m, AuthenticationSSOFailedEvent as ma, FlagChange as mc, AuthenticateWithPasswordOptions as md, RoleEventResponse as mf, ResponsePayload as mi, SerializedResetPasswordOptions as ml, DirectoryGroup as mm, ConnectedAccount as mn, GroupUpdatedEvent as mo, ListMembershipsForResourceOptions as mp, ExternalAuthCompleteResponse as mr, RoleUpdatedEvent as ms, CreateAuditLogSchemaRequestOptions as mt, SerializedCreateUserApiKeyOptions as mu, PublicClientOptions as n, AuthenticationOAuthSucceededEvent as na, GroupResponse as nc, CreateUserResponse as nd, SSOPKCEAuthorizationURLResult as nf, AgentRegistrationClaim as ni, SessionStatus as nl, UpdateEnvironmentRoleOptions as nm, DataIntegrationsListResponseDataConnectedAccountResponse as nn, FlagUpdatedEvent as no, ListRoleAssignmentsForResourceOptions as np, NewConnectApplicationSecret as nr, PasswordResetSucceededEvent as ns, CreateObjectEntity as nt, InvitationResponse as nu, createWorkOS as o, AuthenticationPasskeySucceededEvent as oa, SerializedCreateGroupOptions as oc, Impersonator as od, DirectoryUserWithGroups as of, SerializedAgentIdentity as oi, SendRadarSmsChallengeResponseResponse as ol, EnvironmentRoleList as om, DataIntegrationAccessTokenResponseWire as on, GroupDeletedEvent as oo, RoleAssignment as op, ConnectApplication as or, PermissionDeletedEvent as os, CreateDataKeyOptions as ot, EmailVerification as ou, SSOIntentOptions as p, AuthenticationRadarRiskDetectedEventResponse as pa, ListFeatureFlagsOptions as pc, AuthenticateUserWithPasswordCredentials as pd, RoleEvent as pf, AuthenticationActionResponseData as pi, ResetPasswordOptions as pl, PaginationOptions as pm, DataIntegrationAuthorizeUrlResponseWire as pn, GroupMemberRemovedEventResponse as po, ListMembershipsForResourceByExternalIdOptions as pp, ConnectApplicationRedirectUriResponse as pr, RoleDeletedEventResponse as ps, CreateAuditLogSchemaOptions as pt, CreateUserApiKeyRequestOptions as pu, Actor as q, EventBase as qa, SerializedUpdateUserPasswordOptions as qc, ListConnectionsOptions as qd, RemoveRoleOptionsWithResourceExternalId as qf, AuthenticationEmailVerificationSucceededEventResponse as qi, OrganizationMembershipResponse as ql, DataIntegrationCredentialsDtoResponse as qn, OrganizationRoleCreatedEventResponse as qo, SetOrganizationRolePermissionsOptions as qp, ValidateAgentApiKeyOptions as qr, DataKey as qs, RadarStandaloneAssessRequestAction as qt, SerializedAuthenticateWithTotpOptions as qu, PublicSSO as r, AuthenticationOAuthSucceededEventResponse as ra, GetGroupOptions as rc, CreateUserResponseResponse as rd, DefaultCustomAttributes as rf, AgentRegistrationClaimCompletion as ri, SendVerificationEmailOptions as rl, CreateEnvironmentRoleOptions as rm, DataIntegrationsListResponseDataConnectedAccountState as rn, FlagUpdatedEventResponse as ro, SerializedListRoleAssignmentsForResourceOptions as rp, NewConnectApplicationSecretResponse as rr, PasswordResetSucceededEventResponse as rs, CreateObjectOptions as rt, Identity as ru, PortalLinkResponse as s, AuthenticationPasskeySucceededEventResponse as sa, AddGroupOrganizationMembershipOptions as sc, ImpersonatorResponse as sd, DirectoryUserWithGroupsResponse as sf, SerializedAgentRegistration as si, SerializedSendRadarSmsChallengeOptions as sl, EnvironmentRoleListResponse as sm, DataIntegrationAccessTokenResponseAccessToken as sn, GroupDeletedEventResponse as so, RoleAssignmentResource as sp, ConnectApplicationM2M as sr, PermissionDeletedEventResponse as ss, WidgetSessionTokenResponse as st, EmailVerificationEvent as su, ConfidentialClientOptions as t, AuthenticationOAuthFailedEventResponse as ta, Group as tc, AuthenticationResponseResponse as td, SSOAuthorizationURLOptions as tf, AgentRegistration as ti, SessionResponse as tl, SerializedUpdateEnvironmentRoleOptions as tm, DataIntegrationsListResponseDataConnectedAccount as tn, FlagRuleUpdatedEventResponse as to, ListRoleAssignmentsForResourceByExternalIdOptions as tp, SerializedListEventOptions as tr, PasswordResetCreatedEventResponse as ts, ReadObjectResponse as tt, InvitationEventResponse as tu, GenerateLinkResponse as u, AuthenticationPasswordSucceededEvent as ua, RuntimeClientLogger as uc, AuthenticateUserWithRefreshTokenCredentials as ud, OrganizationRoleEventResponse as uf, PKCE as ui, RevokeSessionOptions as ul, ListDirectoryGroupsOptions as um, DataIntegrationCredentialsResponseCredential as un, GroupMemberEventData as uo, RoleAssignmentRole as up, ConnectApplicationOAuthResponse as ur, RoleCreatedEvent as us, WidgetSessionTokenScopes as ut, CreateUserOptions as uu, RateLimitExceededException as v, ConnectionActivatedEvent as va, FeatureFlag as vc, SerializedAuthenticateWithOrganizationSelectionOptions as vd, ListEffectivePermissionsOptions as vf, UserData as vi, RefreshSessionResponse as vl, DirectoryState as vm, DataIntegrationResponse as vn, InvitationCreatedEvent as vo, SerializedListResourcesForMembershipOptions as vp, ListApplicationClientSecretsOptions as vr, SessionRevokedEvent as vs, AuditLogTarget as vt, SerializedCreateOrganizationMembershipOptions as vu, AuthenticationErrorCode as w, DsyncActivatedEvent as wa, ValidateApiKeyResponse as wc, SerializedAuthenticateWithRadarEmailChallengeOptions as wd, ReplaceGroupRoleAssignmentsOptions as wf, OrganizationResponse as wi, PasswordResetResponse as wl, HttpClientInterface as wm, DataIntegrationCredentialResponse as wn, MagicAuthCreatedEvent as wo, DeleteAuthorizationResourceOptions as wp, CreateM2MApplicationResponse as wr, UserDeletedEventResponse as ws, AuditLogSchemaMetadata as wt, AuthenticationRadarRiskDetectedEventResponseData as wu, NoApiKeyProvidedException as x, ConnectionDeactivatedEventResponse as xa, AddFlagTargetOptions as xc, SerializedAuthenticateWithRadarSmsChallengeOptions as xd, GroupRoleAssignmentEntryForOrganization as xf, SerializedUpdateOrganizationOptions as xi, PasswordReset as xl, EventDirectory as xm, DataIntegrationCustomProviderResponse as xn, InvitationResentEventResponse as xo, AuthorizationCheckOptionsWithResourceId as xp, GetApplicationOptions as xr, UserCreatedEvent as xs, SerializedCreateAuditLogEventOptions as xt, PKCEAuthorizationURLResult as xu, OauthException as y, ConnectionActivatedEventResponse as ya, FeatureFlagResponse as yc, AuthenticateUserWithRadarSmsChallengeCredentials as yd, BaseGroupRoleAssignmentEntry as yf, UserDataPayload as yi, RetryableRefreshSessionFailureReason as yl, DirectoryStateResponse as ym, DataIntegrationState as yn, InvitationCreatedEventResponse as yo, AuthorizationCheckOptions as yp, DeleteApplicationOptions as yr, SessionRevokedEventResponse as ys, CreateAuditLogEventOptions as yt, CreateMagicAuthOptions as yu, ObjectSummary as z, DsyncUserCreatedEventResponse as za, CreateOrganizationDomainOptions as zc, SerializedAuthenticateWithOptionsBase as zd, SerializedCreateGroupRoleAssignmentOptions as zf, ListResponse as zi, SerializedListSessionsOptions as zl, UpdateCustomProviderDefinitionResponse as zn, OrganizationDomainVerifiedEventResponse as zo, SerializedUpdatePermissionOptions as zp, AgentCredentialType as zr, VaultDekReadEvent as zs, RadarListEntryAlreadyPresentResponseWire as zt, Sms as zu };
9913
- //# sourceMappingURL=factory-DmBBe791.d.cts.map
9862
+ export { ReadObjectMetadataResponse as $, FlagDeletedEventResponse as $a, SerializedUpdateUserOptions as $c, SerializedListConnectionsOptions as $d, RemoveRoleOptionsWithResourceId as $f, AuthenticationMfaSucceededEventResponse as $i, ListInvitationsOptions as $l, PasswordlessSessionResponse as $n, OrganizationUpdatedResponse as $o, SerializedUpdateOrganizationRoleOptions as $p, SerializedLinkClaimAttemptToExternalUserOptions as $r, ListGroupsOptions as $s, DataIntegrationsListResponseDataOwnership as $t, AuthenticateWithSessionCookieFailureReason as $u, ApiKeyRequiredException as A, DsyncGroupDeletedEvent as Aa, CreatedApiKey as Ac, AuthenticateUserWithMagicAuthCredentials as Ad, SerializedGroupRoleAssignmentEntry as Af, DomainData as Ai, CreateMagicAuthResponseResponse as Al, HttpClientResponseInterface as Am, ConnectedAccountState as An, OrganizationDomainCreatedEvent as Ao, DeleteAuthorizationResourceByExternalIdOptions as Ap, CompleteOAuth2Options as Ar, VaultDataCreatedEventResponse as As, SerializedAuditLogExportOptions as At, AuthenticationFactorResponse as Au, ObjectSummaryResponse as B, DsyncUserDeletedEvent as Ba, OrganizationDomainResponse as Bc, SerializedAuthenticateWithCodeOptions as Bd, CreateGroupRoleAssignmentOptions as Bf, GetOptions as Bi, SerializedListUserApiKeysOptions as Bl, UpdateCustomProviderDefinitionAuthenticateVia as Bn, OrganizationMembershipCreated as Bo, SerializedCreateAuthorizationResourceOptions as Bp, AgentCredentialValidation as Br, VaultDekReadEventResponse as Bs, RadarStandaloneResponse as Bt, TotpResponse as Bu, BadRequestException as C, ConnectionDeletedEventResponse as Ca, LegacyEvaluationContext as Cc, SerializedAuthenticateWithOrganizationSelectionOptions as Cd, ListEffectivePermissionsOptions as Cf, Organization as Ci, RetryableRefreshSessionFailureReason as Cl, DirectoryState as Cm, DataIntegrationCredential as Cn, InvitationRevokedEventResponse as Co, SerializedListResourcesForMembershipOptions as Cp, CreateM2MApplication as Cr, UserDeletedEvent as Cs, AuditLogSchema as Ct, CreateMagicAuthOptions as Cu, isAuthenticationErrorData as D, DsyncDeletedEventResponse as Da, ValidateApiKeyOptions as Dc, AuthenticateUserWithRadarEmailChallengeCredentials as Dd, GroupRoleAssignmentEntryWithResourceExternalId as Df, CreateOrganizationOptions as Di, PasswordResetEventResponse as Dl, EventDirectoryResponse as Dm, DeleteUserConnectedAccountOptions as Dn, OrganizationCreatedResponse as Do, AuthorizationCheckResult as Dp, RedirectUriInput as Dr, VaultByokKeyVerificationCompletedEvent as Ds, AuditLogExport as Dt, AuthenticationRadarRiskDetectedEventData as Du, AuthenticationException as E, DsyncDeletedEvent as Ea, SerializedValidateApiKeyResponse as Ec, SerializedAuthenticateWithRadarSmsChallengeOptions as Ed, GroupRoleAssignmentEntryForOrganization as Ef, ListOrganizationFeatureFlagsOptions as Ei, PasswordResetEvent as El, EventDirectory as Em, ListUserDataProvidersOptions as En, OrganizationCreatedEvent as Eo, AuthorizationCheckOptionsWithResourceId as Ep, CreateOAuthApplicationResponse as Er, UserUpdatedEventResponse as Es, AuditLogTargetSchema as Et, UserManagementAuthorizationURLOptions as Eu, UpdateWebhookEndpointEvents as F, DsyncGroupUserAddedEventResponse as Fa, ApiKey as Fc, SerializedAuthenticateWithEmailVerificationOptions as Fd, RemoveGroupRoleAssignmentsOptionsWithResourceExternalId as Ff, PutOptions as Fi, LogoutURLOptions as Fl, CryptoProvider as Fm, UpdateDataIntegrationApiKeyOptions as Fn, OrganizationDomainUpdatedEventResponse as Fo, AuthorizationResource as Fp, UserObject as Fr, VaultDataUpdatedEvent as Fs, Challenge as Ft, FactorResponse as Fu, ObjectMetadata as G, EmailVerificationCreatedEventResponse as Ga, SerializedVerifyEmailOptions as Gc, WithResolvedClientId as Gd, GetGroupRoleAssignmentOptions as Gf, ApiKeyRevokedEventResponse as Gi, SerializedListOrganizationMembershipsOptions as Gl, CustomProviderDefinitionAuthenticateVia as Gn, OrganizationMembershipUpdatedResponse as Go, UpdatePermissionOptions as Gp, ValidAgentCredential as Gr, VaultNamesListedEvent as Gs, RadarListAction as Gt, AuthenticationEvent as Gu, ObjectVersionResponse as H, DsyncUserUpdatedEvent as Ha, OrganizationDomainVerificationStrategy as Hc, AuthenticateWithSessionOptions as Hd, CreateGroupRoleAssignmentOptionsWithResourceExternalId as Hf, ApiKeyCreatedEvent as Hi, ListSessionsOptions as Hl, CreateDataIntegrationOptions as Hn, OrganizationMembershipDeleted as Ho, UpdateAuthorizationResourceOptions as Hp, SerializedAgentAccessTokenClaims as Hr, VaultKekCreatedEventResponse as Hs, RadarStandaloneResponseBlocklistType as Ht, TotpWithSecretsResponse as Hu, UpdateWebhookEndpointStatus as I, DsyncGroupUserRemovedEvent as Ia, SerializedApiKey as Ic, AuthenticateWithCodeAndVerifierOptions as Id, RemoveGroupRoleAssignmentsOptionsWithResourceId as If, PostOptions as Ii, Locale as Il, DeleteDataIntegrationOptions as In, OrganizationDomainVerificationFailedEvent as Io, AuthorizationResourceResponse as Ip, UserObjectResponse as Ir, VaultDataUpdatedEventResponse as Is, ChallengeResponse as It, FactorType as Iu, ActorResponse as J, EventName as Ja, UserApiKeyWithValue as Jc, Profile as Jd, GroupRoleAssignmentResponse as Jf, AuthenticationMagicAuthFailedEvent as Ji, BaseOrganizationMembership as Jl, DataIntegrationCredentialsType as Jn, OrganizationRoleDeletedEvent as Jo, Permission as Jp, ValidateAgentCredentialOptions as Jr, DataKeyPair as Js, RadarStandaloneAssessRequestAuthMethod as Jt, AuthenticationEventSsoResponse as Ju, ObjectMetadataResponse as K, Event as Ka, VerifyEmailOptions as Kc, ProfileAndToken as Kd, ListGroupRoleAssignmentsOptions as Kf, AuthenticationEmailVerificationSucceededEvent as Ki, AuthorizationOrganizationMembership as Kl, DataIntegrationCredentialsDto as Kn, OrganizationRoleCreatedEvent as Ko, CreatePermissionOptions as Kp, ValidateAgentAccessTokenOptions as Kr, VaultNamesListedEventResponse as Ks, RadarListType as Kt, AuthenticationEventResponse as Ku, CreateWebhookEndpointEvents as L, DsyncGroupUserRemovedEventResponse as La, OrganizationDomainVerificationFailed as Lc, SerializedAuthenticateWithCodeAndVerifierOptions as Ld, SerializedRemoveGroupRoleAssignmentsOptions as Lf, PatchOptions as Li, ListUsersOptions as Ll, UpdateDataIntegrationOptions as Ln, OrganizationDomainVerificationFailedEventResponse as Lo, CreateAuthorizationResourceOptions as Lp, AutoPaginatable as Lr, VaultDekDecryptedEvent as Ls, ChallengeFactorOptions as Lt, FactorWithSecrets as Lu, WebhookEndpoint as M, DsyncGroupUpdatedEvent as Ma, CreateOrganizationApiKeyOptions as Mc, SerializedAuthenticateWithMagicAuthOptions as Md, BaseRemoveGroupRoleAssignmentsOptions as Mf, WorkOSResponseError as Mi, MagicAuthEvent as Ml, RequestOptions as Mm, GetAccessTokenOptions as Mn, OrganizationDomainDeletedEvent as Mo, GetAuthorizationResourceByExternalIdOptions as Mp, UserConsentOptionResponse as Mr, VaultDataDeletedEventResponse as Ms, VerifyResponseResponse as Mt, AuthenticationFactorWithSecrets as Mu, WebhookEndpointResponse as N, DsyncGroupUpdatedEventResponse as Na, CreateOrganizationApiKeyRequestOptions as Nc, AuthenticateUserWithEmailVerificationCredentials as Nd, RemoveGroupRoleAssignmentsOptions as Nf, WorkOSOptions as Ni, MagicAuthEventResponse as Nl, ResponseHeaderValue as Nm, CreateDataIntegrationCredentialOptions as Nn, OrganizationDomainDeletedEventResponse as No, ListAuthorizationResourcesOptions as Np, UserConsentOptionChoice as Nr, VaultDataReadEvent as Ns, VerifyChallengeOptions as Nt, AuthenticationFactorWithSecretsResponse as Nu, GenericServerException as O, DsyncGroupCreatedEvent as Oa, ValidateApiKeyResponse as Oc, AuthenticateWithRadarEmailChallengeOptions as Od, GroupRoleAssignmentEntryWithResourceId as Of, CreateOrganizationRequestOptions as Oi, PasswordResetResponse as Ol, HttpClient as Om, UpdateUserConnectedAccountOptions as On, OrganizationDeletedEvent as Oo, SerializedAuthorizationCheckOptions as Op, RedirectUriInputResponse as Or, VaultByokKeyVerificationCompletedEventResponse as Os, AuditLogExportResponse as Ot, AuthenticationRadarRiskDetectedEventResponseData as Ou, WebhookEndpointStatus as P, DsyncGroupUserAddedEvent as Pa, SerializedCreateOrganizationApiKeyOptions as Pc, AuthenticateWithEmailVerificationOptions as Pd, RemoveGroupRoleAssignmentsOptionsForOrganization as Pf, UnprocessableEntityError as Pi, MagicAuthResponse as Pl, ResponseHeaders as Pm, AuthorizeDataIntegrationOptions as Pn, OrganizationDomainUpdatedEvent as Po, SerializedListAuthorizationResourcesOptions as Pp, UserConsentOptionChoiceResponse as Pr, VaultDataReadEventResponse as Ps, EnrollFactorOptions as Pt, Factor as Pu, UpdateObjectOptions as Q, FlagDeletedEvent as Qa, UpdateUserPasswordOptions as Qc, ListConnectionsOptions as Qd, RemoveRoleOptionsWithResourceExternalId as Qf, AuthenticationMfaSucceededEvent as Qi, OrganizationMembershipStatus as Ql, PasswordlessSession as Qn, OrganizationUpdatedEvent as Qo, SetOrganizationRolePermissionsOptions as Qp, SerializedClaimAttemptResponse as Qr, RemoveGroupOrganizationMembershipOptions as Qs, DataIntegrationsListResponseDataResponse as Qt, AuthenticateWithSessionCookieFailedResponse as Qu, WorkOS as R, DsyncUserCreatedEvent as Ra, OrganizationDomainVerificationFailedResponse as Rc, AuthenticateUserWithCodeCredentials as Rd, RemoveGroupRoleAssignmentOptions as Rf, List as Ri, SerializedListUsersOptions as Rl, UpdateCustomProviderDefinition as Rn, OrganizationDomainVerifiedEvent as Ro, CreateOptionsWithParentExternalId as Rp, AgentAccessTokenClaims as Rr, VaultDekDecryptedEventResponse as Rs, RadarListEntryAlreadyPresentResponse as Rt, FactorWithSecretsResponse as Ru, ConflictException as S, ConnectionDeletedEvent as Sa, EvaluationResource as Sc, AuthenticateWithOrganizationSelectionOptions as Sd, ListEffectivePermissionsByExternalIdOptions as Sf, UpdateOrganizationOptions as Si, RefreshSessionResponse as Sl, DirectoryResponse as Sm, DataIntegrationCustomProviderAuthenticateVia as Sn, InvitationRevokedEvent as So, ListResourcesForMembershipOptionsWithParentId as Sp, CreateApplicationOptions as Sr, UserCreatedEventResponse as Ss, AuditLogActorSchema as St, SerializedCreateOrganizationMembershipOptions as Su, AuthenticationErrorData as T, DsyncActivatedEventResponse as Ta, AddFlagTargetOptions as Tc, AuthenticateWithRadarSmsChallengeOptions as Td, GroupRoleAssignmentEntry as Tf, ListOrganizationsOptions as Ti, PasswordReset as Tl, DirectoryType as Tm, DataIntegrationCredentialType as Tn, MagicAuthCreatedEventResponse as To, AuthorizationCheckOptionsWithResourceExternalId as Tp, CreateOAuthApplication as Tr, UserUpdatedEvent as Ts, AuditLogSchemaResponse as Tt, PKCEAuthorizationURLResult as Tu, VaultObject as U, DsyncUserUpdatedEventResponse as Ua, CreateOrganizationDomainOptions as Uc, SerializedAuthenticatePublicClientBase as Ud, CreateGroupRoleAssignmentOptionsWithResourceId as Uf, ApiKeyCreatedEventResponse as Ui, SerializedListSessionsOptions as Ul, CustomProviderDefinition as Un, OrganizationMembershipDeletedResponse as Uo, ListPermissionsOptions as Up, SerializedAgentCredentialValidation as Ur, VaultMetadataReadEvent as Us, RadarStandaloneResponseControl as Ut, Sms as Uu, ObjectVersion as V, DsyncUserDeletedEventResponse as Va, OrganizationDomainState as Vc, AuthenticateWithOptionsBase as Vd, CreateGroupRoleAssignmentOptionsForOrganization as Vf, GenerateLinkIntent as Vi, ListUserFeatureFlagsOptions as Vl, GetDataIntegrationOptions as Vn, OrganizationMembershipCreatedResponse as Vo, SerializedUpdateAuthorizationResourceOptions as Vp, InvalidAgentCredential as Vr, VaultKekCreatedEvent as Vs, RadarStandaloneResponseWire as Vt, TotpWithSecrets as Vu, VaultObjectResponse as W, EmailVerificationCreatedEvent as Wa, SerializedCreateOrganizationDomainOptions as Wc, SerializedAuthenticateWithOptionsBase as Wd, SerializedCreateGroupRoleAssignmentOptions as Wf, ApiKeyRevokedEvent as Wi, ListOrganizationMembershipsOptions as Wl, CustomProviderDefinitionResponse as Wn, OrganizationMembershipUpdated as Wo, SerializedUpdatePermissionOptions as Wp, SerializedValidateAgentCredentialOptions as Wr, VaultMetadataReadEventResponse as Ws, RadarStandaloneResponseVerdict as Wt, SmsResponse as Wu, CreateDataKeyResponseWire as X, FlagCreatedEvent as Xa, UserApiKey as Xc, OauthTokens as Xd, BaseRemoveRoleOptions as Xf, AuthenticationMagicAuthSucceededEvent as Xi, OrganizationMembership as Xl, CreatePasswordlessSessionOptions as Xn, OrganizationRoleUpdatedEvent as Xo, RemoveOrganizationRolePermissionOptions as Xp, ClaimAttemptResponse as Xr, SerializedUpdateGroupOptions as Xs, DataIntegrationsListResponseWire as Xt, AuthenticateWithTotpOptions as Xu, CreateDataKeyResponse as Y, EventResponse as Ya, SerializedUserApiKey as Yc, ProfileResponse as Yd, RemoveRoleAssignmentOptions as Yf, AuthenticationMagicAuthFailedEventResponse as Yi, BaseOrganizationMembershipResponse as Yl, SendSessionResponse as Yn, OrganizationRoleDeletedEventResponse as Yo, PermissionResponse as Yp, ClaimAttemptOrganization as Yr, KeyContext as Ys, DataIntegrationsListResponse as Yt, AuthenticateUserWithTotpCredentials as Yu, UpdateObjectEntity as Z, FlagCreatedEventResponse as Za, SerializedUpdateUserPasswordOptions as Zc, OauthTokensResponse as Zd, RemoveRoleOptions as Zf, AuthenticationMagicAuthSucceededEventResponse as Zi, OrganizationMembershipResponse as Zl, SerializedCreatePasswordlessSessionOptions as Zn, OrganizationRoleUpdatedEventResponse as Zo, AddOrganizationRolePermissionOptions as Zp, LinkClaimAttemptToExternalUserOptions as Zr, UpdateGroupOptions as Zs, DataIntegrationsListResponseData as Zt, SerializedAuthenticateWithTotpOptions as Zu, SignatureVerificationException as _, AuthenticationSSOSucceededEventResponse as _a, FlagPollResponse as _c, SerializedAuthenticateWithRefreshTokenOptions as _d, Role as _f, ActionPayload as _i, ResetPasswordOptions as _l, SerializedListDirectoriesOptions as _m, DataIntegration as _n, InvitationAcceptedEventResponse as _o, RoleAssignmentSourceResponse as _p, CreateApplicationClientSecretOptions as _r, SessionCreatedEventResponse as _s, AuditLogActor as _t, CreateUserApiKeyRequestOptions as _u, PublicWorkOS as a, AuthenticationPasskeyFailedEventResponse as aa, CreateGroupOptions as ac, AuthenticationResponse as ad, ConnectionType as af, AgentRegistrationStatus as ai, SessionResponse as al, SetEnvironmentRolePermissionsOptions as am, DataIntegrationAccessTokenResponse as an, GroupCreatedEventResponse as ao, SerializedAssignRoleOptions as ap, ApplicationCredentialsListItemResponse as ar, PermissionCreatedEventResponse as as, DecryptDataKeyResponse as at, InvitationEventResponse as au, NotFoundException as b, ConnectionDeactivatedEvent as ba, FeatureFlagResponse as bc, SerializedAuthenticateWithPasswordOptions as bd, RoleList as bf, UserRegistrationActionPayload as bi, SerializedResendInvitationOptions as bl, DirectoryGroupResponse as bm, DataIntegrationCustomProvider as bn, InvitationResentEvent as bo, ListResourcesForMembershipOptions as bp, UpdateApplicationOptions as br, UnknownEvent as bs, CreateAuditLogEventRequestOptions as bt, SerializedCreatePasswordResetOptions as bu, PortalLinkResponseWire as c, AuthenticationPasswordFailedEvent as ca, SerializedAddGroupOrganizationMembershipOptions as cc, CreateUserResponseResponse as cd, DefaultCustomAttributes as cf, SerializedAgentRegistrationClaim as ci, SendRadarSmsChallengeOptions as cl, CreateEnvironmentRoleOptions as cm, DataIntegrationAccessTokenResponseAccessTokenResponse as cn, GroupMemberAddedEvent as co, SerializedListRoleAssignmentsForResourceOptions as cp, ConnectApplicationM2MResponse as cr, PermissionUpdatedEvent as cs, WidgetSessionTokenResponseWire as ct, EnrollAuthFactorOptions as cu, IntentOptions as d, AuthenticationPasswordSucceededEventResponse as da, RuntimeClientOptions as dc, Impersonator as dd, DirectoryUserWithGroups as df, PKCEPair as di, SerializedSendRadarSmsChallengeOptions as dl, EnvironmentRoleList as dm, DataIntegrationCredentialsResponseCredentialResponse as dn, GroupMemberEventResponseData as do, RoleAssignment as dp, ConnectApplicationResponse as dr, RoleCreatedEventResponse as ds, FeatureFlagsRuntimeClient as dt, EmailVerificationEvent as du, AuthenticationOAuthFailedEvent as ea, ListGroupOrganizationMembershipsOptions as ec, AuthenticateWithSessionCookieOptions as ed, GetProfileAndTokenOptions as ef, AgentIdentity as ei, UpdateUserOptions as el, UpdateOrganizationRoleOptions as em, DataIntegrationsListResponseDataAuthMethods as en, FlagRuleUpdatedEvent as eo, SerializedRemoveRoleOptions as ep, ListEventOptions as er, PasswordResetCreatedEvent as es, ReadObjectOptions as et, SerializedListInvitationsOptions as eu, IntentOptionsResponse as f, AuthenticationRadarRiskDetectedEvent as fa, RemoveFlagTargetOptions as fc, ImpersonatorResponse as fd, DirectoryUserWithGroupsResponse as ff, Actions as fi, SendInvitationOptions as fl, EnvironmentRoleListResponse as fm, DataIntegrationAuthorizeUrlResponse as fn, GroupMemberRemovedEvent as fo, RoleAssignmentResource as fp, ConnectApplicationRedirectUri as fr, RoleDeletedEvent as fs, CookieSession as ft, EmailVerificationEventResponse as fu, UnauthorizedException as g, AuthenticationSSOSucceededEvent as ga, FlagPollEntry as gc, AuthenticateWithRefreshTokenOptions as gd, OrganizationRoleResponse as gf, ActionContext as gi, serializeRevokeSessionOptions as gl, ListDirectoriesOptions as gm, ConnectedAccountAuthMethod as gn, InvitationAcceptedEvent as go, RoleAssignmentSource as gp, DeleteClientSecretOptions as gr, SessionCreatedEvent as gs, SerializedCreateAuditLogSchemaOptions as gt, CreateUserApiKeyOptions as gu, UnprocessableEntityException as h, AuthenticationSSOFailedEventResponse as ha, FlagCustomTarget as hc, AuthenticateUserWithRefreshTokenCredentials as hd, OrganizationRoleEventResponse as hf, UserRegistrationActionResponseData as hi, SerializedRevokeSessionOptions as hl, ListDirectoryGroupsOptions as hm, ConnectedAccountResponse as hn, GroupUpdatedEventResponse as ho, RoleAssignmentRole as hp, ExternalAuthCompleteResponseWire as hr, RoleUpdatedEventResponse as hs, CreateAuditLogSchemaResponse as ht, SerializedCreateUserOptions as hu, PublicUserManagement as i, AuthenticationPasskeyFailedEvent as ia, DeleteGroupOptions as ic, AuthenticationMethod as id, ConnectionResponse as if, AgentRegistrationKind as ii, Session as il, AddEnvironmentRolePermissionOptions as im, DataIntegrationsListResponseDataConnectedAccountAuthMethod as in, GroupCreatedEvent as io, BaseAssignRoleOptions as ip, ApplicationCredentialsListItem as ir, PermissionCreatedEvent as is, DecryptDataKeyOptions as it, InvitationEvent as iu, Webhooks as j, DsyncGroupDeletedEventResponse as ja, SerializedCreatedApiKey as jc, AuthenticateWithMagicAuthOptions as jd, SerializedReplaceGroupRoleAssignmentsOptions as jf, DomainDataState as ji, MagicAuth as jl, RequestHeaders as jm, GetUserConnectedAccountOptions as jn, OrganizationDomainCreatedEventResponse as jo, UpdateAuthorizationResourceByExternalIdOptions as jp, UserConsentOption as jr, VaultDataDeletedEvent as js, VerifyResponse as jt, AuthenticationFactorType as ju, WorkOSErrorData as k, DsyncGroupCreatedEventResponse as ka, ListOrganizationApiKeysOptions as kc, SerializedAuthenticateWithRadarEmailChallengeOptions as kd, ReplaceGroupRoleAssignmentsOptions as kf, SerializedCreateOrganizationOptions as ki, CreateMagicAuthResponse as kl, HttpClientInterface as km, CreateUserConnectedAccountOptions as kn, OrganizationDeletedResponse as ko, DeleteAuthorizationResourceOptions as kp, ListApplicationsOptions as kr, VaultDataCreatedEvent as ks, AuditLogExportOptions as kt, AuthenticationFactor as ku, GenerateLink as l, AuthenticationPasswordFailedEventResponse as la, RuntimeClientStats as lc, User as ld, DirectoryUser as lf, SerializedAgentRegistrationClaimCompletion as li, SendRadarSmsChallengeResponse as ll, SerializedCreateEnvironmentRoleOptions as lm, DataIntegrationCredentialsResponseError as ln, GroupMemberAddedEventResponse as lo, ListRoleAssignmentsOptions as lp, ConnectApplicationOAuth as lr, PermissionUpdatedEventResponse as ls, CreateTokenOptions as lt, SerializedEnrollUserInMfaFactorOptions as lu, SSOIntentOptionsResponse as m, AuthenticationSSOFailedEvent as ma, FlagChange as mc, SerializedAuthenticateWithRefreshTokenPublicClientOptions as md, OrganizationRoleEvent as mf, ResponsePayload as mi, RevokeSessionOptions as ml, ListDirectoryUsersOptions as mm, ConnectedAccount as mn, GroupUpdatedEvent as mo, RoleAssignmentResponse as mp, ExternalAuthCompleteResponse as mr, RoleUpdatedEvent as ms, CreateAuditLogSchemaRequestOptions as mt, CreateUserOptions as mu, PublicClientOptions as n, AuthenticationOAuthSucceededEvent as na, GroupResponse as nc, SessionCookieData as nd, Connection as nf, AgentRegistrationClaim as ni, UpdateOrganizationMembershipOptions as nl, SerializedCreateOrganizationRoleOptions as nm, DataIntegrationsListResponseDataConnectedAccountResponse as nn, FlagUpdatedEvent as no, AssignRoleOptionsWithResourceExternalId as np, NewConnectApplicationSecret as nr, PasswordResetSucceededEvent as ns, CreateObjectEntity as nt, ListAuthFactorsOptions as nu, createWorkOS as o, AuthenticationPasskeySucceededEvent as oa, SerializedCreateGroupOptions as oc, AuthenticationResponseResponse as od, SSOAuthorizationURLOptions as of, SerializedAgentIdentity as oi, SessionStatus as ol, SerializedUpdateEnvironmentRoleOptions as om, DataIntegrationAccessTokenResponseWire as on, GroupDeletedEvent as oo, ListRoleAssignmentsForResourceByExternalIdOptions as op, ConnectApplication as or, PermissionDeletedEvent as os, CreateDataKeyOptions as ot, InvitationResponse as ou, SSOIntentOptions as p, AuthenticationRadarRiskDetectedEventResponse as pa, ListFeatureFlagsOptions as pc, AuthenticateWithRefreshTokenPublicClientOptions as pd, ListOrganizationRolesResponse as pf, AuthenticationActionResponseData as pi, SerializedSendInvitationOptions as pl, EnvironmentRoleResponse as pm, DataIntegrationAuthorizeUrlResponseWire as pn, GroupMemberRemovedEventResponse as po, RoleAssignmentResourceResponse as pp, ConnectApplicationRedirectUriResponse as pr, RoleDeletedEventResponse as ps, CreateAuditLogSchemaOptions as pt, EmailVerificationResponse as pu, Actor as q, EventBase as qa, SerializedUserApiKeyWithValue as qc, ProfileAndTokenResponse as qd, GroupRoleAssignment as qf, AuthenticationEmailVerificationSucceededEventResponse as qi, AuthorizationOrganizationMembershipResponse as ql, DataIntegrationCredentialsDtoResponse as qn, OrganizationRoleCreatedEventResponse as qo, SerializedCreatePermissionOptions as qp, ValidateAgentApiKeyOptions as qr, DataKey as qs, RadarStandaloneAssessRequestAction as qt, AuthenticationEventSso as qu, PublicSSO as r, AuthenticationOAuthSucceededEventResponse as ra, GetGroupOptions as rc, UserManagementAccessToken as rd, ConnectionDomain as rf, AgentRegistrationClaimCompletion as ri, AuthMethod as rl, OrganizationRole as rm, DataIntegrationsListResponseDataConnectedAccountState as rn, FlagUpdatedEventResponse as ro, AssignRoleOptionsWithResourceId as rp, NewConnectApplicationSecretResponse as rr, PasswordResetSucceededEventResponse as rs, CreateObjectOptions as rt, Invitation as ru, PortalLinkResponse as s, AuthenticationPasskeySucceededEventResponse as sa, AddGroupOrganizationMembershipOptions as sc, CreateUserResponse as sd, SSOPKCEAuthorizationURLResult as sf, SerializedAgentRegistration as si, SendVerificationEmailOptions as sl, UpdateEnvironmentRoleOptions as sm, DataIntegrationAccessTokenResponseAccessToken as sn, GroupDeletedEventResponse as so, ListRoleAssignmentsForResourceOptions as sp, ConnectApplicationM2M as sr, PermissionDeletedEventResponse as ss, WidgetSessionTokenResponse as st, Identity as su, ConfidentialClientOptions as t, AuthenticationOAuthFailedEventResponse as ta, Group as tc, AuthenticateWithSessionCookieSuccessResponse as td, GetProfileOptions as tf, AgentRegistration as ti, SerializedUpdateOrganizationMembershipOptions as tl, CreateOrganizationRoleOptions as tm, DataIntegrationsListResponseDataConnectedAccount as tn, FlagRuleUpdatedEventResponse as to, AssignRoleOptions as tp, SerializedListEventOptions as tr, PasswordResetCreatedEventResponse as ts, ReadObjectResponse as tt, ListGroupsForOrganizationMembershipOptions as tu, GenerateLinkResponse as u, AuthenticationPasswordSucceededEvent as ua, RuntimeClientLogger as uc, UserResponse as ud, DirectoryUserResponse as uf, PKCE as ui, SendRadarSmsChallengeResponseResponse as ul, EnvironmentRole as um, DataIntegrationCredentialsResponseCredential as un, GroupMemberEventData as uo, SerializedListRoleAssignmentsOptions as up, ConnectApplicationOAuthResponse as ur, RoleCreatedEvent as us, WidgetSessionTokenScopes as ut, EmailVerification as uu, RateLimitExceededException as v, ConnectionActivatedEvent as va, FlagTarget as vc, AuthenticateUserWithPasswordCredentials as vd, RoleEvent as vf, UserData as vi, SerializedResetPasswordOptions as vl, PaginationOptions as vm, DataIntegrationResponse as vn, InvitationCreatedEvent as vo, ListMembershipsForResourceByExternalIdOptions as vp, ListApplicationClientSecretsOptions as vr, SessionRevokedEvent as vs, AuditLogTarget as vt, SerializedCreateUserApiKeyOptions as vu, AuthenticationErrorCode as w, DsyncActivatedEvent as wa, TypedEvaluationContext as wc, AuthenticateUserWithRadarSmsChallengeCredentials as wd, BaseGroupRoleAssignmentEntry as wf, OrganizationResponse as wi, TerminalRefreshSessionFailureReason as wl, DirectoryStateResponse as wm, DataIntegrationCredentialResponse as wn, MagicAuthCreatedEvent as wo, AuthorizationCheckOptions as wp, CreateM2MApplicationResponse as wr, UserDeletedEventResponse as ws, AuditLogSchemaMetadata as wt, SerializedCreateMagicAuthOptions as wu, NoApiKeyProvidedException as x, ConnectionDeactivatedEventResponse as xa, EvaluationContext as xc, AuthenticateUserWithOrganizationSelectionCredentials as xd, RoleResponse as xf, SerializedUpdateOrganizationOptions as xi, RefreshSessionFailureReason as xl, Directory as xm, DataIntegrationCustomProviderResponse as xn, InvitationResentEventResponse as xo, ListResourcesForMembershipOptionsWithParentExternalId as xp, GetApplicationOptions as xr, UserCreatedEvent as xs, SerializedCreateAuditLogEventOptions as xt, CreateOrganizationMembershipOptions as xu, OauthException as y, ConnectionActivatedEventResponse as ya, FeatureFlag as yc, AuthenticateWithPasswordOptions as yd, RoleEventResponse as yf, UserDataPayload as yi, ResendInvitationOptions as yl, DirectoryGroup as ym, DataIntegrationState as yn, InvitationCreatedEventResponse as yo, ListMembershipsForResourceOptions as yp, DeleteApplicationOptions as yr, SessionRevokedEventResponse as ys, CreateAuditLogEventOptions as yt, CreatePasswordResetOptions as yu, ObjectSummary as z, DsyncUserCreatedEventResponse as za, OrganizationDomain as zc, AuthenticateWithCodeOptions as zd, BaseCreateGroupRoleAssignmentOptions as zf, ListResponse as zi, ListUserApiKeysOptions as zl, UpdateCustomProviderDefinitionResponse as zn, OrganizationDomainVerifiedEventResponse as zo, CreateOptionsWithParentResourceId as zp, AgentCredentialType as zr, VaultDekReadEvent as zs, RadarListEntryAlreadyPresentResponseWire as zt, Totp as zu };
9863
+ //# sourceMappingURL=factory-VM3aexOH.d.mts.map